last executing test programs: 1.705584945s ago: executing program 1 (id=104): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) (rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb}, 0x11000) write(r2, &(0x7f0000000140)='i', 0x1) (async) read(r1, &(0x7f0000032440)=""/102379, 0x18feb) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, &(0x7f0000000200)="460f01c3670f01df430f517c375cc4a179d6c848b8f1ffffffff7f00000f23d00f21f835200000060f23f866b802000f00d8f30fc7352b2e0000470fc77d0566b839000f00d8c4610d60d7", 0x4b}], 0x1, 0x50, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.583235552s ago: executing program 1 (id=110): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) (async) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000440)='>', 0x1}, {0x0}], 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x1a0, 0xd0, 0x3d0, 0xd0, 0x300, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x2, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0={0xfc, 0x0, '\x00', 0xfc}, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) (async) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}, {&(0x7f0000002400)="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", 0x4e4}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000000), 0x4) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000badb00000000000a00000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f616400240002800800044000001d1d088d0340000000b9080001400000000a08000240000000000900010073797a30000000000900020073797a32"], 0xc0}}, 0x4080) 1.495386445s ago: executing program 1 (id=112): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x168, r0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x168}, 0x1, 0x0, 0x0, 0x10}, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40010080}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r3, 0x330, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:ld_so_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x448d0) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xac, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x4008800}, 0x240448d1) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000600), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x1, 0x8000, 0x101, 0x200, r4, 0xc087, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x4, @void, @value, @void, @value}, 0x50) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r4) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1dc, r5, 0x0, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0xc0}, 0x840) fsopen(&(0x7f00000009c0)='pstore\x00', 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r4) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r6, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c890) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000b80)={@loopback, @multicast2}) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, r6, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x5d}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40015) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000d40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000d80)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r7, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c044}, 0x4000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000ec0), r2) sendmsg$NET_DM_CMD_START(r10, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r11, 0x300, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000800) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r12, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0x8c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4001180}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000001140)=@bpq0, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r13, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x2c, 0x0, 0x20a, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000040}, 0x40040) 1.495082796s ago: executing program 1 (id=113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x1, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) read$FUSE(r2, &(0x7f0000000540)={0x2020}, 0x2020) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0, 0x6}, 0x1, 0x0, 0x9}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0x10000, 0x8000, 0x8, 0x40003, 0x7}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) r7 = dup3(r0, r6, 0x80000) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r7, &(0x7f0000000100)={'#! ', './file0', [{0x20, '('}, {0x20, '%'}, {0x20, ']/&)^]-'}], 0xa, "6fd1dfd1845a760e02a540f480dace8d237a03b1fd6bf277286ea3cbedf72e41c1a047cd87d2cf5836da3fc07bd110c44d4f591bdc796b539e130806cf598a3a3d04d66b9545da2a733ddc71d37c223284404dc830e7be"}, 0x6e) 801.47159ms ago: executing program 0 (id=128): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) read(r0, &(0x7f00000000c0)=""/108, 0x6c) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x11, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x2fe, 0x0, 0x0, 0x2, 0x0}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x9, 0x1, 0x0, "7deb91d437e2dd6fc1432eea703c0bf501ac5a36ff3c7829c2779640450064eb", 0x38303553}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x541b, 0x1000000000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) syz_emit_ethernet(0xd6, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000000000000000086dd600000000000000000000000000001ff0200000000000000000000000000018900907800000000fe800000000000000000000000000000fe800000000000000000000000000000020f1d6ace8f88a9100083faa1f1a6db56fa1ede4bc5398bd6606aaa671ffdd8e79d60cde5302fa555d0f9e0b2fa0d62fffea7fab292bbcd05812814821553a38e86fe6101bf2c4e313e4f930b10cd9a70cebc77f319c1857ad9d50341d17b5e7857a871249feab9b7b485d93f657e39417fb957d1b7fa15"], 0x0) 743.913789ms ago: executing program 0 (id=129): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009404, &(0x7f0000000040)) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x9, "c6579e97c026f2030000007d659ec1300fac5408bf584f63ebf89b20d5748c07", 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x122) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000080)=0xfdfdffff) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x194, 0x0, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x880}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x304}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x9, 0x2]}, @CTA_ZONE={0x6}, @CTA_FILTER={0x4}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x5]}, @CTA_TUPLE_ORIG={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x74}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x55}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xe}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xe1}]}}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc8}]}, @CTA_NAT_SRC={0x94, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x1ff}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}]}, 0x194}}, 0x4080) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000100000000000ff030000000000000054c6178bf280b500000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r7, r6}, 0xc) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r8, 0x89fb, &(0x7f00000000c0)={'bond0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 645.110854ms ago: executing program 0 (id=130): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x8, 0x7ff, 0xa, 0x1}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xd30e, 0x7, 0x87, 0x4}) 644.08688ms ago: executing program 0 (id=131): socket$inet6(0xa, 0x2, 0x3a) (async) r0 = socket$inet6(0xa, 0x2, 0x3a) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="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", 0xfb, 0xffffffffffffffff) (async) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="9778daca0f4f91d5febf457e8e015fadf863afdedfb4e24186fac100ce2707706fdab84f185b98fe4379d414432a73bd8a4095ed1955f16b1e4582962d3b50a5095648f10b2f4d4fedeac8e62db3aac74d7bef101e7c508cb6879d36d72e2e761dd43d21b6f2da3f0b27d7166d36cf19f0e8399a4b627c2b06d30f3cf9b7d46197a5fcf15d2d3f0f40caba0ce55d8cc1b048561265e9a38ed8b3a6766faa15ce504e50cee3d58dc328f9025c30fb38dc61f6548ff558c71bd10ce1e6413d354e10a9ebd2c3e9791880fa3053e71566fcf0f7820a5490397f88c0b1cb37d8a01b9f9f4e0776f3b4ea19b5e2f5095dd1fb5e5e51d3d52e0b03f68d86", 0xfb, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0xc0844123, &(0x7f0000000080)) add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="069aaf6309547705f7b41e9537169e63fdf9b16b5a77c8663237e9d57fca5bfed14d28657d14cef32eb3e1927f53e2bd7e083c72027d0441943b37b9fa7e8ad9b1addde8eb0ae09979340afc55eaa780fb70ad187deb5ccc9362abc8d2d4a08c8634dea9ebd15fbbc60aebb79dd8a8900c220136146cf7470e058eace497d51dc78000b2681a235bbdbeba1d2ee9a12a76f59e67955716fe324712ba5011aeac4baa85172b8e40d2ff163afff6ff0c809df440dcb8e7e32f7f69cdaad54f64ea6f97d9378e45089fbcc4b4e899b5ce497032", 0xd2, 0xffffffffffffffff) (async) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="069aaf6309547705f7b41e9537169e63fdf9b16b5a77c8663237e9d57fca5bfed14d28657d14cef32eb3e1927f53e2bd7e083c72027d0441943b37b9fa7e8ad9b1addde8eb0ae09979340afc55eaa780fb70ad187deb5ccc9362abc8d2d4a08c8634dea9ebd15fbbc60aebb79dd8a8900c220136146cf7470e058eace497d51dc78000b2681a235bbdbeba1d2ee9a12a76f59e67955716fe324712ba5011aeac4baa85172b8e40d2ff163afff6ff0c809df440dcb8e7e32f7f69cdaad54f64ea6f97d9378e45089fbcc4b4e899b5ce497032", 0xd2, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "7513d8d142f71a1a27cc314cc34550df469f6940256d42176fdb5e07236d4d68c5e76a78cd4ba68f8713c383ba230298e700b0030594d8fe6fe3abd5e70c12fc"}, 0x48, 0xffffffffffffffff) keyctl$read(0xf, r4, 0x0, 0x0) (async) keyctl$read(0xf, r4, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000380)={r1, r3, r4}, &(0x7f00000003c0)=""/20, 0x14, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000200)=0x2010003, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 641.538409ms ago: executing program 0 (id=133): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x8, @remote}, 0x2, 0x3}}, 0x2e) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000240)={0xb}) (async) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000240)={0xb}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000180)={0x2f}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f00000001c0)="b854f328aa3cf2e45447fe1dc3729934f6e473f5d647467eeaf758e2abe0386e5b593ca8f4252a8ac2072e1aa274611aea8deb290c4347146426b8e5eb269d0b78cc180cbdbc7723905b040fb31bacabd191e235999987997c32f937f2c7c49ff784a2375f7fd5583d68") (async) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f00000001c0)="b854f328aa3cf2e45447fe1dc3729934f6e473f5d647467eeaf758e2abe0386e5b593ca8f4252a8ac2072e1aa274611aea8deb290c4347146426b8e5eb269d0b78cc180cbdbc7723905b040fb31bacabd191e235999987997c32f937f2c7c49ff784a2375f7fd5583d68") sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x0) 585.624973ms ago: executing program 1 (id=134): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe, 0x0, 0x1002, 0x80000000}}) (async) ioctl$sock_ifreq(0xffffffffffffffff, 0x8913, &(0x7f0000000080)={'veth0_to_team\x00', @ifru_mtu=0x4}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xfe7b}}, './file0\x00'}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000100)={0x1}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@metacopy_off}, {@verity_require}]}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000010100c0"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4048aec9, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x2}) (async) r9 = syz_open_dev$MSR(&(0x7f0000000000), 0x3, 0x0) ioctl$FICLONE(r9, 0x40049409, 0xffffffffffffffff) (async) r10 = syz_open_dev$sndpcmc(&(0x7f0000001800), 0x1, 0x20080) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r10, 0xc0884123, &(0x7f0000001840)={0x1, "3dba1ae023b40a2f8fc6fe5cef4c0ac9d94581e617e2bf8279933b9ea1cc1ef986462fdf92b30f220382b2dbefa52971af1bf19862302bb2fbf48a9c3cdb2e38", {0x77c4, 0x5}}) 582.559216ms ago: executing program 0 (id=135): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @private=0xa010100, @random="57330377ba25", @dev={0xac, 0x14, 0x14, 0x42}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @private=0xa010100, @random="57330377ba25", @dev={0xac, 0x14, 0x14, 0x42}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d00)=@newqdisc={0x60, 0x24, 0xd0f, 0x70ad2d, 0x25dfdbfd, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x1}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d00)=@newqdisc={0x60, 0x24, 0xd0f, 0x70ad2d, 0x25dfdbfd, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x1}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)='0', 0x1}], 0x2) (async) writev(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)='0', 0x1}], 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x4) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x3ffdcf, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x3ffdcf, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x17, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@jmp={0x5, 0x1, 0x2, 0x7, 0xd, 0x10, 0xffffffffffffffff}, @ldst={0x3, 0x0, 0x2, 0xa, 0x6, 0x100, 0x4}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe}, @jmp={0x5, 0x1, 0xb, 0x0, 0xb, 0x50, 0x1}, @alu={0x7, 0x1, 0xd, 0xd, 0x2, 0xfffffffffffffff8, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0xffffff55, 0x1000, &(0x7f0000000d80)=""/4096, 0x40f00, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x2, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000540)=[{0x0, 0x3, 0x5, 0x4}, {0x5, 0x5, 0x0, 0xc}, {0x1, 0x2, 0xa, 0x6}, {0x0, 0x1, 0x9}, {0x4, 0x5, 0x3, 0x7}], 0x10, 0x2d4ab0a0, @void, @value}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x1}, {0xc, 0xd}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xa495, 0x7ff, 0x0, 0x0, 0x2}, 0x80, 0x1, 0x3, 0x4, 0x8, 0xd, 0x17, 0x1b, 0x4, 0x81, {0x9, 0x23, 0x0, 0x2, 0xb, 0x4001}}}}]}, 0x78}}, 0x4000) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x1}, {0xc, 0xd}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xa495, 0x7ff, 0x0, 0x0, 0x2}, 0x80, 0x1, 0x3, 0x4, 0x8, 0xd, 0x17, 0x1b, 0x4, 0x81, {0x9, 0x23, 0x0, 0x2, 0xb, 0x4001}}}}]}, 0x78}}, 0x4000) sendto$inet(r1, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082db57000fddbdf252800000008002c000a00000008002c000010000065dda8d78873c105d54498176e0d164501ce7e5e3847121b8337b9d0e18f41bad001cfff04ad26dff6a2c45b84a716e2658af721c4d009337ec0cd06491b29de100fd08d15c8345d3a3b6082b2ecc07ae0d9a8b29705871fe3aa24d8689a02dd627c8264fdd5824ca2f490284b06af926c51dc767c4c12ec56d232b920526a9dad36d0bc7577ca187738e4f822745c83851818baf0001372f89cc48100"/199], 0x24}, 0x1, 0x0, 0x0, 0x40890}, 0x10) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082db57000fddbdf252800000008002c000a00000008002c000010000065dda8d78873c105d54498176e0d164501ce7e5e3847121b8337b9d0e18f41bad001cfff04ad26dff6a2c45b84a716e2658af721c4d009337ec0cd06491b29de100fd08d15c8345d3a3b6082b2ecc07ae0d9a8b29705871fe3aa24d8689a02dd627c8264fdd5824ca2f490284b06af926c51dc767c4c12ec56d232b920526a9dad36d0bc7577ca187738e4f822745c83851818baf0001372f89cc48100"/199], 0x24}, 0x1, 0x0, 0x0, 0x40890}, 0x10) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r10, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet6(r10, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) userfaultfd(0x0) sendto$inet6(r0, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) (async) r12 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r12, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20004810) setsockopt$sock_attach_bpf(r12, 0x6, 0x4, &(0x7f0000000040)=r11, 0x4) ioctl$GIO_UNISCRNMAP(r11, 0x4b69, &(0x7f00000001c0)=""/125) 426.302551ms ago: executing program 1 (id=138): r0 = open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) ftruncate(r0, 0x88801) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = dup(r2) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x2}}}}}, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r0, 0xcc5e3000) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x400000) 425.756224ms ago: executing program 3 (id=140): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)=""/157, 0x9d}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000880)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0xe}}}]}]}]}}]}, 0x54}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCSACTIVE(r5, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async) readv(r5, &(0x7f0000000040), 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x9, 0x0}}, {{&(0x7f0000000000)=@ieee802154, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/206}, {&(0x7f00000002c0)=""/72}, {&(0x7f0000000340)=""/26}, {&(0x7f00000003c0)=""/148}, {&(0x7f0000000580)=""/208}, {&(0x7f0000000480)=""/51}, {&(0x7f00000004c0)=""/64}, {&(0x7f0000000a40)=""/4096}, {&(0x7f0000001a40)=""/4096}, {&(0x7f0000000680)=""/108}], 0x0, &(0x7f00000007c0)=""/226}, 0x4}, {{&(0x7f00000008c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000002a40)=""/131}, {&(0x7f0000002b00)=""/4096}, {&(0x7f0000003b00)=""/240}, {&(0x7f0000000940)=""/13}, {&(0x7f0000003c00)=""/201}, {&(0x7f0000003d00)=""/168}], 0x0, &(0x7f0000003e40)=""/16}, 0x6}, {{&(0x7f0000003e80)=@xdp={0x2c, 0x0, 0x0}, 0x0, &(0x7f0000005300)=[{&(0x7f0000003f00)=""/236}, {&(0x7f0000004000)=""/55}, {&(0x7f0000004040)=""/211}, {&(0x7f0000004140)}, {&(0x7f0000004180)=""/40}, {&(0x7f00000041c0)=""/4096}, {&(0x7f00000051c0)=""/28}, {&(0x7f0000005200)=""/152}, {&(0x7f00000052c0)}], 0x0, &(0x7f00000053c0)=""/253}, 0x7}, {{0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f00000054c0)=""/218}], 0x0, &(0x7f0000005600)=""/4096}, 0x9}, {{&(0x7f0000006600)=@rc, 0x0, &(0x7f0000007a40)=[{&(0x7f0000006680)=""/74}, {&(0x7f0000006700)=""/245}, {&(0x7f0000006800)=""/59}, {&(0x7f0000006840)=""/20}, {&(0x7f0000006880)=""/4096}, {&(0x7f0000007880)=""/56}, {&(0x7f00000078c0)=""/97}, {&(0x7f0000007940)=""/195}], 0x0, &(0x7f0000007ac0)=""/236}, 0x4}, {{&(0x7f0000007bc0)=@l2, 0x0, &(0x7f00000080c0)=[{&(0x7f0000007c40)}, {&(0x7f0000007c80)=""/52}, {&(0x7f0000007cc0)=""/244}, {&(0x7f0000007dc0)=""/66}, {&(0x7f0000007e40)=""/40}, {&(0x7f0000007e80)=""/246}, {&(0x7f0000007f80)=""/247}, {&(0x7f0000008080)=""/61}]}}, {{&(0x7f0000008140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x0, &(0x7f0000008500)=[{&(0x7f00000081c0)=""/36}, {&(0x7f0000008200)=""/87}, {&(0x7f0000008280)=""/227}, {&(0x7f0000008380)=""/111}, {&(0x7f0000008400)=""/90}, {&(0x7f0000008480)=""/114}], 0x0, &(0x7f0000008580)=""/116}, 0x211c}], 0x4000359, 0x0, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc0500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) (async) sendmsg$nl_route_sched_retired(r0, &(0x7f0000004140)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000008840)=@delqdisc={0x164, 0x25, 0x20, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff2, 0xc}, {0xb, 0x10}}, [@q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfe1e}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8001}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xb}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$binfmt_script(r6, 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) (async) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r9, &(0x7f0000000240)=""/95, 0x5f) fcntl$setstatus(r9, 0x4, 0xc00) 366.342958ms ago: executing program 2 (id=141): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000040)={0x1bf, r1, 0x6, {0x4, 0x7}, 0x7}, 0x1) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) dup3(r4, r1, 0x80000) 365.951841ms ago: executing program 3 (id=142): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x80, 0x4000, 0x57, 0x0, {{0x10, 0x4, 0x3, 0x1, 0x40, 0x5, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @local, {[@noop, @cipso={0x86, 0x29, 0x3, [{0x6, 0x4, "c234"}, {0x2, 0xc, "a0faa0e8164c4f686be5"}, {0x6, 0x5, "5bbdc7"}, {0x0, 0xe, "cc3c3f0a4525ddb30e748643"}]}]}}}}}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)="7de48e4ca494d136be16fb717e21", 0xe}, {&(0x7f00000002c0)="fb39ff", 0x3}], 0x2}}], 0x1, 0x20004001) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x7800, 0x40, 0xd, 0x86ed, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x64, 0x0, 0x9, 0x4, 0x0, @private=0xa010101, @private=0xa010100, {[@timestamp_prespec={0x44, 0x24, 0x8c, 0x3, 0x8, [{@loopback, 0x200}, {@empty, 0x200}, {@broadcast, 0x9}, {@loopback, 0xd}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x8, 0x10, 0x4, 0x21c, {{0xd, 0x4, 0x2, 0x18, 0x34, 0x65, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010101, {[@timestamp_prespec={0x44, 0x14, 0x9c, 0x3, 0x0, [{@empty, 0x7052b1ec}, {@multicast1}]}, @timestamp_addr={0x44, 0xc, 0x5d, 0x1, 0xd, [{@multicast1, 0x5}]}]}}}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x5}]}}]}, 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000640)={'vcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) fadvise64(r3, 0x1ff, 0x7, 0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="8000f2000a000200fa"], 0x28}}, 0x0) 176.26024ms ago: executing program 3 (id=143): syz_emit_ethernet(0x1187, &(0x7f00000001c0)=ANY=[@ANYBLOB="e7842a3e009000000000000086dd6012000811513a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a04000000000000c204000000d4c204000000030502a63c01030000000200f300314752d851403ca0d1af2eeb41afcb612fe7e01ad7a6f62cf0e70cbd9f53cf23faf47519e89324f2fb6b1250ecd2020c2a7e94f411ea2e5f93a77f283b0c812772ffbad4f0893ffa00c4da15dcf4e70fde3d0d6acd9a432c6c22ff8463c28816b0730f0e83c2325fa43831d430b20054207d9ace9ef9c66d369caeaf5aebd727744e9f90b78cdc5be9995e4c5234829e9c731d23c095210be899be0c38fbcad19a8846e9414261ad932b69a77837c1dea50620e378bcc4e549f16dbf274dd58fcbbce9623156219eb15357c8ee7abf396342d17b9ab60a234ea96213650b46df1a31cacb03c19547573499c9decb6a3e3d7f9595783550e04f72d1c5b5725aaaf15fb660ad81b2c713a46310de43596a28eea9fa9fe0b3a06e8108b0ffb0e3a0f8d5398392967d80ce55720fd53dbc073e2d85d14b4abde6436a9c01ae03eb8cc5cbeb7af412126c87fb9c6cbc0649746387c44598c7ea213caefd425639947334534c508a19f6345f78b3e4e1e4fc5af8023687b52df4089a73bb68168ec6780a71e2e580d4fc90f38642624afb0314944df89596dd9cd39adb78536736132f4d82337d59f8a7a27dc2b8d8fd0d55f20586bc04bfacf531cc2675cdd91a63ad5361520a2703c1c2cf41e86ab2b666ba1a756c7c15f5e6990b238fce287b37814313b75f9b93cc4574acecf7fdbea6be0d4232ad760e49e5e2635a3762d0c9cd7ed65080eedf6cdbe4440bf67d4c664e19274ba36ec1c83e25aad1f6f588e9cf3c21b1a5a3233b52900c705f4904b3f03bf7c503aa8b91b6dc91f6bd15fa1747c10b756d45463a03b3beb5470bc6a45c479371208c6a52f3b66afaa7b5b0067abbb5601585d567bcd16b9a3ef2219ac35a146d24f68045e61c6c165237b108f64f6d1b1e1bda1fef74acc3a73a189af0f69f66f3cfaf348f3873ae7e6ecb2276144f21e91ed5d79c9875f055474e46f16c5bed01189c2414c57c461c9a86240665159440c6f20b996afefaa680d96e842aed30f003ee70f75e7ef042568adeda08ba052309f251d033696fe103ab1ad4f4603677f4bc9eb4de32b824f3c88f4046542c73f0d8bbdd104b0ad26e23af6fd39ebac83db3c4b5cd5103324453dc320b038a7cfa905f79927d72bf71b5c24c120e9d4c5cae478afbf220d66a8fe3ce2106c2c9c440d3e8ea765bd4887f3854c657a0eda295278a7685836bba657196bcfdf31fa13f316597197bd8ea0e1a2f6965affff63875d63eda1b99eed5c29398949800bb7401133b8e7beb90f4b84623d53e6769d8c0635a11ae71aa25a460bce1195a05e21cbc8bd4e06b84b74085fed894bab009f7144b95b8478edbc27a44b9ab771a0ed1848c7860280197e01c089b9c4a6ebafba50d25661134465179f50dd3b1c5ff7e647ea1e03a3e599f732800509c01a5c6ecababbcd61816db675627de906f9b5f1b76970ab63248ba95c60358ec1fe50a88038619e3ecd2d002d126a8e2ccff7593f6b5bcb6e9aa0ef6a77780a072e12a6b9c214c9b3ba8360560c96d38e028f3bb36e8ea1d94114ef11053b439d70e25b54b45adbda5524db72b17d88fcd0f700bce817c01b720b48abe07a162e06a7e560f68107160d4de57511b0a5323328b05e2af39659da2c6fe8a5e98438c4c2adea5324b91e5a73b7a51994283aea4dc74221059b9384f82ebf32e02a5c458d5d226857c951c8b32fb3a5fee198f17c6c980e6d4aa69299f1d8fb2dda1f860f5edf1a3cb97da098d308a24bab8248eaa7052d0cca129cf3748185b01a361f98fb7d72d204e0660d0b4c24aea6e72d9425e619c0103255f0848c24428f72d94b02597bdb3a53d574e1faa5b431fde2a7f7486fe2c99bd5b56fbf00216acd03df7d412e7f81241c88516b1ad9b8992c4b15dd50c034f46557c2b66974062f57edcd2edef0cdde6235195463dc6a41293eb360156171ce054c12155e5df154291c43e5dd2b4c0559352bf8e48849bf240e310d3822881262321f066ee6767026abc87f80285a4f58170e7044d275d835f3415540007d3111efc02d1f187e519d52e52faa57b131fa9e63ee9e74da4e4f6bd6ceba15e66a437bb9b61ea5ee55205ee04a39c7fc2802bbd38b127b39816f974317c6d8e5b8b924fb105c88b2490e5f20481004277c7ce2ff32a32b606857db51a8bb899a40646e6cf8d56049a786aed8ef41ae48fdfe7d94d016dbb4305fe183c9ef7e6b43d1e7457bb47a5b2d9d9d08c9aed0f61df0fd54c08c3b3dbab4ea17576f222366ce03bad1701499c2f58b05d0991e21c6621bcd3524527b0fe549a5369f8a53f26a0b818989e29e68a1c1befbc1a3a04eeb0579247fec7ac14b825bbf319889d6a638afa370fe8f77c1dab80321f1d632a5d2881bad426478ff526f26fe22019b54473803ab886ff6ba915805a01beac255ed52719aa8154f489e0fdd476a63234d334a4468b4a2e0e624dcdd4fc13bf3b828e0cb66b3e8217dd0bd0b3dd011d6446294796496b3fe540d71a63c7fe7403c70da14a474c39c86c5a1414dab97ac74ab923212dd77b5f5a4fdba0084eb5303842212e7b6f94b23e336e74c8c44db97e046900df0fb3a4faec0ae0698fc0beca4efe7b76ffca408449225c678f39301757eea7096714d53b0679a2964128973c95fdf8016fbc7571b712fa0a95087b6f697f177b3c5444ae7932111c9ee39675c06373dcbe08110991a2eee9b3f76045ac47945daa97e90b8c37a2ec2cc966ef7a3ba7d2997bbb2e7a808c366f64b8a6888f18fa361bc66cc713e17cbf063d07d9b9be015d999257df16d7711d9e00e77f2b0df9bfc3e5b8c73ecf8837fcc68693c3edca263d6ef2732150fd7d39e25c73f4fa1ed240edd36403d33982f79fd52e2e95bea6ef9f1a552b1a6a9b0f92ffc9df93d22c650ff7bf54b990edd823ad88a30a6fd1bc711dc73b7dff6ef2ecebd3a30b8c60c299a043d60af48b457876b7b690b37825ac182b68776ec41b530e7c53c7069b90af3288cb229fde5607600a82205e10ed918a5591313c3b476f7e0b2253fc9be8266300ab2cde9a75ef54bc6bedd3bf42535deb1729f7d1db010acc7caa198f98e1e1952c8ffe4a93063591b40b483956e68b81022ac42298aaa19d913cf16fc8d36c8c83126f52d686757adbd540ab347060c0310c87bbe5a7f61f7258e7e8e7b5ae479c3011760c4f587ac72ad4a5d37b0b74bb585726a15f5081cad2d6c2a35a1973a5416e60a7960bdd2dc82166623613c5d3e6f452373b135568e71bbd1298b49ab02dd817c16e6826e389142621eff0f493cb60c222ac5852cf2e559de01fbeea9b3790beaa757bf78a0f4a0f789fa471f6b30b12ef8ca2be4efffcf35d6584328f3075e3c8e360afc69b134064fd0a469da5db1aa6a1c1832caff8d96f47e166f6997ff16b80b29f399ec3914d2659d17473f12b53f4f4bdbc4afc86633d3f67cb81b9b78fa64f0947f3aae3cf1c2b04f2931e387baa5e2439be735d0f92ec0423986bedbad5409e9593acade53a8b7f868ea877cd45eff591561194f0e2ea93d14dab6a525a6759934f16eff9f047513685e308d652fb9f0e25d56c8fdf084317a784218c91d98b289d6b517dd1d59a00dbb0d2194e1e9bf628ff3d2ccefe27a74fa5fa8f3f15cd146a44b5506978ca72214a7718a8ee9334dc48d80cdab72ec31c025d88a83f1b3f9955920bd393e03b99b5caa106e870f2a8e28afc4b04a8442f3502b1c4bad1530ca6eb9277bbaf4dfacb8576c7ac3f4399c879505bbc5e002d93b43e5329648e9c81b44a8c0e1ce4f60872de575356aac6ff852aee6a30db68fe37a4caabaa4e70c222337c69a8df3a45d50b9d22a3d04e8e3b9302a5f6269272753fdbb5e04497ce60ef99e87e365fd4b35d38e162f2922f94d4483a36ac64281d6722025ae2641654e84ecd02bcc81f876c5d27e304acdeaed1db8673e035d0770f0ce3afab575f2b531a600b6ddcca1dcc2d2f6bc71a0c3425ea5d58ac6f2e87588fc8f97036d433ad8d8f2f332f0b8ba1855e8725fc522c6bffb114fb839857c67022b5bd08811c54174e72861b42a4bcd82a0aed155bf8ed25463921a9f95c60ade31639130e45c10f11d88e38826d3ec51a23b86fcab88347126bdd26118df3deee90c857bfe968404f502a61f0b56196a6f993e33962d40977aa5475b4b2e75a4fde66f4d67725cf5f61e4e77beec34688faaa4b632087b7aff8d8541d0eb86b4de93fe48ff2389d49429c02ac1816005fe18f3c703ea7d000de18b6513f3310d71b00b6237dbb2d1aaeaa9d907b115be0bfa5deeb7a9128b699837680ae2ebc666ed6ae8faecbfcdf7907ff6d4b216d301d6e1eb46ebd3f1e84a4d8c985f20cccc5ff74c8f16eb06ae4e754e7fccc48845a5082cbc4169720607ddf995de609dff1d73cec4c1db250e79ade8c6ea9c11031da927510fc5c5a651a0b3dce36966452a75967d9cac2c04615d17c13ab7f48d93e38513b14bf36b927343312ac53922f8efd241b22fb12848d279d2a36e172226c112fcbc31f6f136c2cbe795ea1b1e592e976453567e9b243093f56b9cfca4187487fd2c22977a39119ea2db37e18dc065036f6974367fcf2a4d993d565ab9082075ddf4df5fb4a702fb7ea6c4065ed7e11f1bbcbb6ede5d421283096876682e2ff3b4e6b265df617a9d43446bd062f3068001ef6fad095d3c94b8b4c505f37bc65e922b170f3060b7974ac27d64d75b53d7ea308a6be55e4788b27bdd46fbf572e099c3aa8e716480f724e1fcfa366bf67d6b313e499dd299c6705ba0dece39eb6ebbd27a326311c6a559b7a8d71bb893abec82b5c68c841e5280afc65022c6db48d8cc4281b6cb64358d4a27379b910126cfec9a3ee6ae833bfd4980bdab82be0298f1bd4100d08257f649a5996302bee2d84e31192f62faed17b5288ab9ffbeee1636b7ca00b5c3d65a0049ce50355958e40e1d40105dc138728f2cea2d04cd109ba3ea9af44230431cd72c4f573e742f0c6209d4526ab61e418811239f9d1b873c5c54261415a89d40f8ae565cd77b876601dca8741de9297987bcfb7b07a938888d6a5f2a8eaf1d703f7993a9e1b4b5722bffab38f08b7928bad87b8ddb2257b26740884d70b36b8be3895ef70757bacc4c9555791b3d88b84aaff8f4845aae168dbc97d1d54aa4b95c1217bc3921465b6ba071d2e3089b67709abaae0d93ea87c0849e10ca10b6a1b16c92b01a035a6fb3c2e0c02c19e3f251c27cdca3cdbd78296ea036b498191a6dd77fdb2f4172d47426bbcaaec95942826aa8b71c3a0ff29e13e77ad026c7d0711b7db53f862c8ac252bc3b5dcd85011204d76243ca6d1a2ff188d29390f26347b84fd30ce71ed2cb6502e3c6cc02e68aee4e76185170eb4e68fb1b25269db43b932f8cce247fda92daff5a54a9ae08ddf5427ec15f68a398a956d185bc8bf4b1793abbe00b18a20cc3ea2e54dc485ad69a229bda6792aa517bb4424bfbfa2fecc127536eea3e146dc62ed59f833664f459e17d26fb1c917ea274b6f3b880dd142b02fbfb146c9d862ac5f50e6a03697e6215938297b501626ae0d28a7a536de4e57205f1d58e2b022c69ec5852c3328f086888330a9d1e1a42444551133ed5ef5c08e8c31138fea6630c82d08b1874bb4ca5b9b68e0d554eb699dd81542310fb5986614ab81692a864906b8922a767a6d14e3480885ee8dd440987af835acf38499068737a8a59b45ee82755cf9e3be3f563d2911f8010801c65e3762eb25c9c14514010800000000000000000000000000000089010000000000000001000502000000010005020010000008020401d630f0fffc0200000000000000000000000000010000040167000000880604030618000100000000000000000000000000000000fc000000000000000000000000000001ff0100000000000000000000000000010402907800000003600008100000110000000000000000000000ffff00000000fc0200000000000000000000000000000000000000000000052f000100000000fb36eeca6fad50b375a22a4c4d16ca1efdeaf8f6fcf38f19e48aa9af92b3c490786c713b765f8dbcc109af748d1ff8153b515d4295ea589b782e2700e2ab0a884f9b0c259e98f2fe624099d0ea5967368b03f59825b896f3f36f35ebec0e13478b5d962d93e4aaa676d2f8c3fca9845b9f"], 0x0) 175.95159ms ago: executing program 3 (id=144): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x200002, 0x94) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0x80044dfd, &(0x7f0000001480)) syz_init_net_socket$rose(0xb, 0x5, 0x0) 105.929342ms ago: executing program 2 (id=145): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)="711f04800000000000000c55f538", 0xe}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xb4}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x22}]}, 0x2c}}, 0x80) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000001340)=0x6) recvmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x40000000000019e, 0x142, 0x0) 105.644062ms ago: executing program 2 (id=146): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002c0001000000050000000000040100800c00098008"], 0x114}], 0x1}, 0x0) 44.755478ms ago: executing program 3 (id=147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) 44.441196ms ago: executing program 2 (id=148): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x8}]}, 0x24}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x301581, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x22}]}, 0x24}}, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}}, 0x0) ioctl$sock_ifreq(r5, 0x8947, &(0x7f0000000100)={'bond0\x00', @ifru_mtu=0x6}) 43.286629ms ago: executing program 3 (id=149): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x21eae}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) dup(r0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r10, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x18, 0x110, 0xc, {[@timestamp_addr={0x44, 0x4}]}}}], 0x38}, 0x0) connect$inet6(r9, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x3c, r12, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xb3e}]}, 0x3c}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}) 42.979625ms ago: executing program 2 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x800) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=M']) chdir(&(0x7f0000000140)='./file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 0s ago: executing program 2 (id=151): r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581", @ANYRES8], 0x0) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x592}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xc) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r3) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x6}]}}}]}, 0x3c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_disconnect(r0) (async) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000080)=ANY=[], 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0xc000, 0x0) kernel console output (not intermixed with test programs): [ 30.585844][ T39] audit: type=1400 audit(1732612941.481:80): avc: denied { write } for pid=5859 comm="sh" path="pipe:[6308]" dev="pipefs" ino=6308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 30.594031][ T39] audit: type=1400 audit(1732612941.481:81): avc: denied { rlimitinh } for pid=5859 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.600630][ T39] audit: type=1400 audit(1732612941.481:82): avc: denied { siginh } for pid=5859 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.190164][ T39] audit: type=1400 audit(1732612942.101:83): avc: denied { read } for pid=5348 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 31.196042][ T39] audit: type=1400 audit(1732612942.101:84): avc: denied { append } for pid=5348 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.202045][ T39] audit: type=1400 audit(1732612942.101:85): avc: denied { open } for pid=5348 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.208694][ T39] audit: type=1400 audit(1732612942.101:86): avc: denied { getattr } for pid=5348 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:20014' (ED25519) to the list of known hosts. [ 31.511198][ T39] audit: type=1400 audit(1732612942.421:87): avc: denied { name_bind } for pid=5863 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 33.029973][ T5865] cgroup: Unknown subsys name 'net' [ 33.229884][ T5865] cgroup: Unknown subsys name 'cpuset' [ 33.232804][ T5865] cgroup: Unknown subsys name 'rlimit' [ 33.479620][ T5868] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.141967][ T5865] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.734219][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 35.734233][ T39] audit: type=1400 audit(1732612946.641:105): avc: denied { execmem } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 35.927257][ T39] audit: type=1400 audit(1732612946.831:106): avc: denied { create } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.932409][ T39] audit: type=1400 audit(1732612946.831:107): avc: denied { read write } for pid=5935 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 35.939328][ T39] audit: type=1400 audit(1732612946.831:108): avc: denied { open } for pid=5935 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 35.946586][ T39] audit: type=1400 audit(1732612946.841:109): avc: denied { ioctl } for pid=5936 comm="syz-executor" path="socket:[6345]" dev="sockfs" ino=6345 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.955585][ T5943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.967748][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.969617][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.972091][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 35.972727][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.975198][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.977544][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.979379][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 35.981638][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.983698][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 35.985213][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.987206][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.988812][ T5945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 35.991774][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.993119][ T5945] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 35.995118][ T5946] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 35.996824][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 35.998836][ T5952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 35.999680][ T5954] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.999764][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.001167][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.002565][ T5954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.009724][ T39] audit: type=1400 audit(1732612946.921:110): avc: denied { read } for pid=5936 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.010178][ T5954] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.015196][ T39] audit: type=1400 audit(1732612946.921:111): avc: denied { read } for pid=5948 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.015219][ T39] audit: type=1400 audit(1732612946.921:112): avc: denied { open } for pid=5936 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.028896][ T5943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.034141][ T39] audit: type=1400 audit(1732612946.921:113): avc: denied { mounton } for pid=5948 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 36.147244][ T39] audit: type=1400 audit(1732612947.051:114): avc: denied { module_request } for pid=5936 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 36.187327][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 36.216284][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 36.239851][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 36.295104][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 36.340125][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.342036][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.344048][ T5936] bridge_slave_0: entered allmulticast mode [ 36.346096][ T5936] bridge_slave_0: entered promiscuous mode [ 36.361955][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.363836][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.365805][ T5935] bridge_slave_0: entered allmulticast mode [ 36.368512][ T5935] bridge_slave_0: entered promiscuous mode [ 36.381475][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.383380][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.385273][ T5936] bridge_slave_1: entered allmulticast mode [ 36.387526][ T5936] bridge_slave_1: entered promiscuous mode [ 36.400203][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.402118][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.403999][ T5937] bridge_slave_0: entered allmulticast mode [ 36.405953][ T5937] bridge_slave_0: entered promiscuous mode [ 36.408668][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.410369][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.412046][ T5935] bridge_slave_1: entered allmulticast mode [ 36.413850][ T5935] bridge_slave_1: entered promiscuous mode [ 36.444496][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.446151][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.448297][ T5937] bridge_slave_1: entered allmulticast mode [ 36.451219][ T5937] bridge_slave_1: entered promiscuous mode [ 36.518748][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.529670][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.531365][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.533086][ T5948] bridge_slave_0: entered allmulticast mode [ 36.535143][ T5948] bridge_slave_0: entered promiscuous mode [ 36.539234][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.544221][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.550197][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.554653][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.569913][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.572404][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.574894][ T5948] bridge_slave_1: entered allmulticast mode [ 36.577894][ T5948] bridge_slave_1: entered promiscuous mode [ 36.581064][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.612817][ T5935] team0: Port device team_slave_0 added [ 36.615997][ T5935] team0: Port device team_slave_1 added [ 36.647853][ T5937] team0: Port device team_slave_0 added [ 36.664130][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.668641][ T5936] team0: Port device team_slave_0 added [ 36.671017][ T5937] team0: Port device team_slave_1 added [ 36.672989][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.674962][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.681851][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.687213][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.691166][ T5936] team0: Port device team_slave_1 added [ 36.703020][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.705016][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.712264][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.755542][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.757852][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.764404][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.768052][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.769868][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.776376][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.780502][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.782375][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.789179][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.793782][ T5948] team0: Port device team_slave_0 added [ 36.795742][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.797746][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.804503][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.821034][ T5948] team0: Port device team_slave_1 added [ 36.840823][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.842709][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.849551][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.888521][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.890340][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.896843][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.901731][ T5935] hsr_slave_0: entered promiscuous mode [ 36.903619][ T5935] hsr_slave_1: entered promiscuous mode [ 36.918901][ T5936] hsr_slave_0: entered promiscuous mode [ 36.920808][ T5936] hsr_slave_1: entered promiscuous mode [ 36.922585][ T5936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.924773][ T5936] Cannot create hsr debugfs directory [ 36.942278][ T5937] hsr_slave_0: entered promiscuous mode [ 36.944267][ T5937] hsr_slave_1: entered promiscuous mode [ 36.946118][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.949018][ T5937] Cannot create hsr debugfs directory [ 36.986358][ T5948] hsr_slave_0: entered promiscuous mode [ 36.988641][ T5948] hsr_slave_1: entered promiscuous mode [ 36.990432][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.992482][ T5948] Cannot create hsr debugfs directory [ 37.171733][ T5935] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.176878][ T5935] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.180420][ T5935] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.185940][ T5935] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.218294][ T5948] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.221354][ T5948] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.227545][ T5948] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.230796][ T5948] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.249581][ T5936] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.252739][ T5936] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.258960][ T5936] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.271710][ T5936] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.291012][ T5937] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.294342][ T5937] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.298427][ T5937] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.306690][ T5937] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.331768][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.338621][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.358068][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.363669][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.372519][ T219] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.374531][ T219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.377941][ T219] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.379873][ T219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.393558][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.397698][ T185] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.399563][ T185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.409589][ T185] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.411495][ T185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.430802][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.436364][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.447898][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.450216][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.454166][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.459413][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.461757][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.470059][ T5935] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.473188][ T5935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.478744][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.480646][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.493686][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.495776][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.551622][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.572680][ T5948] veth0_vlan: entered promiscuous mode [ 37.576412][ T5948] veth1_vlan: entered promiscuous mode [ 37.582640][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.596514][ T5948] veth0_macvtap: entered promiscuous mode [ 37.600713][ T5948] veth1_macvtap: entered promiscuous mode [ 37.612445][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.632145][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.639553][ T5935] veth0_vlan: entered promiscuous mode [ 37.643401][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.648326][ T5935] veth1_vlan: entered promiscuous mode [ 37.651590][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.654808][ T5948] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.657409][ T5948] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.659666][ T5948] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.661901][ T5948] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.668053][ T5936] veth0_vlan: entered promiscuous mode [ 37.676532][ T5936] veth1_vlan: entered promiscuous mode [ 37.720174][ T5936] veth0_macvtap: entered promiscuous mode [ 37.722578][ T5937] veth0_vlan: entered promiscuous mode [ 37.728526][ T5935] veth0_macvtap: entered promiscuous mode [ 37.731967][ T5935] veth1_macvtap: entered promiscuous mode [ 37.732195][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.734418][ T5936] veth1_macvtap: entered promiscuous mode [ 37.735751][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.747319][ T5937] veth1_vlan: entered promiscuous mode [ 37.759052][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.762558][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.766473][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.770019][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.772781][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.775302][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.779144][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.782196][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.789504][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.789585][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.793236][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.795218][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.802482][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.805562][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.808781][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.811942][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.815311][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.819745][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.823576][ T5935] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.825886][ T5935] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.829053][ T5935] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.831322][ T5935] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.839534][ T5936] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.842687][ T5936] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.845188][ T5936] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.847797][ T5936] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.870604][ T5937] veth0_macvtap: entered promiscuous mode [ 37.878726][ T5948] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.881774][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.884595][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.891125][ T5937] veth1_macvtap: entered promiscuous mode [ 37.910038][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.912609][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.918914][ T6012] netlink: 'syz.2.3': attribute type 9 has an invalid length. [ 37.921139][ T6012] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3'. [ 37.923506][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.925871][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.926245][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.929873][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.933674][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.936502][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.939218][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.942169][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.945585][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.953921][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.957943][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.961182][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.964400][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.966979][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.970186][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.973359][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.982422][ T5937] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.984719][ T5937] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.987320][ T5937] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.989619][ T5937] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.009714][ T6014] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 38.031741][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.034341][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.052638][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.057055][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.071797][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.073878][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.078557][ T5943] Bluetooth: hci3: command tx timeout [ 38.088240][ T5943] Bluetooth: hci2: command tx timeout [ 38.090004][ T5943] Bluetooth: hci1: command tx timeout [ 38.091913][ T5943] Bluetooth: hci0: command tx timeout [ 38.150286][ T6027] libceph: resolve '4' (ret=-3): failed [ 38.160774][ T6036] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 38.305890][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9'. [ 38.351445][ T30] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 38.415667][ T6064] netlink: 'syz.3.12': attribute type 9 has an invalid length. [ 38.418576][ T6064] netlink: 244 bytes leftover after parsing attributes in process `syz.3.12'. [ 38.480278][ T30] usb 7-1: device descriptor read/64, error -71 [ 38.630840][ T6093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19'. [ 38.727871][ T30] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 38.787305][ T5993] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 38.814610][ T6101] netlink: 'syz.3.21': attribute type 9 has an invalid length. [ 38.817178][ T6101] netlink: 244 bytes leftover after parsing attributes in process `syz.3.21'. [ 38.853861][ T6105] syz.0.22 uses obsolete (PF_INET,SOCK_PACKET) [ 38.867448][ T30] usb 7-1: device descriptor read/64, error -71 [ 38.937113][ T5993] usb 6-1: device descriptor read/64, error -71 [ 38.977411][ T30] usb usb7-port1: attempt power cycle [ 39.021137][ T6130] trusted_key: syz.0.27 sent an empty control message without MSG_MORE. [ 39.055363][ T6134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.28'. [ 39.096967][ T6139] binder: BC_ATTEMPT_ACQUIRE not supported [ 39.100996][ T6139] binder: 6137:6139 ioctl c0306201 200005c0 returned -22 [ 39.103053][ T6138] binder: 6137:6138 ioctl 8b34 20000000 returned -22 [ 39.177091][ T5993] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 39.265181][ T6151] netlink: 87 bytes leftover after parsing attributes in process `syz.3.33'. [ 39.288302][ T6153] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 39.292359][ T6153] netlink: 'syz.0.32': attribute type 10 has an invalid length. [ 39.294711][ T6153] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 39.317151][ T5993] usb 6-1: device descriptor read/64, error -71 [ 39.327314][ T30] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 39.348447][ T30] usb 7-1: device descriptor read/8, error -71 [ 39.379581][ T6157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=6157 comm=syz.3.34 [ 39.385253][ T6158] veth0_to_hsr: entered promiscuous mode [ 39.386862][ T6158] veth0_to_hsr: entered allmulticast mode [ 39.427429][ T5993] usb usb6-port1: attempt power cycle [ 39.433433][ T6169] Illegal XDP return value 662949535 on prog (id 26) dev syz_tun, expect packet loss! [ 39.463786][ T6171] netlink: 'syz.3.36': attribute type 10 has an invalid length. [ 39.468180][ T6171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.495434][ T6173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.37'. [ 39.597326][ T30] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 39.617737][ T30] usb 7-1: device descriptor read/8, error -71 [ 39.737490][ T30] usb usb7-port1: unable to enumerate USB device [ 39.777172][ T5993] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 39.798365][ T5993] usb 6-1: device descriptor read/8, error -71 [ 40.037163][ T5993] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 40.057505][ T5993] usb 6-1: device descriptor read/8, error -71 [ 40.157556][ T5941] Bluetooth: hci0: command tx timeout [ 40.157943][ T5943] Bluetooth: hci1: command tx timeout [ 40.157965][ T5954] Bluetooth: hci2: command tx timeout [ 40.158000][ T5954] Bluetooth: hci3: command tx timeout [ 40.167337][ T5993] usb usb6-port1: unable to enumerate USB device [ 40.222913][ T6187] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 40.917178][ T5992] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 41.087188][ T5992] usb 5-1: Invalid ep0 maxpacket: 64 [ 41.227221][ T5992] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 41.377182][ T5992] usb 5-1: Invalid ep0 maxpacket: 64 [ 41.379172][ T5992] usb usb5-port1: attempt power cycle [ 41.507122][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 41.667720][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 41.670914][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 41.673853][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8817, setting to 1024 [ 41.676871][ T9] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 41.679691][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.683179][ T9] usb 7-1: config 0 descriptor?? [ 41.717165][ T5992] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 41.738359][ T5992] usb 5-1: Invalid ep0 maxpacket: 64 [ 41.867073][ T5992] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 41.887978][ T5992] usb 5-1: Invalid ep0 maxpacket: 64 [ 41.889513][ T5992] usb usb5-port1: unable to enumerate USB device [ 41.893468][ T9] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 41.927167][ T5991] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 42.087120][ T5991] usb 6-1: Using ep0 maxpacket: 8 [ 42.089245][ T39] kauditd_printk_skb: 119 callbacks suppressed [ 42.089257][ T39] audit: type=1400 audit(1732612953.062:234): avc: denied { write } for pid=6197 comm="syz.2.44" name="iowarrior0" dev="devtmpfs" ino=2785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 42.093326][ T5991] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 42.100306][ T5991] usb 6-1: can't read configurations, error -61 [ 42.227160][ T5991] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 42.237854][ T5943] Bluetooth: hci3: command tx timeout [ 42.237961][ T5941] Bluetooth: hci1: command tx timeout [ 42.238280][ T5304] Bluetooth: hci2: command tx timeout [ 42.238302][ T5304] Bluetooth: hci0: command tx timeout [ 42.377096][ T5991] usb 6-1: Using ep0 maxpacket: 8 [ 42.380051][ T5991] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 42.382058][ T5991] usb 6-1: can't read configurations, error -61 [ 42.383825][ T5991] usb usb6-port1: attempt power cycle [ 42.717581][ T5991] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 42.737592][ T5991] usb 6-1: Using ep0 maxpacket: 8 [ 42.740570][ T5991] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 42.741836][ T6204] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.742553][ T5991] usb 6-1: can't read configurations, error -61 [ 42.749071][ T6204] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 42.751631][ T6204] IPv6: NLM_F_CREATE should be set when creating new route [ 42.753967][ T6204] IPv6: NLM_F_CREATE should be set when creating new route [ 42.794216][ T6206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.47'. [ 42.837952][ T39] audit: type=1400 audit(1732612953.812:235): avc: denied { nlmsg_write } for pid=6207 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.877222][ T5991] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 42.897840][ T5991] usb 6-1: Using ep0 maxpacket: 8 [ 42.901587][ T5991] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 42.903613][ T5991] usb 6-1: can't read configurations, error -61 [ 42.905797][ T5991] usb usb6-port1: unable to enumerate USB device [ 43.077146][ T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 43.228769][ T25] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 43.231549][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 43.234245][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 43.236656][ T25] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 43.239985][ T25] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 43.242245][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.246060][ T25] usb 8-1: config 0 descriptor?? [ 43.654103][ T25] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 43.659681][ T6210] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 43.660422][ T25] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 43.719164][ T6211] netlink: 'syz.0.49': attribute type 10 has an invalid length. [ 43.721244][ T6211] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 43.726157][ T6211] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 44.133987][ T9] usb 7-1: USB disconnect, device number 6 [ 44.137154][ T9] iowarrior 7-1:0.0: I/O-Warror #0 now disconnected [ 44.159123][ T39] audit: type=1400 audit(1732612955.132:236): avc: denied { setopt } for pid=6213 comm="syz.2.50" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.164567][ T6214] pim6reg: entered allmulticast mode [ 44.167245][ T6214] pim6reg: left allmulticast mode [ 44.276334][ T39] audit: type=1400 audit(1732612955.242:237): avc: denied { name_bind } for pid=6218 comm="syz.2.52" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 44.301730][ T6224] netlink: 'syz.2.53': attribute type 9 has an invalid length. [ 44.303876][ T6224] netlink: 244 bytes leftover after parsing attributes in process `syz.2.53'. [ 44.317339][ T5941] Bluetooth: hci0: command tx timeout [ 44.318127][ T5943] Bluetooth: hci1: command tx timeout [ 44.318857][ T5954] Bluetooth: hci2: command tx timeout [ 44.326300][ T39] audit: type=1400 audit(1732612955.292:238): avc: denied { read } for pid=5666 comm="dhcpcd" name="n113" dev="tmpfs" ino=2136 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.327129][ T5943] Bluetooth: hci3: command tx timeout [ 44.331933][ T39] audit: type=1400 audit(1732612955.292:239): avc: denied { open } for pid=5666 comm="dhcpcd" path="/run/udev/data/n113" dev="tmpfs" ino=2136 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.340575][ T39] audit: type=1400 audit(1732612955.292:240): avc: denied { getattr } for pid=5666 comm="dhcpcd" path="/run/udev/data/n113" dev="tmpfs" ino=2136 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.354692][ T39] audit: type=1400 audit(1732612955.322:241): avc: denied { create } for pid=6226 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 44.360930][ T39] audit: type=1400 audit(1732612955.322:242): avc: denied { checkpoint_restore } for pid=6226 comm="syz.2.54" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.367658][ T39] audit: type=1400 audit(1732612955.322:243): avc: denied { bind } for pid=6226 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 44.380940][ T6227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.54'. [ 44.532619][ T6241] netlink: 16 bytes leftover after parsing attributes in process `syz.0.56'. [ 44.573313][ T6249] capability: warning: `syz.1.58' uses deprecated v2 capabilities in a way that may be insecure [ 44.627596][ T6258] cgroup: none used incorrectly [ 44.692731][ T6273] netlink: 'syz.2.62': attribute type 9 has an invalid length. [ 44.694681][ T6273] netlink: 244 bytes leftover after parsing attributes in process `syz.2.62'. [ 44.768944][ T6281] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 44.797578][ T6291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.67'. [ 44.813379][ T6294] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 44.815263][ T6294] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 44.845711][ T6300] netlink: 52 bytes leftover after parsing attributes in process `syz.0.70'. [ 44.853950][ T6301] netlink: 'syz.1.65': attribute type 10 has an invalid length. [ 44.856860][ T6301] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 44.857863][ T6300] input: syz0 as /devices/virtual/input/input5 [ 45.046339][ T6326] netlink: 'syz.0.74': attribute type 9 has an invalid length. [ 45.048789][ T6326] netlink: 244 bytes leftover after parsing attributes in process `syz.0.74'. [ 45.246727][ T6349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.77'. [ 45.366096][ T6363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=6363 comm=syz.0.81 [ 45.366517][ T6362] Zero length message leads to an empty skb [ 45.594469][ T6378] netlink: 'syz.0.83': attribute type 9 has an invalid length. [ 45.596571][ T6378] netlink: 244 bytes leftover after parsing attributes in process `syz.0.83'. [ 45.642026][ T6383] futex_wake_op: syz.1.84 tries to shift op by 32; fix this program [ 45.692041][ T6391] Cannot find map_set index 0 as target [ 45.718345][ T6386] kvm: emulating exchange as write [ 45.746179][ T6395] ubifs: Unknown parameter 'trans' [ 45.840874][ T5991] usb 8-1: USB disconnect, device number 2 [ 45.865633][ T6416] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 45.873021][ T6416] CIFS mount error: No usable UNC path provided in device string! [ 45.873021][ T6416] [ 45.875745][ T6416] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 45.900518][ T6420] netlink: 'syz.1.93': attribute type 9 has an invalid length. [ 45.902558][ T6420] netlink: 244 bytes leftover after parsing attributes in process `syz.1.93'. [ 46.050829][ T6452] netlink: 'syz.1.103': attribute type 28 has an invalid length. [ 46.052870][ T6452] netlink: 'syz.1.103': attribute type 3 has an invalid length. [ 46.113726][ T6470] netlink: 'syz.2.106': attribute type 9 has an invalid length. [ 46.169473][ T6472] warning: `syz.3.107' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 46.205712][ T6485] tipc: Enabling not permitted [ 46.207691][ T6485] tipc: Enabling of bearer rejected, failed to enable media [ 46.462983][ T6515] CIFS mount error: No usable UNC path provided in device string! [ 46.462983][ T6515] [ 46.466483][ T6515] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 46.622698][ T6521] syz.2.114 (6521) used greatest stack depth: 21296 bytes left [ 46.881827][ T6549] xt_TPROXY: Can be used only with -p tcp or -p udp [ 46.886007][ T6553] xt_TPROXY: Can be used only with -p tcp or -p udp [ 46.939686][ T6560] syz.0.126: attempt to access beyond end of device [ 46.939686][ T6560] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 46.944049][ T6560] MINIX-fs: unable to read superblock [ 47.156235][ T39] kauditd_printk_skb: 108 callbacks suppressed [ 47.156246][ T39] audit: type=1400 audit(47.045:352): avc: denied { setopt } for pid=6584 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.185572][ T39] audit: type=1400 audit(47.075:353): avc: denied { connect } for pid=6590 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.191077][ T39] audit: type=1400 audit(47.075:354): avc: denied { ioctl } for pid=6590 comm="syz.0.133" path="socket:[11855]" dev="sockfs" ino=11855 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.215955][ T6601] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 47.224540][ T6602] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 47.329986][ T39] audit: type=1400 audit(47.225:355): avc: denied { sys_module } for pid=6608 comm="syz.2.137" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.342350][ T39] audit: type=1400 audit(47.235:356): avc: denied { ioctl } for pid=6608 comm="syz.2.137" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.350122][ T39] audit: type=1400 audit(47.235:357): avc: denied { read } for pid=6608 comm="syz.2.137" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.355790][ T39] audit: type=1400 audit(47.235:358): avc: denied { open } for pid=6608 comm="syz.2.137" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.430164][ T39] audit: type=1400 audit(47.325:359): avc: denied { ioctl } for pid=6634 comm="syz.3.142" path="socket:[13683]" dev="sockfs" ino=13683 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.446403][ T6635] vlan2: entered allmulticast mode [ 47.448941][ T6635] bond0: entered allmulticast mode [ 47.450352][ T6635] bond_slave_0: entered allmulticast mode [ 47.451885][ T6635] bond_slave_1: entered allmulticast mode [ 47.454157][ T6635] bond0: left allmulticast mode [ 47.455481][ T6635] bond_slave_0: left allmulticast mode [ 47.456945][ T6635] bond_slave_1: left allmulticast mode [ 47.467184][ T70] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 47.570061][ T6633] block nbd2: shutting down sockets [ 47.618508][ T70] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 47.620818][ T70] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 47.623565][ T70] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 47.625890][ T70] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 47.631200][ T70] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 47.635059][ T70] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 47.637994][ T70] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 47.640230][ T70] usb 5-1: Product: syz [ 47.641294][ T70] usb 5-1: Manufacturer: syz [ 47.644958][ T70] cdc_wdm 5-1:1.0: skipping garbage [ 47.646333][ T70] cdc_wdm 5-1:1.0: skipping garbage [ 47.650641][ T70] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 47.652198][ T70] cdc_wdm 5-1:1.0: Unknown control protocol [ 47.671140][ T39] audit: type=1400 audit(47.565:360): avc: denied { read } for pid=6646 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 47.686856][ T39] audit: type=1400 audit(47.575:361): avc: denied { create } for pid=6644 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 47.737546][ T5943] Bluetooth: hci3: Malformed LE Event: 0x0d [ 47.763384][ T6656] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 47.789801][ T6656] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 47.809750][ T5865] syz-executor (5865) used greatest stack depth: 21248 bytes left [ 47.817826][ C1] ================================================================== [ 47.820013][ C1] BUG: KASAN: slab-out-of-bounds in selinux_ip_output+0x1e0/0x1f0 [ 47.822068][ C1] Read of size 8 at addr ffff88802741e498 by task sshd/5863 [ 47.824750][ C1] [ 47.825968][ C1] CPU: 1 UID: 0 PID: 5863 Comm: sshd Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 47.828526][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.831319][ C1] Call Trace: [ 47.832219][ C1] [ 47.832980][ C1] dump_stack_lvl+0x116/0x1f0 [ 47.834248][ C1] print_report+0xc3/0x620 [ 47.835438][ C1] ? __virt_addr_valid+0x5e/0x590 [ 47.836763][ C1] ? __phys_addr+0xc6/0x150 [ 47.837908][ C1] kasan_report+0xd9/0x110 [ 47.839031][ C1] ? selinux_ip_output+0x1e0/0x1f0 [ 47.840393][ C1] ? selinux_ip_output+0x1e0/0x1f0 [ 47.841740][ C1] selinux_ip_output+0x1e0/0x1f0 [ 47.843060][ C1] ? __pfx_selinux_ip_output+0x10/0x10 [ 47.844545][ C1] nf_hook_slow+0xbb/0x200 [ 47.845727][ C1] nf_hook+0x386/0x6d0 [ 47.846810][ C1] ? __pfx_dst_output+0x10/0x10 [ 47.848109][ C1] ? __pfx_nf_hook+0x10/0x10 [ 47.849335][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 47.850840][ C1] ? __pfx_ip_reply_glue_bits+0x10/0x10 [ 47.852271][ C1] ? __pfx_dst_output+0x10/0x10 [ 47.853559][ C1] ? __ip_make_skb+0x1150/0x1d00 [ 47.854873][ C1] ? do_csum+0x26f/0x2d0 [ 47.855995][ C1] __ip_local_out+0x339/0x640 [ 47.857235][ C1] ? __pfx_dst_output+0x10/0x10 [ 47.858519][ C1] ip_push_pending_frames+0xa0/0x5b0 [ 47.859911][ C1] ip_send_unicast_reply+0xd0e/0x1650 [ 47.861319][ C1] ? __pfx_ip_send_unicast_reply+0x10/0x10 [ 47.863032][ C1] ? trace_lock_acquire+0x146/0x1e0 [ 47.864435][ C1] ? tcp_v4_send_reset+0xd35/0x2f20 [ 47.865806][ C1] tcp_v4_send_reset+0x129b/0x2f20 [ 47.867173][ C1] ? hlock_class+0x4e/0x130 [ 47.868392][ C1] ? __pfx_tcp_v4_send_reset+0x10/0x10 [ 47.869825][ C1] ? tcp_parse_options+0x1f5/0x11b0 [ 47.871203][ C1] ? __pfx_tcp_timewait_state_process+0x10/0x10 [ 47.872845][ C1] ? __asan_memmove+0x3c/0x60 [ 47.874065][ C1] ? tcp_v4_rcv+0x3715/0x4380 [ 47.875292][ C1] tcp_v4_rcv+0x3715/0x4380 [ 47.876475][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 47.877835][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 47.879263][ C1] ? rcu_is_watching+0x12/0xc0 [ 47.880533][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 47.881813][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 47.883172][ C1] ip_local_deliver_finish+0x316/0x570 [ 47.884564][ C1] ip_local_deliver+0x18e/0x1f0 [ 47.885824][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 47.887132][ C1] ip_rcv+0x2c3/0x5d0 [ 47.888181][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 47.889366][ C1] __netif_receive_skb_one_core+0x199/0x1e0 [ 47.890880][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 47.892466][ C1] ? rcu_is_watching+0x12/0xc0 [ 47.893705][ C1] ? process_backlog+0x3f1/0x15f0 [ 47.894998][ C1] ? process_backlog+0x3f1/0x15f0 [ 47.896316][ C1] __netif_receive_skb+0x1d/0x160 [ 47.897631][ C1] process_backlog+0x443/0x15f0 [ 47.898900][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 47.900302][ C1] net_rx_action+0xa94/0x1010 [ 47.901533][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 47.902859][ C1] ? __pfx_mark_lock+0x10/0x10 [ 47.904116][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 47.905487][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 47.906835][ C1] ? sched_clock+0x38/0x60 [ 47.908010][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 47.909277][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 47.910731][ C1] ? mark_held_locks+0x9f/0xe0 [ 47.912016][ C1] handle_softirqs+0x213/0x8f0 [ 47.913264][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 47.914646][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 47.916029][ C1] ? __dev_queue_xmit+0x89b/0x43e0 [ 47.917358][ C1] do_softirq+0xb2/0xf0 [ 47.918446][ C1] [ 47.919223][ C1] [ 47.920000][ C1] __local_bh_enable_ip+0x100/0x120 [ 47.921355][ C1] ? __dev_queue_xmit+0x89b/0x43e0 [ 47.922689][ C1] __dev_queue_xmit+0x8b0/0x43e0 [ 47.923983][ C1] ? hlock_class+0x4e/0x130 [ 47.925180][ C1] ? __lock_acquire+0x15a9/0x3c40 [ 47.926497][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 47.927902][ C1] ? hlock_class+0x4e/0x130 [ 47.929094][ C1] ? mark_lock+0xb5/0xc60 [ 47.930225][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 47.931590][ C1] ? selinux_ip_postroute+0x73b/0xde0 [ 47.932982][ C1] ? __pfx_mark_lock+0x10/0x10 [ 47.934243][ C1] ? find_held_lock+0x2d/0x110 [ 47.935439][ C1] ? __ip_finish_output+0x49e/0x950 [ 47.936752][ C1] ? __pfx_lock_release+0x10/0x10 [ 47.938071][ C1] ? mark_held_locks+0x9f/0xe0 [ 47.939338][ C1] ip_finish_output2+0xc6c/0x2150 [ 47.940660][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 47.942075][ C1] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 47.943342][ C1] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 47.944705][ C1] __ip_finish_output+0x49e/0x950 [ 47.946017][ C1] ip_finish_output+0x35/0x380 [ 47.947262][ C1] ip_output+0x13b/0x2a0 [ 47.948372][ C1] ? __pfx_ip_output+0x10/0x10 [ 47.949628][ C1] ip_local_out+0x33e/0x4a0 [ 47.950813][ C1] __ip_queue_xmit+0x777/0x1970 [ 47.952095][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 47.953420][ C1] __tcp_transmit_skb+0x2b39/0x3df0 [ 47.954783][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 47.956226][ C1] ? __pfx_lock_release+0x10/0x10 [ 47.957604][ C1] ? ktime_get+0x206/0x300 [ 47.958768][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.960130][ C1] tcp_write_xmit+0x12b1/0x8560 [ 47.961400][ C1] ? __might_fault+0xe3/0x190 [ 47.962630][ C1] ? _copy_from_iter+0x15e/0x1560 [ 47.963952][ C1] ? trace_lock_acquire+0x146/0x1e0 [ 47.965309][ C1] ? sk_leave_memory_pressure+0x7c/0x130 [ 47.966773][ C1] ? __pfx__copy_from_iter+0x10/0x10 [ 47.968169][ C1] __tcp_push_pending_frames+0xaf/0x390 [ 47.969605][ C1] tcp_push+0x221/0x6f0 [ 47.970699][ C1] tcp_sendmsg_locked+0x28d1/0x3770 [ 47.972077][ C1] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 47.973522][ C1] ? tcp_sendmsg+0x20/0x50 [ 47.974712][ C1] ? mark_held_locks+0x9f/0xe0 [ 47.975974][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 47.977356][ C1] tcp_sendmsg+0x2e/0x50 [ 47.978469][ C1] ? __pfx_tcp_sendmsg+0x10/0x10 [ 47.979767][ C1] inet_sendmsg+0xb9/0x140 [ 47.980938][ C1] sock_write_iter+0x4ac/0x5b0 [ 47.982194][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 47.983576][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 47.984977][ C1] ? security_file_permission+0x71/0x210 [ 47.986432][ C1] vfs_write+0x5ae/0x1150 [ 47.987568][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 47.989024][ C1] ? __pfx_vfs_write+0x10/0x10 [ 47.990612][ C1] ? __might_fault+0xe3/0x190 [ 47.991863][ C1] ? __might_fault+0xe3/0x190 [ 47.993109][ C1] ? _copy_to_user+0x48/0xd0 [ 47.994342][ C1] ksys_write+0x207/0x250 [ 47.995476][ C1] ? __pfx_ksys_write+0x10/0x10 [ 47.996733][ C1] do_syscall_64+0xcd/0x250 [ 47.997922][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.999475][ C1] RIP: 0033:0x7f2dffd16bf2 [ 48.000652][ C1] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83 [ 48.005629][ C1] RSP: 002b:00007ffc25fe5ff8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 48.007801][ C1] RAX: ffffffffffffffda RBX: 00005561bdafd700 RCX: 00007f2dffd16bf2 [ 48.009849][ C1] RDX: 0000000000001a68 RSI: 00005561bdbb4e10 RDI: 0000000000000007 [ 48.011914][ C1] RBP: 00005561bdbb4e10 R08: 0000000000000000 R09: 0000000000000000 [ 48.013979][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001a68 [ 48.016046][ C1] R13: 00005561bdafc580 R14: 00005561bdaf7340 R15: 00005561bdafe110 [ 48.018106][ C1] [ 48.018916][ C1] [ 48.019560][ C1] The buggy address belongs to the object at ffff88802741e420 [ 48.019560][ C1] which belongs to the cache tw_sock_TCP of size 288 [ 48.023126][ C1] The buggy address is located 120 bytes inside of [ 48.023126][ C1] allocated 288-byte region [ffff88802741e420, ffff88802741e540) [ 48.026747][ C1] [ 48.027380][ C1] The buggy address belongs to the physical page: [ 48.029053][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2741e [ 48.031287][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 48.033404][ C1] memcg:ffff88802818d001 [ 48.034495][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 48.036422][ C1] page_type: f5(slab) [ 48.037112][ T9] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 48.037432][ C1] raw: 00fff00000000040 ffff888100e81a40 dead000000000122 0000000000000000 [ 48.041871][ C1] raw: 0000000000000000 0000000080170017 00000001f5000000 ffff88802818d001 [ 48.044093][ C1] head: 00fff00000000040 ffff888100e81a40 dead000000000122 0000000000000000 [ 48.046341][ C1] head: 0000000000000000 0000000080170017 00000001f5000000 ffff88802818d001 [ 48.048593][ C1] head: 00fff00000000001 ffffea00009d0781 ffffffffffffffff 0000000000000000 [ 48.050828][ C1] head: ffff888000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 48.053078][ C1] page dumped because: kasan: bad access detected [ 48.054752][ C1] page_owner tracks the page as allocated [ 48.056222][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5863, tgid 5863 (sshd), ts 47812162743, free_ts 47811874743 [ 48.061129][ C1] post_alloc_hook+0x2d1/0x350 [ 48.062379][ C1] get_page_from_freelist+0xfce/0x2f80 [ 48.063798][ C1] __alloc_pages_noprof+0x223/0x25a0 [ 48.065170][ C1] alloc_pages_mpol_noprof+0x2c9/0x610 [ 48.066588][ C1] new_slab+0x2c9/0x410 [ 48.067684][ C1] ___slab_alloc+0xdac/0x1870 [ 48.068906][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 48.070304][ C1] kmem_cache_alloc_noprof+0xfa/0x3d0 [ 48.071711][ C1] inet_twsk_alloc+0x120/0x970 [ 48.072977][ C1] tcp_time_wait+0x5f/0xe10 [ 48.074181][ C1] tcp_rcv_state_process+0x4935/0x4c40 [ 48.075602][ C1] tcp_v4_do_rcv+0x1ad/0xa90 [ 48.076809][ C1] tcp_v4_rcv+0x33a0/0x4380 [ 48.077995][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 48.079357][ C1] ip_local_deliver_finish+0x316/0x570 [ 48.080716][ C1] ip_local_deliver+0x18e/0x1f0 [ 48.081981][ C1] page last free pid 5937 tgid 5937 stack trace: [ 48.083618][ C1] free_unref_page+0x661/0x1080 [ 48.084884][ C1] __mmdrop+0xd5/0x460 [ 48.085955][ C1] finish_task_switch.isra.0+0x7af/0xcc0 [ 48.087424][ C1] __schedule+0xe60/0x5ad0 [ 48.088593][ C1] schedule+0xe7/0x350 [ 48.089661][ C1] do_nanosleep+0x216/0x510 [ 48.090849][ C1] hrtimer_nanosleep+0x158/0x380 [ 48.092152][ C1] common_nsleep+0xa1/0xd0 [ 48.093311][ C1] __x64_sys_clock_nanosleep+0x344/0x4a0 [ 48.094778][ C1] do_syscall_64+0xcd/0x250 [ 48.095970][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.097508][ C1] [ 48.098136][ C1] Memory state around the buggy address: [ 48.099587][ C1] ffff88802741e380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.101642][ C1] ffff88802741e400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.103728][ C1] >ffff88802741e480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.105786][ C1] ^ [ 48.107045][ C1] ffff88802741e500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.109105][ C1] ffff88802741e580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.111151][ C1] ================================================================== [ 48.113325][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 48.115193][ C1] CPU: 1 UID: 0 PID: 5863 Comm: sshd Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 48.117707][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.120465][ C1] Call Trace: [ 48.121337][ C1] [ 48.122092][ C1] dump_stack_lvl+0x3d/0x1f0 [ 48.123302][ C1] panic+0x71d/0x800 [ 48.124335][ C1] ? mark_held_locks+0x9f/0xe0 [ 48.125565][ C1] ? __pfx_panic+0x10/0x10 [ 48.126732][ C1] ? irqentry_exit+0x3b/0x90 [ 48.127980][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.129331][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 48.130658][ C1] check_panic_on_warn+0xab/0xb0 [ 48.131948][ C1] end_report+0x117/0x180 [ 48.133077][ C1] kasan_report+0xe9/0x110 [ 48.134249][ C1] ? selinux_ip_output+0x1e0/0x1f0 [ 48.135601][ C1] ? selinux_ip_output+0x1e0/0x1f0 [ 48.136928][ C1] selinux_ip_output+0x1e0/0x1f0 [ 48.138217][ C1] ? __pfx_selinux_ip_output+0x10/0x10 [ 48.139635][ C1] nf_hook_slow+0xbb/0x200 [ 48.140800][ C1] nf_hook+0x386/0x6d0 [ 48.141875][ C1] ? __pfx_dst_output+0x10/0x10 [ 48.143146][ C1] ? __pfx_nf_hook+0x10/0x10 [ 48.144322][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 48.145726][ C1] ? __pfx_ip_reply_glue_bits+0x10/0x10 [ 48.147157][ C1] ? __pfx_dst_output+0x10/0x10 [ 48.148418][ C1] ? __ip_make_skb+0x1150/0x1d00 [ 48.149667][ C1] ? do_csum+0x26f/0x2d0 [ 48.150739][ C1] __ip_local_out+0x339/0x640 [ 48.151927][ C1] ? __pfx_dst_output+0x10/0x10 [ 48.153168][ C1] ip_push_pending_frames+0xa0/0x5b0 [ 48.154519][ C1] ip_send_unicast_reply+0xd0e/0x1650 [ 48.155868][ C1] ? __pfx_ip_send_unicast_reply+0x10/0x10 [ 48.157384][ C1] ? trace_lock_acquire+0x146/0x1e0 [ 48.158731][ C1] ? tcp_v4_send_reset+0xd35/0x2f20 [ 48.160089][ C1] tcp_v4_send_reset+0x129b/0x2f20 [ 48.161395][ C1] ? hlock_class+0x4e/0x130 [ 48.162578][ C1] ? __pfx_tcp_v4_send_reset+0x10/0x10 [ 48.163991][ C1] ? tcp_parse_options+0x1f5/0x11b0 [ 48.165342][ C1] ? __pfx_tcp_timewait_state_process+0x10/0x10 [ 48.166953][ C1] ? __asan_memmove+0x3c/0x60 [ 48.168189][ C1] ? tcp_v4_rcv+0x3715/0x4380 [ 48.169415][ C1] tcp_v4_rcv+0x3715/0x4380 [ 48.170603][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 48.171877][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 48.173286][ C1] ? rcu_is_watching+0x12/0xc0 [ 48.174544][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 48.175816][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 48.177203][ C1] ip_local_deliver_finish+0x316/0x570 [ 48.178609][ C1] ip_local_deliver+0x18e/0x1f0 [ 48.179874][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 48.181258][ C1] ip_rcv+0x2c3/0x5d0 [ 48.182301][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 48.183484][ C1] __netif_receive_skb_one_core+0x199/0x1e0 [ 48.185013][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 48.186660][ C1] ? rcu_is_watching+0x12/0xc0 [ 48.187910][ C1] ? process_backlog+0x3f1/0x15f0 [ 48.189219][ C1] ? process_backlog+0x3f1/0x15f0 [ 48.190525][ C1] __netif_receive_skb+0x1d/0x160 [ 48.191833][ C1] process_backlog+0x443/0x15f0 [ 48.193108][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 48.194508][ C1] net_rx_action+0xa94/0x1010 [ 48.195750][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 48.197047][ C1] ? __pfx_mark_lock+0x10/0x10 [ 48.198251][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 48.199622][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 48.200966][ C1] ? sched_clock+0x38/0x60 [ 48.202129][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 48.203399][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 48.205056][ C1] ? mark_held_locks+0x9f/0xe0 [ 48.206377][ C1] handle_softirqs+0x213/0x8f0 [ 48.207636][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 48.209006][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 48.210383][ C1] ? __dev_queue_xmit+0x89b/0x43e0 [ 48.211719][ C1] do_softirq+0xb2/0xf0 [ 48.212800][ C1] [ 48.213572][ C1] [ 48.214368][ C1] __local_bh_enable_ip+0x100/0x120 [ 48.215807][ C1] ? __dev_queue_xmit+0x89b/0x43e0 [ 48.217188][ C1] __dev_queue_xmit+0x8b0/0x43e0 [ 48.218481][ C1] ? hlock_class+0x4e/0x130 [ 48.219673][ C1] ? __lock_acquire+0x15a9/0x3c40 [ 48.220982][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 48.222385][ C1] ? hlock_class+0x4e/0x130 [ 48.223582][ C1] ? mark_lock+0xb5/0xc60 [ 48.224702][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 48.226032][ C1] ? selinux_ip_postroute+0x73b/0xde0 [ 48.227435][ C1] ? __pfx_mark_lock+0x10/0x10 [ 48.228673][ C1] ? find_held_lock+0x2d/0x110 [ 48.229925][ C1] ? __ip_finish_output+0x49e/0x950 [ 48.231284][ C1] ? __pfx_lock_release+0x10/0x10 [ 48.232599][ C1] ? mark_held_locks+0x9f/0xe0 [ 48.233864][ C1] ip_finish_output2+0xc6c/0x2150 [ 48.235179][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 48.236601][ C1] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 48.237875][ C1] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 48.239231][ C1] __ip_finish_output+0x49e/0x950 [ 48.240561][ C1] ip_finish_output+0x35/0x380 [ 48.241864][ C1] ip_output+0x13b/0x2a0 [ 48.242971][ C1] ? __pfx_ip_output+0x10/0x10 [ 48.244240][ C1] ip_local_out+0x33e/0x4a0 [ 48.245423][ C1] __ip_queue_xmit+0x777/0x1970 [ 48.246694][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 48.248027][ C1] __tcp_transmit_skb+0x2b39/0x3df0 [ 48.249377][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 48.250810][ C1] ? __pfx_lock_release+0x10/0x10 [ 48.252119][ C1] ? ktime_get+0x206/0x300 [ 48.253282][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.254653][ C1] tcp_write_xmit+0x12b1/0x8560 [ 48.255925][ C1] ? __might_fault+0xe3/0x190 [ 48.257155][ C1] ? _copy_from_iter+0x15e/0x1560 [ 48.258471][ C1] ? trace_lock_acquire+0x146/0x1e0 [ 48.259836][ C1] ? sk_leave_memory_pressure+0x7c/0x130 [ 48.261299][ C1] ? __pfx__copy_from_iter+0x10/0x10 [ 48.262681][ C1] __tcp_push_pending_frames+0xaf/0x390 [ 48.264122][ C1] tcp_push+0x221/0x6f0 [ 48.265202][ C1] tcp_sendmsg_locked+0x28d1/0x3770 [ 48.266534][ C1] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 48.267988][ C1] ? tcp_sendmsg+0x20/0x50 [ 48.269164][ C1] ? mark_held_locks+0x9f/0xe0 [ 48.270413][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 48.271805][ C1] tcp_sendmsg+0x2e/0x50 [ 48.272937][ C1] ? __pfx_tcp_sendmsg+0x10/0x10 [ 48.274262][ C1] inet_sendmsg+0xb9/0x140 [ 48.275438][ C1] sock_write_iter+0x4ac/0x5b0 [ 48.276694][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 48.278065][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 48.279461][ C1] ? security_file_permission+0x71/0x210 [ 48.280920][ C1] vfs_write+0x5ae/0x1150 [ 48.282056][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 48.283488][ C1] ? __pfx_vfs_write+0x10/0x10 [ 48.284918][ C1] ? __might_fault+0xe3/0x190 [ 48.286385][ C1] ? __might_fault+0xe3/0x190 [ 48.287974][ C1] ? _copy_to_user+0x48/0xd0 [ 48.289472][ C1] ksys_write+0x207/0x250 [ 48.290849][ C1] ? __pfx_ksys_write+0x10/0x10 [ 48.292143][ C1] do_syscall_64+0xcd/0x250 [ 48.293339][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.294894][ C1] RIP: 0033:0x7f2dffd16bf2 [ 48.296063][ C1] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83 [ 48.301340][ C1] RSP: 002b:00007ffc25fe5ff8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 48.304401][ C1] RAX: ffffffffffffffda RBX: 00005561bdafd700 RCX: 00007f2dffd16bf2 [ 48.307087][ C1] RDX: 0000000000001a68 RSI: 00005561bdbb4e10 RDI: 0000000000000007 [ 48.309727][ C1] RBP: 00005561bdbb4e10 R08: 0000000000000000 R09: 0000000000000000 [ 48.312397][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001a68 [ 48.315330][ C1] R13: 00005561bdafc580 R14: 00005561bdaf7340 R15: 00005561bdafe110 [ 48.318125][ C1] [ 48.319776][ C1] Kernel Offset: disabled [ 48.321227][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:22:38 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000002 RDX=1ffff11004cf916f RSI=1ffff11004cf916a RDI=0000000000000021 RBP=0000000000000000 RSP=ffffc90004367338 R8 =0000000000000001 R9 =0000000000000001 R10=000000000000000f R11=0000000000000003 R12=ffffffff8e1bba80 R13=ffff8880267c8000 R14=0000000000000021 R15=ffff8880267c8b58 RIP=ffffffff816b2a2a RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5eaa6fe0d0 CR3=000000004be2c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcddedf25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcddedf2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcddedf2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcddedf2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcddedf269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcddedf277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcddef0c488 00007fcddef0c480 00007fcddef0c478 00007fcddef0c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcddfa6d100 00007fcddef0c440 00007fcddef00004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcddef0c498 00007fcddef0c490 00007fcddef0c488 00007fcddef0c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000074 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85106065 RDI=ffffffff9ab3da20 RBP=ffffffff9ab3d9e0 RSP=ffffc900006afd00 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000074 R14=ffffffff85106000 R15=0000000000000000 RIP=ffffffff8510608f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2e00116d00 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055618dfd80f0 CR3=0000000031ae4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000ffff3f01 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=f2ba17a7f2ba17a7 f2ba17a7f2ba17a7 f2ba17a7f2ba17a7 f2ba17a7f2ba17a7 f2ba17a7f2ba17a7 f2ba17a7f2ba17a7 f2ba17a7f2ba17a7 f2ba17a7f2ba17a7 ZMM22=ed40a033ed40a033 ed40a033ed40a033 ed40a033ed40a033 ed40a033ed40a033 ed40a033ed40a033 ed40a033ed40a033 ed40a033ed40a033 ed40a033ed40a033 ZMM23=8643382f8643382f 8643382f8643382f 8643382f8643382f 8643382f8643382f 8643382f8643382f 8643382f8643382f 8643382f8643382f 8643382f8643382f ZMM24=4b0542a44b0542a4 4b0542a44b0542a4 4b0542a44b0542a4 4b0542a44b0542a4 4b0542a44b0542a4 4b0542a44b0542a4 4b0542a44b0542a4 4b0542a44b0542a4 ZMM25=6956e7666956e766 6956e7666956e766 6956e7666956e766 6956e7666956e766 6956e7666956e766 6956e7666956e766 6956e7666956e766 6956e7666956e766 ZMM26=f17f75bef17f75be f17f75bef17f75be f17f75bef17f75be f17f75bef17f75be f17f75bef17f75be f17f75bef17f75be f17f75bef17f75be f17f75bef17f75be ZMM27=b5df606bb5df606b b5df606bb5df606b b5df606bb5df606b b5df606bb5df606b b5df606bb5df606b b5df606bb5df606b b5df606bb5df606b b5df606bb5df606b ZMM28=000000700000006f 0000006e0000006d 0000006c0000006b 0000006a00000069 0000006800000067 0000006600000065 0000006400000063 0000006200000061 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=c6010000c6010000 c6010000c6010000 c6010000c6010000 c6010000c6010000 c6010000c6010000 c6010000c6010000 c6010000c6010000 c6010000c6010000 info registers vcpu 2 CPU#2 RAX=ffff888022eb53d8 RBX=1ffff920007a2ee9 RCX=ffffc90003d17788 RDX=0000000000000004 RSI=ffffffff8e1bb9c0 RDI=ffff888022eb53d8 RBP=0000000000000007 RSP=ffffc90003d17710 R8 =0000000000000000 R9 =fffffbfff20c1172 R10=ffffffff90608b97 R11=0000000000000003 R12=ffffffff8e1bb9c0 R13=ffffffff8e1bb9c0 R14=ffffc90003d17788 R15=0000000000000003 RIP=ffffffff816a7338 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f27c2e67d60 CR3=000000003337e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010000000 Opmask01=00000000ffffffff Opmask02=00000000fff80022 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf78c9210 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff96e87990 RBX=ffff888030a7d360 RCX=0000000000000004 RDX=fffffbfff2dd019b RSI=0000000000000008 RDI=ffffffff96e87a56 RBP=dffffc0000000000 RSP=ffffc90004137528 R8 =ffffffff96e87a56 R9 =ffffffff96e87a56 R10=ffffffff96e80cd7 R11=0000000000000002 R12=ffffed100614fa6b R13=ffff888030a7c880 R14=0000000000000004 R15=0000000000000002 RIP=ffffffff816b2e08 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f07c3298280 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffcc92f9eb0 CR3=00000000237e0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=00000000fffffdff Opmask03=2040000404420020 Opmask04=00000000ffdfffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d4e2188b60 000055d4e2193c40 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d4e2188b60 000055d4e2193c40 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737373 7373737373737373 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73202c297325286b 636f6c66206f7420 656c62616e55006e 6f69746974726170 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c393230302c38 3230302c37323030 2c36323030003032 3d5145534b534944 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d11040f0d0d1105 0f0d0d110a0f0d0d 110b0f0d0d000d0f 005145534b534944 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000041 000000302f716d00 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000251 000000000000302d 78742f7365756575 712f32316e616c77 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07c3447240 000055d4e21d25d0 0000000000007831 0000003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69305f474f5b647c 69303a2433273f39 7b27697a787c7a30 23333a3a38263342 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020