last executing test programs: 3.258304407s ago: executing program 0 (id=36): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c00080000000000000000000800010000000000440007800800", @ANYRES32, @ANYRES32, @ANYRES32], 0x90}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000200), &(0x7f0000000300)=""/172}, 0x20) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078005001500120000000800084000000090050005000a000000050001000600000012000300686173683a6e6574"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 3.178603621s ago: executing program 0 (id=38): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000e5000000850000003900000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) 3.178307433s ago: executing program 0 (id=39): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000003f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000300000000000000601ced7346d3a306"], 0xd4}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x400000) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x41}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x437, 0xfffe, 0x0, {0x0, 0x0, 0x0, r6, 0x5120b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006500)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000065c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000006600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r9, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r11, @ANYBLOB="08003700000000000a0006"], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0xe8, r2, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x3, 0x47}}}}, [@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20044844}, 0x841) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcd00) 3.099515081s ago: executing program 0 (id=40): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000340)={'erspan0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x700, 0x80, 0xa, 0x0, {{0x9, 0x4, 0x0, 0x3, 0x24, 0x65, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0x12}, {[@end, @rr={0x7, 0xf, 0xeb, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x1b, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x1, 0xe, 0x4, 0x7, 0x800}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6cb}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0xfffffffc, 0xee, &(0x7f00000001c0)=""/238, 0x40f00, 0x40, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x5, 0x5, 0x3f5d}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[{0x2, 0x1, 0x6, 0xc}, {0x0, 0x5, 0x4, 0xb}, {0x2, 0x4, 0x8, 0x9}], 0x10, 0x1, @void, @value}, 0x94) unlinkat(r0, &(0x7f0000000500)='./file0\x00', 0x200) r4 = openat$cgroup_ro(r0, &(0x7f0000000540)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000580), 0x9) io_uring_enter(r4, 0x38d0, 0xee6, 0x11, &(0x7f00000005c0)={[0x5]}, 0x8) semop(0x0, &(0x7f0000000600)=[{0x0, 0x7, 0x800}], 0x1) r5 = gettid() rt_sigqueueinfo(r5, 0x14, &(0x7f0000000640)={0x2, 0xfffffffa, 0xd}) r6 = syz_io_uring_setup(0x1126, &(0x7f00000006c0)={0x0, 0xb0d3, 0x2000, 0x0, 0x214}, &(0x7f0000000740), &(0x7f0000000780)) select(0x40, &(0x7f00000007c0)={0x9, 0x1ff, 0x40, 0x4, 0x43, 0x5, 0xfffffffffffffffd, 0xe}, &(0x7f0000000800)={0x1ff, 0xf12, 0x4, 0x1, 0x7, 0x0, 0xd5, 0x8}, &(0x7f0000000840)={0x67d5ad1c, 0x1, 0x8, 0xc, 0x80, 0x3ff, 0x9, 0x3}, &(0x7f0000000880)={0x0, 0x2710}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r6, 0x8040942d, &(0x7f00000008c0)) mkdir(&(0x7f0000000900)='./file0\x00', 0x20) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000dc0), 0x800, 0x0) r8 = accept4$llc(r4, 0x0, &(0x7f0000000e00), 0x0) r9 = syz_io_uring_setup(0xe98, &(0x7f0000000e40)={0x0, 0x2883, 0x200, 0x1, 0x23}, &(0x7f0000000ec0), &(0x7f0000000f00)) sendmmsg$unix(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000d40)=[{&(0x7f00000009c0)="d73a1e3530994920f9d1f8a89c5ea70ca8dbff2b1148d5cfdefa86769b949670e0ba32b0fb950f9d644a8ce200647bd4d24acb64fd35607e3263db4cdee5b579852d73098e0367a9b570c8732cddb7137cdcf8227825af7876dd44dbf073d302b13a572bf47f947527015aea1b1c7b7367cac004c7def6acfefcd7dd9e6460dd9f0e6c186e01b4feb03dbf4c660ccb6f1ce3a53093622c606ac1c4e717ac388ce386ec57a5a1b6", 0xa7}, {&(0x7f0000000a80)="e869129f1c4f19b00b4a9e", 0xb}, {&(0x7f0000000ac0)="0eef9dcee1daffbcd32d31187fd494d633269f6cdcff05344dba51b90255e21de3c6e3c9a58050849429d06e94709150cec90cc59d7e67d7093e422293f7def71a2944320ec5804e005df9799b82714f2a01d547a3b5240b6ab3bec77d9d0626c10198863e1afbcaea4a1c54c1b946a8e294f4dc1b4bcebe7fc72275b39ce8a04d6e0627bc68fe2dad7551e836e9cd", 0x8f}, {&(0x7f0000000b80)="c96710737c8f748f8f064a048329c73aa66d5f46b29a2f3b184ec1aad73f1ecf5f5551d462884cfff06eb07f12062eca05ea708e462e03d90cb5f513def3fab84bf5d08f1f26687028ecbbd2e0b704", 0x4f}, {&(0x7f0000000c00)="27a9057d9e9a5cde4fc92dde928633ec4815617b0d", 0x15}, {&(0x7f0000000c40)="798f5bfd3bbb0232ef83b55d34ad9b25527cbf9e4d6d4ba74df7187c1c0dbd5bc92af4293dec9504136eb41a4a34f8a071df57a664df3fe17e51a8e008d1c80097a74335e9ff16083b6c54b0291ca3a74fee3ea9659506dc56728c33881b3a07be946dcdbba56bb51e11eb6cd6ec5d7ec95f0813b96ad44eaa45a1f8b72d099fa7b085078de5840c7a7d118ec1a2b2694d8286e6ecc6fc1414146f173f96107e851f370377cf451365c81b53c993c4bfa094247dfac0e242cb07525b752f662a969779b63aa445fbe9e74543437fafeb03c01d7750baac064eec621978ce3e09ea56911157d50429db8609a5", 0xec}], 0x6, &(0x7f0000000f40)=[@rights={{0x34, 0x1, 0x1, [r0, r0, r1, r7, r4, r3, r8, r1, r0]}}, @rights={{0x1c, 0x1, 0x1, [r6, r9, r3]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x70, 0x20040000}}], 0x1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000001100)={@pppoe={0x18, 0x0, {0x4, @empty, 'ip6gre0\x00'}}, {&(0x7f0000001000)=""/135, 0x87}, &(0x7f00000010c0), 0x24}, 0xa0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) syz_genetlink_get_family_id$nfc(&(0x7f00000011c0), 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f00000038c0)={&(0x7f0000001200)=@generic, 0x80, &(0x7f0000003700)=[{&(0x7f0000001280)=""/32, 0x20}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/125, 0x7d}, {&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f0000001500)=""/115, 0x73}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/250, 0xfa}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/115, 0x73}], 0x9, &(0x7f00000037c0)=""/219, 0xdb}, 0x42) waitid(0x1, 0x0, &(0x7f0000003900), 0x1, &(0x7f0000003980)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x4000010, r1, 0x80000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000003a40)) sendmsg$NFT_BATCH(r0, &(0x7f0000003d00)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0xa4, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'macvlan1\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x108, 0xb, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff7}]}}}, @NFTA_SET_DESC={0x78, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4119eed8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3cdf2cd4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x250ac152}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x10}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1d4}}, 0x4001) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000003dc0)={0x9, &(0x7f0000003d40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) write$binfmt_script(r4, &(0x7f0000003e00)={'#! ', './file0', [{0x20, 'veth1_to_batadv\x00'}, {0x20, 'blkio.bfq.io_service_bytes_recursive\x00'}, {0x20, 'macvlan1\x00'}], 0xa, "a8861b5ecd4103124ed82619c35fe2dbbbd063791b1c1f3fdb7faa314e6a3354b33590ad4eb800050dfc6425d951bea32d335fb9acba4d562af7a8afaef1f94756d55dba3acee8158d25bb82ccc435cf4ef7210ee95c9e71129175d6413e0905560c2047e032f0af10497548b0b2383fdbb8272a876111a4984e8501fb3452355720a1dcfb9b94f090aad35629cdcf60f3bf13bda8f43b68ef0e587190207ea8528b4adc9578f83547bbbe4bec9e549d42e53e6d209ad05a3d9931060521001cae90399629c6053ccc9a399393d2c30f9d0ad380a571b2aa84173f39"}, 0x128) open_by_handle_at(r1, &(0x7f0000003f40)=@FILEID_INO32_GEN={0x8, 0x1, {0xe}}, 0x10100) 3.098775424s ago: executing program 0 (id=41): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x9ff) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000012c0)) r2 = syz_io_uring_setup(0x237, &(0x7f0000002280)={0x0, 0xba40, 0x8}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x3aec, &(0x7f0000000240)={0x0, 0x8d72, 0x10100, 0x0, 0x20000}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f0000000180)="f27457a24ccbfc29", 0x8) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount(&(0x7f00000001c0)=@filename='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x224d080, 0x0) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r9}, './file0\x00'}) 2.190263857s ago: executing program 0 (id=71): setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @private=0xa010101, 0x1, "6fcf8d40bf53f165a8ade6047bf284563e8bd0c5b306c4a0a5e94d160d978e7c", 0x6, 0x1, 0x7, 0x5}, 0x3c) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80001) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r1, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40480c5}, 0x279149bbdd4b83e4) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000380), 0x10) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd}]}, 0x34}}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'ipvlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x94, r3, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xcf43, 0x17}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}]}, 0x94}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'syz_tun\x00', &(0x7f0000000840)=@ethtool_per_queue_op={0x4b, 0xf, [0xc, 0x1, 0x3, 0x4, 0x2, 0x1, 0x3, 0x1, 0x6, 0xc, 0x0, 0x8, 0x3ff, 0x5, 0x2, 0x6, 0x100, 0x36, 0x10, 0x4, 0x80000001, 0x3, 0x3, 0x6, 0x65f, 0x0, 0xd, 0x2, 0x3, 0x6, 0x7, 0xa280, 0x2, 0x3, 0x7, 0x5, 0x179, 0x6, 0xc2, 0x7fff, 0x5, 0x6, 0x200, 0x2, 0x35, 0x3f1, 0x1, 0x0, 0x28, 0x40, 0xe, 0x8f, 0xfffffff8, 0xe8e, 0x80000001, 0x5, 0x0, 0xb, 0x7, 0x3, 0x80000000, 0x818d, 0x2, 0x2, 0x5, 0xfff, 0x81, 0x40, 0x5, 0x10000, 0x4, 0x8, 0xa, 0x0, 0x4, 0x1b8, 0xc, 0x0, 0xfff, 0xac7b, 0x80000000, 0x80000001, 0x7f, 0x40, 0x4, 0x6, 0x2, 0x7bc, 0x3, 0x5, 0x1, 0x10, 0x9, 0x10001, 0x4, 0xb2, 0x2, 0x9, 0xb, 0x4, 0x9, 0x3, 0x8, 0x1ff, 0x0, 0xd, 0x8, 0x62, 0x7, 0x6, 0xfffffff7, 0x200, 0x9, 0x5, 0x9, 0x6, 0x9, 0x1, 0x4, 0x86a, 0x4fb774cb, 0x8, 0x7cce, 0x4, 0x3, 0x2, 0x1000, 0x8], "56790e"}}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x140d, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x8091) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r4, 0x511, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}}, 0x4040011) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000cc0)="24172e868dab06206288c86ec1770f1397d7be99757eb12dd7f3cd8bd3562ac1c8317a12853c04ca537ae71d6adef69409c45ceb90cce966e43f0098ab945119b3d40e9f2621ba31f93672cf44116ec6fe3f1c80e3b9fa7b29ff1e00de823554748fced9c2e3ad151632622b1849c393d8fe4808610c2cbfd3d4b59f9e22") r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, r7, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000e80)={0x7f, 0x0, 'client0\x00', 0x80000005, "0af3bf4b3dec7552", "5b17a71ae3a869ca9a226dbe8e6a5947d4e8401b3d5903eee47707d4213b6e2f", 0x2, 0x10001}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000f40), r0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r6, {0x81}}, './file1\x00'}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r8, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x20, r3, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0xb}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004004) mq_getsetattr(r8, &(0x7f00000010c0)={0x7, 0x8, 0x81, 0x1}, &(0x7f0000001100)) ioctl$LOOP_SET_FD(r8, 0x4c00, r6) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x24, r4, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.807972766s ago: executing program 1 (id=81): syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r0, 0x5402) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mlock2(&(0x7f0000ef1000/0x1000)=nil, 0x1000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = io_uring_setup(0x6e8f, &(0x7f0000000100)={0x0, 0xfffffffd, 0x400, 0xffffffff, 0x206}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000) close_range(r2, 0xffffffffffffffff, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000140), 0xe6e, 0x101001) ioctl$KVM_GET_PIT(r6, 0xc048ae65, &(0x7f00000002c0)) r7 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r7, 0x110, 0x2, 0x0, 0x63) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$TUNGETSNDBUF(r9, 0x800454d3, &(0x7f0000000640)) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x4, 0x3, 0x3, 0x1}, {0x6, 0xa, 0x7, 0x200}, {0x2, 0xc7, 0xb, 0x6}]}) ioctl$KVM_XEN_HVM_CONFIG(r10, 0x4038ae7a, &(0x7f0000000440)={0x3ff, 0xad2, &(0x7f0000000240)="a05fd482832a400d5c097d6e60fda1f7e983775da32fcf3c751ac1681781e3deca01a317d1f03bc02dc1c255063732718c90f50e9c382d1e80190424072e91df187d6c01809e98ba4f13889ff165995245fa8b2c2bd1f53d4b2c0cd35297032f0332918b284834b08cadb4640df3f895f8fa9c2163", 0x0, 0x75}) 1.519626786s ago: executing program 1 (id=87): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="20000001000000000000000000e10000085f585259c4007f000001"], 0x20}], 0x1}, 0x0) write$binfmt_script(r4, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r6 = socket(0x2b, 0x80801, 0x1) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000080)=@buf) 1.519093578s ago: executing program 3 (id=88): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x5) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf252d000000"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4080) (async) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf252d000000"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4080) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="0900f2ff0f00000000e2ffeeb300000000000000", @ANYRES32, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000f000000000008000a"], 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="0900f2ff0f00000000e2ffeeb300000000000000", @ANYRES32, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000f000000000008000a"], 0x44}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc) (async) write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc) splice(r7, 0x0, r9, 0x0, 0x4ffe2, 0x0) (async) splice(r7, 0x0, r9, 0x0, 0x4ffe2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') 1.320421402s ago: executing program 3 (id=90): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x30, 0xffffffffffffffff, 0xffff5000) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0xde}}}]}, 0x24}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x7, 0xb, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 1.320169534s ago: executing program 1 (id=91): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf09000000000000550901"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.230465249s ago: executing program 3 (id=92): socket$nl_generic(0x10, 0x3, 0x10) getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendto$inet(r0, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f0000000240)='./file0\x00', 0x6) writev(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 1.22812416s ago: executing program 3 (id=93): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = fanotify_init(0x8, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fanotify_mark(r1, 0x41, 0x8000038, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0x0, 0x20000000}, 0x54) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = fanotify_init(0x44, 0x0) write$P9_RSYMLINK(r4, &(0x7f0000000480)={0x14}, 0x14) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @remote}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delneigh={0x24, 0x1d, 0x20, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, r5, 0x40, 0x48, 0x9}, [@NDA_VNI={0x8, 0x7, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004084}, 0x404c004) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.130255213s ago: executing program 3 (id=94): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a0001000000000000000000022000000000000000000000080001001414ac14"], 0x24}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000010140)=0x1) 970.37969ms ago: executing program 3 (id=95): r0 = getpid() r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=0x60) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000c040003002b800800030033"], 0x34}}, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) write$sequencer(r6, &(0x7f0000002100)=ANY=[@ANYBLOB="04000000000000008108"], 0x10) connect$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x24) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x2) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r5, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) syz_usb_connect(0x0, 0x41, 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x14, r7, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x4}, 0x38) r11 = socket$inet_icmp(0x2, 0x2, 0x1) close(r11) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r12, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) 358.579182ms ago: executing program 1 (id=102): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock(&(0x7f000070a000/0x3000)=nil, 0x3000) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x3161, 0x0) 289.704832ms ago: executing program 2 (id=103): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0) sendmsg$rds(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)=""/50, 0x32}, {&(0x7f0000000340)=""/214, 0xd6}, {&(0x7f0000000580)=""/196, 0xc4}, {&(0x7f0000000440)=""/9, 0x9}], 0x4, 0x0, 0x0, 0x8010}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r0}, 0x10) (async) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x2, 0x3}, 0x11, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffff89, &(0x7f0000000b40)}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000200)=""/144, 0x2b, 0x90, 0x1, 0x0, 0x0, @void, @value}, 0x20) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0b0000000600000004000000a703000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000010000400000230000000000000000000000e1ffffff0000"], 0x48) (async) landlock_restrict_self(r2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = getpgrp(0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000100)={0x0, r6}) sendmsg$unix(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b5", 0x1}], 0x1}, 0x4041) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]}) 289.109297ms ago: executing program 2 (id=104): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000081) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f00000001c0)=0x3, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) writev(r0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001380), r2) socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x29, &(0x7f0000001400)=""/95, &(0x7f0000001480)=0x5f) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001cc0)=@nat={'nat\x00', 0x19, 0x4, 0x632, [0x20001500, 0x0, 0x0, 0x20001864, 0x20001894], 0x0, 0x0, &(0x7f0000001500)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x3, 0x64, 0x8864, 'geneve1\x00', 'geneve0\x00', 'gretap0\x00', 'wg1\x00', @random="cb43ebe8384c", [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x156, 0x1a6, 0x1de, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0xff, 0xff], [0x0, 0x0, 0x0, 0xffffff00], 0x0, 0xc, 0x21, 0x44, 0x4e24, 0x4e21, 0x4e23, 0x4e21}}}, @physdev={{'physdev\x00', 0x0, 0x48}, {{'veth1_to_hsr\x00', {}, 'veth1_to_bond\x00', {}, 0x4, 0xc}}}], [@common=@log={'log\x00', 0x28, {{0x40, "4700fde0adc863e431a038fc93fb38fb624abe854e72580b9e625f27b3ee", 0x2}}}], @arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x11, 0x1, 0x892f, 'bond_slave_1\x00', 'pim6reg\x00', 'macsec0\x00', 'veth1_to_batadv\x00', @link_local, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @random="a2b215b47461", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x1, [{0x11, 0x62, 0x200, 'veth0_to_team\x00', 'bond_slave_1\x00', 'wlan1\x00', 'erspan0\x00', @multicast, [0xff, 0xff, 0xff, 0xff, 0xff], @random="3e55ce143f77", [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x2e6, 0x2e6, 0x31e, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0x3c, [{0x40, 0xc, 0x1}, {0x0, 0x0, 0xc, 0xfff}, {0x8001, 0xe5, 0x2, 0x9}, {0x0, 0x1, 0x6, 0x2}, {0x7, 0x9, 0xfa, 0x3}, {0x0, 0xb0, 0x3}, {0x0, 0x5, 0x6, 0x1}, {0x2, 0xa, 0x9, 0x7f}, {0xfffe, 0x2, 0x4, 0xffffffff}, {0xd2, 0xc3, 0x4, 0xc5f8}, {0x5, 0xb, 0x9b, 0x6}, {0x9, 0x2, 0x4, 0x4}, {0x9, 0x80, 0x9, 0x5}, {0x45e, 0x5, 0x4, 0x5}, {0x2434, 0xfc, 0x8}, {0x9, 0x6, 0x4a, 0x6}, {0x7, 0xf7, 0xae, 0x9}, {0x1ff, 0xf9, 0x81, 0x3}, {0xf, 0x7, 0x3, 0xfffffffd}, {0x8, 0x5, 0x9, 0x5}, {0xfffa, 0x3d, 0x5, 0x3}, {0x80, 0x81, 0x81, 0x5}, {0x95c0, 0x2, 0xdb, 0x7}, {0x7, 0x6, 0x7, 0x1}, {0x6, 0x4}, {0x7f, 0x5, 0x4, 0x40}, {0x3, 0x5, 0x1c}, {0x400, 0x8a, 0x1, 0x6b3}, {0x2, 0x0, 0xb1, 0x5}, {0xfff, 0x4, 0x3, 0x3}, {0x5, 0x33, 0x8}, {0x96b, 0x81, 0x8, 0x7}, {0x1c34, 0x22, 0xb6, 0x6ec8}, {0x1ff, 0x40, 0x1, 0x9}, {0x5, 0x7, 0x6, 0x3}, {0xffff, 0xb, 0x1, 0xd6}, {0x2, 0xb, 0x84}, {0x8, 0x7, 0x80, 0x1}, {0x6aa8, 0xd, 0x2, 0x6}, {0x2a1, 0x6, 0x1, 0x23}, {0xff, 0x4, 0x5, 0x2}, {0xc242, 0x7a, 0x9, 0x6}, {0x1, 0xf, 0x7f, 0x1}, {0x40, 0x3e, 0x9, 0x2}, {0x81, 0x3, 0x1, 0x4}, {0x46a3, 0x1, 0x3, 0xfffffffd}, {0x2, 0x8, 0x6, 0x2424}, {0x9, 0x9, 0x6, 0xf}, {0xff, 0x6, 0x3, 0x80000000}, {0x6, 0x0, 0x2, 0x7}, {0x6, 0xf3, 0x7, 0x7}, {0x6, 0xf1, 0xf6, 0x2}, {0x2, 0xb9, 0x81, 0x21}, {0x70, 0xd7, 0xe7, 0xf8a}, {0x4, 0x0, 0x7d, 0x4}, {0x7, 0x7, 0x7, 0x4}, {0x7, 0x26, 0x7, 0x1}, {0x9, 0x1, 0x2}, {0x3, 0x80, 0x9, 0x2}, {0xc19e, 0x81, 0x1, 0x4}, {0xf630, 0xf, 0x5, 0x2}, {0x40, 0x1, 0x6, 0x8}, {0xffff, 0x56, 0x80, 0xfffffffe}, {0xa4f9, 0x7e, 0xa, 0x35}], {0x7}}}}, @statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x0, 0xcb, 0x5d7, 0x44, {0x4}}}}], [], @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, 0xffffffffffffffff}}}}]}]}, 0x6aa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x14, r5, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) sendmsg$inet6(r0, 0x0, 0x10000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, 0x0, &(0x7f0000003600)) sendmsg$NLBL_MGMT_C_ADDDEF(r2, 0x0, 0x4008000) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0x63a7, &(0x7f0000000100)={0x0, 0xa5ce, 0x100, 0x0, 0x2ae, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000280)) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000003740)=0x2, 0x4) socketpair(0x5, 0x1, 0x2, &(0x7f00000037c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000003800)={@remote, @remote}, &(0x7f0000003840)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000003900)={'syztnl0\x00', 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x800448d4, &(0x7f0000000040)="9229255160c90000000000224b2c00") 288.859226ms ago: executing program 1 (id=105): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f000048e000/0x1000)=nil, 0x1000, 0x1, 0x110, r0, 0xd5842000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000f40)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc00c6211, 0x0) quotactl$Q_SETINFO(0x0, &(0x7f0000004240)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}}, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x82040, 0x0) io_uring_setup(0x47ea, &(0x7f0000000140)={0x0, 0x53cf, 0x0, 0x0, 0x290, 0x0, r6}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket(0x2b, 0x80801, 0x1) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000000080)=@buf) 220.24481ms ago: executing program 2 (id=106): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004800020070636263286663727970742900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00170000004e2400000000ffffffff00"/268], 0x154}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) (async) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000200)={0x100, r4}, 0x0) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000280)={0x100, r5}, 0x0) (async) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x480, 0x2e8, 0x5002004a, 0x6, 0x2e8, 0x3, 0x3e8, 0x3c8, 0x3c8, 0x3e8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe3b, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x448, 0x0, 0x200, 0x0, 0x200, 0x2e8, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'nicvf0\x00', 'veth0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) (async) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a00034011080045e3d7b92e000000000190780a010102ac1414aa03c59078120002282500000000000000000000007f00000100000000"], 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r8 = dup(r7) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x7, 0x2e, 0x0, 0x0}) (async) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x46020000) (async) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r11, &(0x7f00000007c0)=ANY=[@ANYBLOB="320200000200000005f1000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6400767b65746f6f7e05"], 0x232) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000540)='vcan0\x00', &(0x7f0000000580)='./file0\x00', r8) 219.786773ms ago: executing program 2 (id=107): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) mount$fuse(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f0000002100), 0x1020, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRES64=r3, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYRES8=r5, @ANYRESDEC=r4]) r6 = getuid() mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380), 0x310014, &(0x7f0000000780)={'trans=virtio,', {[{@access_user}, {@version_9p2000}, {@msize={'msize', 0x3d, 0x4}}, {@posixacl}, {@cache_loose}, {@version_u}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@version_9p2000}], [{@obj_role={'obj_role', 0x3d, '\xb3'}}, {@pcr={'pcr', 0x3d, 0x5}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r6}}, {@smackfsdef}, {@obj_user={'obj_user', 0x3d, 'privport'}}]}}) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r7, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000180)='./file1\x00', 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000280)='./file1\x00') bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x20) syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x20080) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r8, 0x8b1a, &(0x7f0000000040)) 145.692143ms ago: executing program 2 (id=108): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) mount$fuse(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f0000002100), 0x1020, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRES64=r3, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYRES8=r5, @ANYRESDEC=r4]) r6 = getuid() mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380), 0x310014, &(0x7f0000000780)={'trans=virtio,', {[{@access_user}, {@version_9p2000}, {@msize={'msize', 0x3d, 0x4}}, {@posixacl}, {@cache_loose}, {@version_u}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@version_9p2000}], [{@obj_role={'obj_role', 0x3d, '\xb3'}}, {@pcr={'pcr', 0x3d, 0x5}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r6}}, {@smackfsdef}, {@obj_user={'obj_user', 0x3d, 'privport'}}]}}) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r7, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000180)='./file1\x00', 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000280)='./file1\x00') bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x20) syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x20080) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r8, 0x8b1a, &(0x7f0000000040)) 132.55026ms ago: executing program 2 (id=109): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) syz_emit_ethernet(0xbe, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x0, 0xc000) 0s ago: executing program 1 (id=110): syz_emit_ethernet(0x86, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @remote}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x4, "61c8910ed5a55bcbdcc0ef85f7148b15b0954b8c998318e23dec6c359f183362", "905bdd770cbc86c04e9c153a94b0f96b", {"f97a752c9b1decca89f24fdcedfd152c", "0fadb634284b5e08ba5fd9596423f298"}}}}}}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0x6) socket$rxrpc(0x21, 0x2, 0x9ae94a14674d08cc) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000004000)={0xf, {"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", 0x1000}}, 0x1006) r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f00000001c0)=@dstopts={0x89, 0x2b, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x48, {0x3, 0x10, 0x7, 0x7, [0x10001, 0x401, 0xffffffffffffffff, 0x10000, 0xed3, 0xd8, 0x7, 0x7fff]}}, @jumbo, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x14}}, @generic={0x8, 0xc, "40dfbcd4c33f1c28a4ea2911"}, @generic={0xc, 0xbd, "526690794fd08e42bdcd5c558553e9c494495d4aeb936bf22e7a1a966a7a6edd3ec7b90592855352d37276bc1a811ac3961b1660bb375c518dfd221cb434fafabe653b9c75634afedc8d7f0c42c54879507cb042ac09e5bf0392568f603621dfb8968305925a445c86de644dcd89ad3f682d67877b72027fdb332295062429cbb1fa8b9ca90e29cbbc6adae09b28c2d5561b254f2d3c031397cd90a0e6a70acbaffe37843515ebaec5264ebf029b545a03657a521c73fcac3574f814ed"}, @hao={0xc9, 0x10, @loopback}]}, 0x168) fsopen(&(0x7f0000000000)='coda\x00', 0x0) kernel console output (not intermixed with test programs): [ 38.228611][ T39] audit: type=1400 audit(1730902505.442:82): avc: denied { siginh } for pid=5922 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.808963][ T39] audit: type=1400 audit(1730902506.042:83): avc: denied { read } for pid=5344 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.817035][ T39] audit: type=1400 audit(1730902506.042:84): avc: denied { append } for pid=5344 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.824489][ T39] audit: type=1400 audit(1730902506.042:85): avc: denied { open } for pid=5344 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.832413][ T39] audit: type=1400 audit(1730902506.042:86): avc: denied { getattr } for pid=5344 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:28997' (ED25519) to the list of known hosts. [ 38.977882][ T39] audit: type=1400 audit(1730902506.212:87): avc: denied { name_bind } for pid=5928 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.664044][ T5930] cgroup: Unknown subsys name 'net' [ 40.771822][ T5930] cgroup: Unknown subsys name 'cpuset' [ 40.776106][ T5930] cgroup: Unknown subsys name 'rlimit' [ 40.915686][ T5936] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 41.533405][ T5930] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.340102][ T39] kauditd_printk_skb: 18 callbacks suppressed [ 43.340112][ T39] audit: type=1400 audit(1730902510.582:106): avc: denied { create } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.346854][ T39] audit: type=1400 audit(1730902510.582:107): avc: denied { read write } for pid=5942 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.354610][ T39] audit: type=1400 audit(1730902510.582:108): avc: denied { open } for pid=5942 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.364984][ T39] audit: type=1400 audit(1730902510.582:109): avc: denied { ioctl } for pid=5942 comm="syz-executor" path="socket:[6521]" dev="sockfs" ino=6521 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.369758][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 43.388124][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 43.390504][ T5954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 43.394008][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 43.397461][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 43.399620][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 43.400509][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 43.402568][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 43.405385][ T5953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 43.406156][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 43.407966][ T5953] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 43.410603][ T5956] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 43.412179][ T5953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 43.414634][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 43.414865][ T5955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 43.416118][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 43.424055][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 43.426035][ T5957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 43.426677][ T39] audit: type=1400 audit(1730902510.662:110): avc: denied { read } for pid=5942 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.432358][ T5953] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 43.434673][ T39] audit: type=1400 audit(1730902510.662:111): avc: denied { open } for pid=5942 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.434910][ T5957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 43.435241][ T5957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 43.435467][ T5957] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 43.435712][ T5957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 43.438241][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 43.445860][ T39] audit: type=1400 audit(1730902510.662:112): avc: denied { mounton } for pid=5942 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 43.580314][ T39] audit: type=1400 audit(1730902510.822:113): avc: denied { module_request } for pid=5942 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 43.627164][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 43.671250][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 43.678674][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 43.718925][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 43.730619][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.733107][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.735135][ T5942] bridge_slave_0: entered allmulticast mode [ 43.737252][ T5942] bridge_slave_0: entered promiscuous mode [ 43.763411][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.765334][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.767126][ T5942] bridge_slave_1: entered allmulticast mode [ 43.769244][ T5942] bridge_slave_1: entered promiscuous mode [ 43.781360][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.783518][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.785440][ T5944] bridge_slave_0: entered allmulticast mode [ 43.787662][ T5944] bridge_slave_0: entered promiscuous mode [ 43.827730][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.829770][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.831732][ T5944] bridge_slave_1: entered allmulticast mode [ 43.833746][ T5944] bridge_slave_1: entered promiscuous mode [ 43.914519][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.916499][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.920126][ T5951] bridge_slave_0: entered allmulticast mode [ 43.922315][ T5951] bridge_slave_0: entered promiscuous mode [ 43.925973][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.937067][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.939978][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.941983][ T5943] bridge_slave_0: entered allmulticast mode [ 43.944099][ T5943] bridge_slave_0: entered promiscuous mode [ 43.947172][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.949878][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.952282][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.954258][ T5951] bridge_slave_1: entered allmulticast mode [ 43.956474][ T5951] bridge_slave_1: entered promiscuous mode [ 43.968545][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.980159][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.982009][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.983865][ T5943] bridge_slave_1: entered allmulticast mode [ 43.985846][ T5943] bridge_slave_1: entered promiscuous mode [ 43.998356][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.019443][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.033525][ T5942] team0: Port device team_slave_0 added [ 44.047740][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.063249][ T5944] team0: Port device team_slave_0 added [ 44.066653][ T5944] team0: Port device team_slave_1 added [ 44.078300][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.093144][ T5942] team0: Port device team_slave_1 added [ 44.110751][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.122818][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.124681][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.132316][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.160271][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.162137][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.170009][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.176478][ T5951] team0: Port device team_slave_0 added [ 44.178469][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.180357][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.186890][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.200348][ T5943] team0: Port device team_slave_0 added [ 44.204100][ T5943] team0: Port device team_slave_1 added [ 44.207237][ T5951] team0: Port device team_slave_1 added [ 44.210070][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.212048][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.218662][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.270939][ T5944] hsr_slave_0: entered promiscuous mode [ 44.272912][ T5944] hsr_slave_1: entered promiscuous mode [ 44.275701][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.277496][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.284895][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.313176][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.315018][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.322385][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.328672][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.331352][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.338018][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.343020][ T5942] hsr_slave_0: entered promiscuous mode [ 44.344954][ T5942] hsr_slave_1: entered promiscuous mode [ 44.347372][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.349577][ T5942] Cannot create hsr debugfs directory [ 44.362450][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.364951][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.372042][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.411605][ T5943] hsr_slave_0: entered promiscuous mode [ 44.413831][ T5943] hsr_slave_1: entered promiscuous mode [ 44.415740][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.417997][ T5943] Cannot create hsr debugfs directory [ 44.451498][ T5951] hsr_slave_0: entered promiscuous mode [ 44.453521][ T5951] hsr_slave_1: entered promiscuous mode [ 44.455239][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.457152][ T5951] Cannot create hsr debugfs directory [ 44.622256][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.627888][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.631991][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.635376][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.680248][ T5942] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 44.687960][ T5942] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 44.692157][ T5942] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 44.703017][ T5942] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 44.722085][ T5943] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 44.726965][ T5943] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 44.733485][ T5943] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 44.740732][ T5943] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 44.780455][ T5951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 44.783734][ T5951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 44.789547][ T5951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 44.793230][ T5951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 44.807037][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.821222][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.837688][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.841941][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.844210][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.854143][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.856053][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.869545][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.882693][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.884663][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.889334][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.891245][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.923643][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.932566][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.944084][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.950306][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.952417][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.966580][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.968625][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.973443][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.973684][ T39] audit: type=1400 audit(1730902512.212:114): avc: denied { sys_module } for pid=5944 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 44.987671][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.989683][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.012435][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.014336][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.048702][ T5951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.057571][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.067972][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.086972][ T5944] veth0_vlan: entered promiscuous mode [ 45.098521][ T5944] veth1_vlan: entered promiscuous mode [ 45.111788][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.125208][ T5942] veth0_vlan: entered promiscuous mode [ 45.128901][ T5944] veth0_macvtap: entered promiscuous mode [ 45.134489][ T5944] veth1_macvtap: entered promiscuous mode [ 45.142247][ T5942] veth1_vlan: entered promiscuous mode [ 45.147839][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.157048][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.162029][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.170826][ T5944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.173365][ T5944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.175991][ T5944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.178232][ T5944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.195160][ T5942] veth0_macvtap: entered promiscuous mode [ 45.207849][ T5943] veth0_vlan: entered promiscuous mode [ 45.215238][ T5942] veth1_macvtap: entered promiscuous mode [ 45.224791][ T5943] veth1_vlan: entered promiscuous mode [ 45.237266][ T5951] veth0_vlan: entered promiscuous mode [ 45.253522][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.256391][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.260248][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.267935][ T5951] veth1_vlan: entered promiscuous mode [ 45.268938][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.272248][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.280507][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.283819][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.287206][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.303911][ T5942] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.304024][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.306325][ T5942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.308876][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.312026][ T5942] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.317100][ T5942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.329712][ T5943] veth0_macvtap: entered promiscuous mode [ 45.335221][ T39] audit: type=1400 audit(1730902512.572:115): avc: denied { mount } for pid=5944 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 45.345241][ T5943] veth1_macvtap: entered promiscuous mode [ 45.354338][ T5951] veth0_macvtap: entered promiscuous mode [ 45.358276][ T5951] veth1_macvtap: entered promiscuous mode [ 45.363374][ T5944] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 45.381610][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.385564][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.388033][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.391500][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.395905][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.407430][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.411198][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.413954][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.417003][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.422047][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.430812][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.432932][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.438171][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.442583][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.445869][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.449430][ T5950] Bluetooth: hci3: command tx timeout [ 45.449441][ T5953] Bluetooth: hci2: command tx timeout [ 45.449827][ T5953] Bluetooth: hci0: command tx timeout [ 45.456057][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.459879][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.463441][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.468055][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.474005][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.477631][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.481026][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.484887][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.488389][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.492541][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.496223][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.503147][ T5943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.505918][ T5943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.508973][ T5943] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.511343][ T5943] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.516938][ T5951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.520626][ T5951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.523270][ T5951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.526021][ T5951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.529934][ T5953] Bluetooth: hci1: command tx timeout [ 45.539551][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.543386][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.597577][ T6012] overlay: filesystem on ./bus not supported as upperdir [ 45.607402][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.610748][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.643730][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.645859][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.669119][ T6015] process 'syz.3.4' launched './file1' with NULL argv: empty string added [ 45.669248][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.673907][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.702694][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.704791][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.810756][ T6022] Bluetooth: MGMT ver 1.23 [ 45.975908][ T6032] gretap1: entered allmulticast mode [ 45.986535][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 46.162037][ T6040] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 46.166055][ T6040] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2'. [ 46.190926][ T6036] warning: `syz.2.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 46.515701][ T6076] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 46.526859][ T6076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.534222][ T6076] team0: Port device bond0 added [ 46.537332][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 46.757385][ T6083] kvm: kvm [6081]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 46.763499][ T6083] kvm: kvm [6081]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 46.772463][ T6083] kvm: kvm [6081]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 46.787535][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 46.966171][ T6111] gretap1: entered allmulticast mode [ 46.970752][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 46.979548][ T6113] No control pipe specified [ 47.063394][ T6117] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.32'. [ 47.166294][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'. [ 47.173211][ T6132] nbd: socks must be embedded in a SOCK_ITEM attr [ 47.220046][ T6142] netlink: 'syz.2.37': attribute type 8 has an invalid length. [ 47.222817][ T6142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 47.227354][ T6143] netlink: 'syz.2.37': attribute type 8 has an invalid length. [ 47.229837][ T6143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 47.259625][ T6145] gretap1: entered allmulticast mode [ 47.263931][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 47.433386][ T6160] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.454120][ T6162] overlayfs: missing 'lowerdir' [ 47.508050][ T6167] netlink: zone id is out of range [ 47.511826][ T6167] netlink: set zone limit has 4 unknown bytes [ 47.529820][ T5946] Bluetooth: hci2: command tx timeout [ 47.531326][ T5953] Bluetooth: hci3: command tx timeout [ 47.531744][ T5946] Bluetooth: hci0: command tx timeout [ 47.583808][ T6172] bridge_slave_0: default FDB implementation only supports local addresses [ 47.626855][ T6174] gretap1: entered allmulticast mode [ 47.633561][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.48'. [ 47.808313][ T6199] sctp: [Deprecated]: syz.3.56 (pid 6199) Use of int in max_burst socket option. [ 47.808313][ T6199] Use struct sctp_assoc_value instead [ 48.091598][ T6227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6227 comm=syz.3.67 [ 48.290059][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 48.428046][ T39] kauditd_printk_skb: 134 callbacks suppressed [ 48.428057][ T39] audit: type=1400 audit(1730902515.662:250): avc: denied { create } for pid=6253 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.437594][ T39] audit: type=1400 audit(1730902515.672:251): avc: denied { setopt } for pid=6253 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.443398][ T39] audit: type=1400 audit(1730902515.672:252): avc: denied { bind } for pid=6253 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.449391][ T39] audit: type=1400 audit(1730902515.672:253): avc: denied { node_bind } for pid=6253 comm="syz.1.77" saddr=fe88::2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 48.454742][ T39] audit: type=1400 audit(1730902515.672:254): avc: denied { name_bind } for pid=6253 comm="syz.1.77" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 48.471659][ T39] audit: type=1400 audit(1730902515.672:255): avc: denied { write } for pid=6253 comm="syz.1.77" name="icmp6" dev="proc" ino=4026533421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 48.537005][ T39] audit: type=1400 audit(1730902515.772:256): avc: denied { mounton } for pid=6262 comm="syz.1.80" path="/24/file0/bus" dev="hugetlbfs" ino=12529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 48.537097][ T6263] overlayfs: missing 'workdir' [ 48.574233][ T39] audit: type=1326 audit(1730902515.812:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6264 comm="syz.1.81" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd297e719 code=0x7ffc0000 [ 48.580174][ T39] audit: type=1326 audit(1730902515.812:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6264 comm="syz.1.81" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd297e719 code=0x7ffc0000 [ 48.586131][ T39] audit: type=1326 audit(1730902515.812:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6264 comm="syz.1.81" exe="/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f8fd297e719 code=0x7ffc0000 [ 48.752961][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 48.979074][ T6289] block nbd3: Device being setup by another task [ 48.983332][ T5953] block nbd3: Wrong magic (0x0) [ 49.047782][ T6292] block nbd3: shutting down sockets [ 49.170099][ T6307] netlink: 'syz.3.92': attribute type 4 has an invalid length. [ 49.217193][ T6299] syz.2.89: attempt to access beyond end of device [ 49.217193][ T6299] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 49.222376][ T6299] syz.2.89: attempt to access beyond end of device [ 49.222376][ T6299] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 49.225690][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 49.228109][ T6299] syz.2.89: attempt to access beyond end of device [ 49.228109][ T6299] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 49.232999][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 49.237122][ T6299] syz.2.89: attempt to access beyond end of device [ 49.237122][ T6299] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 49.239778][ T6297] nbd2: detected capacity change from 0 to 131072 [ 49.245083][ T6299] block nbd2: Send control failed (result -89) [ 49.247157][ T6299] block nbd2: Request send failed, requeueing [ 49.251923][ T5953] block nbd2: Receive control failed (result -32) [ 49.252631][ T5947] block nbd2: Dead connection, failed to find a fallback [ 49.257859][ T5947] block nbd2: shutting down sockets [ 49.260711][ T122] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.263603][ T5947] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.265552][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 49.267688][ T5947] Buffer I/O error on dev nbd2, logical block 0, async page read [ 49.271093][ T6299] I/O error, dev nbd2, sector 131068 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.277663][ T5947] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.277885][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=32767, location=32767 [ 49.281117][ T5947] Buffer I/O error on dev nbd2, logical block 1, async page read [ 49.281234][ T5947] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.283929][ T6299] I/O error, dev nbd2, sector 130044 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.286629][ T5947] Buffer I/O error on dev nbd2, logical block 0, async page read [ 49.289602][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=32511, location=32511 [ 49.293485][ T5947] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.295207][ T6299] I/O error, dev nbd2, sector 131064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.299346][ T5947] Buffer I/O error on dev nbd2, logical block 1, async page read [ 49.300966][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=32766, location=32766 [ 49.303376][ T5947] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.305268][ T6299] I/O error, dev nbd2, sector 130040 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.307812][ T5947] Buffer I/O error on dev nbd2, logical block 0, async page read [ 49.310278][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=32510, location=32510 [ 49.310397][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=32765, location=32765 [ 49.310466][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=32509, location=32509 [ 49.313161][ T5947] Buffer I/O error on dev nbd2, logical block 1, async page read [ 49.315649][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=32617, location=32617 [ 49.317875][ T5947] Buffer I/O error on dev nbd2, logical block 0, async page read [ 49.320083][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=32361, location=32361 [ 49.322564][ T5947] Buffer I/O error on dev nbd2, logical block 1, async page read [ 49.324788][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=32615, location=32615 [ 49.327258][ T5947] Buffer I/O error on dev nbd2, logical block 0, async page read [ 49.329304][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=32359, location=32359 [ 49.332160][ T5947] Buffer I/O error on dev nbd2, logical block 1, async page read [ 49.334115][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 49.336925][ T5947] ldm_validate_partition_table(): Disk read failed. [ 49.339415][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 49.342315][ T5947] Dev nbd2: unable to read RDB block 0 [ 49.344655][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16383, location=16383 [ 49.346415][ T5947] nbd2: unable to read partition table [ 49.347963][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16127, location=16127 [ 49.358012][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16382, location=16382 [ 49.359430][ T5947] ldm_validate_partition_table(): Disk read failed. [ 49.360617][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16126, location=16126 [ 49.362338][ T5947] Dev nbd2: unable to read RDB block 0 [ 49.364689][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16381, location=16381 [ 49.366314][ T5947] nbd2: unable to read partition table [ 49.368586][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16125, location=16125 [ 49.373295][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16233, location=16233 [ 49.375933][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=15977, location=15977 [ 49.378404][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16231, location=16231 [ 49.381083][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=15975, location=15975 [ 49.383602][ T6299] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 49.385954][ T6299] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 49.430542][ T6317] 3: renamed from bridge_slave_1 (while UP) [ 49.436202][ T6317] bridge0: port 2(3) entered disabled state [ 49.518381][ T6321] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.529870][ T5953] Bluetooth: hci1: command tx timeout [ 49.609297][ T5950] Bluetooth: hci0: command tx timeout [ 49.610059][ T5946] Bluetooth: hci2: command tx timeout [ 49.612203][ T5953] Bluetooth: hci3: command tx timeout [ 49.621863][ T6321] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.639195][ T6320] netlink: 'syz.2.96': attribute type 4 has an invalid length. [ 49.700980][ T6321] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.770615][ T6321] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.898091][ T6321] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.904778][ T6321] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.909800][ T6321] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.915469][ T6321] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.054222][ T6340] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_virt_wifi, syncid = 0, id = 0 [ 50.054403][ T6339] IPVS: stopping backup sync thread 6340 ... [ 50.127723][ T6351] binder: 6350:6351 ioctl c00c6211 0 returned -14 [ 50.423768][ T68] ------------[ cut here ]------------ [ 50.425372][ T68] WARNING: CPU: 2 PID: 68 at net/mac80211/offchannel.c:404 ieee80211_start_next_roc+0x24c/0x2c0 [ 50.429355][ T68] Modules linked in: [ 50.429367][ T68] CPU: 2 UID: 0 PID: 68 Comm: kworker/u32:3 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 50.429380][ T68] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.429388][ T68] Workqueue: events_unbound cfg80211_wiphy_work [ 50.429403][ T68] RIP: 0010:ieee80211_start_next_roc+0x24c/0x2c0 [ 50.429417][ T68] Code: 7b 40 e8 67 bf dc ff 48 83 c4 10 5b 5d e9 8c d5 fe f6 e8 87 d5 fe f6 48 89 df e8 0f 60 ff ff e9 40 ff ff ff e8 75 d5 fe f6 90 <0f> 0b 90 e9 32 ff ff ff 48 c7 c7 18 8c 5f 90 e8 40 5f 60 f7 e9 db [ 50.429427][ T68] RSP: 0018:ffffc90000d57ad0 EFLAGS: 00010293 [ 50.429436][ T68] RAX: 0000000000000000 RBX: ffff88802b630e40 RCX: ffffffff8a8ea4a6 [ 50.429444][ T68] RDX: ffff888020a8c880 RSI: ffffffff8a8ea5db RDI: 0000000000000001 [ 50.429451][ T68] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 50.429457][ T68] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 50.429463][ T68] R13: ffff88802b6328c0 R14: ffff88802b630e40 R15: dffffc0000000000 [ 50.429470][ T68] FS: 0000000000000000(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 [ 50.429491][ T68] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.429501][ T68] CR2: 00007f857e362220 CR3: 000000002f4f4000 CR4: 0000000000352ef0 [ 50.429508][ T68] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.429514][ T68] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.429521][ T68] Call Trace: [ 50.429525][ T68] [ 50.429530][ T68] ? __warn+0xea/0x3d0 [ 50.429545][ T68] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 50.429558][ T68] ? report_bug+0x3c0/0x580 [ 50.429575][ T68] ? handle_bug+0x54/0xa0 [ 50.429586][ T68] ? exc_invalid_op+0x17/0x50 [ 50.429597][ T68] ? asm_exc_invalid_op+0x1a/0x20 [ 50.429614][ T68] ? ieee80211_start_next_roc+0x116/0x2c0 [ 50.429625][ T68] ? ieee80211_start_next_roc+0x24b/0x2c0 [ 50.429637][ T68] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 50.429650][ T68] __ieee80211_scan_completed+0x4fe/0xe50 [ 50.429663][ T68] ieee80211_scan_work+0x440/0x2080 [ 50.429676][ T68] ? cfg80211_wiphy_work+0x3a3/0x550 [ 50.429687][ T68] ? __pfx_lock_release+0x10/0x10 [ 50.429698][ T68] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 50.429709][ T68] ? mark_held_locks+0x9f/0xe0 [ 50.429719][ T68] ? rcu_is_watching+0x12/0xc0 [ 50.429732][ T68] cfg80211_wiphy_work+0x3d9/0x550 [ 50.429744][ T68] process_one_work+0x9c5/0x1ba0 [ 50.429759][ T68] ? __pfx_flush_memcg_stats_dwork+0x10/0x10 [ 50.429773][ T68] ? __pfx_process_one_work+0x10/0x10 [ 50.429787][ T68] ? assign_work+0x1a0/0x250 [ 50.429803][ T68] worker_thread+0x6c8/0xf00 [ 50.429818][ T68] ? __pfx_worker_thread+0x10/0x10 [ 50.429828][ T68] kthread+0x2c1/0x3a0 [ 50.429839][ T68] ? _raw_spin_unlock_irq+0x23/0x50 [ 50.429852][ T68] ? __pfx_kthread+0x10/0x10 [ 50.429865][ T68] ret_from_fork+0x45/0x80 [ 50.429874][ T68] ? __pfx_kthread+0x10/0x10 [ 50.429886][ T68] ret_from_fork_asm+0x1a/0x30 [ 50.429906][ T68] [ 50.429911][ T68] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 50.429916][ T68] CPU: 2 UID: 0 PID: 68 Comm: kworker/u32:3 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 50.429927][ T68] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.429933][ T68] Workqueue: events_unbound cfg80211_wiphy_work [ 50.429942][ T68] Call Trace: [ 50.429945][ T68] [ 50.429949][ T68] dump_stack_lvl+0x3d/0x1f0 [ 50.429959][ T68] panic+0x71d/0x800 [ 50.429972][ T68] ? __pfx_panic+0x10/0x10 [ 50.429984][ T68] ? show_trace_log_lvl+0x29d/0x3d0 [ 50.429997][ T68] ? check_panic_on_warn+0x1f/0xb0 [ 50.430027][ T68] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 50.430040][ T68] check_panic_on_warn+0xab/0xb0 [ 50.430054][ T68] __warn+0xf6/0x3d0 [ 50.430067][ T68] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 50.430079][ T68] report_bug+0x3c0/0x580 [ 50.430094][ T68] handle_bug+0x54/0xa0 [ 50.430103][ T68] exc_invalid_op+0x17/0x50 [ 50.430112][ T68] asm_exc_invalid_op+0x1a/0x20 [ 50.430125][ T68] RIP: 0010:ieee80211_start_next_roc+0x24c/0x2c0 [ 50.430136][ T68] Code: 7b 40 e8 67 bf dc ff 48 83 c4 10 5b 5d e9 8c d5 fe f6 e8 87 d5 fe f6 48 89 df e8 0f 60 ff ff e9 40 ff ff ff e8 75 d5 fe f6 90 <0f> 0b 90 e9 32 ff ff ff 48 c7 c7 18 8c 5f 90 e8 40 5f 60 f7 e9 db [ 50.430145][ T68] RSP: 0018:ffffc90000d57ad0 EFLAGS: 00010293 [ 50.430153][ T68] RAX: 0000000000000000 RBX: ffff88802b630e40 RCX: ffffffff8a8ea4a6 [ 50.430158][ T68] RDX: ffff888020a8c880 RSI: ffffffff8a8ea5db RDI: 0000000000000001 [ 50.430165][ T68] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 50.430170][ T68] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 50.430176][ T68] R13: ffff88802b6328c0 R14: ffff88802b630e40 R15: dffffc0000000000 [ 50.430185][ T68] ? ieee80211_start_next_roc+0x116/0x2c0 [ 50.430196][ T68] ? ieee80211_start_next_roc+0x24b/0x2c0 [ 50.430209][ T68] __ieee80211_scan_completed+0x4fe/0xe50 [ 50.430221][ T68] ieee80211_scan_work+0x440/0x2080 [ 50.430234][ T68] ? cfg80211_wiphy_work+0x3a3/0x550 [ 50.430243][ T68] ? __pfx_lock_release+0x10/0x10 [ 50.430253][ T68] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 50.430263][ T68] ? mark_held_locks+0x9f/0xe0 [ 50.430276][ T68] ? rcu_is_watching+0x12/0xc0 [ 50.430288][ T68] cfg80211_wiphy_work+0x3d9/0x550 [ 50.430299][ T68] process_one_work+0x9c5/0x1ba0 [ 50.430312][ T68] ? __pfx_flush_memcg_stats_dwork+0x10/0x10 [ 50.430325][ T68] ? __pfx_process_one_work+0x10/0x10 [ 50.430337][ T68] ? assign_work+0x1a0/0x250 [ 50.430352][ T68] worker_thread+0x6c8/0xf00 [ 50.430366][ T68] ? __pfx_worker_thread+0x10/0x10 [ 50.430375][ T68] kthread+0x2c1/0x3a0 [ 50.430386][ T68] ? _raw_spin_unlock_irq+0x23/0x50 [ 50.430398][ T68] ? __pfx_kthread+0x10/0x10 [ 50.430409][ T68] ret_from_fork+0x45/0x80 [ 50.430417][ T68] ? __pfx_kthread+0x10/0x10 [ 50.430429][ T68] ret_from_fork_asm+0x1a/0x30 [ 50.430447][ T68] [ 50.431654][ T68] Kernel Offset: disabled VM DIAGNOSIS: 14:15:17 Registers: info registers vcpu 0 CPU#0 RAX=000000000900010a RBX=0000000000000000 RCX=0000000000000179 RDX=0000000000000000 RSI=ffffffff813720ad RDI=0000000000000001 RBP=ffff88806a621020 RSP=ffffc90000007f88 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff813720b4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2f31fffc CR3=0000000031dca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063234423436d63 702f646e732f7665 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f857e3f223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f857e3f2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f857e3f2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f857e3f2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f857e3f22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f857e3f23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f857e50c488 00007f857e50c480 00007f857e50c478 00007f857e50c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f857f06d100 00007f857e50c440 00007f857e500004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f857e50c498 00007f857e50c490 00007f857e50c488 00007f857e50c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81331af0 RDX=ffff888030f3a440 RSI=ffffffff81331b38 RDI=ffffffff937817c0 RBP=0000000000000001 RSP=ffffc900008b0fd0 R8 =0000000000000001 R9 =fffffbfff26f02f8 R10=ffffffff937817c7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81331b39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f3c3b6ca280 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001440 CR3=000000001cab6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000044000001 Opmask01=000000000000001f Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff5d25fc80 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d25203a7325206b 6e696c6d79732065 7461657263206f74 2064656c69614600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4800051f5600054e 4b4c49485c560540 5144405746054a51 054140494c444600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30630f624022c253 000055b89fecf593 0000000000000091 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c3b3f22a0 00007f3c3b3f22a0 0000000000022ba1 000000000036316c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69305f474f5b647c 69303a2433273f39 7b27697a787c7a30 23333a3a38263342 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a263e383a3a26 39383a3a2638383a 3a263b383a3a263a 383a3a26493b3a3a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 2 CPU#2 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b84c5 RDI=ffffffff9aaeac40 RBP=ffffffff9aaeac00 RSP=ffffc90000d57530 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000005d R14=ffffffff850b8460 R15=0000000000000000 RIP=ffffffff850b84ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f857e362220 CR3=000000002f4f4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000004211 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff5d25f8a0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000ff0000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000101 0000000000000000 31706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001f1 000000000036316c 6c696b66722f3031 7968702f31313230 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69305f474f5b647c 69303a2433273f39 7b27697a787c7a30 23333a3a38263342 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a263e383a3a26 39383a3a2638383a 3a263b383a3a263a 383a3a26493b3a3a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=0000000080010002 RBX=0000000000000000 RCX=ffffffff81331af0 RDX=ffff8880215ac880 RSI=ffffffff81331b38 RDI=ffffffff937817c0 RBP=0000000000000003 RSP=ffffc90000908fd0 R8 =0000000000000001 R9 =fffffbfff26f02f8 R10=ffffffff937817c7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81331b39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f3c3b6ca280 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555577968808 CR3=000000002f4f4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000004211 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff5d25f8a0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000ff0000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000101 0000000000000000 31706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001f1 000000000036316c 6c696b66722f3031 7968702f31313230 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69305f474f5b647c 69303a2433273f39 7b27697a787c7a30 23333a3a38263342 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a263e383a3a26 39383a3a2638383a 3a263b383a3a263a 383a3a26493b3a3a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020