last executing test programs: 1.24030953s ago: executing program 3 (id=347): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) 1.239186959s ago: executing program 3 (id=349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1008, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x218, 0x2b8, 0x218, 0x138, 0x0, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 1.160269071s ago: executing program 3 (id=351): creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) io_getevents(r0, 0x2, 0x8000000000000d6, &(0x7f0000000000)=[{}, {}], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_destroy(r0) 925.788962ms ago: executing program 3 (id=360): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 869.407767ms ago: executing program 3 (id=362): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@ssrr={0x89, 0x3, 0xce}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003b00090000000000cd000000010000001800038034"], 0x2c}}, 0x0) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x40002) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, 0x0) 788.594711ms ago: executing program 3 (id=364): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='comm\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r0, &(0x7f00000003c0), 0x0, 0x2, 0x0) 500.140451ms ago: executing program 1 (id=376): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_getrule={0x1c}, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 429.91336ms ago: executing program 1 (id=377): r0 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x56a, 0x0, 0x0, 0x0, 0x0) 429.77284ms ago: executing program 1 (id=378): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) ptrace$pokeuser(0x6, r0, 0x358, 0x0) 370.490702ms ago: executing program 1 (id=380): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200), 0x4) 369.67504ms ago: executing program 1 (id=382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x1b, 0x5, 0x3f0, 0x260, 0x260, 0xffffffff, 0x178, 0xd0, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xff000000, 'veth1_vlan\x00', 'vlan0\x00', {0xff}, {}, 0x6c, 0x3, 0x40}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "111a", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e20, @port=0x4e20}}}}, {{@ip={@broadcast, @empty, 0xff000000, 0x0, 'veth0_to_team\x00', 'caif0\x00', {0xff}, {0xff}, 0x1d, 0x1, 0x20}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xa, @local, @multicast1, @icmp_id=0x68, @gre_key=0x8001}}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x6, 0x1, 0x2, 0x2, 0x1, 0x4], 0x6, 0x3}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x19, @local, @multicast1, @port=0x4e22, @gre_key=0x4}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x3, ' m', 0x6}}, @common=@ttl={{0x28}, {0x3}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @empty, @remote, @icmp_id=0x64, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 310.341626ms ago: executing program 1 (id=384): unshare(0x28000600) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYRESHEX, @ANYRES8=r0, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) 309.963996ms ago: executing program 0 (id=386): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xc, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) 229.917867ms ago: executing program 0 (id=387): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x207, &(0x7f0000000340)={0x0, 0x8e00, 0x10100}, &(0x7f0000000300), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x288d, &(0x7f00000008c0)={0x0, 0x0, 0x1000, 0x0, 0x90, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x1849, 0x0, 0x0, 0x0, 0x0) 229.646822ms ago: executing program 0 (id=388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)="d4", &(0x7f0000000600), 0x4, r1}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000001c0)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002004007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) modify_ldt$read(0x1100, 0x0, 0xfffffffffffffe5e) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) ioperm(0x0, 0x6, 0x400) unshare(0x24020400) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r4, 0x0, 0x8a, 0xa0, &(0x7f0000000340)="f4d13c30bbb976502df930a027116c56c06de262cb4866c70ee586ce3aaeb917d259461a3b8e791f941810796574d2b10a01ec845ddd03dded31e03d17471ea4e4eba753edf886c45e54a7bcb666ca55cbc8810ef42ad76d78562539812219c9725ce661f0dde5419825e16e9db5ff2891b12186eb7289287c5ed328c3f2bc8ec1a693e12e26b4e63f0f", &(0x7f0000000640)=""/160, 0xe2, 0x0, 0x1000, 0x30, &(0x7f0000000d00)="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", &(0x7f0000000180)="0f73b2f0114f328489878bef0b2a77e92a504e2fe7ac1ee1ab2842fdc28c7628c2f06bff9b36e3bd2ced73f0aab7a245", 0x2, 0x0, 0xfffffffd}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) 135.838529ms ago: executing program 2 (id=389): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_flowlabel\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x21, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x6e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) setregid(0x0, r7) setgroups(0x0, 0x0) socket$inet(0x2, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r9 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r9, &(0x7f0000003080)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000001b40)=[{&(0x7f00000007c0)="451fb88ae975f58b82298dca2a6ee73f3cb4da03d559c14582e34297893c5f4fee2bf9d29330a460441f8cf14b0db1f32807d00c8ebdd96da9b1f10d67bb1302d966b57255173f30cbca9833", 0x4c}, {&(0x7f00000008c0)}, {&(0x7f0000000a40)="13ab3eeee593968811a98ce0eb08018efc054c8faeba6abd27c981fdbba854db371d3ef85fff0c5a815bce21f63166c801401f654ac3fd484338b4ccb726d2eb2e87f4a952aab9c6ab538365407a9b5b3f5d19b4d7d9afc8072d1d259130729a6745080c9db7398d70da7c1db8bc139e937a2a41f903526d5e15b06b01a068396389ed6dde3749593c274c153ecfa407e7aeb7f20f2eb436898fac9f0724b1894b286db08902dee46666f3af3c6a667eefa37e7eba83b8ddf74f0127ef456502cb08b0dcd36ff606a82b01910f", 0xcd}, {&(0x7f0000000b40), 0x6000}, {&(0x7f0000000440)}, {0x0, 0x60}], 0x6}}, {{&(0x7f0000002e40)={0xa, 0x0, 0x6, @mcast2, 0x2}, 0x1c, &(0x7f0000002f40)=[{&(0x7f0000002e80)}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1400000000000000290000000800000000000000000000002e1dcf9d80782b6a2d6fda419b6ab5766ac80f59d18cc593d0936f5261ab4f698145192b622bc513a4d83ef600c1eec8ceabdbe76b95792976fb71e116719f0a18da3bdee9fcb8cd8cc440c07c5ca4f534463fe501b714bbab8475f640"], 0x18}}], 0x3, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 135.647712ms ago: executing program 0 (id=390): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8}]}}}]}, 0x3c}}, 0x0) 135.535282ms ago: executing program 0 (id=391): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 134.393425ms ago: executing program 2 (id=392): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f000010d000/0x3000)=nil) r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 50.19447ms ago: executing program 2 (id=393): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x608, 0xd}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x8}, {}, {}, @ext={0x0, 0x0}}], 0x38) read$rfkill(r1, 0x0, 0x2300) 49.864833ms ago: executing program 2 (id=394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x1b, 0x5, 0x3f0, 0x260, 0x260, 0xffffffff, 0x178, 0xd0, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xff000000, 'veth1_vlan\x00', 'vlan0\x00', {0xff}, {}, 0x6c, 0x3, 0x40}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "111a", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e20, @port=0x4e20}}}}, {{@ip={@broadcast, @empty, 0xff000000, 0x0, 'veth0_to_team\x00', 'caif0\x00', {0xff}, {0xff}, 0x1d, 0x1, 0x20}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xa, @local, @multicast1, @icmp_id=0x68, @gre_key=0x8001}}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x6, 0x1, 0x2, 0x2, 0x1, 0x4], 0x6, 0x3}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x19, @local, @multicast1, @port=0x4e22, @gre_key=0x4}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x3, ' m', 0x6}}, @common=@ttl={{0x28}, {0x3}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @empty, @remote, @icmp_id=0x64, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$int_in(r1, 0x5421, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 304.094µs ago: executing program 2 (id=395): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_access(r0, 0x0, 0x67) 100.732µs ago: executing program 2 (id=396): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000614010029bd7000ffdbdf250800", @ANYRES32], 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 0s ago: executing program 0 (id=397): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) kernel console output (not intermixed with test programs): [ 30.905401][ T39] audit: type=1400 audit(1728028879.990:80): avc: denied { write } for pid=5248 comm="sh" path="pipe:[2708]" dev="pipefs" ino=2708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 30.913330][ T39] audit: type=1400 audit(1728028879.990:81): avc: denied { rlimitinh } for pid=5248 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.920206][ T39] audit: type=1400 audit(1728028879.990:82): avc: denied { siginh } for pid=5248 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:40764' (ED25519) to the list of known hosts. [ 31.876420][ T39] audit: type=1400 audit(1728028880.970:83): avc: denied { name_bind } for pid=5267 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 31.900342][ T39] audit: type=1400 audit(1728028881.000:84): avc: denied { execute } for pid=5272 comm="sh" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 31.907227][ T39] audit: type=1400 audit(1728028881.000:85): avc: denied { execute_no_trans } for pid=5272 comm="sh" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 31.917516][ T39] audit: type=1400 audit(1728028881.020:86): avc: denied { read } for pid=4817 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 31.923950][ T39] audit: type=1400 audit(1728028881.020:87): avc: denied { append } for pid=4817 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.706830][ T5272] cgroup: Unknown subsys name 'net' [ 33.869813][ T5272] cgroup: Unknown subsys name 'cpuset' [ 33.873446][ T5272] cgroup: Unknown subsys name 'rlimit' [ 34.083002][ T5323] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.719170][ T5272] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.351007][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 37.351022][ T39] audit: type=1400 audit(1728028886.450:105): avc: denied { execmem } for pid=5332 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.814136][ T39] audit: type=1400 audit(1728028886.910:106): avc: denied { create } for pid=5336 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.822008][ T39] audit: type=1400 audit(1728028886.910:107): avc: denied { read write } for pid=5336 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.831019][ T39] audit: type=1400 audit(1728028886.910:108): avc: denied { open } for pid=5336 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.837884][ T39] audit: type=1400 audit(1728028886.910:109): avc: denied { ioctl } for pid=5336 comm="syz-executor" path="socket:[2779]" dev="sockfs" ino=2779 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.839627][ T5342] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.847535][ T5342] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.850150][ T5342] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.853168][ T5342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.855484][ T5342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.858362][ T5342] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.861212][ T5342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.863276][ T5342] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.865448][ T5342] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.865559][ T5349] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.867575][ T5342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.870895][ T5350] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.872620][ T5351] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.874545][ T5350] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.879098][ T5350] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.879618][ T65] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.884127][ T5350] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.886427][ T5349] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.887207][ T5350] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.888599][ T39] audit: type=1400 audit(1728028886.980:110): avc: denied { read } for pid=5336 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.891991][ T5350] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.895889][ T39] audit: type=1400 audit(1728028886.980:111): avc: denied { open } for pid=5336 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.905087][ T39] audit: type=1400 audit(1728028886.980:112): avc: denied { mounton } for pid=5336 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.907964][ T5341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.915683][ T5341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.918837][ T5341] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.921643][ T5341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.029138][ T39] audit: type=1400 audit(1728028887.130:113): avc: denied { module_request } for pid=5336 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 38.086495][ T5336] chnl_net:caif_netlink_parms(): no params data found [ 38.164537][ T5340] chnl_net:caif_netlink_parms(): no params data found [ 38.201326][ T5344] chnl_net:caif_netlink_parms(): no params data found [ 38.251888][ T5339] chnl_net:caif_netlink_parms(): no params data found [ 38.268501][ T5336] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.270733][ T5336] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.272933][ T5336] bridge_slave_0: entered allmulticast mode [ 38.275087][ T5336] bridge_slave_0: entered promiscuous mode [ 38.278367][ T5336] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.280244][ T5336] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.282580][ T5336] bridge_slave_1: entered allmulticast mode [ 38.284758][ T5336] bridge_slave_1: entered promiscuous mode [ 38.315400][ T5340] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.318785][ T5340] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.321436][ T5340] bridge_slave_0: entered allmulticast mode [ 38.325053][ T5340] bridge_slave_0: entered promiscuous mode [ 38.328428][ T5340] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.330368][ T5340] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.332207][ T5340] bridge_slave_1: entered allmulticast mode [ 38.334256][ T5340] bridge_slave_1: entered promiscuous mode [ 38.382134][ T5336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.392791][ T5344] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.394721][ T5344] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.396622][ T5344] bridge_slave_0: entered allmulticast mode [ 38.399062][ T5344] bridge_slave_0: entered promiscuous mode [ 38.413872][ T5340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.418276][ T5336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.428646][ T5344] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.430541][ T5344] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.432529][ T5344] bridge_slave_1: entered allmulticast mode [ 38.434553][ T5344] bridge_slave_1: entered promiscuous mode [ 38.461619][ T5340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.504991][ T5339] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.506987][ T5339] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.508971][ T5339] bridge_slave_0: entered allmulticast mode [ 38.511030][ T5339] bridge_slave_0: entered promiscuous mode [ 38.513839][ T5339] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.516232][ T5339] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.519172][ T5339] bridge_slave_1: entered allmulticast mode [ 38.521989][ T5339] bridge_slave_1: entered promiscuous mode [ 38.526343][ T5340] team0: Port device team_slave_0 added [ 38.530333][ T5336] team0: Port device team_slave_0 added [ 38.533229][ T5344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.554865][ T5340] team0: Port device team_slave_1 added [ 38.557765][ T5336] team0: Port device team_slave_1 added [ 38.560476][ T5344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.564115][ T5339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.602007][ T5339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.613012][ T5336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.614929][ T5336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.622335][ T5336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.642227][ T5340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.644061][ T5340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.650936][ T5340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.654529][ T5336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.656367][ T5336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.663646][ T5336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.670905][ T5344] team0: Port device team_slave_0 added [ 38.680392][ T5340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.682273][ T5340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.689113][ T5340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.698546][ T5344] team0: Port device team_slave_1 added [ 38.701880][ T5339] team0: Port device team_slave_0 added [ 38.705534][ T5339] team0: Port device team_slave_1 added [ 38.760704][ T5344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.762552][ T5344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.769233][ T5344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.792258][ T5339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.794749][ T5339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.803046][ T5339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.807770][ T5344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.809626][ T5344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.816159][ T5344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.821062][ T5340] hsr_slave_0: entered promiscuous mode [ 38.823019][ T5340] hsr_slave_1: entered promiscuous mode [ 38.826767][ T5336] hsr_slave_0: entered promiscuous mode [ 38.828896][ T5336] hsr_slave_1: entered promiscuous mode [ 38.831399][ T5336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.833510][ T5336] Cannot create hsr debugfs directory [ 38.835323][ T5339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.837235][ T5339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.844183][ T5339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.872049][ T5339] hsr_slave_0: entered promiscuous mode [ 38.873990][ T5339] hsr_slave_1: entered promiscuous mode [ 38.875800][ T5339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.878063][ T5339] Cannot create hsr debugfs directory [ 38.938168][ T5344] hsr_slave_0: entered promiscuous mode [ 38.940387][ T5344] hsr_slave_1: entered promiscuous mode [ 38.942244][ T5344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.944293][ T5344] Cannot create hsr debugfs directory [ 39.168387][ T5340] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.173965][ T5340] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.178997][ T5340] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.183705][ T5340] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.206626][ T5336] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.210607][ T5336] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.219298][ T5336] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.222543][ T5336] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.236483][ T5339] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.242732][ T5339] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.250105][ T5339] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.254380][ T5339] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.292848][ T5344] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.297899][ T5344] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.302559][ T5344] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.306510][ T5344] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.346118][ T5336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.358334][ T5336] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.367590][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.370603][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.375959][ T5340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.384080][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.386037][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.404820][ T5340] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.415735][ T5339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.423038][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.424899][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.435390][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.437408][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.450788][ T5344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.463160][ T5339] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.476289][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.478561][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.479218][ T39] audit: type=1400 audit(1728028888.580:114): avc: denied { sys_module } for pid=5336 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 39.488738][ T5344] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.491611][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.494268][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.507779][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.510378][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.514478][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.516368][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.558811][ T5336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.591039][ T5336] veth0_vlan: entered promiscuous mode [ 39.596115][ T5336] veth1_vlan: entered promiscuous mode [ 39.610395][ T5336] veth0_macvtap: entered promiscuous mode [ 39.613767][ T5336] veth1_macvtap: entered promiscuous mode [ 39.629512][ T5340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.639548][ T5339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.643611][ T5336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.648018][ T5344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.657421][ T5336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.668045][ T5336] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.670444][ T5336] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.672785][ T5336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.675133][ T5336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.719257][ T5344] veth0_vlan: entered promiscuous mode [ 39.722136][ T5340] veth0_vlan: entered promiscuous mode [ 39.742803][ T5340] veth1_vlan: entered promiscuous mode [ 39.751420][ T5339] veth0_vlan: entered promiscuous mode [ 39.753967][ T5344] veth1_vlan: entered promiscuous mode [ 39.761961][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.762522][ T5339] veth1_vlan: entered promiscuous mode [ 39.764740][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.788081][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.788400][ T5344] veth0_macvtap: entered promiscuous mode [ 39.790169][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.795662][ T5344] veth1_macvtap: entered promiscuous mode [ 39.812215][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.815128][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.819219][ T5344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.821718][ T5339] veth0_macvtap: entered promiscuous mode [ 39.824704][ T5340] veth0_macvtap: entered promiscuous mode [ 39.828214][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.831004][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.834152][ T5344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.841409][ T5339] veth1_macvtap: entered promiscuous mode [ 39.842037][ T5336] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.844154][ T5340] veth1_macvtap: entered promiscuous mode [ 39.851065][ T5344] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.853321][ T5344] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.855583][ T5344] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.858050][ T5344] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.865240][ T5339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.868303][ T5339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.871093][ T5339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.873749][ T5339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.878308][ T5339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.883379][ T5339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.885806][ T5339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.888855][ T5339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.891571][ T5339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.894768][ T5339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.898532][ T5339] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.900849][ T5339] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.903057][ T5339] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.905329][ T5339] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.908771][ T4773] Bluetooth: hci3: command tx timeout [ 39.911027][ T5341] Bluetooth: hci0: command tx timeout [ 39.915558][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.918498][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.921009][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.923708][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.926273][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.929337][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.930175][ T5402] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5'. [ 39.932689][ T5340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.934858][ T5402] openvswitch: netlink: Flow key attr not present in new flow. [ 39.945518][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.948633][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.951250][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.953962][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.956772][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.960226][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.963899][ T5340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.974974][ T5340] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.977608][ T5340] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.980000][ T5340] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.982284][ T5340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.987423][ T4773] Bluetooth: hci1: command tx timeout [ 39.988059][ T5341] Bluetooth: hci2: command tx timeout [ 40.024804][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.028575][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.036085][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.039173][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.049907][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.053323][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.069436][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.071512][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.072083][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.076333][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.103030][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.105643][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.209994][ T5421] fuse: Unknown parameter 'N±' [ 40.333504][ T5444] IPv4: Oversized IP packet from 172.20.20.24 [ 40.335991][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 40.338020][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 40.497305][ T5467] netlink: 32 bytes leftover after parsing attributes in process `syz.0.31'. [ 40.501711][ T5467] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.536095][ T5471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 40.541619][ T5474] syz.0.34[5474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.541713][ T5474] syz.0.34[5474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.544785][ T5474] syz.0.34[5474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.605258][ T5471] team0 (unregistering): Port device team_slave_0 removed [ 40.614220][ T5471] team0 (unregistering): Port device team_slave_1 removed [ 40.632818][ T5481] syzkaller0: entered allmulticast mode [ 40.636113][ T5476] syz.1.35[5476] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.636163][ T5476] syz.1.35[5476] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.640491][ T5476] syz.1.35[5476] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.649749][ T5476] syzkaller0 (unregistering): left allmulticast mode [ 41.274424][ T5497] netlink: 'syz.2.42': attribute type 10 has an invalid length. [ 41.276547][ T5497] netlink: 40 bytes leftover after parsing attributes in process `syz.2.42'. [ 41.279975][ T5497] bridge0: port 3(syz_tun) entered blocking state [ 41.281812][ T5497] bridge0: port 3(syz_tun) entered disabled state [ 41.283648][ T5497] syz_tun: entered allmulticast mode [ 41.285576][ T5497] syz_tun: entered promiscuous mode [ 41.287690][ T5497] bridge0: port 3(syz_tun) entered blocking state [ 41.290072][ T5497] bridge0: port 3(syz_tun) entered forwarding state [ 41.346414][ T5502] netlink: 68 bytes leftover after parsing attributes in process `syz.2.44'. [ 41.390585][ T5504] netlink: 'syz.2.45': attribute type 10 has an invalid length. [ 41.634908][ T5523] syzkaller0: entered allmulticast mode [ 41.636728][ T5523] syz.0.54[5523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.636775][ T5523] syz.0.54[5523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.639955][ T5523] syz.0.54[5523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.647385][ T5523] syzkaller0 (unregistering): left allmulticast mode [ 41.647705][ T5525] syz.1.55 uses obsolete (PF_INET,SOCK_PACKET) [ 41.734840][ T5528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.56'. [ 41.965883][ T5551] fuse: Unknown parameter 'N±' [ 41.997149][ T5341] Bluetooth: hci3: command tx timeout [ 41.997466][ T4773] Bluetooth: hci0: command tx timeout [ 42.067306][ T4773] Bluetooth: hci2: command tx timeout [ 42.077126][ T4773] Bluetooth: hci1: command tx timeout [ 42.283827][ T5562] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.372095][ T39] kauditd_printk_skb: 257 callbacks suppressed [ 42.372108][ T39] audit: type=1400 audit(1728028891.470:372): avc: denied { read write } for pid=5339 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.380091][ T39] audit: type=1400 audit(1728028891.470:373): avc: denied { open } for pid=5339 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.391132][ T39] audit: type=1400 audit(1728028891.470:374): avc: denied { ioctl } for pid=5339 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.400401][ T39] audit: type=1400 audit(1728028891.480:375): avc: denied { append } for pid=4817 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.409004][ T39] audit: type=1400 audit(1728028891.480:376): avc: denied { create } for pid=5567 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.415063][ T39] audit: type=1400 audit(1728028891.480:377): avc: denied { getopt } for pid=5567 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.420304][ T39] audit: type=1400 audit(1728028891.480:378): avc: denied { write } for pid=5567 comm="syz.1.73" path="socket:[7746]" dev="sockfs" ino=7746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.427299][ T39] audit: type=1400 audit(1728028891.480:379): avc: denied { create } for pid=5567 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.433881][ T39] audit: type=1400 audit(1728028891.490:380): avc: denied { setopt } for pid=5567 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.440496][ T39] audit: type=1400 audit(1728028891.490:381): avc: denied { write } for pid=5567 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.497208][ T5571] syz.0.74 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 42.961592][ T5591] Zero length message leads to an empty skb [ 42.961674][ T5590] syzkaller0: entered allmulticast mode [ 42.966443][ T5590] syz.3.82[5590] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.994660][ T5590] syzkaller0 (unregistering): left allmulticast mode [ 43.031683][ T5595] fuse: Unknown parameter 'N±' [ 43.285488][ T5619] syzkaller0: entered allmulticast mode [ 43.291616][ T5619] syzkaller0 (unregistering): left allmulticast mode [ 43.703039][ T5653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.110'. [ 44.009431][ T5677] syzkaller0: entered allmulticast mode [ 44.016562][ T5677] syzkaller0 (unregistering): left allmulticast mode [ 44.067140][ T4773] Bluetooth: hci0: command tx timeout [ 44.077682][ T4773] Bluetooth: hci3: command tx timeout [ 44.147598][ T5341] Bluetooth: hci2: command tx timeout [ 44.150183][ T4773] Bluetooth: hci1: command tx timeout [ 44.680999][ T5731] netlink: 'syz.1.146': attribute type 10 has an invalid length. [ 44.804018][ T5734] 9pnet_fd: Insufficient options for proto=fd [ 44.849402][ T5736] netlink: 140 bytes leftover after parsing attributes in process `syz.3.148'. [ 44.975251][ T5748] hub 9-0:1.0: USB hub found [ 44.976723][ T5748] hub 9-0:1.0: 1 port detected [ 45.212744][ T5771] fuse: Unknown parameter 'N±' [ 45.379359][ T5795] fuse: Unknown parameter 'N±' [ 45.515502][ T5815] No such timeout policy "syz0" [ 45.555979][ T5815] syz.2.185 (5815) used greatest stack depth: 20864 bytes left [ 45.639776][ T5825] xt_hashlimit: max too large, truncated to 1048576 [ 46.147323][ T5341] Bluetooth: hci0: command tx timeout [ 46.147430][ T4773] Bluetooth: hci3: command tx timeout [ 46.227908][ T4773] Bluetooth: hci1: command tx timeout [ 46.227937][ T5341] Bluetooth: hci2: command tx timeout [ 46.413060][ T5878] syzkaller0: entered allmulticast mode [ 46.415022][ T5878] bpf_get_probe_write_proto: 20 callbacks suppressed [ 46.415031][ T5878] syz.2.210[5878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.416975][ T5878] syz.2.210[5878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.420150][ T5878] syz.2.210[5878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.441287][ T5878] syzkaller0 (unregistering): left allmulticast mode [ 46.546870][ T5890] veth2: entered allmulticast mode [ 46.740499][ T5910] netlink: 'syz.1.225': attribute type 10 has an invalid length. [ 46.865074][ T5919] syzkaller0: entered allmulticast mode [ 46.867451][ T5919] syz.2.229[5919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.867503][ T5919] syz.2.229[5919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.870719][ T5919] syz.2.229[5919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.879507][ T5919] syzkaller0 (unregistering): left allmulticast mode [ 47.167947][ T1715] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 47.170189][ T1715] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 47.172238][ T1715] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 47.176362][ T1715] hid-generic 0000:3000000:0000.0002: hidraw1: HID v0.00 Device [sy] on syz0 [ 47.370590][ T5953] netlink: 'syz.2.243': attribute type 10 has an invalid length. [ 47.486279][ T5957] mmap: syz.2.245 (5957) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.560175][ T39] kauditd_printk_skb: 614 callbacks suppressed [ 47.560187][ T39] audit: type=1400 audit(1728028896.660:996): avc: denied { read } for pid=5962 comm="syz.2.248" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 47.561732][ T5963] IPv6: Can't replace route, no match found [ 47.562107][ T39] audit: type=1400 audit(1728028896.660:997): avc: denied { open } for pid=5962 comm="syz.2.248" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 47.578363][ T39] audit: type=1400 audit(1728028896.660:998): avc: denied { ioctl } for pid=5962 comm="syz.2.248" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 47.607824][ T5967] netlink: 'syz.3.250': attribute type 10 has an invalid length. [ 47.615351][ T39] audit: type=1400 audit(1728028896.710:999): avc: denied { create } for pid=5964 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 47.616849][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.625294][ T39] audit: type=1400 audit(1728028896.720:1000): avc: denied { sys_admin } for pid=5964 comm="syz.2.249" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 47.639187][ T39] audit: type=1400 audit(1728028896.740:1001): avc: denied { read write } for pid=5966 comm="syz.3.250" name="virtual_nci" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.645984][ T39] audit: type=1400 audit(1728028896.740:1002): avc: denied { open } for pid=5966 comm="syz.3.250" path="/dev/virtual_nci" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.677770][ T5976] fuse: Unknown parameter 'N±' [ 47.715667][ T39] audit: type=1400 audit(1728028896.810:1003): avc: denied { name_bind } for pid=5979 comm="syz.0.254" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 47.772288][ T5984] xt_hashlimit: max too large, truncated to 1048576 [ 47.778756][ T39] audit: type=1326 audit(1728028896.880:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5982 comm="syz.2.255" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd0f7dff9 code=0x7ffc0000 [ 47.787090][ T39] audit: type=1326 audit(1728028896.880:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5982 comm="syz.2.255" exe="/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fafd0f7dff9 code=0x7ffc0000 [ 48.185694][ T5990] netlink: 20 bytes leftover after parsing attributes in process `syz.2.257'. [ 48.188842][ T5990] openvswitch: netlink: Flow key attr not present in new flow. [ 48.189449][ T5989] syz.1.256[5989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.191018][ T5989] syz.1.256[5989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.194560][ T5989] syz.1.256[5989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.243673][ T5994] netlink: 'syz.1.259': attribute type 10 has an invalid length. [ 48.496332][ T6007] fuse: Unknown parameter 'N±' [ 48.646857][ T6016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.267'. [ 48.650110][ T6016] openvswitch: netlink: Flow key attr not present in new flow. [ 48.690694][ T6018] syzkaller0: entered allmulticast mode [ 48.693535][ T6018] syz.0.268[6018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.700086][ T6018] syzkaller0 (unregistering): left allmulticast mode [ 49.181375][ T6039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.277'. [ 49.183710][ T6039] openvswitch: netlink: Flow key attr not present in new flow. [ 49.284576][ T6047] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 49.809511][ T6069] netlink: 200 bytes leftover after parsing attributes in process `syz.3.288'. [ 49.818856][ T6070] syzkaller0: entered allmulticast mode [ 49.830551][ T6070] syzkaller0 (unregistering): left allmulticast mode [ 50.143620][ T6049] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 50.146158][ T6049] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 50.152719][ T6049] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 50.157136][ T6049] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 50.159084][ T6049] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 50.162174][ T6049] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 50.164887][ T6049] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 50.166978][ T6049] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 50.169792][ T6049] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 50.172736][ T6049] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 50.174974][ T6049] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 50.178051][ T6049] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 50.227443][ T6078] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 50.232758][ T6078] infiniband ÿÿÿÿ: RDMA CMA: cma_listen_on_dev, error -98 [ 50.254615][ T6088] netlink: 264 bytes leftover after parsing attributes in process `syz.2.298'. [ 50.280273][ T6092] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 50.283112][ T6094] usb usb9: usbfs: process 6094 (syz.2.301) did not claim interface 0 before use [ 50.287560][ T6090] netlink: 'syz.3.299': attribute type 10 has an invalid length. [ 50.291978][ T6090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.297564][ T6090] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 50.399629][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.404212][ T6103] batadv_slave_0: entered promiscuous mode [ 50.527622][ T6117] xt_hashlimit: max too large, truncated to 1048576 [ 50.609328][ T6123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.314'. [ 50.612600][ T6123] openvswitch: netlink: Flow key attr not present in new flow. [ 50.690496][ T6125] netlink: 'syz.0.315': attribute type 10 has an invalid length. [ 50.858634][ T6144] capability: warning: `syz.1.323' uses 32-bit capabilities (legacy support in use) [ 51.004583][ T6154] x_tables: ip_tables: udp match: only valid for protocol 17 [ 51.125243][ T6161] netlink: 148 bytes leftover after parsing attributes in process `syz.0.331'. [ 51.125774][ T6164] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 51.129871][ T6164] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 51.136300][ T6164] vhci_hcd vhci_hcd.0: Device attached [ 51.171031][ T6171] Cannot find set identified by id 0 to match [ 51.185950][ T6171] netlink: 40 bytes leftover after parsing attributes in process `syz.2.334'. [ 51.221466][ T6166] vhci_hcd: connection closed [ 51.223628][ T76] vhci_hcd: stop threads [ 51.227834][ T76] vhci_hcd: release socket [ 51.229674][ T76] vhci_hcd: disconnect device [ 51.249388][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 51.289963][ T6179] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 51.427019][ T5341] Bluetooth: hci0: command 0x0c1a tx timeout [ 51.781623][ T6194] netlink: 'syz.3.341': attribute type 10 has an invalid length. [ 52.228158][ T5341] Bluetooth: hci2: command 0x0c1a tx timeout [ 52.228209][ T4773] Bluetooth: hci1: command 0x0c1a tx timeout [ 52.230683][ T5349] Bluetooth: hci3: command 0x0c1a tx timeout [ 52.424003][ T6218] netlink: 20 bytes leftover after parsing attributes in process `syz.2.350'. [ 52.426432][ T6218] openvswitch: netlink: Flow key attr not present in new flow. [ 52.511450][ T6227] xt_hashlimit: max too large, truncated to 1048576 [ 52.571197][ T39] kauditd_printk_skb: 506 callbacks suppressed [ 52.571209][ T39] audit: type=1326 audit(1728029157.671:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6228 comm="syz.2.355" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fafd0f74fa7 code=0x7ffc0000 [ 52.579688][ T39] audit: type=1326 audit(1728029157.671:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6228 comm="syz.2.355" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fafd0f19959 code=0x7ffc0000 [ 52.585961][ T39] audit: type=1326 audit(1728029157.671:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6228 comm="syz.2.355" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fafd0f74fa7 code=0x7ffc0000 [ 52.592720][ T39] audit: type=1326 audit(1728029157.671:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6228 comm="syz.2.355" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fafd0f19959 code=0x7ffc0000 [ 52.600624][ T39] audit: type=1326 audit(1728029157.671:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6228 comm="syz.2.355" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd0f7dff9 code=0x7ffc0000 [ 52.606670][ T39] audit: type=1326 audit(1728029157.671:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6228 comm="syz.2.355" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd0f7dff9 code=0x7ffc0000 [ 52.643792][ T39] audit: type=1400 audit(1728029157.741:1518): avc: denied { shutdown } for pid=6234 comm="syz.0.358" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.677322][ T39] audit: type=1326 audit(1728029157.781:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6221 comm="syz.3.351" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae3d7dff9 code=0x7ffc0000 [ 52.683424][ T39] audit: type=1326 audit(1728029157.781:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6221 comm="syz.3.351" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae3d7dff9 code=0x7ffc0000 [ 52.795916][ T6245] openvswitch: netlink: Flow key attr not present in new flow. [ 52.834491][ T6248] netlink: 'syz.0.363': attribute type 10 has an invalid length. [ 52.858427][ T1293] cfg80211: failed to load regulatory.db [ 52.874221][ T39] audit: type=1326 audit(1728029157.971:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.3.364" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ae3d7dff9 code=0x0 [ 53.050406][ T6263] team0: Device ipvlan2 failed to register rx_handler [ 53.149323][ T6275] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=6275 comm=syz.1.376 [ 53.239890][ T6282] Cannot find add_set index 0 as target [ 53.271018][ T6288] x_tables: duplicate underflow at hook 1 [ 53.418155][ T6300] netlink: 'syz.0.388': attribute type 10 has an invalid length. [ 53.480052][ T6302] __nla_validate_parse: 5 callbacks suppressed [ 53.480063][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 53.487873][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 53.509096][ T5349] Bluetooth: hci0: command 0x0c1a tx timeout [ 53.582547][ T6312] x_tables: duplicate underflow at hook 1 [ 53.660905][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 53.673610][ T6316] ------------[ cut here ]------------ [ 53.674821][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.398'. [ 53.675428][ T6316] refcount_t: underflow; use-after-free. [ 53.679736][ T6316] WARNING: CPU: 0 PID: 6316 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 53.682480][ T6316] Modules linked in: [ 53.683905][ T6316] CPU: 0 UID: 0 PID: 6316 Comm: syz.2.396 Not tainted 6.12.0-rc1-syzkaller-00114-g3840cbe24cf0 #0 [ 53.688472][ T6316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.691597][ T6316] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 53.693431][ T6316] Code: ff 89 de e8 38 1d fe fc 84 db 0f 85 66 ff ff ff e8 4b 1b fe fc c6 05 32 86 b8 0b 01 90 48 c7 c7 40 4a d1 8b e8 a7 04 bf fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 28 1b fe fc 0f b6 1d 0d 86 b8 0b 31 [ 53.699071][ T6316] RSP: 0018:ffffc900045eee68 EFLAGS: 00010286 [ 53.700849][ T6316] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900071d2000 [ 53.703152][ T6316] RDX: 0000000000040000 RSI: ffffffff814e7336 RDI: 0000000000000001 [ 53.705452][ T6316] RBP: ffff88802397fc64 R08: 0000000000000001 R09: 0000000000000000 [ 53.707847][ T6316] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 53.710140][ T6316] R13: 0000000000000000 R14: ffff88802397fc64 R15: 0000000000000001 [ 53.712409][ T6316] FS: 00007fafd1dd16c0(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 53.715033][ T6316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.717212][ T6316] CR2: 0000001b3141fffc CR3: 0000000050934000 CR4: 0000000000352ef0 [ 53.719514][ T6316] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.721825][ T6316] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.724313][ T6316] Call Trace: [ 53.725362][ T6316] [ 53.726266][ T6316] ? __warn+0xea/0x3d0 [ 53.727613][ T6316] ? refcount_warn_saturate+0x14a/0x210 [ 53.729365][ T6316] ? report_bug+0x3c0/0x580 [ 53.730872][ T6316] ? handle_bug+0x54/0xa0 [ 53.732231][ T6316] ? exc_invalid_op+0x17/0x50 [ 53.733759][ T6316] ? asm_exc_invalid_op+0x1a/0x20 [ 53.735357][ T6316] ? __warn_printk+0x1a6/0x350 [ 53.736957][ T6316] ? refcount_warn_saturate+0x14a/0x210 [ 53.738719][ T6316] ? refcount_warn_saturate+0x149/0x210 [ 53.740433][ T6316] sk_skb_reason_drop+0x183/0x1a0 [ 53.742077][ T6316] j1939_session_destroy+0x163/0x460 [ 53.743688][ T6316] j1939_session_deactivate_locked+0x275/0x320 [ 53.745507][ T6316] j1939_cancel_active_session+0x183/0x350 [ 53.747498][ T6316] j1939_netdev_notify+0x19e/0x1e0 [ 53.748937][ T6316] notifier_call_chain+0xb9/0x410 [ 53.750615][ T6316] ? __pfx_j1939_netdev_notify+0x10/0x10 [ 53.752579][ T6316] call_netdevice_notifiers_info+0xbe/0x140 [ 53.754590][ T6316] dev_close_many+0x333/0x6a0 [ 53.756201][ T6316] ? vprintk+0x86/0xa0 [ 53.757662][ T6316] ? __pfx_dev_close_many+0x10/0x10 [ 53.759395][ T6316] ? __pfx__printk+0x10/0x10 [ 53.760826][ T6316] ? ___ratelimit+0x24c/0x570 [ 53.762327][ T6316] unregister_netdevice_many_notify+0x489/0x1e50 [ 53.764252][ T6316] ? __nla_validate_parse+0x601/0x2880 [ 53.766027][ T6316] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 53.768258][ T6316] ? mark_lock+0xb5/0xc60 [ 53.769659][ T6316] ? __pfx___nla_validate_parse+0x10/0x10 [ 53.771476][ T6316] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 53.773490][ T6316] ? mutex_is_locked+0x12/0x50 [ 53.775097][ T6316] ? unregister_netdevice_queue+0x22f/0x3f0 [ 53.777069][ T6316] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 53.779135][ T6316] ? __nla_parse+0x40/0x60 [ 53.780591][ T6316] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 53.782829][ T6316] rtnl_dellink+0x3c9/0xae0 [ 53.784320][ T6316] ? hlock_class+0x4e/0x130 [ 53.785839][ T6316] ? __lock_acquire+0xbdd/0x3ce0 [ 53.787498][ T6316] ? __pfx_rtnl_dellink+0x10/0x10 [ 53.789164][ T6316] ? hlock_class+0x4e/0x130 [ 53.790864][ T6316] ? trace_contention_end+0xea/0x140 [ 53.792807][ T6316] ? __mutex_lock+0x1a6/0x9c0 [ 53.794478][ T6316] ? rtnetlink_rcv_msg+0x372/0xea0 [ 53.796107][ T6316] ? find_held_lock+0x2d/0x110 [ 53.797724][ T6316] ? __pfx___mutex_lock+0x10/0x10 [ 53.799633][ T6316] ? __pfx_rtnl_dellink+0x10/0x10 [ 53.801253][ T6316] rtnetlink_rcv_msg+0x3c7/0xea0 [ 53.802894][ T6316] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 53.804748][ T6316] netlink_rcv_skb+0x16b/0x440 [ 53.806400][ T6316] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 53.808477][ T6316] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 53.810514][ T6316] ? netlink_deliver_tap+0x1ae/0xd90 [ 53.812414][ T6316] netlink_unicast+0x53c/0x7f0 [ 53.814059][ T6316] ? __pfx_netlink_unicast+0x10/0x10 [ 53.815812][ T6316] netlink_sendmsg+0x8b8/0xd70 [ 53.817502][ T6316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.819344][ T6316] ? __import_iovec+0x1fd/0x6e0 [ 53.820875][ T6316] ____sys_sendmsg+0xaaf/0xc90 [ 53.822515][ T6316] ? copy_msghdr_from_user+0x10b/0x160 [ 53.824383][ T6316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.826266][ T6316] ? __pfx___lock_acquire+0x10/0x10 [ 53.828145][ T6316] ___sys_sendmsg+0x135/0x1e0 [ 53.829786][ T6316] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.831499][ T6316] ? lock_acquire+0x2f/0xb0 [ 53.832898][ T6316] ? __fget_files+0x40/0x3f0 [ 53.834152][ T6316] ? fdget+0x176/0x210 [ 53.835238][ T6316] __sys_sendmsg+0x117/0x1f0 [ 53.836510][ T6316] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.838332][ T6316] ? __x64_sys_futex+0x1e1/0x4c0 [ 53.840023][ T6316] do_syscall_64+0xcd/0x250 [ 53.841572][ T6316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.843581][ T6316] RIP: 0033:0x7fafd0f7dff9 [ 53.845087][ T6316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.851645][ T6316] RSP: 002b:00007fafd1dd1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.854449][ T6316] RAX: ffffffffffffffda RBX: 00007fafd1135f80 RCX: 00007fafd0f7dff9 [ 53.857139][ T6316] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000007 [ 53.859692][ T6316] RBP: 00007fafd0ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 53.862253][ T6316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.864889][ T6316] R13: 0000000000000000 R14: 00007fafd1135f80 R15: 00007ffca3cff0a8 [ 53.867656][ T6316] [ 53.868696][ T6316] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 53.871014][ T6316] CPU: 0 UID: 0 PID: 6316 Comm: syz.2.396 Not tainted 6.12.0-rc1-syzkaller-00114-g3840cbe24cf0 #0 [ 53.874343][ T6316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.877725][ T6316] Call Trace: [ 53.878827][ T6316] [ 53.879796][ T6316] dump_stack_lvl+0x3d/0x1f0 [ 53.881266][ T6316] panic+0x71d/0x800 [ 53.882431][ T6316] ? __pfx_panic+0x10/0x10 [ 53.883759][ T6316] ? show_trace_log_lvl+0x29d/0x3d0 [ 53.885530][ T6316] ? refcount_warn_saturate+0x14a/0x210 [ 53.887407][ T6316] check_panic_on_warn+0xab/0xb0 [ 53.889039][ T6316] __warn+0xf6/0x3d0 [ 53.890288][ T6316] ? refcount_warn_saturate+0x14a/0x210 [ 53.891747][ T6316] report_bug+0x3c0/0x580 [ 53.892934][ T6316] handle_bug+0x54/0xa0 [ 53.894044][ T6316] exc_invalid_op+0x17/0x50 [ 53.895236][ T6316] asm_exc_invalid_op+0x1a/0x20 [ 53.896516][ T6316] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 53.898140][ T6316] Code: ff 89 de e8 38 1d fe fc 84 db 0f 85 66 ff ff ff e8 4b 1b fe fc c6 05 32 86 b8 0b 01 90 48 c7 c7 40 4a d1 8b e8 a7 04 bf fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 28 1b fe fc 0f b6 1d 0d 86 b8 0b 31 [ 53.903145][ T6316] RSP: 0018:ffffc900045eee68 EFLAGS: 00010286 [ 53.904719][ T6316] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900071d2000 [ 53.906814][ T6316] RDX: 0000000000040000 RSI: ffffffff814e7336 RDI: 0000000000000001 [ 53.908850][ T6316] RBP: ffff88802397fc64 R08: 0000000000000001 R09: 0000000000000000 [ 53.910964][ T6316] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 53.912986][ T6316] R13: 0000000000000000 R14: ffff88802397fc64 R15: 0000000000000001 [ 53.915040][ T6316] ? __warn_printk+0x1a6/0x350 [ 53.916241][ T6316] ? refcount_warn_saturate+0x149/0x210 [ 53.917961][ T6316] sk_skb_reason_drop+0x183/0x1a0 [ 53.919703][ T6316] j1939_session_destroy+0x163/0x460 [ 53.921625][ T6316] j1939_session_deactivate_locked+0x275/0x320 [ 53.923744][ T6316] j1939_cancel_active_session+0x183/0x350 [ 53.925912][ T6316] j1939_netdev_notify+0x19e/0x1e0 [ 53.927301][ T6316] notifier_call_chain+0xb9/0x410 [ 53.928876][ T6316] ? __pfx_j1939_netdev_notify+0x10/0x10 [ 53.930395][ T6316] call_netdevice_notifiers_info+0xbe/0x140 [ 53.931955][ T6316] dev_close_many+0x333/0x6a0 [ 53.933203][ T6316] ? vprintk+0x86/0xa0 [ 53.934318][ T6316] ? __pfx_dev_close_many+0x10/0x10 [ 53.935800][ T6316] ? __pfx__printk+0x10/0x10 [ 53.937379][ T6316] ? ___ratelimit+0x24c/0x570 [ 53.938999][ T6316] unregister_netdevice_many_notify+0x489/0x1e50 [ 53.941146][ T6316] ? __nla_validate_parse+0x601/0x2880 [ 53.943010][ T6316] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 53.945286][ T6316] ? mark_lock+0xb5/0xc60 [ 53.946776][ T6316] ? __pfx___nla_validate_parse+0x10/0x10 [ 53.948696][ T6316] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 53.950793][ T6316] ? mutex_is_locked+0x12/0x50 [ 53.952291][ T6316] ? unregister_netdevice_queue+0x22f/0x3f0 [ 53.953844][ T6316] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 53.955484][ T6316] ? __nla_parse+0x40/0x60 [ 53.956657][ T6316] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 53.958402][ T6316] rtnl_dellink+0x3c9/0xae0 [ 53.959628][ T6316] ? hlock_class+0x4e/0x130 [ 53.960860][ T6316] ? __lock_acquire+0xbdd/0x3ce0 [ 53.962221][ T6316] ? __pfx_rtnl_dellink+0x10/0x10 [ 53.963559][ T6316] ? hlock_class+0x4e/0x130 [ 53.964784][ T6316] ? trace_contention_end+0xea/0x140 [ 53.966191][ T6316] ? __mutex_lock+0x1a6/0x9c0 [ 53.967435][ T6316] ? rtnetlink_rcv_msg+0x372/0xea0 [ 53.968766][ T6316] ? find_held_lock+0x2d/0x110 [ 53.970036][ T6316] ? __pfx___mutex_lock+0x10/0x10 [ 53.971361][ T6316] ? __pfx_rtnl_dellink+0x10/0x10 [ 53.972649][ T6316] rtnetlink_rcv_msg+0x3c7/0xea0 [ 53.973943][ T6316] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 53.975383][ T6316] netlink_rcv_skb+0x16b/0x440 [ 53.976651][ T6316] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 53.978105][ T6316] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 53.979752][ T6316] ? netlink_deliver_tap+0x1ae/0xd90 [ 53.981347][ T6316] netlink_unicast+0x53c/0x7f0 [ 53.982563][ T6316] ? __pfx_netlink_unicast+0x10/0x10 [ 53.983951][ T6316] netlink_sendmsg+0x8b8/0xd70 [ 53.985197][ T6316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.986613][ T6316] ? __import_iovec+0x1fd/0x6e0 [ 53.987894][ T6316] ____sys_sendmsg+0xaaf/0xc90 [ 53.989163][ T6316] ? copy_msghdr_from_user+0x10b/0x160 [ 53.990603][ T6316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.991912][ T6316] ? __pfx___lock_acquire+0x10/0x10 [ 53.993093][ T6316] ___sys_sendmsg+0x135/0x1e0 [ 53.994210][ T6316] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.995600][ T6316] ? lock_acquire+0x2f/0xb0 [ 53.996795][ T6316] ? __fget_files+0x40/0x3f0 [ 53.998047][ T6316] ? fdget+0x176/0x210 [ 53.999131][ T6316] __sys_sendmsg+0x117/0x1f0 [ 54.000358][ T6316] ? __pfx___sys_sendmsg+0x10/0x10 [ 54.001713][ T6316] ? __x64_sys_futex+0x1e1/0x4c0 [ 54.003033][ T6316] do_syscall_64+0xcd/0x250 [ 54.004235][ T6316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.005812][ T6316] RIP: 0033:0x7fafd0f7dff9 [ 54.006998][ T6316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.011989][ T6316] RSP: 002b:00007fafd1dd1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.014162][ T6316] RAX: ffffffffffffffda RBX: 00007fafd1135f80 RCX: 00007fafd0f7dff9 [ 54.016213][ T6316] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000007 [ 54.018289][ T6316] RBP: 00007fafd0ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 54.020355][ T6316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.022474][ T6316] R13: 0000000000000000 R14: 00007fafd1135f80 R15: 00007ffca3cff0a8 [ 54.024533][ T6316] [ 54.025965][ T6316] Kernel Offset: disabled [ 54.027171][ T6316] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:01:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff850a6c05 RDI=ffffffff9aae1b80 RBP=ffffffff9aae1b40 RSP=ffffc900045ee7a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=ffffffff9aae1b90 R15=0000000000000077 RIP=ffffffff850a6c2f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fafd1dd16c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b3141fffc CR3=0000000050934000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000400001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f966d9f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f966d9f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f966d9f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f966d9f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f966d9f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f966d9f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620706177 730074616d726f66 207972616e690004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305554452 5600514448574a43 055c57444b4c4705 4b524a4b4e4b5000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffed1008a72ee0 RBX=ffff888045397700 RCX=0000000000000000 RDX=0000000000000000 RSI=ffff888045397700 RDI=0000000000000000 RBP=ffff8881012f48c0 RSP=ffffc9000428f800 R8 =0000000000000280 R9 =0000000000000000 R10=ffffed1008a72ee0 R11=0000000000000000 R12=ffff8881012f48c0 R13=0000000000000000 R14=ffffea000114e500 R15=0000000000000000 RIP=ffffffff81eefb4b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555c684500 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020015000 CR3=0000000020d52000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555c697730 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555c6a75c4 000055555c6a75c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555c697498 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555c6a76ae 000055555c6a7620 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000036313335 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 09a0030008000990 0303ffffffff0409 8003180800061000 20100006004b9a04 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002000000000000 0000010108000000 0040560816800316 8004028003028004 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0180100002900301 00090000f3804002 0006800400040000 0084000300050900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060137b004808480 a0080009e0030010 0009d00300100009 c00302100009b003 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0120801000098004 0100000008060601 37b004808480a008 0009e00300100009 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d00300100009c003 02100009b0030180 1000029003010009 0000f38040020006 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8004000400000084 0003000509000002 0000000000000000 0101080000000040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5608168003168004 02800302800409a0 0300080009900303 ffffffff04098003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0190100003800400 1000060402840008 0004980300080004 9003001000048003 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6666666666666666 0a392e79656b5f5f 2062203036396664 6261396666666666 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6664626139666666 66666666660a302e 79656b5f5f206220 3061396664626139 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6220303261666462 6139666666666666 66660a312e79656b 5f5f206220306539 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 735f706374706d20 6220303862346562 6139666666666666 66660a7665645f69 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3063346562613966 666666666666660a 64657461636f6c6c 615f7374656b636f ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d20622030346334 6562613966666666 666666660a322e79 656b5f5f20622030 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2030386334656261 3966666666666666 660a64695f74656e 7265705f70637470 info registers vcpu 2 CPU#2 RAX=ffff7fffffffffff RBX=0000000000000022 RCX=ffffffff816a71a8 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff96e24c40 RBP=0000000000000000 RSP=ffffc9000370fc70 R8 =0000000000000000 R9 =fffffbfff2dc4988 R10=ffffffff96e24c47 R11=0000000000000002 R12=dffffc0000000000 R13=ffff888027172f48 R14=0000000000000003 R15=ffff888027172440 RIP=ffffffff81eef5f4 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556e111500 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055556e12c5c8 CR3=0000000024574000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=000000007ffbffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc66704050 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46edff1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46edff1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46edff113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46edff114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46edff11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46edff12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000063cb3 RBX=0000000000000003 RCX=ffffffff8b21cd99 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd19d40 RBP=ffffed1003b5b488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d527025 R10=ffff88806a93812b R11=0000000000000000 R12=0000000000000003 R13=ffff88801dada440 R14=ffffffff905f3088 R15=0000000000000000 RIP=ffffffff8b21e17f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f46eed0af98 CR3=000000003e44c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ae3df1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ae3df1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ae3df113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ae3df114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ae3df11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ae3df12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ae3f0b488 00007f8ae3f0b480 00007f8ae3f0b478 00007f8ae3f0b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ae4a6d100 00007f8ae3f0b440 00007f8ae3f00004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ae3f0b498 00007f8ae3f0b490 00007f8ae3f0b488 00007f8ae3f0b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000