last executing test programs: 3.283952051s ago: executing program 1 (id=50): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x1, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xfff3}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4c005) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0xc5, 0x114}, 0x48) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x37}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x800) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5, r10, 0x4}, 0x38) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100005800c000880080001"], 0x34}}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r11, 0x8982, &(0x7f0000000000)) (async) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001e0001000000000000000000020000000100000700000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) 3.12943436s ago: executing program 1 (id=54): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2d, 'cpuacct'}]}, 0x9) 3.129236021s ago: executing program 1 (id=55): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x24000420) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.current\x00', 0x275a, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x2}, 0x8) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000180)) 3.128690303s ago: executing program 1 (id=56): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0x2, 0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf250f00000008002b000100010008000300", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x2000000) (async) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r7, r1}) (async) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 2.920110064s ago: executing program 0 (id=59): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1402, 0x7798a3572bcea8e3, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x20000010) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="01f5050000000000300012800b00010067656e65766500002000028005000400010000001400"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x800, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x70, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x62, 0x68, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x6071, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x80000001, 0x5}]}}, {"91c0dc52f4e7b237db8d10d6f26efe95a3b2b7145da8fabe675435683074bdbc824f8bcd2475919aeaa985170f07"}}}}}}, 0x0) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f0000002740)) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) 2.239638588s ago: executing program 1 (id=67): syz_open_dev$ttys(0xc, 0x2, 0x1) open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x84) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x4}, 0x50) open(&(0x7f00000000c0)='.\x00', 0x2800, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) signalfd(r1, &(0x7f0000000600)={[0x8]}, 0xfffffffffffffeba) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) syz_emit_ethernet(0x22, &(0x7f0000000500)=ANY=[], 0x0) 2.23914196s ago: executing program 1 (id=68): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x68ae, 0xffffffff}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000300)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x887dab077f141882, 0x0) ioctl$BSG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000002c0)=0x2) r3 = dup(r0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f00000009c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000940)={0x68, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x80, 0x7}, {0x6c, 0x2}, {0x7, 0x7}, {0xc, 0x2}, {0x6, 0x6}, {0x1, 0x6}, {0x7f}, {0x1, 0x2}, {0x8, 0x7}, {0x5}, {0x6, 0x6}, {0x8, 0x5}, {0x3, 0x1}, {0x1, 0x6}, {0x5, 0x7}, {0x5, 0x4}, {0x7, 0x5}, {0x1, 0x7}], "645a92284f7f7589"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x3}, {0x7, 0x6}], "e840751fc78f1337"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0xf9, 0x1}, {0xbb, 0x4}, {0x10, 0x6}], "764b317cd4d3e1d4"}}]}, 0x68}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) listen(r4, 0x2000fff) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$SMC_PNETID_ADD(r6, 0x0, 0x80) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x3b5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a00100063fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r9 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x3, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xad, 0x7, 0x32}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7f, 0x0, 0x1}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0x80, 0x5, 0x4, 0x10, 0x4}, 0x15, &(0x7f0000000500)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x100, 0xf000, 0x1, [0x30]}]}, 0x1, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x816}}]}) syz_usb_control_io$printer(r9, &(0x7f0000000640)={0x14, &(0x7f0000000900)={0x0, 0x0, 0x2a, {0x2a, 0x9, "1fd6fce0e9a950cda53d9e1293bdfc4761f6aedf2aa685079dcde635823c8f9104f1e528bc141a9b"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}}, &(0x7f00000008c0)={0x34, &(0x7f0000000680)={0x20, 0x7, 0x29, "da42cbe173940b58713a2bec4c4eb85581ee586e08edaf79fec45f830fa2a1e681aa273f1958e33ece"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000740)={0x20, 0x0, 0xf7, {0xf5, "41c4d87adee880e6118b37c5cf2756c4605db6c38edfc718a2d384041372b1bd221a78126cb7d8459e7b9e6ec40cb2b05158d76c9ba7a4df69d68481ed10b03abf1bf9713ff818aedb907840da9904027504fbb55564c11409a77239a5bb5869f4bae1f72f9611e694765976c4e3656f1d2045db52ca9bcc6f4cbbe48e02314b034bd26fb0fa96c803fecf6137eb8bcc6d38496303b47ec56f8c2e780b258dead3aa671fc784978727c3592023a7fd65caaa3acd7bfc5c94d092511b0fb4bc750f93a94e781c160121e2b57957454fec8679016aa894188e2caf4abdfdb59c1ac80d5fb43a5b3563a74b10059de3a22268c6766fd3"}}, &(0x7f0000000840)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000880)={0x20, 0x0, 0x1, 0x5}}) accept(r4, 0xfffffffffffffffd, &(0x7f0000000180)) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x58}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r3) 2.060306597s ago: executing program 0 (id=72): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x31, 0x1, 0x1, "d569e861dd2f1aeb7ee8589325f457a0c04b14100000000096ba216b1e8ac19e", 0x32344d59}) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0x0, &(0x7f0000000180)={0x0, 0x8}, &(0x7f0000000580)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000440), 0x43201, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) syz_open_dev$video(&(0x7f0000000040), 0x7, 0x80000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r3, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1}}], 0x2, 0x40000121, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2000}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4040848) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009", @ANYRESDEC], 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x3b, &(0x7f00000000c0)=ANY=[]) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/181, 0xb5}], 0x1}, 0x8021) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000040)=0x34f8, 0x4) listen(r1, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) write$char_usb(r6, &(0x7f0000000040)="e2", 0xff0f) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010000305000000000400000000000000", @ANYBLOB="0000020000000000280012800b0001006d616373650100c28000eb11f0719469c489fca32d06050003000d00000000000800050000000000000000004d5e04f4c6cfa25c2a52585ec6cf3c5ebc9ca5e5328906ed9d41dfa3fb8aef42dd7bce913f5dffdb3cb583658e0c4787ab7e900ec7a5f4b8f694feb0c7017b296293a83efcfb2d3a9caec2828a33a7d2fba877f5c09fa1fcb3d2c057ef"], 0x48}}, 0x0) r8 = openat$dsp1(0xffffff9c, &(0x7f0000000200), 0x12400, 0x0) write$dsp(r8, &(0x7f0000000480)="91c7b29a86a379d2e1c92d1a47fc4bec251e74849e6aeda0cc603eb50240bb5eb9aeafde51f0984f8d6f710b98dbca373708b80e4e3ec0ab54760bf35ce226667e3d7181827b68a6f30635535b3dfb8c6c31e6d5e85e437d9a564944df87d71890a1ed68a07a4d2a0f0b86706695bd34dcb7e5c5278dc0b7279128fd2027a4d683e54f8163f15ea1d84f2f5d1b6754d90cb022779542673af0c0e008c244471aef362cb2b9f8fcfd1473a15ed35e7a3eaf0fa0ece45d3bc9f75193ef0a4ca4be32526d54b6bb8d1ab4ee3caa4e1071d96bc7e37bc37415f9515031cd12c8418031fd59ac9966923d35e001a7e1de", 0xee) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0x408, 0xa, 0x2, "93bba5510400000000000000a3ccbaf112d8b3c3945d8636cf00"}) 1.039952821s ago: executing program 3 (id=85): bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0x12, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='configfs\x00', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x5, 0x445, 0x12, 0x20442, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r3, 0x0, 0x0, 0x4}, 0x20) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f0000000280)=""/179}, 0x20) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x3}}, 0x10, 0x0}, 0x40880) connect$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @local}, 0x10) ppoll(&(0x7f0000000a40)=[{r0}], 0x1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1b3601, 0x0) connect$l2tp(r7, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) modify_ldt$read_default(0x2, 0x0, 0x17) r8 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$sock(r6, &(0x7f00000002c0), 0x0, 0x4080044) recvmsg(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1}, 0x61) io_setup(0x9, &(0x7f0000000040)) 990.29611ms ago: executing program 3 (id=86): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4020000000000007b1148000000000085000000c4000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001c00)=[{&(0x7f0000002000)="f8", 0x1}], 0x1, 0x9) close(r1) r2 = socket$inet6(0xa, 0x80002, 0x7) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffb, @mcast2, 0x5}, 0x31) splice(r0, 0x0, r2, 0x0, 0x10500, 0x0) 988.679594ms ago: executing program 3 (id=87): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000a00), 0x80000, 0x0) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r1, 0x5606, 0x9) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="170000001400030400000000000000542d"], 0x44}}, 0x0) (async) r3 = syz_usbip_server_init(0x3) write$usbip_server(r3, &(0x7f0000001bc0)=ANY=[@ANYBLOB="fbffff02ffffffd3010000000000000100000005000000000052582616ba14e9b5cb48018400"/48], 0x30) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mpol=prefer=re']) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x6, 0x9, 0x1ff}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000700000004080000000000000003000040100000000000000000000002000000000300000000000004040000000000002e", @ANYRESOCT=r2], 0x0, 0x4d}, 0x28) (async) r7 = socket(0x11, 0xa, 0x0) ioctl$sock_ifreq(r7, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d\x00\x00 ', @ANYRES16=0x0, @ANYBLOB="040026bd7000fbdbdf250200000008000200400000000500060033000000080003000600000014000400050000000500000008000000000000800800030006000000080003000d00000014000100fc0100"/94], 0x64}, 0x1, 0x0, 0x0, 0x20000084}, 0x40000) r8 = dup(r6) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f5ce"]) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r10, 0x4048aec9, &(0x7f0000000140)={0x6, 0x0, @ioapic={0x0, 0x9fc, 0x0, 0x8000, 0x0, [{0x4, 0x8, 0xc7, '\x00', 0x81}, {0x4, 0x4, 0x4, '\x00', 0xc}, {0x1, 0x8, 0xf0, '\x00', 0xd}, {0x4, 0xe, 0x6, '\x00', 0x1f}, {0xf, 0xff, 0x2, '\x00', 0x3}, {0x0, 0x3, 0x7, '\x00', 0x78}, {0xb, 0x6, 0x8, '\x00', 0x4c}, {0x6, 0x6, 0x9, '\x00', 0x1}, {0x2, 0x8, 0x40, '\x00', 0x6}, {0x9, 0x1, 0x1, '\x00', 0x3}, {0x7f, 0x9, 0xff, '\x00', 0x2c}, {0x6, 0x1, 0x6, '\x00', 0x7f}, {0x5, 0x7, 0x7, '\x00', 0x2}, {0x7, 0x10, 0x5, '\x00', 0x9}, {0x2, 0x8, 0x4c, '\x00', 0x7}, {0xe, 0x5, 0x4}, {0x4, 0x2, 0x4f, '\x00', 0xb}, {0x5, 0x4, 0x2, '\x00', 0x40}, {0x2, 0x6, 0x8e, '\x00', 0x81}, {0x81, 0x0, 0x12, '\x00', 0x8}, {0x2, 0x2, 0x99, '\x00', 0x85}, {0x6, 0x8, 0x9b, '\x00', 0x4}, {0x7e, 0x3, 0x7d, '\x00', 0xd3}, {0x0, 0x8, 0x38, '\x00', 0x5}]}}) (async) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000080)=0x2c) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f0000000a40)={0x9, 0x40}) 910.131608ms ago: executing program 0 (id=89): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x2c00) connect$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x622, 0x0) mknodat(r2, &(0x7f0000000140)='./file0\x00', 0xe002, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) (async) fcntl$setstatus(r1, 0x4, 0x2c00) (async) connect$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) open$dir(&(0x7f00000000c0)='./file1\x00', 0x622, 0x0) (async) mknodat(r2, &(0x7f0000000140)='./file0\x00', 0xe002, 0x5) (async) 810.052358ms ago: executing program 0 (id=91): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x5, 0xffffffff], 0x8}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = memfd_secret(0x80000) ftruncate(r6, 0x10) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0x3, 0x4}, 0x6) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x505, 0x0, 0x25dfdbf9, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000030000000000000000000000f387a9dd52dd5a087ec0429500000000468de4"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x2, 0x5, 0x84) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483ad4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118afdba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc00000000002364bbd93964a8d0bdc802b9be2563838a91802e3deb150a6a97a73b168ccd8f7872"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r8, 0x29, 0x48, &(0x7f0000000100)=r9, 0x120) sendmsg$kcm(r8, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x0, @mcast2}, 0x80, 0x0}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r10, 0x560f, &(0x7f00000002c0)={0xb}) 720.057433ms ago: executing program 0 (id=95): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xc5c]}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x8002, 0x0, [0x3, 0x311, 0x202, 0x10000, 0x6, 0x5, 0x4]}) 627.961732ms ago: executing program 0 (id=97): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r1, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) connect$ax25(r1, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6940}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @empty}], 0x6c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, &(0x7f00000000c0)='syzkaller\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 440.120439ms ago: executing program 2 (id=101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000103000001000040"]) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @pic={0x5, 0x3, 0x5, 0x2, 0x5, 0x66, 0x9, 0xfe, 0x80, 0xb, 0x9, 0x2, 0x0, 0xa6, 0xf}}) 320.38303ms ago: executing program 3 (id=102): mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@dfltgid}]}}) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) 320.170971ms ago: executing program 2 (id=103): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010100, @broadcast}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @volatile={0x0, 0x0, 0x0, 0xa}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x46}, 0x20) 319.563735ms ago: executing program 2 (id=104): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x1, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x4) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x9, r0, 0x1, 0x8}, 0x14) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x22, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) r3 = dup2(r1, r1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@void, {0x8100, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x4e22, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x1, 0x80003, 0x41565559, 0x1, 0x8000, 0x3, 0x6, 0x10, 0x1, 0x7, 0x0, 0x2}}) accept4$packet(r3, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x80000) 318.925474ms ago: executing program 3 (id=105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xc5c]}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x8002, 0x0, [0x3, 0x311, 0x202, 0x10000, 0x6, 0x5, 0x4]}) 159.141018ms ago: executing program 2 (id=106): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000000), 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)='\v', 0x1}], 0x1}}], 0x1, 0x4000010) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x1, 0x100000000, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0xffffffffffffffff], 0x0, 0x200306}) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000800)=""/51, 0x33}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x1}, 0x94) fchdir(r1) 59.896842ms ago: executing program 3 (id=107): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x81003) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r2 = gettid() socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x49000) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) read$msr(0xffffffffffffffff, &(0x7f0000002c00)=""/4108, 0x100c) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c010000100013040000000000000000ac14140f00000000000000000000000020010000000000000000000000000000000000004e240000020000202b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x13c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001340)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100ebff00001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) openat$kvm(0xffffffffffffff9c, 0x0, 0x280, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x2, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f6494968d8200000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x2, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) (async) setsockopt$sock_int(r8, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f0000000040)=r7, 0x4) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x4, 0x0}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000940)={'gre0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x8, 0x10, 0xc312, 0x6ba, {{0x10, 0x4, 0x1, 0x10, 0x40, 0x65, 0x0, 0x2, 0x29, 0x0, @empty, @broadcast, {[@cipso={0x86, 0x16, 0x3, [{0x7, 0x10, "ce63a9c7dbdad6d0d9f51398638b"}]}, @noop, @rr={0x7, 0x13, 0xc1, [@remote, @local, @empty, @remote]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f00000005c0)=ANY=[@ANYRES32=r9, @ANYRES16=r3, @ANYRES32=0x0, @ANYRES16=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', r11, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r1}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r9, 0x40049366, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000001c0)={r12, @in6={{0xa, 0x4e23, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, 0x400, 0x2, 0x8, 0x699, 0x2, 0x0, 0x9}, 0x9c) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000500)={0x1, 0x0, {0x0, 0x0, 0x1014, 0x0, 0x8, 0x8, 0x5, 0x657ef077e46ea00d}}) 59.599227ms ago: executing program 2 (id=108): syz_open_dev$ttys(0xc, 0x2, 0x1) open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x84) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x4}, 0x50) open(&(0x7f00000000c0)='.\x00', 0x2800, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) signalfd(r1, &(0x7f0000000600)={[0x8]}, 0xfffffffffffffeba) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000500)=ANY=[], 0x0) 0s ago: executing program 2 (id=109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xed, 0x4000000000, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x9, 0x9], 0x0, 0x2a80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) tkill(r3, 0x12) waitid(0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)) (async) waitid(0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) userfaultfd(0x800) (async) r4 = userfaultfd(0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000916000/0x4000)=nil, 0x3000}) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000300), 0xc4fffffe) kernel console output (not intermixed with test programs): [ 38.159568][ T40] audit: type=1400 audit(1755526127.430:59): avc: denied { write } for pid=5913 comm="sh" path="pipe:[2979]" dev="pipefs" ino=2979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.168140][ T40] audit: type=1400 audit(1755526127.430:60): avc: denied { rlimitinh } for pid=5913 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.174153][ T40] audit: type=1400 audit(1755526127.430:61): avc: denied { siginh } for pid=5913 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:14254' (ED25519) to the list of known hosts. [ 38.896720][ T40] audit: type=1400 audit(1755526128.180:62): avc: denied { name_bind } for pid=5932 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 38.911390][ T40] audit: type=1400 audit(1755526128.190:63): avc: denied { write } for pid=5933 comm="sh" path="pipe:[2998]" dev="pipefs" ino=2998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.922337][ T40] audit: type=1400 audit(1755526128.210:64): avc: denied { execute } for pid=5933 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 38.931327][ T40] audit: type=1400 audit(1755526128.210:65): avc: denied { execute_no_trans } for pid=5933 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.687597][ T40] audit: type=1400 audit(1755526129.970:66): avc: denied { mounton } for pid=5933 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 40.688694][ T5933] cgroup: Unknown subsys name 'net' [ 40.855126][ T5933] cgroup: Unknown subsys name 'cpuset' [ 40.858465][ T5933] cgroup: Unknown subsys name 'rlimit' [ 41.083665][ T5956] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 41.547222][ T5933] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.777331][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 43.777346][ T40] audit: type=1400 audit(1755526133.060:80): avc: denied { execmem } for pid=5958 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.978256][ T40] audit: type=1400 audit(1755526133.260:81): avc: denied { create } for pid=5962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.985231][ T40] audit: type=1400 audit(1755526133.260:82): avc: denied { read write } for pid=5962 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.992342][ T40] audit: type=1400 audit(1755526133.260:83): avc: denied { open } for pid=5962 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.000064][ T40] audit: type=1400 audit(1755526133.270:84): avc: denied { ioctl } for pid=5962 comm="syz-executor" path="socket:[3726]" dev="sockfs" ino=3726 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.018462][ T5970] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.019737][ T5973] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.020868][ T5970] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.021628][ T5974] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.022101][ T5974] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.022278][ T5974] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.022747][ T5974] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.023134][ T5974] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.023246][ T5973] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.023748][ T5973] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.024036][ T5973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.024304][ T5973] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.025930][ T5970] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.027208][ T5975] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.028013][ T40] audit: type=1400 audit(1755526133.310:85): avc: denied { read } for pid=5963 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.028034][ T40] audit: type=1400 audit(1755526133.310:86): avc: denied { open } for pid=5963 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.028050][ T40] audit: type=1400 audit(1755526133.310:87): avc: denied { mounton } for pid=5963 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.028440][ T5973] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.030737][ T5970] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.033089][ T5973] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.035014][ T5970] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.037325][ T5973] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.089620][ T5973] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.112944][ T40] audit: type=1400 audit(1755526133.390:88): avc: denied { module_request } for pid=5967 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 44.140391][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 44.185768][ T5962] chnl_net:caif_netlink_parms(): no params data found [ 44.191456][ T5963] chnl_net:caif_netlink_parms(): no params data found [ 44.250809][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.253624][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.256017][ T5967] bridge_slave_0: entered allmulticast mode [ 44.258329][ T5967] bridge_slave_0: entered promiscuous mode [ 44.261032][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.263465][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.265770][ T5967] bridge_slave_1: entered allmulticast mode [ 44.268274][ T5967] bridge_slave_1: entered promiscuous mode [ 44.275914][ T5969] chnl_net:caif_netlink_parms(): no params data found [ 44.328933][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.332008][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.334497][ T5962] bridge_slave_0: entered allmulticast mode [ 44.336841][ T5962] bridge_slave_0: entered promiscuous mode [ 44.339581][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.341945][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.345103][ T5962] bridge_slave_1: entered allmulticast mode [ 44.347583][ T5962] bridge_slave_1: entered promiscuous mode [ 44.371702][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.376626][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.398898][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.401190][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.403530][ T5963] bridge_slave_0: entered allmulticast mode [ 44.405844][ T5963] bridge_slave_0: entered promiscuous mode [ 44.420300][ T5962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.440151][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.442491][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.445413][ T5963] bridge_slave_1: entered allmulticast mode [ 44.447916][ T5963] bridge_slave_1: entered promiscuous mode [ 44.464713][ T5967] team0: Port device team_slave_0 added [ 44.467965][ T5962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.470836][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.473089][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.475650][ T5969] bridge_slave_0: entered allmulticast mode [ 44.478984][ T5969] bridge_slave_0: entered promiscuous mode [ 44.491104][ T5967] team0: Port device team_slave_1 added [ 44.508450][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.510711][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.513024][ T5969] bridge_slave_1: entered allmulticast mode [ 44.515897][ T5969] bridge_slave_1: entered promiscuous mode [ 44.520488][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.534271][ T5962] team0: Port device team_slave_0 added [ 44.556853][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.572618][ T5962] team0: Port device team_slave_1 added [ 44.586452][ T5969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.606981][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.609802][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.619226][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.635535][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.638429][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.649413][ T5962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.654737][ T5969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.658196][ T5963] team0: Port device team_slave_0 added [ 44.660249][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.662502][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.670778][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.675063][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.678152][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.688569][ T5962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.710995][ T5963] team0: Port device team_slave_1 added [ 44.739283][ T5969] team0: Port device team_slave_0 added [ 44.743841][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.746321][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.754380][ T5963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.758551][ T5969] team0: Port device team_slave_1 added [ 44.775129][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.777355][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.785965][ T5963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.808328][ T5967] hsr_slave_0: entered promiscuous mode [ 44.810416][ T5967] hsr_slave_1: entered promiscuous mode [ 44.823992][ T5962] hsr_slave_0: entered promiscuous mode [ 44.826834][ T5962] hsr_slave_1: entered promiscuous mode [ 44.829844][ T5962] debugfs: 'hsr0' already exists in 'hsr' [ 44.832259][ T5962] Cannot create hsr debugfs directory [ 44.845999][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.848959][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.859466][ T5969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.888692][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.890870][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.899279][ T5969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.934273][ T5963] hsr_slave_0: entered promiscuous mode [ 44.936956][ T5963] hsr_slave_1: entered promiscuous mode [ 44.939543][ T5963] debugfs: 'hsr0' already exists in 'hsr' [ 44.941787][ T5963] Cannot create hsr debugfs directory [ 44.967832][ T5969] hsr_slave_0: entered promiscuous mode [ 44.970269][ T5969] hsr_slave_1: entered promiscuous mode [ 44.972385][ T5969] debugfs: 'hsr0' already exists in 'hsr' [ 44.974383][ T5969] Cannot create hsr debugfs directory [ 45.112248][ T5962] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.118305][ T5962] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.123179][ T5962] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.128821][ T5962] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.143090][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.145453][ T5962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.147785][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.150013][ T5962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.159134][ T5967] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.162579][ T5967] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.166246][ T5967] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.169768][ T5967] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.183779][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.186411][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.203248][ T5963] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.215168][ T5963] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.219342][ T5963] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.225926][ T5962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.228573][ T5963] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.251977][ T5962] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.267236][ T5969] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.272308][ T5969] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.277625][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.279886][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.284312][ T5969] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.289987][ T5969] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.294187][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.296492][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.324801][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.346680][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.350293][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.358581][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.358670][ T40] audit: type=1400 audit(1755526134.640:89): avc: denied { sys_module } for pid=5962 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 45.361048][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.376534][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.378784][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.382299][ T5963] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.386239][ T5969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.393475][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.395711][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.401797][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.404110][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.418368][ T5969] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.427599][ T3751] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.430423][ T3751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.442709][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.445356][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.459313][ T5962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.488561][ T5962] veth0_vlan: entered promiscuous mode [ 45.494219][ T5962] veth1_vlan: entered promiscuous mode [ 45.508128][ T5962] veth0_macvtap: entered promiscuous mode [ 45.512208][ T5962] veth1_macvtap: entered promiscuous mode [ 45.525072][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.529393][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.537124][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.543903][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.546743][ T1147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.551111][ T1147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.555944][ T1147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.563039][ T1147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.578813][ T5969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.601982][ T5963] veth0_vlan: entered promiscuous mode [ 45.610924][ T3692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.613660][ T3692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.617719][ T5967] veth0_vlan: entered promiscuous mode [ 45.627440][ T5963] veth1_vlan: entered promiscuous mode [ 45.632508][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.635274][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.636293][ T5967] veth1_vlan: entered promiscuous mode [ 45.649417][ T5969] veth0_vlan: entered promiscuous mode [ 45.656918][ T5969] veth1_vlan: entered promiscuous mode [ 45.662784][ T5962] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 45.667527][ T5967] veth0_macvtap: entered promiscuous mode [ 45.671467][ T5963] veth0_macvtap: entered promiscuous mode [ 45.676893][ T5963] veth1_macvtap: entered promiscuous mode [ 45.687230][ T5967] veth1_macvtap: entered promiscuous mode [ 45.691708][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.696943][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.701770][ T5969] veth0_macvtap: entered promiscuous mode [ 45.705388][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.708191][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.714542][ T5969] veth1_macvtap: entered promiscuous mode [ 45.718601][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.722299][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.731089][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.741342][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.752721][ T3692] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.758573][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.763219][ T3692] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.766598][ T3692] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.769385][ T3692] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.771856][ T6050] openvswitch: netlink: IPv4 tunnel dst address is zero [ 45.777473][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.779888][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.792228][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.795500][ T6052] Zero length message leads to an empty skb [ 45.797542][ T6052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6052 comm=syz.0.6 [ 45.799957][ T3692] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.807140][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.811528][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.815301][ T3692] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.818856][ T3692] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.826187][ T3692] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.829401][ T6053] tipc: Started in network mode [ 45.830999][ T6053] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 45.834051][ T6053] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 45.836924][ T6053] tipc: Enabled bearer , priority 10 [ 45.840705][ T6054] tipc: Enabling of bearer rejected, already enabled [ 45.845038][ T6052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=6052 comm=syz.0.6 [ 45.845804][ T3692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.852688][ T3692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.869803][ T3692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.872753][ T3692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.889276][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.892042][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.903638][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.907185][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.908044][ T6063] delete_channel: no stack [ 45.915840][ T6064] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.918661][ T6064] ata1.00: invalid service action 31 [ 45.944479][ T6064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 45.947232][ T6064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 46.047704][ T6077] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.13'. [ 46.053498][ T5973] Bluetooth: hci0: command tx timeout [ 46.053553][ T5972] Bluetooth: hci1: command tx timeout [ 46.055385][ T5973] Bluetooth: hci2: command tx timeout [ 46.133469][ T5972] Bluetooth: hci3: command tx timeout [ 46.283410][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 46.443987][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 46.447875][ T24] usb 8-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 46.451624][ T24] usb 8-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 46.454611][ T24] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 46.457774][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.664751][ T6077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13'. [ 46.668727][ T6023] usb 8-1: USB disconnect, device number 2 [ 46.959294][ T6082] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 46.961916][ T6082] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 46.966687][ T6082] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 46.971268][ T6082] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 46.973369][ T6013] tipc: Node number set to 1 [ 46.974059][ T6082] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 46.979902][ T6082] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 46.983491][ T6082] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 46.985631][ T6082] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 46.987978][ T6082] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 46.990582][ T6082] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 46.992664][ T6082] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 46.996046][ T6082] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 47.015666][ T6096] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.021472][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 47.169013][ T6116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 47.178000][ T24] IPVS: starting estimator thread 0... [ 47.180343][ T6116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23'. [ 47.183704][ T6116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23'. [ 47.187510][ T6116] netlink: 'syz.2.23': attribute type 10 has an invalid length. [ 47.197601][ T6116] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 47.238841][ T6124] netlink: 14 bytes leftover after parsing attributes in process `syz.3.26'. [ 47.249913][ T6124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.255654][ T6124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.259541][ T6124] bond0 (unregistering): Released all slaves [ 47.265216][ T6126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 47.273513][ T6117] IPVS: using max 56 ests per chain, 134400 per kthread [ 47.318597][ T6133] warning: `syz.1.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 47.341245][ T6135] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 47.368256][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 47.400698][ T6139] 9pnet_fd: Insufficient options for proto=fd [ 47.798617][ T6156] 9pnet_fd: Insufficient options for proto=fd [ 47.885583][ T6162] ======================================================= [ 47.885583][ T6162] WARNING: The mand mount option has been deprecated and [ 47.885583][ T6162] and is ignored by this kernel. Remove the mand [ 47.885583][ T6162] option from the mount to silence this warning. [ 47.885583][ T6162] ======================================================= [ 47.898482][ T6162] mmap: syz.0.40 (6162) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.902785][ T6162] netlink: 'syz.0.40': attribute type 11 has an invalid length. [ 47.922153][ T6162] tmpfs: Bad value for 'uid' [ 47.924938][ T6162] tmpfs: Bad value for 'uid' [ 47.949077][ T6113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.042420][ T6175] Bluetooth: MGMT ver 1.23 [ 48.106770][ T6191] netlink: 'syz.1.49': attribute type 1 has an invalid length. [ 48.213406][ T5970] Bluetooth: hci0: command 0x040f tx timeout [ 48.453995][ T6221] geneve2: entered promiscuous mode [ 48.521801][ T6227] dlm: no locking on control device [ 48.923386][ T6016] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 48.999603][ T40] kauditd_printk_skb: 142 callbacks suppressed [ 48.999613][ T40] audit: type=1400 audit(1755526138.280:232): avc: denied { write } for pid=6238 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.013460][ T5970] Bluetooth: hci3: command 0x040f tx timeout [ 49.013673][ T5972] Bluetooth: hci2: command 0x040f tx timeout [ 49.013687][ T5973] Bluetooth: hci1: command 0x040f tx timeout [ 49.083400][ T6016] usb 7-1: Using ep0 maxpacket: 8 [ 49.086484][ T6016] usb 7-1: config 2 interface 0 has no altsetting 0 [ 49.090061][ T6016] usb 7-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 49.093025][ T6016] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.095977][ T6016] usb 7-1: Product: syz [ 49.097426][ T6016] usb 7-1: Manufacturer: syz [ 49.099064][ T6016] usb 7-1: SerialNumber: syz [ 49.159110][ T40] audit: type=1400 audit(1755526138.440:233): avc: denied { listen } for pid=6246 comm="syz.1.68" lport=38162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.165937][ T40] audit: type=1400 audit(1755526138.440:234): avc: denied { bind } for pid=6248 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.172095][ T40] audit: type=1400 audit(1755526138.440:235): avc: denied { node_bind } for pid=6248 comm="syz.3.69" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 49.179147][ T40] audit: type=1400 audit(1755526138.450:236): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=49156 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 49.187264][ T40] audit: type=1400 audit(1755526138.450:237): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=49156 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 49.194961][ T40] audit: type=1400 audit(1755526138.470:238): avc: denied { bind } for pid=6246 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.200740][ T40] audit: type=1400 audit(1755526138.470:239): avc: denied { name_bind } for pid=6246 comm="syz.1.68" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 49.209139][ T40] audit: type=1400 audit(1755526138.470:240): avc: denied { node_bind } for pid=6246 comm="syz.1.68" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 49.221232][ T40] audit: type=1400 audit(1755526138.510:241): avc: denied { connect } for pid=6260 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.304607][ T6016] usb 7-1: USB disconnect, device number 2 [ 49.473466][ T6034] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 49.543437][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.613361][ T6034] usb 6-1: device descriptor read/64, error -71 [ 49.713486][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 49.717304][ T24] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 49.720699][ T24] usb 5-1: config 179 has an invalid descriptor of length 48, skipping remainder of the config [ 49.725006][ T24] usb 5-1: config 179 has no interface number 0 [ 49.727595][ T24] usb 5-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 49.732854][ T24] usb 5-1: config 179 interface 65 has no altsetting 0 [ 49.736376][ T24] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 49.739998][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.863396][ T6034] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 49.947577][ T34] usb 5-1: USB disconnect, device number 2 [ 49.979489][ T6277] netlink: 'syz.2.76': attribute type 7 has an invalid length. [ 49.982092][ T6277] netlink: 'syz.2.76': attribute type 8 has an invalid length. [ 49.986974][ T6277] erspan0: entered promiscuous mode [ 49.989180][ T6277] batadv_slave_1: entered promiscuous mode [ 49.991864][ T6277] erspan0: left promiscuous mode [ 49.994560][ T6277] batadv_slave_1: left promiscuous mode [ 50.003376][ T6034] usb 6-1: device descriptor read/64, error -71 [ 50.115405][ T6034] usb usb6-port1: attempt power cycle [ 50.201615][ T6288] syz.2.81 uses obsolete (PF_INET,SOCK_PACKET) [ 50.293407][ T5970] Bluetooth: hci0: command 0x040f tx timeout [ 50.431985][ T6310] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 50.431999][ T6310] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 50.432026][ T6310] vhci_hcd vhci_hcd.0: Device attached [ 50.432690][ T6311] usbip_core: unknown command [ 50.432696][ T6311] vhci_hcd: unknown pdu 4227858178 [ 50.432702][ T6311] usbip_core: unknown command [ 50.433221][ T6309] tmpfs: Bad value for 'mpol' [ 50.433533][ T13] vhci_hcd: stop threads [ 50.433538][ T13] vhci_hcd: release socket [ 50.433542][ T13] vhci_hcd: disconnect device [ 50.467351][ T6034] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 50.484306][ T6034] usb 6-1: device descriptor read/8, error -71 [ 50.744372][ T6034] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 50.752004][ T6345] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 50.764155][ T6034] usb 6-1: device descriptor read/8, error -71 [ 50.873849][ T6034] usb usb6-port1: unable to enumerate USB device [ 51.093874][ T5970] Bluetooth: hci3: command 0x040f tx timeout [ 51.094212][ T5973] Bluetooth: hci1: command 0x040f tx timeout [ 51.094278][ T5326] Bluetooth: hci2: command 0x040f tx timeout [ 51.227127][ T6366] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 51.233594][ T6366] kvm: pic: non byte read [ 51.236420][ T6366] kvm: pic: non byte read [ 51.238765][ T6366] kvm: pic: single mode not supported [ 51.238772][ T6366] kvm: pic: level sensitive irq not supported [ 51.241025][ T6366] kvm: pic: non byte read [ 51.247778][ T6366] kvm: pic: non byte read [ 51.250352][ T6366] kvm: pic: non byte read [ 51.296180][ T6370] __nla_validate_parse: 141 callbacks suppressed [ 51.296191][ T6370] netlink: 76 bytes leftover after parsing attributes in process `syz.3.107'. [ 51.417313][ T6377] ------------[ cut here ]------------ [ 51.419067][ T6377] WARNING: CPU: 1 PID: 6377 at arch/x86/kvm/x86.c:11551 kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 51.422377][ T6377] Modules linked in: [ 51.424384][ T6377] CPU: 1 UID: 0 PID: 6377 Comm: syz.2.109 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 51.429254][ T6377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.432672][ T6377] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 51.434912][ T6377] Code: 0a 00 00 00 00 00 00 e8 55 6b be 1e 31 ff 89 c5 89 c6 e8 b4 ea 79 00 85 ed 0f 8f d9 ef ff ff e9 25 f0 ff ff e8 62 ef 79 00 90 <0f> 0b 90 e9 81 ef ff ff e8 54 ef 79 00 90 0f 0b 90 e9 b8 ef ff ff [ 51.440945][ T6377] RSP: 0018:ffffc9000464fc30 EFLAGS: 00010293 [ 51.442989][ T6377] RAX: 0000000000000000 RBX: ffff888029fb5280 RCX: ffffffff814191ff [ 51.446089][ T6377] RDX: ffff888025da0000 RSI: ffffffff8141a27e RDI: 0000000000000007 [ 51.449259][ T6377] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 51.451876][ T6377] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88803aab0000 [ 51.454513][ T6377] R13: ffff888029fb5358 R14: 0000000000000000 R15: ffff888029fb55b4 [ 51.457085][ T6377] FS: 00007fccc3d276c0(0000) GS:ffff8880d67bc000(0000) knlGS:0000000000000000 [ 51.459916][ T6377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.462068][ T6377] CR2: 00007fccc3d46568 CR3: 0000000057cbf000 CR4: 0000000000352ef0 [ 51.464832][ T6377] Call Trace: [ 51.465928][ T6377] [ 51.466886][ T6377] kvm_vcpu_ioctl+0x5eb/0x1690 [ 51.468445][ T6377] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 51.470095][ T6377] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.472089][ T6377] ? do_vfs_ioctl+0x128/0x14f0 [ 51.473983][ T6377] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 51.475697][ T6377] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 51.477893][ T6377] ? rcu_is_watching+0x12/0xc0 [ 51.479438][ T6377] ? __fget_files+0x204/0x3c0 [ 51.480975][ T6377] ? hook_file_ioctl_common+0x145/0x410 [ 51.482860][ T6377] ? selinux_file_ioctl+0x180/0x270 [ 51.484583][ T6377] ? selinux_file_ioctl+0xb4/0x270 [ 51.486407][ T6377] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 51.488381][ T6377] __x64_sys_ioctl+0x18e/0x210 [ 51.489925][ T6377] do_syscall_64+0xcd/0x4c0 [ 51.491423][ T6377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.494156][ T6377] RIP: 0033:0x7fccc2f8ebe9 [ 51.496042][ T6377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.503600][ T6377] RSP: 002b:00007fccc3d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.506472][ T6377] RAX: ffffffffffffffda RBX: 00007fccc31b6090 RCX: 00007fccc2f8ebe9 [ 51.508945][ T6377] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 51.511413][ T6377] RBP: 00007fccc3011e19 R08: 0000000000000000 R09: 0000000000000000 [ 51.514119][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.517067][ T6377] R13: 00007fccc31b6128 R14: 00007fccc31b6090 R15: 00007ffcad278368 [ 51.519791][ T6377] [ 51.520815][ T6377] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 51.523128][ T6377] CPU: 1 UID: 0 PID: 6377 Comm: syz.2.109 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 51.526347][ T6377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.529725][ T6377] Call Trace: [ 51.530819][ T6377] [ 51.531820][ T6377] dump_stack_lvl+0x3d/0x1f0 [ 51.533689][ T6377] vpanic+0x6e8/0x7a0 [ 51.535312][ T6377] ? __pfx_vpanic+0x10/0x10 [ 51.537156][ T6377] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 51.539490][ T6377] panic+0xca/0xd0 [ 51.541017][ T6377] ? __pfx_panic+0x10/0x10 [ 51.542875][ T6377] ? check_panic_on_warn+0x1f/0xb0 [ 51.544954][ T6377] check_panic_on_warn+0xab/0xb0 [ 51.546945][ T6377] __warn+0xf6/0x3c0 [ 51.548527][ T6377] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 51.550889][ T6377] report_bug+0x3c3/0x580 [ 51.552679][ T6377] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 51.555019][ T6377] handle_bug+0x184/0x210 [ 51.556784][ T6377] exc_invalid_op+0x17/0x50 [ 51.558252][ T6377] asm_exc_invalid_op+0x1a/0x20 [ 51.559839][ T6377] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 51.561899][ T6377] Code: 0a 00 00 00 00 00 00 e8 55 6b be 1e 31 ff 89 c5 89 c6 e8 b4 ea 79 00 85 ed 0f 8f d9 ef ff ff e9 25 f0 ff ff e8 62 ef 79 00 90 <0f> 0b 90 e9 81 ef ff ff e8 54 ef 79 00 90 0f 0b 90 e9 b8 ef ff ff [ 51.567970][ T6377] RSP: 0018:ffffc9000464fc30 EFLAGS: 00010293 [ 51.569906][ T6377] RAX: 0000000000000000 RBX: ffff888029fb5280 RCX: ffffffff814191ff [ 51.572471][ T6377] RDX: ffff888025da0000 RSI: ffffffff8141a27e RDI: 0000000000000007 [ 51.574999][ T6377] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 51.577547][ T6377] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88803aab0000 [ 51.580057][ T6377] R13: ffff888029fb5358 R14: 0000000000000000 R15: ffff888029fb55b4 [ 51.582628][ T6377] ? kvm_arch_vcpu_ioctl_run+0x45f/0x1980 [ 51.584473][ T6377] ? kvm_arch_vcpu_ioctl_run+0x14de/0x1980 [ 51.586380][ T6377] kvm_vcpu_ioctl+0x5eb/0x1690 [ 51.587926][ T6377] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 51.589587][ T6377] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.591470][ T6377] ? do_vfs_ioctl+0x128/0x14f0 [ 51.593019][ T6377] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 51.594633][ T6377] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 51.596806][ T6377] ? rcu_is_watching+0x12/0xc0 [ 51.598350][ T6377] ? __fget_files+0x204/0x3c0 [ 51.599866][ T6377] ? hook_file_ioctl_common+0x145/0x410 [ 51.601651][ T6377] ? selinux_file_ioctl+0x180/0x270 [ 51.603318][ T6377] ? selinux_file_ioctl+0xb4/0x270 [ 51.605012][ T6377] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 51.606679][ T6377] __x64_sys_ioctl+0x18e/0x210 [ 51.608227][ T6377] do_syscall_64+0xcd/0x4c0 [ 51.609693][ T6377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.611614][ T6377] RIP: 0033:0x7fccc2f8ebe9 [ 51.613103][ T6377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.619138][ T6377] RSP: 002b:00007fccc3d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.621758][ T6377] RAX: ffffffffffffffda RBX: 00007fccc31b6090 RCX: 00007fccc2f8ebe9 [ 51.624279][ T6377] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 51.626777][ T6377] RBP: 00007fccc3011e19 R08: 0000000000000000 R09: 0000000000000000 [ 51.629261][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.631811][ T6377] R13: 00007fccc31b6128 R14: 00007fccc31b6090 R15: 00007ffcad278368 [ 51.634323][ T6377] [ 51.635881][ T6377] Kernel Offset: disabled [ 51.637279][ T6377] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:09:00 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000000 RBX=00000000ffffffc0 RCX=ffffffff89d9da86 RDX=ffff88802537a440 RSI=ffffffff89d9dab1 RDI=0000000000000004 RBP=000000000000001a RSP=ffffc90004c5efa0 R8 =0000000000000004 R9 =000000007f003c00 R10=000000007f003c13 R11=0000000000000001 R12=ffffffff8cefd2c0 R13=000000007f003c13 R14=dffffc0000000000 R15=000000007f003c00 RIP=ffffffff81bb91f7 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5f928d26c0 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5f9288ff98 CR3=000000005815e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5a603470 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5a6035f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5a6035f6 00007ffd5a6035fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f78a12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f78a12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f78a12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f78a12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f78a12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f78a12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856416c5 RDI=ffffffff9b10e020 RBP=ffffffff9b10dfe0 RSP=ffffc9000464f5a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552031203a555043 R12=0000000000000000 R13=000000000000005b R14=ffffffff9b10dfe0 R15=ffffffff85641660 RIP=ffffffff856416ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fccc3d276c0 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fccc3d46568 CR3=0000000057cbf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5a603470 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5a6035f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5a6035f6 00007ffd5a6035fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f78a12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f78a12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f78a12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f78a12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f78a12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f78a12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a63b540 RCX=ffffffff81afa453 RDX=ffff88801dadc880 RSI=ffffffff81afa42d RDI=0000000000000005 RBP=ffffc90000157d08 RSP=ffffc90000157bc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1cb980e R12=1ffff9200002af80 R13=0000000000000003 R14=0000000000000001 R15=ffffed100d4c76a9 RIP=ffffffff81afa42f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fccc3d27d58 CR3=000000005815e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6e80ddb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6e80ddb6 00007ffd6e80ddbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f91a12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f91a12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f91a12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f91a12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f91a12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f91a12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f926ed100 00007f5f91b87460 00007f5f91b87478 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f91b874b8 00007f5f91b874b0 00007f5f91b874a8 00007f5f91b874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e6bda7854069e3e8 540ffa0e9d41bd40 e0471a95a846b026 58166fde48cb8fe5 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000020d868 4949f6e6bda78540 69e3e8540ffa0e9d 41bd40e0471a95a8 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 46b02658166fde48 cb8fe5e0a5a38dda a58ab8af33dae9e0 8e2bcbbe5fe6a7b0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3f58eb66b410d9f7 15a5c6ebf97945ca fd34841beeecac35 6c0edec727717e4a ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a94b8e0ccf0a6160 7e2cce6231740c90 8ee9698346d4bc1f 6d55b22bc8b490c1 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000254e4 RBX=0000000000000003 RCX=ffffffff8b937c29 RDX=ffffed100d4e6656 RSI=ffffffff8c162600 RDI=ffffffff819133c1 RBP=ffffed1003c56000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801e2b0000 R14=ffffffff90ab3b90 R15=0000000000000000 RIP=ffffffff8b93678f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880d69bc000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005200000c CR3=000000005815e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6e80ddb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6e80ddb6 00007ffd6e80ddbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f91a12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f91a12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f91a12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f91a12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f91a12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f91a12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f926ed100 00007f5f91b87460 00007f5f91b87478 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f91b874b8 00007f5f91b874b0 00007f5f91b874a8 00007f5f91b874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e6bda7854069e3e8 540ffa0e9d41bd40 e0471a95a846b026 58166fde48cb8fe5 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000020d868 4949f6e6bda78540 69e3e8540ffa0e9d 41bd40e0471a95a8 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 46b02658166fde48 cb8fe5e0a5a38dda a58ab8af33dae9e0 8e2bcbbe5fe6a7b0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3f58eb66b410d9f7 15a5c6ebf97945ca fd34841beeecac35 6c0edec727717e4a ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a94b8e0ccf0a6160 7e2cce6231740c90 8ee9698346d4bc1f 6d55b22bc8b490c1 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000