last executing test programs: 20.408161618s ago: executing program 3 (id=74): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xea242, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000404730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, 0x1040}}, 0x20}}, 0x400c004) 19.897486637s ago: executing program 3 (id=83): syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)="e3331cfd74f6da55af073a6e44f5af0d8151f7738a9bc54497") r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4013}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'erspan0\x00'}, {0x14, 0x35, 'netpci0\x00'}, {0x14, 0x35, 'bond0\x00'}]}]}, 0x60}, 0x1, 0x2000000000000000}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x12, &(0x7f0000000040)=""/18, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x1, 0x0, 0x101}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0xffffffffffffffff, r1], &(0x7f00000002c0)=[{0x0, 0x5, 0xb, 0xa9102dfa2dc4431b}, {0x1, 0x3, 0x8, 0x5}, {0x4, 0x1, 0xb, 0x7}, {0x1, 0x1, 0x7, 0x9}, {0x0, 0x4, 0xc, 0x4}, {0x3, 0x5, 0x10, 0x3}, {0x3, 0x1, 0x9, 0x1}, {0x1, 0x4, 0x8, 0x8}, {0x5, 0x4, 0x5, 0xf55a9cec69cc9c53}], 0x10, 0xffffffff, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000440)={r1, r2}) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2001, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)="e3331cfd74f6da55af073a6e44f5af0d8151f7738a9bc54497") (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4013}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'erspan0\x00'}, {0x14, 0x35, 'netpci0\x00'}, {0x14, 0x35, 'bond0\x00'}]}]}, 0x60}, 0x1, 0x2000000000000000}, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x12, &(0x7f0000000040)=""/18, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x1, 0x0, 0x101}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0xffffffffffffffff, r1], &(0x7f00000002c0)=[{0x0, 0x5, 0xb, 0xa9102dfa2dc4431b}, {0x1, 0x3, 0x8, 0x5}, {0x4, 0x1, 0xb, 0x7}, {0x1, 0x1, 0x7, 0x9}, {0x0, 0x4, 0xc, 0x4}, {0x3, 0x5, 0x10, 0x3}, {0x3, 0x1, 0x9, 0x1}, {0x1, 0x4, 0x8, 0x8}, {0x5, 0x4, 0x5, 0xf55a9cec69cc9c53}], 0x10, 0xffffffff, @void, @value}, 0x94) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000440)={r1, r2}) (async) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2001, 0x0) (async) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) 19.889344769s ago: executing program 3 (id=86): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r1}, &(0x7f00000001c0), &(0x7f00000006c0)='%-5lx \x00'}, 0x20) (async) r2 = socket$kcm(0x2, 0xa, 0x2) (async) socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'wg0\x00', @random="ae3adbd29a05"}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1c0000190100000000003d00"], 0x4e) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty, 0xfffffffc}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x44, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=@getstat={0xe0, 0x15, 0x100, 0x70bd27, 0x25dfdbfd, {{'cbc(aes-arm)\x00'}, '\x00', '\x00', 0x0, 0x2000}, ["", ""]}, 0xe0}}, 0x0) 19.788466499s ago: executing program 3 (id=87): inotify_init() (async) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') pread64(r0, &(0x7f0000000000)=""/15, 0xf, 0x7fff) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6c28c2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) (async) mount$bind(0x0, 0x0, 0x0, 0xc805d, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x8) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x1, 0x80003, 0x32315842, 0x1, 0x8000, 0x3, 0x6, 0x10, 0x1, 0x7, 0x0, 0x2}}) r4 = getpid() r5 = syz_open_procfs(r4, &(0x7f0000000140)='net/psched\x00') (async) r6 = dup(r1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="10000000f45c9198b6dbbf3e8c01fbe03691497f0ca32abd7000fcdbdf25765031f8ff3e0c3b3b2b6051603f2d3a462ece85719596b2aea1d064e01f66045f4da002c9e2895d7fe900170b0d69c4257c3e1666e1752f5a4054070ba9d1703663b48dc8aa44e09f58a339193bd2742699776048315e2b1b1e7009bd1475149b1b2d4fa94f557f7172fd1cd3f312f663d8302b3ebe3e3b0b78c03cb0ca789e6b1bf71b5a068285c604d62b576b05c442d13410e75cb7ad291fd417d95e089e6260ffd78605fdd3e321b172b8fd2bc4a4e4580206d7669257c3acaee496feaff4b527b8c307bba7c53e47812d8d05774990c5b605e587cb0a5fa11ace7e92dd3f0be3a7a2de71f40b30879b38d23fa7d1175a6a1e0ac5b949833621c44d61ecb93f0ada26369d02f0c139ac199ed7642cb9bc5d77b55f6f074066d283d80e691b011899192091a65b30c6d6d112a4e64be700"/346], 0x10}, 0x1, 0x0, 0x0, 0xe000}, 0x4) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="0100c200050000f58b04", @ANYRESHEX=r7]) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x10, r5, 0x8000000) (async) syz_io_uring_setup(0x4000375f, &(0x7f0000000500)={0x0, 0xb5a8, 0x2000, 0x8000000, 0x22a, 0x0, r2}, &(0x7f00000001c0), &(0x7f0000000280)=0x0) (async) r11 = io_uring_setup(0x7bda, &(0x7f0000000080)) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r11, 0x1b, 0x20000009, r12) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000580)=@IORING_OP_SPLICE={0x1e, 0x1a, 0x0, @fd=r1, 0x8, {0x0, r7}, 0x1, 0x8, 0x0, {0x0, r12, r5}}) (async) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r8) clock_getres(0x0, 0x0) (async) sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000d00000005000700190000000600080000000000050019000000000006000a00ffff00b205001a000800000005001700f7000000050018000500000005001b0009000000"], 0x54}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 19.788040337s ago: executing program 3 (id=88): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x20000000}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x27}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400d899}, 0x0) 13.678708978s ago: executing program 3 (id=105): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffff8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = semget$private(0x0, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x240}]}, 0x28}, 0x1, 0x0, 0x0, 0x200040d4}, 0x20000040) semctl$SEM_STAT_ANY(r4, 0x2, 0x14, &(0x7f0000000340)=""/4091) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x401}]}}]}, 0x38}}, 0x20000094) 13.663095823s ago: executing program 32 (id=105): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffff8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = semget$private(0x0, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x240}]}, 0x28}, 0x1, 0x0, 0x0, 0x200040d4}, 0x20000040) semctl$SEM_STAT_ANY(r4, 0x2, 0x14, &(0x7f0000000340)=""/4091) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x401}]}}]}, 0x38}}, 0x20000094) 3.541548949s ago: executing program 2 (id=266): r0 = socket(0x25, 0x2, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000080)=@buf) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x32) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10}, @TCA_CT_LABELS={0x14, 0x7, "0feee70ca9233ab46fd74f02750a5ede"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x10000000) r6 = io_uring_setup(0x178e, &(0x7f00000000c0)={0x0, 0x52c1}) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) bind$nfc_llcp(r7, &(0x7f0000000240)={0x27, r9, 0xfffffffe, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abfe0055acc8ef039a5be42200000000000000000100", 0x38}, 0x60) listen(r7, 0x7ff) ppoll(&(0x7f00000002c0)=[{r7, 0x1528}], 0x1, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x9c, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x6, 0x40, 0x0, 0xffffff9e}, 0xd570, 0x0, 0x0, 0x2, 0x7, 0x6, 0x1b, 0xf, 0x3, 0x2, {0x3, 0x3, 0x4, 0x3, 0x8, 0x2}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x15, 0xfffd, 0x7fffffff, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.390120967s ago: executing program 2 (id=294): syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000a00), 0x2, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460006000000e0ff0000ffffff02000800d4"], 0x78) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000001f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200, 0x7, 0x2}}, @authinfo={0x12, 0x84, 0x6, {0x7}}], 0x38, 0x80}], 0x1, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) socket$inet(0x2, 0x0, 0x91) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r3, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) prlimit64(r4, 0x9, &(0x7f0000000140)={0x10, 0x6}, 0x0) syz_clone(0x162000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xffff, @null, @netrom={'nr', 0x0}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}) 1.269573068s ago: executing program 2 (id=296): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008002300010000000500110001000000e5cc8c85e67cd68b4528f492a9b1b778c20c86a01eae371086cdcedaaee786b5b3106384eca6e06926979123faac35a071ea9cb7d17136a3fce8b26c3f751180ac929142b9c1d3c6808c1a5e96d668872428ae902b03fb64cc175c00ba797fe5c6099866ab8a3b9327ba770a8db1139615da0efaff46aaeaff270e40ab0a670506e88babe7112248068df982ced95d77c8b9b82f4d75ac0c3aa805adb6fb262584ff93a60578e98a30bc393d9a4a6502367e3353550ac0a0daf5a47470d686fd4b99051d0c9ca6ee4a8717c8a4d2c98a4849ad787b666bb1eab14f75782c77fe252c7ca301fd3cec6b41af6bfe785c6a1fd6bb4dab"], 0x44}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000380)=0xff, 0x5b) sendto$inet6(r1, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=0x0, @ANYRES16=r0], 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0x64010101, 0x4e22, 0x0, 0x4e22, 0x2, 0x2, 0x80, 0x20, 0x33}, {0x6, 0x6, 0x6, 0x9, 0x3, 0xa0f3, 0x9, 0x3}, {0x9, 0x8, 0xf}, 0x9, 0x6e6bba, 0x2, 0x0, 0x1, 0x3}, {{@in=@broadcast, 0x9, 0x3c}, 0xa, @in6=@empty, 0x34ff, 0xea785460cf137bb6, 0x0, 0x9, 0xffffffff, 0x0, 0x4}}, 0xe8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000080), 0x26000, 0x1000, 0x2}, 0x20) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000200)={0x4e, 0x2, 0x3, "11010100001400000100005c4b7c1500000000f100"}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0xd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3ff}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000180)=0x2000000) close_range(r0, 0xffffffffffffffff, 0x0) 1.158262261s ago: executing program 2 (id=301): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000400)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, '.\x00'}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r5, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x40a08, 0x14e99}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @private=0xa010100}]}}}]}, 0x3c}, 0x1, 0x2}, 0x20004804) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9a0666591523660e}, 0xc, &(0x7f0000000180)={&(0x7f0000002340)={0x1290, r3, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x124c, 0x8, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x80, @dev={0xfe, 0x80, '\x00', 0x11}, 0xfff}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x4, @mcast1, 0x2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xd9b, @local, 0xe0e9}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x790, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x760, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x6}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x148, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8293454f60f5e976c4f6f027d5e65034b3048495742bb9a5f409c7a72011c0a1"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x274, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x270, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x14c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x4}]}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xaf, @loopback, 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x2a0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x220, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xc436, @private1, 0x7ff}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x264, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_ALLOWEDIPS={0x244, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8de88b39b718624322b476d765e5ce8b46e875dff602e057e311667a60ad15f9"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a7b96f6bdbc2134e79e4693008558f943d9549a6edbc8d52387eaa9201b32943"}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffff6fc}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1290}, 0x1, 0x0, 0x0, 0x8801}, 0x800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x2, 0xffe1}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={r11, 0x94f, 0xfff}, 0x8) r12 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5883, 0x100, 0x0, 0x3}, &(0x7f0000000340), &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r13, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22040881}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r12]}}], 0x18, 0x4000}}], 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r14, 0x10, 0x7800, 0x8, 0x4000006, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0x3, 0x29, 0x0, @broadcast, @rand_addr=0x64010102}}}}) 1.007049793s ago: executing program 2 (id=306): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) close(r1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket(0x1e, 0x805, 0x0) connect$tipc(r4, &(0x7f0000000000)=@id, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000080)={0x1, 'b'}, 0x2) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r6, 0x5600, &(0x7f0000000000)) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) accept4(r0, 0x0, 0x0, 0x800) 821.777145ms ago: executing program 1 (id=310): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008002300010000000500110001000000e5cc8c85e67cd68b4528f492a9b1b778c20c86a01eae371086cdcedaaee786b5b3106384eca6e06926979123faac35a071ea9cb7d17136a3fce8b26c3f751180ac929142b9c1d3c6808c1a5e96d668872428ae902b03fb64cc175c00ba797fe5c6099866ab8a3b9327ba770a8db1139615da0efaff46aaeaff270e40ab0a670506e88babe7112248068df982ced95d77c8b9b82f4d75ac0c3aa805adb6fb262584ff93a60578e98a30bc393d9a4a6502367e3353550ac0a0daf5a47470d686fd4b99051d0c9ca6ee4a8717c8a4d2c98a4849ad787b666bb1eab14f75782c77fe252c7ca301fd3cec6b41af6bfe785c6a1fd6bb4dab"], 0x44}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000380)=0xff, 0x5b) sendto$inet6(r1, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=0x0, @ANYRES16=r0], 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0x64010101, 0x4e22, 0x0, 0x4e22, 0x2, 0x2, 0x80, 0x20, 0x33}, {0x6, 0x6, 0x6, 0x9, 0x3, 0xa0f3, 0x9, 0x3}, {0x9, 0x8, 0xf}, 0x9, 0x6e6bba, 0x2, 0x0, 0x1, 0x3}, {{@in=@broadcast, 0x9, 0x3c}, 0xa, @in6=@empty, 0x34ff, 0xea785460cf137bb6, 0x0, 0x9, 0xffffffff, 0x0, 0x4}}, 0xe8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000080), 0x26000, 0x1000, 0x2}, 0x20) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000200)={0x4e, 0x2, 0x3, "11010100001400000100005c4b7c1500000000f100"}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000540)={[0x88ab8, 0xca26, 0x9, 0xd646, 0x7, 0xf, 0x8001, 0x1ff, 0x3, 0x8000000000000000, 0x8000000000000001, 0x2, 0xffff, 0x101, 0x5, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0xd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3ff}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000180)=0x2000000) close_range(r0, 0xffffffffffffffff, 0x0) 769.587076ms ago: executing program 0 (id=312): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x5, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x4078, 0x9, 0xb, 0x2}]}) 698.435077ms ago: executing program 0 (id=314): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 650.288292ms ago: executing program 1 (id=316): symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') lgetxattr(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)=@known='system.posix_acl_access\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0xa, 0xfffffff7) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @rand_addr=0x64010101}, {0x2, 0x4e22, @broadcast}, 0x80, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)='ip6tnl0\x00', 0x3dc4, 0xffffffffffffffff, 0x8}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x63, 0x1, 0x0, r2, 0x0}]) r4 = openat$procfs(0xffffff9c, &(0x7f0000001080)='/proc/slabinfo\x00', 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) preadv(r5, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/129, 0x81}, {0x0, 0x2}], 0x2, 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r4}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="3004000018000100000000000000000002000000020001090022000006001500040000000c201680080004003f0000003d9116863203974ca87243a4aa9b0c28d76c8b0d"], 0x30}, 0x1, 0x0, 0x0, 0x10001}, 0x4000000) fcntl$setlease(r5, 0x400, 0x1) 650.056795ms ago: executing program 0 (id=317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (fail_nth: 5) 649.131512ms ago: executing program 4 (id=318): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) unshare(0xa000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5, r1, 0x4}, 0x38) (async) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) (async) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x7}, {0x6, 0x8d, 0x0, 0x1}]}) 599.207113ms ago: executing program 1 (id=319): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "76131e58a256d4af", "4448076cc60af592e807e038c4797041", "8076e30e", "f79d7fbbf3985dbb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "2474794233890da1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9e7", "7c5cec21291a43fe"}, 0x38) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x0, 0x0, 0xd}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) syz_io_uring_setup(0x3b, 0x0, 0x0, 0x0) r5 = socket(0x18, 0x0, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000200)=0x1) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f00000002c0)=0x2) close_range(r4, 0xffffffffffffffff, 0x400000000000000) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, 0x29, 0xb, 0x0, 0x0, {0xa}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}]}]}, 0x20}}, 0x804) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 577.185896ms ago: executing program 0 (id=320): keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, 0x0}, 0x3a8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r3, 0x1, {}, 0xff}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x4, 0x0, 0x0, 0x40805}, 0x8001) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x80, 0x900, 0x0, 0x1c, {[@window={0xe}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r7 = dup(r4) mq_timedreceive(r7, &(0x7f0000000040)=""/58, 0x3a, 0xe, &(0x7f0000000080)={0x0, 0x3938700}) write$UHID_INPUT(r7, &(0x7f0000001040)={0x18, {"a2e3ad21ed9b52f99cfbf4c087f74f9b36096ebf7fc6e5539b9b18098b9b4a1b2552091b080d29428f0e1ac6e7049b3468959b189a242a9b3ff3988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00300300000000000000b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f275a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8d03000000000000003710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f355cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df34959eaef6572e1e007fa55a2999f25f5a448427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcc004579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e74b080000c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210425483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f2269783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb079fc01af0e79c1e14b1d25988c69a399567c1d9376d0543a031488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33fb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799ecb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333cd5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a10010549820a73c8839475f732ae00398e4bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec010900e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe846c0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000204b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff9576abc9ede7885d94ff1aa7082ead01a9b03c37b0969b62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb699216278dcbf6c9c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000600", 0x1000}}, 0x1006) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000004100)=@expire={0x11cc, 0x18, 0x402, 0x70bd25, 0x25dfdbfb, {{{@in=@dev={0xac, 0x14, 0x14, 0x10}, @in=@rand_addr=0x64010101, 0x4e22, 0x5, 0x4e22, 0x1, 0x0, 0x20, 0x40, 0x2e, 0x0, r8}, {@in6=@private0, 0x4d5, 0xff}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x3, 0x1, 0x26c, 0xdb, 0x0, 0xffff, 0x8, 0x4}, {0x3, 0x1, 0xffffffffffffa7bc, 0x7}, {0x8, 0x2, 0x5}, 0x70bd2d, 0x3506, 0xa, 0x2, 0x5e, 0x20}, 0x2}, [@replay_esn_val={0x40, 0x17, {0x9, 0x70bd2b, 0x70bd26, 0x70bd2b, 0x70bd26, 0x5, [0x7, 0xfffffff9, 0x401, 0x200000, 0x9, 0x9ea, 0x7, 0x5, 0x7]}}, @coaddr={0x14, 0xe, @in=@loopback}, @XFRMA_SET_MARK={0x8, 0x1d, 0x3}, @algo_aead={0x104c, 0x12, {{'ccm(serpent-generic)\x00'}, 0x8000, 0xa0, "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"}}, @lifetime_val={0x24, 0x9, {0x0, 0x10000, 0xffff, 0x4}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x10}]}, 0x11cc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f0000002080)={{0x0, 0x0, 0x80}}) syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x1) 450.204002ms ago: executing program 1 (id=321): r0 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="05003400f7000000080026006c09000008002700030e00"], 0x34}, 0x1, 0x0, 0x0, 0x80090}, 0x0) rmdir(&(0x7f00000001c0)='./file1\x00') r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000040)='./file1\x00', 0xc000, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000740)={0x0}) rename(&(0x7f0000000280)='./file1\x00', &(0x7f0000000200)='./bus\x00') r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r9, {0xffff, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xfff3}}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 444.000961ms ago: executing program 4 (id=322): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000280)=0x0) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7ff}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x20000000, 0x0, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x1, r0, 0x0, 0x0, 0xe9d0}]) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000040)={0x0, 0x0, "af602709566dee93d465c6f87a1c9530"}) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r5, &(0x7f0000000800)="3703c70f70e244b7878fedf0d0286e72651d1af212c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31241a900518bef75ab52d7df9d091c4c601dc1cb4f1c7ed7a1d442806cc98e35646b37f83f3bb3e4f02ec50ea98886238588d3026c58accd40e86c0e0b35299466ff4c52b90eb253246", 0x8e, 0x2000000000009) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x1) write$cgroup_int(r6, &(0x7f0000000540)=0x100, 0x12) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 400.055803ms ago: executing program 1 (id=323): r0 = socket(0x10, 0x80001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$sock_int(r4, 0x1, 0x2d, &(0x7f0000000980), 0x4) syz_emit_ethernet(0x102d, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1], 0x0) 319.897781ms ago: executing program 0 (id=324): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008002300010000000500110001000000e5cc8c85e67cd68b4528f492a9b1b778c20c86a01eae371086cdcedaaee786b5b3106384eca6e06926979123faac35a071ea9cb7d17136a3fce8b26c3f751180ac929142b9c1d3c6808c1a5e96d668872428ae902b03fb64cc175c00ba797fe5c6099866ab8a3b9327ba770a8db1139615da0efaff46aaeaff270e40ab0a670506e88babe7112248068df982ced95d77c8b9b82f4d75ac0c3aa805adb6fb262584ff93a60578e98a30bc393d9a4a6502367e3353550ac0a0daf5a47470d686fd4b99051d0c9ca6ee4a8717c8a4d2c98a4849ad787b666bb1eab14f75782c77fe252c7ca301fd3cec6b41af6bfe785c6a1fd6bb4dab"], 0x44}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000380)=0xff, 0x5b) sendto$inet6(r1, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=0x0, @ANYRES16=r0], 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0x64010101, 0x4e22, 0x0, 0x4e22, 0x2, 0x2, 0x80, 0x20, 0x33}, {0x6, 0x6, 0x6, 0x9, 0x3, 0xa0f3, 0x9, 0x3}, {0x9, 0x8, 0xf}, 0x9, 0x6e6bba, 0x2, 0x0, 0x1, 0x3}, {{@in=@broadcast, 0x9, 0x3c}, 0xa, @in6=@empty, 0x34ff, 0xea785460cf137bb6, 0x0, 0x9, 0xffffffff, 0x0, 0x4}}, 0xe8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000080), 0x26000, 0x1000, 0x2}, 0x20) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000200)={0x4e, 0x2, 0x3, "11010100001400000100005c4b7c1500000000f100"}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000540)={[0x88ab8, 0xca26, 0x9, 0xd646, 0x7, 0xf, 0x8001, 0x1ff, 0x3, 0x8000000000000000, 0x8000000000000001, 0x2, 0xffff, 0x101, 0x5, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0xd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3ff}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000180)=0x2000000) close_range(r0, 0xffffffffffffffff, 0x0) 219.875034ms ago: executing program 1 (id=325): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x18) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000b, 0x12, r1, 0x1000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc2, 0x0, 0x0}, &(0x7f0000000180)=0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x44011) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0xd08f, @private=0xa010102}}, 0xa31a, 0x0, 0x80000001, 0xffffffff, 0x23, 0x10001, 0x3}, &(0x7f00000000c0)=0x9c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={r4, 0x3, 0x8, 0x800, 0x2, 0x7}, 0x14) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) ioctl$PPPIOCSMRU(r5, 0x40047452, &(0x7f0000000300)) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000002e0efc247520d20060f0"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 218.824875ms ago: executing program 4 (id=326): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x3d) (async) r1 = inotify_init1(0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000440)='.\x00', 0x12000021) (async) syz_emit_ethernet(0x19a, &(0x7f0000000640)={@broadcast, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x164, 0x2f, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xa, 0x40], "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"}}}}}}}, 0x0) (async, rerun: 32) inotify_add_watch(r1, &(0x7f0000000140)='.\x00', 0x40000022) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) write$FUSE_INIT(r3, &(0x7f0000000300)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x81, 0x1800, 0x3, 0xf24, 0x5, 0x100}}, 0x50) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x5, &(0x7f0000000180)=@raw=[@tail_call], &(0x7f00000001c0)='GPL\x00', 0xc, 0x2b, &(0x7f0000000200)=""/43, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13064, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f0000000040), &(0x7f00000002c0)=r4}, 0x20) 216.714727ms ago: executing program 33 (id=325): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x18) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000b, 0x12, r1, 0x1000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc2, 0x0, 0x0}, &(0x7f0000000180)=0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x44011) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0xd08f, @private=0xa010102}}, 0xa31a, 0x0, 0x80000001, 0xffffffff, 0x23, 0x10001, 0x3}, &(0x7f00000000c0)=0x9c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={r4, 0x3, 0x8, 0x800, 0x2, 0x7}, 0x14) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) ioctl$PPPIOCSMRU(r5, 0x40047452, &(0x7f0000000300)) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000002e0efc247520d20060f0"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 168.583636ms ago: executing program 0 (id=328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r5 = syz_io_uring_setup(0x29ab, &(0x7f0000000380)={0x0, 0x5888, 0x10000, 0x1, 0x1c1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r4, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r5, 0x3556, 0xc2de, 0xd, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000040)={0x0, 0x6, 0x700000}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f0000000200)={0xda, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="ccb928020000b8f8f9c55bba0d6f6f5e0f30f26c39c0b9c7090000b8f3c9306cba000000000f302e260f01df66b805010f00d0c4c3455ea4bebbd636fa00c4c10573d30066b8c2008ed8", 0x4a}], 0x1, 0x4, &(0x7f0000000200)=[@dstype0={0x6, 0x2}, @vmwrite={0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffe00}], 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r10 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = dup(r13) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000340)="f20f01b800680fb0bee7070f30f0815f6d00803e3e0f01c90fc79bcc00d3cd660f38007600baf80c66b82402668766efbafc0c3f0f01de", 0x37}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r13, 0x4010ae67, 0x0) ioctl$KVM_NMI(r15, 0xae9a) ioctl$KVM_RUN(r15, 0xae80, 0x0) 167.123421ms ago: executing program 2 (id=329): r0 = socket$kcm(0x10, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f00000000c0)) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000340)={0x5, 0x3, 0x9, 0x5, 0x7f, 0x4800000000000, 0x6, 0xae}, &(0x7f0000000380)={0x3, 0x9, 0x4, 0x5, 0x6, 0x7, 0x9, 0x3}, &(0x7f00000004c0)={0x2, 0x3, 0x66, 0x10, 0x7, 0x68, 0xb7, 0x2}, &(0x7f0000000500)={0x77359400}, &(0x7f00000005c0)={&(0x7f0000000540)={[0x6]}, 0x8}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x800, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000140)={'#! ', '', [{0x20, 'cpu.stat\x00'}]}, 0xe) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)=""/151, 0x97}, {&(0x7f0000000680)=""/163, 0xa3}], 0x2, &(0x7f0000000780)=""/233, 0xe9}, 0x20) sendmsg$tipc(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="b8d3d8e48974aae503984742e847457d61b9459b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd8cbb6f069a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e2", 0x99}], 0x1, 0x0, 0x0, 0x84}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) close(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) r9 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10920}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r12, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r12, 0x0) r13 = socket(0x22, 0x2, 0x3) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r13, 0x84, 0x1, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x11, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x1f}) io_uring_enter(r9, 0x2d3e, 0x0, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x48, 0x5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000428000001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r15], 0x4c}}, 0x8000) 89.630482ms ago: executing program 4 (id=330): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@migrate={0xec, 0x21, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in=@multicast1, @in=@rand_addr=0x64010100, 0x4e22, 0x8001, 0x7, 0x0, 0xa, 0x80, 0x80, 0x3b}, 0x6e6bb3, 0x1}, [@migrate={0x9c, 0x11, [{@in6=@empty, @in=@loopback, @in=@multicast1, @in6=@private0, 0x2b, 0x3, 0x0, 0x34ff, 0x2, 0xa}, {@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x19}, @in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0xff, 0x3, 0x0, 0x3501, 0x5, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) fcntl$addseals(r0, 0x11, 0xb1c25ce47c749b08) r4 = socket(0x1e, 0x80004, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000080)={0x1d, 0x1c, 0x9, 0xf, 0x9, 0x9, 0x4, 0x53, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRES16=r1, @ANYRES16=r6, @ANYRESDEC=r4, @ANYRES64=r5, @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x2400c854) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r7 = dup3(0xffffffffffffffff, r4, 0x0) recvmsg$qrtr(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/140, 0x8c}], 0x1, 0x0, 0x0, 0x21}, 0x38, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x21, &(0x7f0000000300), 0x4) write$UHID_INPUT(r7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 314.487µs ago: executing program 4 (id=331): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0xfffffffffffffcf3, r2, 0xf03, 0x0, 0x25dfdbfe, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x1c}}, 0x0) 0s ago: executing program 4 (id=332): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000040)={0x8}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0xfffffffa, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000100)='!', 0x1}, {&(0x7f0000000780)="91b10d1375c31dd6efac1d6adfa8ae0b48b2aa58dfb3e1f7f9cd396e7f56a479de46e6e37eba7a5d980808e7dd0628e54c469a8ad5c39b0bf434bff9429c8d38b6da7f529827a8e5c400d18c6150dea18b9e70c7f8b14dc558d59bb92dde07beadaf20d885d09c48c17fb6aff59da4fdd120a26787f750f0e9705fe3fafae1a3a0df84e8fed16476938e42cd0cbb33282a74abb91782a2621614f37ac3592fb482a079b0bd008362a60976d8fca75026454390d1407392126197eae99b8633c71acd0bdacda146296a4f87b061987eadee1e7b6376a9b010b649e2d98e66cf649ed8f8d1e6e08310a588c06da0dd40209a4017a9642ca993e8", 0xf9}, {&(0x7f0000001a80)="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", 0x456}], 0x3) kernel console output (not intermixed with test programs): [ 38.166098][ T40] audit: type=1400 audit(1737552854.436:82): avc: denied { siginh } for pid=5910 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.858678][ T40] audit: type=1400 audit(1737552855.146:83): avc: denied { read } for pid=5331 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.866901][ T40] audit: type=1400 audit(1737552855.156:84): avc: denied { append } for pid=5331 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.876263][ T40] audit: type=1400 audit(1737552855.156:85): avc: denied { open } for pid=5331 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.885343][ T40] audit: type=1400 audit(1737552855.156:86): avc: denied { getattr } for pid=5331 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:34740' (ED25519) to the list of known hosts. [ 39.190528][ T40] audit: type=1400 audit(1737552855.486:87): avc: denied { name_bind } for pid=5916 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.633856][ T5919] cgroup: Unknown subsys name 'net' [ 40.803234][ T5919] cgroup: Unknown subsys name 'cpuset' [ 40.808086][ T5919] cgroup: Unknown subsys name 'rlimit' [ 41.072199][ T5926] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 41.868811][ T5919] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.388728][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 44.388743][ T40] audit: type=1400 audit(1737552860.676:105): avc: denied { execmem } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.623417][ T40] audit: type=1400 audit(1737552860.916:106): avc: denied { create } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.631223][ T40] audit: type=1400 audit(1737552860.916:107): avc: denied { create } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.639130][ T40] audit: type=1400 audit(1737552860.916:109): avc: denied { read write } for pid=5933 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.648290][ T40] audit: type=1400 audit(1737552860.916:108): avc: denied { read write } for pid=5932 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.656831][ T40] audit: type=1400 audit(1737552860.916:110): avc: denied { open } for pid=5932 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.666257][ T40] audit: type=1400 audit(1737552860.916:111): avc: denied { ioctl } for pid=5934 comm="syz-executor" path="socket:[2752]" dev="sockfs" ino=2752 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.668669][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.678942][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.679499][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.682032][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.682619][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.683186][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.683737][ T5946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.684449][ T5946] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.685690][ T5949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.686023][ T5949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.686308][ T5949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.686512][ T5949] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.687309][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.687552][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.687666][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.688060][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.689163][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.689280][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.689792][ T5946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.690610][ T5946] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.691301][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.691712][ T5949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.694615][ T5949] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.702756][ T40] audit: type=1400 audit(1737552860.996:112): avc: denied { read } for pid=5935 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.708703][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.710374][ T40] audit: type=1400 audit(1737552860.996:113): avc: denied { open } for pid=5935 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.742594][ T40] audit: type=1400 audit(1737552860.996:114): avc: denied { mounton } for pid=5935 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.832826][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 44.906339][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 44.925714][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.929867][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.932812][ T5935] bridge_slave_0: entered allmulticast mode [ 44.935862][ T5935] bridge_slave_0: entered promiscuous mode [ 44.942148][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.944544][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.946687][ T5935] bridge_slave_1: entered allmulticast mode [ 44.949675][ T5935] bridge_slave_1: entered promiscuous mode [ 44.966203][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 45.017360][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.045592][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.104339][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.106425][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.108598][ T5933] bridge_slave_0: entered allmulticast mode [ 45.111387][ T5933] bridge_slave_0: entered promiscuous mode [ 45.156866][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.160465][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.162767][ T5933] bridge_slave_1: entered allmulticast mode [ 45.164934][ T5933] bridge_slave_1: entered promiscuous mode [ 45.169663][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.172457][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.175215][ T5932] bridge_slave_0: entered allmulticast mode [ 45.178956][ T5932] bridge_slave_0: entered promiscuous mode [ 45.183297][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.185298][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.187370][ T5932] bridge_slave_1: entered allmulticast mode [ 45.189754][ T5932] bridge_slave_1: entered promiscuous mode [ 45.194408][ T5935] team0: Port device team_slave_0 added [ 45.208670][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 45.244245][ T5935] team0: Port device team_slave_1 added [ 45.263551][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.272056][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.277082][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.283644][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.332055][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.334686][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.344802][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.371643][ T5933] team0: Port device team_slave_0 added [ 45.382591][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.385048][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.392915][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.402548][ T5933] team0: Port device team_slave_1 added [ 45.419427][ T5932] team0: Port device team_slave_0 added [ 45.424449][ T5932] team0: Port device team_slave_1 added [ 45.496356][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.499152][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.509008][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.513143][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.516136][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.518699][ T5934] bridge_slave_0: entered allmulticast mode [ 45.520993][ T5934] bridge_slave_0: entered promiscuous mode [ 45.524198][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.526257][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.529163][ T5934] bridge_slave_1: entered allmulticast mode [ 45.531407][ T5934] bridge_slave_1: entered promiscuous mode [ 45.543985][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.546252][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.556356][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.561196][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.563909][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.574247][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.579689][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.582462][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.593448][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.622948][ T5935] hsr_slave_0: entered promiscuous mode [ 45.625025][ T5935] hsr_slave_1: entered promiscuous mode [ 45.659911][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.674160][ T5932] hsr_slave_0: entered promiscuous mode [ 45.677543][ T5932] hsr_slave_1: entered promiscuous mode [ 45.679974][ T5932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.682316][ T5932] Cannot create hsr debugfs directory [ 45.685290][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.738345][ T5933] hsr_slave_0: entered promiscuous mode [ 45.742165][ T5933] hsr_slave_1: entered promiscuous mode [ 45.744261][ T5933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.746592][ T5933] Cannot create hsr debugfs directory [ 45.750305][ T5934] team0: Port device team_slave_0 added [ 45.756857][ T5934] team0: Port device team_slave_1 added [ 45.794213][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.796289][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.804354][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.812387][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.815196][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.824315][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.937325][ T5934] hsr_slave_0: entered promiscuous mode [ 45.939453][ T5934] hsr_slave_1: entered promiscuous mode [ 45.941362][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.943574][ T5934] Cannot create hsr debugfs directory [ 46.042137][ T5935] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.047707][ T5935] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.051574][ T5935] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.056872][ T5935] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.094723][ T5932] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.099483][ T5932] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.102712][ T5932] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.105851][ T5932] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.134554][ T5933] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.138070][ T5933] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.144937][ T5933] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.155709][ T5933] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.173764][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.177258][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.184079][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.188168][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.235284][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.251663][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.271744][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.279341][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.287798][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.290260][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.293670][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.295708][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.306789][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.309641][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.313369][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.315425][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.351521][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.373487][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.385388][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.393801][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.402190][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.404558][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.407878][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.410702][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.425737][ T5933] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.429692][ T5933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.445716][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.447822][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.454665][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.456795][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.464737][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.490881][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.513306][ T5935] veth0_vlan: entered promiscuous mode [ 46.519177][ T5935] veth1_vlan: entered promiscuous mode [ 46.527936][ T5932] veth0_vlan: entered promiscuous mode [ 46.535193][ T5932] veth1_vlan: entered promiscuous mode [ 46.545855][ T5935] veth0_macvtap: entered promiscuous mode [ 46.562349][ T5935] veth1_macvtap: entered promiscuous mode [ 46.567367][ T5932] veth0_macvtap: entered promiscuous mode [ 46.571689][ T5932] veth1_macvtap: entered promiscuous mode [ 46.581814][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.587283][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.592708][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.597877][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.603834][ T5932] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.606602][ T5932] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.609666][ T5932] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.612063][ T5932] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.615576][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.619341][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.622702][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.643583][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.646606][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.650795][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.661423][ T5935] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.664304][ T5935] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.667147][ T5935] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.670097][ T5935] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.687935][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.690590][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.698031][ T5934] veth0_vlan: entered promiscuous mode [ 46.719234][ T5933] veth0_vlan: entered promiscuous mode [ 46.721463][ T65] Bluetooth: hci1: command tx timeout [ 46.721501][ T5949] Bluetooth: hci3: command tx timeout [ 46.723159][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.723174][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.724120][ T65] Bluetooth: hci2: command tx timeout [ 46.724393][ T5933] veth1_vlan: entered promiscuous mode [ 46.724832][ T5934] veth1_vlan: entered promiscuous mode [ 46.758653][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.760910][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.764316][ T5933] veth0_macvtap: entered promiscuous mode [ 46.778564][ T5933] veth1_macvtap: entered promiscuous mode [ 46.784252][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.785647][ T5932] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.787537][ T5934] veth0_macvtap: entered promiscuous mode [ 46.794524][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.801138][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.804163][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.807144][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.810760][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.810933][ T65] Bluetooth: hci0: command tx timeout [ 46.817779][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.822431][ T5934] veth1_macvtap: entered promiscuous mode [ 46.829236][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.832421][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.835218][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.838343][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.843608][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.846350][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 46.855178][ T5998] Zero length message leads to an empty skb [ 46.862619][ T5933] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.865141][ T5933] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.867668][ T5933] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.870517][ T5933] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.889598][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.892751][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.895587][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.899047][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.901939][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.904845][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.910940][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.921306][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.924503][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.930403][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.933476][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.936725][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.940337][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.944575][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.964007][ T5934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.966682][ T5934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.970580][ T5934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.973149][ T5934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.000390][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.003886][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.020454][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.022749][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.045601][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.048001][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.060079][ T220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.062349][ T220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.141652][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 47.175248][ T6044] program syz.1.14 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.177034][ T6047] program syz.0.16 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.179251][ T6049] tipc: Started in network mode [ 47.182406][ T6049] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 47.184831][ T6049] tipc: Enabled bearer , priority 10 [ 47.244525][ T6057] erspan1: entered promiscuous mode [ 47.247539][ T6060] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19'. [ 47.533174][ T6080] VFS: unable to find oldfs superblock on device nullb0 [ 48.243461][ T57] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 48.299555][ T8] tipc: Node number set to 15444650 [ 48.409342][ T57] usb 7-1: Using ep0 maxpacket: 8 [ 48.409444][ T6107] process 'syz.0.36' launched './file0' with NULL argv: empty string added [ 48.416379][ T6107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 48.419659][ T57] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 48.423826][ T57] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 48.427614][ T57] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 48.433428][ T57] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 48.438467][ T57] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 48.442093][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.474067][ T6114] binder: 6113:6114 ioctl c018620c 20000000 returned -1 [ 48.476779][ T6115] binder: 6113:6115 ioctl 8953 20000a00 returned -22 [ 48.481770][ T6115] netlink: 'syz.0.37': attribute type 10 has an invalid length. [ 48.485203][ T6115] bond0: (slave bond_slave_0): Releasing backup interface [ 48.558309][ T6126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.41'. [ 48.653729][ T57] usb 7-1: GET_CAPABILITIES returned 0 [ 48.656459][ T57] usbtmc 7-1:16.0: can't read capabilities [ 48.798834][ T65] Bluetooth: hci3: command tx timeout [ 48.798886][ T5942] Bluetooth: hci1: command tx timeout [ 48.803228][ T30] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 48.809561][ T5942] Bluetooth: hci2: command tx timeout [ 48.822322][ T6141] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.826062][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'. [ 48.878834][ T5942] Bluetooth: hci0: command tx timeout [ 48.905798][ T6096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.909187][ T6096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.922819][ T5979] usb 7-1: USB disconnect, device number 2 [ 48.968332][ T6158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.48'. [ 48.973036][ T30] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 48.976754][ T30] usb 5-1: config 0 interface 0 has no altsetting 0 [ 48.982404][ T30] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 48.985976][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.989154][ T30] usb 5-1: Product: syz [ 48.991384][ T30] usb 5-1: Manufacturer: syz [ 48.993986][ T30] usb 5-1: SerialNumber: syz [ 48.999682][ T30] usb 5-1: config 0 descriptor?? [ 49.006218][ T30] usb 5-1: selecting invalid altsetting 0 [ 49.074792][ T6164] syzkaller0: entered promiscuous mode [ 49.076453][ T6164] syzkaller0: entered allmulticast mode [ 49.080356][ T6167] netlink: 'syz.2.51': attribute type 1 has an invalid length. [ 49.083366][ T6167] netlink: 'syz.2.51': attribute type 1 has an invalid length. [ 49.193077][ T6177] Cannot find map_set index 0 as target [ 49.222826][ T57] usb 5-1: USB disconnect, device number 2 [ 49.251460][ T6182] syz.3.55 uses obsolete (PF_INET,SOCK_PACKET) [ 49.849099][ T6193] veth1_macvtap: left promiscuous mode [ 49.850714][ T6193] macsec0: entered promiscuous mode [ 49.852206][ T6193] macsec0: entered allmulticast mode [ 49.948342][ T40] kauditd_printk_skb: 143 callbacks suppressed [ 49.948352][ T40] audit: type=1400 audit(2000000000.050:258): avc: denied { bind } for pid=6204 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 50.015771][ T40] audit: type=1400 audit(2000000000.120:259): avc: denied { write } for pid=6216 comm="syz.0.62" path="socket:[6922]" dev="sockfs" ino=6922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 50.024764][ T40] audit: type=1400 audit(2000000000.120:260): avc: denied { nlmsg_read } for pid=6216 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 50.044104][ T6220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 50.049152][ T40] audit: type=1400 audit(2000000000.150:261): avc: denied { mount } for pid=6219 comm="syz.2.63" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.054198][ T6220] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 50.060135][ T6220] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 50.064002][ T40] audit: type=1400 audit(2000000000.170:262): avc: denied { mount } for pid=6219 comm="syz.2.63" name="/" dev="overlay" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.071290][ T40] audit: type=1400 audit(2000000000.170:263): avc: denied { read } for pid=6219 comm="syz.2.63" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 50.077443][ T40] audit: type=1400 audit(2000000000.170:264): avc: denied { open } for pid=6219 comm="syz.2.63" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 50.084559][ T40] audit: type=1400 audit(2000000000.170:265): avc: denied { search } for pid=6219 comm="syz.2.63" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 50.091554][ T40] audit: type=1400 audit(2000000000.170:266): avc: denied { getattr } for pid=6219 comm="syz.2.63" name="saved_tgids" dev="tracefs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 50.116767][ T40] audit: type=1400 audit(2000000000.220:267): avc: denied { unmount } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.147052][ T6231] syzkaller0: renamed from bond0 (while UP) [ 50.254308][ T6238] kvm: MWAIT instruction emulated as NOP! [ 50.820766][ T6262] kvm: emulating exchange as write [ 50.843625][ T6267] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 50.855816][ T6267] CIFS mount error: No usable UNC path provided in device string! [ 50.855816][ T6267] [ 50.870966][ T6267] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 50.880474][ T5942] Bluetooth: hci3: command tx timeout [ 50.880830][ T65] Bluetooth: hci2: command tx timeout [ 50.882316][ T5949] Bluetooth: hci1: command tx timeout [ 50.900457][ T6267] bridee_slave_0: renamed from lo (while UP) [ 50.968335][ T6269] Process accounting resumed [ 50.968567][ T5949] Bluetooth: hci0: command tx timeout [ 51.018318][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.023396][ T6275] bridge_slave_1: left allmulticast mode [ 51.025754][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.032105][ T6275] netlink: 'syz.1.79': attribute type 2 has an invalid length. [ 51.035047][ T6275] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 51.076326][ T6277] fuse: Bad value for 'fd' [ 51.120325][ T6277] input: syz0 as /devices/virtual/input/input7 [ 51.284934][ T6301] netlink: 'syz.0.85': attribute type 5 has an invalid length. [ 51.298359][ T6301] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 51.304977][ T6305] wg0: entered allmulticast mode [ 52.179852][ T6338] netlink: 'syz.0.90': attribute type 10 has an invalid length. [ 52.191141][ T6338] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 52.318747][ T5938] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 52.343217][ T6350] netlink: 96 bytes leftover after parsing attributes in process `syz.0.94'. [ 52.384127][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 52.471573][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'. [ 52.489849][ T5938] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 52.492198][ T5938] usb 6-1: config 0 has no interface number 0 [ 52.494030][ T5938] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 52.497475][ T5938] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 52.501683][ T5938] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 52.505047][ T5938] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 52.508164][ T5938] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 52.511063][ T5938] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 52.514688][ T5938] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 52.517385][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.522137][ T5938] usb 6-1: config 0 descriptor?? [ 52.524027][ T6336] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 52.528069][ T5938] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 52.644366][ T6370] netlink: 372 bytes leftover after parsing attributes in process `syz.0.98'. [ 52.779025][ T6372] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90 [ 52.783633][ T6336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.787146][ T6336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.800379][ T9] usb 6-1: USB disconnect, device number 2 [ 52.806472][ T9] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 52.968436][ T65] Bluetooth: hci3: command tx timeout [ 52.968488][ T5949] Bluetooth: hci1: command tx timeout [ 53.038560][ T5949] Bluetooth: hci0: command tx timeout [ 53.198519][ T57] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 53.200987][ T57] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 55.278401][ T5949] Bluetooth: hci3: command 0x0c1a tx timeout [ 55.280997][ T57] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 55.283399][ T57] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 57.368204][ T57] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 57.368214][ T5949] Bluetooth: hci0: command 0x0c1a tx timeout [ 57.370001][ T57] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 57.481853][ T220] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.524158][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 57.524169][ T40] audit: type=1400 audit(2000000007.620:315): avc: denied { setopt } for pid=6401 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 57.526465][ T6406] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 4, id = 0 [ 57.526713][ T6402] IPVS: stopping backup sync thread 6406 ... [ 57.532271][ T40] audit: type=1400 audit(2000000007.630:316): avc: denied { watch watch_reads } for pid=6404 comm="syz.2.109" path="/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 57.541113][ T6403] input: syz0 as /devices/virtual/input/input8 [ 57.542736][ T6402] hpfs: Bad magic ... probably not HPFS [ 57.552920][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 57.560362][ T40] audit: type=1400 audit(2000000007.650:317): avc: denied { connect } for pid=6401 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 57.566496][ T40] audit: type=1400 audit(2000000007.650:318): avc: denied { name_connect } for pid=6401 comm="syz.0.107" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 57.584666][ T6408] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.595791][ T220] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.614189][ T6403] syz.1.108: attempt to access beyond end of device [ 57.614189][ T6403] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 57.617977][ T6403] EXT4-fs (nbd1): unable to read superblock [ 57.644989][ T65] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.647919][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.652091][ T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.662154][ T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.662316][ T220] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.664557][ T65] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.671739][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.676852][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.679229][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.682268][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.685061][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.687301][ T5949] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.698170][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.705843][ T40] audit: type=1400 audit(2000000007.800:319): avc: denied { mounton } for pid=6415 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 57.774175][ T6425] syz.1.112: attempt to access beyond end of device [ 57.774175][ T6425] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 57.780509][ T6425] SQUASHFS error: Failed to read block 0x0: -5 [ 57.783010][ T6425] unable to read squashfs_super_block [ 57.783791][ T220] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.789327][ T6424] syz.1.112: attempt to access beyond end of device [ 57.789327][ T6424] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 57.789408][ T6424] SQUASHFS error: Failed to read block 0x0: -5 [ 57.789448][ T6424] unable to read squashfs_super_block [ 57.822509][ T40] audit: type=1400 audit(2000000007.920:320): avc: denied { bind } for pid=6427 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.835843][ T40] audit: type=1400 audit(2000000007.920:321): avc: denied { node_bind } for pid=6427 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 57.846115][ T40] audit: type=1400 audit(2000000007.940:322): avc: denied { connect } for pid=6430 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.855133][ T40] audit: type=1400 audit(2000000007.940:323): avc: denied { ioctl } for pid=6430 comm="syz.2.114" path="socket:[12342]" dev="sockfs" ino=12342 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.860978][ T6415] chnl_net:caif_netlink_parms(): no params data found [ 57.866611][ T40] audit: type=1400 audit(2000000007.950:324): avc: denied { write } for pid=6430 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.157341][ T6415] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.164209][ T6415] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.166623][ T6415] bridge_slave_0: entered allmulticast mode [ 58.170236][ T6415] bridge_slave_0: entered promiscuous mode [ 58.176321][ T6415] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.179124][ T6415] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.181863][ T6415] bridge_slave_1: entered allmulticast mode [ 58.184931][ T6415] bridge_slave_1: entered promiscuous mode [ 58.236406][ T6415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.241658][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.244141][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.246988][ T6450] bridge0: entered allmulticast mode [ 58.254409][ T6415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.257544][ T220] bridge_slave_1: left allmulticast mode [ 58.257862][ T6450] fuse: Unknown parameter 'user_id0' [ 58.259609][ T220] bridge_slave_1: left promiscuous mode [ 58.263487][ T220] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.269597][ T220] bridge_slave_0: left allmulticast mode [ 58.271304][ T220] bridge_slave_0: left promiscuous mode [ 58.273059][ T220] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.278696][ T220] tipc: Resetting bearer [ 58.403988][ T220] tipc: Disabling bearer [ 58.531383][ T220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.537272][ T220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.542773][ T220] bond0 (unregistering): Released all slaves [ 58.564491][ T6459] (unnamed net_device) (uninitialized): option use_carrier: invalid value (7) [ 58.567883][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.570701][ T6468] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.573245][ T6468] bridge0: entered allmulticast mode [ 58.594284][ T6415] team0: Port device team_slave_0 added [ 58.604058][ T6415] team0: Port device team_slave_1 added [ 58.625066][ T220] tipc: Left network mode [ 58.667256][ T6415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.669839][ T6491] misc userio: No port type given on /dev/userio [ 58.674012][ T6415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.692182][ T6415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.699210][ T6415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.701886][ T6415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.714219][ T6415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.822521][ T6415] hsr_slave_0: entered promiscuous mode [ 58.825562][ T6415] hsr_slave_1: entered promiscuous mode [ 58.828296][ T6415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.830526][ T6415] Cannot create hsr debugfs directory [ 58.845615][ T6499] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 58.909541][ T220] hsr_slave_0: left promiscuous mode [ 58.914009][ T220] hsr_slave_1: left promiscuous mode [ 58.927866][ T220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.931541][ T220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.936053][ T220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.945646][ T6514] binder: BINDER_SET_CONTEXT_MGR already set [ 58.947651][ T6514] binder: 6513:6514 ioctl 4018620d 20000000 returned -16 [ 58.948452][ T220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.952543][ T6514] binder_alloc: 6513: binder_alloc_buf, no vma [ 58.954972][ T6517] binder_alloc: 6513: binder_alloc_buf, no vma [ 58.972260][ T220] veth1_macvtap: left promiscuous mode [ 58.974627][ T220] veth0_macvtap: left promiscuous mode [ 58.976313][ T220] veth1_vlan: left promiscuous mode [ 58.977918][ T220] veth0_vlan: left promiscuous mode [ 59.006779][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.135'. [ 59.472728][ T220] team0 (unregistering): Port device team_slave_1 removed [ 59.530500][ T220] team0 (unregistering): Port device team_slave_0 removed [ 59.768798][ T65] Bluetooth: hci2: command tx timeout [ 60.071018][ T6533] netlink: 32 bytes leftover after parsing attributes in process `syz.2.140'. [ 60.073770][ T6532] netlink: 32 bytes leftover after parsing attributes in process `syz.2.140'. [ 60.078955][ T6415] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.085334][ T6415] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.098578][ T6415] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.109018][ T6415] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.123385][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'. [ 60.127362][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'. [ 60.173463][ T6545] netlink: 'syz.2.143': attribute type 10 has an invalid length. [ 60.182511][ T6545] team0: Port device netdevsim0 added [ 60.185475][ T6545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.143'. [ 60.200286][ T6415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.213398][ T6415] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.219204][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.221269][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.226652][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.229315][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.345863][ T6415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.479502][ T6415] veth0_vlan: entered promiscuous mode [ 60.491160][ T6415] veth1_vlan: entered promiscuous mode [ 60.513491][ T6415] veth0_macvtap: entered promiscuous mode [ 60.517049][ T6415] veth1_macvtap: entered promiscuous mode [ 60.527603][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.531349][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.534336][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.537463][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.540823][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.544830][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.550446][ T6415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.563297][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.567194][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.573260][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.577111][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.582139][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.586211][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.595063][ T6415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.600828][ T6415] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.603355][ T6415] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.605869][ T6415] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.609420][ T6415] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.689748][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.692864][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.718916][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.721834][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.751303][ T6593] SELinux: Context system_u:object_r:bsdpty_device_t:s0 is not valid (left unmapped). [ 60.771508][ T6596] 9p: Unknown uid 00000000004294967295 [ 60.787516][ T6600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.106'. [ 60.787555][ T6601] 9pnet_fd: Insufficient options for proto=fd [ 60.793723][ T6600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6600 comm=syz.4.106 [ 60.841872][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 61.175097][ T832] cfg80211: failed to load regulatory.db [ 61.202766][ T6633] openvswitch: netlink: IP tunnel dst address not specified [ 61.206659][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 61.271793][ T6639] syzkaller0: entered allmulticast mode [ 61.281265][ T6638] syzkaller0: left allmulticast mode [ 61.430396][ T220] Bluetooth: hci4: Frame reassembly failed (-84) [ 61.436800][ T6658] Bluetooth: hci4: Frame reassembly failed (-84) [ 61.816175][ T6684] syzkaller1: entered promiscuous mode [ 61.818855][ T6684] syzkaller1: entered allmulticast mode [ 61.822128][ T6684] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 61.837987][ T5949] Bluetooth: hci2: command tx timeout [ 62.293347][ T6704] netlink: 'syz.0.171': attribute type 10 has an invalid length. [ 62.313138][ T6704] veth0_vlan: left promiscuous mode [ 62.316871][ T6704] veth0_vlan: entered promiscuous mode [ 62.326274][ T6704] team0: Device veth0_vlan failed to register rx_handler [ 62.866311][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 62.866326][ T40] audit: type=1400 audit(2000000012.960:382): avc: denied { sqpoll } for pid=6728 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 62.880342][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'. [ 62.887464][ T5938] IPVS: starting estimator thread 0... [ 62.988058][ T6731] IPVS: using max 42 ests per chain, 100800 per kthread [ 63.010028][ T40] audit: type=1400 audit(2000000013.110:383): avc: denied { watch_mount } for pid=6739 comm="syz.0.182" path="/63" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.021839][ T6740] overlay: filesystem on ./file1 not supported as upperdir [ 63.031383][ T6738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.080570][ T40] audit: type=1400 audit(2000000013.180:384): avc: denied { setopt } for pid=6744 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.140025][ T40] audit: type=1400 audit(2000000013.240:385): avc: denied { write } for pid=5331 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.146279][ T40] audit: type=1400 audit(2000000013.240:386): avc: denied { remove_name } for pid=5331 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.152807][ T40] audit: type=1400 audit(2000000013.240:387): avc: denied { rename } for pid=5331 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.159779][ T40] audit: type=1400 audit(2000000013.240:388): avc: denied { add_name } for pid=5331 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.166439][ T40] audit: type=1400 audit(2000000013.240:389): avc: denied { unlink } for pid=5331 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.173003][ T40] audit: type=1400 audit(2000000013.240:390): avc: denied { create } for pid=5331 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.299741][ T6747] hpfs: hpfs_map_sector(): read error [ 63.303503][ T40] audit: type=1400 audit(2000000013.400:391): avc: denied { listen } for pid=6746 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.438034][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 63.438056][ T5949] Bluetooth: hci4: command 0x1003 tx timeout [ 63.505577][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 63.567379][ T6773] xt_l2tp: missing protocol rule (udp|l2tpip) [ 63.736599][ T6799] program syz.1.197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.739468][ T6799] ata1.00: invalid service action 31 [ 63.756753][ T6801] netlink: 'syz.2.198': attribute type 11 has an invalid length. [ 63.760910][ T6801] netlink: 44 bytes leftover after parsing attributes in process `syz.2.198'. [ 63.877389][ T6809] netlink: 112 bytes leftover after parsing attributes in process `syz.4.200'. [ 63.881786][ T6815] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 63.915815][ T6820] Invalid ELF header type: 0 != 1 [ 63.927833][ T65] Bluetooth: hci2: command tx timeout [ 64.024433][ T6831] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 64.033161][ T6833] netlink: 'syz.1.207': attribute type 21 has an invalid length. [ 64.037262][ T6833] netlink: 128 bytes leftover after parsing attributes in process `syz.1.207'. [ 64.041749][ T6833] netlink: 'syz.1.207': attribute type 5 has an invalid length. [ 64.044193][ T6833] netlink: 'syz.1.207': attribute type 6 has an invalid length. [ 64.046400][ T6833] netlink: 3 bytes leftover after parsing attributes in process `syz.1.207'. [ 64.067340][ T6840] netlink: 'syz.2.209': attribute type 10 has an invalid length. [ 64.069914][ T6840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.209'. [ 64.080197][ T6840] team0: Port device geneve0 added [ 64.087492][ T6844] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 64.097041][ T6845] netlink: 64 bytes leftover after parsing attributes in process `syz.4.211'. [ 64.097150][ T6846] netlink: 64 bytes leftover after parsing attributes in process `syz.4.211'. [ 64.098328][ T6840] syz.2.209 (6840) used greatest stack depth: 21328 bytes left [ 64.131841][ T6851] netlink: 52 bytes leftover after parsing attributes in process `syz.2.213'. [ 64.210316][ T6864] netlink: 'syz.2.216': attribute type 1 has an invalid length. [ 64.212668][ T6864] netlink: 'syz.2.216': attribute type 4 has an invalid length. [ 64.220001][ T6864] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 64.222030][ T6864] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 64.227442][ T6864] vhci_hcd vhci_hcd.0: Device attached [ 64.231174][ T6865] usbip_core: unknown command [ 64.232582][ T6865] vhci_hcd: unknown pdu 4549828 [ 64.233995][ T6865] usbip_core: unknown command [ 64.238803][ T39] vhci_hcd: stop threads [ 64.240464][ T39] vhci_hcd: release socket [ 64.241798][ T39] vhci_hcd: disconnect device [ 64.561972][ T6874] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 64.570669][ T6873] sctp: [Deprecated]: syz.0.218 (pid 6873) Use of int in max_burst socket option. [ 64.570669][ T6873] Use struct sctp_assoc_value instead [ 64.674837][ T6880] capability: warning: `syz.4.220' uses 32-bit capabilities (legacy support in use) [ 64.680325][ T6880] program syz.4.220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.732327][ T6888] netlink: 'syz.0.223': attribute type 12 has an invalid length. [ 64.784370][ T6890] usb usb1: usbfs: process 6890 (syz.2.224) did not claim interface 7 before use [ 64.840786][ T6885] /dev/sr0: Can't open blockdev [ 64.928966][ T6892] /dev/sr0: Can't open blockdev [ 64.962464][ T6911] Can't find a SQUASHFS superblock on nullb0 [ 65.113259][ T6926] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 65.116421][ T6926] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 65.127466][ T6926] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 65.133818][ T6926] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 65.197885][ T35] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.357697][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 65.361022][ T35] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 65.365071][ T35] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 65.371540][ T35] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 65.375368][ T35] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 65.380439][ T35] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 65.383438][ T35] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 65.390004][ T35] usb 6-1: string descriptor 0 read error: -22 [ 65.391871][ T35] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 65.394438][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.400186][ T35] adutux 6-1:168.0: interrupt endpoints not found [ 65.754645][ T6973] tipc: Started in network mode [ 65.756733][ T6973] tipc: Node identity ac14140f, cluster identity 4711 [ 65.761242][ T6973] tipc: New replicast peer: 255.255.255.255 [ 65.765078][ T6973] tipc: Enabled bearer , priority 10 [ 65.778883][ T6913] program syz.1.231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.932150][ T832] usb 6-1: USB disconnect, device number 3 [ 65.997840][ T65] Bluetooth: hci2: command tx timeout [ 66.030146][ T7014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.034280][ T7014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.084612][ T6977] cgroup: fork rejected by pids controller in /syz2 [ 66.277745][ T30] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 66.437695][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 66.442494][ T30] usb 5-1: config 0 has no interfaces? [ 66.447540][ T30] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=e1.2d [ 66.454739][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.459503][ T30] usb 5-1: Product: syz [ 66.461227][ T30] usb 5-1: Manufacturer: syz [ 66.463121][ T30] usb 5-1: SerialNumber: syz [ 66.466716][ T30] usb 5-1: config 0 descriptor?? [ 66.673709][ T35] usb 5-1: USB disconnect, device number 3 [ 66.777822][ T6020] tipc: Node number set to 2886997007 [ 67.546571][ T832] hid (null): invalid report_size 48347 [ 67.555026][ T832] hid-generic 0209:0007:0007.0002: invalid report_size 48347 [ 67.558321][ T1118] sr 2:0:0:0: [sr0] tag#7 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=1s [ 67.558412][ T832] hid-generic 0209:0007:0007.0002: item 0 2 1 7 parsing failed [ 67.561081][ T1118] sr 2:0:0:0: [sr0] tag#7 Sense Key : Illegal Request [current] [ 67.564497][ T832] hid-generic 0209:0007:0007.0002: probe with driver hid-generic failed with error -22 [ 67.566165][ T1118] sr 2:0:0:0: [sr0] tag#7 Add. Sense: Invalid command operation code [ 67.572534][ T1118] sr 2:0:0:0: [sr0] tag#7 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 67.574951][ T1118] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 67.578842][ T1118] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 67.658811][ T7083] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 67.665996][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 67.960505][ T7115] ebt_among: src integrity fail: 300 [ 68.050574][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 68.050583][ T40] audit: type=1400 audit(2000000018.151:429): avc: denied { name_bind 0x1000000 } for pid=7126 comm="syz.4.274" path="socket:[16388]" dev="sockfs" ino=16388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.133423][ T40] audit: type=1400 audit(2000000018.231:430): avc: denied { read } for pid=7137 comm="syz.1.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 68.195437][ T40] audit: type=1400 audit(2000000018.291:431): avc: denied { write } for pid=7142 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 68.540565][ T7154] [U] [ 68.546201][ T7154] [U] [ 68.547320][ T7154] [U] [ 68.548472][ T7154] [U] [ 68.549787][ T7154] [U] [ 68.550869][ T7154] [U] [ 68.551944][ T7154] [U] [ 68.552974][ T7154] [U] [ 68.554132][ T7154] [U] [ 68.555196][ T7154] [U] [ 68.556227][ T7154] [U] [ 68.557239][ T7154] [U] [ 68.558891][ T7154] [U] [ 68.560016][ T7154] [U] [ 68.561101][ T7154] [U] [ 68.562227][ T7154] [U] [ 68.562770][ T40] audit: type=1400 audit(2000000018.661:432): avc: denied { map } for pid=7155 comm="syz.0.282" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.572909][ T40] audit: type=1400 audit(2000000018.661:433): avc: denied { execute } for pid=7155 comm="syz.0.282" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.582305][ T40] audit: type=1400 audit(2000000018.661:434): avc: denied { map } for pid=7153 comm="syz.1.281" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.659673][ T7153] [U] [ 68.698202][ T7163] wg0: entered promiscuous mode [ 68.794638][ T7171] __nla_validate_parse: 8 callbacks suppressed [ 68.794648][ T7171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.285'. [ 68.832610][ T7177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.885162][ T7177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.122668][ T7193] 9pnet_fd: p9_fd_create_unix (7193): problem connecting socket: ./file2: -2 [ 69.146338][ T40] audit: type=1400 audit(2000000019.241:435): avc: denied { ioctl } for pid=7195 comm="syz.4.290" path="socket:[15720]" dev="sockfs" ino=15720 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 69.232087][ T7202] xt_hashlimit: size too large, truncated to 1048576 [ 69.283703][ T40] audit: type=1400 audit(2000000019.381:436): avc: denied { listen } for pid=7201 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.293716][ T40] audit: type=1400 audit(2000000019.391:437): avc: denied { shutdown } for pid=7201 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.299877][ T40] audit: type=1400 audit(2000000019.391:438): avc: denied { accept } for pid=7201 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.395063][ T7207] x_tables: duplicate underflow at hook 1 [ 69.397028][ T7207] ksmbd: Unknown IPC event: 1, ignore. [ 69.677546][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 69.891656][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 69.896435][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 69.945796][ T7226] dvmrp0: entered allmulticast mode [ 70.147604][ T7253] netlink: 'syz.4.307': attribute type 1 has an invalid length. [ 70.150327][ T7253] netlink: 224 bytes leftover after parsing attributes in process `syz.4.307'. [ 70.179649][ T7255] FAULT_INJECTION: forcing a failure. [ 70.179649][ T7255] name failslab, interval 1, probability 0, space 0, times 1 [ 70.183442][ T7255] CPU: 2 UID: 0 PID: 7255 Comm: syz.4.308 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 70.183454][ T7255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.183459][ T7255] Call Trace: [ 70.183462][ T7255] [ 70.183466][ T7255] dump_stack_lvl+0x16c/0x1f0 [ 70.183496][ T7255] should_fail_ex+0x497/0x5b0 [ 70.183513][ T7255] should_failslab+0xc2/0x120 [ 70.183528][ T7255] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 70.183540][ T7255] ? do_raw_spin_lock+0x12d/0x2c0 [ 70.183552][ T7255] ? inet_bind2_bucket_create+0x36/0x590 [ 70.183563][ T7255] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 70.183576][ T7255] inet_bind2_bucket_create+0x36/0x590 [ 70.183587][ T7255] __inet_hash_connect+0xfa4/0x1900 [ 70.183601][ T7255] ? __pfx___inet6_check_established+0x10/0x10 [ 70.183614][ T7255] ? __pfx___inet_hash_connect+0x10/0x10 [ 70.183629][ T7255] tcp_v6_connect+0x12d0/0x20e0 [ 70.183638][ T7255] ? stack_trace_save+0x95/0xd0 [ 70.183650][ T7255] ? __pfx_tcp_v6_connect+0x10/0x10 [ 70.183661][ T7255] ? kasan_save_stack+0x33/0x60 [ 70.183672][ T7255] ? tcp_sendmsg_fastopen+0x23a/0x700 [ 70.183681][ T7255] ? tcp_sendmsg_locked+0x2037/0x3770 [ 70.183689][ T7255] ? tcp_sendmsg+0x2e/0x50 [ 70.183696][ T7255] ? inet6_sendmsg+0xb9/0x140 [ 70.183705][ T7255] ? __sys_sendto+0x374/0x4f0 [ 70.183714][ T7255] ? __x64_sys_sendto+0xe0/0x1c0 [ 70.183729][ T7255] ? __inet_stream_connect+0x3c7/0x1020 [ 70.183738][ T7255] __inet_stream_connect+0x3c7/0x1020 [ 70.183749][ T7255] ? __pfx___inet_stream_connect+0x10/0x10 [ 70.183763][ T7255] tcp_sendmsg_fastopen+0x3d7/0x700 [ 70.183774][ T7255] tcp_sendmsg_locked+0x2037/0x3770 [ 70.183784][ T7255] ? hlock_class+0x4e/0x130 [ 70.183792][ T7255] ? mark_lock+0xb5/0xc60 [ 70.183801][ T7255] ? __pfx___lock_acquire+0x10/0x10 [ 70.183811][ T7255] ? __pfx_avc_has_perm+0x10/0x10 [ 70.183821][ T7255] ? __pfx_mark_lock+0x10/0x10 [ 70.183831][ T7255] ? lock_acquire.part.0+0x11b/0x380 [ 70.183844][ T7255] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 70.183854][ T7255] ? tcp_sendmsg+0x20/0x50 [ 70.183863][ T7255] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 70.183876][ T7255] ? mark_held_locks+0x9f/0xe0 [ 70.183886][ T7255] ? __local_bh_enable_ip+0xa4/0x120 [ 70.183900][ T7255] tcp_sendmsg+0x2e/0x50 [ 70.183908][ T7255] ? __pfx_tcp_sendmsg+0x10/0x10 [ 70.183916][ T7255] inet6_sendmsg+0xb9/0x140 [ 70.183926][ T7255] __sys_sendto+0x374/0x4f0 [ 70.183935][ T7255] ? __pfx___sys_sendto+0x10/0x10 [ 70.183953][ T7255] ? ksys_write+0x1ba/0x250 [ 70.183963][ T7255] ? __pfx_ksys_write+0x10/0x10 [ 70.183975][ T7255] __x64_sys_sendto+0xe0/0x1c0 [ 70.183983][ T7255] ? do_syscall_64+0x91/0x250 [ 70.183991][ T7255] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.184004][ T7255] do_syscall_64+0xcd/0x250 [ 70.184013][ T7255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.184022][ T7255] RIP: 0033:0x7fe1f7d85d29 [ 70.184029][ T7255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.184037][ T7255] RSP: 002b:00007fe1f8ad2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 70.184046][ T7255] RAX: ffffffffffffffda RBX: 00007fe1f7f75fa0 RCX: 00007fe1f7d85d29 [ 70.184051][ T7255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 70.184056][ T7255] RBP: 00007fe1f8ad2090 R08: 000000002072e000 R09: 000000000000001c [ 70.184061][ T7255] R10: 00000000200008d4 R11: 0000000000000246 R12: 0000000000000001 [ 70.184066][ T7255] R13: 0000000000000000 R14: 00007fe1f7f75fa0 R15: 00007ffd4432d058 [ 70.184077][ T7255] [ 70.307427][ C2] vkms_vblank_simulate: vblank timer overrun [ 70.392155][ T7270] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode broadcast(3) [ 70.439789][ T7274] netlink: 'syz.0.314': attribute type 10 has an invalid length. [ 70.443086][ T7274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.453860][ T7274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.466082][ T7274] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 70.506099][ T7280] FAULT_INJECTION: forcing a failure. [ 70.506099][ T7280] name failslab, interval 1, probability 0, space 0, times 0 [ 70.517461][ T7280] CPU: 2 UID: 0 PID: 7280 Comm: syz.0.317 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 70.517476][ T7280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.517481][ T7280] Call Trace: [ 70.517484][ T7280] [ 70.517488][ T7280] dump_stack_lvl+0x16c/0x1f0 [ 70.517507][ T7280] should_fail_ex+0x497/0x5b0 [ 70.517517][ T7280] ? fs_reclaim_acquire+0xae/0x150 [ 70.517529][ T7280] should_failslab+0xc2/0x120 [ 70.517541][ T7280] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 70.517554][ T7280] ? __alloc_skb+0x2b1/0x380 [ 70.517566][ T7280] __alloc_skb+0x2b1/0x380 [ 70.517575][ T7280] ? __pfx___alloc_skb+0x10/0x10 [ 70.517583][ T7280] ? __pfx_lock_release+0x10/0x10 [ 70.517594][ T7280] ? trace_lock_acquire+0x110/0x1f0 [ 70.517602][ T7280] ? trace_lock_acquire+0x14e/0x1f0 [ 70.517610][ T7280] ? tcp_chrono_stop+0x95/0x420 [ 70.517623][ T7280] tcp_stream_alloc_skb+0x34/0x570 [ 70.517634][ T7280] tcp_connect+0xe71/0x5500 [ 70.517650][ T7280] ? __pfx_tcp_connect+0x10/0x10 [ 70.517660][ T7280] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 70.517679][ T7280] tcp_v6_connect+0x154c/0x20e0 [ 70.517689][ T7280] ? stack_trace_save+0x95/0xd0 [ 70.517707][ T7280] ? __pfx_tcp_v6_connect+0x10/0x10 [ 70.517717][ T7280] ? kasan_save_stack+0x33/0x60 [ 70.517729][ T7280] ? tcp_sendmsg_fastopen+0x23a/0x700 [ 70.517737][ T7280] ? tcp_sendmsg_locked+0x2037/0x3770 [ 70.517745][ T7280] ? tcp_sendmsg+0x2e/0x50 [ 70.517753][ T7280] ? inet6_sendmsg+0xb9/0x140 [ 70.517761][ T7280] ? __sys_sendto+0x374/0x4f0 [ 70.517769][ T7280] ? __x64_sys_sendto+0xe0/0x1c0 [ 70.517784][ T7280] ? __inet_stream_connect+0x3c7/0x1020 [ 70.517793][ T7280] __inet_stream_connect+0x3c7/0x1020 [ 70.517804][ T7280] ? __pfx___inet_stream_connect+0x10/0x10 [ 70.517818][ T7280] tcp_sendmsg_fastopen+0x3d7/0x700 [ 70.517829][ T7280] tcp_sendmsg_locked+0x2037/0x3770 [ 70.517840][ T7280] ? hlock_class+0x4e/0x130 [ 70.517847][ T7280] ? mark_lock+0xb5/0xc60 [ 70.517855][ T7280] ? __pfx___lock_acquire+0x10/0x10 [ 70.517865][ T7280] ? __pfx_avc_has_perm+0x10/0x10 [ 70.517876][ T7280] ? __pfx_mark_lock+0x10/0x10 [ 70.517886][ T7280] ? lock_acquire.part.0+0x11b/0x380 [ 70.517898][ T7280] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 70.517908][ T7280] ? tcp_sendmsg+0x20/0x50 [ 70.517917][ T7280] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 70.517930][ T7280] ? mark_held_locks+0x9f/0xe0 [ 70.517941][ T7280] ? __local_bh_enable_ip+0xa4/0x120 [ 70.517954][ T7280] tcp_sendmsg+0x2e/0x50 [ 70.517962][ T7280] ? __pfx_tcp_sendmsg+0x10/0x10 [ 70.517971][ T7280] inet6_sendmsg+0xb9/0x140 [ 70.517980][ T7280] __sys_sendto+0x374/0x4f0 [ 70.517989][ T7280] ? __pfx___sys_sendto+0x10/0x10 [ 70.518008][ T7280] ? ksys_write+0x1ba/0x250 [ 70.518018][ T7280] ? __pfx_ksys_write+0x10/0x10 [ 70.518029][ T7280] __x64_sys_sendto+0xe0/0x1c0 [ 70.518037][ T7280] ? do_syscall_64+0x91/0x250 [ 70.518045][ T7280] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.518058][ T7280] do_syscall_64+0xcd/0x250 [ 70.518067][ T7280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.518076][ T7280] RIP: 0033:0x7f29f9d85d29 [ 70.518084][ T7280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.518092][ T7280] RSP: 002b:00007f29fac57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 70.518101][ T7280] RAX: ffffffffffffffda RBX: 00007f29f9f75fa0 RCX: 00007f29f9d85d29 [ 70.518107][ T7280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 70.518111][ T7280] RBP: 00007f29fac57090 R08: 000000002072e000 R09: 000000000000001c [ 70.518116][ T7280] R10: 00000000200008d4 R11: 0000000000000246 R12: 0000000000000001 [ 70.518121][ T7280] R13: 0000000000000000 R14: 00007f29f9f75fa0 R15: 00007ffd53a5c068 [ 70.518132][ T7280] [ 70.638973][ C2] vkms_vblank_simulate: vblank timer overrun [ 70.968701][ T1140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.075261][ T1140] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.116092][ T5949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.120119][ T5949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.123125][ T5949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.130003][ T5949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.132474][ T5949] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.134831][ T5949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.158128][ T7327] xt_hashlimit: size too large, truncated to 1048576 [ 71.162403][ T1140] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.200482][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.202456][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.227862][ C1] [ 71.228594][ C1] ============================= [ 71.230008][ C1] [ BUG: Invalid wait context ] [ 71.231426][ C1] 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 Not tainted [ 71.234419][ C1] ----------------------------- [ 71.236611][ C1] syz.4.332/7335 is trying to lock: [ 71.238308][ C1] ffff88807ffd8298 (&zone->lock){..-.}-{3:3}, at: get_page_from_freelist+0xbbe/0x2f80 [ 71.242038][ C1] other info that might help us debug this: [ 71.244358][ C1] context-{2:2} [ 71.245779][ C1] 2 locks held by syz.4.332/7335: [ 71.247767][ C1] #0: ffff8880232baf58 (sk_lock-AF_INET6){+.+.}-{0:0}, at: rawv6_sendmsg+0x1515/0x4440 [ 71.251584][ C1] #1: ffff88806a744c98 (&pcp->lock){+.+.}-{3:3}, at: get_page_from_freelist+0x350/0x2f80 [ 71.254825][ C1] stack backtrace: [ 71.256024][ C1] CPU: 1 UID: 0 PID: 7335 Comm: syz.4.332 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 71.256038][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.256044][ C1] Call Trace: [ 71.256048][ C1] [ 71.256052][ C1] dump_stack_lvl+0x116/0x1f0 [ 71.256071][ C1] __lock_acquire+0x878/0x3c40 [ 71.256087][ C1] ? __pfx_mark_lock+0x10/0x10 [ 71.256100][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 71.256113][ C1] ? hlock_class+0x4e/0x130 [ 71.256123][ C1] ? mark_lock+0xb5/0xc60 [ 71.256136][ C1] lock_acquire.part.0+0x11b/0x380 [ 71.256150][ C1] ? get_page_from_freelist+0xbbe/0x2f80 [ 71.256165][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 71.256179][ C1] ? rcu_is_watching+0x12/0xc0 [ 71.256196][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 71.256206][ C1] ? do_raw_spin_trylock+0x66/0x180 [ 71.256221][ C1] ? get_page_from_freelist+0xbbe/0x2f80 [ 71.256236][ C1] ? lock_acquire+0x2f/0xb0 [ 71.256248][ C1] ? get_page_from_freelist+0xbbe/0x2f80 [ 71.256264][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 71.256279][ C1] ? get_page_from_freelist+0xbbe/0x2f80 [ 71.256293][ C1] get_page_from_freelist+0xbbe/0x2f80 [ 71.256311][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 71.256326][ C1] ? should_fail_alloc_page+0xee/0x130 [ 71.256343][ C1] ? prepare_alloc_pages.constprop.0+0x16f/0x560 [ 71.256357][ C1] __alloc_pages_noprof+0x221/0x2470 [ 71.256373][ C1] ? mark_lock+0xb5/0xc60 [ 71.256384][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 71.256397][ C1] ? __pfx_mark_lock+0x10/0x10 [ 71.256409][ C1] ? hlock_class+0x4e/0x130 [ 71.256419][ C1] ? __pfx_mark_lock+0x10/0x10 [ 71.256432][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 71.256446][ C1] ? find_held_lock+0x2d/0x110 [ 71.256463][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 71.256479][ C1] ? lock_acquire+0x2f/0xb0 [ 71.256491][ C1] ? is_bpf_text_address+0x30/0x1a0 [ 71.256505][ C1] ? bpf_ksym_find+0x127/0x1c0 [ 71.256520][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.256536][ C1] ? policy_nodemask+0xea/0x4e0 [ 71.256552][ C1] alloc_pages_mpol_noprof+0x2c8/0x620 [ 71.256564][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 71.256577][ C1] stack_depot_save_flags+0x8aa/0x9c0 [ 71.256598][ C1] ? __lock_acquire+0xcc5/0x3c40 [ 71.256616][ C1] kasan_save_stack+0x42/0x60 [ 71.256630][ C1] ? kasan_save_stack+0x33/0x60 [ 71.256648][ C1] ? __kasan_record_aux_stack+0xba/0xd0 [ 71.256658][ C1] ? task_work_add+0xc0/0x3b0 [ 71.256678][ C1] ? run_posix_cpu_timers+0x69f/0x7d0 [ 71.256688][ C1] ? update_process_times+0x1a1/0x2d0 [ 71.256702][ C1] ? tick_nohz_handler+0x376/0x530 [ 71.256719][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 71.256734][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 71.256749][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 71.256763][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 71.256779][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 71.256791][ C1] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 71.256806][ C1] ? __rmqueue_pcplist+0x5b1/0x1600 [ 71.256820][ C1] ? get_page_from_freelist+0x3d2/0x2f80 [ 71.256834][ C1] ? __alloc_pages_noprof+0x221/0x2470 [ 71.256848][ C1] ? alloc_pages_mpol_noprof+0x2c8/0x620 [ 71.256858][ C1] ? stack_depot_save_flags+0x8aa/0x9c0 [ 71.256870][ C1] ? save_stack+0x16f/0x1f0 [ 71.256883][ C1] ? __set_page_owner+0x8b/0x560 [ 71.256895][ C1] ? post_alloc_hook+0x2d1/0x350 [ 71.256908][ C1] ? get_page_from_freelist+0xfce/0x2f80 [ 71.256923][ C1] ? __alloc_pages_noprof+0x221/0x2470 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 71.256937][ C1] ? alloc_pages_mpol_noprof+0x2c8/0x620 [ 71.256947][ C1] ? stack_depot_save_flags+0x8aa/0x9c0 [ 71.256958][ C1] ? kasan_save_stack+0x42/0x60 [ 71.256971][ C1] ? kasan_save_track+0x14/0x30 [ 71.256984][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 71.256998][ C1] ? kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 71.257013][ C1] ? __alloc_skb+0x2b1/0x380 [ 71.257024][ C1] ? __ip6_append_data.isra.0+0x2b2e/0x45e0 [ 71.257040][ C1] ? ip6_append_data+0x1e6/0x500 [ 71.257053][ C1] ? rawv6_sendmsg+0x1584/0x4440 [ 71.257065][ C1] ? inet_sendmsg+0x119/0x140 [ 71.257077][ C1] ? sock_write_iter+0x4ac/0x5b0 [ 71.257091][ C1] ? do_iter_readv_writev+0x655/0x950 [ 71.257103][ C1] ? vfs_writev+0x363/0xdd0 [ 71.257113][ C1] ? do_writev+0x297/0x340 [ 71.257124][ C1] ? do_syscall_64+0xcd/0x250 [ 71.257134][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.257152][ C1] __kasan_record_aux_stack+0xba/0xd0 [ 71.257163][ C1] task_work_add+0xc0/0x3b0 [ 71.257175][ C1] ? __pfx_task_work_add+0x10/0x10 [ 71.257187][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 71.257201][ C1] ? find_held_lock+0x2d/0x110 [ 71.257218][ C1] run_posix_cpu_timers+0x69f/0x7d0 [ 71.257229][ C1] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 71.257243][ C1] ? sched_balance_trigger+0x225/0xea0 [ 71.257262][ C1] ? __pfx_sched_balance_trigger+0x10/0x10 [ 71.257277][ C1] ? sched_tick+0x286/0x4f0 [ 71.257293][ C1] update_process_times+0x1a1/0x2d0 [ 71.257309][ C1] ? __pfx_update_process_times+0x10/0x10 [ 71.257325][ C1] ? read_tsc+0x9/0x20 [ 71.257343][ C1] ? ktime_get+0x1a7/0x310 [ 71.257355][ C1] tick_nohz_handler+0x376/0x530 [ 71.257373][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 71.257389][ C1] __hrtimer_run_queues+0x5fb/0xae0 [ 71.257407][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 71.257422][ C1] ? read_tsc+0x9/0x20 [ 71.257440][ C1] hrtimer_interrupt+0x392/0x8e0 [ 71.257460][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 71.257474][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 71.257490][ C1] [ 71.257493][ C1] [ 71.257497][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 71.257509][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 71.257526][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 06 bd 44 f6 48 89 df e8 5e 3c 45 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 12 36 f6 65 8b 05 16 c3 d1 74 85 c0 74 16 5b [ 71.257537][ C1] RSP: 0018:ffffc90005f66508 EFLAGS: 00000246 [ 71.257546][ C1] RAX: 0000000000000006 RBX: ffff88807ffd8280 RCX: 1ffffffff2dd1210 [ 71.257554][ C1] RDX: 0000000000000000 RSI: ffffffff8b6cd9c0 RDI: ffffffff8bd2c740 [ 71.257561][ C1] RBP: 0000000000000202 R08: 0000000000000001 R09: fffffbfff2dd0d98 [ 71.257568][ C1] R10: ffffffff96e86cc7 R11: dffffc0000000000 R12: 000000000000000f [ 71.257575][ C1] R13: dffffc0000000000 R14: ffff88806a744d48 R15: ffff88806a744c80 [ 71.257586][ C1] __rmqueue_pcplist+0x5b1/0x1600 [ 71.257602][ C1] ? do_raw_spin_trylock+0xb1/0x180 [ 71.257617][ C1] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 71.257631][ C1] ? lock_acquire+0x2f/0xb0 [ 71.257643][ C1] ? get_page_from_freelist+0x350/0x2f80 [ 71.257659][ C1] get_page_from_freelist+0x3d2/0x2f80 [ 71.257682][ C1] ? __pfx___might_resched+0x10/0x10 [ 71.257697][ C1] ? fs_reclaim_acquire+0xae/0x150 [ 71.257709][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 71.257723][ C1] ? should_fail_alloc_page+0xee/0x130 [ 71.257739][ C1] ? prepare_alloc_pages.constprop.0+0x16f/0x560 [ 71.257754][ C1] __alloc_pages_noprof+0x221/0x2470 [ 71.257774][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 71.257792][ C1] ? unwind_next_frame+0xe5d/0x20c0 [ 71.257806][ C1] ? arch_stack_walk+0x74/0x100 [ 71.257821][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.257836][ C1] ? policy_nodemask+0xea/0x4e0 [ 71.257853][ C1] alloc_pages_mpol_noprof+0x2c8/0x620 [ 71.257864][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 71.257875][ C1] ? do_iter_readv_writev+0x655/0x950 [ 71.257890][ C1] stack_depot_save_flags+0x8aa/0x9c0 [ 71.257904][ C1] save_stack+0x16f/0x1f0 [ 71.257917][ C1] ? __pfx_save_stack+0x10/0x10 [ 71.257929][ C1] ? post_alloc_hook+0x2d1/0x350 [ 71.257942][ C1] ? get_page_from_freelist+0xfce/0x2f80 [ 71.257957][ C1] ? __alloc_pages_noprof+0x221/0x2470 [ 71.257971][ C1] ? alloc_pages_mpol_noprof+0x2c8/0x620 [ 71.257981][ C1] ? stack_depot_save_flags+0x8aa/0x9c0 [ 71.257992][ C1] ? kasan_save_stack+0x42/0x60 [ 71.258005][ C1] ? kasan_save_track+0x14/0x30 [ 71.258019][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 71.258033][ C1] ? kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 71.258047][ C1] ? __alloc_skb+0x2b1/0x380 [ 71.258057][ C1] ? __ip6_append_data.isra.0+0x2b2e/0x45e0 [ 71.258072][ C1] ? ip6_append_data+0x1e6/0x500 [ 71.258085][ C1] ? rawv6_sendmsg+0x1584/0x4440 [ 71.258097][ C1] ? inet_sendmsg+0x119/0x140 [ 71.258107][ C1] ? sock_write_iter+0x4ac/0x5b0 [ 71.258121][ C1] ? do_iter_readv_writev+0x655/0x950 [ 71.258135][ C1] __set_page_owner+0x8b/0x560 [ 71.258148][ C1] ? mark_held_locks+0x9f/0xe0 [ 71.258161][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 71.258174][ C1] ? bad_range+0x23d/0x490 [ 71.258185][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.258203][ C1] post_alloc_hook+0x2d1/0x350 [ 71.258217][ C1] get_page_from_freelist+0xfce/0x2f80 [ 71.258236][ C1] ? __pfx___might_resched+0x10/0x10 [ 71.258250][ C1] ? fs_reclaim_acquire+0xae/0x150 [ 71.258262][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 71.258277][ C1] ? should_fail_alloc_page+0xee/0x130 [ 71.258293][ C1] ? prepare_alloc_pages.constprop.0+0x16f/0x560 [ 71.258308][ C1] __alloc_pages_noprof+0x221/0x2470 [ 71.258324][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 71.258336][ C1] ? hlock_class+0x4e/0x130 [ 71.258345][ C1] ? mark_lock+0xb5/0xc60 [ 71.258360][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 71.258374][ C1] ? find_held_lock+0x2d/0x110 [ 71.258391][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 71.258407][ C1] ? lock_acquire+0x2f/0xb0 [ 71.258420][ C1] ? is_bpf_text_address+0x30/0x1a0 [ 71.258433][ C1] ? bpf_ksym_find+0x127/0x1c0 [ 71.258448][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.258463][ C1] ? policy_nodemask+0xea/0x4e0 [ 71.258479][ C1] alloc_pages_mpol_noprof+0x2c8/0x620 [ 71.258491][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 71.258506][ C1] stack_depot_save_flags+0x8aa/0x9c0 [ 71.258520][ C1] kasan_save_stack+0x42/0x60 [ 71.258533][ C1] ? kasan_save_stack+0x33/0x60 [ 71.258546][ C1] ? kasan_save_track+0x14/0x30 [ 71.258559][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 71.258573][ C1] ? kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 71.258587][ C1] ? __alloc_skb+0x2b1/0x380 [ 71.258597][ C1] ? __ip6_append_data.isra.0+0x2b2e/0x45e0 [ 71.258612][ C1] ? ip6_append_data+0x1e6/0x500 [ 71.258629][ C1] ? rawv6_sendmsg+0x1584/0x4440 [ 71.258641][ C1] ? inet_sendmsg+0x119/0x140 [ 71.258651][ C1] ? sock_write_iter+0x4ac/0x5b0 [ 71.258668][ C1] ? do_iter_readv_writev+0x655/0x950 [ 71.258678][ C1] ? vfs_writev+0x363/0xdd0 [ 71.258689][ C1] ? do_writev+0x297/0x340 [ 71.258700][ C1] ? do_syscall_64+0xcd/0x250 [ 71.258710][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.258732][ C1] kasan_save_track+0x14/0x30 [ 71.258746][ C1] __kasan_slab_alloc+0x89/0x90 [ 71.258760][ C1] kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 71.258775][ C1] ? __pfx_mark_lock+0x10/0x10 [ 71.258805][ C1] ? __alloc_skb+0x2b1/0x380 [ 71.258816][ C1] __alloc_skb+0x2b1/0x380 [ 71.258827][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 71.258837][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 71.258851][ C1] ? hlock_class+0x4e/0x130 [ 71.258860][ C1] ? __lock_acquire+0x15a9/0x3c40 [ 71.258873][ C1] __ip6_append_data.isra.0+0x2b2e/0x45e0 [ 71.258891][ C1] ? __pfx_raw6_getfrag+0x10/0x10 [ 71.258904][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 71.258918][ C1] ? __pfx___ip6_append_data.isra.0+0x10/0x10 [ 71.258933][ C1] ? ip6_setup_cork+0xc21/0x1460 [ 71.258948][ C1] ip6_append_data+0x1e6/0x500 [ 71.258963][ C1] ? __pfx_raw6_getfrag+0x10/0x10 [ 71.258976][ C1] rawv6_sendmsg+0x1584/0x4440 [ 71.258991][ C1] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 71.259003][ C1] ? avc_has_perm_noaudit+0x143/0x3a0 [ 71.259017][ C1] ? avc_has_perm+0x11b/0x1c0 [ 71.259028][ C1] ? __pfx_avc_has_perm+0x10/0x10 [ 71.259045][ C1] ? avc_has_perm_noaudit+0x143/0x3a0 [ 71.259057][ C1] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 71.259071][ C1] ? inet_sendmsg+0x119/0x140 [ 71.259081][ C1] inet_sendmsg+0x119/0x140 [ 71.259091][ C1] sock_write_iter+0x4ac/0x5b0 [ 71.259107][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 71.259125][ C1] ? __pfx_file_has_perm+0x10/0x10 [ 71.259138][ C1] do_iter_readv_writev+0x655/0x950 [ 71.259150][ C1] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 71.259162][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 71.259178][ C1] ? security_file_permission+0x71/0x210 [ 71.259197][ C1] vfs_writev+0x363/0xdd0 [ 71.259208][ C1] ? futex_wake+0x18e/0x4e0 [ 71.259222][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 71.259234][ C1] ? find_held_lock+0x2d/0x110 [ 71.259251][ C1] ? __pfx_lock_release+0x10/0x10 [ 71.259264][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 71.259277][ C1] ? __fget_files+0x206/0x3a0 [ 71.259292][ C1] ? do_writev+0x297/0x340 [ 71.259302][ C1] do_writev+0x297/0x340 [ 71.259313][ C1] ? __pfx_do_writev+0x10/0x10 [ 71.259326][ C1] do_syscall_64+0xcd/0x250 [ 71.259337][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.259348][ C1] RIP: 0033:0x7fe1f7d85d29 [ 71.259357][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.259367][ C1] RSP: 002b:00007fe1f5bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 71.259381][ C1] RAX: ffffffffffffffda RBX: 00007fe1f7f76080 RCX: 00007fe1f7d85d29 [ 71.259388][ C1] RDX: 0000000000000003 RSI: 0000000020000380 RDI: 0000000000000004 [ 71.259398][ C1] RBP: 00007fe1f7e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 71.259405][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.259411][ C1] R13: 0000000000000000 R14: 00007fe1f7f76080 R15: 00007ffd4432d058 [ 71.259422][ C1] [ 71.347952][ T7340] netlink: 'syz.2.333': attribute type 10 has an invalid length. [ 71.749180][ T1140] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.757553][ T7339] netlink: 132 bytes leftover after parsing attributes in process `syz.2.333'. [ 71.764527][ T7340] syzkaller0: (slave dummy0): Enslaving as an active interface with an up link [ 71.858021][ T1140] bridge_slave_0: left allmulticast mode [ 71.859628][ T1140] bridge_slave_0: left promiscuous mode [ 71.861420][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.080743][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.085354][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.090155][ T1140] bond0 (unregistering): Released all slaves [ 72.368164][ T1140] hsr_slave_0: left promiscuous mode [ 72.370451][ T1140] hsr_slave_1: left promiscuous mode [ 72.372756][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.375162][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.379268][ T1140] veth1_macvtap: left promiscuous mode [ 72.380881][ T1140] veth0_macvtap: left promiscuous mode [ 72.382450][ T1140] veth1_vlan: left promiscuous mode [ 72.383961][ T1140] veth0_vlan: left promiscuous mode [ 72.563757][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 72.597043][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 73.143182][ T220] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.190067][ T220] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.270213][ T220] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.330113][ T220] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.410214][ T220] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.470456][ T220] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.529278][ T220] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.570485][ T220] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.641163][ T220] bridge_slave_1: left allmulticast mode [ 73.642956][ T220] bridge_slave_1: left promiscuous mode [ 73.644865][ T220] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.648377][ T220] bridge_slave_0: left allmulticast mode [ 73.650070][ T220] bridge_slave_0: left promiscuous mode [ 73.651746][ T220] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.655228][ T220] bridge_slave_1: left allmulticast mode [ 73.656961][ T220] bridge_slave_1: left promiscuous mode [ 73.659032][ T220] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.662467][ T220] bridge_slave_0: left allmulticast mode [ 73.664650][ T220] bridge_slave_0: left promiscuous mode [ 73.666948][ T220] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.737282][ T220] dvmrp0 (unregistering): left allmulticast mode [ 74.021141][ T220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.025651][ T220] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 74.029773][ T220] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 74.034654][ T220] bond0 (unregistering): Released all slaves [ 74.043613][ T220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.048461][ T220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.052739][ T220] bond0 (unregistering): Released all slaves [ 74.060876][ T220] bond1 (unregistering): Released all slaves [ 74.065948][ T220] bond2 (unregistering): Released all slaves [ 74.071818][ T220] bond0 (unregistering): Released all slaves [ 74.167953][ T220] tipc: Disabling bearer [ 74.169518][ T220] tipc: Left network mode [ 74.491168][ T220] hsr_slave_0: left promiscuous mode [ 74.493092][ T220] hsr_slave_1: left promiscuous mode [ 74.494965][ T220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.498465][ T220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.502367][ T220] hsr_slave_0: left promiscuous mode [ 74.504191][ T220] hsr_slave_1: left promiscuous mode [ 74.505963][ T220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.508598][ T220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.511021][ T220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.513226][ T220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.516836][ T220] veth0_macvtap: left promiscuous mode [ 74.518638][ T220] veth1_vlan: left promiscuous mode [ 74.520534][ T220] veth1_macvtap: left promiscuous mode [ 74.522108][ T220] veth0_macvtap: left promiscuous mode [ 74.892471][ T220] team0 (unregistering): Port device team_slave_1 removed [ 74.935654][ T220] team0 (unregistering): Port device team_slave_0 removed [ 75.207332][ T220] team0 (unregistering): Port device team_slave_1 removed [ 75.212566][ T220] team0 (unregistering): Port device team_slave_0 removed [ 75.879093][ T220] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 13:34:47 Registers: info registers vcpu 0 CPU#0 RAX=000000000004ee14 RBX=0000000000000000 RCX=ffffffff8b2f9239 RDX=ffffed100d4c6f7e RSI=ffffffff8bd2c6c0 RDI=ffffffff8170a719 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c6f7d R10=ffff88806a637beb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff9060d1d0 R15=0000000000000000 RIP=ffffffff8b2fa61f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff2cf9e6b48 CR3=00000000258fe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd53a5c400 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29f9e02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29f9e02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29f9e02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29f9e02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29f9e02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29f9e02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000a4 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851ee455 RDI=ffffffff9ab44da0 RBP=ffffffff9ab44d60 RSP=ffffc900006afe00 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=732d302e33312e36 R12=0000000000000000 R13=000000000000000d R14=ffffffff851ee3f0 R15=0000000000000000 RIP=ffffffff851ee47f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe1f5bf66c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c4621c4 CR3=000000004f9d8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1f7e02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1f7e02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1f7e02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1f7e02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1f7e02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1f7e02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1f7f4b488 00007fe1f7f4b480 00007fe1f7f4b478 00007fe1f7f4b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1f8aad100 00007fe1f7f4b440 00007fe1f7f4b458 00007fe1f7f4b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1f7f4b498 00007fe1f7f4b490 00007fe1f7f4b488 00007fe1f7f4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffff88806a837be8 RCX=ffffffff8176d3b9 RDX=1ffff1100d506f7d RSI=ffffffff8bd2c6c0 RDI=ffffffff8da94cf0 RBP=0000000000000002 RSP=ffffc90005ed7658 R8 =0000000000000000 R9 =fffffbfff20c1a3a R10=ffffffff9060d1d7 R11=0000000000000000 R12=ffffc90035403060 R13=1ffff92000bdaef2 R14=0000000000000001 R15=ffffc90035403000 RIP=ffffffff817fb77c RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe1f8ad26c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe1f5bf5f98 CR3=000000004f9d8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1f7e02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1f7e02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1f7e02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1f7e02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1f7e02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1f7e02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1f7f4b488 00007fe1f7f4b480 00007fe1f7f4b478 00007fe1f7f4b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1f8aad100 00007fe1f7f4b440 00007fe1f7f4b458 00007fe1f7f4b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1f7f4b498 00007fe1f7f4b490 00007fe1f7f4b488 00007fe1f7f4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000004b224 RBX=0000000000000003 RCX=ffffffff8b2f9239 RDX=ffffed100d526f7e RSI=ffffffff8bd2c6c0 RDI=ffffffff8170a719 RBP=ffffed1003a5c488 RSP=ffffc900001a7e08 R8 =0000000000000000 R9 =ffffed100d526f7d R10=ffff88806a937beb R11=0000000000003b58 R12=0000000000000003 R13=ffff88801d2e2440 R14=ffffffff9060d1d0 R15=0000000000000000 RIP=ffffffff8b2fa61f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fee4ee46440 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000084000 Opmask01=0000000000000001 Opmask02=00000000ffff3f01 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb1125900 0000003000000008 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb1125900 0000003000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2733366266633037 3539623463672d36 323532302d72656c 6c616b7a79732d30 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 20726f20656c6966 2068637573206f4e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0079726f74636572 696420726f20656c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000