last executing test programs: 1m19.793216913s ago: executing program 1 (id=410): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500), 0x407f, r1, 0x4}, 0x38) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x1c3980, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x54, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0b01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f00000001c0)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m19.296652069s ago: executing program 1 (id=415): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000004100070128bd7000f6ffffff017c0000050042800c000180060006000a000000100002800c000800"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240), 0x4200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x15) ioctl$TIOCSSOFTCAR(r2, 0x5412, &(0x7f0000000100)=0x11) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000140)) syz_open_dev$sndpcmp(&(0x7f0000000580), 0x3, 0x101000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) syz_usb_disconnect(r1) syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[], 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x8502, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) 1m17.137149269s ago: executing program 1 (id=435): r0 = socket(0x10, 0x2, 0x500) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9f, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) 1m17.133952725s ago: executing program 1 (id=436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000100)=0x800003, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x50842, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x4f, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000680)='./dev\x00', &(0x7f00000006c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000740)="fc4e2ba9", 0x4, 0x1000) pwrite64(r4, &(0x7f0000000780)="01", 0x1, 0x1004) pwrite64(r4, &(0x7f00000007c0)="10", 0x1, 0x1080) pwrite64(r4, &(0x7f0000000800)='\n', 0x1, 0x1088) pwrite64(r4, &(0x7f0000000840)='\b', 0x1, 0x1090) fsync(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f00000008c0)='md0', 0x3) openat(r4, &(0x7f0000000900)='./sys/block/md0/md/metadata_version\x00', 0x80c03, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f0000000980)='1:0', 0x3) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0xa08000, &(0x7f0000000300)="9aa242e2e0a444e31484c268b097b2e78385fd93cd69b8c38658c68405c16fddeec01c80911ec33d42f1372d3c887c276ec783c8f37824e17859ddcdeb443d18453c72347edd459e20a0d50dc98fbe9a1e41ddc2d5ecf279c5e95eee5c85f1301d022d3cd6201b2f0bd2c405498c4a4011f8b1fcb4e10f72750987cb3d03a257175e3ab708eee9687a8d1e19010241a519b8", 0x92, &(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480)="c68aed2c057ef9491c8680bff6f5f592320b2d88095be0af1e49d4de4f4ef91fb36f23301d1679b7ef59cdcf3f3c6ffcc541ee734a47ab37e1a75915855274e14fc31b62e876c4ae76a8cc07dc74f8bbc8e7e1f30a91edbcf4261926151cd610770e6b15e9aad031edf3bb56a4f90904052a8458880388f65ef625d9557c425801ab57d6f887ef7d0ba0c808dd0efb3af786513a03d75702be1e61c0bf250b3d9ce4341b9ddf85a59f12ae40e60b1397949d2149df42dfa7c09a81b37b9ec3") syz_create_resource$futex(&(0x7f0000000400)=0x1) 1m16.996972162s ago: executing program 1 (id=437): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040005) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000200)={0xfffffffffffffce3, r3, 0x0}) 1m16.545339593s ago: executing program 1 (id=439): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x44}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x42, 0x9, 0x8, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xb}, 0x1, 0x40, 0x1, 0x10000}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="72ac3d20bf5e807e29bd7800fcdbdf250a0000000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=r2, @ANYBLOB="0400090004000b00"], 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x8, 0x8002, 0x7a, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7, 0x10, 0x3}}) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000340)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r5, &(0x7f0000000600)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000640)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2e08004515021c00670000000290780a010102e0000001119190780000000013e0"], 0x0) 1m16.475287408s ago: executing program 32 (id=439): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x44}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x42, 0x9, 0x8, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xb}, 0x1, 0x40, 0x1, 0x10000}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="72ac3d20bf5e807e29bd7800fcdbdf250a0000000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=r2, @ANYBLOB="0400090004000b00"], 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x8, 0x8002, 0x7a, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7, 0x10, 0x3}}) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000340)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r5, &(0x7f0000000600)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000640)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2e08004515021c00670000000290780a010102e0000001119190780000000013e0"], 0x0) 36.006950509s ago: executing program 4 (id=894): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) mkdir(&(0x7f0000000040)='mnt\x00', 0x1ff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x30) ioctl$VT_ACTIVATE(r2, 0x5606, 0x4) mount(0x0, &(0x7f0000000080)='mnt\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303a501845bd36e336734956c718643b6ec65ce83d95034ea4ac502f84b2c3044e5da763f5c58e20b19b85507db3c1f5a574163ad8eb059513c88336cff11fe47856a4bbf0e2d127215ec"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x5a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4e21, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0x800, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d0bc31d53010261b47f3fe09b1ab0ab7"}, @md5sig={0x13, 0x12, "10f338f67cd5db350f8fd27e3c870962"}]}}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='mnt/ttyUSB0\x00', 0x44002, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x810, 0xffffffffffffffff, 0x28489000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000640)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a85a056f5d759ded130e04d528539f3d328973747a75df8a69ea917deb7d6193b3e7772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="ea", 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x81}, 0x4c800) recvmmsg(r5, &(0x7f00000008c0), 0x700, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000480)=r3, 0x4) accept4$unix(r6, &(0x7f00000004c0), &(0x7f0000000540)=0x6e, 0x80800) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r3, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="578d2dbd7000fbdbdf2502841ca37a00000014000180080803007f0000010600010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) 32.959750707s ago: executing program 4 (id=920): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 32.816338921s ago: executing program 4 (id=921): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x1010, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x22040000}, 0x0) r3 = userfaultfd(0x801) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89fb, &(0x7f0000000480)={'sit0\x00', @random="00009e0c1100"}) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xb4}}, 0x0) connect$pppoe(r4, &(0x7f0000000140)={0x18, 0x0, {0x3, @random="6e20ee25c33d", 'veth0_vlan\x00'}}, 0x1e) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000400)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x55, 0x0, &(0x7f0000000540)="b44c80630562443108347301af47fa0ff9b11fe7d5fe008c6392009c5bbd04080000000000000fae7a6a53200386ce51dec4a4effb9de8b4645c2b9c0614907dac12c6d34a8266e6124b925240ca1fce3ee8048925", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x50) r7 = syz_open_dev$sg(&(0x7f00000005c0), 0x6f5e, 0x401) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000006c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, &(0x7f0000000740)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000780)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000600)=0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0xb}]}, 0x10) 32.65465155s ago: executing program 4 (id=925): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="070000080000000100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_emit_ethernet(0x106, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0xf8, 0x67, 0x0, 0x5, 0x84, 0x0, @remote, @remote}, "c8e81fa33af9a85dccbe277c82d27598706635a8ed36956fbbf665af5c0d12cef0bb4be001e9c1ec65f5548d653902957d50a83377a94b5dbe6390bb38a197281865b7e86e270ac541aafa4bbe7b5e290dea38f4db89662070d85fb0bbc9411a78a4402d3749b417afd1ef1d0705283c6e5be544ab622ba2c36b69a8ab7b8a89e3e3b6bbf3ed21d8a69c70241645af9f28e5e0bdfcfcb9b66d81c1f5042aac99413328f43d7f70215ae7b30004114954edff6db508e885009a7f0273768f97a44ecfd9e6ab3488552280b02176b0b82a4147503719a615e0daf6828d2beefd9d9c26a0d2"}}}}, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='3', 0x4e) name_to_handle_at(r1, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x8001, 0x38c, 0x7fffffffffffffff, 0x360}}, &(0x7f0000000540), 0x1200) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000580)) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2a1d804, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000900)={r0, &(0x7f0000000200)="36a4f3ba8fc0e8ed0d02406b46d37b924d126ef3bed763fe961ede43d55796ce9b32860e8277f143a7dafd039c30bd392b8b4d2b088350b075d2d52432f41e833d4faf52cf09ff580a9f9ce97fe1046ee0a1ba31c10aac8c13e38f8db79b371b35e5cff3c4cc36b0fda575f428ca22b82e0500d2d37727f6b5cc5726351f01a778f8cb781653cc685719ac51df28f1d8625dad17417ec30f9435640c1dffef6e6dbe8eebfb3aca03799ee7569496f26bf64847e773ee22f71b009b0dd917568d73ab0ad0ca512c57cf40419e0339415450de370381bd03507536a784cf820ad31bbd30a90e96b1fab7f68b0f3436", 0x0}, 0x20) 32.56387683s ago: executing program 4 (id=926): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='adfs\x00', 0x2000010, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='cdg', 0x3) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="fa", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rthdrdstopts={{0x38, 0x29, 0x37, {0x2c, 0x4, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3c}, @ra={0x5, 0x2, 0x3}, @pad1, @hao={0xc9, 0x10, @private1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x60}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="dc79cfa3de54f5b43950d32abba383fe011262b38a04870a4476f78f3f4f176e644b0cadafe92df5261c9404221424d6f8431f0626f96e0ba1a46ab45c3a0bda0735fb69e0be81c723f7a18452ac8240d79267d6d57540bda4c7f4b443845abb6edfa3aebe7fab5e7dff9fff5e16b344bcae57ce2bfe1d2ef5", 0x79}, {&(0x7f00000006c0)="a4f147aa8fa3358f51f36614d2605865a88113152e", 0x15}, {&(0x7f0000000700)="c71315f1b51ee1617d9bc79d8e4efa259afc83033e4dc6fa04a2f6531a6c616ab05faa87e05e0ecc4189cb8e9ed9911429", 0x31}, {&(0x7f0000000740)="3b50fe6d4066ca6f0250a8fc8fc99a950c33e2eb050bed00b7fcd1718da76e5d64b066e4fb30270a5135f52cf082bc4953ae26bab7933ac16e3496f694c7e00d8e4b39a2daea976741a6ebbe993069", 0x4f}, {&(0x7f00000007c0)="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", 0x47a}], 0x5, &(0x7f0000000c40)}}], 0x3, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000c40)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000c80)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000cc0)=0x1, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000d00)=0x4, 0x4) writev(r1, &(0x7f0000000d40)=[{&(0x7f0000000dc0)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000e80)="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", 0x111}, {&(0x7f0000000fc0)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000001080)="de21cff472aa00", 0x7}, {&(0x7f00000010c0)="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", 0xc5d}], 0x5) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000001d40), r1) setns(0xc9, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x70bd28, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x440b0) 32.20659437s ago: executing program 4 (id=927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000002c0), 0xfffffffb, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x1000, r3}, 0x38) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) chdir(&(0x7f0000000680)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') write(r4, &(0x7f0000001680)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f20800b179aa901b5d500d63", 0x58) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r9, @ANYBLOB="010028bd7000fedbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="7e0033008000e100ffffffffffff080211"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) 32.12414577s ago: executing program 33 (id=927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000002c0), 0xfffffffb, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x1000, r3}, 0x38) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) chdir(&(0x7f0000000680)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') write(r4, &(0x7f0000001680)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f20800b179aa901b5d500d63", 0x58) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r9, @ANYBLOB="010028bd7000fedbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="7e0033008000e100ffffffffffff080211"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) 3.25164567s ago: executing program 5 (id=1324): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="2e00000013000500000000000000000003010000100002007664706173696d5f6e65743e0a000400766470613020", 0x2e}, {&(0x7f0000000000)="069dec634b5ad41c459ac95db79211b7babbe1915906559244d647565651c12388c208f7b9d6a01748a150449fdf0cc11d30c540a067f7355841b34aad51b6823776fb0a4193feee466d405f3e67d55cfec20f1b4331768ff7f6a08d1eddf0a2703d13c5143a3ae451412b2d837c1f3e12ab5a3410193a2c8dd2d88f4a4d9f4f5f48f5146e3d27f4c201bcac321905c0288d4bffad50b27c16b4fdb47d1ac262e6eadbdbc57fb7e2df7f0ce76f4ab227cf80b7b7332023d3d2f6857791315377ae982633acd2814de32d5610349c1d6ff004169995e948e75f0c2d268276f5059fbc9eb77c7c96f70ea0b8", 0xeb}, {&(0x7f0000000100)="ec88887d508b432a9da29a76339d0f5b4581fa2ee03bd7eead74fde8cf328b537f6d1549caa2e9b01d85c6f3c8005d2c63f8230abdb7a8257d21d1f4424999825dde65ec805508b0136dae2df84d766b27bee91d85da0c1c217017d53fe3f7011afa6a03b19d04bd8777917752f0f9b5559841d1578fc001fef29d956595de691ee4a6e8e7fa0a50aa83b14f3156eed21aa46b5014469718c843c7030a41e1113a55caf2a3fc964aed0f3b2558b08e12ac724fe3eb4e", 0xb6}], 0x3}, 0x0) 3.244682996s ago: executing program 5 (id=1326): syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@remote}, {@dev}, {}, {@multicast2}, {@local}, {@local}, {@multicast1}]}]}}}}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x1}, 0x18) sendmsg$tipc(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)='|', 0x206c}], 0x1, 0x0, 0x0, 0x40080}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9203, 0x2c150}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x240008c4}, 0x200080c4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@private1, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) 2.145446353s ago: executing program 5 (id=1341): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x23, 0x4, 0x4008, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x700}, 0x50) r0 = fsopen(&(0x7f00000001c0)='selinuxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.082238151s ago: executing program 5 (id=1344): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002abd7000fddbdf2580204c3200723f24961600695b99b0f7ff0c009900050000001900000e28f68588383c09b9fecc3c1c998f0802"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000280)={{0x0, 0x2, 0x400, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f00000002c0)) r3 = openat$cgroup_pressure(r1, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000080)={'full', 0x20, 0x2000000004, 0x20, 0x10000000fffff}, 0x2f) close(r3) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bba919736d34"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) 1.984434921s ago: executing program 5 (id=1345): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0xfffffffffffffd4e) r1 = syz_io_uring_setup(0x29d7, &(0x7f00000000c0)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, &(0x7f0000000300)) ptrace(0x10, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_WAITID={0x32, 0x49, 0x0, 0x7, &(0x7f0000000280)={0x24, 0x8, 0x5}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) io_uring_enter(r1, 0x1, 0x1, 0x61, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) 1.915056561s ago: executing program 5 (id=1347): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./debug\x00', &(0x7f00000005c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='+p', 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r2, 0x30b, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='.\x00', &(0x7f00000003c0), 0x400, &(0x7f0000000440)={[{@noswap}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='rd_pages=64', 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='1\x00', 0x2) 1.743997967s ago: executing program 3 (id=1351): madvise(&(0x7f0000bdd000/0x2000)=nil, 0x2000, 0x17) syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 1.648274737s ago: executing program 3 (id=1354): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f00000000c0)=0x10001, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x1234, @loopback}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0xd, 0x5, &(0x7f0000000200)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000240)='GPL\x00'}, 0x80) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000300)={{&(0x7f0000672000/0x4000)=nil, 0x4000}, 0x2}) write(r0, &(0x7f0000000140), 0xfd79) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000001ce454d0a79fb2b89816ec8bb5bbde1d23086f7d0110efe7f53e96335433c96d2e905d9417aa59ba9cafcc61111c4348817fab3bae257d926bcb7285cd764940bb25cb4373dc7e0ebe", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 1.445416009s ago: executing program 0 (id=1357): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xc5, @remote, 0x4}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r1, 0x7, 0x0, 0x6, 0x2, 0x507}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="388cd03c1c97cdbf3bfa2407cdd94b9988743f026de9873df92f44e1d04d6c68866222c65deda93126a27cf82e066d20c1e8a1c01703aff7e9c8893325b728cb90010bed7fa666b410e21718aa0d3e447b79c9dcccd22389007676ca09ba39d1359562bee912bd46ce442f9f3aa0b6a0246ee0de918d638e6a474de9cc37e026ed45df20dc01fb1be6ba06618d6df55700bdebcdaeb3cd92481c42386cddeabe85a8f8da982568b9105cb2a2cb4d5ce5", 0xb0, 0x4000810, &(0x7f0000000180)={0xa, 0x4e20, 0x7f, @loopback, 0x1}, 0x1c) 1.407806555s ago: executing program 3 (id=1359): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffc, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000000)="46a1a0995a02", 0x0, 0x0, 0x14, 0x0, 0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x82100, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000140)={&(0x7f0000000180)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000200)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r4 = dup(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000300)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10) write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[], 0x32600) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, &(0x7f00000003c0)="f2af0f01df263e0f09660fc774650f01d1ea0f0078006526670f794d890fc71cbaf80c66b80a87ba8c66efbafc0cb8a989ef0f2318", 0x35}], 0x1, 0x0, &(0x7f00000004c0), 0x0) 1.405668994s ago: executing program 0 (id=1360): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x10b801) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064d1, &(0x7f0000000100)={0x4, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xb6e6}]}) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x0, 0x10, &(0x7f0000000800), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000840)=r6, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000240)={&(0x7f00000002c0)=[r4, r4], 0x0, 0x2}) close_range(r2, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x10b801) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064d1, &(0x7f0000000100)={0x4, 0x0, 0x0}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xb6e6}]}) (async) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) (async) syz_open_dev$dri(&(0x7f00000001c0), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) (async) socket$packet(0x11, 0x3, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x0, 0x10, &(0x7f0000000800), 0xfffffffffffffe19}, 0x42) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000840)=r6, 0x4) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000240)={&(0x7f00000002c0)=[r4, r4], 0x0, 0x2}) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) add_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r0) (async) 864.640851ms ago: executing program 2 (id=1362): setns(0xc9, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r0, 0x0, 0x0, 0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000580)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x7, &(0x7f00000005c0)={0x1, 0x1, 0x25, 0x3}) fcntl$lock(r1, 0x7, &(0x7f0000000600)={0x1, 0x2, 0x8, 0x73e9}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x1}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', 0x1}) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="00000019"], 0x11) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000000)={0x0, 0x5, 0x1, 0x1}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000400)={{r0}, {@val={r4}, @max}}) 696.651693ms ago: executing program 2 (id=1363): mount(&(0x7f0000000000)=@sr0, &(0x7f0000000380)='./cgroup\x00', &(0x7f00000003c0)='xfs\x00', 0x200013, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./cgroup\x00', 0x0, 0x18}, 0x18) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x50, 0xffffffffffffffff, 0x4097a000) 516.571436ms ago: executing program 2 (id=1364): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000030400000000ffdbdf2500007400c26e8e514afff66eab9ced50d95ec0aeb91bd3ac7dc1b8c5881a7349520718b800553e39fe8c17a94c7aa87ce89a8d98c7ad057c7eaead1a83f76dd9f0e8375a9cc547a78bc549e040c96635181b", @ANYRES32=0x0, @ANYBLOB="00000000f3b20500200012800b0001006272696467650000100002800c0023000200000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x2000c014) setresgid(0xee00, 0xee01, 0x0) setresgid(0xee01, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8936, &(0x7f0000000080)={'hsr0\x00', @ifru_mtu=0x9}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x2) r3 = fsopen(&(0x7f00000000c0)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='source', &(0x7f00000002c0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r6}, &(0x7f0000000bc0)=0x2000000, &(0x7f0000000c00)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000c40)={r6, &(0x7f0000000c80)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000c80)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008001100010000001400030067656e65766531"], 0x50}}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB='/'], 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r7, 0xfff) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r8, 0x5) r9 = socket$inet(0xa, 0x801, 0x84) r10 = socket$inet(0xa, 0x801, 0x84) listen(r10, 0x8) listen(r9, 0xfffffffd) r11 = socket$inet(0xa, 0x801, 0x84) r12 = socket$inet(0xa, 0x801, 0x84) listen(r12, 0x8) listen(r11, 0x1) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400, 0x105) 405.110896ms ago: executing program 3 (id=1366): r0 = open(&(0x7f0000000000)='./file0\x00', 0x8041, 0x2) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x2, 0x2, 0x8001, 0x2, 0x3}, 0x9, 0x400}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x1e, 0x9, 0x0, 0x12}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x80) r2 = memfd_secret(0x0) rmdir(&(0x7f0000000180)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4240008}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) setxattr$incfs_metadata(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)="e342d98f619ac366425aea1d5b0aad635e3176d48eed1fa060c507123d7a6ec5f03fe91ab403360433dc1cf59c252af0dda3b2128a08545ab87b041c5a11738c16580b2dcd6b8e9fe472bb0d1aa82112747d3284fe5ea236028257ee468316ee30ca78f89d631c58390b06", 0x6b, 0x6) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r6, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x91f, 0x3a}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000000640)={@local, @multicast, @val={@val={0x88a8, 0x7, 0x0, 0x4}, {0x8100, 0x1, 0x0, 0x1}}, {@canfd={0xd, {{0x0, 0x1}, 0x2a, 0x2, 0x0, 0x0, "c8da67497c10e18e5bf3042b4b5a6b8750fca1ab0b9232af38753609dc153326335182532ef33a5adba2c63b3f29a072185c415103a03db04f1e97b4d57c12f0"}}}}, &(0x7f00000006c0)={0x0, 0x1, [0x23f, 0x275, 0xcee, 0x250]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000700)={@mcast2}, 0x14) sendmsg$NL80211_CMD_NEW_MPATH(r8, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x74, r6, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000030}, 0x40) r9 = getpid() ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000880)={0x8, 0x9, 0x7, 0x0, 0x1}) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x10, 0x3f2, 0x400, 0x70bd26, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8044}, 0x20000010) r10 = accept4$alg(r3, 0x0, 0x0, 0x80000) sendmsg(r10, &(0x7f0000000c80)={&(0x7f0000000a00)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a80)="ec2391ddd9f436e3faffc76d3005e8635cd52d224a8dadf3aac926b187334826eb7b876c6ccbc30311b9012732a563df17f2f56ad194f757228ac86581f3b45b9c34131ad313d23b65a84d56cf3ca2e97cb5216ed348dac55f43f8a6a554e818169d7863e3ef659227c7bcd5d46351702253be46051992ded0fad28b34d0970c0bab8ac1248505006fd2c9e1485f1a2869292c5bbb068e616b9f1351136b618b57f78789deaf97ff5069fcb308fc", 0xae}, {&(0x7f0000000b40)="b9a0fdcb4ba6510f579198282b445d76a7791122045bc0b82e14d17b970f1ac736148dd365069f0c3e4c5fa78f82c1", 0x2f}, {&(0x7f0000000b80)="39a85cb8846660364de4eae479d454be5d59afa1f031a57044d773a144cc5bbcd0f6597d030a77ec769f16d98d67", 0x2e}, {0xffffffffffffffff}, {&(0x7f0000000bc0)="df093cbefbcff95145e75d7795c77c873d309b931fcb77bcd5c0c302cce99c6cb4c402ea388320542ccb26aea4ebfd78972f", 0x32}], 0x5}, 0x20000010) signalfd4(r4, &(0x7f0000000cc0)={[0x100000001]}, 0x8, 0x80000) rt_sigqueueinfo(r9, 0x2e, &(0x7f0000000d00)={0x11, 0x6, 0x7}) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000001580)={&(0x7f0000000d80), 0x0, &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001540)}) socket$inet(0x2, 0x4, 0x4440) r11 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000015c0), 0x40000, 0x0) ioctl$CEC_DQEVENT(r11, 0xc0506107, &(0x7f0000001600)={0x0, 0x0, 0x0, @raw}) 326.783054ms ago: executing program 2 (id=1367): mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, &(0x7f0000000100)='barrier') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000300030000000500050036000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000400)={&(0x7f0000000200)=0x7, 0x0, &(0x7f0000000240)=[{}, {}], &(0x7f00000003c0)}) 326.410368ms ago: executing program 3 (id=1368): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000300c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c000280050001000000000006000340000000000800074000000000040006"], 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000040018000680140004"], 0xac}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00000009c0)=0x4, 0x4) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000640)="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", 0x111}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa00", 0x7}, {&(0x7f00000015c0)="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", 0xc5d}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x200) r3 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000380)={0x4, 0x81, {r3}, {r4}, 0x1, 0x6}) 326.264654ms ago: executing program 2 (id=1369): madvise(&(0x7f00004db000/0x4000)=nil, 0x4000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000)=0x4000005, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) recvfrom$inet(r0, &(0x7f0000000100)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x19) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000600)) (async) timer_settime(0x0, 0x0, &(0x7f0000000640)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f00004a7000/0x400000)=nil) 222.296047ms ago: executing program 0 (id=1370): r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000005c0), 0x42643, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000680)={@in6={0xa, 0x4e23, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xdf6f}, {&(0x7f0000000600)=""/46, 0x2e}, &(0x7f0000000640), 0x4b}, 0xa0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = syz_create_resource$binfmt(&(0x7f00000002c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="1400"], &(0x7f0000000440), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRESHEX=r2], 0x7000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="39cc7d2d149576730bfe071c75d0ae2f9519447600000000000000022000000340000300000000"], 0x1c}}, 0x0) mkdirat(r0, &(0x7f0000000840)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./pipefs\x00', &(0x7f00000008c0)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt\x00', 0x1ff) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000940)='./pipefs\x00', 0x140004b2) mount$nfs4(&(0x7f0000000980)=':2\a>pt', &(0x7f00000009c0)='./mnt\x00', &(0x7f0000000a00), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='addr=127.0.0.1,soft,timeo=1,retrans=1,sec=krb5,']) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480), 0x16) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) renameat2(r0, &(0x7f0000000740)='./file1\x00', r0, &(0x7f0000000780)='./file0\x00', 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d42cfffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r9, &(0x7f00000007c0), &(0x7f0000000800)=@v2={0x3, 0x2, 0x12, 0xab2, 0x5, "ca85282a51"}, 0xe, 0x2) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r8, @ANYBLOB="46060900000000001cf1118009000100626f6e64000000000c000280"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 221.963057ms ago: executing program 3 (id=1371): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20040014) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="b8000000130000012cbd7000fbdbdf25fc000000000000000000000000000001ff01000000000000000000000000000100000004000000000a00602001000000565c6a085ffb81a2f12e2d3cebf50e55e78da9ec71cc1a09317db01bbcfd28a6a578e2e57acc9d101be1318e29c2aaeaf8d04d93e67d732a477873d08bb70d8df44684660146fc675858a0f7f34d2baf813fc68ce7e79bba0f502efa58ee9a6eb852ad4e9ef034407f5f95b17ef5eab52baa015917abdddebf4eb8d96ef3beee11df672c93eee399097d35078f84df9bf1f61dfb6fb53213835badc5b3a825ce967700a8bac94dfb306688613ad509cd58768ae5a407f669b87e48b40952759902c8bdcaa1090e6019aa2e801eb347ca64764e94880e66810076c59178896be28e23d58b6ca7a43d56f0fd8468ce234eae564a87764bae8ebe89a82f5fdb768d869e7bdb3a02b78e8387bf6cbef0d575c01d1abff62002fa2ec32c014dbe2c00866476d0dd8adbeaff84b6d159228d5fb7055cc56e081de076ac3c516cc3605b0347cb1a22108cb9751f65e031accb5f00086bad1ce8b9cf8435bbf1eee75890929c8ef0887f1575e7d8cf0585a8e8776a4a1a685fbbdede09fe3092598c7380fea84cd6ba9987ef757ca9da0864e26c072cb3e3b144267e0c8d3bfde254a197", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="09000000000000000200000000000000000000000000000004000000000000004000000000000000fdfdffffffffffff50000000000000004d6b000000000000050000000000000000000000000000000000000000000000000000000000000006000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @broadcast}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000740)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000ac0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x11883}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0c5}, 0x0) write$tun(r6, &(0x7f0000000c00)=ANY=[@ANYBLOB="080081000700020000002b"], 0x3b) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r11, @ANYBLOB="916f0600c06a010064001280110001006272696467655f736c617665000000004c00058005001e000900"], 0x84}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000380)=0x7, 0x4) sendmsg$sock(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="2e00000013000500000000000000000006010000100002007664706173696d5f626cd6000a000400766470613000", 0x2e}], 0x1}, 0x0) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x40, r12, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x44014) socket$alg(0x26, 0x5, 0x0) 72.490407ms ago: executing program 0 (id=1372): r0 = syz_open_pts(0xffffffffffffffff, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) setns(0xc9, 0x0) r1 = socket(0x2a, 0x2, 0x9) recvfrom$rxrpc(r1, 0x0, 0x0, 0x20, 0x0, 0x0) 67.685672ms ago: executing program 2 (id=1373): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r1, 0x1, 0x18}, 0xc) (async) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f00000000c0)={0x30b32c0, 0x1, @qpsk={0x4, 0x1a}}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.1:678H\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='mount\atimeout\x00\x97l\x8a\x1ff\xa0\xb1@`\x7f^A\xa7g\x06\x9c\xf6\x10\x86\xb4\xb0\xff\xa8o\xa8\xf4r\xe7\xc4\x12\xea\xb6\xdc\xa3\\Yd&\xd4\xa7x` 1 [ 130.913818][ T66] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.922309][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.925203][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.926107][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.011628][ T9799] Set syz1 is full, maxelem 65536 reached [ 131.037955][ T9830] netlink: 'syz.0.929': attribute type 1 has an invalid length. [ 131.049836][ T9830] bond13: entered promiscuous mode [ 131.050053][ T9830] 8021q: adding VLAN 0 to HW filter on device bond13 [ 131.053999][ T9830] __nla_validate_parse: 1 callbacks suppressed [ 131.054008][ T9830] netlink: 28 bytes leftover after parsing attributes in process `syz.0.929'. [ 131.054065][ T9830] bond13: entered allmulticast mode [ 131.069400][ T9830] bond13: (slave bridge13): making interface the new active one [ 131.069413][ T9830] bridge13: entered promiscuous mode [ 131.069530][ T9830] bridge13: entered allmulticast mode [ 131.071062][ T9830] bond13: (slave bridge13): Enslaving as an active interface with an up link [ 131.174143][ T9844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=9844 comm=syz.3.933 [ 131.239538][ T9824] rxe_eth0 speed is unknown, defaulting to 1000 [ 131.260912][ T9855] netlink: 'syz.0.937': attribute type 1 has an invalid length. [ 131.279987][ T9855] bond14: entered promiscuous mode [ 131.280320][ T9855] 8021q: adding VLAN 0 to HW filter on device bond14 [ 131.294681][ T9855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.937'. [ 131.300394][ T9855] bond14: entered allmulticast mode [ 131.316740][ T9855] bond14: (slave bridge14): making interface the new active one [ 131.316755][ T9855] bridge14: entered promiscuous mode [ 131.316842][ T9855] bridge14: entered allmulticast mode [ 131.317601][ T9855] bond14: (slave bridge14): Enslaving as an active interface with an up link [ 131.318921][ T9857] syzkaller0: entered promiscuous mode [ 131.318939][ T9857] syzkaller0: entered allmulticast mode [ 131.433146][ T9865] fuse: fd is not a fuse device [ 131.481221][ T9868] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 131.484178][ T43] audit: type=1400 audit(1792118940.808:24000): avc: denied { relabelto } for pid=9867 comm="syz.2.941" name="cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 131.485903][ T43] audit: type=1400 audit(1792118940.808:24001): avc: denied { associate } for pid=9867 comm="syz.2.941" name="cgroup.procs" dev="cgroup" ino=236 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 131.577335][ T9868] syzkaller0: entered promiscuous mode [ 131.577349][ T9868] syzkaller0: entered allmulticast mode [ 131.580201][ T9868] tipc: Enabled bearer , priority 0 [ 131.585997][ T9868] tipc: Resetting bearer [ 131.591208][ T9867] tipc: Resetting bearer [ 131.610318][ T9867] tipc: Disabling bearer [ 131.618046][ T9883] netlink: 'syz.3.945': attribute type 1 has an invalid length. [ 131.627259][ T9883] bond13: entered promiscuous mode [ 131.627502][ T9883] 8021q: adding VLAN 0 to HW filter on device bond13 [ 131.631274][ T9883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.945'. [ 131.633775][ T9883] bond13: entered allmulticast mode [ 131.680407][ T9883] bond13: (slave bridge12): making interface the new active one [ 131.680423][ T9883] bridge12: entered promiscuous mode [ 131.680521][ T9883] bridge12: entered allmulticast mode [ 131.681053][ T9883] bond13: (slave bridge12): Enslaving as an active interface with an up link [ 131.758672][ T43] audit: type=1400 audit(1792118941.088:24002): avc: denied { create } for pid=9894 comm="syz.2.947" name="loop0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 131.759090][ T43] audit: type=1400 audit(1792118941.088:24003): avc: denied { mounton } for pid=9894 comm="syz.2.947" path="/186/loop0" dev="tmpfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 131.760103][ T9895] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 131.771658][ T43] audit: type=1400 audit(1792118941.098:24004): avc: denied { unlink } for pid=5731 comm="syz-executor" name="loop0" dev="tmpfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 131.827532][ T9824] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.827587][ T9824] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.827640][ T9824] bridge_slave_0: entered allmulticast mode [ 131.828563][ T9824] bridge_slave_0: entered promiscuous mode [ 131.838168][ T9824] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.838236][ T9824] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.838297][ T9824] bridge_slave_1: entered allmulticast mode [ 131.839126][ T9824] bridge_slave_1: entered promiscuous mode [ 131.867278][ T9824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.868770][ T9824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.880784][ T9907] fuse: fd is not a fuse device [ 131.890112][ T9824] team0: Port device team_slave_0 added [ 131.891481][ T9824] team0: Port device team_slave_1 added [ 131.908106][ T43] audit: type=1400 audit(1792118941.238:24005): avc: denied { write } for pid=9903 comm="syz.2.949" name="/" dev="9p" ino=71827727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.909881][ T9824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.909891][ T9824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.909904][ T9824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.910982][ T9824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.910990][ T9824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.911003][ T9824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.947075][ T9904] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.987719][ T9824] hsr_slave_0: entered promiscuous mode [ 131.988426][ T9824] hsr_slave_1: entered promiscuous mode [ 132.140840][ T9824] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 132.149839][ T9824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 132.150609][ T9824] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 132.154429][ T9824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 132.155183][ T9824] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 132.161297][ T9824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 132.164910][ T9824] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 132.170292][ T9824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 132.199976][ T9824] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.200075][ T9824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.200272][ T9824] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.200358][ T9824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.238786][ T9921] block2mtd: illegal erase size [ 132.240558][ T9824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.246121][ T8189] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.248608][ T8189] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.269811][ T9824] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.286149][ T8189] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.286248][ T8189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.298507][ T8189] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.298560][ T8189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.388466][ T9925] syzkaller0: entered promiscuous mode [ 132.388486][ T9925] syzkaller0: entered allmulticast mode [ 132.388785][ T9930] netlink: 'syz.3.955': attribute type 1 has an invalid length. [ 132.391292][ T9925] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 132.408539][ T9930] bond14: entered promiscuous mode [ 132.408775][ T9930] 8021q: adding VLAN 0 to HW filter on device bond14 [ 132.412988][ T9930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.955'. [ 132.413045][ T9930] bond14: entered allmulticast mode [ 132.433184][ T9930] bond14: (slave bridge13): making interface the new active one [ 132.433205][ T9930] bridge13: entered promiscuous mode [ 132.433440][ T9930] bridge13: entered allmulticast mode [ 132.434319][ T9930] bond14: (slave bridge13): Enslaving as an active interface with an up link [ 132.500957][ T9937] ip_tables: iptables: counters copy to user failed while replacing table [ 132.659118][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.659150][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.674167][ T6726] cxacru 7-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 132.681908][ T9824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.820296][ T9974] IPVS: dh: TCP 127.0.0.1:21 - no destination available [ 132.847213][ T9824] veth0_vlan: entered promiscuous mode [ 132.852715][ T9824] veth1_vlan: entered promiscuous mode [ 132.871180][ T9824] veth0_macvtap: entered promiscuous mode [ 132.879164][ T9824] veth1_macvtap: entered promiscuous mode [ 132.897440][ T9824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.905795][ T9824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.946337][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.946381][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.946411][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.946442][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.977301][ T66] Bluetooth: hci2: command tx timeout [ 133.033434][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.033453][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.058573][ T8197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.058598][ T8197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.120203][ T9996] netlink: 132 bytes leftover after parsing attributes in process `syz.5.928'. [ 133.120782][ T9996] netlink: 132 bytes leftover after parsing attributes in process `syz.5.928'. [ 133.120918][ T9996] netlink: 132 bytes leftover after parsing attributes in process `syz.5.928'. [ 133.121042][ T9996] netlink: 132 bytes leftover after parsing attributes in process `syz.5.928'. [ 133.121166][ T9996] netlink: 132 bytes leftover after parsing attributes in process `syz.5.928'. [ 133.121289][ T9996] netlink: 132 bytes leftover after parsing attributes in process `syz.5.928'. [ 133.624053][T10006] syzkaller1: entered promiscuous mode [ 133.624073][T10006] syzkaller1: entered allmulticast mode [ 133.832853][T10023] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 133.832869][T10023] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 133.834191][T10023] vhci_hcd vhci_hcd.0: Device attached [ 133.835404][T10023] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 133.835421][T10023] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 133.835471][T10023] vhci_hcd vhci_hcd.0: Device attached [ 133.853999][T10023] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 133.854015][T10023] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 133.854061][T10023] vhci_hcd vhci_hcd.0: Device attached [ 133.854995][T10023] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 133.855007][T10023] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 133.855036][T10023] vhci_hcd vhci_hcd.0: Device attached [ 133.858093][T10023] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 133.858105][T10023] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 133.858138][T10023] vhci_hcd vhci_hcd.0: Device attached [ 133.858909][T10023] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(13) [ 133.858925][T10023] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 133.858962][T10023] vhci_hcd vhci_hcd.0: Device attached [ 133.861864][T10023] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(15) [ 133.861877][T10023] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 133.861922][T10023] vhci_hcd vhci_hcd.0: Device attached [ 133.865355][T10023] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(17) [ 133.865368][T10023] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 133.865397][T10023] vhci_hcd vhci_hcd.0: Device attached [ 133.867076][T10023] vhci_hcd vhci_hcd.0: port 0 already used [ 133.871345][T10039] vhci_hcd: connection closed [ 133.871544][T10031] vhci_hcd: connection closed [ 133.872638][T10026] vhci_hcd: connection closed [ 133.873301][T10029] vhci_hcd: connection closed [ 133.873719][T10041] vhci_hcd: connection closed [ 133.873800][T10037] vhci_hcd: connection closed [ 133.873895][T10035] vhci_hcd: connection closed [ 133.873969][T10033] vhci_hcd: connection closed [ 133.876233][ T9983] vhci_hcd vhci_hcd.3: stop threads [ 133.876248][ T9983] vhci_hcd vhci_hcd.3: release socket [ 133.876259][ T9983] vhci_hcd vhci_hcd.3: disconnect device [ 133.876499][ T9983] vhci_hcd vhci_hcd.3: stop threads [ 133.876509][ T9983] vhci_hcd vhci_hcd.3: release socket [ 133.876519][ T9983] vhci_hcd vhci_hcd.3: disconnect device [ 133.877950][ T9983] vhci_hcd vhci_hcd.3: stop threads [ 133.877967][ T9983] vhci_hcd vhci_hcd.3: release socket [ 133.877977][ T9983] vhci_hcd vhci_hcd.3: disconnect device [ 133.878096][ T9983] vhci_hcd vhci_hcd.3: stop threads [ 133.878104][ T9983] vhci_hcd vhci_hcd.3: release socket [ 133.878113][ T9983] vhci_hcd vhci_hcd.3: disconnect device [ 133.878192][ T9983] vhci_hcd vhci_hcd.3: stop threads [ 133.878200][ T9983] vhci_hcd vhci_hcd.3: release socket [ 133.878209][ T9983] vhci_hcd vhci_hcd.3: disconnect device [ 133.878283][ T9983] vhci_hcd vhci_hcd.3: stop threads [ 133.878291][ T9983] vhci_hcd vhci_hcd.3: release socket [ 133.878299][ T9983] vhci_hcd vhci_hcd.3: disconnect device [ 133.878893][ T9983] vhci_hcd vhci_hcd.3: stop threads [ 133.878903][ T9983] vhci_hcd vhci_hcd.3: release socket [ 133.878912][ T9983] vhci_hcd vhci_hcd.3: disconnect device [ 133.878999][ T9983] vhci_hcd vhci_hcd.3: stop threads [ 133.879007][ T9983] vhci_hcd vhci_hcd.3: release socket [ 133.879016][ T9983] vhci_hcd vhci_hcd.3: disconnect device [ 133.898150][ T43] audit: type=1400 audit(1792118943.228:24006): avc: denied { create } for pid=10019 comm="syz.0.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 133.898530][ T43] audit: type=1400 audit(1792118943.228:24007): avc: denied { write } for pid=10019 comm="syz.0.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 133.956732][ T6454] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 134.019343][ T43] audit: type=1400 audit(1792118943.348:24008): avc: denied { write } for pid=10052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.067561][T10058] fuse: fd is not a fuse device [ 134.126261][ T6454] usb 10-1: Using ep0 maxpacket: 32 [ 134.127740][ T6454] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 134.130390][T10061] tipc: New replicast peer: 172.20.20.187 [ 134.131003][T10061] tipc: Enabled bearer , priority 10 [ 134.131237][ T6454] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 134.131256][ T6454] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 134.131272][ T6454] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 134.131306][ T6454] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 134.131327][ T6454] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 134.131346][ T6454] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 134.131376][ T6454] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.134595][ T6454] usb 10-1: config 0 descriptor?? [ 134.195829][ T5444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.343171][ T6454] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 134.353204][ T6454] usb 10-1: USB disconnect, device number 2 [ 134.359227][ T6454] usblp0: removed [ 134.563517][T10083] xt_hashlimit: size too large, truncated to 1048576 [ 134.630645][T10087] FAULT_INJECTION: forcing a failure. [ 134.630645][T10087] name failslab, interval 1, probability 0, space 0, times 0 [ 134.630678][T10087] CPU: 1 UID: 0 PID: 10087 Comm: syz.2.980 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.630816][T10087] Tainted: [L]=SOFTLOCKUP [ 134.630822][T10087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.630834][T10087] Call Trace: [ 134.630840][T10087] [ 134.630848][T10087] dump_stack_lvl+0x100/0x190 [ 134.630893][T10087] should_fail_ex.cold+0x5/0xa [ 134.630921][T10087] should_failslab+0xc2/0x120 [ 134.630953][T10087] __kmalloc_cache_noprof+0x91/0x6d0 [ 134.630975][T10087] ? tty_open+0x134/0xe20 [ 134.630999][T10087] tty_open+0x134/0xe20 [ 134.631020][T10087] ? __pfx_tty_open+0x10/0x10 [ 134.631036][T10087] ? chrdev_open+0x10b/0x6a0 [ 134.631062][T10087] ? chrdev_open+0x10b/0x6a0 [ 134.631092][T10087] ? __pfx_tty_open+0x10/0x10 [ 134.631108][T10087] chrdev_open+0x234/0x6a0 [ 134.631135][T10087] ? __pfx_chrdev_open+0x10/0x10 [ 134.631162][T10087] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 134.631189][T10087] do_dentry_open+0x6ab/0x14d0 [ 134.631213][T10087] ? __pfx_chrdev_open+0x10/0x10 [ 134.631243][T10089] netlink: 'syz.3.982': attribute type 10 has an invalid length. [ 134.631245][T10087] vfs_open+0x82/0x3f0 [ 134.631275][T10087] path_openat+0x19fa/0x2440 [ 134.631304][T10087] ? __pfx_path_openat+0x10/0x10 [ 134.631335][T10087] do_file_open+0x20e/0x430 [ 134.631360][T10087] ? __pfx_do_file_open+0x10/0x10 [ 134.631397][T10087] ? _raw_spin_unlock+0x28/0x50 [ 134.631442][T10087] ? alloc_fd+0x471/0x7a0 [ 134.631477][T10087] do_sys_openat2+0x10f/0x1e0 [ 134.631497][T10087] ? __pfx_do_sys_openat2+0x10/0x10 [ 134.631517][T10087] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 134.631552][T10087] __x64_sys_openat+0x12d/0x210 [ 134.631572][T10087] ? __pfx___x64_sys_openat+0x10/0x10 [ 134.631603][T10087] do_syscall_64+0x123/0x790 [ 134.631633][T10087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.631651][T10087] RIP: 0033:0x7f36f0b5ed8e [ 134.631665][T10087] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 134.631681][T10087] RSP: 002b:00007f36eedf5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 134.631701][T10087] RAX: ffffffffffffffda RBX: 00007f36eedf66c0 RCX: 00007f36f0b5ed8e [ 134.631712][T10087] RDX: 0000000000000002 RSI: 00007f36eedf5c00 RDI: ffffffffffffff9c [ 134.631723][T10087] RBP: 00007f36f0c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 134.631733][T10087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.631743][T10087] R13: 00007f36f0e26128 R14: 00007f36f0e26090 R15: 00007ffd923bad98 [ 134.631766][T10087] [ 134.724706][T10092] netlink: 'syz.0.983': attribute type 21 has an invalid length. [ 134.776408][T10092] netlink: 'syz.0.983': attribute type 4 has an invalid length. [ 134.776423][T10092] netlink: 'syz.0.983': attribute type 5 has an invalid length. [ 134.858217][T10110] rnbd_client L202: map_device: Unknown parameter or missing value 'syzkaller1' [ 134.858380][ T6454] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 134.874693][T10101] syz.0.984 (10101) used greatest stack depth: 18424 bytes left [ 134.888537][ T66] Bluetooth: hci3: unexpected event for opcode 0x0c13 [ 134.888802][ T66] Bluetooth: hci3: unexpected event for opcode 0x0c14 [ 134.944725][T10114] overlayfs: upper fs does not support tmpfile. [ 134.975730][T10116] [U]  [ 135.016620][ T6454] usb 10-1: Using ep0 maxpacket: 32 [ 135.017113][ T6454] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 135.018036][ T6454] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 135.018049][ T6454] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 135.018059][ T6454] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 135.018078][ T6454] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.018089][ T6454] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 135.018101][ T6454] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 135.018125][ T6454] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.019318][ T6454] usb 10-1: config 0 descriptor?? [ 135.056434][ T66] Bluetooth: hci2: command tx timeout [ 135.137964][ T5887] tipc: Node number set to 2885041722 [ 135.225561][ T6454] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 135.267098][T10127] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 135.421988][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 135.422012][ T43] audit: type=1400 audit(1792118944.748:24018): avc: denied { read write } for pid=10009 comm="syz.5.969" name="lp0" dev="devtmpfs" ino=2992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 135.422261][ T43] audit: type=1400 audit(1792118944.748:24019): avc: denied { open } for pid=10009 comm="syz.5.969" path="/dev/usb/lp0" dev="devtmpfs" ino=2992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 135.432834][T10010] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 135.436684][T10010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.437202][T10010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.649186][ T30] usb 10-1: USB disconnect, device number 3 [ 135.664956][ T30] usblp0: removed [ 135.861745][T10151] tipc: Enabling of bearer rejected, failed to enable media [ 135.864142][T10160] ip_tables: iptables: counters copy to user failed while replacing table [ 135.982063][T10169] overlayfs: failed to clone upperpath [ 136.019793][ T43] audit: type=1400 audit(1792118945.348:24020): avc: denied { map } for pid=10173 comm="syz.3.1001" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 136.019901][ T43] audit: type=1400 audit(1792118945.348:24021): avc: denied { execute } for pid=10173 comm="syz.3.1001" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 136.188114][T10187] netlink: 'syz.3.1007': attribute type 1 has an invalid length. [ 136.214783][T10187] bond15: entered promiscuous mode [ 136.214971][T10187] 8021q: adding VLAN 0 to HW filter on device bond15 [ 136.219360][T10187] __nla_validate_parse: 34 callbacks suppressed [ 136.219371][T10187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1007'. [ 136.219422][T10187] bond15: entered allmulticast mode [ 136.232508][T10187] bond15: (slave bridge14): making interface the new active one [ 136.232528][T10187] bridge14: entered promiscuous mode [ 136.232664][T10187] bridge14: entered allmulticast mode [ 136.233837][T10187] bond15: (slave bridge14): Enslaving as an active interface with an up link [ 136.256564][T10188] batman_adv: batadv0: Interface deactivated: syz_tun [ 136.271343][T10188] batman_adv: batadv0: Removing interface: syz_tun [ 136.280088][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1009'. [ 136.768781][T10229] netlink: 'syz.2.1018': attribute type 1 has an invalid length. [ 136.801606][T10229] bond10: entered promiscuous mode [ 136.801993][T10229] 8021q: adding VLAN 0 to HW filter on device bond10 [ 136.820421][T10229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1018'. [ 136.820517][T10229] bond10: entered allmulticast mode [ 136.855074][T10229] bond10: (slave bridge8): making interface the new active one [ 136.855090][T10229] bridge8: entered promiscuous mode [ 136.857483][T10229] bridge8: entered allmulticast mode [ 136.858588][T10235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1020'. [ 136.868296][T10229] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 136.902464][T10235] xfrm2: entered promiscuous mode [ 136.902483][T10235] xfrm2: entered allmulticast mode [ 136.957495][ T43] audit: type=1400 audit(1792118946.288:24022): avc: denied { ioctl } for pid=10243 comm="syz.2.1022" path="/dev/ptp0" dev="devtmpfs" ino=728 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 136.958193][T10245] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 137.007537][T10235] tmpfs: Bad value for 'mpol' [ 137.095335][ T66] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 137.136817][ T66] Bluetooth: hci2: command tx timeout [ 137.627551][T10264] FAULT_INJECTION: forcing a failure. [ 137.627551][T10264] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 137.627573][T10264] CPU: 1 UID: 0 PID: 10264 Comm: syz.3.1027 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.627589][T10264] Tainted: [L]=SOFTLOCKUP [ 137.627593][T10264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.627600][T10264] Call Trace: [ 137.627604][T10264] [ 137.627609][T10264] dump_stack_lvl+0x100/0x190 [ 137.627638][T10264] should_fail_ex.cold+0x5/0xa [ 137.627653][T10264] ? prepare_alloc_pages+0x16d/0x5b0 [ 137.627674][T10264] should_fail_alloc_page+0xeb/0x140 [ 137.627691][T10264] prepare_alloc_pages+0x1f0/0x5b0 [ 137.627706][T10264] ? is_bpf_text_address+0x94/0x1a0 [ 137.627725][T10264] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 137.627745][T10264] ? stack_trace_save+0x8e/0xc0 [ 137.627758][T10264] ? __pfx_stack_trace_save+0x10/0x10 [ 137.627769][T10264] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 137.627780][T10264] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 137.627793][T10264] ? is_bpf_text_address+0x94/0x1a0 [ 137.627810][T10264] ? kasan_save_stack+0x3f/0x50 [ 137.627825][T10264] ? kasan_save_stack+0x30/0x50 [ 137.627838][T10264] ? kasan_save_track+0x14/0x30 [ 137.627852][T10264] ? __kasan_slab_alloc+0x89/0x90 [ 137.627871][T10264] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 137.627891][T10264] ? alloc_vmap_area+0x640/0x2bb0 [ 137.627937][T10264] ? __get_vm_area_node+0x1ed/0x350 [ 137.627960][T10264] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 137.627986][T10264] ? __vmalloc_node_noprof+0xad/0xf0 [ 137.628012][T10264] ? __vmalloc_noprof+0xa3/0x120 [ 137.628036][T10264] ? bpf_prog_calc_tag+0x65/0x380 [ 137.628054][T10264] ? bpf_check+0x6bd8/0xac70 [ 137.628068][T10264] ? bpf_prog_load+0x1ae1/0x2ab0 [ 137.628083][T10264] ? __sys_bpf+0x1f46/0x4a30 [ 137.628096][T10264] ? __x64_sys_bpf+0xce/0x140 [ 137.628107][T10264] ? do_syscall_64+0x123/0x790 [ 137.628128][T10264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.628149][T10264] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.628165][T10264] ? policy_nodemask+0xed/0x4f0 [ 137.628183][T10264] alloc_pages_mpol+0x201/0x550 [ 137.628201][T10264] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 137.628223][T10264] alloc_pages_noprof+0x1a/0x160 [ 137.628236][T10264] get_free_pages_noprof+0x10/0xb0 [ 137.628251][T10264] __kasan_populate_vmalloc+0xa0/0x210 [ 137.628268][T10264] alloc_vmap_area+0x95d/0x2bb0 [ 137.628286][T10264] ? kasan_save_track+0x14/0x30 [ 137.628300][T10264] ? __kasan_kmalloc+0xaa/0xb0 [ 137.628314][T10264] ? __pfx_alloc_vmap_area+0x10/0x10 [ 137.628329][T10264] ? __get_vm_area_node+0x124/0x350 [ 137.628346][T10264] __get_vm_area_node+0x1ed/0x350 [ 137.628364][T10264] __vmalloc_node_range_noprof+0x268/0x1420 [ 137.628381][T10264] ? bpf_prog_calc_tag+0x65/0x380 [ 137.628395][T10264] ? kasan_save_stack+0x3f/0x50 [ 137.628410][T10264] ? __kasan_kmalloc+0xaa/0xb0 [ 137.628423][T10264] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 137.628436][T10264] ? bpf_check+0x1d2b/0xac70 [ 137.628451][T10264] ? bpf_prog_load+0x1ae1/0x2ab0 [ 137.628465][T10264] ? __sys_bpf+0x1f46/0x4a30 [ 137.628477][T10264] ? __asan_memcpy+0x3c/0x60 [ 137.628490][T10264] ? bpf_prog_calc_tag+0x65/0x380 [ 137.628507][T10264] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 137.628523][T10264] ? __pfx_vsnprintf+0x10/0x10 [ 137.628541][T10264] ? bpf_prog_calc_tag+0x65/0x380 [ 137.628556][T10264] __vmalloc_node_noprof+0xad/0xf0 [ 137.628572][T10264] ? bpf_prog_calc_tag+0x65/0x380 [ 137.628588][T10264] __vmalloc_noprof+0xa3/0x120 [ 137.628604][T10264] ? __pfx___vmalloc_noprof+0x10/0x10 [ 137.628624][T10264] ? __pfx_verbose+0x10/0x10 [ 137.628639][T10264] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 137.628655][T10264] bpf_prog_calc_tag+0x65/0x380 [ 137.628673][T10264] bpf_check+0x6bd8/0xac70 [ 137.628689][T10264] ? __css_rstat_updated+0x1ce/0x590 [ 137.628703][T10264] ? __lock_acquire+0x5c0/0x1f40 [ 137.628716][T10264] ? __pfx___css_rstat_updated+0x10/0x10 [ 137.628739][T10264] ? __pfx_bpf_check+0x10/0x10 [ 137.628754][T10264] ? lock_acquire+0x1d1/0x380 [ 137.628766][T10264] ? bpf_prog_load+0x1a27/0x2ab0 [ 137.628781][T10264] ? find_held_lock+0x2b/0x80 [ 137.628798][T10264] ? bpf_prog_load+0x1a27/0x2ab0 [ 137.628815][T10264] ? __asan_memset+0x23/0x50 [ 137.628830][T10264] ? bpf_prog_load+0x1ae1/0x2ab0 [ 137.628844][T10264] bpf_prog_load+0x1ae1/0x2ab0 [ 137.628863][T10264] ? __pfx_bpf_prog_load+0x10/0x10 [ 137.628890][T10264] __sys_bpf+0x1f46/0x4a30 [ 137.628904][T10264] ? __pfx___sys_bpf+0x10/0x10 [ 137.628915][T10264] ? find_held_lock+0x2b/0x80 [ 137.628930][T10264] ? futex_wake+0x4ea/0x5e0 [ 137.628951][T10264] ? rcu_read_lock_any_held+0x6a/0x90 [ 137.628961][T10264] ? find_held_lock+0x2b/0x80 [ 137.628976][T10264] ? ksys_write+0x190/0x250 [ 137.628989][T10264] ? ksys_write+0x190/0x250 [ 137.629011][T10264] ? __x64_sys_futex+0x34f/0x4d0 [ 137.629032][T10264] ? __x64_sys_futex+0x358/0x4d0 [ 137.629057][T10264] ? fput+0x7c/0x100 [ 137.629083][T10264] ? __pfx___x64_sys_futex+0x10/0x10 [ 137.629106][T10264] ? ksys_write+0x1ac/0x250 [ 137.629131][T10264] ? __x64_sys_bpf+0xce/0x140 [ 137.629156][T10264] __x64_sys_bpf+0xce/0x140 [ 137.629171][T10264] ? do_syscall_64+0xae/0x790 [ 137.629189][T10264] do_syscall_64+0x123/0x790 [ 137.629207][T10264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.629218][T10264] RIP: 0033:0x7f31d319e559 [ 137.629228][T10264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.629238][T10264] RSP: 002b:00007f31d404b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.629249][T10264] RAX: ffffffffffffffda RBX: 00007f31d3425fa0 RCX: 00007f31d319e559 [ 137.629256][T10264] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 137.629262][T10264] RBP: 00007f31d32358b0 R08: 0000000000000000 R09: 0000000000000000 [ 137.629268][T10264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.629275][T10264] R13: 00007f31d3426038 R14: 00007f31d3425fa0 R15: 00007ffe91145d18 [ 137.629289][T10264] [ 137.630054][T10264] syz.3.1027: vmalloc error: size 32, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 137.630097][T10264] CPU: 1 UID: 0 PID: 10264 Comm: syz.3.1027 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.630113][T10264] Tainted: [L]=SOFTLOCKUP [ 137.630116][T10264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.630123][T10264] Call Trace: [ 137.630127][T10264] [ 137.630131][T10264] dump_stack_lvl+0x100/0x190 [ 137.630166][T10264] warn_alloc.cold+0x9e/0xb2 [ 137.630184][T10264] ? __pfx_warn_alloc+0x10/0x10 [ 137.630205][T10264] ? lockdep_hardirqs_on+0x7d/0x110 [ 137.630232][T10264] ? __get_vm_area_node+0x2f0/0x350 [ 137.630265][T10264] ? __get_vm_area_node+0x22b/0x350 [ 137.630294][T10264] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 137.630312][T10264] ? kasan_save_stack+0x3f/0x50 [ 137.630326][T10264] ? __kasan_kmalloc+0xaa/0xb0 [ 137.630340][T10264] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 137.630353][T10264] ? bpf_check+0x1d2b/0xac70 [ 137.630368][T10264] ? bpf_prog_load+0x1ae1/0x2ab0 [ 137.630383][T10264] ? __sys_bpf+0x1f46/0x4a30 [ 137.630394][T10264] ? __asan_memcpy+0x3c/0x60 [ 137.630407][T10264] ? bpf_prog_calc_tag+0x65/0x380 [ 137.630425][T10264] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 137.630441][T10264] ? __pfx_vsnprintf+0x10/0x10 [ 137.630459][T10264] ? bpf_prog_calc_tag+0x65/0x380 [ 137.630473][T10264] __vmalloc_node_noprof+0xad/0xf0 [ 137.630489][T10264] ? bpf_prog_calc_tag+0x65/0x380 [ 137.630506][T10264] __vmalloc_noprof+0xa3/0x120 [ 137.630522][T10264] ? __pfx___vmalloc_noprof+0x10/0x10 [ 137.630539][T10264] ? __pfx_verbose+0x10/0x10 [ 137.630552][T10264] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 137.630570][T10264] bpf_prog_calc_tag+0x65/0x380 [ 137.630595][T10264] bpf_check+0x6bd8/0xac70 [ 137.630622][T10264] ? __css_rstat_updated+0x1ce/0x590 [ 137.630642][T10264] ? __lock_acquire+0x5c0/0x1f40 [ 137.630664][T10264] ? __pfx___css_rstat_updated+0x10/0x10 [ 137.630692][T10264] ? __pfx_bpf_check+0x10/0x10 [ 137.630708][T10264] ? lock_acquire+0x1d1/0x380 [ 137.630720][T10264] ? bpf_prog_load+0x1a27/0x2ab0 [ 137.630735][T10264] ? find_held_lock+0x2b/0x80 [ 137.630751][T10264] ? bpf_prog_load+0x1a27/0x2ab0 [ 137.630768][T10264] ? __asan_memset+0x23/0x50 [ 137.630782][T10264] ? bpf_prog_load+0x1ae1/0x2ab0 [ 137.630797][T10264] bpf_prog_load+0x1ae1/0x2ab0 [ 137.630816][T10264] ? __pfx_bpf_prog_load+0x10/0x10 [ 137.630842][T10264] __sys_bpf+0x1f46/0x4a30 [ 137.630857][T10264] ? __pfx___sys_bpf+0x10/0x10 [ 137.630868][T10264] ? find_held_lock+0x2b/0x80 [ 137.630884][T10264] ? futex_wake+0x4ea/0x5e0 [ 137.630904][T10264] ? rcu_read_lock_any_held+0x6a/0x90 [ 137.630914][T10264] ? find_held_lock+0x2b/0x80 [ 137.630929][T10264] ? ksys_write+0x190/0x250 [ 137.630942][T10264] ? ksys_write+0x190/0x250 [ 137.630962][T10264] ? __x64_sys_futex+0x34f/0x4d0 [ 137.630977][T10264] ? __x64_sys_futex+0x358/0x4d0 [ 137.630994][T10264] ? fput+0x7c/0x100 [ 137.631009][T10264] ? __pfx___x64_sys_futex+0x10/0x10 [ 137.631024][T10264] ? ksys_write+0x1ac/0x250 [ 137.631039][T10264] ? __x64_sys_bpf+0xce/0x140 [ 137.631050][T10264] __x64_sys_bpf+0xce/0x140 [ 137.631063][T10264] ? do_syscall_64+0xae/0x790 [ 137.631078][T10264] do_syscall_64+0x123/0x790 [ 137.631095][T10264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.631106][T10264] RIP: 0033:0x7f31d319e559 [ 137.631115][T10264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.631126][T10264] RSP: 002b:00007f31d404b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.631141][T10264] RAX: ffffffffffffffda RBX: 00007f31d3425fa0 RCX: 00007f31d319e559 [ 137.631148][T10264] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 137.631155][T10264] RBP: 00007f31d32358b0 R08: 0000000000000000 R09: 0000000000000000 [ 137.631161][T10264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.631168][T10264] R13: 00007f31d3426038 R14: 00007f31d3425fa0 R15: 00007ffe91145d18 [ 137.631182][T10264] [ 137.631187][T10264] Mem-Info: [ 137.631193][T10264] active_anon:8245 inactive_anon:12552 isolated_anon:0 [ 137.631193][T10264] active_file:1704 inactive_file:26323 isolated_file:0 [ 137.631193][T10264] unevictable:1000 dirty:82 writeback:0 [ 137.631193][T10264] slab_reclaimable:8149 slab_unreclaimable:79804 [ 137.631193][T10264] mapped:23318 shmem:14470 pagetables:6397 [ 137.631193][T10264] sec_pagetables:303 bounce:0 [ 137.631193][T10264] kernel_misc_reclaimable:0 [ 137.631193][T10264] free:430862 free_pcp:8252 free_cma:0 [ 137.631219][T10264] Node 0 active_anon:30152kB inactive_anon:50144kB active_file:6816kB inactive_file:74948kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:77968kB dirty:220kB writeback:0kB shmem:54084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17216kB pagetables:15844kB sec_pagetables:1188kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 137.631246][T10264] Node 1 active_anon:2828kB inactive_anon:64kB active_file:0kB inactive_file:30344kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:15304kB dirty:108kB writeback:0kB shmem:3796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:192kB pagetables:9744kB sec_pagetables:24kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 137.631276][T10264] Node 0 DMA free:7096kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 137.631318][T10264] lowmem_reserve[]: 0 1204 1204 1204 1204 [ 137.631407][T10264] Node 0 DMA32 free:167108kB boost:0kB min:27108kB low:33884kB high:40660kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30152kB inactive_anon:50144kB active_file:6816kB inactive_file:74948kB unevictable:2000kB writepending:220kB zspages:0kB present:2080628kB managed:1233664kB mlocked:0kB bounce:0kB free_pcp:28532kB local_pcp:11196kB free_cma:0kB [ 137.631453][T10264] lowmem_reserve[]: 0 0 0 0 0 [ 137.631472][T10264] Node 1 Normal free:1549244kB boost:0kB min:40124kB low:50152kB high:60180kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2828kB inactive_anon:64kB active_file:0kB inactive_file:30344kB unevictable:2000kB writepending:108kB zspages:7800kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:4476kB local_pcp:56kB free_cma:0kB [ 137.631502][T10264] lowmem_reserve[]: 0 0 0 0 0 [ 137.631518][T10264] Node 0 DMA: 2*4kB (U) 4*8kB (U) 5*16kB (U) 6*32kB (UE) 6*64kB (UE) 4*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 7096kB [ 137.631595][T10264] Node 0 DMA32: 1411*4kB (UE) 413*8kB (UME) 79*16kB (UE) 114*32kB (UME) 246*64kB (UME) 333*128kB (UME) 192*256kB (UM) 71*512kB (UM) 3*1024kB (M) 3*2048kB (M) 0*4096kB = 166948kB [ 137.631718][T10264] Node 1 Normal: 399*4kB (UM) 408*8kB (UM) 400*16kB (UME) 360*32kB (UME) 355*64kB (UME) 330*128kB (UME) 293*256kB (UME) 286*512kB (UME) 259*1024kB (UME) 22*2048kB (UME) 227*4096kB (UM) = 1549244kB [ 137.631808][T10264] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 137.631817][T10264] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.631826][T10264] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 137.631834][T10264] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.631843][T10264] 43282 total pagecache pages [ 137.631847][T10264] 787 pages in swap cache [ 137.631851][T10264] Free swap = 88824kB [ 137.631855][T10264] Total swap = 124996kB [ 137.631859][T10264] 1048443 pages RAM [ 137.631863][T10264] 0 pages HighMem/MovableOnly [ 137.631867][T10264] 290717 pages reserved [ 137.631870][T10264] 0 pages cma reserved [ 137.936211][T10277] netlink: 'syz.5.1031': attribute type 1 has an invalid length. [ 137.945230][T10277] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1031'. [ 137.945581][T10277] wg1: entered promiscuous mode [ 137.945919][T10277] wg1: entered allmulticast mode [ 137.949217][ T43] audit: type=1400 audit(1792118947.268:24023): avc: denied { accept } for pid=10274 comm="syz.3.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.144450][T10289] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 138.144471][T10289] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 138.147779][T10289] vhci_hcd vhci_hcd.0: Device attached [ 138.154655][T10292] vhci_hcd: cannot find the pending unlink 6 [ 138.154678][T10292] vhci_hcd: connection closed [ 138.155487][ T12] vhci_hcd vhci_hcd.3: stop threads [ 138.155549][ T12] vhci_hcd vhci_hcd.3: release socket [ 138.155565][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 138.297508][ T43] audit: type=1400 audit(1792118947.628:24024): avc: denied { bind } for pid=10299 comm="syz.0.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.318586][T10303] comedi comedi3: Minor 4 could not be opened [ 138.334626][ T67] block nbd2: Receive control failed (result -32) [ 138.361164][T10260] block nbd2: shutting down sockets [ 138.456313][ T43] audit: type=1400 audit(1792118947.768:24025): avc: denied { getopt } for pid=10310 comm="syz.2.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.499524][ T43] audit: type=1400 audit(1792118947.828:24026): avc: denied { bind } for pid=10310 comm="syz.2.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.606946][T10325] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1048'. [ 138.647891][T10333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=10333 comm=syz.5.1049 [ 139.226421][ T66] Bluetooth: hci2: command tx timeout [ 139.398949][T10311] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.545604][T10311] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.670681][T10311] team0: Port device netdevsim1 removed [ 139.672049][T10311] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.701829][T10350] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1053'. [ 139.735488][T10311] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.806340][ T9983] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.826459][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.826496][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.826529][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.838077][T10359] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 139.848285][T10356] CIFS: iocharset name too long [ 139.932361][T10372] ip_tables: iptables: counters copy to user failed while replacing table [ 140.045638][T10369] vhci_hcd: not connected 4 [ 140.054720][ T43] audit: type=1400 audit(1792119205.377:24027): avc: denied { bind } for pid=10358 comm="syz.2.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.088448][T10379] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 140.116780][T10384] netlink: 'syz.0.1059': attribute type 1 has an invalid length. [ 140.172657][T10393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1059'. [ 140.182801][T10384] bond15: entered promiscuous mode [ 140.186503][T10384] 8021q: adding VLAN 0 to HW filter on device bond15 [ 140.192489][T10393] bond15: entered allmulticast mode [ 140.199471][T10390] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 140.199491][T10390] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 140.199511][T10390] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 140.208245][T10390] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 140.222783][T10390] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 140.228311][T10384] bond15: (slave bridge16): making interface the new active one [ 140.228325][T10384] bridge16: entered promiscuous mode [ 140.228876][T10384] bridge16: entered allmulticast mode [ 140.237275][T10384] bond15: (slave bridge16): Enslaving as an active interface with an up link [ 140.242511][T10388] rxe_eth0 speed is unknown, defaulting to 1000 [ 140.306135][T10396] netlink: 'syz.0.1061': attribute type 1 has an invalid length. [ 140.340438][T10396] 8021q: adding VLAN 0 to HW filter on device bond16 [ 140.354094][T10396] bond16: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 140.362998][T10400] ip_tables: iptables: counters copy to user failed while replacing table [ 140.517100][T10391] smbdirect: ib_dev[rxe0] renamed to [s] [ 140.551322][T10420] netlink: 'syz.2.1069': attribute type 1 has an invalid length. [ 140.597028][T10420] bond11: entered promiscuous mode [ 140.597349][T10420] 8021q: adding VLAN 0 to HW filter on device bond11 [ 140.610921][T10420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1069'. [ 140.616090][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 140.616102][ T43] audit: type=1400 audit(1792119205.937:24030): avc: denied { ioctl } for pid=10425 comm="syz.5.1071" path="socket:[41085]" dev="sockfs" ino=41085 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.624247][T10427] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 140.629285][ T43] audit: type=1400 audit(1792119205.957:24031): avc: denied { write } for pid=10424 comm="syz.3.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.664354][T10430] tmpfs: Bad value for 'mpol' [ 140.666821][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1071'. [ 140.696088][T10420] bond11: entered allmulticast mode [ 140.774339][T10440] ip6t_hbh: Not strict - not implemented [ 140.801906][T10420] bond11: (slave bridge9): making interface the new active one [ 140.801930][T10420] bridge9: entered promiscuous mode [ 140.802070][T10420] bridge9: entered allmulticast mode [ 140.816817][T10420] bond11: (slave bridge9): Enslaving as an active interface with an up link [ 141.053266][ T43] audit: type=1400 audit(1792119206.377:24032): avc: denied { setopt } for pid=10454 comm="syz.0.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.067697][ T1478] input: syz0 as /devices/virtual/misc/uhid/0002:1B1C:0C10.0003/input/input11 [ 141.076897][T10458] netlink: 'syz.2.1081': attribute type 21 has an invalid length. [ 141.084571][ T43] audit: type=1400 audit(1792119206.407:24033): avc: denied { map } for pid=10451 comm="syz.3.1079" path="socket:[39402]" dev="sockfs" ino=39402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 141.106856][ T43] audit: type=1326 audit(1792119206.437:24034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10451 comm="syz.3.1079" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31d319e559 code=0x0 [ 141.139377][ T1478] hid-generic 0002:1B1C:0C10.0003: input,hidraw1: HID v0.00 Device [syz0] on syz0 [ 141.142998][ T43] audit: type=1400 audit(1792119206.467:24035): avc: denied { read } for pid=10464 comm="syz.0.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.165461][ T5735] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 141.165989][ T5735] Bluetooth: hci3: Injecting HCI hardware error event [ 141.210842][T10470] netlink: 'syz.2.1084': attribute type 9 has an invalid length. [ 141.216760][T10471] fido_id[10471]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 141.247070][T10470] netlink: 'syz.2.1084': attribute type 9 has an invalid length. [ 141.247084][T10470] __nla_validate_parse: 1 callbacks suppressed [ 141.247090][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1084'. [ 141.257303][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.257352][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.257385][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.257411][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.363116][T10484] netlink: 'syz.2.1086': attribute type 34 has an invalid length. [ 141.363130][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 141.373006][T10484] bond12: option lacp_strict: invalid value (88) [ 141.373973][T10484] bond12 (unregistering): Released all slaves [ 141.466140][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.483682][ T66] Bluetooth: hci3: hardware error 0x00 [ 141.781531][T10491] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 141.842904][T10495] netlink: 'syz.3.1091': attribute type 4 has an invalid length. [ 141.847220][T10496] netlink: 'syz.3.1091': attribute type 4 has an invalid length. [ 142.121155][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'. [ 142.125192][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'. [ 142.167722][T10532] comedi comedi3: dt2814: I/O base address or length out of range [ 142.218625][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'. [ 142.233738][T10538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1100'. [ 142.271295][T10541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1101'. [ 142.445600][T10553] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1105'. [ 142.481457][T10556] netlink: 'syz.0.1106': attribute type 1 has an invalid length. [ 142.502458][T10556] bond17: entered promiscuous mode [ 142.502806][T10556] 8021q: adding VLAN 0 to HW filter on device bond17 [ 142.514931][T10556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1106'. [ 142.515025][T10556] bond17: entered allmulticast mode [ 142.533182][T10561] netlink: 'syz.5.1108': attribute type 64 has an invalid length. [ 142.545266][T10556] bond17: (slave bridge18): making interface the new active one [ 142.545287][T10556] bridge18: entered promiscuous mode [ 142.545428][T10556] bridge18: entered allmulticast mode [ 142.547204][T10556] bond17: (slave bridge18): Enslaving as an active interface with an up link [ 142.672080][ T43] audit: type=1400 audit(1792119207.998:24036): avc: denied { bind } for pid=10569 comm="syz.3.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.674245][ T43] audit: type=1400 audit(1792119207.998:24037): avc: denied { listen } for pid=10569 comm="syz.3.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.840702][ T43] audit: type=1400 audit(1792119208.168:24038): avc: denied { watch } for pid=10585 comm="syz.3.1115" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="hugetlbfs" ino=40212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 142.843914][ T43] audit: type=1400 audit(1792119208.168:24039): avc: denied { execute_no_trans } for pid=10585 comm="syz.3.1115" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="hugetlbfs" ino=40212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 142.887129][T10587] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1114'. [ 142.954250][T10583] ip6erspan0: entered allmulticast mode [ 142.965653][T10600] netlink: 'syz.5.1118': attribute type 1 has an invalid length. [ 142.990413][T10600] bond2: entered promiscuous mode [ 142.990614][T10600] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.999109][T10600] bond2: entered allmulticast mode [ 143.015469][T10600] bond2: (slave bridge1): making interface the new active one [ 143.015484][T10600] bridge1: entered promiscuous mode [ 143.015562][T10600] bridge1: entered allmulticast mode [ 143.024126][T10600] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 143.399068][T10613] rxe_eth0 speed is unknown, defaulting to 1000 [ 143.538487][ T66] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 143.729880][T10623] geneve1: entered allmulticast mode [ 143.850953][T10630] netlink: 'syz.0.1129': attribute type 1 has an invalid length. [ 143.888614][T10630] bond18: entered promiscuous mode [ 143.888961][T10630] 8021q: adding VLAN 0 to HW filter on device bond18 [ 143.927654][T10630] bond18: entered allmulticast mode [ 143.939088][T10635] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=10635 comm=syz.5.1131 [ 143.958472][T10638] option changes via remount are deprecated (pid=10637 comm=syz.3.1130) [ 143.971305][T10630] bond18: (slave bridge20): making interface the new active one [ 143.971318][T10630] bridge20: entered promiscuous mode [ 143.971392][T10630] bridge20: entered allmulticast mode [ 143.972135][T10630] bond18: (slave bridge20): Enslaving as an active interface with an up link [ 144.071313][T10649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=10649 comm=syz.0.1135 [ 144.164533][T10657] KVM: debugfs: duplicate directory 10657-4 [ 144.482677][T10666] netlink: 'syz.5.1141': attribute type 30 has an invalid length. [ 144.630174][T10676] bond3: entered promiscuous mode [ 144.630379][T10676] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.640041][T10676] bond3: entered allmulticast mode [ 144.653610][T10676] bond3: (slave bridge2): making interface the new active one [ 144.653625][T10676] bridge2: entered promiscuous mode [ 144.653698][T10676] bridge2: entered allmulticast mode [ 144.663064][T10676] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 144.740868][T10682] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 145.024897][ T5444] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.053434][T10700] misc userio: No port type given on /dev/userio [ 145.094766][ T8202] Bluetooth: hci4: Frame reassembly failed (-84) [ 145.292102][ T5444] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.341376][T10711] bond4: entered promiscuous mode [ 145.344941][T10711] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.346836][T10714] bond4: entered allmulticast mode [ 145.403994][T10711] bond4: (slave bridge3): making interface the new active one [ 145.404009][T10711] bridge3: entered promiscuous mode [ 145.406008][T10711] bridge3: entered allmulticast mode [ 145.412711][T10711] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 145.434676][T10717] bridge0: port 1(macsec1) entered blocking state [ 145.434723][T10717] bridge0: port 1(macsec1) entered disabled state [ 145.434788][T10717] macsec1: entered allmulticast mode [ 145.448575][T10717] macsec1: left allmulticast mode [ 145.669249][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 145.669267][ T43] audit: type=1400 audit(1792119210.998:24062): avc: denied { write } for pid=10730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.728449][ T43] audit: type=1400 audit(1792119211.058:24063): avc: denied { write } for pid=10738 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.903008][ T43] audit: type=1400 audit(1792119211.228:24064): avc: denied { write } for pid=10752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.983810][ T43] audit: type=1400 audit(1792119211.308:24065): avc: denied { write } for pid=10757 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.044096][T10763] netlink: ct family unspecified [ 146.482769][ T43] audit: type=1400 audit(1792119211.808:24066): avc: denied { getopt } for pid=10773 comm="syz.0.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 146.502415][ T43] audit: type=1400 audit(1792119211.828:24067): avc: denied { write } for pid=10772 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.582434][ T43] audit: type=1400 audit(1792119211.908:24068): avc: denied { write } for pid=10783 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.697967][ T43] audit: type=1800 audit(1792119212.028:24069): pid=10792 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1169" name="nullb0" dev="tmpfs" ino=2158 res=0 errno=0 [ 147.112405][T10794] /dev/sr0: Can't open blockdev [ 147.135531][ T66] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 147.249234][T10805] validate_nla: 3 callbacks suppressed [ 147.249251][T10805] netlink: 'syz.2.1172': attribute type 1 has an invalid length. [ 147.311220][T10811] __nla_validate_parse: 12 callbacks suppressed [ 147.311234][T10811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1172'. [ 147.325041][T10805] bond12: entered promiscuous mode [ 147.328321][T10805] 8021q: adding VLAN 0 to HW filter on device bond12 [ 147.352376][T10806] binfmt_misc: register: failed to install interpreter ./file0 [ 147.362935][T10811] bond12: entered allmulticast mode [ 147.381993][T10805] bond12: (slave bridge10): making interface the new active one [ 147.382007][T10805] bridge10: entered promiscuous mode [ 147.382080][T10805] bridge10: entered allmulticast mode [ 147.382622][T10805] bond12: (slave bridge10): Enslaving as an active interface with an up link [ 147.517983][ T43] audit: type=1400 audit(1792119212.848:24070): avc: denied { mount } for pid=10827 comm="syz.3.1178" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 147.534143][ T43] audit: type=1400 audit(1792119212.858:24071): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 147.647241][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'. [ 147.647470][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 147.843608][T10843] netlink: 'syz.2.1182': attribute type 8 has an invalid length. [ 147.892381][T10843] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 147.977849][T10849] netlink: 'syz.2.1184': attribute type 1 has an invalid length. [ 147.987126][T10850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10850 comm=syz.5.1183 [ 148.005791][T10849] bond13: entered promiscuous mode [ 148.010382][T10849] 8021q: adding VLAN 0 to HW filter on device bond13 [ 148.018074][T10849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1184'. [ 148.018180][T10849] bond13: entered allmulticast mode [ 148.035209][T10849] bond13: (slave bridge11): making interface the new active one [ 148.035223][T10849] bridge11: entered promiscuous mode [ 148.035452][T10849] bridge11: entered allmulticast mode [ 148.036234][T10849] bond13: (slave bridge11): Enslaving as an active interface with an up link [ 148.156573][T10857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1186'. [ 148.755301][ T2596] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 148.828117][T10887] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1194'. [ 148.915361][ T2596] usb 7-1: Using ep0 maxpacket: 16 [ 148.918147][ T2596] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 148.923946][ T2596] usb 7-1: config 0 has no interfaces? [ 148.929271][ T2596] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.929291][ T2596] usb 7-1: Product: syz [ 148.929301][ T2596] usb 7-1: Manufacturer: syz [ 148.929312][ T2596] usb 7-1: SerialNumber: syz [ 148.931687][ T2596] usb 7-1: config 0 descriptor?? [ 149.009626][T10897] xt_NETMAP: bad rangesize 37. [ 149.037537][T10898] kvm: pic: non byte write [ 149.039666][T10898] kvm: pic: level sensitive irq not supported [ 149.040053][T10898] kvm: pic: non byte write [ 149.041047][T10898] kvm: pic: non byte write [ 149.044353][T10898] kvm: pic: non byte write [ 149.366675][T10878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.367007][T10878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.564074][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1201'. [ 149.573966][T10924] syzkaller0: entered promiscuous mode [ 149.573985][T10924] syzkaller0: entered allmulticast mode [ 149.674933][T10928] netlink: 'syz.0.1203': attribute type 6 has an invalid length. [ 149.674951][T10928] netlink: 8700 bytes leftover after parsing attributes in process `syz.0.1203'. [ 149.866488][T10944] netlink: 'syz.0.1206': attribute type 1 has an invalid length. [ 149.884105][T10944] bond19: entered promiscuous mode [ 149.884406][T10944] 8021q: adding VLAN 0 to HW filter on device bond19 [ 149.904427][T10944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1206'. [ 149.904497][T10944] bond19: entered allmulticast mode [ 149.945269][T10944] bond19: (slave bridge22): making interface the new active one [ 149.945292][T10944] bridge22: entered promiscuous mode [ 149.945429][T10944] bridge22: entered allmulticast mode [ 149.946600][T10944] bond19: (slave bridge22): Enslaving as an active interface with an up link [ 149.987546][T10947] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1207'. [ 150.472017][T10967] PKCS7: Unsupported SignerInfo version [ 150.587461][T10992] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 150.674328][T10992] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 150.877389][T11004] netlink: 'syz.3.1217': attribute type 1 has an invalid length. [ 150.900977][T11004] bond16: entered promiscuous mode [ 150.901282][T11004] 8021q: adding VLAN 0 to HW filter on device bond16 [ 150.937744][T11004] bond16: entered allmulticast mode [ 151.007889][T11004] bond16: (slave bridge16): making interface the new active one [ 151.007904][T11004] bridge16: entered promiscuous mode [ 151.007991][T11004] bridge16: entered allmulticast mode [ 151.008759][T11004] bond16: (slave bridge16): Enslaving as an active interface with an up link [ 151.164147][T11024] fuse: fd is not a fuse device [ 151.303682][T11039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.303893][T11039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.307554][T11039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.307736][T11039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.424742][T11023] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input12 [ 151.531317][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 151.531329][ T43] audit: type=1400 audit(2000000001.790:24080): avc: denied { write } for pid=11057 comm="syz.0.1231" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 151.531477][ T43] audit: type=1400 audit(2000000001.790:24081): avc: denied { read } for pid=11057 comm="syz.0.1231" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 151.591224][ T43] audit: type=1400 audit(2000000001.850:24082): avc: denied { ioctl } for pid=11057 comm="syz.0.1231" path="socket:[43449]" dev="sockfs" ino=43449 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 152.277922][T11052] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 152.278810][T11052] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.279035][T11052] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.279106][T11052] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 152.298427][T11052] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 152.355576][T11071] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 152.366048][T11071] __nla_validate_parse: 2 callbacks suppressed [ 152.366067][T11071] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1234'. [ 152.543103][T11078] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1236'. [ 152.670788][T11080] bridge_slave_0: default FDB implementation only supports local addresses [ 152.724167][ T43] audit: type=1400 audit(2000000002.980:24083): avc: denied { write } for pid=11089 comm="syz.5.1238" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 152.791389][T11100] ip_tables: iptables: counters copy to user failed while replacing table [ 152.921648][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1242'. [ 153.615306][ T5735] Bluetooth: hci1: command 0x2016 tx timeout [ 153.741113][T11120] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 153.743206][T11121] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 153.761271][ T43] audit: type=1400 audit(2000000004.020:24084): avc: denied { ioctl } for pid=11111 comm="syz.5.1245" path="socket:[43629]" dev="sockfs" ino=43629 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 153.813712][T11127] bond0: unable to remove nonexistent ARP target 192.0.2.1 [ 153.813730][T11127] bond0: option arp_ip_target: invalid value (-192.0.2.1) [ 154.345270][ T5735] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.345315][ T5735] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.875631][T11163] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 154.898827][ T43] audit: type=1400 audit(2000000005.159:24085): avc: denied { mount } for pid=11161 comm="syz.5.1258" name="/" dev="hugetlbfs" ino=40544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 154.915030][T11163] Could not find key with description: [syz] [ 154.915040][T11163] process_request_key_err: No key [ 154.915285][T11163] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 154.915292][T11163] One or more global auth toks could not properly register; rc = [-2] [ 154.915309][T11163] Error validating options; rc = [-2] [ 154.994571][T11170] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 155.000964][T11170] ip_tables: iptables: counters copy to user failed while replacing table [ 155.001290][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 155.054463][T11176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11176 comm=syz.2.1261 [ 155.217073][T11191] netlink: 'syz.0.1268': attribute type 1 has an invalid length. [ 155.247623][T11191] bond20: entered promiscuous mode [ 155.248014][T11191] 8021q: adding VLAN 0 to HW filter on device bond20 [ 155.256597][T11191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1268'. [ 155.256683][T11191] bond20: entered allmulticast mode [ 155.270833][T11191] bond20: (slave bridge23): making interface the new active one [ 155.270855][T11191] bridge23: entered promiscuous mode [ 155.270997][T11191] bridge23: entered allmulticast mode [ 155.272023][T11191] bond20: (slave bridge23): Enslaving as an active interface with an up link [ 155.325873][T11202] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=4 sclass=netlink_tcpdiag_socket pid=11202 comm=syz.3.1271 [ 155.377229][T11204] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 155.391775][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'. [ 155.399569][ T1478] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 155.574423][T11217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1275'. [ 155.695640][ T66] Bluetooth: hci1: command 0x2016 tx timeout [ 155.858699][ T1478] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 155.864914][T11223] UBIFS error (pid: 11223): cannot open "ubi0:test", error -19 [ 156.135810][T11225] netlink: 'syz.0.1279': attribute type 1 has an invalid length. [ 156.157533][T11225] bond21: entered promiscuous mode [ 156.157884][T11225] 8021q: adding VLAN 0 to HW filter on device bond21 [ 156.169617][T11225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1279'. [ 156.169659][T11225] bond21: entered allmulticast mode [ 156.187385][T11225] bond21: (slave bridge24): making interface the new active one [ 156.187400][T11225] bridge24: entered promiscuous mode [ 156.187482][T11225] bridge24: entered allmulticast mode [ 156.188256][T11225] bond21: (slave bridge24): Enslaving as an active interface with an up link [ 156.244190][T11230] virt_wifi0 speed is unknown, defaulting to 1000 [ 156.244224][T11230] virt_wifi0 speed is unknown, defaulting to 1000 [ 156.244924][T11230] virt_wifi0 speed is unknown, defaulting to 1000 [ 156.248118][T11230] smbdirect: ib_dev[ÿ]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 156.248138][T11230] smbdirect: ib_dev[ÿ]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 156.248160][T11230] smbdirect: ib_dev[ÿ]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 156.250262][ T43] audit: type=1400 audit(2000000006.509:24086): avc: denied { write } for pid=11227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.267697][T11230] infiniband ÿ: RDMA CMA: cma_listen_on_dev, error -98 [ 156.300494][T11230] virt_wifi0 speed is unknown, defaulting to 1000 [ 156.303801][T11230] virt_wifi0 speed is unknown, defaulting to 1000 [ 156.308728][T11230] virt_wifi0 speed is unknown, defaulting to 1000 [ 156.322969][T11230] virt_wifi0 speed is unknown, defaulting to 1000 [ 156.324031][T11230] virt_wifi0 speed is unknown, defaulting to 1000 [ 156.366252][ T43] audit: type=1400 audit(2000000006.629:24087): avc: denied { write } for pid=11236 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.534896][T11251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.538424][T11251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.549593][ T43] audit: type=1400 audit(2000000006.809:24088): avc: denied { create } for pid=11248 comm="syz.0.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 156.549807][ T43] audit: type=1400 audit(2000000006.809:24089): avc: denied { write } for pid=11248 comm="syz.0.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 156.553038][T11252] netlink: 'syz.2.1287': attribute type 21 has an invalid length. [ 156.553055][T11252] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1287'. [ 156.553155][T11252] netlink: 'syz.2.1287': attribute type 4 has an invalid length. [ 156.553166][T11252] netlink: 'syz.2.1287': attribute type 5 has an invalid length. [ 156.553176][T11252] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1287'. [ 156.743533][ T43] audit: type=1400 audit(2000000006.999:24090): avc: denied { write } for pid=11258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.859644][ T43] audit: type=1400 audit(2000000007.119:24091): avc: denied { write } for pid=11262 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.913000][T11266] netlink: 'syz.0.1289': attribute type 1 has an invalid length. [ 156.947692][T11266] bond22: entered promiscuous mode [ 156.948011][T11266] 8021q: adding VLAN 0 to HW filter on device bond22 [ 156.954217][T11266] bond22: entered allmulticast mode [ 156.973511][T11266] bond22: (slave bridge25): making interface the new active one [ 156.973533][T11266] bridge25: entered promiscuous mode [ 156.973675][T11266] bridge25: entered allmulticast mode [ 156.979537][T11266] bond22: (slave bridge25): Enslaving as an active interface with an up link [ 157.057635][ T43] audit: type=1400 audit(2000000007.319:24092): avc: denied { getopt } for pid=11270 comm="syz.5.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 157.188619][ T1478] corsair-cpro 0003:1B1C:0C10.0004: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 157.203247][T11293] bond0: left promiscuous mode [ 157.273734][T11298] overlayfs: failed to clone upperpath [ 157.279566][T11298] overlayfs: failed to clone upperpath [ 157.327868][T11302] netlink: 'syz.0.1301': attribute type 19 has an invalid length. [ 157.329145][T11304] netlink: 'syz.5.1300': attribute type 1 has an invalid length. [ 157.332341][T11302] netlink: 'syz.0.1301': attribute type 19 has an invalid length. [ 157.353654][T11304] bond6: entered promiscuous mode [ 157.353945][T11304] 8021q: adding VLAN 0 to HW filter on device bond6 [ 157.372211][T11304] bond6: entered allmulticast mode [ 157.413718][T11304] bond6: (slave bridge4): making interface the new active one [ 157.413734][T11304] bridge4: entered promiscuous mode [ 157.416852][T11304] bridge4: entered allmulticast mode [ 157.419929][T11304] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 157.437478][T11310] netlink: set zone limit has 4 unknown bytes [ 157.443335][ T43] audit: type=1400 audit(2000000007.699:24093): avc: denied { connect } for pid=11309 comm="syz.0.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 157.516449][ T1478] corsair-cpro 0003:1B1C:0C10.0004: probe with driver corsair-cpro failed with error -110 [ 157.527181][T11314] __nla_validate_parse: 8 callbacks suppressed [ 157.527193][T11314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1305'. [ 157.620015][ T43] audit: type=1400 audit(2000000007.879:24094): avc: denied { mount } for pid=11325 comm="syz.2.1306" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 157.620474][ T43] audit: type=1400 audit(2000000007.879:24095): avc: denied { search } for pid=11325 comm="syz.2.1306" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 157.620601][ T43] audit: type=1400 audit(2000000007.879:24096): avc: denied { read write } for pid=11325 comm="syz.2.1306" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 157.620750][ T43] audit: type=1400 audit(2000000007.879:24097): avc: denied { open } for pid=11325 comm="syz.2.1306" path="/254/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 157.686206][T11329] netlink: 'syz.0.1307': attribute type 7 has an invalid length. [ 157.686220][T11329] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1307'. [ 157.775256][ T5735] Bluetooth: hci1: command 0x2016 tx timeout [ 158.314610][ T5731] svc: failed to register nfsdv3 RPC service (errno 111). [ 158.325189][ T5731] svc: failed to register nfsaclv3 RPC service (errno 111). [ 158.325203][ T5731] failed to unregister tcp with rpcbind [ 158.325677][ T5731] svc: failed to register nfsdv3 RPC service (errno 97). [ 158.325694][ T5731] svc: failed to register nfsaclv3 RPC service (errno 97). [ 158.325704][ T5731] failed to unregister tcp with rpcbind [ 158.399786][T11336] overlayfs: fs on './file1/file0' does not support file handles, falling back to index=off,nfs_export=off. [ 158.462850][T11340] ip6gretap0: entered promiscuous mode [ 158.465732][T11340] batadv0: entered promiscuous mode [ 158.467981][T11338] openvswitch: netlink: IPv4 tunnel dst address is zero [ 158.472845][T11340] ip6gretap0: left promiscuous mode [ 158.474373][T11340] batadv0: left promiscuous mode [ 158.513986][ T5735] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 158.541599][ T5735] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 158.716127][T11349] bond14: entered promiscuous mode [ 158.716522][T11349] 8021q: adding VLAN 0 to HW filter on device bond14 [ 158.723642][T11349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1313'. [ 158.723732][T11349] bond14: entered allmulticast mode [ 158.749599][T11349] bond14: (slave bridge12): making interface the new active one [ 158.749665][T11349] bridge12: entered promiscuous mode [ 158.749802][T11349] bridge12: entered allmulticast mode [ 158.751279][T11349] bond14: (slave bridge12): Enslaving as an active interface with an up link [ 158.925028][T11355] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 158.939895][T11355] input: syz1 as /devices/virtual/input/input13 [ 159.003558][T11355] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1315'. [ 159.111595][T11362] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1317'. [ 159.352939][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1319'. [ 159.440739][T11380] overlayfs: failed to resolve './file1': -2 [ 159.617334][ T5735] Bluetooth: hci4: command 0x1003 tx timeout [ 159.618220][ T66] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 159.649686][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1323'. [ 159.855243][ T66] Bluetooth: hci1: command 0x2016 tx timeout [ 160.204068][T11427] binder: BINDER_SET_CONTEXT_MGR already set [ 160.204078][T11427] binder: 11425:11427 ioctl 4018620d 2000000007c0 returned -16 [ 160.449445][T11426] cgroup: fork rejected by pids controller in /syz2 [ 160.551640][T11458] tipc: Started in network mode [ 160.551656][T11458] tipc: Node identity , cluster identity 4711 [ 160.551669][T11458] tipc: Failed to obtain node identity [ 160.551687][T11458] tipc: Enabling of bearer rejected, failed to enable media [ 160.839969][T11489] fuse: fd is not a fuse device [ 160.869546][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1343'. [ 160.870207][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1343'. [ 160.986710][T11501] IPv6: NLM_F_REPLACE set, but no existing node found! [ 161.072410][T11505] validate_nla: 2 callbacks suppressed [ 161.072422][T11505] netlink: 'syz.3.1348': attribute type 1 has an invalid length. [ 161.083499][T11505] bond17: entered promiscuous mode [ 161.083736][T11505] 8021q: adding VLAN 0 to HW filter on device bond17 [ 161.099331][T11505] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1348'. [ 161.099413][T11505] bond17: entered allmulticast mode [ 161.126434][T11505] bond17: (slave bridge17): making interface the new active one [ 161.126451][T11505] bridge17: entered promiscuous mode [ 161.126539][T11505] bridge17: entered allmulticast mode [ 161.127327][T11505] bond17: (slave bridge17): Enslaving as an active interface with an up link [ 161.141572][T11506] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 161.363070][T11530] ip_tables: iptables: counters copy to user failed while replacing table [ 161.614812][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 161.614826][ T43] audit: type=1326 audit(2000000011.869:24109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11542 comm="syz.0.1360" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47feb9e559 code=0x0 [ 161.683542][ T43] audit: type=1400 audit(2000000011.939:24110): avc: denied { ioctl } for pid=11543 comm="syz.3.1359" path="socket:[40697]" dev="sockfs" ino=40697 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.746195][ T43] audit: type=1326 audit(2000000012.009:24111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11542 comm="syz.0.1360" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47feb9e559 code=0x0 [ 161.935161][ T66] Bluetooth: hci1: command 0x2016 tx timeout [ 162.104176][ T43] audit: type=1400 audit(2000000012.359:24112): avc: denied { read } for pid=11559 comm="syz.2.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.124795][ T43] audit: type=1400 audit(2000000012.379:24113): avc: denied { ioctl } for pid=11559 comm="syz.2.1362" path="socket:[45394]" dev="sockfs" ino=45394 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.318061][T11562] XFS (sr0): Invalid superblock magic number [ 162.481158][T11570] kvm: user requested TSC rate below hardware speed [ 162.538576][ T43] audit: type=1400 audit(2000000012.799:24114): avc: denied { ioctl } for pid=11571 comm="syz.3.1366" path="/dev/input/mice" dev="devtmpfs" ino=938 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 162.598078][T11574] x_tables: duplicate underflow at hook 1 [ 162.775874][T11591] syzkaller1: entered promiscuous mode [ 162.775884][T11591] syzkaller1: entered allmulticast mode [ 162.819157][T11589] __nla_validate_parse: 1 callbacks suppressed [ 162.819190][T11589] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1370'. [ 162.932685][T11602] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 162.967146][T11603] PM: Adding info for No Bus:ceph-2 [ 162.967338][T11603] debugfs: creating file 'ceph-2' [ 162.967460][T11603] debugfs: creating file 'stats' [ 162.967547][T11603] debugfs: creating file 'wb_stats' [ 162.967638][T11603] ceph: [00000000-0000-0000-0000-000000000000 0] ceph_real_mount: mount start ffff8880630fa000 [ 162.968465][T11603] ------------[ cut here ]------------ [ 162.968473][T11603] kernel BUG at net/ceph/mon_client.c:211! [ 162.968494][T11603] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 162.988837][T11603] CPU: 2 UID: 0 PID: 11603 Comm: syz.2.1373 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.994015][T11603] Tainted: [L]=SOFTLOCKUP [ 162.995806][T11603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.999838][T11603] RIP: 0010:__open_session+0x60f/0x740 [ 163.002114][T11603] Code: f6 44 89 e7 e8 42 8e 25 fa 89 c5 e9 2b fb ff ff e8 56 a7 7a f6 c7 83 b4 09 00 00 0a 00 00 00 e9 22 fc ff ff e8 42 a7 7a f6 90 <0f> 0b e8 da e8 ee f6 e9 7b fa ff ff 4c 89 f7 e8 cd e8 ee f6 e9 16 [ 163.009849][T11603] RSP: 0018:ffffc90003aefbe0 EFLAGS: 00010293 [ 163.012281][T11603] RAX: 0000000000000000 RBX: ffff888037548290 RCX: 0000000000000000 [ 163.015446][T11603] RDX: ffff888043058000 RSI: ffffffff8b91af4e RDI: ffff888043058000 [ 163.019408][T11603] RBP: ffff88803dd785c0 R08: 0000000000000005 R09: 0000000000000000 [ 163.022586][T11603] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 163.025755][T11603] R13: 00000000ffffffff R14: ffff888037548400 R15: ffff888037548298 [ 163.028936][T11603] FS: 00007f36eedd56c0(0000) GS:ffff8880d4b46000(0000) knlGS:0000000000000000 [ 163.032486][T11603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.035193][T11603] CR2: 00007f36eedd4ff8 CR3: 00000000282ca000 CR4: 0000000000352ef0 [ 163.038521][T11603] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 163.041708][T11603] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 163.044922][T11603] Call Trace: [ 163.046270][T11603] [ 163.047521][T11603] ? __ceph_monc_want_map+0x189/0x360 [ 163.049675][T11603] ceph_monc_open_session+0x46/0x60 [ 163.051784][T11603] __ceph_open_session+0x135/0x590 [ 163.053943][T11603] ? __pfx___mutex_lock+0x10/0x10 [ 163.055992][T11603] ? __pfx___ceph_open_session+0x10/0x10 [ 163.058262][T11603] ? __pfx_woken_wake_function+0x10/0x10 [ 163.060576][T11603] ceph_get_tree+0xd98/0x1fd0 [ 163.062566][T11603] ? security_capable+0x80/0x260 [ 163.064669][T11603] vfs_get_tree+0x92/0x320 [ 163.066458][T11603] vfs_cmd_create+0xd7/0x2a0 [ 163.068370][T11603] __do_sys_fsconfig+0x55a/0xcb0 [ 163.070321][T11603] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 163.072456][T11603] do_syscall_64+0x123/0x790 [ 163.074256][T11603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.076673][T11603] RIP: 0033:0x7f36f0b9e559 [ 163.078463][T11603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.086561][T11603] RSP: 002b:00007f36eedd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 163.089832][T11603] RAX: ffffffffffffffda RBX: 00007f36f0e26180 RCX: 00007f36f0b9e559 [ 163.093049][T11603] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 163.096263][T11603] RBP: 00007f36f0c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 163.099348][T11603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.102387][T11603] R13: 00007f36f0e26218 R14: 00007f36f0e26180 R15: 00007ffd923bad98 [ 163.105528][T11603] [ 163.106745][T11603] Modules linked in: [ 163.109191][T11603] ---[ end trace 0000000000000000 ]--- [ 163.112386][T11607] kcov: kcov_start: t = ffff888059aba580, size = 524288, area = ffffc90006331000 [ 163.118597][ T1478] Added buffer head 2 to ffff8880275be200 [ 163.118619][ T1478] Added buffer head 0 to ffff8880275be200 [ 163.119361][ C0] virtqueue callback for ffff8880275be200 (ffffffff8666ff60) [ 163.119404][ T6547] No more buffers in queue [ 163.138395][T11603] RIP: 0010:__open_session+0x60f/0x740 [ 163.138425][T11603] Code: f6 44 89 e7 e8 42 8e 25 fa 89 c5 e9 2b fb ff ff e8 56 a7 7a f6 c7 83 b4 09 00 00 0a 00 00 00 e9 22 fc ff ff e8 42 a7 7a f6 90 <0f> 0b e8 da e8 ee f6 e9 7b fa ff ff 4c 89 f7 e8 cd e8 ee f6 e9 16 [ 163.138439][T11603] RSP: 0018:ffffc90003aefbe0 EFLAGS: 00010293 [ 163.138451][T11603] RAX: 0000000000000000 RBX: ffff888037548290 RCX: 0000000000000000 [ 163.138460][T11603] RDX: ffff888043058000 RSI: ffffffff8b91af4e RDI: ffff888043058000 [ 163.138469][T11603] RBP: ffff88803dd785c0 R08: 0000000000000005 R09: 0000000000000000 [ 163.138477][T11603] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 163.138485][T11603] R13: 00000000ffffffff R14: ffff888037548400 R15: ffff888037548298 [ 163.138494][T11603] FS: 00007f36eedd56c0(0000) GS:ffff8880d4b46000(0000) knlGS:0000000000000000 [ 163.138521][T11603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.138532][T11603] CR2: 0000563153635000 CR3: 00000000282ca000 CR4: 0000000000352ef0 [ 163.138540][T11603] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 163.138548][T11603] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 163.138558][T11603] Kernel panic - not syncing: Fatal exception [ 163.186827][T11603] Kernel Offset: disabled [ 163.188663][T11603] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:49:32 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000002 RCX=0000000000000001 RDX=ffff8880266fa580 RSI=ffffffff81ff91fe RDI=ffff8880266fa580 RBP=ffff88806a441900 RSP=ffffc900033cf4d0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed1004cdf763 R13=0000000000000003 R14=ffffed100d488321 R15=0000000000000001 RIP=ffffffff81ff9200 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558285b500 ffffffff 00c00000 GS =0000 ffff8880d4946000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f47ff9556c8 CR3=0000000037bd3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6465636976726573 5f6f692e7166622e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc42fae4f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc42fae4f6 00007ffc42fae4fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47fec35eda ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47fec35f14 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47fec36078 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47fec35f06 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000002 RCX=0000000000000001 RDX=ffff88802c452580 RSI=ffffffff81ff91fe RDI=ffff88802c452580 RBP=ffff88806a443cc0 RSP=ffffc90003b1f550 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100588a763 R13=0000000000000003 R14=ffffed100d488799 R15=0000000000000001 RIP=ffffffff81ff9200 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4a46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f36eedd5d58 CR3=000000006037d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc575ff756 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc575ff756 00007ffc575ff75c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1948635eda ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1948635f14 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1948636078 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1948635f06 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b2c955 RDI=ffffffff9cc7e660 RBP=ffffffff9cc7e620 RSP=ffffc90003aef388 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2e7a7973203a5043 R12=0000000000000000 R13=0000000000000038 R14=0000000000000009 R15=ffffc90003aef6a0 RIP=ffffffff85b2c97f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f36eedd56c0 ffffffff 00c00000 GS =0000 ffff8880d4b46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f36eedd4ff8 CR3=00000000282ca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000001800 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00316576656e6567 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe91146206 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe91146206 00007ffe9114620c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31d3235eda ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31d3235f14 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31d3236078 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31d3235f06 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030617064760004 000a00d66c625f6d 6973617064760002 0010000001060000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000006b4d 0000000000000050 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9058e7eef1bb3584 cfb9e81cad6b0800 5fcbac31e0651f75 b98c10221acb4703 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 97a154e2fd3b8d0c 7e2644b1e3b32c07 6ce26408daa97c75 ef8799bad64ca8fe ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80738c599230fe09 dedebb5f681a4a6a 77e8a88505cfd8e7 75157f88f08e9c92 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9058e7eef1bb3584 cfb9e81cad6b0800 5fcbac31e0651f75 b98c10221acb4703 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5b60c36c513cac76 e01d086ec55c05b7 5f8d2259d1b684ff eadb8addd0766486 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=1ffff110200d6450 RBX=ffff8881006b2268 RCX=0000000000000002 RDX=ffffffff9cbe7c08 RSI=0000000000000004 RDI=ffff8881006b2280 RBP=ffffc900006efc18 RSP=ffffc900006efb40 R8 =0000000000000001 R9 =fffff520000ddf56 R10=0000000000000003 R11=1ffffffff1fbefc9 R12=0000000000000003 R13=dffffc0000000000 R14=ffffffff91e55720 R15=1ffff920000ddf6a RIP=ffffffff8536b746 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4c46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055558b2664e8 CR3=0000000053180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7570637265705f65 676173752e746363 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe91146206 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe91146206 00007ffe9114620c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31d3235eda ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31d3235f14 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31d3236078 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31d3235f06 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000