last executing test programs: 3m57.533452808s ago: executing program 1 (id=3799): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x200000000000000) 3m57.473720829s ago: executing program 1 (id=3800): syz_emit_ethernet(0xde, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYBLOB="64cd416c0147ebff2f325564ef95f784f15368ce8ca06ae5a1a530a4"], 0x0) syz_emit_ethernet(0xde, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYBLOB="64cd416c0147ebff2f325564ef95f784f15368ce8ca06ae5a1a530a4"], 0x0) (async) 3m57.473604392s ago: executing program 1 (id=3801): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, 0x2a, 0x300, 0x70bd2d, 0x0, {0x6}, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="1735d52db72c4c2cd5801a67772d27802996855b2f1b7fefea21d9a1fe00ffedb04cb127990c581ab119f7504305be5280b79de086c67f1d083ac3685d5803ee11b6931c935360bbb1292d4eaa45e3c554bbe0bea92f3855784c2be8c0cbf626fb8bb3a977ddb2068aec1c"]}, 0x88}}, 0x0) 3m57.473467854s ago: executing program 1 (id=3802): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000080)=@ethtool_eeprom={0xb, 0xfffefff9, 0x100006}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000060a0b040000000000000000020000061c0004801800018008000100666962000c00028008000240002000020900010073797a30000000000900020073797a32"], 0x70}}, 0x4000852) 3m57.393599809s ago: executing program 1 (id=3803): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_bond\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) getsockopt$sock_int(r4, 0x1, 0x12, 0x0, &(0x7f00000002c0)) r5 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x10, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000480)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3, 0x19, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93caa33f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800, 0x80000]}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r9, 0x2000009) mmap$IORING_OFF_CQ_RING(&(0x7f000037a000/0x3000)=nil, 0x3000, 0x4, 0x13, r9, 0x8000000) renameat2(r7, &(0x7f0000000240)='./file0\x00', r9, &(0x7f00000003c0)='./file0\x00', 0x4) landlock_restrict_self(r5, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000340)=ANY=[], 0x0) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x58, r2, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x54}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x48000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xe}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xbe90}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x8, 0x1, 0x7, 0x19, 0x1]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x8c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x33}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {}, @broadcast, @device_b, @initial, {0x0, 0x4}}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x6, 0x5, 0x800, 0x5}}, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1, 0x6, 0x69}}, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x8c}}, 0x20008000) 3m57.183483321s ago: executing program 1 (id=3808): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x300000000000000) 3m57.183404106s ago: executing program 32 (id=3808): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x300000000000000) 3m42.120516219s ago: executing program 4 (id=4030): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000480)='./file0/../file0/../file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0, 0x20, &(0x7f0000000080)=ANY=[@ANYBLOB='mode=0']) 3m42.015676076s ago: executing program 4 (id=4033): r0 = getpid() r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x3, 0x2}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}, 0x2}}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000080)="a5c80c5d5c348a0d414e95422e84b7bf4592678e58b61e1cd6622eb61b476ea94577b6df2369daeb", 0x28}, {&(0x7f00000000c0)="3a54ad4b05341436f7a6c7249c3c42b093c143e27ee55257d0e03edf9228750e9a", 0x21}, {&(0x7f0000000100)="76244b1bda057ad7e937f1794bd30ee40161ff85a5fb6373b6ca6b95f9b654e634d857994086b4b2f39b9dd71e25f8d97d3501e0ae361a6aac2eb48d8e406296e3dfdab7a29761aae3e8fef85d6c80d6aadcf809266ccaa3cf104c2bfc0e95af8606f6a665a7162253444194a05218b576893948398be4e06b401e8acf97ab0cb3c26ac6ca4815b03590d4fedfeb5abe13e4dc62b3e00256d7bc43a1d59489400d05e82d0d0e0cb9b7c50d0d5ef7d4733921c4d1d577ed7536383cce211815e86888b15bcc71d660e3dd0e75d5912bf90fe468f8997a61ef5b8ce8bbf991037193c97c87d7b8bccb59e279f251678f", 0xef}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="08e5a20188e87fe9839dbb0476fb468fb4c9789f34227dba5698bdc733b7de09abdeb80cb26c5c0f7c2576eeffa3d5ae0c556cab181af342f91e28da94106a6be384e2fb07e265a25907dea9630269a4b0603f1065", 0x55}, {&(0x7f0000001280)="ac66344923e0e4", 0x7}, {&(0x7f00000012c0)="4ebed3cd5c8579a675e7bc824e41bb905615adb5ca79c7a2375d512be53d9d26e58ef851e82e9f5b", 0x28}], 0x7, &(0x7f0000001380)="6c94a15d9615bb036e4b5eefc0eb4484c54745bad90eaa1ec7e3563ceceea2f2e615dc189d3422a9f5f023df6155642362166fb967c121071122a62a9213c885ef7181a2fa9a9eb8c5feba08dbd4155baeda35be92d5ea0226812aa6e3683708dfbcc082b334f914e8eb8365f668675085db68847cd0d500b45c97b975e622370bbb0f43f1a77a7bc259936c86669d9293eb803ce527c4f6a2225275fdaa106f76d4822e1095573e10e42a77fbe334fec87cbd136af832907250c136cf5a9497cbd93dfe9b0a3ee81ecaf11aee3468ebba6b803155e926e2a7bf8c46b36858c3cf8bd305e07b", 0xe6, 0x4000}, 0x24004000) r2 = accept4(r1, 0x0, &(0x7f00000014c0), 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000001500)) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000001540)=0x3, 0x4) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000001580)) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, &(0x7f00000015c0), 0x4) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000001600)=0x1, 0x4) r3 = syz_open_procfs(r0, &(0x7f0000001640)='net/ip_mr_cache\x00') ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000001680)) sendto$inet6(r3, &(0x7f00000016c0)="265deb2cdd2578bd30c396f8286033f3478ee3df16bab34825781a4e7bbdfc41e520ea6603ad", 0x26, 0x4048002, &(0x7f0000001700)={0xa, 0x4e24, 0x60, @dev={0xfe, 0x80, '\x00', 0x30}, 0xb}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001780)={0x7, &(0x7f0000001740)=[{0x1ff, 0x1, 0x7, 0x52}, {0x8, 0x3, 0x9, 0x68}, {0x6, 0xf7, 0x0, 0xb}, {0x3, 0x2, 0xaa, 0x5}, {0xfffe, 0xed, 0x9, 0x100}, {0xf7ef, 0x7, 0x9, 0x8}, {0x2, 0x5, 0xfe, 0x36bb}]}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000017c0)=0x20000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001800)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000001880)={0x4, 0x8, 0xfa00, {r4, 0x7f}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001900)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000018c0), 0x106, 0xa}}, 0x20) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000001940), &(0x7f0000001980)=0x4) syz_emit_ethernet(0x8c, &(0x7f00000019c0)={@local, @random="ca56441f02b8", @val={@val={0x88a8, 0x1, 0x1, 0x2}, {0x8100, 0x7, 0x1, 0x1}}, {@x25={0x805, {0xcff95fc3e3708e31, 0x5, 0x1b, "55f41f55960b50a9792069d1f8ca430410855b12eb2e09bfe77e979c336a0e9bbb4140b7875003daddbf4e7064dd8efec309a3224456f5ab7aad3432503eb97b4f5fb66481bdcae1955b31d20fb06849548f52e2a447b5e641e3de4766585bc1c97760775f59b9631d820d3c0f683630f03440"}}}}, 0x0) getpid() r5 = syz_open_dev$vcsn(&(0x7f0000001a80), 0x0, 0x240000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001ac0)='/sys/power/resume_offset', 0x40, 0x110) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001b00)={'bridge_slave_1\x00', 0x100}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001b40), 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000001b80)={0x9, 0xc4, 0x3, 0x9f, 0x1, 0x0, [{0xfffffffffffe0000, 0x101, 0x200, '\x00', 0x1000}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@bloom_filter={0x1e, 0x1, 0xc9, 0xffff, 0x1000, 0xffffffffffffffff, 0x6, '\x00', 0x0, r6, 0x0, 0x4, 0x0, 0x7, @void, @value, @void, @value}, 0x50) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000001c80)={0xbe, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001fc0)={0x11, 0x1e, &(0x7f0000001d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@generic={0x6, 0xc, 0x1, 0x0, 0x3}, @alu={0x7, 0x0, 0x3, 0x4, 0xa, 0x10, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9da2, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000001e00)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001ec0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001f40)=[r6, r7, r3, r5, 0xffffffffffffffff, r3, r5, r5], &(0x7f0000001f80)=[{0x5, 0x5, 0xe, 0x6}, {0x2, 0x4, 0xc}], 0x10, 0xffff, @void, @value}, 0x94) 3m41.897598262s ago: executing program 4 (id=4035): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private1, 0x0, 0x1, 0xff, 0xf, 0x0, 0x6}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) getsockopt$ax25_int(r1, 0x101, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, 0x0, &(0x7f0000000100)=0x1e) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000200)) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0xc80, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x4) 3m41.826175028s ago: executing program 4 (id=4038): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2b6a, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10d) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xe, 0x1, 0x3, "9611e6d6ffc88885163200", 0xa0363159}) syz_open_dev$vim2m(&(0x7f0000000080), 0x2b6a, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10d) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) chdir(&(0x7f0000000340)='./file0\x00') (async) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xe, 0x1, 0x3, "9611e6d6ffc88885163200", 0xa0363159}) (async) 3m41.724689706s ago: executing program 4 (id=4041): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="d8835384640864f3671d8be79b4440fcfaa629a2b7f983d76caadc8de3559b332b1de8bc6a8ddfe95fdc8373fa63a25c89c4e9f23ca929fbc493e7feb03fef4e5206bf93f672cb4f73b5c0cbad70ed40b656f18af4c1c2bafdf8aed2cc5dce8f4b90ed22796c6e93a29c0ad73c9743bc4f4df80daf874eec7342da9349dfbb6e1d7fa2cad353009d66a7af328a90e013c272e57c4d1a9793535a3ae67a9c9965289a699b0743a71c628a360197cb", @ANYBLOB="470d000000000000000000000000080002"], 0x1c}}, 0x90) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000200)={[{@dyn}]}) r1 = fsopen(&(0x7f0000000380)='iso9660\x00', 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x1398, 0x11b8, 0xc8, 0x8, 0x0, 0x5803, 0x12c8, 0x2e8, 0x2e8, 0x12c8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13f8) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1001) fanotify_mark(r5, 0x105, 0x5000003a, r4, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000040)={'U-', 0x100}, 0x16, 0x4) 3m41.468616476s ago: executing program 4 (id=4046): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000500)='./file1\x00', &(0x7f0000000140)='./file0\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000440)={'#! ', '', [{0x20, '\\*'}]}, 0x7) sendfile(r1, r3, &(0x7f0000000100)=0x6, 0x100000000010001) 3m41.457031122s ago: executing program 33 (id=4046): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000500)='./file1\x00', &(0x7f0000000140)='./file0\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000440)={'#! ', '', [{0x20, '\\*'}]}, 0x7) sendfile(r1, r3, &(0x7f0000000100)=0x6, 0x100000000010001) 3m38.748204969s ago: executing program 3 (id=4077): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 3m38.678135992s ago: executing program 3 (id=4078): socket$key(0xf, 0x3, 0x2) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000001240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x2, 0xb0, 0x5, [{{0x9, 0x4, 0x0, 0x79, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x85, 0x4000, 0x0, 0x6}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x7, 0x53}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0xc, 0x40}}}}}]}}]}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000380)={0x0, 0xfb, 0xaf, 0x5, 0x8, "1fbc22420fcc70967d3cca2873424a19", "27a45a970917fa082e757dea1b6380b9e4732761461ae3160365edcd35227ed7a09405787b5c5fec63e542360d41392f388b6893422ba33644f5e48fbb09c8b7b9d37d26aacdcd11f5cc91ff5e9f99af5591651dc9c5226d5685c128fac5c43d141b275209dd8589f890bfbea067cbd88770f1098d52b8dedfb016fb4e2dac70a1cbfc661bedad749796eee4235a844e29c3582cba1caaf03ec7"}, 0xaf, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x174, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x144, 0x2, {{0x8, 0x651fd15d, 0x0, 0x7, 0x1, 0x5}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x8, 0xfffffffc}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xd49, 0x1, 0x5, 0x70, 0x5, 0x7f}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xd4e64006941e868b}, @TCA_NETEM_DELAY_DIST={0x10, 0x2, "e8570f29c1479b42ed2daff1"}, @TCA_NETEM_RATE={0x14, 0x6, {0xfc28, 0x6, 0x1, 0x3}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x8102f31267fe031e}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x0, 0x7fff, 0x7}}, @TCA_NETEM_CORR={0x10, 0x1, {0x3, 0xfffffff9, 0x88c}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x88, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x2, 0x9aa8, 0x4, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x10, 0x7, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x81, 0x800, 0x101, 0x8, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x7fffffff, 0x4, 0x895}}, @NETEM_LOSS_GE={0x14, 0x2, {0x200, 0x5a35, 0x6, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0xfffff800, 0x3, 0x1, 0x7, 0x9}}]}]}}}]}, 0x174}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc004ae0a, &(0x7f0000000180)=""/13) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x601, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000040), 0x0, 0x7f}) 3m35.618506412s ago: executing program 3 (id=4102): r0 = socket$nl_route(0x10, 0x3, 0x0) clock_nanosleep(0xfffffff4, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f0000000280)=[{r2, 0x540}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x83c84cda44570081, 0x0, 0x0, 0x0, 0x0, "fafcff00"}, 0x0, 0x1, {0x0}}) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYRESDEC=r1]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x19ee0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f", 0x1f) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100), &(0x7f0000000180)=@sha1={0x1, "8058e00c4245f912d19b602ad77be96443dce60a"}, 0x15, 0x2) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) r5 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000400000004000000090000", @ANYRES32], 0x48) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000009441"]) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x7, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x24) 3m35.529915831s ago: executing program 3 (id=4103): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x1, 0xf9, 0x8}, {0x4, 0x5, 0x7, 0xa}, {0x4, 0x6, 0x3, 0x80000000}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000080)='erofs\x00', 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @broadcast}, &(0x7f0000000180)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getchain={0x3c, 0x66, 0xe04, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xe, 0xe}, {0xd, 0x9}, {0xc, 0xffe0}}, [{0x8, 0xb, 0xf}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x400}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9d9569f6baa67102}, 0x4000001) socket$inet_tcp(0x2, 0x1, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000280)=""/121, 0x79) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='nilfs2_segment_usage_allocated\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r2, 0x2f, 0xe, 0x9, 0x1, 0x40, @remote, @dev={0xfe, 0x80, '\x00', 0x41}, 0x700, 0x20, 0x7, 0x5}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x80801}, 0x8010) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000580)={0x0, 'lo\x00', 0x1}, 0x18) ioctl$RTC_AIE_ON(r1, 0x7001) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0), &(0x7f0000000600)=0x14) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) poll(&(0x7f0000000200)=[{r5, 0x44}], 0x1, 0xe) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'ip6gre0\x00', r3, 0x4, 0x1f, 0x7, 0x5, 0x62, @remote, @private2, 0x7, 0x40, 0x40, 0x3ff}}) 3m35.385588351s ago: executing program 3 (id=4104): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd, 0x3501) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000540)={0x8, 0x10001, 0xfffff053, 0x0, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000000400)=""/203}) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x2, 0x2, 0xfffc}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18506d25b400000000000000000000009500d9f2f5ed75794f000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 3m35.284804805s ago: executing program 3 (id=4107): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x1, 0xf9, 0x8}, {0x4, 0x5, 0x7, 0xa}, {0x4, 0x6, 0x3, 0x80000000}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000080)='erofs\x00', 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @broadcast}, &(0x7f0000000180)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getchain={0x3c, 0x66, 0xe04, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xe, 0xe}, {0xd, 0x9}, {0xc, 0xffe0}}, [{0x8, 0xb, 0xf}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x400}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9d9569f6baa67102}, 0x4000001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000280)=""/121, 0x79) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='nilfs2_segment_usage_allocated\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x2f, 0xe, 0x9, 0x1, 0x40, @remote, @dev={0xfe, 0x80, '\x00', 0x41}, 0x700, 0x20, 0x7, 0x5}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5cb}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc05}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80801}, 0x8010) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000580)={0x0, 'lo\x00', 0x1}, 0x18) ioctl$RTC_AIE_ON(r0, 0x7001) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0), &(0x7f0000000600)=0x14) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'ip6gre0\x00', r3, 0x4, 0x1f, 0x7, 0x5, 0x62, @remote, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7, 0x40, 0x40, 0x3ff}}) preadv(r4, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/242, 0xf2}, {&(0x7f00000009c0)=""/13, 0xd}], 0x2, 0x7, 0xfd2d) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x8, 0x2) fchmod(0xffffffffffffffff, 0x4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000ac0)={'pim6reg1\x00', {0x2, 0x4e24, @local}}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000b00)={0x26, 0x23, 0xd, 0x11, 0x900, 0x90, 0x4, 0x1d, 0xffffffffffffffff}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x4, [0xfbf, 0x4b9, 0x72, 0x6ab]}) 3m35.256048769s ago: executing program 34 (id=4107): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x1, 0xf9, 0x8}, {0x4, 0x5, 0x7, 0xa}, {0x4, 0x6, 0x3, 0x80000000}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000080)='erofs\x00', 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @broadcast}, &(0x7f0000000180)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getchain={0x3c, 0x66, 0xe04, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xe, 0xe}, {0xd, 0x9}, {0xc, 0xffe0}}, [{0x8, 0xb, 0xf}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x400}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9d9569f6baa67102}, 0x4000001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000280)=""/121, 0x79) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='nilfs2_segment_usage_allocated\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x2f, 0xe, 0x9, 0x1, 0x40, @remote, @dev={0xfe, 0x80, '\x00', 0x41}, 0x700, 0x20, 0x7, 0x5}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5cb}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc05}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80801}, 0x8010) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000580)={0x0, 'lo\x00', 0x1}, 0x18) ioctl$RTC_AIE_ON(r0, 0x7001) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0), &(0x7f0000000600)=0x14) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'ip6gre0\x00', r3, 0x4, 0x1f, 0x7, 0x5, 0x62, @remote, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7, 0x40, 0x40, 0x3ff}}) preadv(r4, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/242, 0xf2}, {&(0x7f00000009c0)=""/13, 0xd}], 0x2, 0x7, 0xfd2d) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x8, 0x2) fchmod(0xffffffffffffffff, 0x4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000ac0)={'pim6reg1\x00', {0x2, 0x4e24, @local}}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000b00)={0x26, 0x23, 0xd, 0x11, 0x900, 0x90, 0x4, 0x1d, 0xffffffffffffffff}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x4, [0xfbf, 0x4b9, 0x72, 0x6ab]}) 3.99502332s ago: executing program 2 (id=6419): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd26, 0x2, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xff, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0xffffffffffffffbd, 0x1, 0x1}}}}]}, 0x38}}, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) 3.895610101s ago: executing program 2 (id=6423): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000080)={0x18, r1, 0x1ff, 0x8000000000000000}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000000c0)={0xffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0x1, 0x8000000, 0x9, 0x140a4, r0, 0x0, '\x00', 0x0, r0, 0x5, 0x4, 0x4, 0x0, @void, @value, @value=r0}, 0x50) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000180)={[{0x400, 0x3, 0x1, 0x2, 0x1, 0xa, 0x7, 0xe, 0x0, 0x65, 0x8, 0x5, 0xcb8}, {0xfffff001, 0x2, 0x7, 0x1, 0x4, 0xfd, 0x1a, 0x2, 0x0, 0x1, 0x7f, 0x7, 0xdf}, {0x7, 0x8, 0x4, 0xb, 0x80, 0x1, 0x7f, 0x2, 0x91, 0x8, 0xae, 0x1, 0xffff}], 0xefee}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0x3) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000240)=0x101) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x408, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x59}}}}, [@NL80211_ATTR_BEACON_HEAD={0x3e7, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x40}, @broadcast, @device_a, @initial, {0xf, 0xe}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x8, @default, 0x2, @void, @val, @val={0x3, 0x1, 0x7c}, @void, @val={0x6, 0x2, 0x306}, @val={0x5, 0xe1, {0x9, 0xc4, 0x0, "514f80b4cd38515cc029e20305410fa5b34ee9c114f517a0432b88eea0e150b7cdefa55308210423d838184080f669067406f86d7de55559383042a632ab358b50d620be814cfbf04cae21d2c2528f83942e1c47deae47ed1d87fa7aa16e5c03782c73a499e83acd48d2de5d996c7e50eee64d5b05f4db4dd564f6d04d84c2b24843f3c77304b6b952996d65104fb42f17e7d03e8561911ae43c997ca5afd636d4a0770b6704f1944f78e1b0244c63677692c7c5e1259ee15c1babc82fd440ee5e0f3c54ea1b2af78fb3a3233f196b53f23ca5a3dbc96e9dc7173b538273"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x30, 0x1, 0x21, 0x2}}, [{0xdd, 0x66, "f2b058930b73120bcf3dce5fbd84a1c3594d16ee0ae50f7f69b7fe72a39bd5232527f09440ac629289e42b7c3e9e93ca51945d159b9303dda5e06beb8bb5b362e5c2ad214f179b34b0041964d1221de0d56edb4020e23e16dbaa01b3806d2457175cfddaf106"}, {0xdd, 0xb7, "53dab2b16c97d2a8ba4bdf76277904f0d3a19ab38ac7eeeeb1d5ba0a43036c48867896fb4ca29d08432d0823580089dadd4b6b0511d38cfd25fda18f46870adeb4a6d1f2fb40b104eeb2f44c70fd5c811fb1c8c349e408debbac748c7d8c76b1d6d55bc709a8d4c4c342cdfe4e655f119db10576867f42d7736ea3acb477865a2c1567d968a07531de0cfd62ae3bb39642701455a44ad86de97ba03be41a3eb039cc8c1157b6fbff4aae8892fa64ad3970aa2ef91011e9"}, {0xdd, 0xa8, "98ef058b4836ce236b3afa62b90d0a34ef1c2671579f763c86d2224630240a74e48586b2c34e40779ed3f75804b165767a5aa1745b5d93071ea6e0c8d02fbf30ef35378382426399a194d024f146bdb006fcf62a5516b6935ba91b720cd9a127c8c5cb80b2343279d446e81517c50f7057060534501a69593be98ad037cb258a0cb66b461d10d458ecd962154cb970ca978ac914d0dcbd11403e704b2f98514ab8e927bdd2c178f0"}, {0xdd, 0xe7, "fb2c4bd18220794337de0f1e3ce5ab7c39c0bb9401c82f90684a9baa1957b54dbd54e24f7fd5a79e49c7fe3cdd3ab43ccf1608f8a3ee22009097ce420aa0e99692a8e8aa3d65bc65dcaaf1535c0ca67caaa938a5ed8a5101972cc474c32ca22c7bab5f347609dbecdb776df99487e457ea387700718439cdb00c1ff72303fb6579544a5227f4d9eb6b2fb01425b704312d4bb509f982ee6dad44992cf3c5a347a4211e45ad3ad545b7ed3940d53d3c6af34a193751f0b25e89b33a4133d1fa3ce6c4a036b7c35cc8a926929f1e0589f94bfad97230c06fa13ae55433ce2a5e076ba6a5a765abef"}, {0xdd, 0x9, "c81288d859feba2ca8"}]}}]}, 0x408}}, 0x40004000) writev(r2, &(0x7f0000000b80)=[{&(0x7f00000007c0)="89d9ba7ae0f10e1c2ea8287ba50dcf35f5eed305bbedf05e205d12b7800acee9cd9e7164941fcae348dc8d81c7ae24164f506e6c7a72ecd8b760a8c9767a39b2226e531fcdd723be537236a483616def85cc1c1683fdd3337580474f8f0b79a7453de73ec5f363d8f4", 0x69}, {&(0x7f0000000840)="7da1360fbb2d2d9563918c7c521ae7b4445becd5b4317be53ede9d3f608eedbb5dac10379f2401544e266d1724b6292a76c805f3406d0acf141b3c490f8bf8670a3ef1fce1fefc6050ed8a61e4fd97785c52740b26d89a65d6969be37277c48461b31da87ef001e9", 0x68}, {&(0x7f00000008c0)="b2c75cbd68b61219df20e21d9611adf58c601460df1f36598c9f2a39f94e79929298cdcae8bec39fc20284e5678ef55390674d2a1780d3ef827ed5922b44777bd831fe85e58de6", 0x47}, {&(0x7f0000000940)="2587254f73d6181cf21e8aa77f5653e5faea42e6b5980d1a27ebacbead5aa14f0f0c036e43a17c4001fb53e3ce2f866f7650a39ea27fc2081b717281be16aabf9cd514b97220d4c40d4e895930f4103aed25917b2bafc9b49e1a6ec58947b3ba6565d382ede38d147fde5c7870fe18515f90af5c48ba891ad8fbe750e5906722d8", 0x81}, {&(0x7f0000000a00)="d2603ac830d5204e7ac36b6d95b85df708f528b53f3c0c8cc243232a2db4065ad2dcf70f2897c46c21f5bcaf48f6e013106ce19a5fb1055a9ef0889cc80a383b4a6fa63b7b96fe9c880c56c5e482544dd50abe3586a700fe25c053d79a04ac290fe934cc7d21fdb6e821a62da82a8ccd39e5481289153ca0582dee3cab7d49760015827fe3223c5551932183760f6b560f523944c998819d4b096ac7cfd80cce731915bd998c7462f5dfa8bb9112f59f9364d0968429e2690337b8602af13194adbfae6a3097", 0xc6}, {&(0x7f0000000b00)="f30c9893a19002aad14032d7c4ce942719c2aeab52bab0460ef7a64220e11dea9f960429d2e0456ec59aedbd4854d6b2232087a47f5d877f070efc507d7f49bed415343eef1fff9a06d6ba0f7f652bc822", 0x51}], 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000c40)={0x48, 0x7, r0, 0x0, 0x10001, 0x0, 0x8, 0x374b2b, 0x151da6}) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r0, 0x4068aea3, &(0x7f0000000cc0)) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d40)={0x8, r1}) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000dc0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000d80)=0x35f4750}) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000e00)={0x4, 0x1}) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000ec0)=[@textreal={0x8, &(0x7f0000000e80)="0fc729360f224765670f01c93e2ef20f11ca640f01b3ff33f3ab66b9a00900000f3265f40ffd442317", 0x29}], 0x1, 0x18, &(0x7f0000000f00)=[@cstype0], 0x1) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002080), 0x202, 0x0) r6 = openat$incfs(r2, &(0x7f00000020c0)='.log\x00', 0x648100, 0x2a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x18, 0xa, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4884, 0x0, 0x0, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x6d}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @generic={0x93, 0xe, 0xf, 0x2, 0xd853}]}, &(0x7f0000000fc0)='GPL\x00', 0x400, 0x1000, &(0x7f0000001000)=""/4096, 0x40f00, 0x30, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000002000)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000002040)={0x0, 0x6, 0xfffffffd, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002100)=[r5, r2, r4, r2, r0, r0, r0, r6], &(0x7f0000002140)=[{0x7, 0x1, 0x9, 0xc}, {0x0, 0x4, 0xc, 0x8}, {0x0, 0x1, 0xd, 0x6}], 0x10, 0x2, @void, @value}, 0x94) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000002240)={0x18, r1}) ioctl$SCSI_IOCTL_START_UNIT(r5, 0x5) syz_usb_connect$cdc_ncm(0x6, 0x162, &(0x7f0000002280)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x150, 0x2, 0x1, 0x6, 0x80, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "43f1b7f8"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x89, 0xdc5, 0x5}, {0x6, 0x24, 0x1a, 0x0, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0x79cb, 0x4, 0xc6, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @mdlm_detail={0xdf, 0x24, 0x13, 0xd, "b34b3223662f4003d5d134a7dd684b94b1a37f212819935d08128901fabdedfd79a8d31d2dd097078a832406a27e2a18d570e46f82dfb5d1e51bd1d622f0afdc53adc92af1652eddf954a74728e00bcd0325ae3e76d0a7e5da3bda756d965cadcff4d8f5098c97c88d05f4f8bdca97e998da3aa11b65ab4ce9a25f9316bd532833925f88201b4cc9319b56ba69e17badde6ee9ccc1cf40a2021178c704baf0d8f4e47c080ad8a09ddc78ac5357c8666c41544e076101403d4384f18bf39bb48568451e7d2998fa72dba4164133c0fa2ea90a406273651b787258ca"}]}, {{0x9, 0x5, 0x81, 0x3, 0x48, 0x8, 0x6, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x9, 0x4}}}}}}}]}}, &(0x7f0000002980)={0xa, &(0x7f0000002400)={0xa, 0x6, 0x201, 0x1, 0xfd, 0x6, 0x40, 0x8}, 0x5, &(0x7f0000002440)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000002480)=@lang_id={0x4, 0x3, 0x41e}}, {0xf6, &(0x7f00000024c0)=@string={0xf6, 0x3, "f23261a327c982300951ae684189261067683f27af1c32a479f3a02dfbe7138c89b3b3204c0643ff73fe3f189c8d9a1a23df61e610f17ac0d3cf8e63119f0737a744b60b2196ef46bd8ccb3e35ecb1ef77a0ae4033de93534e4087c5b22cf4667e92e9812a64299512386c07ba6b68fb329f601bddc1827338329cd87cbc8dc7f3e1503a202075fc67712ae8f63c0cb52f5c77f34278693b0e6ade0bee97a5da459b0353f0af8a3e514adefca0c567e14efa587f580515f0f2d2e0b98095e6b8a26be69c4114cc43826b4497e76280e99a8008d13b67d41d8cfec44f80942958a7d453ff22b5649e4a0d69aeb081a435a81a9c8c"}}, {0xa3, &(0x7f00000025c0)=@string={0xa3, 0x3, "9b863a8c53b9049c15ac359ebb67946d9b27bcba5c306e5821736479f8fe2a0d719c4219e509483980fc9d2fc1a6339e37e19da6a3bb31ba594abaaad02b49a2f12957ee0c72099c029432cc2cc250e2c37e6ab6be6832280d729305753e376e9e9799425b9bef664748931a6fb809c1e59d3494a705ea6f0b29b10f30592153dcd0559f95a60917974aac047f20158af686c40c0f1c16e80f2d196bbc762f6648"}}, {0x13, &(0x7f0000002680)=@string={0x13, 0x3, "d877fe9d1af653f13040c95ab700d314ad"}}, {0xa0, &(0x7f00000026c0)=@string={0xa0, 0x3, "685bdd951ab04b3df5146f424f3b96c3ddf6a0e48d876622c5b363e13a665978e52a0d7742657340f1a3e35cff9b80439431b312fc7c1bd4b25deab4b7d24b91ff6153e13d4e84b50e45a7ff27885d0a8306bb8384da82dc4eb7d25ee70ad886884d13e0b0ab47163374ddc219104d25d8d3109eab8f94178b0ccdba920590228a6e8587fc546f3dc824bd50980b69ca7ddce7e6fc671f486ccbb3d2006e"}}, {0xce, &(0x7f0000002780)=@string={0xce, 0x3, "daceca8f6802b05b6489b1995d88a647881d06d922686c0358a56ff7b04d1332fc6112981ca7348e9d232b76b8522fcc1f93f56ce339afc9e8787d5b9e7f40f4e4185997641446c35a9f1b4fb05b0234bb328722c478549d79253fd0f88aa64071c78e0de3f539923fce9f670659fe6e1502216bb6a5f1460ea26b185846502fd380650422b08da7453174867aede2917fa12a5baf4da6d340d4f3ddf9accf401df1086bb3798da386b80ac2fa1c3eb39ebf3aef4a1def93a258a7e1621f74f88e643e5a18c207593e45844b"}}, {0xb7, &(0x7f0000002880)=@string={0xb7, 0x3, "254893aa971c0e5ecaea4bb4f9f65f0e63fa102841e4b4a10d9228468728b893f1aa05f1e1feccd7ed255ba8d2d3e0836c36f372027067c87e350c81207c4da0018b84ec9971097dd7ee2b925cb2b3b9245f1fbf2cb0a58355439eb95681b169deffb93bd8d8eee7e8ded647e49cd2bd48ebe37855434bcc7dab498761d022b763831056cd466fd1cc3320c5ee9271d253cbc97d6068bae5c1b95a40b19368250efc23b5e8dfa99e697fae975f7a524ae557c1015d"}}, {0x4, &(0x7f0000002940)=@lang_id={0x4, 0x3, 0x180c}}]}) recvfrom$unix(r5, &(0x7f0000002a00)=""/75, 0x4b, 0x2000, &(0x7f0000002a80)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000002b00)={'\x00', 0x4, 0x2, 0xf5c7f6d, 0x32b9, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002b80)={0xffffffffffffffff}) recvmsg(r8, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002bc0)=""/89, 0x59}], 0x1, &(0x7f0000002c80)=""/4096, 0x1000}, 0x2000) 2.717466279s ago: executing program 0 (id=6433): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/dev\x00') preadv(r1, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)=0x3, 0x4) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.22494425s ago: executing program 6 (id=6434): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x14, 0x4e21, 0x8}}}}}, 0x0) 2.224357591s ago: executing program 6 (id=6435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x6f8, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @beacon=[@NL80211_ATTR_IE={0xe4, 0x2a, [@random_vendor={0xdd, 0x4d, "b7499f524a904ddd31b1cb55d66502d4d3d1e12c3c57081b67103da091f9910496506ab76909a37c34f27a5f2d78f071b72fcb9324c932c52ee06bd94e6f7320bd965e6ded796adbe15e40a338"}, @perr={0x84, 0x8f, {0x8, 0x9, [{{}, @device_b, 0x6, @void, 0x2f}, {{0x0, 0x1}, @device_a, 0x0, @value, 0x17}, {{0x0, 0x1}, @broadcast, 0x2, @value=@broadcast, 0x22}, {{0x0, 0x1}, @device_b, 0x100, @value=@device_b, 0x36}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x2e}, {{}, @device_a, 0x6, @void, 0x6}, {{}, @device_b, 0xb, @void, 0x3f}, {{}, @device_b, 0x6, @void, 0x38}, {{}, @device_b, 0x3220, @void, 0x10}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x2a, 0x7f, [@challenge={0x10, 0x1, 0x92}, @supported_rates={0x1, 0x3, [{0x48}, {0x24}, {0x1b, 0x1}]}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ssid={0x0, 0x6, @default_ap_ssid}, @chsw_timing={0x68, 0x4, {0xa, 0xfffa}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_BEACON_HEAD={0x21e, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0xff}, @device_b, @device_b, @random="39142bf78b40", {0x9, 0x8}}, 0x101, @random=0x4, 0x2000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x8}, @void, @val={0x6, 0x2, 0x3}, @val={0x5, 0xf6, {0x5, 0xac, 0x38, "70cbd3932738daaa11f0eb945db1be3bc1f23b7b0db2d776d5d67f13370e2d33e11fc96b4de12902e6b1d7a6a23c22d651de6f5cc674b30a40a49e8386e38e4243a79a3db9e02eaacfa6ea73a5565508f51479a2ea31f7dd7ab54f3312a6aa702641c6232934e57682283b45f566eb6d8f49e4f784b335d3371c46d664dcb282991793b08ae67cc28a62d7eb3b59895202396168b6b886259b6eb497475c45d611f09d2900c52a33c655d7a8bf7ff2c34f68d2243574f53d6e2e89f4b0150d74a98f507d059f911d475f9c7d81da8496c007dda080cfc77559b160cdb9bac54a17e90c9874cbbf25e06cb6945288f3c4063084"}}, @void, @void, @val={0x3c, 0x4, {0x7, 0x4, 0x40, 0x8}}, @val={0x2d, 0x1a, {0x400, 0x3, 0x6, 0x0, {0xfffffffffffffff8, 0x1e0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x9a, 0x3}}, @void, @void, @void, [{0xdd, 0xcb, "7f2976ca466851f7472b84485c5b936440a52f4e2ffda8add57de07b65df523f4074ccf7ec79805234f674344dfb6b50b2e97b8425b0b76d1b5b521bef851bdb0956b0afcee389630fda72d73fa67351808ec822897c7044ece4090eb05fa93ac7b09e4a34b0106bac47df5a36cb89f4775d158c0cfc269aa6701c6ed62ed4dc54e2b00d3b7711eab0b7938733c80274ef91ef4bb7b7941463a44c8a13aeac93fe1e7be9cdffae2f5e07a061c53b3f80654a650f47e58bdd197e7d25bfb061f1c33a8ec274f8f1cf6e41c0"}]}}, @NL80211_ATTR_IE={0x5a, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xa9, 0xfd}}, @mic={0x8c, 0x18, {0x8a0, "8ff404bb2558", @long="bc056d5c1784f1b609b440c31eed240c"}}, @link_id={0x65, 0x12}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x48}}, @mic={0x8c, 0x18, {0xece, "cbbdd9b713b9", @long="e08a33d3351c39fa69da58c702b70467"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x98, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x62, 0x2, "730bc0b206b702c0ed774756afeda8a97dd68ce75a02ef5064a583d356c0c1a830b0338e2da8b6e7c7f4773786d8b30d1eaf4922a2d06c4d04dd7e14bba40896f1dfcbdbd09daca9018dc8c01073d9865bc53f8028661cebef8f2eb3b71a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x26, 0x3, "7a976dadb51eb6f65861eb2f7557f2120ce36689a94dff2cf8a22dca67fb70f57831"}]}, @NL80211_ATTR_BEACON_TAIL={0x12f, 0xf, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x1, 0x7}}, @random_vendor={0xdd, 0x4a, "797aa928f5951830d5001adcb7703478ed2a175a7ab6ce1b934ad89b83a802a160dd07eddd373c2f4e516735d8d15f577d78948ecd1bfef750e601102cb8d993f892ce59755254daf6b9"}, @challenge={0x10, 0x1, 0xae}, @chsw_timing={0x68, 0x4, {0x1, 0x4}}, @random_vendor={0xdd, 0x9, "03f267f0b0b29f1f48"}, @link_id={0x65, 0x12, {@random="99e8d724840e", @device_b, @broadcast}}, @mesh_chsw={0x76, 0x6, {0x6, 0x3, 0x1a, 0x82}}, @random_vendor={0xdd, 0xa4, "c0522eb338b5feb463668090485c89991bd40a17292666a118636ead0e5d9582e3110b87b9656db2cb59fdad7643230485102a5e5057a8fc2f8aff438e8fa33bf05bc29610df9011717cf8cb2c38ecba1b5e3872507b88a2ec507606f678efe6bb7a322f65a49f3dc66301716192137afa10d92e2f8e4df2e9572ca24f7e35ce8026c626b691058738cef4252ef6df581e99a3f3283a63fdfe760cea082c58f4f5578d3c"}]}, @NL80211_ATTR_FTM_RESPONDER={0x138, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x45, 0x3, "55fe45b93bdbb0df34e3d0be215fbfd36d45702cbbb080375770ecb249100ce67e997eb0a53c2a837a0b8273bb062074bcb183ffd261ba194d6c9451b27c4b1073"}, @NL80211_FTM_RESP_ATTR_LCI={0x6c, 0x2, "a198d0c8f3903891e91f54d71940b1d70661f76e8e6f6f7754eea0b0fc5563500f2a0e1fe870f41dc45b7bcea93af8d92517debf9123b08bc8f24eaddca439a30d0acc258c46a6557d77622dd6bdb8d49296356e5b7e0b8e076b989ea85021e4567e27f2786de382"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7a, 0x3, "e7116053e7e0e4835b9696274f30e6b9842686de7663d77d8d79eb8c84f60a4bef2b47b1275ed13b25680186d66e6188207a560126ab83d957443144858a82347646e62532ce6efd554ce034553c1935eb8b93911c8eff44aea78bee0b59ae8cf8b3b777f0a86e5f4de32be4f9258188472c00df287a"}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x6f8}}, 0x0) 1.948727292s ago: executing program 6 (id=6437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c00170000000000f000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.776191935s ago: executing program 6 (id=6439): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="020000"], 0x48}}, 0x40884) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x7, 0x3a, '/\x95}\x17^!', 0x3a, '', 0x3a, './file0'}, 0x2d) r3 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000015020101000000000000000001000001060007400002000040000180060003400002000006000340000300000c000280050001008500000006000340000300000c00028005000100210000000c0002800500010084000000"], 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x14000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r5, @ANYRES32=r5, @ANYRES64=r5, @ANYRES64=r4], 0x24}, 0x1, 0x0, 0x0, 0x40508d0}, 0x9590f6cc3ea35512) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) listen(r5, 0xfffffffe) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[], 0x44}}, 0x0) 1.775979143s ago: executing program 0 (id=6440): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x220100, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa, 0x291b4a, 0x2cba6b}) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000000)="240000001e005f80004000000000000002000000010000000000080008000100000303ff", 0x24) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newtaction={0x100, 0x30, 0x709, 0x0, 0x3, {}, [{0xec, 0x1, [@m_sample={0xe8, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7fff, 0x57, 0x0, 0x80000000, 0xf}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}]}, {0x9b, 0x6, "d1a11101e4c3e48a33614778f3851a5ac4d402c37e4e0f83bdf60543166ab3675ed959d5b7afff172f5b3cbcc4b4e37b0e2bdeb3787ad5d1db310851a599622d1210b2ddf419d4be99b8b263222197caf84841da71e76c10b26391850e95ff1621e354e6ac3ee277d23e87ce2e11422f9508ffae4919728dccc6ad41389b662378a6e9717ccb04e6f1268aec8d8ec9b16361eb3c36148e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x100}}, 0x0) 1.665733627s ago: executing program 0 (id=6441): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x7}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) syz_emit_ethernet(0xda, &(0x7f0000000440)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xa4, 0x2b, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@routing={0x3b, 0x0, 0x3}], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "ad659a87ce8d6c4642e7b756fdd99c8a003016d9b0740e1e5222cc00ccb1137d", "91492c9f8a93ab7cbdc2fcd39ddfcb1f049555996610eb1bb8e54a1c3f5624fe1401051de2ce367aadedefa5e434abf7", "0a4dee37c85aecbf21c869478c62f84ba03ff89b863366c0128e76d8", {"51650242e877a758a21f80764984be21", "ef5d907f201d99a4eff0c7b450cf0a15"}}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x87, 0xfe, 0x4, 0xff}, {0x6}]}) 1.495230039s ago: executing program 0 (id=6442): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000040)=0x81, 0x5, 0x0) (async) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000500)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006d000000954174fd932564b417d461a00c5e9362d590a283e905e5c7956a5ed83d20"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)={0x54, r4, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000540)="80fd01ffde40", 0x6}], 0x1, 0x0, 0x0) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405668, &(0x7f0000000100)={0x0, 0x2, 0x986, 0x880}) (async) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 1.417448086s ago: executing program 6 (id=6443): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x5c) 1.345697451s ago: executing program 0 (id=6444): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) (async, rerun: 32) r0 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe) (rerun: 32) r1 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r0}, &(0x7f0000000080)=""/100, 0x64, &(0x7f0000000180)={&(0x7f0000000400)={'xxhash64-generic\x00'}}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) (async, rerun: 64) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (rerun: 64) pread64(r2, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) 1.345406313s ago: executing program 6 (id=6445): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xe, [0x3f, 0x401, 0x3, 0xd, 0xfff, 0xe, 0x1, 0x8, 0x800, 0xc9, 0x3ff, 0x1, 0x5, 0x2, 0x3, 0x2, 0x3, 0x5, 0x2, 0x1000, 0x8, 0x0, 0x6, 0x7fffffff, 0x9, 0x35cf, 0x6, 0x74a7, 0xcb, 0xe, 0x8, 0x9, 0x0, 0x4, 0x2, 0x8001, 0xf, 0x1, 0x200, 0x7, 0x8, 0x3, 0x3, 0x80000008, 0xb09dcbb4, 0x3, 0x9, 0xf, 0x8, 0xfffffffb, 0x80, 0x2, 0x400, 0x0, 0x5, 0xe, 0x200, 0x2, 0x0, 0x2ff4, 0x8000, 0x1, 0x8, 0x9, 0x0, 0xfffffff9, 0x6, 0x6, 0x100, 0xa4400, 0x6, 0x2, 0x8, 0x6, 0x5, 0x2, 0x7fff, 0x0, 0x2001, 0x4, 0x3bc64353, 0x10000, 0x6, 0x0, 0x5, 0x8, 0x1000, 0x4, 0x8, 0x1, 0x80, 0x6, 0x5, 0x2, 0x4, 0x400, 0x1, 0x7, 0x6, 0x0, 0x2, 0x2, 0x96, 0x36, 0x4, 0x9, 0x1b87d35f, 0xc, 0x1, 0x1ff, 0x8, 0xe55, 0x2400000, 0x4, 0x5, 0x8, 0x8, 0x7, 0x1, 0x6, 0x9, 0x746, 0xff, 0x2, 0x40, 0x80000000, 0x0, 0x1]}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x8, 0x9, 0x1, 0x7, 0xa7}, 0x14) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000080)="fc4658c9", 0x4, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c) writev(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)="bbfe509ce089b3408c32dd6db5e747341b4f3bf668ba2e1b9412d6231b6ed047afb73d27a1a2bc58da8b1d3fa95a92c1a316faa197f9f7d046a6847a3da651beca5b047dc3533a286dcb10b7e89946b4d9acfc13afa9f8214d376c52319e99ec22b60da1e5459cd231052f29a045f3c7469c13289ed80e2b1d873284fa65afedee11abe0b9a362e011000c94b54b40574d42", 0x92}, {&(0x7f0000000340)="411967707ee930001140e841f9d0559da4b48d6c0b217f14ebc2672fc57a71de945aece690d2d4a621fc97a9718a5c239bb17d576a970da2c7f6406a2b2f72e1e3cb01b6479fa7fe88e614baf2811b957a6676487262303207f5a36fe97e5c70799b6973652441f6a5e6690f5186b950cc1a58861f6383dfdbe8ea9efcb03491909587016f1efd7950d431db3da7c6f4a49e621aa60e5873dc183cbdc4a18b4e0828c1ca3b0674c10e4dea8ffc99bec16718541172e43764cade60e3dc6c3231042bae5daf6f4b7f28388f5518e8f31ec0c09b4ab528b3dc7957ac33858d4892b68ff8e017db22be1cfd1c4aa0f0ed", 0xef}, {&(0x7f00000004c0)="c5e8ec6ff6e651007f42e6f2498e8ff50638c19dfa8da41ec320420d6de2d1eb38ab133315e9bd1f2f58c1c3343facd0cfd4306c572cb204b43fdf14ee91338cff1b0d5267d0cab6a405eb80771ed9f7cfcb3c59ff231934c84f8c24d1aa86071e18914e8e81ae812cc946959e4a8a9de88d698884b1320a86d556c4e82e3bf1981af9d8265133532ea6", 0x8a}, {&(0x7f0000000580)="075a86d6467e678bc859312beb577e54c707e399e4a1a96ad390e3edcae3f75e1235e6f7e6006bdd2751967c217fca8088240a65325001e76849c8e36e4c209dadc041fb25dc58cf229d5d9a5e33794cbce544b7e03a1d2532c75d54df900f50ad4ddc54ae20d94421adc1066370ac2eeb4e0f6984fe57857c50dda132454188e60b8ed06c6c67ad9c3810cbdb4763b59dc9b762d149", 0x96}], 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r3, 0x8, 0x10}, 0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000000)={r3, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r4, 0x800, 0xfffa}, &(0x7f0000000440)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) listen(r2, 0x9) 1.045670862s ago: executing program 5 (id=6449): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000240)) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002280)={0x28, r5, 0x10ada85e65c25359, 0x0, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x28}}, 0x40) (async, rerun: 32) sendmsg$802154_dgram(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000080)="492d9a4ca0c8e9b86d5e786d2f0e9f2ae969cf5293be7ed825a025aa2df709", 0x1f}}, 0x8004) (rerun: 32) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000100)=0x320120) 871.242917ms ago: executing program 5 (id=6450): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r0}) syz_emit_ethernet(0x16, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@llc={0x4, {@snap={0x0, 0x0, "af", "c56e86", 0x86dd}}}}}, 0x0) (async) syz_emit_ethernet(0x16, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@llc={0x4, {@snap={0x0, 0x0, "af", "c56e86", 0x86dd}}}}}, 0x0) 870.339978ms ago: executing program 2 (id=6451): r0 = userfaultfd(0x80001) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) write$selinux_attr(r1, &(0x7f0000000080)='system_u:object_r:scsi_generic_device_t:s0\x00', 0x2b) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) 791.080629ms ago: executing program 5 (id=6452): creat(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000), &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000ad6ec597d8db"], 0xa, 0x0) 790.645539ms ago: executing program 2 (id=6453): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {}, {0x1a, 0x17, {0x0, 0xfffffffd, @l2={'eth', 0x3a, 'gre0\x00'}}}}}, 0x34}}, 0x8044) (async) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x1d, 0x1) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) (async) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 32) r4 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000100)={0x1d, r5}, 0x10) (async, rerun: 64) ioctl$RTC_UIE_ON(r2, 0x7003) (async, rerun: 64) ioctl$RTC_AIE_ON(r2, 0x7001) (async) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r4}, 0x8) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be30043d50ea5a6b868", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x0, 0x55, 0x77, &(0x7f0000000140)="444a1778e8207f6d810dfa68e05d33b00d0415b3aa31eda8f6cba2c302b14d0c9c800398ac07f35c34ec86457fd418e4c35b7e8235f94f8d305ec71948bca8867c5a8aaa160faf17544716a847fd9726d57e2d78e7", &(0x7f0000000280)=""/119, 0x9, 0x0, 0x73, 0x1000, &(0x7f0000000380)="42f4d7657c1fed1575a87814efdfe9a906a75f3340536cbd71db5cef50860f74052b38caca5f94633aeca0929459b4eb4e61f70d731409a13f5878b6b1d5ca4d3a42c059f650ae08f861f5b67f1654680b5368fb9fc5c02fd64f92fc4d37a1a204a1ca6d689f9b89782dc320c7581acbc4e378", &(0x7f0000000880)="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", 0x2, 0x0, 0x8}, 0x50) 705.324887ms ago: executing program 5 (id=6454): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001a40)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@generic={0x5, 0x6, "811d4f", 0x3f, 0x4, 0xfe, @private0, @private1, {[], "9b625c8d42d8e657153d91ee85fec45fa78c700c3e8bcde55bcc2fcfff972322cbb80c3baebd9d0c9642246494023e8654e2430349a0a950c3e50a8078c0df"}}}}, 0x79) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r2 = creat(&(0x7f0000000000)='./bus\x00', 0x4) ftruncate(r2, 0x82081fc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x3a}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) open(0x0, 0x14d0be, 0x48) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r4, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r7 = getuid() stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r2, &(0x7f0000000440)={0x78, 0xfffffffffffffffe, r6, {0x9, 0x80, 0x0, {0x5, 0x3ff, 0x7, 0x5, 0x1000, 0x100000000, 0x7, 0x361d, 0x2, 0x6000, 0x1ff, r7, r8, 0xfffffff9}}}, 0x78) 565.780027ms ago: executing program 2 (id=6455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x6fc, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @beacon=[@NL80211_ATTR_IE={0xe4, 0x2a, [@random_vendor={0xdd, 0x4d, "b7499f524a904ddd31b1cb55d66502d4d3d1e12c3c57081b67103da091f9910496506ab76909a37c34f27a5f2d78f071b72fcb9324c932c52ee06bd94e6f7320bd965e6ded796adbe15e40a338"}, @perr={0x84, 0x8f, {0x8, 0x9, [{{}, @device_b, 0x6, @void, 0x2f}, {{0x0, 0x1}, @device_a, 0x0, @value, 0x17}, {{0x0, 0x1}, @broadcast, 0x2, @value=@broadcast, 0x22}, {{0x0, 0x1}, @device_b, 0x100, @value=@device_b, 0x36}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x2e}, {{}, @device_a, 0x6, @void, 0x6}, {{}, @device_b, 0xb, @void, 0x3f}, {{}, @device_b, 0x6, @void, 0x38}, {{}, @device_b, 0x3220, @void, 0x10}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x2a, 0x7f, [@challenge={0x10, 0x1, 0x92}, @supported_rates={0x1, 0x3, [{0x48}, {0x24}, {0x1b, 0x1}]}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ssid={0x0, 0x6, @default_ap_ssid}, @chsw_timing={0x68, 0x4, {0xa, 0xfffa}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_BEACON_HEAD={0x21e, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0xff}, @device_b, @device_b, @random="39142bf78b40", {0x9, 0x8}}, 0x101, @random=0x4, 0x2000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x8}, @void, @val={0x6, 0x2, 0x3}, @val={0x5, 0xf6, {0x5, 0xac, 0x38, "70cbd3932738daaa11f0eb945db1be3bc1f23b7b0db2d776d5d67f13370e2d33e11fc96b4de12902e6b1d7a6a23c22d651de6f5cc674b30a40a49e8386e38e4243a79a3db9e02eaacfa6ea73a5565508f51479a2ea31f7dd7ab54f3312a6aa702641c6232934e57682283b45f566eb6d8f49e4f784b335d3371c46d664dcb282991793b08ae67cc28a62d7eb3b59895202396168b6b886259b6eb497475c45d611f09d2900c52a33c655d7a8bf7ff2c34f68d2243574f53d6e2e89f4b0150d74a98f507d059f911d475f9c7d81da8496c007dda080cfc77559b160cdb9bac54a17e90c9874cbbf25e06cb6945288f3c4063084"}}, @void, @void, @val={0x3c, 0x4, {0x7, 0x4, 0x40, 0x8}}, @val={0x2d, 0x1a, {0x400, 0x3, 0x6, 0x0, {0xfffffffffffffff8, 0x1e0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x9a, 0x3}}, @void, @void, @void, [{0xdd, 0xcb, "7f2976ca466851f7472b84485c5b936440a52f4e2ffda8add57de07b65df523f4074ccf7ec79805234f674344dfb6b50b2e97b8425b0b76d1b5b521bef851bdb0956b0afcee389630fda72d73fa67351808ec822897c7044ece4090eb05fa93ac7b09e4a34b0106bac47df5a36cb89f4775d158c0cfc269aa6701c6ed62ed4dc54e2b00d3b7711eab0b7938733c80274ef91ef4bb7b7941463a44c8a13aeac93fe1e7be9cdffae2f5e07a061c53b3f80654a650f47e58bdd197e7d25bfb061f1c33a8ec274f8f1cf6e41c0"}]}}, @NL80211_ATTR_IE={0x5a, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xa9, 0xfd}}, @mic={0x8c, 0x18, {0x8a0, "8ff404bb2558", @long="bc056d5c1784f1b609b440c31eed240c"}}, @link_id={0x65, 0x12}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x48}}, @mic={0x8c, 0x18, {0xece, "cbbdd9b713b9", @long="e08a33d3351c39fa69da58c702b70467"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x98, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x62, 0x2, "730bc0b206b702c0ed774756afeda8a97dd68ce75a02ef5064a583d356c0c1a830b0338e2da8b6e7c7f4773786d8b30d1eaf4922a2d06c4d04dd7e14bba40896f1dfcbdbd09daca9018dc8c01073d9865bc53f8028661cebef8f2eb3b71a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x26, 0x3, "7a976dadb51eb6f65861eb2f7557f2120ce36689a94dff2cf8a22dca67fb70f57831"}]}, @NL80211_ATTR_BEACON_TAIL={0x12f, 0xf, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x1, 0x7}}, @random_vendor={0xdd, 0x4a, "797aa928f5951830d5001adcb7703478ed2a175a7ab6ce1b934ad89b83a802a160dd07eddd373c2f4e516735d8d15f577d78948ecd1bfef750e601102cb8d993f892ce59755254daf6b9"}, @challenge={0x10, 0x1, 0xae}, @chsw_timing={0x68, 0x4, {0x1, 0x4}}, @random_vendor={0xdd, 0x9, "03f267f0b0b29f1f48"}, @link_id={0x65, 0x12, {@random="99e8d724840e", @device_b, @broadcast}}, @mesh_chsw={0x76, 0x6, {0x6, 0x3, 0x1a, 0x82}}, @random_vendor={0xdd, 0xa4, "c0522eb338b5feb463668090485c89991bd40a17292666a118636ead0e5d9582e3110b87b9656db2cb59fdad7643230485102a5e5057a8fc2f8aff438e8fa33bf05bc29610df9011717cf8cb2c38ecba1b5e3872507b88a2ec507606f678efe6bb7a322f65a49f3dc66301716192137afa10d92e2f8e4df2e9572ca24f7e35ce8026c626b691058738cef4252ef6df581e99a3f3283a63fdfe760cea082c58f4f5578d3c"}]}, @NL80211_ATTR_FTM_RESPONDER={0x13c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x45, 0x3, "55fe45b93bdbb0df34e3d0be215fbfd36d45702cbbb080375770ecb249100ce67e997eb0a53c2a837a0b8273bb062074bcb183ffd261ba194d6c9451b27c4b1073"}, @NL80211_FTM_RESP_ATTR_LCI={0x6f, 0x2, "a198d0c8f3903891e91f54d71940b1d70661f76e8e6f6f7754eea0b0fc5563500f2a0e1fe870f41dc45b7bcea93af8d92517debf9123b08bc8f24eaddca439a30d0acc258c46a6557d77622dd6bdb8d49296356e5b7e0b8e076b989ea85021e4567e27f2786de3827a2361"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7a, 0x3, "e7116053e7e0e4835b9696274f30e6b9842686de7663d77d8d79eb8c84f60a4bef2b47b1275ed13b25680186d66e6188207a560126ab83d957443144858a82347646e62532ce6efd554ce034553c1935eb8b93911c8eff44aea78bee0b59ae8cf8b3b777f0a86e5f4de32be4f9258188472c00df287a"}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x6fc}}, 0x0) 485.762001ms ago: executing program 2 (id=6456): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0x8, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4004) splice(r1, 0x0, r3, 0x0, 0x10d00, 0x0) r4 = fsmount(r1, 0x1, 0xfc) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r6 = getpgrp(0xffffffffffffffff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r1, r5, 0xe, 0x0, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=[0x7, 0x100, 0x8000000000000001, 0x8, 0xf], &(0x7f0000000140)=[0x1, 0x1, 0x1, 0x3, 0x0, 0x4, 0x5, 0x1, 0x0], 0x0, 0x5, 0x0, r6}}, 0x40) 485.03313ms ago: executing program 5 (id=6457): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xd0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r1, 0x4c57}, &(0x7f00000000c0)=0x8) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000100), 0x301000, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={r1, 0x9}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)={r3, 0xd618, 0x2, [0x2, 0x9]}, 0xc) r4 = socket(0xa, 0x4, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e23, 0x2ce006b8, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa3fe}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r5, @in6={{0xa, 0x4e20, 0xe07000, @dev={0xfe, 0x80, '\x00', 0x38}, 0x3}}, 0x2, 0x7}, &(0x7f00000003c0)=0x90) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={r1, 0x2b}, 0x8) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000440), 0x14000, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000480)={r1, 0x4}, 0x8) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000004c0)={{0x3c, @broadcast, 0x4e24, 0x4, 'lc\x00', 0x5, 0x2, 0x7c}, {@local, 0x4e23, 0x2, 0x7, 0x5, 0xd}}, 0x44) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x4) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000580)=0xffffffff89bd89a9) socket(0xf, 0xb, 0x4) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x10010, r2, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f00000015c0)=@IORING_OP_MSG_RING={0x28, 0xe, 0x0, r2, 0x1, &(0x7f00000005c0)="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", 0x1000, 0x2}) pread64(r4, &(0x7f0000001600), 0x0, 0x3) getrandom(&(0x7f0000001640)=""/15, 0xf, 0x3) r8 = socket(0x2, 0x5, 0x2) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001680)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000018c0)=@assoc_id=r6, &(0x7f0000001900)=0x4) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000001940)=0x1e, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000001980)={r1, 0xaf, 0xd1, "27a8d82ea4920a1378da832793ca84fee916871ddab38a7fa350dc4d36d0d84242d8dc1537ab78929ba35ed8775117bc0f61fbebc6c662cc358c7f2fa7953bd1f9ed0e5b5ec488e7ce473060cea5eb1f1738d2190e91b23bb5c31dcda276d434efc441b5027a392aed5a2ca721bae66160c740074d94313c7b046db2400e5f2985a1853c397dc375bc344530718a2631b2c91e3bdc70eda7f7f12fe13046f883d1a3f99f8831c380109f23d7fae6cf4451d18f8362bc97d1c47ddeb82c53bfe1ecf912ff947e2460e0aa5603a0f51ebfbe"}, 0xd9) ioctl$KDSKBLED(r2, 0x4b65, 0x3) syz_io_uring_setup(0x61e6, &(0x7f0000001a80)={0x0, 0x4acd, 0x8000, 0x2, 0x37b, 0x0, r2}, &(0x7f0000001b00)=0x0, &(0x7f0000001b40)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000001b80)=0x7fff, 0x0, 0x4) getpeername$inet(r0, &(0x7f0000001bc0)={0x2, 0x0, @dev}, &(0x7f0000001c00)=0x10) 484.749607ms ago: executing program 0 (id=6458): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000180)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f00000002c0)={{@host}, {@my=0x0, 0x7ffffd}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc09d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c900"}, 0x418, 0x400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x406, r4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_resolv_list_size={{0x55}, {0x5, 0x8}}}}, 0x8) ioctl$TCFLSH(r5, 0x400455c8, 0x1) ioctl$KDSIGACCEPT(r5, 0x800455c9, 0x32) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x80, r2, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x8, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xf, 0xb, 0x12, 0xf}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x80}}, 0x20000014) 0s ago: executing program 5 (id=6460): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xf}, @ETHTOOL_A_RINGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3a7739e05667440b}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2b, 0x35dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xffff}, {0xd, 0xa}, {0x3, 0xf}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e7522"], 0x24) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x4040000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x14) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r6, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) kernel console output (not intermixed with test programs): , priority 0 [ 476.545737][T22616] tipc: Disabling bearer [ 476.682143][T22627] netlink: 'syz.0.5641': attribute type 15 has an invalid length. [ 476.692977][T22627] ref_ctr increment failed for inode: 0xab offset: 0x7 ref_ctr_offset: 0x4 of mm: 0xffff8880287fb200 [ 476.697928][T22626] uprobe: syz.0.5641:22626 failed to unregister, leaking uprobe [ 476.956700][T22633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.038714][T22635] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5644'. [ 477.095548][T22637] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5645'. [ 477.100617][T22639] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5645'. [ 477.114966][ T5972] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 477.119286][ T5972] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 477.372767][ T5294] Bluetooth: hci1: command 0x041b tx timeout [ 477.466595][T22658] tipc: Enabled bearer , priority 0 [ 477.491080][T22652] tipc: Disabling bearer [ 477.553945][ C2] vkms_vblank_simulate: vblank timer overrun [ 477.557191][T22661] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5652'. [ 477.861934][T22688] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 477.947723][T22693] autofs4:pid:22693:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294934528.1), cmd(0xc0189374) [ 477.951577][T22693] autofs4:pid:22693:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 478.010066][T22697] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5664'. [ 478.015542][T22697] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5664'. [ 478.129312][T22706] trusted_key: encrypted_key: keylen parameter is missing [ 478.241493][T22710] tipc: Enabled bearer , priority 0 [ 478.251509][T22709] tipc: Disabling bearer [ 478.709898][T22737] netlink: 'syz.5.5673': attribute type 10 has an invalid length. [ 478.713369][T22737] hsr0: entered promiscuous mode [ 478.718256][T22737] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 478.721262][T22737] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 478.727033][T22737] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 478.730230][T22737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5673'. [ 478.733861][T22737] netlink: 'syz.5.5673': attribute type 19 has an invalid length. [ 478.736151][T22737] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5673'. [ 478.814558][T22742] netlink: 'syz.5.5674': attribute type 4 has an invalid length. [ 478.817561][T22742] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5674'. [ 478.823452][T22742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5674'. [ 478.903784][T22748] netlink: 'syz.0.5675': attribute type 2 has an invalid length. [ 478.906780][T22748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.912152][T22749] tipc: Enabled bearer , priority 0 [ 478.918581][T22747] tipc: Disabling bearer [ 479.207125][T22768] overlay: Unknown parameter 'fsuuid' [ 479.588112][T22787] kvm: emulating exchange as write [ 479.903577][T22797] netlink: 'syz.0.5690': attribute type 10 has an invalid length. [ 480.224697][ T40] kauditd_printk_skb: 1424 callbacks suppressed [ 480.224709][ T40] audit: type=1400 audit(3040.164:98435): avc: denied { ioctl } for pid=22798 comm="syz.2.5691" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 480.238142][ T40] audit: type=1400 audit(3040.174:98436): avc: denied { read } for pid=5335 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 480.245236][ T40] audit: type=1400 audit(3040.174:98437): avc: denied { search } for pid=5335 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 480.251030][ T40] audit: type=1400 audit(3040.174:98438): avc: denied { append } for pid=5335 comm="syslogd" name="messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 480.258683][ T40] audit: type=1400 audit(3040.174:98439): avc: denied { append open } for pid=5335 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 480.264955][ T40] audit: type=1400 audit(3040.174:98440): avc: denied { getattr } for pid=5335 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 480.282693][ T835] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 480.286327][ T40] audit: type=1400 audit(3040.224:98441): avc: denied { ioctl } for pid=22798 comm="syz.2.5691" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 480.293323][ T40] audit: type=1400 audit(3040.224:98442): avc: denied { ioctl } for pid=22798 comm="syz.2.5691" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 480.302437][ T40] audit: type=1400 audit(3040.224:98443): avc: denied { ioctl } for pid=22798 comm="syz.2.5691" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 480.315683][ T40] audit: type=1400 audit(3040.254:98444): avc: denied { recv } for pid=5850 comm="syz-executor" saddr=127.0.0.1 src=59118 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 480.459048][ T835] usb 7-1: too many configurations: 157, using maximum allowed: 8 [ 480.464569][ T835] usb 7-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config [ 480.467405][ T835] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 480.483579][ T835] usb 7-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config [ 480.486484][ T835] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 480.492957][ T835] usb 7-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config [ 480.495922][ T835] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 480.511176][ T835] usb 7-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config [ 480.514116][ T835] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 480.521993][ T835] usb 7-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config [ 480.524701][T22832] 9pnet_fd: Insufficient options for proto=fd [ 480.528622][ T835] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 480.541792][ T835] usb 7-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config [ 480.544818][ T835] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 480.550684][ T835] usb 7-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config [ 480.558378][ T835] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 480.564185][ T835] usb 7-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config [ 480.567030][ T835] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 480.575891][ T835] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 480.578415][ T835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.580605][ T835] usb 7-1: Product: Ð’ [ 480.582365][ T835] usb 7-1: Manufacturer: ã [ 480.583783][ T835] usb 7-1: SerialNumber: Ɗྯ웹궊᭽é˜Ò£ë²¸çŽ´æ‡µî…习풚廌璾⧆핇ëŸäˆ«é£‚愼衚画䯻蟗黱黨â£á‚ªé»—详çŠì„°ç”⑕者쒬疯黜濢쵵⯊륲炤Ʂ휫皦볙洯꽳 [ 480.799828][ T835] usb 7-1: USB disconnect, device number 67 [ 481.299496][T22858] fuse: Bad value for 'fd' [ 481.961288][T22889] tipc: Enabling of bearer rejected, already enabled [ 482.137704][T22902] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 482.167806][T22903] netlink: 'syz.0.5713': attribute type 1 has an invalid length. [ 482.243004][T22908] 9pnet_virtio: no channels available for device 127.0.0.1 [ 482.264032][T22910] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 482.283349][T22911] pim6reg1: entered promiscuous mode [ 482.284869][T22911] pim6reg1: entered allmulticast mode [ 482.358904][T22901] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 482.362001][T22901] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 482.367074][T22901] overlayfs: conflicting lowerdir path [ 482.606400][T22921] tipc: Enabled bearer , priority 0 [ 482.609635][T22920] tipc: Disabling bearer [ 482.743903][T22924] fuse: Bad value for 'fd' [ 482.947838][T22928] tmpfs: Bad value for 'mpol' [ 482.949333][T22930] tmpfs: Bad value for 'mpol' [ 482.986912][T22935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5126 sclass=netlink_route_socket pid=22935 comm=syz.5.5722 [ 483.358360][T22962] tipc: Enabled bearer , priority 0 [ 483.381985][T22961] tipc: Disabling bearer [ 483.509189][T22978] __nla_validate_parse: 5 callbacks suppressed [ 483.509200][T22978] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5739'. [ 483.566616][T22978] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 483.800279][T22990] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5741'. [ 483.803200][T22990] unsupported nlmsg_type 40 [ 483.952699][T22997] tipc: Enabled bearer , priority 0 [ 483.959289][T22995] fuse: Bad value for 'fd' [ 483.968537][T22996] tipc: Disabling bearer [ 484.511622][T23007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5749'. [ 484.514183][T23007] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5749'. [ 484.590885][T23011] veth0_to_batadv: entered promiscuous mode [ 484.605187][T23011] veth0_to_batadv: left promiscuous mode [ 484.657407][T23012] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5750'. [ 484.660156][T23015] set match dimension is over the limit! [ 484.660261][T23012] nbd: illegal input index 1986356271 [ 484.731483][T23018] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5752'. [ 484.767518][T23021] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5753'. [ 484.772076][T23021] bond0: option ad_select: unable to set because the bond device is up [ 484.829642][T23023] tipc: Enabled bearer , priority 0 [ 484.835376][T23022] tipc: Disabling bearer [ 484.862037][ T836] libceph: connect (1)[c::]:6789 error -101 [ 484.864238][ T836] libceph: mon0 (1)[c::]:6789 connect error [ 484.870555][T23027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5756'. [ 484.892734][T23025] ceph: No mds server is up or the cluster is laggy [ 484.957501][T23032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.964212][T23032] team0: Port device bond0 added [ 485.030793][T23038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23038 comm=syz.6.5760 [ 485.216763][T23047] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5764'. [ 485.233409][ T40] kauditd_printk_skb: 1535 callbacks suppressed [ 485.233419][ T40] audit: type=1400 audit(3045.174:99980): avc: denied { append open } for pid=5335 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 485.255116][ T40] audit: type=1400 audit(3045.174:99981): avc: denied { getattr } for pid=5335 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 485.261457][ T40] audit: type=1400 audit(3045.184:99982): avc: denied { recv } for pid=5850 comm="syz-executor" saddr=127.0.0.1 src=59118 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 485.272632][ T40] audit: type=1400 audit(3045.194:99983): avc: denied { recv } for pid=23033 comm="syz.2.5759" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 485.282666][ T40] audit: type=1400 audit(3045.204:99984): avc: denied { read write } for pid=17370 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 485.289039][ T40] audit: type=1400 audit(3045.204:99985): avc: denied { read write open } for pid=17370 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 485.303653][ T40] audit: type=1400 audit(3045.204:99986): avc: denied { ioctl } for pid=17370 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 485.310913][ T40] audit: type=1400 audit(3045.234:99987): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59118 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 485.321977][ T40] audit: type=1400 audit(3045.234:99988): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=59118 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 485.326326][T23055] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 485.330003][ T40] audit: type=1400 audit(3045.234:99989): avc: denied { recv } for pid=5848 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59118 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 485.331181][T23055] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 485.346061][T23055] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5765'. [ 485.368232][T23055] input: syz0 as /devices/virtual/input/input70 [ 485.424666][T23059] tipc: Enabled bearer , priority 0 [ 485.427856][T23058] tipc: Disabling bearer [ 485.451614][T23060] netlink: 'syz.0.5766': attribute type 2 has an invalid length. [ 485.991711][T23081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.996544][T23081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.069170][T23091] tipc: Enabled bearer , priority 0 [ 486.072805][T23088] tipc: Disabling bearer [ 486.451256][T23109] bond_slave_1: entered promiscuous mode [ 486.512053][T23109] bond0: (slave bond_slave_1): Releasing backup interface [ 486.515281][T23109] bond_slave_1 (unregistering): left promiscuous mode [ 486.575115][T23070] ceph: No mds server is up or the cluster is laggy [ 486.612172][T23112] hugetlbfs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 486.728772][T23122] tipc: Enabled bearer , priority 0 [ 486.734427][T23121] tipc: Disabling bearer [ 486.851800][T23130] netlink: 'syz.0.5785': attribute type 1 has an invalid length. [ 486.885611][T23130] 8021q: adding VLAN 0 to HW filter on device bond2 [ 486.888215][T23131] bridge0: port 3(syz_tun) entered blocking state [ 486.890077][T23131] bridge0: port 3(syz_tun) entered disabled state [ 486.903995][T23131] syz_tun: entered allmulticast mode [ 486.907650][T23131] syz_tun: entered promiscuous mode [ 486.909327][T23131] bridge0: port 3(syz_tun) entered blocking state [ 486.911224][T23131] bridge0: port 3(syz_tun) entered forwarding state [ 487.675017][T23164] tipc: Enabled bearer , priority 0 [ 487.679099][T23163] tipc: Disabling bearer [ 488.226376][T23160] Set syz1 is full, maxelem 65536 reached [ 488.627199][T23193] netlink: 'syz.2.5805': attribute type 1 has an invalid length. [ 488.629391][T23193] netlink: 'syz.2.5805': attribute type 1 has an invalid length. [ 488.631541][T23193] __nla_validate_parse: 6 callbacks suppressed [ 488.631564][T23193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5805'. [ 488.782950][T23204] tipc: Enabled bearer , priority 0 [ 488.817522][T23203] tipc: Disabling bearer [ 489.014237][T23215] sp1: Synchronizing with TNC [ 489.188797][T23223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5813'. [ 489.191587][T23223] bridge_slave_0: left allmulticast mode [ 489.193369][T23223] bridge_slave_0: left promiscuous mode [ 489.195056][T23223] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.292263][T23225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6554 sclass=netlink_route_socket pid=23225 comm=syz.2.5813 [ 489.519995][T23230] bond2: entered promiscuous mode [ 489.521533][T23230] bond2: entered allmulticast mode [ 489.525580][T23230] 8021q: adding VLAN 0 to HW filter on device bond2 [ 489.784815][T23243] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5819'. [ 489.858958][T23248] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5819'. [ 489.904929][T23243] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5819'. [ 489.989255][T23255] netlink: 'syz.6.5823': attribute type 27 has an invalid length. [ 490.256237][ T40] kauditd_printk_skb: 1267 callbacks suppressed [ 490.256251][ T40] audit: type=1400 audit(3050.194:101257): avc: denied { recv } for pid=5850 comm="syz-executor" saddr=127.0.0.1 src=59118 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 490.282638][ T40] audit: type=1400 audit(3050.194:101258): avc: denied { recv } for pid=23257 comm="syz.6.5826" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 490.289445][ T40] audit: type=1400 audit(3050.204:101259): avc: denied { read } for pid=5335 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 490.298816][ T40] audit: type=1400 audit(3050.204:101260): avc: denied { search } for pid=5335 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.309093][ T40] audit: type=1400 audit(3050.214:101261): avc: denied { append } for pid=5335 comm="syslogd" name="messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 490.327772][ T40] audit: type=1400 audit(3050.214:101262): avc: denied { append open } for pid=5335 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 490.340496][ T40] audit: type=1400 audit(3050.214:101263): avc: denied { read write } for pid=16083 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 490.348825][ T40] audit: type=1400 audit(3050.214:101264): avc: denied { getattr } for pid=5335 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 490.358484][ T40] audit: type=1400 audit(3050.214:101265): avc: denied { read write open } for pid=16083 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 490.366434][ T40] audit: type=1400 audit(3050.214:101266): avc: denied { ioctl } for pid=16083 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 490.534546][T23277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39202 sclass=netlink_route_socket pid=23277 comm=syz.5.5830 [ 490.538751][T23277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39202 sclass=netlink_route_socket pid=23277 comm=syz.5.5830 [ 490.616022][T23282] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5833'. [ 490.821852][T23297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5838'. [ 490.824412][T23297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5838'. [ 490.826931][T23297] netlink: 'syz.2.5838': attribute type 11 has an invalid length. [ 490.844267][T23299] netlink: 'syz.5.5839': attribute type 1 has an invalid length. [ 490.846660][T23299] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5839'. [ 490.861600][T23300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.997965][T23310] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 491.011626][T23310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5843'. [ 491.019280][T23314] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 491.223527][T23325] program syz.0.5844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 491.542505][T23344] Can't find a SQUASHFS superblock on nullb0 [ 491.548612][T23344] 9pnet_virtio: no channels available for device syz [ 492.306869][T23373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23373 comm=syz.5.5858 [ 492.578030][T23401] input: syz1 as /devices/virtual/input/input73 [ 492.628695][T23404] netlink: 'syz.2.5865': attribute type 3 has an invalid length. [ 492.630993][T23404] netlink: 'syz.2.5865': attribute type 1 has an invalid length. [ 492.634262][T23404] nbd: couldn't find device at index 63 [ 492.660840][T23404] netlink: 'syz.2.5865': attribute type 2 has an invalid length. [ 492.754749][T23409] openvswitch: netlink: Missing valid actions attribute. [ 492.756745][T23409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.001234][T23422] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 493.009710][T23422] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 493.126961][T23426] ata1.00: invalid multi_count 1 ignored [ 493.780750][T23471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.838722][ T5294] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 493.844825][T23476] __nla_validate_parse: 9 callbacks suppressed [ 493.844835][T23476] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5892'. [ 493.851259][T23476] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5892'. [ 493.862124][T23478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5893'. [ 493.877565][T23478] IPv6: NLM_F_CREATE should be specified when creating new route [ 493.891710][T23480] dccp_invalid_packet: pskb_may_pull failed [ 494.016527][T23487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5894'. [ 494.254291][T23487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5894'. [ 494.358757][T23495] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 494.361281][T23495] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 494.857051][T23504] syzkaller0: entered promiscuous mode [ 494.859339][T23504] syzkaller0: entered allmulticast mode [ 494.897245][T23506] SELinux: policydb string length 14080 does not match expected length 8 [ 494.899461][T23506] SELinux: failed to load policy [ 494.901761][T23506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5903'. [ 494.976242][T23508] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 495.209296][T23525] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5910'. [ 495.273914][ T40] kauditd_printk_skb: 2120 callbacks suppressed [ 495.273924][ T40] audit: type=1400 audit(3055.214:103387): avc: denied { recv } for pid=5848 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59118 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 495.286017][ T40] audit: type=1400 audit(3055.214:103388): avc: denied { recv } for pid=5850 comm="syz-executor" saddr=127.0.0.1 src=59118 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 495.292537][T23529] xt_connbytes: Forcing CT accounting to be enabled [ 495.312741][ T40] audit: type=1400 audit(3055.224:103389): avc: denied { execmem } for pid=23527 comm="syz.2.5912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 495.318162][ T40] audit: type=1400 audit(3055.224:103390): avc: denied { create } for pid=23526 comm="syz.0.5911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 495.342846][ T40] audit: type=1400 audit(3055.224:103391): avc: denied { setopt } for pid=23526 comm="syz.0.5911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 495.353862][ T40] audit: type=1400 audit(3055.234:103392): avc: denied { recv } for pid=5850 comm="syz-executor" saddr=127.0.0.1 src=59118 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 495.364694][ T40] audit: type=1400 audit(3055.244:103393): avc: denied { read } for pid=23526 comm="syz.0.5911" dev="nsfs" ino=4026534377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 495.367960][T23533] program syz.5.5913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 495.370759][ T40] audit: type=1400 audit(3055.244:103394): avc: denied { read open } for pid=23526 comm="syz.0.5911" path="net:[4026534377]" dev="nsfs" ino=4026534377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 495.383391][ T40] audit: type=1400 audit(3055.244:103395): avc: denied { recv } for pid=23527 comm="syz.2.5912" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 495.392617][ T40] audit: type=1400 audit(3055.244:103396): avc: denied { create } for pid=23526 comm="syz.0.5911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 495.522868][ T1111] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 495.524921][ T1111] ata1.00: irq_stat 0x40000000 [ 495.526269][ T1111] ata1.00: failed command: ZAC MANAGEMENT OUT [ 495.546078][ T1111] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 14 [ 495.546078][ T1111] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 495.550383][ T1111] ata1.00: status: { DRDY ERR } [ 495.551743][ T1111] ata1.00: error: { ABRT } [ 495.562612][ T1111] ata1.00: device reported invalid CHS sector 0 [ 495.635077][T23545] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5916'. [ 495.646855][T23545] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5916'. [ 495.727517][T23549] tipc: Enabled bearer , priority 10 [ 495.743020][T23548] tipc: Disabling bearer [ 495.982182][T23565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5923'. [ 496.082761][ T835] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 496.124628][T23576] vxcan3: entered promiscuous mode [ 496.126152][T23576] vxcan3: entered allmulticast mode [ 496.162231][T23576] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 496.212727][ T835] usb 10-1: device descriptor read/64, error -71 [ 496.358903][T23590] tipc: Enabled bearer , priority 10 [ 496.364947][T23588] tipc: Disabling bearer [ 496.369897][T23591] libceph: resolve ' [ 496.369897][T23591] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 496.369897][T23591] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 496.406424][T23594] random: crng reseeded on system resumption [ 496.461520][ T835] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 496.484684][ T3235] Process accounting resumed [ 496.602643][ T835] usb 10-1: device descriptor read/64, error -71 [ 496.713301][ T835] usb usb10-port1: attempt power cycle [ 496.752735][ T6029] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 496.907788][ T6029] usb 5-1: device descriptor read/64, error -71 [ 496.986095][T23610] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 497.000237][T23610] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 497.052783][ T835] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 497.074694][ T835] usb 10-1: device descriptor read/8, error -71 [ 497.142711][ T6029] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 497.272739][ T6029] usb 5-1: device descriptor read/64, error -71 [ 497.322657][ T835] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 497.363664][ T835] usb 10-1: device descriptor read/8, error -71 [ 497.382827][ T6029] usb usb5-port1: attempt power cycle [ 497.472732][ T835] usb usb10-port1: unable to enumerate USB device [ 497.722755][ T6029] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 497.732045][T23633] tipc: Enabled bearer , priority 10 [ 497.741211][T23632] tipc: Disabling bearer [ 497.743820][ T6029] usb 5-1: device descriptor read/8, error -71 [ 497.753630][ T1111] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 497.756150][ T1111] ata1: failed to read log page 10h (errno=-5) [ 497.758508][ T1111] ata1.00: exception Emask 0x1 SAct 0x1000000 SErr 0x0 action 0x0 [ 497.760727][ T1111] ata1.00: irq_stat 0x40000000 [ 497.762163][ T1111] ata1.00: failed command: WRITE FPDMA QUEUED [ 497.764106][ T1111] ata1.00: cmd 61/48:c0:32:31:0c/00:00:00:00:00/40 tag 24 ncq dma 36864 out [ 497.764106][ T1111] res 50/00:00:00:00:00/00:00:00:00:00/a0 Emask 0x1 (device error) [ 497.768709][ T1111] ata1.00: status: { DRDY } [ 497.770652][ T1111] ata1.00: configured for UDMA/100 [ 497.772346][ T1111] ata1: EH complete [ 497.984106][ T6029] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 498.014365][ T6029] usb 5-1: device descriptor read/8, error -71 [ 498.123455][ T6029] usb usb5-port1: unable to enumerate USB device [ 498.387011][T23654] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 498.396745][T23655] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 498.479446][T23660] tipc: Enabled bearer , priority 10 [ 498.484245][T23659] tipc: Disabling bearer [ 498.702835][T23664] netlink: 'syz.6.5954': attribute type 13 has an invalid length. [ 498.939514][T23670] hfsplus: unable to find HFS+ superblock [ 499.401212][T23598] Process accounting resumed [ 499.532390][T23697] tipc: Enabled bearer , priority 10 [ 499.538605][T23696] tipc: Disabling bearer [ 499.643232][T23701] xt_l2tp: v2 doesn't support IP mode [ 499.774310][T23706] overlayfs: conflicting options: nfs_export=on,index=off [ 500.157530][T23736] __nla_validate_parse: 6 callbacks suppressed [ 500.157541][T23736] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5972'. [ 500.221600][T23744] tipc: Enabled bearer , priority 10 [ 500.233118][T23740] tipc: Disabling bearer [ 500.284413][ T40] kauditd_printk_skb: 1542 callbacks suppressed [ 500.284425][ T40] audit: type=1400 audit(3060.224:104939): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59118 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 500.293095][ T40] audit: type=1400 audit(3060.224:104940): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=59118 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 500.299763][ T40] audit: type=1400 audit(3060.224:104941): avc: denied { read } for pid=23746 comm="syz.6.5976" dev="nsfs" ino=4026534388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 500.301479][T23734] netlink: 'syz.5.5974': attribute type 4 has an invalid length. [ 500.306172][ T40] audit: type=1400 audit(3060.224:104942): avc: denied { read open } for pid=23746 comm="syz.6.5976" path="net:[4026534388]" dev="nsfs" ino=4026534388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 500.315322][ T40] audit: type=1400 audit(3060.224:104943): avc: denied { recv } for pid=5848 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59118 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 500.322146][ T40] audit: type=1400 audit(3060.224:104944): avc: denied { create } for pid=23746 comm="syz.6.5976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 500.327889][ T40] audit: type=1400 audit(3060.224:104945): avc: denied { recv } for pid=23746 comm="syz.6.5976" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 500.334553][ T40] audit: type=1400 audit(3060.224:104946): avc: denied { create } for pid=23730 comm="syz.5.5974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 500.339970][ T40] audit: type=1400 audit(3060.224:104947): avc: denied { create } for pid=23730 comm="syz.5.5974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 500.345447][ T40] audit: type=1400 audit(3060.224:104948): avc: denied { recv } for pid=23746 comm="syz.6.5976" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 500.389092][T23752] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5978'. [ 500.391582][T23752] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5978'. [ 500.431662][T23758] program syz.5.5980 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 500.455951][T23760] program syz.6.5978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 500.576156][T23769] syzkaller1: entered promiscuous mode [ 500.577717][T23769] syzkaller1: entered allmulticast mode [ 500.645264][T23771] tipc: Enabled bearer , priority 10 [ 500.650732][T23770] tipc: Disabling bearer [ 500.794738][T23780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5989'. [ 500.797805][T23781] 9pnet_virtio: no channels available for device 127.0.0.1 [ 500.900982][T23786] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 501.136258][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.755475][T23809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5997'. [ 501.757974][T23809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5997'. [ 501.808373][T23811] tipc: Enabling of bearer rejected, already enabled [ 501.864348][T23813] netlink: 'syz.0.5999': attribute type 1 has an invalid length. [ 501.867036][T23813] nbd: couldn't find a device at index 20 [ 501.933652][T23822] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.6002'. [ 501.936276][T23822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.939632][T23822] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.6002'. [ 501.942272][T23822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.946531][T23822] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.6002'. [ 501.949146][T23822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.952439][T23822] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.6002'. [ 501.955552][T23822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.958841][T23822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.962262][T23822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.965886][T23822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.969246][T23822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.975893][T23822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.979204][T23822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.246600][T23831] @: renamed from vlan0 (while UP) [ 503.331271][T23847] tipc: Enabled bearer , priority 3 [ 503.336936][T23846] tipc: Disabling bearer [ 503.348857][T23849] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 503.350695][T23849] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 503.354467][T23849] vhci_hcd vhci_hcd.0: Device attached [ 503.358766][T23849] vhci_hcd vhci_hcd.0: port 0 already used [ 503.366689][T23850] vhci_hcd: connection closed [ 503.366849][T18106] vhci_hcd: stop threads [ 503.369420][T18106] vhci_hcd: release socket [ 503.370709][T18106] vhci_hcd: disconnect device [ 503.938475][T23866] fuse: Bad value for 'group_id' [ 503.939940][T23866] fuse: Bad value for 'group_id' [ 504.129413][T23873] tipc: Enabled bearer , priority 31 [ 504.138898][T23871] tipc: Disabling bearer [ 504.845373][T23905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.849217][T23905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.851931][T23905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.854378][T23905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.064511][T23911] tipc: Enabling of bearer rejected, already enabled [ 505.117436][T23916] IPVS: Unknown mcast interface: nr0 [ 505.119162][T23915] IPVS: Unknown mcast interface: nr0 [ 505.182091][T23919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=23919 comm=syz.2.6035 [ 505.293103][ T40] kauditd_printk_skb: 1239 callbacks suppressed [ 505.293115][ T40] audit: type=1400 audit(3065.234:106188): avc: denied { perfmon } for pid=23922 comm="syz.2.6036" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 505.300574][ T40] audit: type=1400 audit(3065.234:106189): avc: denied { perfmon } for pid=23922 comm="syz.2.6036" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 505.306400][ T1022] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 505.310973][ T40] audit: type=1400 audit(3065.234:106190): avc: denied { perfmon } for pid=23922 comm="syz.2.6036" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 505.318305][ T40] audit: type=1400 audit(3065.234:106191): avc: denied { perfmon } for pid=23922 comm="syz.2.6036" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 505.325077][ T40] audit: type=1400 audit(3065.234:106192): avc: denied { bpf } for pid=23922 comm="syz.2.6036" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 505.330503][ T40] audit: type=1400 audit(3065.234:106193): avc: denied { bpf } for pid=23922 comm="syz.2.6036" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 505.336923][ T40] audit: type=1400 audit(3065.234:106194): avc: denied { prog_run } for pid=23922 comm="syz.2.6036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 505.337255][T23927] fuse: Bad value for 'group_id' [ 505.341984][ T40] audit: type=1400 audit(3065.244:106195): avc: denied { ioctl } for pid=23908 comm="syz.0.6032" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 505.343711][T23927] fuse: Bad value for 'group_id' [ 505.361057][ T40] audit: type=1400 audit(3065.244:106196): avc: denied { read write } for pid=23912 comm="syz.5.6033" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 505.368606][ T40] audit: type=1400 audit(3065.254:106197): avc: denied { ioctl } for pid=23908 comm="syz.0.6032" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 505.474111][ T1022] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.477127][ T1022] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.479802][ T1022] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 505.486003][ T1022] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 505.488586][ T1022] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.494253][ T1022] usb 5-1: config 0 descriptor?? [ 505.652780][T23937] block nbd2: Device being setup by another task [ 505.774473][T23937] block nbd2: shutting down sockets [ 505.909220][T23910] __nla_validate_parse: 31 callbacks suppressed [ 505.909231][T23910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6032'. [ 505.931124][ T1022] usbhid 5-1:0.0: can't add hid device: -71 [ 505.933220][ T1022] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 505.936010][ T1022] usb 5-1: USB disconnect, device number 82 [ 510.364299][ T40] kauditd_printk_skb: 342 callbacks suppressed [ 510.364310][ T40] audit: type=1400 audit(3070.304:106540): avc: denied { search } for pid=23943 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.371351][ T40] audit: type=1400 audit(3070.304:106541): avc: denied { search } for pid=23943 comm="rm" name="dhcpcd" dev="tmpfs" ino=1765 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.376710][ T40] audit: type=1400 audit(3070.304:106542): avc: denied { search } for pid=23943 comm="rm" name="hook-state" dev="tmpfs" ino=1769 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.381981][ T40] audit: type=1400 audit(3070.304:106543): avc: denied { getattr } for pid=23943 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.eth0.ra" dev="tmpfs" ino=15291 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 510.388063][ T40] audit: type=1400 audit(3070.304:106544): avc: denied { search } for pid=23943 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.393056][ T40] audit: type=1400 audit(3070.304:106545): avc: denied { search } for pid=23943 comm="rm" name="dhcpcd" dev="tmpfs" ino=1765 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.398269][ T40] audit: type=1400 audit(3070.304:106546): avc: denied { search } for pid=23943 comm="rm" name="hook-state" dev="tmpfs" ino=1769 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.403625][ T40] audit: type=1400 audit(3070.304:106547): avc: denied { write search } for pid=23943 comm="rm" name="hook-state" dev="tmpfs" ino=1769 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.409004][ T40] audit: type=1400 audit(3070.304:106548): avc: denied { remove_name search } for pid=23943 comm="rm" name="resolv.conf.eth0.ra" dev="tmpfs" ino=15291 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.414759][ T40] audit: type=1400 audit(3070.304:106549): avc: denied { unlink } for pid=23943 comm="rm" name="resolv.conf.eth0.ra" dev="tmpfs" ino=15291 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 517.704804][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 517.704815][ T40] audit: type=1400 audit(3077.644:106558): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 517.716007][ T40] audit: type=1400 audit(3077.654:106559): avc: denied { read } for pid=5335 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 517.721913][ T40] audit: type=1400 audit(3077.654:106560): avc: denied { search } for pid=5335 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.727775][ T40] audit: type=1400 audit(3077.654:106561): avc: denied { append } for pid=5335 comm="syslogd" name="messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 517.733733][ T40] audit: type=1400 audit(3077.654:106562): avc: denied { append open } for pid=5335 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 517.739858][ T40] audit: type=1400 audit(3077.654:106563): avc: denied { getattr } for pid=5335 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 517.754885][ T40] audit: type=1400 audit(3077.694:106564): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 517.761623][ T40] audit: type=1400 audit(3077.694:106565): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 517.768424][ T40] audit: type=1400 audit(3077.694:106566): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 517.775265][ T40] audit: type=1400 audit(3077.694:106567): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 517.817104][T23950] syz.0.6040(23950): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 517.834350][T23952] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6043'. [ 517.837661][T23952] netlink: 43 bytes leftover after parsing attributes in process `syz.6.6043'. [ 517.841227][T23952] netlink: 'syz.6.6043': attribute type 6 has an invalid length. [ 517.849418][T23952] netlink: 'syz.6.6043': attribute type 5 has an invalid length. [ 517.851491][T23953] tipc: Enabling of bearer rejected, already enabled [ 517.852211][T23952] netlink: 43 bytes leftover after parsing attributes in process `syz.6.6043'. [ 517.963731][T23960] misc userio: Can't change port type on an already running userio instance [ 517.995659][T23964] ieee802154 phy0 wpan0: encryption failed: -22 [ 518.190640][T23993] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6051'. [ 518.207013][T23994] loop9: detected capacity change from 0 to 8 [ 518.210788][T23994] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 518.212284][T23994] loop9: partition table partially beyond EOD, truncated [ 518.214515][T23994] loop9: p1 size 81768186 extends beyond EOD, truncated [ 518.303728][T23999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6054'. [ 518.351192][T24001] tipc: Enabled bearer , priority 10 [ 518.361411][T24003] netlink: 'syz.2.6056': attribute type 1 has an invalid length. [ 518.363753][T24003] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6056'. [ 518.364959][T24000] tipc: Disabling bearer [ 518.401344][T24003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6056'. [ 518.496698][T24007] 9pnet_virtio: no channels available for device 127.0.0.1 [ 518.522759][ T5995] usb 11-1: new high-speed USB device number 28 using dummy_hcd [ 518.662836][ T5995] usb 11-1: device descriptor read/64, error -71 [ 518.922832][ T5995] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 518.946250][T24024] tipc: Enabled bearer , priority 0 [ 518.954733][T24023] tipc: Disabling bearer [ 519.062867][ T5995] usb 11-1: device descriptor read/64, error -71 [ 519.173516][ T5995] usb usb11-port1: attempt power cycle [ 519.458629][T24048] fuse: Bad value for 'user_id' [ 519.460447][T24048] fuse: Bad value for 'user_id' [ 519.512843][ T5995] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 519.526615][T24050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6075'. [ 519.529218][T24050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6075'. [ 519.544522][ T5995] usb 11-1: device descriptor read/8, error -71 [ 519.598790][T24052] tipc: Enabled bearer , priority 0 [ 519.605896][T24051] tipc: Disabling bearer [ 519.751863][T24054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6077'. [ 519.812814][ T5995] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 519.826260][T24056] 9pnet_fd: Insufficient options for proto=fd [ 519.826406][T24057] 9pnet_fd: Insufficient options for proto=fd [ 519.836099][T24056] netlink: 'syz.0.6078': attribute type 10 has an invalid length. [ 519.836924][T24057] netlink: 'syz.0.6078': attribute type 10 has an invalid length. [ 519.843804][ T5995] usb 11-1: device descriptor read/8, error -71 [ 519.953400][ T5995] usb usb11-port1: unable to enumerate USB device [ 520.161782][T24073] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 520.176046][T24073] netdevsim netdevsim5: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 520.402665][ T3235] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 520.412721][ T5934] Bluetooth: hci4: command 0x1003 tx timeout [ 520.413530][ T5294] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 520.560418][ T3235] usb 5-1: descriptor type invalid, skip [ 520.565628][ T3235] usb 5-1: config 3 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 520.569097][ T3235] usb 5-1: config 3 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 520.575774][ T3235] usb 5-1: config 3 interface 0 has no altsetting 0 [ 520.597073][ T3235] usb 5-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.40 [ 520.600562][ T3235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.605191][ T3235] usb 5-1: Product: â Š [ 520.613895][ T3235] usb 5-1: Manufacturer: 뫲㎎ç˜æš§å¢¼ê‡˜á€³ç¾Žé•—î£ìžåž‰î¿¤é¤šì¨€æ¹¸î¸‹í›è±”浯㵊닣絣㟂橧톙 [ 520.783816][ T5934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 520.787536][ T5934] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 520.790160][ T5934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 520.792519][ T5934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 520.797589][ T5934] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 520.799732][ T5934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 520.831527][ T3235] usbhid 5-1:3.0: can't add hid device: -71 [ 520.833528][ T3235] usbhid 5-1:3.0: probe with driver usbhid failed with error -71 [ 520.836355][ T3235] usb 5-1: USB disconnect, device number 83 [ 521.030898][ T215] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.044942][T24087] chnl_net:caif_netlink_parms(): no params data found [ 521.089179][T24087] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.091148][T24087] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.093319][T24087] bridge_slave_0: entered allmulticast mode [ 521.095387][T24087] bridge_slave_0: entered promiscuous mode [ 521.100706][T24087] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.102989][T24087] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.106000][T24087] bridge_slave_1: entered allmulticast mode [ 521.108076][T24087] bridge_slave_1: entered promiscuous mode [ 521.131986][ T215] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.173562][T24087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.178445][T24087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.201364][T24087] team0: Port device team_slave_0 added [ 521.227847][ T215] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.235995][T24087] team0: Port device team_slave_1 added [ 521.275778][T24087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.277828][T24087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.285915][T24087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.312761][ T215] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.319192][T24087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.321199][T24087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.337771][T24087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.354348][T24100] Bluetooth: MGMT ver 1.23 [ 521.371248][T24087] hsr_slave_0: entered promiscuous mode [ 521.373407][T24087] hsr_slave_1: entered promiscuous mode [ 521.375536][T24087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 521.377618][T24087] Cannot create hsr debugfs directory [ 521.426398][T24104] program syz.6.6091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 521.499151][ T215] tipc: Resetting bearer [ 521.640074][ T215] tipc: Disabling bearer [ 521.762649][ T3235] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 521.871144][T24111] loop9: detected capacity change from 0 to 7 [ 521.873531][T24111] buffer_io_error: 4 callbacks suppressed [ 521.873539][T24111] Buffer I/O error on dev loop9, logical block 0, async page read [ 521.877445][T24111] Buffer I/O error on dev loop9, logical block 0, async page read [ 521.879681][T24111] Buffer I/O error on dev loop9, logical block 0, async page read [ 521.881931][T24111] Buffer I/O error on dev loop9, logical block 0, async page read [ 521.886658][T24111] Buffer I/O error on dev loop9, logical block 0, async page read [ 521.889788][T24111] Buffer I/O error on dev loop9, logical block 0, async page read [ 521.892926][T24111] Buffer I/O error on dev loop9, logical block 0, async page read [ 521.896034][T24111] ldm_validate_partition_table(): Disk read failed. [ 521.898621][T24111] Buffer I/O error on dev loop9, logical block 0, async page read [ 521.901666][T24111] Buffer I/O error on dev loop9, logical block 0, async page read [ 521.904666][T24111] Buffer I/O error on dev loop9, logical block 0, async page read [ 521.907651][T24111] Dev loop9: unable to read RDB block 0 [ 521.909891][T24111] loop9: unable to read partition table [ 521.912182][T24111] loop9: partition table beyond EOD, truncated [ 521.914707][T24111] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 521.914707][T24111] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 521.929291][ T3235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.932411][ T3235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.937775][ T3235] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 521.941386][ T3235] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 521.946668][ T3235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.954423][ T3235] usb 5-1: config 0 descriptor?? [ 521.994060][T24116] FAT-fs (nullb0): bogus number of reserved sectors [ 521.996709][T24116] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 522.113040][ T215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.117366][ T215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.121587][ T215] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 522.124443][ T215] bond0 (unregistering): Released all slaves [ 522.128753][ T215] bond1 (unregistering): Released all slaves [ 522.133241][ T215] bond2 (unregistering): Released all slaves [ 522.260001][ T215] bond3 (unregistering): (slave batadv1): Releasing active interface [ 522.263311][ T215] batadv1: left allmulticast mode [ 522.268307][ T215] bond3 (unregistering): Released all slaves [ 522.279337][ T835] IPVS: starting estimator thread 0... [ 522.372034][ T215] tipc: Left network mode [ 522.382847][T24130] IPVS: using max 43 ests per chain, 103200 per kthread [ 522.405266][ T3235] plantronics 0003:047F:FFFF.0018: reserved main item tag 0xd [ 522.408093][ T3235] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 522.441119][ T3235] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 522.516868][T24137] (syz.5.6101,24137,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 522.519374][T24137] (syz.5.6101,24137,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 522.668470][ T836] usb 5-1: USB disconnect, device number 84 [ 522.784189][ T40] kauditd_printk_skb: 1671 callbacks suppressed [ 522.784200][ T40] audit: type=1400 audit(3082.724:108239): avc: denied { recv } for pid=5850 comm="syz-executor" saddr=127.0.0.1 src=59118 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 522.795334][ T40] audit: type=1400 audit(3082.724:108240): avc: denied { read write } for pid=17370 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 522.801937][ T40] audit: type=1400 audit(3082.724:108241): avc: denied { read write open } for pid=17370 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 522.809348][ T40] audit: type=1400 audit(3082.724:108242): avc: denied { ioctl } for pid=17370 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 522.816718][ T40] audit: type=1400 audit(3082.734:108243): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 522.823315][ T5934] Bluetooth: hci2: command tx timeout [ 522.830060][ T40] audit: type=1400 audit(3082.764:108244): avc: denied { prog_load } for pid=24143 comm="syz.5.6104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 522.835581][ T40] audit: type=1400 audit(3082.764:108245): avc: denied { bpf } for pid=24143 comm="syz.5.6104" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 522.841091][ T40] audit: type=1400 audit(3082.764:108246): avc: denied { perfmon } for pid=24143 comm="syz.5.6104" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 522.847382][ T40] audit: type=1400 audit(3082.764:108247): avc: denied { perfmon } for pid=24143 comm="syz.5.6104" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 522.853325][ T40] audit: type=1400 audit(3082.764:108248): avc: denied { perfmon } for pid=24143 comm="syz.5.6104" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 522.882161][T24087] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 522.899034][T24087] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 522.915229][T24087] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 522.921427][ T215] hsr_slave_0: left promiscuous mode [ 522.929389][ T215] hsr_slave_1: left promiscuous mode [ 522.933055][ T215] batman_adv: batadv0: Interface deactivated: dummy0 [ 522.934991][ T215] batman_adv: batadv0: Removing interface: dummy0 [ 522.937242][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.952726][ T215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.978193][ T215] veth1_macvtap: left promiscuous mode [ 522.979795][ T215] veth0_macvtap: left promiscuous mode [ 523.246141][T24151] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 523.248533][T24151] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 523.251929][T24151] vhci_hcd vhci_hcd.0: Device attached [ 523.257076][T24152] vhci_hcd: unknown pdu 2 [ 523.258500][T18441] vhci_hcd: stop threads [ 523.259708][T18441] vhci_hcd: release socket [ 523.260996][T18441] vhci_hcd: disconnect device [ 523.560020][ T215] team0 (unregistering): Port device team_slave_1 removed [ 523.654203][ T215] team0 (unregistering): Port device team_slave_0 removed [ 524.241524][T24087] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 524.256913][T24158] tipc: Enabling of bearer rejected, failed to enable media [ 524.351996][T24087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.391346][T24087] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.411710][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.413771][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.437219][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.439191][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.492016][T24175] syz_tun: entered promiscuous mode [ 524.495388][T24175] batadv_slave_0: entered promiscuous mode [ 524.590886][T24181] __nla_validate_parse: 1 callbacks suppressed [ 524.590902][T24181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6115'. [ 524.599598][T24181] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 524.642490][T24185] netlink: 'syz.6.6114': attribute type 58 has an invalid length. [ 524.651331][T24185] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6114'. [ 524.803910][ T215] IPVS: stop unused estimator thread 0... [ 524.893405][ T5934] Bluetooth: hci2: command tx timeout [ 525.052509][T24202] tipc: Enabled bearer , priority 10 [ 525.068415][T24200] tipc: Disabling bearer [ 525.183895][T24207] wireguard0: entered promiscuous mode [ 525.185437][T24207] wireguard0: entered allmulticast mode [ 525.229475][T24087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.295734][T24087] veth0_vlan: entered promiscuous mode [ 525.316981][T24087] veth1_vlan: entered promiscuous mode [ 525.355022][T24087] veth0_macvtap: entered promiscuous mode [ 525.361974][T24087] veth1_macvtap: entered promiscuous mode [ 525.383000][T24087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.385817][T24087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.388379][T24087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.391262][T24087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.394032][T24087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.396843][T24087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.399585][T24087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.402473][T24087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.406749][T24087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.417237][T24087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.419871][T24087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.422384][T24087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.428320][T24087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.431591][T24087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.441035][T24087] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.443529][T24087] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.445914][T24087] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.448285][T24087] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.525342][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.527527][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.551692][T18761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.562073][T18761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.161894][T24235] netlink: 292 bytes leftover after parsing attributes in process `syz.5.6129'. [ 526.247994][T24241] IPv6: sit1: Disabled Multicast RS [ 526.268939][T24239] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 526.352464][T24246] 9pnet_virtio: no channels available for device syz [ 526.410129][T24246] __vm_enough_memory: pid: 24246, comm: syz.0.6132, bytes: 21199630020608 not enough memory for the allocation [ 526.511193][T24256] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6137'. [ 526.515178][T24257] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6137'. [ 526.519942][T24256] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 526.534831][T24261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=24261 comm=syz.6.6138 [ 526.538426][T24261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=24261 comm=syz.6.6138 [ 526.542124][T24261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=24261 comm=syz.6.6138 [ 526.546065][T24261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=24261 comm=syz.6.6138 [ 526.550226][T24261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=24261 comm=syz.6.6138 [ 526.611904][T24267] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6139'. [ 526.626848][T24267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24267 comm=syz.5.6139 [ 526.666306][T24269] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6141'. [ 526.691837][T24269] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6141'. [ 526.696127][T24269] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6141'. [ 526.700211][T24269] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6141'. [ 526.972744][ T5934] Bluetooth: hci2: command tx timeout [ 527.155810][T24304] Cannot find add_set index 4 as target [ 527.222485][T24308] netlink: 'syz.5.6152': attribute type 32 has an invalid length. [ 527.229905][T24308] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 527.266044][T24310] ieee802154 phy0 wpan0: encryption failed: -22 [ 527.792909][ T40] kauditd_printk_skb: 3161 callbacks suppressed [ 527.792920][ T40] audit: type=1400 audit(3087.734:111405): avc: denied { read write open } for pid=24344 comm="syz.0.6165" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 527.799960][T24345] audit: audit_backlog=65 > audit_backlog_limit=64 [ 527.803953][T24345] audit: audit_lost=12 audit_rate_limit=0 audit_backlog_limit=64 [ 527.806247][ T40] audit: type=1400 audit(3087.734:111406): avc: denied { ioctl } for pid=24344 comm="syz.0.6165" path="/dev/video0" dev="devtmpfs" ino=955 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 527.807157][T24345] audit: backlog limit exceeded [ 527.813946][ T40] audit: type=1326 audit(3087.724:111404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24332 comm="syz.6.6160" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1758d169 code=0x50000 [ 527.818182][T24345] audit: audit_backlog=65 > audit_backlog_limit=64 [ 527.820260][T24341] audit: audit_backlog=65 > audit_backlog_limit=64 [ 527.820271][T24341] audit: audit_lost=13 audit_rate_limit=0 audit_backlog_limit=64 [ 527.820278][T24341] audit: backlog limit exceeded [ 527.823352][T24341] tipc: Started in network mode [ 527.831012][T24341] tipc: Node identity 0000006, cluster identity 4711 [ 527.835102][T24341] tipc: Enabling of bearer rejected, failed to enable media [ 527.846397][T24343] 9pnet_fd: p9_fd_create_tcp (24343): problem connecting socket to 127.0.0.1 [ 528.021912][T24356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.048511][T24360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24360 comm=syz.2.6171 [ 528.277034][T24366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.279832][T24366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.712978][ T1022] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 528.868842][ T1022] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.871864][ T1022] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.882638][ T1022] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 528.887189][ T1022] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 528.899955][ T1022] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.911414][ T1022] usb 7-1: config 0 descriptor?? [ 529.058793][ T5934] Bluetooth: hci2: command tx timeout [ 529.323806][ T1022] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 529.332082][ T1022] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 529.711801][ T1022] usb 7-1: USB disconnect, device number 68 [ 529.874511][T24402] netlink: 'syz.0.6185': attribute type 7 has an invalid length. [ 529.876690][T24402] __nla_validate_parse: 4 callbacks suppressed [ 529.876698][T24402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6185'. [ 529.928610][T24405] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 529.931305][T24405] SELinux: failed to load policy [ 530.011483][T24407] tipc: Enabled bearer , priority 10 [ 530.017301][T24406] tipc: Disabling bearer [ 530.130563][T24419] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6191'. [ 530.373152][T24436] netlink: 'syz.0.6198': attribute type 6 has an invalid length. [ 530.391113][T24438] tipc: Enabled bearer , priority 10 [ 530.395864][T24437] tipc: Disabling bearer [ 530.456531][T24442] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 530.459354][T24442] SELinux: failed to load policy [ 530.608588][T24449] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6204'. [ 530.673310][ T6029] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 530.720915][T24457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6206'. [ 530.729152][T24457] bridge0: port 3(syz_tun) entered disabled state [ 530.743149][T24457] syz_tun (unregistering): left allmulticast mode [ 530.744740][T24457] syz_tun (unregistering): left promiscuous mode [ 530.746355][T24457] bridge0: port 3(syz_tun) entered disabled state [ 530.835143][T24465] xt_hashlimit: max too large, truncated to 1048576 [ 530.837841][T24464] xt_hashlimit: max too large, truncated to 1048576 [ 530.840703][T24464] xt_bpf: check failed: parse error [ 530.842669][ T6029] usb 7-1: Using ep0 maxpacket: 16 [ 530.844206][T24465] xt_bpf: check failed: parse error [ 530.851285][ T6029] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.855897][ T6029] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.858588][ T6029] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 530.866526][ T6029] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 530.868933][ T6029] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.880055][ T6029] usb 7-1: config 0 descriptor?? [ 530.887667][ T6029] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input78 [ 530.898161][ T5338] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 530.907377][ T5338] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 530.915180][ T5338] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 530.920192][ T5338] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 530.959271][T24468] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 531.043891][T24472] tipc: Enabled bearer , priority 10 [ 531.047329][T24471] tipc: Disabling bearer [ 531.141187][T24477] netlink: 'syz.6.6212': attribute type 1 has an invalid length. [ 531.144039][T24477] netlink: 'syz.6.6212': attribute type 3 has an invalid length. [ 531.146198][T24477] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6212'. [ 531.153931][T24477] syz.6.6212: attempt to access beyond end of device [ 531.153931][T24477] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 531.157639][T24477] syz.6.6212: attempt to access beyond end of device [ 531.157639][T24477] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0 [ 531.161164][T24477] Mount JFS Failure: -5 [ 531.162406][T24477] jfs_mount failed w/return code = -5 [ 531.231396][ T6029] usb 7-1: USB disconnect, device number 69 [ 531.304372][T24485] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 531.311871][T24485] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 531.569396][T24502] netlink: 'syz.0.6219': attribute type 3 has an invalid length. [ 531.571677][T24502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6219'. [ 531.576312][T24503] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6220'. [ 531.576844][T24502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24502 comm=syz.0.6219 [ 531.607425][T24499] usb usb3: usbfs: interface 0 claimed by hub while 'syz.6.6217' sets config #512 [ 531.655741][T24509] tipc: Enabled bearer , priority 3 [ 531.661885][T24506] tipc: Disabling bearer [ 531.724098][T24489] GUP no longer grows the stack in syz.2.6216 (24489): 200000004000-20000000a000 (200000002000) [ 531.727370][T24489] CPU: 2 UID: 0 PID: 24489 Comm: syz.2.6216 Not tainted 6.14.0-syzkaller-03565-gf6e0150b2003 #0 PREEMPT(full) [ 531.727385][T24489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 531.727391][T24489] Call Trace: [ 531.727396][T24489] [ 531.727400][T24489] dump_stack_lvl+0x16c/0x1f0 [ 531.727436][T24489] gup_vma_lookup+0x1d2/0x220 [ 531.727453][T24489] __get_user_pages+0x234/0x36f0 [ 531.727470][T24489] ? __pfx___might_resched+0x10/0x10 [ 531.727486][T24489] ? __pfx___get_user_pages+0x10/0x10 [ 531.727501][T24489] ? __pfx_down_read_killable+0x10/0x10 [ 531.727520][T24489] ? __lock_acquire+0x5ca/0x1ba0 [ 531.727536][T24489] __gup_longterm_locked+0x20d/0x1850 [ 531.727554][T24489] ? try_get_folio+0x495/0x800 [ 531.727568][T24489] ? __pfx___gup_longterm_locked+0x10/0x10 [ 531.727585][T24489] ? try_get_folio+0x517/0x800 [ 531.727599][T24489] ? find_held_lock+0x2b/0x80 [ 531.727612][T24489] gup_fast_fallback+0x17ff/0x2690 [ 531.727633][T24489] ? __pfx_gup_fast_fallback+0x10/0x10 [ 531.727649][T24489] ? finish_task_switch.isra.0+0x221/0xc10 [ 531.727662][T24489] ? __lock_acquire+0xaa4/0x1ba0 [ 531.727677][T24489] get_user_pages_fast+0xa7/0xf0 [ 531.727693][T24489] ? __pfx_get_user_pages_fast+0x10/0x10 [ 531.727709][T24489] ? __mutex_trylock_common+0xe9/0x250 [ 531.727725][T24489] __iov_iter_get_pages_alloc+0x83b/0x1f50 [ 531.727744][T24489] ? rcu_is_watching+0x12/0xc0 [ 531.727755][T24489] ? trace_contention_end+0xdd/0x130 [ 531.727771][T24489] ? __mutex_lock+0x1cb/0xb00 [ 531.727786][T24489] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 531.727799][T24489] ? pipe_lock+0x64/0x80 [ 531.727810][T24489] ? __pfx___mutex_lock+0x10/0x10 [ 531.727825][T24489] ? import_ubuf+0x1b6/0x220 [ 531.727839][T24489] iov_iter_get_pages2+0xa3/0x100 [ 531.727850][T24489] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 531.727862][T24489] ? wait_for_space+0x232/0x2e0 [ 531.727881][T24489] __do_sys_vmsplice+0xa1a/0xee0 [ 531.727901][T24489] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 531.727919][T24489] ? __pfx_futex_wait+0x10/0x10 [ 531.727948][T24489] ? rcu_is_watching+0x12/0xc0 [ 531.727960][T24489] ? do_syscall_64+0xcd/0x260 [ 531.727975][T24489] do_syscall_64+0xcd/0x260 [ 531.727989][T24489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.727999][T24489] RIP: 0033:0x7f3c1fb8d169 [ 531.728008][T24489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.728018][T24489] RSP: 002b:00007f3c209f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 531.728028][T24489] RAX: ffffffffffffffda RBX: 00007f3c1fda5fa0 RCX: 00007f3c1fb8d169 [ 531.728035][T24489] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 531.728041][T24489] RBP: 00007f3c1fc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 531.728047][T24489] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 531.728053][T24489] R13: 0000000000000000 R14: 00007f3c1fda5fa0 R15: 00007fff49948e08 [ 531.728064][T24489] [ 531.818866][ C2] vkms_vblank_simulate: vblank timer overrun [ 531.867374][T24516] program syz.0.6226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 531.871045][T24516] ata1.00: invalid transfer count 0 [ 531.888325][T24518] overlayfs: empty lowerdir [ 531.916839][T24520] tmpfs: Bad value for 'mpol' [ 532.060089][T24531] CUSE: info not properly terminated [ 532.075803][T24531] netlink: 'syz.6.6231': attribute type 21 has an invalid length. [ 532.214566][T24542] netlink: 'syz.5.6233': attribute type 11 has an invalid length. [ 532.333906][T24546] tipc: Enabled bearer , priority 31 [ 532.339619][T24545] tipc: Disabling bearer [ 532.508900][T24553] fuse: Unknown parameter '‰À' [ 532.769311][T24568] fuse: Unknown parameter 'grou00000000000000000000' [ 532.818501][ T40] kauditd_printk_skb: 42566 callbacks suppressed [ 532.818513][ T40] audit: type=1400 audit(3092.754:153902): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59118 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 532.829270][ T40] audit: type=1400 audit(3092.754:153903): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=59118 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 532.837087][ T40] audit: type=1400 audit(3092.754:153904): avc: denied { recv } for pid=5848 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59118 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 532.845229][ T40] audit: type=1400 audit(3092.754:153905): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 532.851785][ T40] audit: type=1400 audit(3092.754:153906): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 532.858508][ T40] audit: type=1400 audit(3092.754:153907): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 532.865103][ T40] audit: type=1400 audit(3092.764:153908): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 532.867711][T24581] tipc: Enabled bearer , priority 10 [ 532.871457][ T40] audit: type=1400 audit(3092.764:153909): avc: denied { recv } for pid=5848 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59118 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 532.880005][ T40] audit: type=1400 audit(3092.764:153910): avc: denied { read write } for pid=22113 comm="syz-executor" name="loop0" dev="devtmpfs" ino=2817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 532.886899][ T40] audit: type=1400 audit(3092.764:153911): avc: denied { read write open } for pid=22113 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=2817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 532.894351][T24579] tipc: Disabling bearer [ 533.422777][ T5973] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 533.430984][T24609] 9pnet_fd: Insufficient options for proto=fd [ 533.551693][T24624] xt_socket: unknown flags 0xc [ 533.578100][ T5973] usb 10-1: Using ep0 maxpacket: 8 [ 533.592917][ T5973] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 533.595792][ T5973] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 533.598984][ T5973] usb 10-1: too many endpoints for config 1 interface 1 altsetting 8: 75, using maximum allowed: 30 [ 533.600154][T24627] xt_SECMARK: invalid mode: 0 [ 533.601971][ T5973] usb 10-1: config 1 interface 1 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 75 [ 533.610609][ T5973] usb 10-1: config 1 interface 1 has no altsetting 0 [ 533.621533][ T5973] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 533.624161][ T5973] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.627924][ T5973] usb 10-1: Product: à ’ [ 533.629130][ T5973] usb 10-1: SerialNumber: Т [ 533.760000][T24638] tipc: Enabled bearer , priority 10 [ 533.774218][T24637] tipc: Disabling bearer [ 533.873044][ T5973] usb 10-1: 0:2 : does not exist [ 533.887622][ T5973] usb 10-1: USB disconnect, device number 26 [ 534.000196][T24647] fuse: Unknown parameter 'group_i00000000000000000000' [ 534.025618][T24644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6263'. [ 534.319264][T24650] overlayfs: unescaped trailing colons in lowerdir mount option. [ 534.372732][ T5973] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 534.467586][T24656] netlink: 'syz.2.6266': attribute type 9 has an invalid length. [ 534.469800][T24656] netlink: 'syz.2.6266': attribute type 7 has an invalid length. [ 534.471984][T24656] netlink: 'syz.2.6266': attribute type 8 has an invalid length. [ 534.480957][T24656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6266'. [ 534.538518][ T5973] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 534.541591][ T5973] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.550552][ T5973] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 534.555171][ T5973] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.597654][ T5973] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.619669][ T5973] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 534.636597][ T5973] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 534.638813][ T5973] usb 10-1: Product: syz [ 534.640013][ T5973] usb 10-1: Manufacturer: syz [ 534.658333][ T5973] cdc_wdm 10-1:1.0: skipping garbage [ 534.660278][ T5973] cdc_wdm 10-1:1.0: skipping garbage [ 534.666066][ T5973] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 534.668258][ T5973] cdc_wdm 10-1:1.0: Unknown control protocol [ 534.683807][T24667] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6270'. [ 534.689636][T24668] tipc: Enabled bearer , priority 0 [ 534.695034][T24666] tipc: Disabling bearer [ 534.873216][ T6128] usb 10-1: USB disconnect, device number 27 [ 534.880124][T24678] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 534.882343][T24678] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 534.885704][T24678] vhci_hcd vhci_hcd.0: Device attached [ 534.887812][T24679] vhci_hcd: unknown pdu 2 [ 534.891492][ T46] vhci_hcd: stop threads [ 534.893926][ T46] vhci_hcd: release socket [ 534.895699][ T46] vhci_hcd: disconnect device [ 535.044749][T24689] xt_hashlimit: max too large, truncated to 1048576 [ 535.056994][T24689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6276'. [ 535.277599][T24695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6277'. [ 535.288317][T24695] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.290971][T24695] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.294088][T24695] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.297147][T24695] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.301593][T24695] vxlan0: entered promiscuous mode [ 535.710710][T24709] fuse: Unknown parameter 'group_i00000000000000000000' [ 536.748862][T24762] SELinux: Context system_u:object_r:cgroup_t:s0 is not valid (left unmapped). [ 536.820746][T24771] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6297'. [ 536.998018][T24781] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6298'. [ 537.030793][T24782] fuse: Unknown parameter 'group_i00000000000000000000' [ 537.377990][T24804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6305'. [ 537.383504][T24804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6305'. [ 537.701884][T24821] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6310'. [ 537.716521][T24821] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6310'. [ 537.839974][ T40] kauditd_printk_skb: 1352 callbacks suppressed [ 537.839986][ T40] audit: type=1400 audit(3353.767:155264): avc: denied { write } for pid=24827 comm="syz.2.6312" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 537.862599][ T40] audit: type=1400 audit(3353.767:155265): avc: denied { recv } for pid=24827 comm="syz.2.6312" saddr=fe80::a8aa:aaff:feaa:aaaa daddr=ff02::1 netif=hwsim0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 537.869578][ T40] audit: type=1400 audit(3353.777:155266): avc: denied { read } for pid=24827 comm="syz.2.6312" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 537.876913][ T40] audit: type=1400 audit(3353.787:155267): avc: denied { ioctl } for pid=24827 comm="syz.2.6312" path="/dev/radio9" dev="devtmpfs" ino=1033 ioctlcmd=0x5609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 537.889005][ T40] audit: type=1400 audit(3353.817:155268): avc: denied { sys_module } for pid=24815 comm="syz.0.6309" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 537.895891][ T40] audit: type=1400 audit(3353.817:155269): avc: denied { module_request } for pid=24815 comm="syz.0.6309" kmod="batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 537.906435][ T40] audit: type=1400 audit(3353.837:155270): avc: denied { recv } for pid=5850 comm="syz-executor" saddr=127.0.0.1 src=59118 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 537.916883][ T40] audit: type=1400 audit(3353.847:155271): avc: denied { recv } for pid=24830 comm="modprobe" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 537.926404][ T40] audit: type=1400 audit(3353.847:155272): avc: denied { read write } for pid=17570 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 537.935423][ T40] audit: type=1400 audit(3353.847:155273): avc: denied { read write open } for pid=17570 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 537.991816][T24832] netlink: 'syz.6.6313': attribute type 4 has an invalid length. [ 538.402650][ T835] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 538.455016][T24847] overlayfs: failed to resolve './file1': -2 [ 538.566733][ T835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.571207][ T835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.577774][ T835] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 538.584862][ T835] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 538.588130][ T835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.595870][ T835] usb 5-1: config 0 descriptor?? [ 538.713641][T24858] tipc: Enabled bearer , priority 0 [ 538.717627][T24856] tipc: Disabling bearer [ 538.875696][T24859] fuse: Unknown parameter 'group_id00000000000000000000' [ 538.920081][T24865] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 538.923543][T24863] netlink: 'syz.2.6323': attribute type 1 has an invalid length. [ 538.925781][T24863] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6323'. [ 539.014429][ T835] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 539.016769][ T835] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 539.018799][ T835] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 539.020864][ T835] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 539.023030][ T835] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 539.025128][ T835] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 539.027172][ T835] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 539.027811][ T835] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 539.027825][ T835] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 539.027837][ T835] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 539.027848][ T835] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 539.027859][ T835] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 539.027870][ T835] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 539.027882][ T835] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 539.027893][ T835] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 539.028108][ T835] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 539.038936][ T835] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 539.275007][ T5972] usb 5-1: USB disconnect, device number 85 [ 539.335380][T24875] mkiss: ax0: crc mode is auto. [ 539.476011][T24888] tipc: Enabled bearer , priority 0 [ 539.481315][T24887] tipc: Disabling bearer [ 539.607897][T24897] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 539.725401][T24909] netlink: 'syz.6.6337': attribute type 29 has an invalid length. [ 539.727722][T24910] netlink: 'syz.6.6337': attribute type 29 has an invalid length. [ 539.729241][T24909] netlink: 604 bytes leftover after parsing attributes in process `syz.6.6337'. [ 539.896403][T24925] dvmrp0: entered allmulticast mode [ 539.996154][T24932] tipc: Enabled bearer , priority 0 [ 540.008031][T24930] tipc: Disabling bearer [ 540.044023][T24931] fuse: Unknown parameter 'group_id00000000000000000000' [ 540.259356][T24948] 9pnet_fd: Insufficient options for proto=fd [ 540.464205][T24956] overlayfs: statfs failed on './file0' [ 540.561237][T24966] netlink: 'syz.2.6355': attribute type 3 has an invalid length. [ 540.565180][T24966] netlink: 'syz.2.6355': attribute type 3 has an invalid length. [ 540.568228][T24966] netlink: 'syz.2.6355': attribute type 3 has an invalid length. [ 540.571164][T24966] netlink: 'syz.2.6355': attribute type 3 has an invalid length. [ 540.574288][T24966] netlink: 'syz.2.6355': attribute type 3 has an invalid length. [ 540.577390][T24966] netlink: 'syz.2.6355': attribute type 3 has an invalid length. [ 540.646064][T24971] __nla_validate_parse: 1 callbacks suppressed [ 540.646079][T24971] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.6354'. [ 540.731580][T24979] CUSE: unknown device info "ÿ" [ 540.733702][T24979] CUSE: zero length info key specified [ 541.253892][T25001] fuse: Unknown parameter 'group_id00000000000000000000' [ 541.342453][T25005] tipc: Enabled bearer , priority 0 [ 541.346949][T25004] tipc: Disabling bearer [ 541.500684][T25011] cgroup: Unknown subsys name 'cpuset' [ 541.703732][T25017] xt_l2tp: wrong L2TP version: 0 [ 541.770253][ T5294] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 541.779353][ T5294] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 541.783357][ T5294] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 541.785834][ T5294] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 541.788630][ T5294] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 541.790761][ T5294] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 541.976319][T25034] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 542.044238][T25018] chnl_net:caif_netlink_parms(): no params data found [ 542.141317][T25018] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.143394][T25018] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.145480][T25018] bridge_slave_0: entered allmulticast mode [ 542.147582][T25018] bridge_slave_0: entered promiscuous mode [ 542.153281][T25018] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.155275][T25018] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.157295][T25018] bridge_slave_1: entered allmulticast mode [ 542.159331][T25018] bridge_slave_1: entered promiscuous mode [ 542.162823][ T1022] usb 11-1: new high-speed USB device number 32 using dummy_hcd [ 542.187561][T25018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.192490][T25018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.218324][T25018] team0: Port device team_slave_0 added [ 542.225920][T25018] team0: Port device team_slave_1 added [ 542.248314][T25018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.250290][T25018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.257494][T25018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.262325][T25018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.264325][T25018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.271360][T25018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.300732][T25018] hsr_slave_0: entered promiscuous mode [ 542.302771][T25018] hsr_slave_1: entered promiscuous mode [ 542.304771][T25018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.306962][T25018] Cannot create hsr debugfs directory [ 542.312646][ T1022] usb 11-1: Using ep0 maxpacket: 16 [ 542.318598][ T1022] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 542.322790][ T1022] usb 11-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 542.325359][ T1022] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.331637][ T1022] usb 11-1: config 0 descriptor?? [ 542.339481][ T1022] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input80 [ 542.371459][T25048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6381'. [ 542.407537][T25018] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.410549][T25018] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 542.486086][T25018] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.489002][T25018] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 542.541409][T25059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6376'. [ 542.544080][T25059] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6376'. [ 542.545154][T25030] dlm: no locking on control device [ 542.556766][ T5338] bcm5974 11-1:0.0: could not read from device [ 542.565199][ T1022] usb 11-1: USB disconnect, device number 32 [ 542.589958][T25018] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.593026][T25018] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 542.700910][T25018] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.703880][T25018] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 542.848113][T25069] fuse: Bad value for 'user_id' [ 542.849912][T25069] fuse: Bad value for 'user_id' [ 542.854272][ T40] kauditd_printk_skb: 1477 callbacks suppressed [ 542.854352][ T40] audit: type=1400 audit(3358.707:156751): avc: denied { read write } for pid=25061 comm="syz.2.6384" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 542.867098][ T40] audit: type=1400 audit(3358.707:156752): avc: denied { read write open } for pid=25061 comm="syz.2.6384" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 542.885351][ T40] audit: type=1400 audit(3358.707:156753): avc: denied { ioctl } for pid=25070 comm="syz.6.6387" path="socket:[120080]" dev="sockfs" ino=120080 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 542.887829][T25018] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 542.892261][ T40] audit: type=1400 audit(3358.707:156754): avc: denied { module_request } for pid=25070 comm="syz.6.6387" kmod="netdev-wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 542.903561][ T40] audit: type=1400 audit(3358.747:156755): avc: denied { read write } for pid=25061 comm="syz.2.6384" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 542.905201][T25018] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 542.909835][ T40] audit: type=1400 audit(3358.757:156756): avc: denied { recv } for pid=22113 comm="syz-executor" saddr=127.0.0.1 src=59118 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 542.909856][ T40] audit: type=1400 audit(3358.757:156757): avc: denied { read write open } for pid=25061 comm="syz.2.6384" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 542.925786][ T40] audit: type=1400 audit(3358.767:156758): avc: denied { recv } for pid=5850 comm="syz-executor" saddr=127.0.0.1 src=59118 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 542.929647][T25018] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 542.932639][ T40] audit: type=1400 audit(3358.767:156759): avc: denied { recv } for pid=5848 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59118 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 542.940829][ T40] audit: type=1400 audit(3358.767:156760): avc: denied { recv } for pid=25061 comm="syz.2.6384" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 542.943735][T25018] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 543.047883][T25018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.086044][T25018] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.104001][T18761] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.106042][T18761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.111515][T18441] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.113560][T18441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.340729][T25097] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6394'. [ 543.507631][T25105] netlink: 536 bytes leftover after parsing attributes in process `syz.2.6396'. [ 543.517981][T25105] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 543.519807][T25105] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 543.527020][T25105] vhci_hcd vhci_hcd.0: Device attached [ 543.713514][ T3235] vhci_hcd: vhci_device speed not set [ 543.742437][T25018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.782721][ T5973] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 543.785048][ T3235] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 543.856726][ T5294] Bluetooth: hci3: command tx timeout [ 543.895266][T18761] bridge_slave_1: left allmulticast mode [ 543.896961][T18761] bridge_slave_1: left promiscuous mode [ 543.898690][T18761] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.903454][T18761] bridge_slave_0: left allmulticast mode [ 543.907564][T18761] bridge_slave_0: left promiscuous mode [ 543.912376][T18761] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.942608][ T5973] usb 7-1: Using ep0 maxpacket: 8 [ 543.949155][ T5973] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.952019][ T5973] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 543.963002][ T5973] usb 7-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 543.965649][ T5973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.967814][ T5973] usb 7-1: Product: syz [ 543.968994][ T5973] usb 7-1: Manufacturer: syz [ 543.970978][ T5973] usb 7-1: SerialNumber: syz [ 543.984042][ T5973] usb 7-1: config 0 descriptor?? [ 543.997210][T25123] futex_wake_op: syz.0.6400 tries to shift op by -1; fix this program [ 544.163667][T25126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6400'. [ 544.289017][T25105] futex_wake_op: syz.2.6396 tries to shift op by 32; fix this program [ 544.365886][T25106] usb 41-1: recv xbuf, -104 [ 544.366438][ T5972] usb 7-1: USB disconnect, device number 70 [ 544.368865][ T46] vhci_hcd: stop threads [ 544.371738][ T46] vhci_hcd: release socket [ 544.373992][ T46] vhci_hcd: disconnect device [ 544.443283][ T3235] vhci_hcd: vhci_device speed not set [ 544.827303][T18761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.830929][T18761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.834508][T18761] bond0 (unregistering): Released all slaves [ 544.924434][T18761] bond1 (unregistering): Released all slaves [ 544.928268][T18761] bond2 (unregistering): Released all slaves [ 544.932889][T18761] bond3 (unregistering): Released all slaves [ 544.952210][T25126] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.954804][T25126] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.957242][T25126] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.959682][T25126] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.962189][T25126] vxlan0: entered promiscuous mode [ 545.071130][T18761] tipc: Left network mode [ 545.413146][T25018] veth0_vlan: entered promiscuous mode [ 545.425668][T25018] veth1_vlan: entered promiscuous mode [ 545.463384][T18761] hsr_slave_0: left promiscuous mode [ 545.465313][T18761] hsr_slave_1: left promiscuous mode [ 545.466991][T18761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.469059][T18761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.471285][T18761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.473455][T18761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.496649][T18761] veth1_macvtap: left promiscuous mode [ 545.498239][T18761] veth0_macvtap: left promiscuous mode [ 545.499800][T18761] veth1_vlan: left promiscuous mode [ 545.501271][T18761] veth0_vlan: left promiscuous mode [ 545.542997][T18761] pimreg (unregistering): left allmulticast mode [ 545.932952][ T5294] Bluetooth: hci3: command tx timeout [ 546.835765][T25018] veth0_macvtap: entered promiscuous mode [ 546.849880][T25018] veth1_macvtap: entered promiscuous mode [ 546.871225][T25018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.874706][T25018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.877605][T25018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.880599][T25018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.884078][T25018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.887220][T25018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.889974][T25018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.893083][T25018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.896571][T25018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.913507][T25018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.917165][T25018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.920463][T25018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.923640][T25018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.935852][T25018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.944410][T25018] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.946924][T25018] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.949363][T25018] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.951774][T25018] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.022046][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.026301][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.040935][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.043858][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.313211][T18761] IPVS: stop unused estimator thread 0... [ 548.012725][ T5294] Bluetooth: hci3: command tx timeout [ 548.894754][ T40] kauditd_printk_skb: 500 callbacks suppressed [ 548.894766][ T40] audit: type=1400 audit(3365.828:157261): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 548.902675][ T40] audit: type=1400 audit(3365.828:157262): avc: denied { sendto } for pid=23 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 548.910417][ T40] audit: type=1400 audit(3365.838:157263): avc: denied { read } for pid=5335 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 548.916436][ T40] audit: type=1400 audit(3365.838:157264): avc: denied { search } for pid=5335 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.923977][ T40] audit: type=1400 audit(3365.838:157265): avc: denied { append } for pid=5335 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 548.931661][ T40] audit: type=1400 audit(3365.838:157266): avc: denied { append open } for pid=5335 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 548.939783][ T40] audit: type=1400 audit(3365.838:157267): avc: denied { getattr } for pid=5335 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 549.134809][ T40] audit: type=1400 audit(3366.068:157268): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 549.140751][ T40] audit: type=1400 audit(3366.068:157269): avc: denied { sendto } for pid=23 comm="ksoftirqd/2" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 549.148258][ T40] audit: type=1400 audit(3366.078:157270): avc: denied { read } for pid=5335 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 550.093087][ T5294] Bluetooth: hci3: command tx timeout [ 554.631668][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 554.631685][ T40] audit: type=1400 audit(3371.558:157280): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 554.642109][ T40] audit: type=1400 audit(3371.568:157281): avc: denied { read } for pid=5335 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 554.648319][ T40] audit: type=1400 audit(3371.578:157282): avc: denied { search } for pid=5335 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.654468][ T40] audit: type=1400 audit(3371.578:157283): avc: denied { append } for pid=5335 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 554.660633][ T40] audit: type=1400 audit(3371.578:157284): avc: denied { append open } for pid=5335 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 554.668045][ T40] audit: type=1400 audit(3371.578:157285): avc: denied { getattr } for pid=5335 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 554.679163][ T40] audit: type=1400 audit(3371.608:157286): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 554.688471][ T40] audit: type=1400 audit(3371.608:157287): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 554.695875][ T40] audit: type=1400 audit(3371.608:157288): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 554.704282][ T40] audit: type=1400 audit(3371.608:157289): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 554.762941][T25143] validate_nla: 20 callbacks suppressed [ 554.762952][T25143] netlink: 'syz.0.6402': attribute type 4 has an invalid length. [ 554.767269][T25143] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6402'. [ 554.769873][T25145] kAFS: Can only specify source 'none' with -o dyn [ 554.775044][T25143] : renamed from bond0 (while UP) [ 554.917127][T25151] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6407'. [ 555.094163][T25152] fuse: Bad value for 'user_id' [ 555.095642][T25152] fuse: Bad value for 'user_id' [ 555.185338][T25162] bond0: entered promiscuous mode [ 555.186901][T25162] bond_slave_0: entered promiscuous mode [ 555.189658][T25162] bond_slave_1: entered promiscuous mode [ 555.193148][T25162] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 555.198371][T25162] bond0: left promiscuous mode [ 555.199789][T25162] bond_slave_0: left promiscuous mode [ 555.201360][T25162] bond_slave_1: left promiscuous mode [ 555.404295][T25180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6415'. [ 555.476673][T25187] netlink: 172 bytes leftover after parsing attributes in process `syz.6.6413'. [ 555.558340][T25199] net_ratelimit: 23 callbacks suppressed [ 555.558350][T25199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.751168][T25206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6419'. [ 555.757561][T25205] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6421'. [ 555.866504][T25218] netlink: 'syz.5.6425': attribute type 1 has an invalid length. [ 556.192920][ T5995] usb 11-1: new high-speed USB device number 33 using dummy_hcd [ 556.348134][ T5995] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 556.351766][ T5995] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 556.354726][ T5995] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 556.357305][ T5995] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.365550][T25226] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 556.369900][ T5995] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 556.582280][ T6029] usb 11-1: USB disconnect, device number 33 [ 556.657188][ T5995] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 556.826258][ T5995] usb 10-1: Using ep0 maxpacket: 16 [ 556.837216][ T5995] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 556.840483][ T5995] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 556.861067][ T5995] usb 10-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 556.864310][ T5995] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.872597][ T5995] usb 10-1: Product: syz [ 556.874298][ T5995] usb 10-1: Manufacturer: syz [ 556.875735][ T5995] usb 10-1: SerialNumber: syz [ 556.887631][ T5995] usb 10-1: config 0 descriptor?? [ 557.111308][T25240] ./bus: Can't lookup blockdev [ 557.162896][ T5995] appledisplay 10-1:0.0: Error while getting initial brightness: -110 [ 557.170133][ T5995] appledisplay 10-1:0.0: probe with driver appledisplay failed with error -110 [ 557.181627][T25240] bridge1: entered promiscuous mode [ 557.185603][T25240] bridge1: entered allmulticast mode [ 557.190668][ T6029] usb 10-1: USB disconnect, device number 28 [ 557.762091][T25255] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6436'. [ 557.768370][T25255] openvswitch: netlink: IP tunnel TTL not specified. [ 557.810220][T25257] tipc: Enabled bearer , priority 0 [ 557.814120][T25256] tipc: Disabling bearer [ 558.230949][T25276] netlink: 'syz.0.6442': attribute type 62 has an invalid length. [ 558.370383][T25281] could not allocate digest TFM handle workdir=./bus,lowerdir=./file0,upperdir=./file1,verity=on, [ 558.462568][T25291] tipc: Started in network mode [ 558.464060][T25291] tipc: Node identity da682a8e0d2, cluster identity 4711 [ 558.466103][T25291] tipc: Enabled bearer , priority 0 [ 558.477097][T25290] tipc: Disabling bearer [ 558.605153][T25294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.037377][T25316] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6454'. [ 559.040449][T25316] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6454'. [ 559.438726][T25339] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 559.441669][T25339] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 559.452758][T25339] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 559.456214][T25339] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 559.460360][T25339] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 559.464743][T25339] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 559.626719][ T1253] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.629843][ T1253] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 559.655774][ T40] kauditd_printk_skb: 1330 callbacks suppressed [ 559.655785][ T40] audit: type=1400 audit(3376.588:158620): avc: denied { recv } for pid=5850 comm="syz-executor" saddr=127.0.0.1 src=59118 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 559.669463][ T40] audit: type=1400 audit(3376.588:158621): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 559.680403][ T40] audit: type=1400 audit(3376.598:158622): avc: denied { read write } for pid=25018 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 559.691460][ T40] audit: type=1400 audit(3376.598:158623): avc: denied { read write open } for pid=25018 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 559.704453][ T40] audit: type=1400 audit(3376.598:158624): avc: denied { ioctl } for pid=25018 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 559.711301][ T40] audit: type=1400 audit(3376.608:158625): avc: denied { module_request } for pid=25337 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 559.717685][ T40] audit: type=1400 audit(3376.638:158626): avc: denied { recv } for pid=5342 comm="klogd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59118 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 559.724442][ T40] audit: type=1400 audit(3376.638:158627): avc: denied { recv } for pid=5342 comm="klogd" saddr=127.0.0.1 src=59118 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 559.730796][ T40] audit: type=1400 audit(3376.638:158628): avc: denied { recv } for pid=5342 comm="klogd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59118 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 559.737590][ T40] audit: type=1400 audit(3376.648:158629): avc: denied { recv } for pid=25346 comm="modprobe" saddr=10.0.2.2 src=46196 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 559.747248][ T1253] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.750136][ T1253] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 559.816817][T25337] chnl_net:caif_netlink_parms(): no params data found [ 559.856827][ T1253] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.859834][ T1253] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 559.892039][T25337] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.896373][T25337] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.898394][T25337] bridge_slave_0: entered allmulticast mode [ 559.900493][T25337] bridge_slave_0: entered promiscuous mode [ 559.926588][ T1253] ================================================================== [ 559.928745][ T1253] BUG: KASAN: slab-use-after-free in mini_qdisc_pair_swap+0x19d/0x1f0 [ 559.930958][ T1253] Read of size 8 at addr ffff888056d28000 by task kworker/u32:11/1253 [ 559.933708][ T1253] [ 559.934959][ T1253] CPU: 3 UID: 0 PID: 1253 Comm: kworker/u32:11 Not tainted 6.14.0-syzkaller-03565-gf6e0150b2003 #0 PREEMPT(full) [ 559.934973][ T1253] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 559.934980][ T1253] Workqueue: netns cleanup_net [ 559.934992][ T1253] Call Trace: [ 559.934996][ T1253] SYZFAIL: failed to recv rpc [ 559.935001][ T1253] dump_stack_lvl+0x116/0x1f0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 559.935017][ T1253] print_report+0xc3/0x670 [ 559.935028][ T1253] ? __virt_addr_valid+0x5e/0x590 [ 559.935042][ T1253] ? __phys_addr+0xc6/0x150 [ 559.935055][ T1253] ? mini_qdisc_pair_swap+0x19d/0x1f0 [ 559.935066][ T1253] kasan_report+0xe0/0x110 [ 559.935076][ T1253] ? mini_qdisc_pair_swap+0x19d/0x1f0 [ 559.935088][ T1253] mini_qdisc_pair_swap+0x19d/0x1f0 [ 559.935099][ T1253] ? __pfx_clsact_chain_head_change+0x10/0x10 [ 559.935116][ T1253] ? __pfx_clsact_chain_head_change+0x10/0x10 [ 559.935132][ T1253] tcf_chain0_head_change_cb_del+0x1a5/0x3e0 [ 559.935146][ T1253] tcf_block_put_ext+0xb4/0x1c0 [ 559.935160][ T1253] clsact_destroy+0x2c0/0x9b0 [ 559.935169][ T1253] ? __pfx_clsact_destroy+0x10/0x10 [ 559.935178][ T1253] __qdisc_destroy+0x106/0x4a0 [ 559.935444][ T1253] qdisc_put+0xab/0xe0 [ 559.935455][ T1253] shutdown_scheduler_queue+0xa5/0x160 [ 559.935467][ T1253] dev_shutdown+0x175/0x430 [ 559.935480][ T1253] unregister_netdevice_many_notify+0x9ec/0x1fa0 [ 559.935498][ T1253] ? __pfx___mutex_trylock_common+0x10/0x10 [ 559.935514][ T1253] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 559.935530][ T1253] ? __pfx___might_resched+0x10/0x10 [ 559.935543][ T1253] ? rcu_is_watching+0x12/0xc0 [ 559.935553][ T1253] ? __mutex_lock+0x1cb/0xb00 [ 559.935568][ T1253] ? do_raw_spin_unlock+0x172/0x230 [ 559.935583][ T1253] ? nsim_destroy+0x9d/0x710 [ 559.935595][ T1253] ? __pfx___mutex_lock+0x10/0x10 [ 559.935610][ T1253] unregister_netdevice_queue+0x305/0x3f0 [ 559.935619][ T1253] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 559.935631][ T1253] nsim_destroy+0x135/0x710 [ 559.935642][ T1253] ? kfree+0x2b6/0x4d0 [ 559.935657][ T1253] __nsim_dev_port_del+0x189/0x240 [ 559.935670][ T1253] nsim_dev_reload_destroy+0x10a/0x4d0 [ 559.935684][ T1253] nsim_dev_reload_down+0x6e/0xd0 [ 559.935698][ T1253] devlink_reload+0x19e/0x7c0 [ 559.935709][ T1253] ? __pfx_devlink_reload+0x10/0x10 [ 559.935720][ T1253] devlink_pernet_pre_exit+0x1a0/0x2b0 [ 559.935735][ T1253] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 559.935749][ T1253] ? up_write+0x1b2/0x520 [ 559.935764][ T1253] ? kobject_put+0xab/0x5a0 [ 559.935779][ T1253] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 559.935793][ T1253] cleanup_net+0x494/0xb30 [ 559.935803][ T1253] ? __pfx_cleanup_net+0x10/0x10 [ 559.935813][ T1253] ? rcu_is_watching+0x12/0xc0 [ 559.935823][ T1253] process_one_work+0x9cc/0x1b70 [ 559.935835][ T1253] ? __pfx_batadv_nc_worker+0x10/0x10 [ 559.935851][ T1253] ? __pfx_process_one_work+0x10/0x10 [ 559.935863][ T1253] ? assign_work+0x1a0/0x250 [ 559.935882][ T1253] worker_thread+0x6c1/0xef0 [ 559.935893][ T1253] ? __kthread_parkme+0x148/0x220 [ 559.935906][ T1253] ? __pfx_worker_thread+0x10/0x10 [ 559.935916][ T1253] kthread+0x3a4/0x760 [ 559.935931][ T1253] ? __pfx_kthread+0x10/0x10 [ 559.935945][ T1253] ? __pfx_kthread+0x10/0x10 [ 559.935960][ T1253] ? __pfx_kthread+0x10/0x10 [ 559.935974][ T1253] ? __pfx_kthread+0x10/0x10 [ 559.935988][ T1253] ? rcu_is_watching+0x12/0xc0 [ 559.935997][ T1253] ? __pfx_kthread+0x10/0x10 [ 559.936012][ T1253] ret_from_fork+0x45/0x80 [ 559.936022][ T1253] ? __pfx_kthread+0x10/0x10 [ 559.936036][ T1253] ret_from_fork_asm+0x1a/0x30 [ 559.936053][ T1253] [ 559.936057][ T1253] [ 559.951797][T25353] fuse: Bad value for 'fd' [ 559.952425][ T1253] Allocated by task 25274: [ 559.952433][ T1253] kasan_save_stack+0x33/0x60 [ 560.036426][ T1253] kasan_save_track+0x14/0x30 [ 560.037670][ T1253] __kasan_kmalloc+0xaa/0xb0 [ 560.038939][ T1253] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 560.040593][ T1253] kmalloc_reserve+0xef/0x2c0 [ 560.041834][ T1253] __alloc_skb+0x166/0x380 [ 560.042984][ T1253] audit_log_start+0x2e0/0x7d0 [ 560.044254][ T1253] common_lsm_audit+0xe8/0x22b0 [ 560.045626][ T1253] slow_avc_audit+0x186/0x210 [ 560.046958][ T1253] avc_has_perm+0x18b/0x1c0 [ 560.048226][ T1253] selinux_socket_sock_rcv_skb+0x43f/0x720 [ 560.049872][ T1253] security_sock_rcv_skb+0x1e3/0x210 [ 560.051350][ T1253] sk_filter_trim_cap+0xd1/0xac0 [ 560.052737][ T1253] tcp_v4_rcv+0x28ff/0x4390 [ 560.054035][ T1253] ip_protocol_deliver_rcu+0xba/0x4c0 [ 560.055528][ T1253] ip_local_deliver_finish+0x316/0x570 [ 560.057072][ T1253] ip_local_deliver+0x18e/0x1f0 [ 560.058437][ T1253] ip_sublist_rcv_finish+0x2c1/0x620 [ 560.059927][ T1253] ip_list_rcv_finish+0x552/0x720 [ 560.061340][ T1253] ip_list_rcv+0x335/0x450 [ 560.062591][ T1253] __netif_receive_skb_list_core+0x752/0x950 [ 560.064239][ T1253] netif_receive_skb_list_internal+0x752/0xdb0 [ 560.066231][ T1253] napi_gro_receive+0x9ff/0xc40 [ 560.067605][ T1253] e1000_clean_rx_irq+0x6b0/0x1160 [ 560.069048][ T1253] e1000_clean+0x9c8/0x2670 [ 560.070322][ T1253] __napi_poll.constprop.0+0xb7/0x550 [ 560.071812][ T1253] net_rx_action+0xa97/0x1010 [ 560.073152][ T1253] handle_softirqs+0x216/0x8e0 [ 560.074504][ T1253] __irq_exit_rcu+0x109/0x170 [ 560.075819][ T1253] irq_exit_rcu+0x9/0x30 [ 560.077039][ T1253] common_interrupt+0xbf/0xe0 [ 560.078365][ T1253] asm_common_interrupt+0x26/0x40 [ 560.079780][ T1253] [ 560.080486][ T1253] Freed by task 40: [ 560.081572][ T1253] kasan_save_stack+0x33/0x60 [ 560.082893][ T1253] kasan_save_track+0x14/0x30 [ 560.084209][ T1253] kasan_save_free_info+0x3b/0x60 [ 560.085609][ T1253] __kasan_slab_free+0x51/0x70 [ 560.086868][ T1253] kfree+0x2b6/0x4d0 [ 560.087960][ T1253] skb_free_head+0x108/0x1d0 [ 560.089260][ T1253] skb_release_data+0x56d/0x740 [ 560.090627][ T1253] sk_skb_reason_drop+0x129/0x1a0 [ 560.092016][ T1253] kauditd_hold_skb+0x13f/0x250 [ 560.093383][ T1253] kauditd_send_queue+0x236/0x290 [ 560.094802][ T1253] kauditd_thread+0x623/0xa70 [ 560.096153][ T1253] kthread+0x3a4/0x760 [ 560.097326][ T1253] ret_from_fork+0x45/0x80 [ 560.098581][ T1253] ret_from_fork_asm+0x1a/0x30 [ 560.099930][ T1253] [ 560.100609][ T1253] The buggy address belongs to the object at ffff888056d28000 [ 560.100609][ T1253] which belongs to the cache kmalloc-2k of size 2048 [ 560.104513][ T1253] The buggy address is located 0 bytes inside of [ 560.104513][ T1253] freed 2048-byte region [ffff888056d28000, ffff888056d28800) [ 560.108080][ T1253] [ 560.108734][ T1253] The buggy address belongs to the physical page: [ 560.110443][ T1253] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56d28 [ 560.112735][ T1253] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 560.114902][ T1253] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 560.116802][ T1253] page_type: f5(slab) [ 560.117844][ T1253] raw: 00fff00000000040 ffff88801b442f00 ffffea0000968a00 dead000000000002 [ 560.120086][ T1253] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 560.122411][ T1253] head: 00fff00000000040 ffff88801b442f00 ffffea0000968a00 dead000000000002 [ 560.124714][ T1253] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 560.126887][ T1253] head: 00fff00000000003 ffffea00015b4a01 ffffffffffffffff 0000000000000000 [ 560.129116][ T1253] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 560.131436][ T1253] page dumped because: kasan: bad access detected [ 560.133209][ T1253] page_owner tracks the page as allocated [ 560.134789][ T1253] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12100, tgid 12100 (syz-executor), ts 247416285127, free_ts 247316791527 [ 560.140642][ T1253] post_alloc_hook+0x181/0x1b0 [ 560.141996][ T1253] get_page_from_freelist+0x10c4/0x34c0 [ 560.143510][ T1253] __alloc_frozen_pages_noprof+0x223/0x24d0 [ 560.145158][ T1253] alloc_pages_mpol+0x1fb/0x540 [ 560.146530][ T1253] new_slab+0x23c/0x330 [ 560.147722][ T1253] ___slab_alloc+0xd9c/0x1940 [ 560.149056][ T1253] __slab_alloc.constprop.0+0x56/0xb0 [ 560.150552][ T1253] __kmalloc_cache_noprof+0xfb/0x3e0 [ 560.152032][ T1253] device_create_groups_vargs+0x8a/0x270 [ 560.153648][ T1253] device_create+0xed/0x130 [ 560.154926][ T1253] mac80211_hwsim_new_radio+0x369/0x54b0 [ 560.156549][ T1253] hwsim_new_radio_nl+0xb51/0x12c0 [ 560.157981][ T1253] genl_family_rcv_msg_doit+0x206/0x2f0 [ 560.159570][ T1253] genl_rcv_msg+0x55c/0x800 [ 560.160827][ T1253] netlink_rcv_skb+0x16a/0x440 [ 560.162200][ T1253] genl_rcv+0x28/0x40 [ 560.163350][ T1253] page last free pid 12100 tgid 12100 stack trace: [ 560.165197][ T1253] free_frozen_pages+0x6d8/0xf40 [ 560.166601][ T1253] __put_partials+0x16d/0x1c0 [ 560.167931][ T1253] qlist_free_all+0x4e/0x120 [ 560.169243][ T1253] kasan_quarantine_reduce+0x195/0x1e0 [ 560.170763][ T1253] __kasan_slab_alloc+0x69/0x90 [ 560.172119][ T1253] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 560.173804][ T1253] __alloc_skb+0x2b2/0x380 [ 560.175070][ T1253] netlink_alloc_large_skb+0x69/0x130 [ 560.176579][ T1253] netlink_sendmsg+0x694/0xd70 [ 560.177931][ T1253] __sys_sendto+0x495/0x510 [ 560.179153][ T1253] __x64_sys_sendto+0xe0/0x1c0 [ 560.180469][ T1253] do_syscall_64+0xcd/0x260 [ 560.181748][ T1253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.183352][ T1253] [ 560.184008][ T1253] Memory state around the buggy address: [ 560.185523][ T1253] ffff888056d27f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 560.187734][ T1253] ffff888056d27f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 560.189946][ T1253] >ffff888056d28000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 560.192158][ T1253] ^ [ 560.193316][ T1253] ffff888056d28080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 560.195542][ T1253] ffff888056d28100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 560.197770][ T1253] ================================================================== [ 560.207775][ T1253] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 560.209809][ T1253] CPU: 3 UID: 0 PID: 1253 Comm: kworker/u32:11 Not tainted 6.14.0-syzkaller-03565-gf6e0150b2003 #0 PREEMPT(full) [ 560.213055][ T1253] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 560.216036][ T1253] Workqueue: netns cleanup_net [ 560.217407][ T1253] Call Trace: [ 560.218368][ T1253] [ 560.219218][ T1253] dump_stack_lvl+0x3d/0x1f0 [ 560.220535][ T1253] panic+0x71c/0x800 [ 560.221639][ T1253] ? __pfx_panic+0x10/0x10 [ 560.222901][ T1253] ? mark_held_locks+0x49/0x80 [ 560.224283][ T1253] ? preempt_schedule_thunk+0x16/0x30 [ 560.226025][ T1253] ? mini_qdisc_pair_swap+0x19d/0x1f0 [ 560.227551][ T1253] ? preempt_schedule_common+0x44/0xc0 [ 560.229082][ T1253] ? check_panic_on_warn+0x1f/0xb0 [ 560.230556][ T1253] ? mini_qdisc_pair_swap+0x19d/0x1f0 [ 560.232050][ T1253] check_panic_on_warn+0xab/0xb0 [ 560.233457][ T1253] end_report+0x107/0x170 [ 560.234677][ T1253] kasan_report+0xee/0x110 [ 560.235954][ T1253] ? mini_qdisc_pair_swap+0x19d/0x1f0 [ 560.237449][ T1253] mini_qdisc_pair_swap+0x19d/0x1f0 [ 560.238904][ T1253] ? __pfx_clsact_chain_head_change+0x10/0x10 [ 560.240599][ T1253] ? __pfx_clsact_chain_head_change+0x10/0x10 [ 560.242312][ T1253] tcf_chain0_head_change_cb_del+0x1a5/0x3e0 [ 560.243901][ T1253] tcf_block_put_ext+0xb4/0x1c0 [ 560.245311][ T1253] clsact_destroy+0x2c0/0x9b0 [ 560.246574][ T1253] ? __pfx_clsact_destroy+0x10/0x10 [ 560.247971][ T1253] __qdisc_destroy+0x106/0x4a0 [ 560.249276][ T1253] qdisc_put+0xab/0xe0 [ 560.250402][ T1253] shutdown_scheduler_queue+0xa5/0x160 [ 560.251848][ T1253] dev_shutdown+0x175/0x430 [ 560.253059][ T1253] unregister_netdevice_many_notify+0x9ec/0x1fa0 [ 560.254772][ T1253] ? __pfx___mutex_trylock_common+0x10/0x10 [ 560.256348][ T1253] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 560.258104][ T1253] ? __pfx___might_resched+0x10/0x10 [ 560.259484][ T1253] ? rcu_is_watching+0x12/0xc0 [ 560.260729][ T1253] ? __mutex_lock+0x1cb/0xb00 [ 560.262060][ T1253] ? do_raw_spin_unlock+0x172/0x230 [ 560.263497][ T1253] ? nsim_destroy+0x9d/0x710 [ 560.264736][ T1253] ? __pfx___mutex_lock+0x10/0x10 [ 560.266156][ T1253] unregister_netdevice_queue+0x305/0x3f0 [ 560.267686][ T1253] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 560.269352][ T1253] nsim_destroy+0x135/0x710 [ 560.270608][ T1253] ? kfree+0x2b6/0x4d0 [ 560.271738][ T1253] __nsim_dev_port_del+0x189/0x240 [ 560.273097][ T1253] nsim_dev_reload_destroy+0x10a/0x4d0 [ 560.274547][ T1253] nsim_dev_reload_down+0x6e/0xd0 [ 560.275949][ T1253] devlink_reload+0x19e/0x7c0 [ 560.277279][ T1253] ? __pfx_devlink_reload+0x10/0x10 [ 560.278734][ T1253] devlink_pernet_pre_exit+0x1a0/0x2b0 [ 560.280255][ T1253] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 560.281926][ T1253] ? up_write+0x1b2/0x520 [ 560.283136][ T1253] ? kobject_put+0xab/0x5a0 [ 560.284410][ T1253] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 560.286072][ T1253] cleanup_net+0x494/0xb30 [ 560.287317][ T1253] ? __pfx_cleanup_net+0x10/0x10 [ 560.288693][ T1253] ? rcu_is_watching+0x12/0xc0 [ 560.290255][ T1253] process_one_work+0x9cc/0x1b70 [ 560.291903][ T1253] ? __pfx_batadv_nc_worker+0x10/0x10 [ 560.293412][ T1253] ? __pfx_process_one_work+0x10/0x10 [ 560.294889][ T1253] ? assign_work+0x1a0/0x250 [ 560.296184][ T1253] worker_thread+0x6c1/0xef0 [ 560.297482][ T1253] ? __kthread_parkme+0x148/0x220 [ 560.298878][ T1253] ? __pfx_worker_thread+0x10/0x10 [ 560.300282][ T1253] kthread+0x3a4/0x760 [ 560.301413][ T1253] ? __pfx_kthread+0x10/0x10 [ 560.302704][ T1253] ? __pfx_kthread+0x10/0x10 [ 560.303995][ T1253] ? __pfx_kthread+0x10/0x10 [ 560.305317][ T1253] ? __pfx_kthread+0x10/0x10 [ 560.306613][ T1253] ? rcu_is_watching+0x12/0xc0 [ 560.307938][ T1253] ? __pfx_kthread+0x10/0x10 [ 560.309246][ T1253] ret_from_fork+0x45/0x80 [ 560.310514][ T1253] ? __pfx_kthread+0x10/0x10 [ 560.311806][ T1253] ret_from_fork_asm+0x1a/0x30 [ 560.313161][ T1253] [ 560.314608][ T1253] Kernel Offset: disabled [ 560.315816][ T1253] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:38:24 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000006 RBX=ffffffff9ac2a508 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff8dbb055f RDI=ffffffff8bf370e0 RBP=0000000000000206 RSP=ffffc900000071d8 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff90825417 R11=0000000000000000 R12=0000000000000001 R13=ffffffff9ac2a508 R14=0000000000000152 R15=0000000000000001 RIP=ffffffff8b60a5d4 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007feb75698d00 ffffffff 00c00000 GS =0000 ffff8880d6a54000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f246727e440 CR3=0000000028f62000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000015 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=10bb27b463f52992 feef5c079aeabb28 10bb27b463f52992 feef5c079aeabb28 10bb27b463f52992 feef5c079aeabb28 10bb27b463f52992 feef5c079aeabb28 ZMM18=d38b6432b47187f0 a19f9a82ab371c8e d38b6432b47187f0 a19f9a82ab371c8e d38b6432b47187f0 a19f9a82ab371c8e d38b6432b47187f0 a19f9a82ab371c8e ZMM19=291c000000000000 00000000000000b6 291c000000000000 00000000000000b5 291c000000000000 00000000000000b4 291c000000000000 00000000000000b3 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=feef5c07feef5c07 feef5c07feef5c07 feef5c07feef5c07 feef5c07feef5c07 feef5c07feef5c07 feef5c07feef5c07 feef5c07feef5c07 feef5c07feef5c07 ZMM22=63f5299263f52992 63f5299263f52992 63f5299263f52992 63f5299263f52992 63f5299263f52992 63f5299263f52992 63f5299263f52992 63f5299263f52992 ZMM23=10bb27b410bb27b4 10bb27b410bb27b4 10bb27b410bb27b4 10bb27b410bb27b4 10bb27b410bb27b4 10bb27b410bb27b4 10bb27b410bb27b4 10bb27b410bb27b4 ZMM24=ab371c8eab371c8e ab371c8eab371c8e ab371c8eab371c8e ab371c8eab371c8e ab371c8eab371c8e ab371c8eab371c8e ab371c8eab371c8e ab371c8eab371c8e ZMM25=a19f9a82a19f9a82 a19f9a82a19f9a82 a19f9a82a19f9a82 a19f9a82a19f9a82 a19f9a82a19f9a82 a19f9a82a19f9a82 a19f9a82a19f9a82 a19f9a82a19f9a82 ZMM26=b47187f0b47187f0 b47187f0b47187f0 b47187f0b47187f0 b47187f0b47187f0 b47187f0b47187f0 b47187f0b47187f0 b47187f0b47187f0 b47187f0b47187f0 ZMM27=d38b6432d38b6432 d38b6432d38b6432 d38b6432d38b6432 d38b6432d38b6432 d38b6432d38b6432 d38b6432d38b6432 d38b6432d38b6432 d38b6432d38b6432 ZMM28=000000c0000000bf 000000be000000bd 000000bc000000bb 000000ba000000b9 000000b8000000b7 000000b6000000b5 000000b4000000b3 000000b2000000b1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=291c0000291c0000 291c0000291c0000 291c0000291c0000 291c0000291c0000 291c0000291c0000 291c0000291c0000 291c0000291c0000 291c0000291c0000 info registers vcpu 1 CPU#1 RAX=0000000000000006 RBX=ffffffff9ac2a648 RCX=ffffffff81c2c5bf RDX=0000000000000000 RSI=ffffffff8dbb055f RDI=ffffffff8bf370e0 RBP=0000000000000202 RSP=ffffc900060cf6b0 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff90825417 R11=0000000000000000 R12=0000000000000001 R13=ffffffff9ac2a648 R14=000000000000003b R15=0000000000000001 RIP=ffffffff8b60a5b1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ffadbe826c0 ffffffff 00c00000 GS =0000 ffff8880d6b54000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffadbe81f98 CR3=000000004bf34000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffadb00f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffadb00f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffadb00f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffadb00f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffadb00f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffadb00f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffadb17c488 00007ffadb17c480 00007ffadb17c478 00007ffadb17c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffadbcdd100 00007ffadb17c440 00007ffadb17c458 00007ffadb17c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffadb17c498 00007ffadb17c490 00007ffadb17c488 00007ffadb17c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000000 0000000000000000 00000000000001d0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000004 RBX=0000000000000002 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8dca0188 RDI=ffffffff8bf370e0 RBP=ffff88806a539d98 RSP=ffffc90006cf7518 R8 =0000000000000000 R9 =0000000000000001 R10=ffff88804e6370f7 R11=0000000000000000 R12=ffff8880539b4880 R13=ffff8880539b5370 R14=00000000ffffffff R15=0000000000000000 RIP=ffffffff8b5e1a9d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ffadbea36c0 ffffffff 00c00000 GS =0000 ffff8880d6c54000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f98c08d7d60 CR3=000000004bf34000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000005bcd78a3 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffadb00f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffadb00f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffadb00f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffadb00f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffadb00f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffadb00f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffadb17c488 00007ffadb17c480 00007ffadb17c478 00007ffadb17c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffadbcdd100 00007ffadb17c440 00007ffadb17c458 00007ffadb17c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffadb17c498 00007ffadb17c490 00007ffadb17c488 00007ffadb17c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000000 0000000000000000 00000000000001d0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000005 RBX=00000000000000de RCX=0000000000000006 RDX=0000000000000000 RSI=ffffffff81af698a RDI=ffffffff8d6306ac RBP=ffffffff8d2bc005 RSP=ffffc900063368c8 R8 =0000000000000005 R9 =0000000000000000 R10=000000000000000a R11=00000000000866b9 R12=0000000000000000 R13=ffffc90006336ab0 R14=0000000000000200 R15=dffffc0000000000 RIP=ffffffff81af69d1 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6d54000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c24b31f CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000005bcd78a3 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004003000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe66cbd5c0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20306873653a665f 6d656e2032323a74 5f65642035312e32 2e302e30313d6364 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000