last executing test programs: 3m38.449826994s ago: executing program 2 (id=226): ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000300)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x44}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000000000000000000000f500860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 3m38.310107675s ago: executing program 2 (id=227): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @empty, 0x1}, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001de7efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x50, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x400, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6c}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x21}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x11}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xbaa4}]}, 0x50}}, 0x0) prlimit64(0x0, 0xc, 0x0, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x3333c000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) recvmmsg(r6, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x10001, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}]}, 0x34}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000900"/20, @ANYRES32=r10, @ANYBLOB="0400010001280200080028007a4b0000"], 0x28}}, 0x4) 3m38.120618601s ago: executing program 2 (id=230): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3m38.120213506s ago: executing program 2 (id=232): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0xa) 3m38.018357247s ago: executing program 2 (id=233): socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x28, 0x5, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pipe(&(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x300}, 0x20) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r4, &(0x7f00000000c0)=ANY=[@ANYRES16=r3], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',posixacl']) 3m37.770280767s ago: executing program 2 (id=237): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="100027bd7000fddbdf25120000001400018008000300f2fd000008000300a2000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='t\tans=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000280)={r6, 0xb3, "5f5d415bf455f8c0e5f1190fc4c6ed456d7a82aa3afc3203142159a07a436058c46d50e0bd451d7d326308d7cbde8e1a0dc9b6b3a408ed46562ead9c094c09e6cf9b0a15281d74476e07b67c37748f4477c2b31389796b248fcd5944ff2a5b8881fc58eed8ff7fd3356b17abcd6ca288d54e543e196466e4e5bd14588b42da766d65c18111de96a7b84fa99fc7924766c75ea88af34751a310e001b37dfc63030bb974f2dc6d5fceeffe4d8b193ef881a27299"}, &(0x7f00000001c0)=0xbb) pipe2$9p(&(0x7f0000000000), 0x4880) 3m37.747361521s ago: executing program 32 (id=237): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="100027bd7000fddbdf25120000001400018008000300f2fd000008000300a2000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='t\tans=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000280)={r6, 0xb3, "5f5d415bf455f8c0e5f1190fc4c6ed456d7a82aa3afc3203142159a07a436058c46d50e0bd451d7d326308d7cbde8e1a0dc9b6b3a408ed46562ead9c094c09e6cf9b0a15281d74476e07b67c37748f4477c2b31389796b248fcd5944ff2a5b8881fc58eed8ff7fd3356b17abcd6ca288d54e543e196466e4e5bd14588b42da766d65c18111de96a7b84fa99fc7924766c75ea88af34751a310e001b37dfc63030bb974f2dc6d5fceeffe4d8b193ef881a27299"}, &(0x7f00000001c0)=0xbb) pipe2$9p(&(0x7f0000000000), 0x4880) 3m21.278036403s ago: executing program 3 (id=529): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket(0x11, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = dup3(r0, r1, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_deladdrlabel={0x90, 0x49, 0x10, 0x1, 0x25dfdbfc, {0xa, 0x0, 0x78, 0x0, 0x0, 0x7fff}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006126000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdedb2150e1918c30b6301f0212feb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9cc7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dcac2563e1c1e7624cc3b88b330ad416c4c1d8c60589b6045a4ffff50df4d34bc5847bebb943a84cb56956931ba9cc39c4a9deea5d77aa843a40000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3m21.228331208s ago: executing program 3 (id=532): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000900)=@sack_info={0x0, 0x0, 0x40}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xfffc, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 3m21.226208797s ago: executing program 3 (id=533): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x5, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x94001, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000004c0)) sendmmsg$sock(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x18}}], 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sendto$packet(r2, &(0x7f0000000080)="0b841000e0ff020002004788aa96a13bb1000000000088641102", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x16, r4, 0x1, 0x40, 0x6, @multicast}, 0x14) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000f5000040"]) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3m21.050306322s ago: executing program 3 (id=536): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_VERSION={0x5, 0x6, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008090}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fstat(r4, &(0x7f0000000180)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b70500000000000061103000000000000fa000000000000095000000000000001f495ff727520cccddfad6fab92a770b445d050000006edc1b5613c5e35079725d19e88b662c2596b2f0b40aa9de45cf931a7ddaae7bdd97a9787684a5a6bbe879d6561715a194eb15d509b1837f6d317d12dd2c98f05e43aa14b3655a78009367bac65148a671b0ffd1c946b31202b7c73e0f1c5df29d57ed708602599a04fde318753c358d42ba7c52b4e20bc5c0e91fbc96da558c38891cd5bc38b6db9863a1273811976d15ba39fe2700"/218], &(0x7f00000002c0)='GPL\x00', 0x5, 0x9e, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0xfffffffffffffe21, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x44, r5, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x0, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0xfffffd8d, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x40000) 3m21.048385898s ago: executing program 3 (id=538): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000903bfffffffffffffff2000000180000000000000029000000040000003a0000000000000032616a132a47173797488ddafb114ca335a1623d91f2933223ed25138bb832425b9b3fc49e88172d3cdbda0e8ed926084e112af46165efe812774d98"], 0x30}, 0x20000004) 3m20.788486554s ago: executing program 3 (id=545): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) setreuid(0xee01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='fdinfo/4\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) setreuid(0x0, r5) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$MRT6_PIM(r4, 0x29, 0xcf, &(0x7f0000000500)=0x3, 0x4) setuid(0x0) keyctl$chown(0x4, r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="a4010010", @ANYRES16=r3, @ANYBLOB="200027bd7000fcdbdf254400000008000300", @ANYRES32=r7, @ANYBLOB="08000c000000000078015a8078000380140003000e0000800700070009000500ff7f010014000300eb00050007000400090009000500ff03050001000c000000420002004a33441e553930304c0426134f422b313336500e120d54403a5304461820303c544a0527500c4b29181f2e4850443d21132b024c2252251e430a3d395424000068000180050006000200000005000700000000001300010060120736040101056c09001818300c003600020005192c1d30152f0a54011f3d410a2f1b4c07303307461d0c283e242528142d1213535034153f554b14523c022055181a29650000050007000100000014000180050007000100000005000400020000006c0002801400030008000400dbf406000100fc1f00fe0800490002003048084b404557451f4a1842181e16143a090821224329450820461303052d5726051340292f49051c2b3230073b193b031b3509440229200b083a3c4418211642494c40050000000500060000000000140002800d0002004e0f4f11112948481b00000008006b0038b70642"], 0x1a4}, 0x1, 0x0, 0x0, 0x40080}, 0x4) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) openat(r8, &(0x7f0000000240)='./file0\x00', 0x200442, 0x144) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="c03f03003300ec34d25a806c8c0000000001fc6010c2082ed1e97f6c36b08dc137050002ce160000000000000000eb742667985a8c0c27023c0429b94401150feeb90011a9682a784dca11c9e2e742910dfd81198701a6a0272022e345ee82984daa0f2e782b8c5887149297519648128132e3d955e0de19448d4d9372deffc772a3086c262e96fc284bdeb9f2b51019ce49b51ac35d5eb8c9c50fe254831f0f5b6d2a6d593e7b177832c5282249cb430f", 0x2e}], 0x1, 0x0, 0xfffffc6a}, 0x4004840) 3m20.737383447s ago: executing program 33 (id=545): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) setreuid(0xee01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='fdinfo/4\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) setreuid(0x0, r5) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$MRT6_PIM(r4, 0x29, 0xcf, &(0x7f0000000500)=0x3, 0x4) setuid(0x0) keyctl$chown(0x4, r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="a4010010", @ANYRES16=r3, @ANYBLOB="200027bd7000fcdbdf254400000008000300", @ANYRES32=r7, @ANYBLOB="08000c000000000078015a8078000380140003000e0000800700070009000500ff7f010014000300eb00050007000400090009000500ff03050001000c000000420002004a33441e553930304c0426134f422b313336500e120d54403a5304461820303c544a0527500c4b29181f2e4850443d21132b024c2252251e430a3d395424000068000180050006000200000005000700000000001300010060120736040101056c09001818300c003600020005192c1d30152f0a54011f3d410a2f1b4c07303307461d0c283e242528142d1213535034153f554b14523c022055181a29650000050007000100000014000180050007000100000005000400020000006c0002801400030008000400dbf406000100fc1f00fe0800490002003048084b404557451f4a1842181e16143a090821224329450820461303052d5726051340292f49051c2b3230073b193b031b3509440229200b083a3c4418211642494c40050000000500060000000000140002800d0002004e0f4f11112948481b00000008006b0038b70642"], 0x1a4}, 0x1, 0x0, 0x0, 0x40080}, 0x4) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) openat(r8, &(0x7f0000000240)='./file0\x00', 0x200442, 0x144) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="c03f03003300ec34d25a806c8c0000000001fc6010c2082ed1e97f6c36b08dc137050002ce160000000000000000eb742667985a8c0c27023c0429b94401150feeb90011a9682a784dca11c9e2e742910dfd81198701a6a0272022e345ee82984daa0f2e782b8c5887149297519648128132e3d955e0de19448d4d9372deffc772a3086c262e96fc284bdeb9f2b51019ce49b51ac35d5eb8c9c50fe254831f0f5b6d2a6d593e7b177832c5282249cb430f", 0x2e}], 0x1, 0x0, 0xfffffc6a}, 0x4004840) 3m7.721017299s ago: executing program 0 (id=729): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) request_key(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r4, 0x4068aea3, &(0x7f00000000c0)={0xdb, 0x0, 0x8}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x5, 0x100000000, 0x4, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x601, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000200), &(0x7f0000000300)=[r7], &(0x7f0000000580)}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000001c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0], &(0x7f0000000040), 0x1, r10}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@local, 0x4e22, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x401, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x2, 0x0, 0x7}, {{@in=@multicast2, 0x40000000, 0x33}, 0x0, @in, 0x0, 0x3, 0x0, 0xef}]}]}, 0x13c}}, 0x20040880) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 3m7.606649301s ago: executing program 0 (id=733): ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000300)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x44}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000084860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 3m7.439208769s ago: executing program 0 (id=735): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x8000000, 0x50) r2 = mq_open(&(0x7f0000000200)='^-!-):(%@^+\x00', 0x40, 0x46, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0x1, &(0x7f0000010140), &(0x7f00000001c0)=0x4) mq_getsetattr(r2, 0x0, &(0x7f0000000380)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x20}, 0x7}}, [0x7, 0x9, 0x7, 0x57f8, 0xb5, 0x4, 0x32c, 0xc, 0xa2ac, 0xf17, 0x7, 0xc, 0x8, 0xfff, 0x5]}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r4, 0xfffffffc, 0x3}, 0xc) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000180)={0x10, 0xffffffffffffffda, 0x3}, 0x10) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) getpeername$netlink(r8, 0x0, &(0x7f00000015c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063013000000000009506000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) lchown(&(0x7f0000000080)='./file0\x00', r6, r7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) (async) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x8000000, 0x50) (async) mq_open(&(0x7f0000000200)='^-!-):(%@^+\x00', 0x40, 0x46, 0x0) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) getsockopt$inet_int(r3, 0x10d, 0x1, &(0x7f0000010140), &(0x7f00000001c0)=0x4) (async) mq_getsetattr(r2, 0x0, &(0x7f0000000380)) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x20}, 0x7}}, [0x7, 0x9, 0x7, 0x57f8, 0xb5, 0x4, 0x32c, 0xc, 0xa2ac, 0xf17, 0x7, 0xc, 0x8, 0xfff, 0x5]}, &(0x7f00000000c0)=0x100) (async) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r4, 0xfffffffc, 0x3}, 0xc) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) read$FUSE(r5, &(0x7f0000009780)={0x2020}, 0x2020) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000180)={0x10, 0xffffffffffffffda, 0x3}, 0x10) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) getpeername$netlink(r8, 0x0, &(0x7f00000015c0)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063013000000000009506000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) lchown(&(0x7f0000000080)='./file0\x00', r6, r7) (async) 3m7.437413836s ago: executing program 0 (id=738): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x89901) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="70010000100013042cbd7000f9dbdf25fe800000000000000000000000000000ac1414bb0000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/296], 0x170}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), 0x8000, &(0x7f0000000480)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x31, 0x65, 0x37, 0x32, 0x34, 0x6d, 0x39, 0x70, 0x78, 0x33]}}], [{@subj_role={'subj_role', 0x3d, '%:\xf7'}}, {@uid_eq={'uid', 0x3d, r2}}]}) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x201) 3m7.320136525s ago: executing program 0 (id=739): socket(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r0, 0x5) (async) syz_emit_ethernet(0x192, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) (async) rt_sigprocmask(0x2, &(0x7f0000000480)={[0x80000001]}, &(0x7f0000000180), 0x8) (async) syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a3ff200200600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c10000090780000080a00"/20], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_DELAY(r3, 0x80084121, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x20400) (async) socket$igmp6(0xa, 0x3, 0x2) (async) mq_open(&(0x7f0000000080)='devices.allow\x00', 0x40, 0x68, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) creat(&(0x7f0000000300)='./file0\x00', 0x0) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18f2c222ab082b9a68555cb8af040000f1956064f2565786d33eff8900636322ab4bf1b9e5c815ef04f4d990f4c1ab1dfdc56c53c08f7a672a40451b13031c1c82c4efe5554c8263d8c1a897983e314d63aa07e1e8451c385ff7cdcac7124913054a4480b859ba149b5964fc88d95e0345a0392457c44303f0e0bef50ea2fe9758472011c8326a05bb297875cc228b00c7f3422ec41585a0eae16a58720313a1708bae05883e1977951f"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYRESHEX=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket(0x10, 0x80002, 0x0) (async) write$P9_RLERRORu(r8, &(0x7f00000000c0)=ANY=[], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000000c0)=ANY=[]) 3m7.04964813s ago: executing program 0 (id=744): ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000300)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x44}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000089860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 3m6.990353732s ago: executing program 34 (id=744): ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000300)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x44}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000089860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 2.627527262s ago: executing program 6 (id=3016): r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) close_range(r0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x5, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x52593a95}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.608580571s ago: executing program 6 (id=3018): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x40) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x6b48, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000080)=0x3ff, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x4, &(0x7f00000000c0)={0x0, "af5405a7b1818f4a097d9a9f2996a3177cef40e38b874823e38090260074bf2cb6"}}) 2.110793345s ago: executing program 6 (id=3021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) mkdir(&(0x7f0000000140)='./file0\x00', 0x12) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r3, &(0x7f0000000040)={'#! ', './file0', [{0x20, '-]^\\{-!)/'}]}, 0x15) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r2}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r5}, 0x10) mq_getsetattr(r3, &(0x7f00000000c0)={0x8001, 0x1, 0x7, 0x4}, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]}) 1.971816934s ago: executing program 6 (id=3024): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) chdir(&(0x7f0000000040)='./file0\x00') r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x5, 0x0, 0x5, 0xfffffffffffffffc, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0x2, 0x3, 0x9705}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000180)=[r1, r2, r2, r1, r2], &(0x7f00000001c0)=[{0x2, 0x4, 0x8, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x3, 0x4}, {0x0, 0x2, 0x10, 0x5}, {0x2, 0x3, 0x80000000, 0xc}, {0x0, 0x3, 0xe, 0x4}, {0x2, 0x3, 0x2}, {0x4, 0x3, 0xd, 0xc}, {0x2, 0x4, 0xa}, {0x3, 0x2, 0xc, 0xc}], 0x10, 0x25, @void, @value}, 0x94) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000340)=0x4) inotify_add_watch(r1, &(0x7f0000000380)='./file0\x00', 0x1000000) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f00000003c0)={0x9, 0xfffffffffffffff7}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r6 = syz_open_dev$mouse(&(0x7f0000000900), 0x3, 0x100) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x3, '\x00', 0x0, r2, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r8 = syz_io_uring_complete(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x10, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000480)='syzkaller\x00', 0x1, 0x79, &(0x7f00000004c0)=""/121, 0x41000, 0x44, '\x00', r4, @sk_msg=0x7, r1, 0x8, &(0x7f0000000580)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x7, 0x7, 0x4}, 0x10, r5, r6, 0x2, &(0x7f00000009c0)=[0xffffffffffffffff, r7, r1, r1, r8, r1, r2], &(0x7f0000000a00)=[{0x5, 0x9, 0xd, 0xc}, {0x2, 0x4, 0xe, 0x2}], 0x10, 0x8, @void, @value}, 0x94) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) fanotify_init(0x10, 0x2) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x4000, 0x4) mkdirat(r9, &(0x7f0000000b40)='./file0\x00', 0x164) fcntl$getown(r3, 0x9) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000d00)={0x1, &(0x7f0000000cc0)=[{0x400, 0xfc, 0x3, 0x2}]}) syz_io_uring_setup(0x3d6e, &(0x7f0000000d40)={0x0, 0xff08, 0x0, 0x0, 0x345, 0x0, r6}, &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)) syz_io_uring_complete(r10) clock_gettime(0x0, &(0x7f0000000f00)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000e40)={0x8, 0x3, 0x9dd3, 0x6, 0x6, 0xffffffffffffffff, 0xff, 0x6}, &(0x7f0000000e80)={0x9, 0x4000000000000000, 0x9, 0x1e, 0xb5, 0xa, 0x9f1, 0x7f6}, &(0x7f0000000ec0)={0x0, 0xb, 0x100000000, 0x2, 0x5, 0x8001, 0x500000000000000, 0x95}, &(0x7f0000000f40)={r11, r12+60000000}, &(0x7f0000000fc0)={&(0x7f0000000f80)={[0x2]}, 0x8}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000001000)={0x3, 0xffffffffffffffff}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r13, 0x660c) 1.660814024s ago: executing program 6 (id=3028): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000080)=0x4, 0x4) (async) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 64) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) setresuid(0xee00, 0x0, 0x0) ioprio_set$uid(0x3, 0xee00, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x9}, {0xa, 0x4e21, 0x1ff, @mcast2, 0x800009}, r3, 0x10001f}}, 0x48) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async, rerun: 64) ftruncate(r0, 0x8) (async, rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r4}, 0x20) (async, rerun: 32) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8000, 0x1) (rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) 1.577715876s ago: executing program 1 (id=3029): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e640500000000007502faff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000026000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6d5b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa387a8077927a1ad367c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f20002b35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8c367d1bfd1aea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82dc568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000000000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac6f09c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccf5e882602897a85bf8523d891080593d831d758deb4f2c7e49c6d6b35d8fd92601c8500febb0c5fe0be294bf6bbbecad444695277a9e3992a354492513b43091d161c7c7cdbbe44e8e83b4cf333238a52f214b278c6485236ea880db2f113f6381187679a4620d6149808b0af024b3b3e6ba99b4b15ca"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x10000000}, 0x0, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.577030934s ago: executing program 6 (id=3030): getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x55a7}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={r0, @in6={{0xa, 0x4e20, 0x2, @private0, 0xffff2cff}}}, 0x84) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x106, 0x1}}, 0x20) (async) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r0, 0x1}, 0x8) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280), 0x2, 0x8}}, 0x20) (async) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x60) sendmsg$inet6(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="cd72bef7b547a68fc7734be6263f223af813e2070bf96f7beb8f484bb7eca5fb008c1000d7808db937718bb26245d6aed68f3635cb3a29087b6715a7e0ac01d42a755c3c3a5357ed2ba1ffe1b18518d72db4e7c2e4c53460feba81c6bd5c115f91d667cd618a9be61604d6ab70ba364b92fc804404d6b98baaf592faf2aaf86a40f4eede8a036f8467feb361352cdab8dbf2d43c13465bd040dd5bc3769d554ee68e7873cf33d40832bde88a86de45a16f7cd9f1e1ca90dca291a8c61b9f3d68fe068afdaa0fc449bc05f4e13539b07b7a1ed748e325b3e6d018d7a1df54428a33c6e0ba73865e1a3a08c3", 0xeb}], 0x1}, 0x22008004) (async, rerun: 64) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f00000004c0)={0x9, 0x0, '\x00', {0x0, @reserved}}) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000640)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000580), r4, 0x0, 0x1, 0x4}}, 0x20) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000680)={r0, 0x9}, 0x8) mount$9p_fd(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x200000, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@fscache}], [{@appraise}, {@subj_role={'subj_role', 0x3d, ']%i!@}@^:\xa5)-'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}]}}) (async, rerun: 32) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000800)={0x2, &(0x7f00000007c0)=[{0x7, 0xbe, 0x1, 0xbc6a}, {0xc, 0x6, 0x5, 0x7}]}) (async, rerun: 32) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000008c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000880)={0xffffffffffffffff}, 0x2, r4, 0x30, 0x0, @in6={0xa, 0x4e22, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa0}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000980)={0x11, 0x10, 0xfa00, {&(0x7f0000000840), r6}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000a40)={0x15, 0x110, 0xfa00, {r7, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e23, 0x200, @mcast1, 0xb7}}}, 0x118) mremap(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000b80)={0x0, 0xc, 0x1, 0x3, 0x2, 0x5, 0x3, 0x2, 0x400, 0xf, 0x0, 0x2}) (async) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000c40)={0x4, 0x0, 0xfff7}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000018c0)={0x0}, &(0x7f0000001900)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001940)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private2}}, &(0x7f0000001a40)=0xe8) (async) getgroups(0x7, &(0x7f0000001a80)=[0xee01, 0xee01, 0xee01, 0xee01, 0xee01, 0xffffffffffffffff, 0xee01]) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001ac0)=0x0) (async) getresuid(&(0x7f0000001b00), &(0x7f0000001b40)=0x0, &(0x7f0000001b80)) lstat(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001c80), 0x0, 0x0) sendmmsg$unix(r3, &(0x7f000000c840)=[{{&(0x7f0000000c80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d00)="ea93a9683205d8cef20f7257b686782031480af8b3f34c3c52d5ed7f324634b6e6895e5f13745820f55a4c8dc7d8f6a9a96959a9b0201eba527eed2149d0e4b588", 0x41}, {&(0x7f0000000d80)="649e9b422d8732f1c51cbad30465e0be74b8927135e444337d8b3381bde2cdb1e20cc0a42bf87b8b760ea1da72ceb545b93ef790962c62b4c9bdfa82892ab7754969ca0fa9e12542724ad3d1116c22a9c217e4194a5e993922725f66bef4333007a8f88e566e59513d97ab3a671ef677ee0c6fe8b8af863755f957ed58c426ed3fcaa3aa3c2f3118ac544c084d874b5ac0ecb18d1f18101eddf12f0918812a799b681c646fbd6cd947f601e0e6b130c2c1f82f1331", 0xb5}, {&(0x7f0000000e40)="93813810a10c2770c3bab36abac6d025d4b009169b970ae787b242857b325dd027f37c6a76c34921f1bfc71f0c2565b01dabab4b2e22f4e7dc4ca867ddc514b1bc319413a85b8a6e2705575fb5041fadf5b1ca96945faae0fc8ac98e1547d5ba625b5158cd37cf1805bc293325049c0f4a5b29d9bb680f71f12b603b9b77361fbb40fe97adbd649c5baf6e5288b4afba78be8d8d5da41f47b2eb8866f55ab82f169fde512df6f89ba148951fa1e018c687d35dc4672fc176e77d008c080b7fcf66edd453303185347c27fa26a41ed992753435a5", 0xd4}, {&(0x7f0000000f40)="52c779ffa576561e70cfaa8bef01e51bd40083ec20e6d9fb560ff886fe895985c5c5d64a9c82a55ea8e3968d271545f698c5a6375b8a2aecc1ded861f2c5eb8448c40522ca0af1032303afa026e0ccfe0dd09cc47825d16b156eeb1e", 0x5c}], 0x4, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000001000)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001080)="eb38ea1cfc7913c4ffd9e2b3b6624318278ffa60dd46f2b42a3ec8dde6d458bc9e879e8b40da7b82a0d82f820b52f87b091383ce567e11106219c722e54a4b5696e805fdf8b2eaa801066615bd796ac1d175d6f88a5c7316e1da5a83e54e2db6ee284b7d4cd172e3b60db46c5334baca04e5149552ba551aa634e0a482a7212c858396f6de08c74621e6763f7373b7905306d2a24f70b6bfcf26c5a5bc9288a8", 0xa0}, {&(0x7f0000001140)="91bba37c9c5c248eddebe49c377f80121dc86e5e45f2bc898c6ebe65a10adcf79c3f8ed0f5450bbce5a4348eef0a116141ba36c6bab7ecd9c41368af5ff93b0aaf774fb8edad2b26bffa8129e39136ef49069df537d1124a5f37bc4eeeb993e21aa44f8fdffea6af7b2ae04a1189df0c7e9d3489b4d0274aa56e6acdfedef7b4cf11e65c8e4c35265090285ad3eefb58c67ebc45f246eaf921", 0x99}, {&(0x7f0000001200)="05a16ec3a17a01ca40335701a36e8db1291bab99c12f8cc592038b758e1b14d91fc5f023cca954f308768cbb560dafdd42fdc4e2aed99d29401b8626ba287c68dfcea0f55ef07c931083b5a6d1d0e3e3bda4bba35236dca075038683d2efe2c53f4502c04a60ddfd1463ef6e789044f97d", 0x71}, {&(0x7f0000001280)="af309af4a99354bf302680043d1797469af12633c575b333710a6f4a6dac89ab5e8913e20126cb40380c9e5b330de3a3d776f0dc3509133ea03d120d26b618acd95a023fb9d2c8ff2642e7a20fbc8c8cff418d9b7e9057d810368258d194183cc6b03276a424f53e7421613bd53c75a0eb56ff274fa0556f0fab9134d8f0e21bb87fb20c3d5a4a42f6ec54a17fa55a10c6b29d0c2dc30ab9980bc0ce990e741c1150734e402ced88b1da4f2e9c6106c7953b4250c56ce63e2bf05f2c00aec05100139c091d473e6aa12b666b", 0xcc}, {&(0x7f0000001380)="4f23895520ca184a08310d21f871f2526f4bdc028cf52a4ad78b1b1c3979a5a9b99b042084a17b6a9c404b59a396b51cfb4ba7d4f3dfefbd7353c6befbe8a64dbc1881a27dabb747c11265e04a08222b2c98544641daf95558b5182c9cd0f1437f8966515a04e79d0ab3abc42fae3ae086f3472dafac5bcfb9fb33c5ba94c24fa9687dd69f9cdd61a6ea0adf1e2190cfa9556e9fd28e3b1ae446ce9b", 0x9c}, {&(0x7f0000001440)="8bb47b558027bcb0e1dae3a8b05046e69eb65a221cbade3b7a1983775af02e14fa919308379fba69800a3c77153732b695a31663a7d5dd3f0e69f0555aae882df18ec161df534de6db68b2912561b77b6e8465c9c4f721ecb68cad95be5e0bf8638f63e7702a56526d8efaca863a5a762262cee0ce4766b4116c4a047f2699e0b6f3e94da742c04c2bee4619cd4555243f6ae827c9b2872cf1f8b75524796887d8e9a5a09add696baa148103a3", 0xad}, {&(0x7f0000001500)="88fc96b6aae29832dd02ea8fcdbf19a9188a1d14e756c58f9f272899fbea408b9495b66606c65e8a6b6ffa96710475b1fa2be6d04541129bc9474a402c43bcd38fffd902717f32f09d91cc6b0e1c36b8d6699a7ca16447426e8beeb61909d0ec59e93e8f38824e87f11ae78203e35e2a8a752c4bfe51c3f27a1a56958581a746c0d4eb9647f0728368a74c231925f3be4395e4a4ff266535181e9f72ae2b42a069b83ef3d784784225508914", 0xac}, {&(0x7f00000015c0)="2c1b5adb65f01398775cc5373eca964eed141c0e15f4ad84a194637b4e6b06dfb487e8146cecfb0b716daa780ad318340dfcc8435d9be76fadd5ddc8954769a75becd4a52b788f1f6e6b1ce91782252828d8d9fc41aab724a8d54c3fe76f1fcb95fcac85ebd674fbe33a0f0f0b873fb26b18636720a1dd800f672b4344d27590e945309ad6eaa742c826abbb533908b991ac46d2bbc42431d00e1d0d08", 0x9d}, {&(0x7f0000001680)="0a90a8807b7f1d377ab2aff7acb5173f62e46fbde1be7c5e9d9a24a41a52e9fb146ce3508fe93c69ec92a5c6abb2b11d3eb07dbc59faabad93ab754e1b4f1a44f7ef2851c235e3ced32953b22b423bb6c368980383768d6280195eed3b9611d8ce55e50ebf1a9335591d09f8396413e13be3767cf71fcf4f1290df3d912ff8aa497fa72446b4ae1605abd1db91859ebc74579d4cbc41ca3b1ada5e00d2b95c45269bbe2922b0e9ce4b16876eedf6ffe516e0519e6a229a7bd5fa18b2a7758d1d8bb83bc06d6b000a9137d016c521c996edf8cb8c54333d290c5085148e322020695e02b00e63622aab", 0xe9}, {&(0x7f0000001780)="1089289acf542e58648972d333c1de00dfcca28f927b51e66c982d8fdbe49021b10934c17206265e2b5e184f147c9c3fc56ccfc057ec0284a537830bfec5c2bea005937590", 0x45}], 0xa, &(0x7f0000001d80)=[@rights={{0x24, 0x1, 0x1, [r3, r5, r2, r2, r3]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x20, 0x1, 0x1, [r14, 0xffffffffffffffff, r2, r3]}}, @cred={{0x1c}}], 0xa8, 0x200400c0}}, {{&(0x7f0000001e40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000001ec0)="fef09048177e7b7744aae079e2861b5ca274d888dad8fceae4d221465c6af5b02267ef407c6a1408235e82ab55adcb39af3ead3b02ede96e69bc27f6766c3f7b02c4dd57cd2f94702d744f05fa5bd35f2338306d3cc5980dc0b8da442818b225b667bfd6ca5294ec9acc95dc8249fd93da004fcacf0e78edb3d75ececca1b7d8c38575e80efadacc0d056331f44d70d143a41f8875d6ba23c979438b5989f5b79b4944ed8dc9db5ac40f35c31e2687f7b43a8c604764d842657b6a6f7eda5702526b10228083a32ce5fe902e4f0d353eea995a66c3c189abe04673c9664b0f381bdae7248798db", 0xe7}, {&(0x7f0000001fc0)="88ad6390216f1a91b8af65d1e818a984a5d1ccd2cc81f6ad17cffc346244a9eb40b6a8c2e6b599082452ba1ea5d9a2a2c3308e5f225a210e4399dfc7da81901c552d45212db35027fa64d0268e5d5e79a64880b13a06715f6511536c84387005c96e6d5062f4f661d1ca2ac4f8bf336fdc2470605192206bb024fa69c9acb3a977aa153420", 0x85}, {&(0x7f0000002080)="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", 0xfb}, {&(0x7f0000002180)="06f9f38bfcf653ad7fd5efd4140be4422f1b3c4c281c8a0968b4878b5ece30fdc73d32c57b1fee88f68ff4318cd6758bf1782d2ae4e89d938d884927f18300679ef6675a42208dd3b549f0485c91b8bb2f256f109431573d58f148bbaab54da12383679dc6daa5d46730b1031efef2ce33f4793d872ff458f94531e27f3e1604f8e03f0fae3ebc983a67bbdfab57d5afe965b0cede1c14ff4aed1b76be33e30c9f88f50aa10e4b30be530cac5f681fcf2d151d2266da9492f365fcf824510ed1f6a0d1a0af99848afe820c620acaea06a5094ab4174d067c822fc03779c3de45c5fd15224808a8150c362edf890282bfc79381", 0xf3}, {&(0x7f0000002280)="f653c38b4c7a6aabb7d16909d96506ed7fdedf2d45771dcee7de014a92d352d777e4cad50335f642bf356a2a7f0d72b67ae9830ffd073d98d5a15d2d4e863200585e8dc0fe6182efcb6cedc24357eedca8d10269acba87421521d34f1a62c30bcc407c2df3067d7c59e3b6fee277937a3b8a198ea14bb1f73edd98e7119d1ee4140dd2", 0x83}, {&(0x7f0000002340)="fca62a8ea58fa9cd6aec482c9c26dbe184c4a4dcfe165cc78fc03b2c445bab9a71b01e3b492fa74c3a82a9706c824ed330855717a96e4057c2c29d1d14f4cf53c66b159d605ca1724a", 0x49}, {&(0x7f00000023c0)="92e098ca3de5a6cf889078553a7e5aa9ba84a46e7f1e6a0bc9e61e8c6d5287bfd4dbc76d24d029dbd9883a4b2b144a91b239bc3ffc06c486ba6975b92d0078cb216ca3684b5208fd3b46f8ea3fb1a58e21dbecff29099908042ec9046e6dd41ff79ebda4a42176049b27a19f9dde3e0b4596c73308", 0x75}, {&(0x7f0000002440)="53264c6f38dbd7a3f56068c263ba50b0f398ab8cfd2a1812e5ec28584644361c1ac6da175817b94c156c01081262be88fff34a0a941e84a43ea019ff19e1f4061acbad8cbd0c6d0a9dc653dd2072321c07", 0x51}], 0x8, &(0x7f0000002540)=[@rights={{0x30, 0x1, 0x1, [r1, r5, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r5, r2]}}], 0x30, 0x4000004}}, {{&(0x7f0000002580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002600)="c7a02694f7169511766350c555ce547079b5fda88151d1acf05286a107ddc964ce92dc59774408e5bee61ca71bd6f19bd88bdb94c2926c311e65c8ba5a23ff9d0de7a884c33ba4112d3df6ca140f3e114fe2e05175ea574eb8d6376883663c01b049eaa746f34b41747650368ac579e4d5eca0f32e2e9b2f41dad36d1b8cb9bacdfdb27a7c08f8402b6346262d233867ac992defd0fb832118a1f74ad19729b37e00bdc10e0707b33ca85797ef8351", 0xaf}], 0x1, &(0x7f000000a240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, r1, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}], 0x100, 0x4000850}}, {{&(0x7f000000a340)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f000000a400)=[{&(0x7f000000a3c0)="c35b2d452bef82a70ee1afe8faf809883315b8b49d917a4e472b350b2b", 0x1d}], 0x1, &(0x7f000000c740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r5, 0xffffffffffffffff, r3, r5, r5, r5]}}], 0xf0, 0x2400d835}}], 0x5, 0x4000) 1.455619757s ago: executing program 4 (id=3031): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) write(r1, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5b", 0x7e) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000780)={0x6, 0x8}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 1.455084861s ago: executing program 1 (id=3032): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000500000000000000000f4e55c1"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x6, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000140), 0x35000000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4002004c4, 0x1000], 0xeeee8000, 0x1144}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f00000001c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000380)=0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) 1.350884055s ago: executing program 4 (id=3033): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000001000030400000000007fff00000000c8", @ANYRES32=0x0, @ANYBLOB="42420000000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX=r0], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.321858766s ago: executing program 4 (id=3034): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000003d80)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f16d540b5199fad0093c59d66b5ece9f36c70d0f130c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336019cdcedb5e0125ebbcebddcf10cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b980680b6c4a000000002b43dcacc413bc8dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000001df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e00800100f8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b5333542d21a224f6eca447d36ad38affffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639bc1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e48bb4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf24285bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2abe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f92186086e29c61137abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c9d1a9fb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x4, 0x1}, 0xfffffffffffffe99, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x1ff, 0x10000}, 0x10) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x1ff, 0x10000}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r2, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x24}}, 0x8000) fspick(0xffffffffffffff9c, 0x0, 0xf) (async) fspick(0xffffffffffffff9c, 0x0, 0xf) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0xa8fc63e4480c7e85) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0xa8fc63e4480c7e85) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r7, 0x4004550c, 0x0) (async) ioctl$USBDEVFS_REAPURB(r7, 0x4004550c, 0x0) 940.695248ms ago: executing program 5 (id=3037): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x3, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x2, 0x2}, 0x8, 0x20400000, 0x0, 0x0, 0x0, 0x20000, 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x58, r1, 0x405, 0xf0bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 781.422131ms ago: executing program 5 (id=3038): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 658.52661ms ago: executing program 5 (id=3039): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000300)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TCSBRK(r4, 0x5409, 0x4ab0) r5 = dup(r3) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x2ea068d3, 0x0, 0x0, 0x7, 0x0, 0x43, 0x0, 0xffffffffffffdfff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x3, 0x203, 0x0, 0x40000000000, 0x801, 0x0, 0x4000000004, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000, 0x767e, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2000000000000000, 0xa7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x0, r5}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x0, 0x0, 0x7}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) close(r0) 508.251536ms ago: executing program 5 (id=3040): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffff8, 0x66}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffff394}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x2c}}, 0x811) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r5) sendmsg$NFC_CMD_GET_SE(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r8, 0x8, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48c0}, 0x10) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r9, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x3ed, 0x200, 0x70bd25, 0x25dfdbfc, "0f4c1b598022b97abd58d71eece4d12d42b4665c757947f741", [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c002}, 0x40c0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x61}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc8d}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r9, 0x4008941a, &(0x7f00000008c0)) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000940)={0x8, &(0x7f0000000900)=[{0x8, 0x5, 0x5, 0xfffffff2}, {0x6, 0xc8, 0x8, 0x2}, {0xe, 0x0, 0x1, 0x80}, {0x2, 0x4, 0x9, 0x9}, {0x5, 0x1, 0x93, 0x9}, {0x9061, 0x1, 0x8, 0x5}, {0x4, 0xd3, 0x5, 0x1}, {0x63, 0x9, 0x2, 0x1}]}, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x80, r11, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "76d35870de7b8c0dbef9b2133bb3a5df"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "b8eb9b53097311c79649e9f2d192434a"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "1acaef6ad9d8c0ae22ab75781638a15d"}]}, 0x80}, 0x1, 0x0, 0x0, 0x1c001}, 0x10) r12 = socket$unix(0x1, 0x1, 0x0) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f0000000fc0)=0x0, &(0x7f0000001000)=0x4) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b00)="21f1dcc9c8ae25c36765a3a2ba20279076b4b3e05942f0aacaf3a7391e13c9911387ba258095a3fb2c3bc50bf641fb40ca11e85190ad92881059685e3ebcec0a877e84b11919fe1dbec44b12dbfe6a7032379eb508353ab8ba738c534daa1811b5f7ab39d66ccf336f21820544150a021ac87dedd83204b0b625b85f33d1efc7603ce0c971643e88bd253f960e7f8c5e5b91db839ff6ff", 0x97}], 0x1}}, {{&(0x7f0000000c00)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000c40)="fccfe96cb1da88db6c617f9fc49bde909dd34ec4c06af312be095659df500755e5492d20479078924ef547448ed2b8e83d16332b3aa5e7399ce88974d32023f7e97528d01552436f7f64e131775b8457e9a8f8aaa7005fd5af2aadb87cdf95dabdd7af643e263955c9458dd84dd4f94f5c7d16c64f4436421a025a248c9276347067b713724cb3f3c09eaf566162c4568a196e16b99479", 0x97}, {&(0x7f0000000d00)="cb6fd775efefd7e062d9a8a703c5dba47e082ba37206331fbdef56fd85c2c703bbbfee858ea1872553bb5c914aa70f5585e8f80fbfedb20098e633cfea9af7649b89ebecc6acf6dfa497fba6b5d899fa0c5eaec043c1484a13899308f012b670947e2b381cb5cb08b934e0136380eed19099b1a871439b0864e492df5ddb079d5de434c0335b7c053acc5e753b69e6167a34d46b5ec64f985d68d4ec6f26a2f98015c4d48ccd466df0eaa152de3e03053cdddffadaae515398f48900ed9778f376a9c8c04476297cec4369a1aae41bb7a3c8836b4a6eb37d86d20fb39e508e6aa3de8184b8862ba988ffe5c00700058650a860", 0xf3}, {&(0x7f0000000e00)="4df0f0d53da072165a7625a30ba133e75d4ee5b2d51c6a6db3dcddb5a4216a590f24769b38813f24b6b86d46b75066d96bd6c1780f7e8dfb767be31501df2f59942e5e72cf26225e2eca7b057d9c0aec29770b8f272e10b5abdfb62b377e75d7055f3de353e7b03d571dab2678adde0186935def87fe79224a54269db3", 0x7d}, {&(0x7f0000000e80)="28585c06dff9251878990a660680dce1641e0ea8f99ce178a3858b36163971e98134656e9e4d3c9ca6c6e0ec9913f41cec8f2e6be7604acbb87e7c1f0bc3fecd32dcb4f62ee20397cd9b22e206ac91d77d3bbf49cf12dc5af9f8933a44a751e24a7841acad5cb468ee711083188bc130b7e09ecd628746ed45d6af31b03a6df69c5ed5c3a4ccf9a3e88efa23c984bf63f376c10528810ff17b3ba79cfe8ff81d9056f98db234f21a986195599539fc2730bf88b5c172d7086a4390ba1bb09fc357819c11bc46c0a8fdd1a070a77713a0c04b42d0bf821a", 0xd7}], 0x4, &(0x7f0000001040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @multicast1, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@noop, @ssrr={0x89, 0xb, 0x1e, [@multicast2, @broadcast]}, @timestamp={0x44, 0x2c, 0x5, 0x0, 0x1, [0x80, 0x0, 0x4, 0x1, 0xa705, 0x800, 0x1, 0x0, 0xfffffffd, 0x0]}, @timestamp={0x44, 0x20, 0x6b, 0x0, 0x1, [0xd8, 0xf, 0x0, 0x0, 0x1, 0x5, 0x2]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xcb}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}], 0x138}}], 0x2, 0x4008004) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000001440)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001280)={0x17c, r14, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x73cc}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x84, 0xa9, @random="b29706ed8d2b6f889ae2b8926a45f598b4eac806091f49c4917df341d99d3b8bde5bd0c4ef9fc0edfbbd5662ebb00f48ffa02232f2f08e2faadb8b73c33a546759554aee8a19ee0ba59169838df3016c6184014df3e2ec5d856c615f553ff8e3933e9ff78030d3049d676663e5f637040a3a8f18837758191ad897cb087286af"}, @DEVLINK_ATTR_RATE_NODE_NAME={0x61, 0xa8, @random="e2711380792b2917ae25509adb2847bfe3c5077ee1bf42a486115f8f4383f41faf4d083c223fd24cacc9d32942a3254ecb672f5528714385f885e8d852b64a02802313b000be80bb77b9b9a6dd78fc98d3a8a7ae0ae0c22cab32b03cf9"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1e}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfffffffffffffffb}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8081}, 0x40011) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000001480)=0x73, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001900)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000001a00)=0xe8) r16 = accept4$phonet_pipe(r10, &(0x7f0000001c40), &(0x7f0000001c80)=0x10, 0x80000) r17 = socket$inet(0x2, 0x1, 0x6) sendmsg$netlink(r0, &(0x7f0000004140)={&(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x1010400}, 0xc, &(0x7f0000001c00)=[{&(0x7f0000001500)={0x208, 0x36, 0x200, 0x70bd29, 0x25dfdbfc, "", [@generic="77dc5a926bc9fe674ac6696b5d4126a11a7b0ed6df7a4931867d457025c6adb9f696da75d8b63dc6ce9734ce2795450f545f2d6172b8b8a75ac81055c10290e6b7093d74439dbd601c08080495701bc3c19a5335403fa75ab1e179e3d723a5a3d45ad866ce914d24a6a445f3c9e6480ac49161fb2007c63b20b95154825db2e38268830d09699bdffe6ef6a72f4a46086be3f8a379f8943fdc5695ca86f9cf17ecdf579a5672525ef25a95c16ff740d34c0d85e25ae7aa55b5b8ea2bdd806b618eb367560b19cc45a3fd6203dd0e16bab35afc28e07b9f8b98069c143abdef4985d19d30b5edf7ccc890", @typed={0x4, 0x9}, @nested={0xc, 0xb7, 0x0, 0x1, [@nested={0x4, 0x134}, @nested={0x4, 0x62}]}, @nested={0xfb, 0x140, 0x0, 0x1, [@generic="c9c167a7b6f2dea5c664bf914c3436d2f5098a416435fe98b41ecd49198eef45e5ea11d2c23260dc5d33893f616856b5497efaa0d12f898130bf88c9e912352e5e88ff8a20b85f5ba219c72bb434ea1ceac3b1fc71afe067339b32", @generic="bba39f455692a34f0e7ac6c5e3ab696a40d6c4546b1c02111ff665af05bdc1248ad51c769068e883049faa48267a4a9c1b507e1a579131d90169cba78407c767ad0ad6d2c19d77bcc147a59f0d7254ea9b5182b97ec6e229aa81cb4950a9cf6b8990da9148a8abdb60a334462a512ff1249e1c4a64ee1d3be340769caa192afac745360803fa1026c8c6b3ae0633461b6d2600a3ac6920ce", @nested={0x4, 0x11f}]}]}, 0x208}, {&(0x7f0000001740)={0x198, 0x21, 0x4, 0x70bd26, 0x25dfdbff, "", [@typed={0x4, 0xb2}, @generic="f11e011cbcfac17e47e645663b9ae7c25660a245f7e814a9a7b985086528852250d3bdc28ea9c2d2288a7f94a67d08fd78aa865402fa2e5c57edb05ab3a4cf7c56ac9bb5a7df837381b487240b16b4678073c758155acb15c3d041496266dbc250ecfad52203eae2cb3efe3576cdcb4f13b249992863ce119d0ee156", @generic="a5588390dad8f7a5bb1e997c35d8d1dacc1151bc8dc80f03896fd124ff40a6e69d035d1631868c7a116fa85748b2fc5337b76ff626afdc212ce05eb9b2fb52a6471e0f", @generic="727940cce8506682d14eb284edbb11eea7fff117aa1be389a2e665d7f3a6fb045eff39029dc10902300c87be567cb5a304a04405cc17d6a37a8974c0775dcd090dcd222d2fa865723d623370ee62cd430517463650f3219628933705e96441c253b2d6104f6f78e70aeee9e1e11ff1f8619fcb5c69eeb4923e3127cac2c4154447df186e2aafe3bb8f020306960e030b5c28026e2186b7ae8c4673f04a5dd98d44b853154ef0f9a9be08f5897ca0", @typed={0x14, 0x9c, 0x0, 0x0, @ipv6=@local}]}, 0x198}, {&(0x7f0000001a40)={0x190, 0x21, 0x400, 0x70bd25, 0x25dfdbff, "", [@nested={0x17e, 0xa3, 0x0, 0x1, [@typed={0x51, 0xcc, 0x0, 0x0, @binary="d70b956800d9304a1bc7fabcbe365ed3bab3f4ed7ed5757442f8455490647e82fff433be93cb7911049d98032ebd269b7f81903ac056f7432dd62d9029229720a27a499df0bbfced43a7a831d7"}, @typed={0x7e, 0x7f, 0x0, 0x0, @binary="f3be783b300d70ce965076d617ab953a28e0e1ecba7d36c9133d82cd3e103d592e51928b0d5d83cf8a2b428b4c9eb76b6e936664e6ec89de2eb12c9ef4e3236548dabec9d43a520c3c06f54ce70bf32107b2cbfeccdb6fe9b488c252954f9dd4928f54c2a1ed600c9a5656222ee058c8463e2fd881111638145c"}, @typed={0x8, 0x20, 0x0, 0x0, @fd}, @typed={0x14, 0xfb, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0xf4, 0x0, 0x0, @uid=r15}, @nested={0x4, 0x12}, @generic="28bb12cc3bc8a34aecd1afeabfbb85369e08f0615fc0979d2acbda8ba65aa8249bb4e9f2f5396df8407b5f1828fe30539e151c0701b3d79045b14c470fda6deab470da591ffdd34825c93083f63ace88ebab95e1e4f6c724b4a4e730ff2a55f08a46602090942d7397d35d0de723366b052bf255f505", @nested={0x4, 0xda}, @nested={0x4, 0x93}]}]}, 0x190}], 0x3, &(0x7f0000004080)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r10, r16]}}, @rights={{0x28, 0x1, 0x1, [r0, r9, r17, r10, r10, r12]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1, r2}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}], 0xa8}, 0x80) 391.773656ms ago: executing program 1 (id=3041): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) write(r1, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5b", 0x7e) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000780)={0x6, 0x8}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 389.603543ms ago: executing program 5 (id=3042): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x20000000}, 0x0, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 310.041323ms ago: executing program 4 (id=3043): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000040)=""/183, 0xb7}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x400100, 0x0) mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000008, 0x110, r1, 0x6c000) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x521042, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000001c0)) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000001200)={&(0x7f0000000200)=""/4096, 0x1000, 0xd, 0x4}) write$UHID_DESTROY(r0, &(0x7f0000001240), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001280)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@bloom_filter={0x1e, 0x0, 0x0, 0xac, 0x18, r0, 0x3, '\x00', r4, r0, 0x5, 0x0, 0x5, 0xe, @void, @value, @void, @value}, 0x50) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000001340)={0x4, {0x7, 0x652, 0x6, 0xfffffff8}}) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000001780)={0x2, 0x280, 0xc0, &(0x7f0000001380)=[0x1, 0x4, 0x7, 0xfffffffffffffc01, 0x10000, 0x7, 0xe, 0x0, 0x7, 0x2, 0x8, 0x0, 0x5, 0x4, 0xc000000000000000, 0x8c4a, 0x8ab1, 0x2, 0x6, 0x836, 0x2, 0x1, 0x80, 0x796a, 0x1ff, 0x8, 0x9, 0xfffffffffffffffa, 0xe, 0x1, 0x3, 0x7ff, 0xffffffffffffd80f, 0x5, 0x0, 0x5ac80000000, 0x1c, 0x10001, 0xe33, 0x5, 0x6, 0x5, 0x0, 0x4, 0x1, 0xab, 0x5, 0x3, 0x0, 0x5, 0x3, 0x438f, 0x2, 0x3ff, 0xcd92, 0x0, 0x6, 0xff80000000000000, 0x4, 0x5, 0xfffffffffffffffa, 0x8, 0xff, 0x4, 0x6, 0x3, 0xad5, 0x100, 0x5, 0x0, 0xceb, 0xfe, 0x80000001, 0x7, 0x0, 0x1, 0x5, 0x10000, 0x6, 0x9e47, 0x80000001, 0xfffffffffffffffc, 0x6, 0x4, 0x0, 0x4, 0x0, 0x5, 0x0, 0x3, 0x4, 0xfff, 0x9ac, 0x9, 0x70c, 0x1000, 0x3d8dc2c2, 0x9, 0x1ff, 0x8, 0x0, 0x47, 0xffffffffffffffff, 0x1484, 0x80, 0x2, 0xfffffffffffffffe, 0x7eaafc98, 0xfffffffffffffffb, 0x9, 0x81, 0x0, 0x0, 0xf8e, 0xfff, 0x2, 0x9, 0x2, 0x3, 0x6, 0x4, 0x7fffffff, 0xfffffffffffffff7, 0x5, 0x5, 0x3, 0x6, 0x1f34]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f00000017c0)="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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000018c0)='./cgroup/syz1\x00', 0x1ff) pipe2(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000019c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3f0, 0x1a8, 0x1a8, 0xffffffff, 0x1a8, 0x100, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, &(0x7f0000001940), {[{{@ip={@remote, @empty, 0xffffff00, 0x0, 'dvmrp0\x00', 'team_slave_0\x00', {0x4517962f1f4138f6}, {}, 0x5e, 0x1}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x2, 0x10, 0x1}}, @common=@icmp={{0x28}, {0xb, "e63d", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e21, @gre_key}}}}, {{@ip={@broadcast, @local, 0xff0000ff, 0xffffffff, 'vlan0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x2f, 0x2, 0x1d}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x9, @loopback, @remote, @gre_key=0x2, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0x0, 0x1, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x12, @multicast2, @broadcast, @gre_key=0x4, @gre_key=0x9}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x9, 0xffffffc6]}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x6, @rand_addr=0x64010102, @rand_addr=0x64010101, @gre_key=0x7, @gre_key=0xb98}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001e40), 0x129000, 0x0) quotactl_fd$Q_QUOTAOFF(r7, 0xffffffff80000302, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) dup3(r8, r2, 0x80000) r9 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) sendto$ax25(r9, &(0x7f0000001e80)="97da455d657c156357c78f2535e7d317f23d8251c481a2ce5bed5edec2414f9f602fbb72d57d442a777357b0fdd54d", 0x2f, 0x240040c0, &(0x7f0000001ec0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) r10 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_OPENQRY(r10, 0x5600, &(0x7f0000001f40)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000001f80)=""/47) syz_open_dev$vcsu(&(0x7f0000001fc0), 0x2, 0xc840) readahead(r5, 0xca, 0x6) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000002040)) 309.041093ms ago: executing program 1 (id=3044): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000100003040000000000feff00000000c8", @ANYRES32=0x0, @ANYBLOB="42420000000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX=r0], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 306.325784ms ago: executing program 5 (id=3045): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) r1 = io_uring_setup(0x80177e, &(0x7f0000000140)={0x0, 0x8000535c, 0x10000, 0x0, 0x200002b4, 0x0, r0}) r2 = socket$rds(0x15, 0x5, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08060005080006040001aaaaaaaaaabbac1414bbffffffffffff13ff562a"], &(0x7f0000000200)={0x0, 0x1, [0x7b7, 0xf99, 0x754, 0xbaf]}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000c0000001800058008000100"], 0x2c}, 0x1, 0x0, 0x0, 0x2002c041}, 0x0) bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x4, &(0x7f0000000380)=0xff, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000003000)={'geneve1\x00', &(0x7f0000002f00)=@ethtool_drvinfo={0x3, "98f7f6f9acff7e1b9cc1975cf5d69f3504c68d5440c4cc9889296c4eadfcc256", "ca9e97168974f2f79c57aef7ae2767c539dd0763ee499c7733d80aaa6af9b852", "3c01e16d9a2ea4225d4a5598ccacc411b582cbf7b82eee79c203559c8c047384", "d25fe26ec2a5bde501829617d87d5128f8385b73e5e018f18c5c1d667364b34c", "3338b2b37ab7cb0b265844b113e39864d73a5ded82f8d38d8b68da4f3d58c9a0", "cab3080b35b6bd8662b294f9", 0x5, 0x7fff0000, 0xf4fa, 0x7, 0x596}}) sendmsg$inet6(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="3ad0cce8d6c855b70fd501c21d5ddbc923edea0373939e66f0c006a90c2e80e1aa8c9f52cc6a1a8ab56d430272b5cc3bfa426cf729af55675efa6fe1f87afccce900c301c031a4292ff90b7e5cc47636bd4534ecf23d7aba346886132ace5e5c7f31b0", 0x63}, {&(0x7f00000004c0)="33128eba7d390bf30a5251e835e05c1fff6de62062c1feae94d589f52ee193fbdb4d8aceb74bbdec8fc292d0bcefa63838024358339b2d6537bb96421570c6fae1e2ec60fc00c6f8ef35a6952df1f82ec9ac3d48b91a658327578b7d3bfd4efaea8708e8f923a12057f07d056c26b4b879b97fb87dae74f74d1aacd0c11fcebee12c52599b050db6d4dd7512bc196b972db21d8cc206a281adf2bf1a8bdedc00f5b22f7f0da21eea9f2b725155fa87e7005815a4a3b2d175a481be6622dc8de33d85ff08", 0xc4}, {&(0x7f00000005c0)="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", 0xfd}, {&(0x7f00000006c0)="c4ea0b9591a8af5d06585054007066f5b48db585c3a912f822f42f8050a7898f72718fc19afebcd2bd57c8026612d92b082ed29738530254", 0x38}, {&(0x7f0000000b00)="56fd3144c5adedd2674f526e553b06c31436e6dd9b0382a1c8314873c70325a32dca2de55298cceff5415f55bdce14d76c894d79483ad5c5a5962e33b7fa10d6128e22c7efb7ea13a477b78e5d9543b50e688b8de4237cc84396b7edc26ddd419686fa0dc2a5d93babc5fac1049c722c01bd2be9ff1fd9156d491ff79b6d415bc3729d790ccbaf54994def38f0ed04c94479701144ac50ee86870d55163d7b5e7a72cbb35bff514808d7e03e2d79137d462edead5d4843a4d6f14b3a578f64ac42d2d6dced1437a083c3f872fadcd515bcc829e942764ded32c3ec8cf4dad9051f972ae1040ac4343a41c28083702b3f7389c8d55220493ed7b5b5a566c85be16cb3fab3095f42d8773e59afda3b72bde723b2b51aebbe09268b088636cad9c54673817b328bdfcc19b304f5b3e93c9e849567813d050446d360919514a304e9daafcd9febc9eb51e6533fd10ae1bf53c6ee24e84ac361e02cba3a4d4f991518075a1772f6b12a0b5c81badd5dfb69c7615812189c47ebfecdc9b1bdce38213658b8194d09d729565a45115fb88cf68ba13e6f068f07c64a95c92f0255e9844863977121fa54ff4e4eb95b3c34c8d40809b59ed29f3c8e6fd8ef432352647f0bca25c5bb040ebfb2e3099cf62a5d0c8075d5d69e1fca2ae1c558d4b3b65126e05221f9d336bb510ab5a14a349cfe0b9dd053374ece37e5af89e2e5ab9302f26f128b55686999f1e139bd0cd3a21d56a002c3dd65d8b0c011a168e78efa6084c95810cb2b46", 0x225}], 0x5}, 0x84) write$UHID_INPUT(r5, &(0x7f0000001080)={0x7, {"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", 0x1000}}, 0x1006) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000000c0)={0xffff, 0x2, 0x4}) r11 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSTI(r11, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000cc0)={0x2, @sdr={0x38416761, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000100000000000000040004000000f9000800063482e233f8ad21d576b1a286559fdded273cabdb0705b3bc277917068c257085fe67413b13fe8a4b92a36440e71dc71ddf6d997c292dc93b8b882efcd22466338880481136e9978e66f427afbd17bdf4e6be7dbec6bdf25b9f7dbfc621e7631dbd995ffe585b97a1496fcb738f394661a2fab0b800"/150, @ANYRES32=0x0, @ANYBLOB="10000000000000002000050000000000"], 0x2c, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 191.418494ms ago: executing program 4 (id=3046): readlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r0}, 0x10) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) mount$9p_fd(0x20100000, &(0x7f0000000380)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0), 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x1) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1406, 0x4, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000a1}, 0x20000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) mount(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='nfs4\x00', 0x10400, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='pstore\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) pause() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$FICLONE(r2, 0x40049409, r3) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000200)={{0x8, 0x3b}, 'port1\x00', 0x13, 0x0, 0x10001, 0x7f, 0xff, 0x400, 0x101, 0x0, 0x3, 0x7}) 80.43079ms ago: executing program 1 (id=3047): write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xb9}, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) 488.58µs ago: executing program 4 (id=3048): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000c57000)=0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000181000/0x1000)=nil, 0x1000}) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x149000) r6 = socket(0x2b, 0x1, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) ioctl$NBD_DISCONNECT(r5, 0xab08) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) r9 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r9, 0xc2604111, &(0x7f0000000300)={0x0, [[0x0, 0x300], [0x0, 0x0, 0x0, 0x0, 0x0, 0x1]], '\x00', [{}, {}, {}, {}, {}, {0x40}, {0xfffffffe}, {0xea2}]}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000007a96374acb8babdaa665314551b3b82165eb06e032b4baa25909cfc53acfd6a56a93f7e4dedf65ab9733239c1442", @ANYRES16=r8, @ANYBLOB="0100000000000000000035000000"], 0x14}}, 0x0) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x6e52, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r12, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r11, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0xa, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x9408}, 0x1, {0x0, r13}}) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x11, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224b084afbc11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992c61ac00", "91be8b2cb00000406c7f306003d8a0f4bd004ab3fde5000000004000", [0x7, 0x800000000000007b]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c03, r4) 0s ago: executing program 1 (id=3049): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61123990"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000002540)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8ff00000000b7080000380000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000f56d327d212d757c99f0e1b7080000000000007b8af8ff00000480b7080000050000007b8af0ff00d1408f6d23000000bfa100000000000007010200f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], 0x0, 0x401, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x1, 0x1}, {0x5, 0x0, 0xf, 0x1}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7, @void, @value}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) write$UHID_CREATE2(r1, &(0x7f0000000540)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0xde, 0x0, 0x3, 0x8, 0x4, 0x5, "6231213ddf844cf0e93823a084ef15d829b260e12b7d02e23aad86a155c41947df4df528d1824ea43e32b616ad1db9a8beb09ef84755a1fd15f0e5f0e3cde70e5c56d8974084f95f44894f627a23a58cddd4160287e9c2c650e4fad3f7f3b7ce734bb33f55b26126dc7c3e49a00ff2d32f85f7b14b6aed2b3f68cd362f25c467c4516e7d82a66f2d8dc8bbbe299f2a3e3e01ede911a28c3252e31da46c6c32fe68feddbaf6e583ef3ac08f7ddfdf368c10c2f88ec58d73f766278c4fb74267eacd8bef9cc959b93d106e7f495e1bbf4a1feab0aa6a425d6b138e22bf1e3d"}}, 0x1f6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) fcntl$lock(r7, 0x26, &(0x7f0000000080)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r8}, 0x38) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0xfffffffc, 0x4) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x560fb000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002440)={{{@in=@multicast2}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8) ioctl$SG_SET_RESERVED_SIZE(r9, 0x2275, 0x0) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r11, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) kernel console output (not intermixed with test programs): denied { recv } for pid=29 comm="ksoftirqd/1" saddr=127.0.0.1 src=50370 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 177.560621][ T39] audit: type=1400 audit(1739913662.495:12574): avc: denied { recv } for pid=5915 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50370 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 177.573706][ T39] audit: type=1400 audit(1739913662.495:12575): avc: denied { read write } for pid=6624 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.582634][ T39] audit: type=1400 audit(1739913662.495:12576): avc: denied { read write open } for pid=6624 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.590058][ T39] audit: type=1400 audit(1739913662.495:12577): avc: denied { ioctl } for pid=6624 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.599723][ T39] audit: type=1400 audit(1739913662.505:12578): avc: denied { recv } for pid=12925 comm="syz.6.2253" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 177.609186][ T39] audit: type=1400 audit(1739913662.505:12579): avc: denied { recv } for pid=12925 comm="syz.6.2253" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 177.633400][ T39] audit: type=1400 audit(1739913662.505:12580): avc: denied { recv } for pid=12925 comm="syz.6.2253" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 177.642369][ T39] audit: type=1400 audit(1739913662.505:12581): avc: denied { recv } for pid=5915 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50370 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 177.731230][T12934] could not allocate digest TFM handle  [ 178.036409][T12953] netlink: 'syz.4.2261': attribute type 10 has an invalid length. [ 178.324945][T12959] IPVS: Scheduler module ip_vs_non not found [ 178.532361][T12979] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2268'. [ 178.594106][T12983] openvswitch: netlink: IPv4 tun info is not correct [ 178.776642][T12989] netlink: 'syz.1.2271': attribute type 12 has an invalid length. [ 178.797107][T12989] Cannot find del_set index 3 as target [ 178.939996][T12997] vlan2: entered allmulticast mode [ 178.989724][T12999] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2275'. [ 179.057509][T13002] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 179.172273][T13007] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 179.175217][T13007] PKCS7: Only support pkcs7_signedData type [ 179.227970][T13010] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2279'. [ 179.386770][T13019] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2284'. [ 179.475245][T13028] vlan2: entered allmulticast mode [ 179.513443][T13006] loop2: detected capacity change from 0 to 7 [ 179.515564][T13006] Dev loop2: unable to read RDB block 7 [ 179.517697][T13006] loop2: unable to read partition table [ 179.519316][T13006] loop2: partition table beyond EOD, truncated [ 179.521095][T13006] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 179.796513][T13042] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 180.210895][T13062] geneve1: entered allmulticast mode [ 180.426492][T13069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13069 comm=syz.1.2300 [ 180.436099][T13069] "syz.1.2300" (13069) uses obsolete ecb(arc4) skcipher [ 180.446744][T13072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=13072 comm=syz.4.2298 [ 180.464429][T13072] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 180.473433][T13072] CIFS mount error: No usable UNC path provided in device string! [ 180.473433][T13072] [ 180.476382][T13072] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 180.500811][T13073] overlayfs: failed to clone upperpath [ 180.720595][T13075] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 180.722948][T13075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.054649][T13084] PKCS7: Unknown OID: [4] 5.25.43201.122 [ 181.056691][T13084] PKCS7: Only support pkcs7_signedData type [ 181.327034][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2308'. [ 181.441592][T13092] netlink: 'syz.4.2310': attribute type 12 has an invalid length. [ 181.467812][T13092] Cannot find del_set index 3 as target [ 181.959001][T13107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13107 comm=syz.1.2316 [ 181.968184][T13107] xt_hashlimit: size too large, truncated to 1048576 [ 181.971077][T13107] xt_hashlimit: max too large, truncated to 1048576 [ 182.013119][T13115] cgroup: release_agent respecified [ 182.256205][T13129] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 182.342571][T13133] netlink: 'syz.4.2323': attribute type 12 has an invalid length. [ 182.371764][T13133] Cannot find del_set index 3 as target [ 182.466608][T13137] vlan0: entered allmulticast mode [ 182.534808][ T39] kauditd_printk_skb: 1646 callbacks suppressed [ 182.534822][ T39] audit: type=1400 audit(1739913668.499:14225): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 182.548916][ T39] audit: type=1400 audit(1739913668.499:14226): avc: denied { read write } for pid=6624 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.560458][ T39] audit: type=1400 audit(1739913668.499:14227): avc: denied { read write open } for pid=6624 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.570500][ T39] audit: type=1400 audit(1739913668.499:14228): avc: denied { ioctl } for pid=6624 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.582282][ T39] audit: type=1400 audit(1739913668.539:14229): avc: denied { recv } for pid=7559 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50370 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 182.592953][ T39] audit: type=1400 audit(1739913668.539:14230): avc: denied { recv } for pid=7559 comm="syz-executor" saddr=127.0.0.1 src=50370 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 182.603756][ T39] audit: type=1400 audit(1739913668.539:14231): avc: denied { recv } for pid=7559 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50370 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 182.612178][ T39] audit: type=1400 audit(1739913668.549:14232): avc: denied { recv } for pid=13140 comm="syz-executor" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 182.633596][ T39] audit: type=1400 audit(1739913668.549:14233): avc: denied { recv } for pid=13140 comm="syz-executor" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 182.642001][ T39] audit: type=1400 audit(1739913668.549:14234): avc: denied { recv } for pid=13140 comm="syz-executor" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 182.949385][T13156] PKCS7: Unknown OID: [4] 5.25.43201.122 [ 182.951387][T13156] PKCS7: Only support pkcs7_signedData type [ 183.028234][T13158] netlink: 'syz.5.2335': attribute type 11 has an invalid length. [ 183.052217][T13161] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2336'. [ 183.141396][T13164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2337'. [ 183.149000][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2337'. [ 183.268078][ T56] hid-generic 0001:0007:0004.0007: item fetching failed at offset 0/3 [ 183.270899][ T56] hid-generic 0001:0007:0004.0007: probe with driver hid-generic failed with error -22 [ 183.289066][T13174] pim6reg1: entered promiscuous mode [ 183.290662][T13174] pim6reg1: entered allmulticast mode [ 183.385821][T13179] vlan2: entered allmulticast mode [ 183.730530][T13195] netlink: 165 bytes leftover after parsing attributes in process `syz.6.2349'. [ 183.814774][T13200] loop6: detected capacity change from 0 to 524287999 [ 183.842689][T13203] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2352'. [ 183.845699][T13203] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2352'. [ 183.994507][T13211] 9pnet_fd: Insufficient options for proto=fd [ 184.116997][T13219] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 184.222788][T13209] can: request_module (can-proto-0) failed. [ 184.526947][T13229] 9pnet_virtio: no channels available for device syz [ 184.559166][T13233] vlan2: entered allmulticast mode [ 184.918519][T13247] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 185.338139][T13263] netlink: 'syz.4.2369': attribute type 21 has an invalid length. [ 185.340834][T13263] netlink: 'syz.4.2369': attribute type 20 has an invalid length. [ 185.343207][T13263] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.350347][T13263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=13263 comm=syz.4.2369 [ 185.552647][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2373'. [ 185.567281][T13275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2373'. [ 185.570716][T13275] netlink: 'syz.1.2373': attribute type 18 has an invalid length. [ 186.017976][T13292] overlayfs: missing 'workdir' [ 186.644113][T13310] devpts: called with bogus options [ 186.694889][T13312] syz.5.2383 (13312) used greatest stack depth: 20960 bytes left [ 187.164084][T13332] XFS (nullb0): Invalid superblock magic number [ 187.232798][T13339] netlink: 'syz.6.2392': attribute type 12 has an invalid length. [ 187.248485][T13339] Cannot find del_set index 3 as target [ 187.345884][T13344] syz_tun: entered promiscuous mode [ 187.374997][T13344] syz_tun: left promiscuous mode [ 187.545594][ T39] kauditd_printk_skb: 1682 callbacks suppressed [ 187.545609][ T39] audit: type=1400 audit(1739913673.509:15917): avc: denied { recv } for pid=5915 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50370 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 187.559371][ T39] audit: type=1400 audit(1739913673.509:15918): avc: denied { recv } for pid=5915 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50370 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 187.571458][ T39] audit: type=1400 audit(1739913673.509:15919): avc: denied { recv } for pid=5915 comm="sshd" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 187.578615][ T39] audit: type=1400 audit(1739913673.509:15920): avc: denied { create } for pid=13352 comm="syz.1.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 187.589517][ T39] audit: type=1400 audit(1739913673.509:15921): avc: denied { recv } for pid=5915 comm="sshd" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 187.599005][ T39] audit: type=1400 audit(1739913673.519:15922): avc: denied { ioctl } for pid=13352 comm="syz.1.2395" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.602202][T13357] netlink: 'syz.6.2396': attribute type 9 has an invalid length. [ 187.605982][ T39] audit: type=1400 audit(1739913673.519:15923): avc: denied { recv } for pid=5915 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50370 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 187.618949][ T39] audit: type=1400 audit(1739913673.519:15924): avc: denied { recv } for pid=5915 comm="sshd" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 187.619694][T13357] netlink: 61951 bytes leftover after parsing attributes in process `syz.6.2396'. [ 187.627229][ T39] audit: type=1400 audit(1739913673.519:15925): avc: denied { read write } for pid=6624 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.634982][ T39] audit: type=1400 audit(1739913673.519:15926): avc: denied { read write open } for pid=6624 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.738753][T13361] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2397'. [ 187.812632][T13361] kvm: emulating exchange as write [ 187.848911][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2398'. [ 188.428430][T13372] rtc_cmos 00:05: Alarms can be up to one day in the future [ 188.893762][T13391] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2407'. [ 189.279355][T13408] netlink: zone id is out of range [ 189.280923][T13408] netlink: zone id is out of range [ 189.282529][T13408] netlink: zone id is out of range [ 189.284962][T13408] netlink: zone id is out of range [ 189.289884][T13408] netlink: zone id is out of range [ 189.291455][T13408] netlink: zone id is out of range [ 189.293035][T13408] netlink: zone id is out of range [ 189.294676][T13408] netlink: zone id is out of range [ 189.296313][T13408] netlink: zone id is out of range [ 189.297776][T13408] netlink: zone id is out of range [ 189.709065][T13424] loop2: detected capacity change from 0 to 7 [ 189.719871][T13424] Dev loop2: unable to read RDB block 7 [ 189.722136][T13424] loop2: unable to read partition table [ 189.736107][T13424] loop2: partition table beyond EOD, truncated [ 189.740859][T13424] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 190.032310][T13432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2416'. [ 190.037922][T13432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2416'. [ 190.073926][T13434] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2418'. [ 190.171150][T13436] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2419'. [ 190.507873][T13452] tipc: Enabling not permitted [ 190.509754][T13452] tipc: Enabling of bearer rejected, failed to enable media [ 190.705964][T13457] netlink: 'syz.5.2427': attribute type 12 has an invalid length. [ 190.746182][T13462] netlink: 'syz.1.2428': attribute type 10 has an invalid length. [ 190.753534][T13462] macvlan0: entered allmulticast mode [ 190.765637][T13462] veth1_vlan: entered allmulticast mode [ 190.770449][T13462] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 191.060561][T13484] vlan2: entered allmulticast mode [ 191.239247][T13490] overlayfs: failed to clone upperpath [ 191.348918][T13493] netlink: 'syz.5.2438': attribute type 12 has an invalid length. [ 191.724054][T13513] vlan0: entered allmulticast mode [ 192.029786][T13520] netlink: 'syz.5.2448': attribute type 12 has an invalid length. [ 192.304667][T13533] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13533 comm=syz.1.2450 [ 192.557486][ T39] kauditd_printk_skb: 1279 callbacks suppressed [ 192.557512][ T39] audit: type=1400 audit(1739913678.519:17206): avc: denied { read write } for pid=5935 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.570782][ T39] audit: type=1400 audit(1739913678.519:17207): avc: denied { read write open } for pid=5935 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.599742][ T39] audit: type=1400 audit(1739913678.519:17208): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.612837][ T39] audit: type=1400 audit(1739913678.549:17209): avc: denied { recv } for pid=5340 comm="klogd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50370 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 192.623801][ T39] audit: type=1400 audit(1739913678.549:17210): avc: denied { recv } for pid=5340 comm="klogd" saddr=127.0.0.1 src=50370 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 192.632771][ T39] audit: type=1400 audit(1739913678.559:17211): avc: denied { recv } for pid=5340 comm="klogd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50370 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 192.641611][ T39] audit: type=1400 audit(1739913678.559:17212): avc: denied { recv } for pid=5935 comm="syz-executor" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 192.650131][ T39] audit: type=1400 audit(1739913678.559:17213): avc: denied { recv } for pid=5935 comm="syz-executor" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 192.657968][ T39] audit: type=1400 audit(1739913678.569:17214): avc: denied { recv } for pid=5915 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50370 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 192.665020][ T39] audit: type=1400 audit(1739913678.569:17215): avc: denied { recv } for pid=5915 comm="sshd" saddr=127.0.0.1 src=50370 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 192.891506][T13547] vlan2: entered allmulticast mode [ 193.178446][T13560] input: syz0 as /devices/virtual/input/input22 [ 193.180407][T13560] input: failed to attach handler leds to device input22, error: -6 [ 193.204606][T13557] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 193.209268][T13557] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 193.231909][T13557] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 193.244101][T13557] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 193.411374][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2463'. [ 193.986748][T13595] random: crng reseeded on system resumption [ 194.083423][ T5980] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 194.220575][T13595] Restarting kernel threads ... done. [ 194.243644][ T5980] usb 6-1: Using ep0 maxpacket: 32 [ 194.266306][ T5980] usb 6-1: unable to get BOS descriptor or descriptor too short [ 194.275612][ T5980] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 194.278411][ T5980] usb 6-1: can't read configurations, error -71 [ 194.290731][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.303167][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.340820][T13607] xt_hashlimit: size too large, truncated to 1048576 [ 194.746546][T13611] netlink: 'syz.5.2476': attribute type 12 has an invalid length. [ 194.848627][T13613] netlink: 'syz.4.2477': attribute type 3 has an invalid length. [ 194.955940][T13619] pim6reg: entered allmulticast mode [ 194.959201][T13619] pim6reg: left allmulticast mode [ 195.025661][T13623] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.817448][T13647] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2488'. [ 195.841657][T13647] syz_tun: entered allmulticast mode [ 195.849493][T13647] syz_tun: left allmulticast mode [ 195.875558][T13650] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2489'. [ 195.878198][T13648] netlink: 'syz.4.2487': attribute type 12 has an invalid length. [ 195.974579][T13657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2491'. [ 196.024698][T13661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2490'. [ 196.223588][ T5977] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 196.393353][ T5977] usb 9-1: Using ep0 maxpacket: 16 [ 196.400880][ T5977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 196.414982][ T5977] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 196.417671][ T5977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.420029][ T5977] usb 9-1: Product: syz [ 196.421263][ T5977] usb 9-1: Manufacturer: syz [ 196.422646][ T5977] usb 9-1: SerialNumber: syz [ 196.434965][ T5977] usb 9-1: config 0 descriptor?? [ 196.442753][ T5977] hub 9-1:0.0: bad descriptor, ignoring hub [ 196.444694][ T5977] hub 9-1:0.0: probe with driver hub failed with error -5 [ 196.448182][ T5977] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input23 [ 196.552802][T13669] dlm: Unknown command passed to DLM device : 8 [ 196.552802][T13669] [ 196.731136][T13674] input: syz0 as /devices/virtual/input/input24 [ 196.877511][T13678] netlink: 'syz.5.2498': attribute type 1 has an invalid length. [ 197.086342][T13686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2499'. [ 197.135058][T13676] loop2: detected capacity change from 0 to 7 [ 197.145703][T13676] Dev loop2: unable to read RDB block 7 [ 197.147329][T13676] loop2: unable to read partition table [ 197.148930][T13676] loop2: partition table beyond EOD, truncated [ 197.150667][T13676] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 197.566105][ T39] kauditd_printk_skb: 1284 callbacks suppressed [ 197.566124][ T39] audit: type=1400 audit(1739913683.529:18500): avc: denied { bpf } for pid=13700 comm="syz.1.2503" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 197.585230][ T39] audit: type=1400 audit(1739913683.539:18501): avc: denied { create } for pid=13700 comm="syz.1.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 197.590979][ T39] audit: type=1400 audit(1739913683.539:18502): avc: denied { accept } for pid=13700 comm="syz.1.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 197.597011][ T39] audit: type=1400 audit(1739913683.539:18503): avc: denied { bind } for pid=13700 comm="syz.1.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 197.613888][ T39] audit: type=1400 audit(1739913683.569:18504): avc: denied { create } for pid=13698 comm="syz.4.2504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 197.624239][ T39] audit: type=1400 audit(1739913683.569:18505): avc: denied { create } for pid=13698 comm="syz.4.2504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 197.630109][ T39] audit: type=1400 audit(1739913683.569:18506): avc: denied { recv } for pid=5918 comm="syz-executor" saddr=127.0.0.1 src=50370 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 197.637458][ T39] audit: type=1400 audit(1739913683.569:18507): avc: denied { write } for pid=13698 comm="syz.4.2504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 197.644267][ T39] audit: type=1400 audit(1739913683.579:18508): avc: denied { recv } for pid=39 comm="kauditd" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 197.651466][ T39] audit: type=1400 audit(1739913683.589:18509): avc: denied { read write } for pid=5935 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 197.684528][T13707] netlink: 'syz.4.2504': attribute type 12 has an invalid length. [ 197.693690][T13709] netlink: 'syz.1.2505': attribute type 10 has an invalid length. [ 197.695966][T13709] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2505'. [ 197.698969][T13709] net_ratelimit: 5 callbacks suppressed [ 197.698978][T13709] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 197.834504][T13710] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 197.914338][T13711] netfs: Couldn't get user pages (rc=-14) [ 198.560268][T13722] lo speed is unknown, defaulting to 1000 [ 198.567957][T13722] lo speed is unknown, defaulting to 1000 [ 198.571779][T13722] lo speed is unknown, defaulting to 1000 [ 198.630931][T13722] infiniband syz0: set active [ 198.634254][ T5997] lo speed is unknown, defaulting to 1000 [ 198.636209][T13722] infiniband syz0: added lo [ 198.668592][T13722] RDS/IB: syz0: added [ 198.670247][T13722] smc: adding ib device syz0 with port count 1 [ 198.672271][T13722] smc: ib device syz0 port 1 has pnetid [ 198.680759][ T5977] lo speed is unknown, defaulting to 1000 [ 198.686744][T13722] lo speed is unknown, defaulting to 1000 [ 198.731675][T13722] lo speed is unknown, defaulting to 1000 [ 198.771533][T13722] lo speed is unknown, defaulting to 1000 [ 198.814304][T13722] lo speed is unknown, defaulting to 1000 [ 198.843465][ T69] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 198.843516][ T5940] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.845651][ T69] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 198.957044][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2510'. [ 199.306998][T13737] hpfs: Unknown parameter '{$' [ 199.732180][T13752] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2519'. [ 200.035610][T13763] fuse: Bad value for 'fd' [ 200.097558][T13765] netlink: 'syz.1.2524': attribute type 12 has an invalid length. [ 200.313228][ T30] usb 9-1: USB disconnect, device number 11 [ 200.486589][ T5943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.491627][ T5943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.498746][ T5943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.501982][ T5943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.517692][ T5943] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 200.520580][ T5943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 200.538487][ T5940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.540716][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.542885][ T5940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.556373][ T5940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.559602][ T5940] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 200.566152][ T5940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 200.638381][ T7730] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.814937][ T7730] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.855351][T13773] lo speed is unknown, defaulting to 1000 [ 200.959308][T13785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2531'. [ 200.961900][T13785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2531'. [ 200.963763][ T7730] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.095158][ T7730] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.571643][ T7730] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 202.169263][ T7730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.173370][ T7730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.179661][ T7730] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 202.183068][ T7730] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 202.187755][ T7730] bond0 (unregistering): Released all slaves [ 202.330034][ T7730] bond1 (unregistering): Released all slaves [ 202.353132][T13811] netlink: 'syz.6.2535': attribute type 12 has an invalid length. [ 202.366863][T13773] chnl_net:caif_netlink_parms(): no params data found [ 202.579267][ T39] kauditd_printk_skb: 1451 callbacks suppressed [ 202.579282][ T39] audit: type=1400 audit(1739913688.529:19961): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 202.613567][ T5943] Bluetooth: hci1: command tx timeout [ 202.628285][ T39] audit: type=1400 audit(1739913688.549:19962): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50370 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.647150][ T39] audit: type=1400 audit(1739913688.549:19963): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=127.0.0.1 src=50370 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.654368][ T39] audit: type=1400 audit(1739913688.549:19964): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50370 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.661172][ T39] audit: type=1400 audit(1739913688.559:19965): avc: denied { recv } for pid=5915 comm="sshd" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.668451][ T39] audit: type=1400 audit(1739913688.559:19966): avc: denied { recv } for pid=5915 comm="sshd" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.675223][ T39] audit: type=1400 audit(1739913688.559:19967): avc: denied { recv } for pid=5915 comm="sshd" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.682035][ T39] audit: type=1400 audit(1739913688.569:19968): avc: denied { recv } for pid=5915 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50370 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.688742][ T39] audit: type=1400 audit(1739913688.569:19969): avc: denied { recv } for pid=5915 comm="sshd" saddr=127.0.0.1 src=50370 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.695356][ T39] audit: type=1400 audit(1739913688.599:19970): avc: denied { create } for pid=13823 comm="syz.1.2540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 202.763529][T13773] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.765573][T13773] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.767631][T13773] bridge_slave_0: entered allmulticast mode [ 202.792288][T13773] bridge_slave_0: entered promiscuous mode [ 202.842282][T13773] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.845089][T13773] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.847781][T13773] bridge_slave_1: entered allmulticast mode [ 202.850045][T13773] bridge_slave_1: entered promiscuous mode [ 202.911217][T13773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.929570][T13773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.943200][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2542'. [ 203.006064][T13773] team0: Port device team_slave_0 added [ 203.011529][T13773] team0: Port device team_slave_1 added [ 203.065013][T13773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.067029][T13773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.083334][T13773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.109554][T13773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.111527][T13773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.123383][T13773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.172733][ T7730] hsr_slave_0: left promiscuous mode [ 203.181928][ T7730] hsr_slave_1: left promiscuous mode [ 203.184768][ T7730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.187852][ T7730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.191863][ T7730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.196027][ T7730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.231101][ T7730] veth1_macvtap: left promiscuous mode [ 203.232901][ T7730] veth0_macvtap: left promiscuous mode [ 203.237369][ T7730] veth1_vlan: left promiscuous mode [ 203.238921][ T7730] veth0_vlan: left promiscuous mode [ 203.474765][T13843] overlay: filesystem on ./bus is read-only [ 204.689626][ T5943] Bluetooth: hci1: command tx timeout [ 205.559832][T13773] hsr_slave_0: entered promiscuous mode [ 205.561832][T13773] hsr_slave_1: entered promiscuous mode [ 205.567151][T13839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2543'. [ 205.616903][T13848] netlink: 'syz.1.2546': attribute type 12 has an invalid length. [ 205.787959][T13856] xt_l2tp: missing protocol rule (udp|l2tpip) [ 205.791790][T13857] xt_l2tp: missing protocol rule (udp|l2tpip) [ 206.026852][ T7730] IPVS: stop unused estimator thread 0... [ 206.097268][T13871] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 206.142562][T13874] netlink: 1272 bytes leftover after parsing attributes in process `syz.6.2553'. [ 206.145247][T13874] openvswitch: netlink: Flow actions attr not present in new flow. [ 206.308458][T13773] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.315026][T13773] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 206.322989][T13773] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 206.337209][T13773] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 206.421187][T13881] overlay: Unknown parameter 'smackfsfloor' [ 206.534434][T13773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.564531][T13773] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.576170][T13884] netlink: 'syz.5.2557': attribute type 12 has an invalid length. [ 206.579220][ T7729] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.581280][ T7729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.593841][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.596025][ T7731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.770540][ T5943] Bluetooth: hci1: command tx timeout [ 207.401612][T13911] netlink: 'syz.1.2565': attribute type 12 has an invalid length. [ 207.609451][ T39] kauditd_printk_skb: 575 callbacks suppressed [ 207.609464][ T39] audit: type=1400 audit(1739913693.569:20546): avc: denied { sys_module } for pid=13773 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 207.617552][ T39] audit: type=1400 audit(1739913693.569:20547): avc: denied { module_request } for pid=13773 comm="syz-executor" kmod="nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 207.626162][T13915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2566'. [ 207.636791][ T39] audit: type=1400 audit(1739913693.589:20548): avc: denied { read } for pid=13914 comm="syz.6.2566" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 207.648227][ T39] audit: type=1400 audit(1739913693.589:20549): avc: denied { read open } for pid=13914 comm="syz.6.2566" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 207.656924][ T39] audit: type=1400 audit(1739913693.589:20550): avc: denied { prog_load } for pid=13913 comm="syz.1.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 207.662655][ T39] audit: type=1400 audit(1739913693.589:20551): avc: denied { bpf } for pid=13913 comm="syz.1.2567" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 207.665069][T13918] vlan2: entered allmulticast mode [ 207.672285][ T39] audit: type=1400 audit(1739913693.599:20552): avc: denied { map } for pid=13914 comm="syz.6.2566" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 207.684715][ T39] audit: type=1400 audit(1739913693.599:20553): avc: denied { read execute } for pid=13914 comm="syz.6.2566" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 207.714722][ T39] audit: type=1400 audit(1739913693.599:20554): avc: denied { ioctl } for pid=13914 comm="syz.6.2566" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 207.722083][ T39] audit: type=1400 audit(1739913693.609:20555): avc: denied { create } for pid=13914 comm="syz.6.2566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 207.823062][T13906] xt_CT: No such helper "pptp" [ 207.929483][T13773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.296782][T13941] Unknown options in mask 5 [ 208.312167][T13941] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2573'. [ 208.318804][T13941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2573'. [ 208.405760][T13949] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2575'. [ 208.843767][ T5943] Bluetooth: hci1: command tx timeout [ 209.263902][T13773] veth0_vlan: entered promiscuous mode [ 209.278965][T13773] veth1_vlan: entered promiscuous mode [ 209.324427][T13773] veth0_macvtap: entered promiscuous mode [ 209.333596][T13773] veth1_macvtap: entered promiscuous mode [ 209.356408][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.359429][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.362256][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.365522][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.369114][T13773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.380848][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.383951][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.386663][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.389591][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.393068][T13773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.403195][T13773] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.405730][T13773] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.408113][T13773] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.410514][T13773] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.492062][ T7730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.495083][ T7730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.523052][ T7730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.526466][ T7730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.910470][T13961] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2528'. [ 220.526934][ T39] kauditd_printk_skb: 243 callbacks suppressed [ 220.526953][ T39] audit: type=1400 audit(1739913706.489:20799): avc: denied { egress } for pid=16 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 220.538320][ T39] audit: type=1400 audit(1739913706.489:20800): avc: denied { sendto } for pid=16 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 220.547116][ T39] audit: type=1400 audit(1739913706.499:20801): avc: denied { read } for pid=5333 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 220.555469][ T39] audit: type=1400 audit(1739913706.519:20802): avc: denied { search } for pid=5333 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.563549][ T39] audit: type=1400 audit(1739913706.519:20803): avc: denied { append } for pid=5333 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 220.571941][ T39] audit: type=1400 audit(1739913706.519:20804): avc: denied { append open } for pid=5333 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 220.580685][ T39] audit: type=1400 audit(1739913706.519:20805): avc: denied { getattr } for pid=5333 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 221.167333][ T39] audit: type=1400 audit(1739913707.129:20806): avc: denied { egress } for pid=16 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 221.176037][ T39] audit: type=1400 audit(1739913707.129:20807): avc: denied { sendto } for pid=16 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 221.191116][ T39] audit: type=1400 audit(1739913707.149:20808): avc: denied { read } for pid=5333 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 223.800455][ T5940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.805690][ T5940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.811016][T13981] overlayfs: failed to resolve './file1': -2 [ 223.812429][ T5940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.816353][ T5940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.818612][ T5940] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.820695][ T5940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.832510][T13980] overlayfs: failed to resolve './file1': -2 [ 223.887334][T13980] overlayfs: failed to clone upperpath [ 223.956215][T13975] lo speed is unknown, defaulting to 1000 [ 224.125420][ T1146] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.170730][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2585'. [ 224.226595][ T1146] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.375595][ T1146] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.396277][T13975] chnl_net:caif_netlink_parms(): no params data found [ 224.464718][ T1146] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.508811][T13975] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.511776][T13975] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.518932][T13975] bridge_slave_0: entered allmulticast mode [ 224.522262][T13975] bridge_slave_0: entered promiscuous mode [ 224.531126][T13975] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.537067][T13975] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.539783][T13975] bridge_slave_1: entered allmulticast mode [ 224.542822][T13975] bridge_slave_1: entered promiscuous mode [ 224.591598][T13975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.630494][T13975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.446301][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.458046][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.464809][ T1146] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 225.469467][ T1146] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 225.478139][ T1146] veth1_vlan: left allmulticast mode [ 225.483400][ T1146] bond0 (unregistering): Released all slaves [ 225.561626][ T39] kauditd_printk_skb: 346 callbacks suppressed [ 225.561640][ T39] audit: type=1400 audit(1739913711.519:21155): avc: denied { recv } for pid=5918 comm="syz-executor" saddr=127.0.0.1 src=50370 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 225.570490][ T39] audit: type=1400 audit(1739913711.519:21156): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 225.609877][ T39] audit: type=1400 audit(1739913711.569:21157): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50370 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 225.617846][ T39] audit: type=1400 audit(1739913711.569:21158): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=127.0.0.1 src=50370 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 225.642664][ T39] audit: type=1400 audit(1739913711.569:21159): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50370 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 225.652034][ T39] audit: type=1400 audit(1739913711.589:21160): avc: denied { recv } for pid=39 comm="kauditd" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 225.663472][ T39] audit: type=1400 audit(1739913711.589:21161): avc: denied { recv } for pid=39 comm="kauditd" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 225.672350][ T39] audit: type=1400 audit(1739913711.599:21162): avc: denied { recv } for pid=5915 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50370 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 225.682603][ T39] audit: type=1400 audit(1739913711.599:21163): avc: denied { recv } for pid=5915 comm="sshd" saddr=127.0.0.1 src=50370 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 225.745678][ T1146] bond1 (unregistering): Released all slaves [ 225.753818][ T1146] bond2 (unregistering): Released all slaves [ 225.765387][T13975] team0: Port device team_slave_0 added [ 225.780927][T14031] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2595'. [ 225.781306][ T39] audit: type=1400 audit(1739913711.739:21164): avc: denied { read write } for pid=13773 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.791952][T13975] team0: Port device team_slave_1 added [ 225.842717][T13975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.863247][T13975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.872500][T13975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.884581][T13975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.886633][T13975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.894473][T13975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.941558][ T1146] tipc: Left network mode [ 226.024484][T14042] netlink: 'syz.4.2598': attribute type 5 has an invalid length. [ 226.068322][T14042] CIFS mount error: No usable UNC path provided in device string! [ 226.068322][T14042] [ 226.084857][T13975] hsr_slave_0: entered promiscuous mode [ 226.087446][T13975] hsr_slave_1: entered promiscuous mode [ 226.090429][T13975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.093156][T13975] Cannot create hsr debugfs directory [ 226.093449][T14042] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 226.779828][ T1146] hsr_slave_0: left promiscuous mode [ 226.786190][ T1146] hsr_slave_1: left promiscuous mode [ 226.788052][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.795784][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.800174][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.802586][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.821496][T14060] loop2: detected capacity change from 0 to 7 [ 226.824998][T14060] Dev loop2: unable to read RDB block 7 [ 226.826862][ T1146] veth1_macvtap: left promiscuous mode [ 226.827229][T14060] loop2: unable to read partition table [ 226.829135][ T1146] veth0_macvtap: left promiscuous mode [ 226.831304][T14060] loop2: partition table beyond EOD, truncated [ 226.833240][ T1146] veth1_vlan: left promiscuous mode [ 226.835487][T14060] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 226.843793][ T1146] veth0_vlan: left promiscuous mode [ 226.857981][T14075] siw: device registration error -23 [ 226.928131][ T1146] pimreg (unregistering): left allmulticast mode [ 229.829110][T14070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.839326][T14070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.844676][T14070] bond0 (unregistering): Released all slaves [ 229.883039][T14092] vlan2: entered allmulticast mode [ 230.281107][T14107] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 230.402355][T13975] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 230.426634][T13975] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 230.465972][T13975] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 230.484677][T13975] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 230.602687][ T39] kauditd_printk_skb: 403 callbacks suppressed [ 230.602700][ T39] audit: type=1400 audit(1739913716.559:21568): avc: denied { ioctl } for pid=14113 comm="syz.6.2620" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.668177][T13975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.672620][ T39] audit: type=1400 audit(1739913716.629:21569): avc: denied { write } for pid=14113 comm="syz.6.2620" name="usbmon1" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 230.682341][ T39] audit: type=1400 audit(1739913716.629:21570): avc: denied { write open } for pid=14113 comm="syz.6.2620" path="/dev/usbmon1" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 230.694190][ T39] audit: type=1400 audit(1739913716.639:21571): avc: denied { ioctl } for pid=14113 comm="syz.6.2620" path="/dev/usbmon1" dev="devtmpfs" ino=738 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 230.702693][ T39] audit: type=1400 audit(1739913716.639:21572): avc: denied { ioctl } for pid=14113 comm="syz.6.2620" path="/dev/usbmon1" dev="devtmpfs" ino=738 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 230.706235][T13975] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.723606][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.725550][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.733383][ T39] audit: type=1400 audit(1739913716.689:21573): avc: denied { read write } for pid=14113 comm="syz.6.2620" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.735918][ T7723] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.741909][ T39] audit: type=1400 audit(1739913716.699:21574): avc: denied { read write open } for pid=14113 comm="syz.6.2620" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.742307][ T7723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.750306][ T39] audit: type=1400 audit(1739913716.709:21575): avc: denied { ioctl } for pid=14113 comm="syz.6.2620" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.768948][ T39] audit: type=1400 audit(1739913716.729:21576): avc: denied { egress } for pid=7723 comm="kworker/u32:12" daddr=ff02::1:ff00:1b netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 230.777512][ T39] audit: type=1400 audit(1739913716.729:21577): avc: denied { sendto } for pid=7723 comm="kworker/u32:12" daddr=ff02::1:ff00:1b netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 230.831573][T14109] loop2: detected capacity change from 0 to 7 [ 230.841237][T14109] Dev loop2: unable to read RDB block 7 [ 230.842905][T14109] loop2: unable to read partition table [ 230.847519][T14109] loop2: partition table beyond EOD, truncated [ 230.853312][T14109] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 231.247395][T14127] vlan2: entered allmulticast mode [ 231.544543][T14138] Cannot find add_set index 4 as target [ 231.555057][T14135] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2625'. [ 231.853999][T13975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.955287][T13975] veth0_vlan: entered promiscuous mode [ 231.981165][T13975] veth1_vlan: entered promiscuous mode [ 232.012090][T14146] netlink: 'syz.5.2630': attribute type 12 has an invalid length. [ 232.067179][T13975] veth0_macvtap: entered promiscuous mode [ 232.094784][T13975] veth1_macvtap: entered promiscuous mode [ 232.125835][T14148] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 232.150311][T13975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.153165][T13975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.156363][T13975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.159223][T13975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.162675][T13975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.173970][T13975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.177018][T13975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.179779][T13975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.182721][T13975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.188978][T13975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.203523][T13975] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.205935][T13975] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.208275][T13975] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.210723][T13975] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.357120][ T7731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.362031][ T7731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.420556][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.425040][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.554544][T14154] vlan2: entered allmulticast mode [ 233.043534][T14165] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2635'. [ 233.161763][T14168] netlink: 880 bytes leftover after parsing attributes in process `syz.1.2637'. [ 233.358258][T14177] fuse: Bad value for 'fd' [ 233.440954][T14181] vlan2: entered allmulticast mode [ 233.894038][T14197] netlink: 'syz.6.2647': attribute type 1 has an invalid length. [ 234.280454][T14208] netlink: 'syz.5.2651': attribute type 12 has an invalid length. [ 234.542553][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2657'. [ 234.633429][ T56] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 234.783367][ T56] usb 11-1: Using ep0 maxpacket: 8 [ 234.790518][ T56] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 234.792876][ T56] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.796374][ T56] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.799096][ T56] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.801970][ T56] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.805608][ T56] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 234.808569][ T56] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.031307][ T56] usb 11-1: GET_CAPABILITIES returned 0 [ 235.033175][ T56] usbtmc 11-1:16.0: can't read capabilities [ 235.241753][T14216] usbtmc 11-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 235.246581][T14215] usbtmc 11-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 235.274808][ T56] usb 11-1: USB disconnect, device number 5 [ 235.347012][T14237] QAT: failed to copy from user cfg_data. [ 235.451553][T14247] netlink: 'syz.4.2663': attribute type 12 has an invalid length. [ 235.609183][ T39] kauditd_printk_skb: 1361 callbacks suppressed [ 235.609196][ T39] audit: type=1400 audit(1739913721.569:22939): avc: denied { execmem } for pid=14254 comm="syz.5.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 235.626319][ T39] audit: type=1400 audit(1739913721.569:22940): avc: denied { create } for pid=14254 comm="syz.5.2666" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 235.632415][ T39] audit: type=1400 audit(1739913721.569:22941): avc: denied { ioctl } for pid=14254 comm="syz.5.2666" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=60236 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 235.640884][ T39] audit: type=1400 audit(1739913721.569:22942): avc: denied { ioctl } for pid=14254 comm="syz.5.2666" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=60236 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 235.652737][ T39] audit: type=1400 audit(1739913721.579:22943): avc: denied { recv } for pid=34 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50370 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 235.661414][ T39] audit: type=1400 audit(1739913721.579:22944): avc: denied { recv } for pid=34 comm="ksoftirqd/3" saddr=127.0.0.1 src=50370 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 235.671226][ T39] audit: type=1400 audit(1739913721.579:22945): avc: denied { recv } for pid=34 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50370 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 235.680393][ T39] audit: type=1400 audit(1739913721.589:22946): avc: denied { recv } for pid=13975 comm="syz-executor" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 235.689235][ T39] audit: type=1400 audit(1739913721.589:22947): avc: denied { recv } for pid=13975 comm="syz-executor" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 235.698055][ T39] audit: type=1400 audit(1739913721.589:22948): avc: denied { recv } for pid=5918 comm="syz-executor" saddr=127.0.0.1 src=50370 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 236.027906][T14273] netlink: 'syz.6.2673': attribute type 12 has an invalid length. [ 236.092982][T14275] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2674'. [ 236.408816][T14292] kvm: pic: non byte read [ 236.412618][T14295] nbd: must specify at least one socket [ 236.424107][T14292] kvm: pic: single mode not supported [ 236.424151][T14292] kvm: pic: level sensitive irq not supported [ 236.427666][T14295] loop9: detected capacity change from 0 to 1 [ 236.429451][T14292] kvm: pic: single mode not supported [ 236.431188][T14292] kvm: pic: level sensitive irq not supported [ 236.443751][T14295] Dev loop9: unable to read RDB block 1 [ 236.453347][T14295] loop9: unable to read partition table [ 236.455641][T14295] loop9: partition table beyond EOD, truncated [ 236.457431][T14295] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 236.540597][T14297] syzkaller0: entered promiscuous mode [ 236.542281][T14297] syzkaller0: entered allmulticast mode [ 236.546733][T14292] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 236.554434][T14297] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 237.059287][T14310] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.330440][T14321] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 237.351542][T14321] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 237.684424][T14330] netlink: 'syz.1.2690': attribute type 12 has an invalid length. [ 237.780862][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2693'. [ 237.785016][T14336] netlink: 'syz.5.2693': attribute type 3 has an invalid length. [ 238.156075][T14358] IPv6: sit1: Disabled Multicast RS [ 238.510976][T14364] overlayfs: failed to clone upperpath [ 238.547935][T14363] netlink: 'syz.4.2702': attribute type 12 has an invalid length. [ 238.703985][T14371] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2701'. [ 238.704001][T14373] veth0_vlan: invalid flags given to default FDB implementation [ 238.710469][T14373] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2704'. [ 238.713139][T14373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2704'. [ 239.044266][T14380] Bluetooth: MGMT ver 1.23 [ 239.404534][T14393] netlink: 'syz.1.2712': attribute type 12 has an invalid length. [ 239.458963][ T5978] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 239.647992][ T5978] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 239.659993][ T5978] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 239.664948][ T5978] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 239.668944][ T5978] usb 9-1: config 0 interface 0 has no altsetting 0 [ 239.678026][ T5978] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 239.681332][ T5978] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 239.687019][ T5978] usb 9-1: config 0 interface 0 has no altsetting 0 [ 239.696644][ T5978] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 239.700115][ T5978] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 239.705798][ T5978] usb 9-1: config 0 interface 0 has no altsetting 0 [ 239.714828][ T5978] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 239.718101][ T5978] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 239.721940][ T5978] usb 9-1: config 0 interface 0 has no altsetting 0 [ 239.736516][ T5978] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 239.739811][ T5978] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 239.745256][ T5978] usb 9-1: config 0 interface 0 has no altsetting 0 [ 239.754197][ T5978] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 239.757512][ T5978] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 239.761353][ T5978] usb 9-1: config 0 interface 0 has no altsetting 0 [ 239.773694][ T5978] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 239.777110][ T5978] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 239.781060][ T5978] usb 9-1: config 0 interface 0 has no altsetting 0 [ 239.792327][ T5978] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 239.795803][ T5978] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 239.799739][ T5978] usb 9-1: config 0 interface 0 has no altsetting 0 [ 239.803467][ T5980] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 239.819209][ T5978] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 239.822773][ T5978] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 239.826389][ T5978] usb 9-1: Product: syz [ 239.828257][ T5978] usb 9-1: Manufacturer: syz [ 239.830231][ T5978] usb 9-1: SerialNumber: syz [ 239.838580][ T5978] usb 9-1: config 0 descriptor?? [ 239.858120][ T5978] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 239.878633][T14412] tty tty1: ldisc open failed (-12), clearing slot 0 [ 240.012537][ T5980] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 240.016906][ T5980] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.019546][ T5980] usb 11-1: Product: syz [ 240.025326][ T5980] usb 11-1: Manufacturer: syz [ 240.026769][ T5980] usb 11-1: SerialNumber: syz [ 240.052000][ T5980] usb 11-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 240.084333][ T56] usb 9-1: USB disconnect, device number 12 [ 240.103917][ T56] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 240.136126][ T69] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 240.191620][ T5940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.196770][ T5940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.201121][ T5940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.205878][ T5940] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.208398][ T5940] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 240.212214][ T5940] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.272490][T14423] lo speed is unknown, defaulting to 1000 [ 240.325578][T14426] netlink: 'syz.1.2721': attribute type 12 has an invalid length. [ 240.614467][ T39] kauditd_printk_skb: 1125 callbacks suppressed [ 240.614479][ T39] audit: type=1400 audit(1739913726.579:24074): avc: denied { create } for pid=14432 comm="syz.1.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 240.614739][T14423] chnl_net:caif_netlink_parms(): no params data found [ 240.617526][ T39] audit: type=1400 audit(1739913726.579:24075): avc: denied { write } for pid=14432 comm="syz.1.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 240.632027][ T39] audit: type=1400 audit(1739913726.589:24076): avc: denied { create } for pid=14432 comm="syz.1.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 240.637797][ T39] audit: type=1400 audit(1739913726.599:24077): avc: denied { write } for pid=14432 comm="syz.1.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 240.647110][ T39] audit: type=1400 audit(1739913726.609:24078): avc: denied { read write } for pid=14432 comm="syz.1.2723" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 240.654015][ T39] audit: type=1400 audit(1739913726.609:24079): avc: denied { read write open } for pid=14432 comm="syz.1.2723" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 240.660649][ T39] audit: type=1400 audit(1739913726.609:24080): avc: denied { ioctl } for pid=14432 comm="syz.1.2723" path="/dev/vmci" dev="devtmpfs" ino=708 ioctlcmd=0x7b3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 240.667446][ T39] audit: type=1400 audit(1739913726.609:24081): avc: denied { create } for pid=14432 comm="syz.1.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 240.673530][ T39] audit: type=1400 audit(1739913726.629:24082): avc: denied { recv } for pid=5918 comm="syz-executor" saddr=127.0.0.1 src=50370 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 240.682588][ T39] audit: type=1400 audit(1739913726.639:24083): avc: denied { recv } for pid=39 comm="kauditd" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 240.723453][T14423] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.726189][T14423] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.728870][T14423] bridge_slave_0: entered allmulticast mode [ 240.731289][T14423] bridge_slave_0: entered promiscuous mode [ 240.737243][T14423] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.739458][T14423] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.741579][T14423] bridge_slave_1: entered allmulticast mode [ 240.744036][T14423] bridge_slave_1: entered promiscuous mode [ 240.771656][T14423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.772561][T14402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.777270][T14402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.778141][T14423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.830468][T14423] team0: Port device team_slave_0 added [ 240.847914][T14423] team0: Port device team_slave_1 added [ 240.912163][T14423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.915064][T14423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.925542][T14423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.931351][T14423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.933566][T14423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.940631][T14423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.006198][T14423] hsr_slave_0: entered promiscuous mode [ 241.014641][T14423] hsr_slave_1: entered promiscuous mode [ 241.018185][T14423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.021139][T14423] Cannot create hsr debugfs directory [ 241.037070][T14402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.043426][T14402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.061563][ T8] usb 11-1: USB disconnect, device number 6 [ 241.236556][T14423] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.278717][T14447] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20004 [ 241.304119][T14447] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2727'. [ 241.320881][T14423] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.396077][T14423] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.478626][T14423] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.541303][T14455] xt_SECMARK: invalid mode: 0 [ 241.558439][T14457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2730'. [ 241.563420][ T69] usb 11-1: Service connection timeout for: 256 [ 241.565881][ T69] ath9k_htc 11-1:1.0: ath9k_htc: Unable to initialize HTC services [ 241.573706][ T69] ath9k_htc: Failed to initialize the device [ 241.576286][ T8] usb 11-1: ath9k_htc: USB layer deinitialized [ 241.669451][T14423] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 241.685020][T14423] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 241.704938][T14423] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 241.721371][T14423] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 241.764042][T14463] netlink: 'syz.6.2732': attribute type 10 has an invalid length. [ 241.899709][T14423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.927189][T14471] openvswitch: netlink: IP tunnel dst address not specified [ 241.932181][T14423] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.944110][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.946219][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.962737][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.965628][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.969373][T14468] [U] à€E`ÞØÊ_òïÈTvß=æ¼B¥ ²›UÒôQ;Ö®Y±\9ž©Pþâ [ 242.015377][T14469] process '/newroot/480/file0' started with executable stack [ 242.177230][T14475] netlink: 'syz.6.2735': attribute type 12 has an invalid length. [ 242.284382][ T5940] Bluetooth: hci4: command tx timeout [ 242.312894][T14477] vlan2: entered allmulticast mode [ 242.358959][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2737'. [ 242.385507][T14479] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.387709][T14479] IPv6: NLM_F_CREATE should be set when creating new route [ 242.389803][T14479] IPv6: NLM_F_CREATE should be set when creating new route [ 242.632336][T14493] input: syz0 as /devices/virtual/input/input25 [ 242.657628][T14493] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2740'. [ 242.978441][T14506] batadv_slave_1: entered promiscuous mode [ 243.031177][T14506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2745'. [ 243.043964][T14505] batadv_slave_1: left promiscuous mode [ 243.374880][T14423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.595069][T14530] netlink: 'syz.1.2751': attribute type 9 has an invalid length. [ 243.597317][T14530] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.2751'. [ 243.601632][T14530] netlink: 'syz.1.2751': attribute type 12 has an invalid length. [ 243.932657][T14534] loop2: detected capacity change from 0 to 7 [ 243.934945][T14534] Dev loop2: unable to read RDB block 7 [ 243.936526][T14534] loop2: unable to read partition table [ 243.938270][T14534] loop2: partition table beyond EOD, truncated [ 243.940004][T14534] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 244.363378][ T5940] Bluetooth: hci4: command tx timeout [ 244.423729][T14559] tmpfs: Unknown parameter 'qordlimit' [ 244.435888][T14560] tmpfs: Unknown parameter 'qordlimit' [ 244.599250][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2759'. [ 244.650699][T14567] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 244.906723][T14423] veth0_vlan: entered promiscuous mode [ 244.933494][T14423] veth1_vlan: entered promiscuous mode [ 244.983789][T14423] veth0_macvtap: entered promiscuous mode [ 244.984698][T13958] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 244.992543][T14423] veth1_macvtap: entered promiscuous mode [ 245.016622][T14423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.019539][T14423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.022269][T14423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.025852][T14423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.028551][T14423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.031478][T14423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.036269][T14423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.051714][T14423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.055110][T14423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.057868][T14423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.061395][T14423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.065561][T14423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.072085][T14577] syz.4.2764: attempt to access beyond end of device [ 245.072085][T14577] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 245.077277][T14423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.080721][T14423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.083386][T14577] gfs2: error -5 reading superblock [ 245.089825][T14423] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.092297][T14423] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.095028][T14423] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.097437][T14423] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.105695][T14577] sp0: Synchronizing with TNC [ 245.145175][T13958] usb 6-1: Using ep0 maxpacket: 16 [ 245.154597][T13958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 245.197199][T13958] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 245.199819][T13958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.202074][T13958] usb 6-1: Product: syz [ 245.203248][T13958] usb 6-1: Manufacturer: syz [ 245.207001][T13958] usb 6-1: SerialNumber: syz [ 245.217301][T13958] usb 6-1: config 0 descriptor?? [ 245.237690][ T7720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.238550][T13958] hub 6-1:0.0: bad descriptor, ignoring hub [ 245.241180][ T7720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.242271][T13958] hub 6-1:0.0: probe with driver hub failed with error -5 [ 245.257030][T13958] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input26 [ 245.279025][T13958] input: failed to attach handler mousedev to device input26, error: -5 [ 245.296997][ T7730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.299319][ T7730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.421794][T14585] netlink: 'syz.6.2766': attribute type 12 has an invalid length. [ 245.583584][ T69] usb 6-1: USB disconnect, device number 20 [ 245.672016][ T39] kauditd_printk_skb: 1150 callbacks suppressed [ 245.672028][ T39] audit: type=1400 audit(1739913731.629:25234): avc: denied { create } for pid=14589 comm="syz.4.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 245.683805][ T39] audit: type=1400 audit(1739913731.639:25235): avc: denied { ioctl } for pid=14589 comm="syz.4.2767" path="socket:[63980]" dev="sockfs" ino=63980 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 245.692977][ T39] audit: type=1400 audit(1739913731.639:25236): avc: denied { recv } for pid=14589 comm="syz.4.2767" saddr=fc00:18:c6ba:3500::700 daddr=ff02::1 netif=rose22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 245.728048][ T39] audit: type=1400 audit(1739913731.679:25237): avc: denied { mounton } for pid=14423 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 245.736818][ T39] audit: type=1400 audit(1739913731.679:25238): avc: denied { mount } for pid=14423 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 245.757495][ T39] audit: type=1400 audit(1739913731.719:25239): avc: denied { create } for pid=14591 comm="syz.6.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 245.776673][ T39] audit: type=1400 audit(1739913731.719:25240): avc: denied { ioctl } for pid=14591 comm="syz.6.2768" path="socket:[63148]" dev="sockfs" ino=63148 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 245.794085][ T39] audit: type=1400 audit(1739913731.719:25241): avc: denied { module_request } for pid=14591 comm="syz.6.2768" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 245.803173][ T39] audit: type=1400 audit(1739913731.759:25242): avc: denied { read write } for pid=14423 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.821003][T14595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.843360][ T39] audit: type=1400 audit(1739913731.759:25243): avc: denied { recv } for pid=5918 comm="syz-executor" saddr=127.0.0.1 src=50370 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 245.908476][T14599] input: syz0 as /devices/virtual/input/input27 [ 246.270813][T14607] syz.4.2769: attempt to access beyond end of device [ 246.270813][T14607] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 246.302169][T14607] XFS (nbd4): SB validate failed with error -5. [ 246.451176][ T5940] Bluetooth: hci4: command tx timeout [ 246.631983][T14624] sock: sock_timestamping_bind_phc: sock not bind to device [ 248.524143][ T5940] Bluetooth: hci4: command tx timeout [ 249.015503][T14644] vlan2: entered allmulticast mode [ 249.396665][T14661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2781'. [ 249.736476][T14675] netlink: 160 bytes leftover after parsing attributes in process `syz.5.2785'. [ 249.931586][T14683] vlan2: entered allmulticast mode [ 250.035775][T14690] 9pnet: p9_errstr2errno: server reported unknown error ÎL-åÅu¸×¥BãͨÉA•e‹&|Û£^î [ 250.208310][T14697] tmpfs: Bad value for 'mpol' [ 250.239021][T14697] syz.1.2793 (14697): /proc/14695/oom_adj is deprecated, please use /proc/14695/oom_score_adj instead. [ 250.256300][T14697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2793'. [ 250.302116][T14699] team0: Device ipip0 is of different type [ 250.361539][T14700] team0: Device ipip0 is of different type [ 250.371379][T14696] loop2: detected capacity change from 0 to 7 [ 250.375588][T14696] Dev loop2: unable to read RDB block 7 [ 250.377182][T14696] loop2: unable to read partition table [ 250.378773][T14696] loop2: partition table beyond EOD, truncated [ 250.380432][T14696] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 250.446527][T14699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14699 comm=syz.4.2794 [ 250.605556][T14713] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2798'. [ 250.608217][T14713] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2798'. [ 250.673912][ T39] kauditd_printk_skb: 776 callbacks suppressed [ 250.673924][ T39] audit: type=1400 audit(1739913736.639:26020): avc: denied { read write } for pid=14716 comm="syz.1.2801" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 250.687115][ T39] audit: type=1400 audit(1739913736.639:26021): avc: denied { bpf } for pid=14714 comm="syz.4.2799" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 250.699771][ T39] audit: type=1400 audit(1739913736.639:26022): avc: denied { prog_run } for pid=14714 comm="syz.4.2799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 250.710474][ T39] audit: type=1400 audit(1739913736.649:26023): avc: denied { map } for pid=14716 comm="syz.1.2801" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 250.719618][ T39] audit: type=1400 audit(1739913736.649:26024): avc: denied { read } for pid=14717 comm="syz.5.2800" dev="nsfs" ino=4026532902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 250.728180][ T39] audit: type=1400 audit(1739913736.649:26025): avc: denied { read write } for pid=14716 comm="syz.1.2801" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 250.737591][ T39] audit: type=1400 audit(1739913736.649:26026): avc: denied { read open } for pid=14717 comm="syz.5.2800" path="net:[4026532902]" dev="nsfs" ino=4026532902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 250.753514][ T39] audit: type=1400 audit(1739913736.649:26027): avc: denied { create } for pid=14717 comm="syz.5.2800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 250.759211][ T39] audit: type=1400 audit(1739913736.649:26028): avc: denied { bind } for pid=14717 comm="syz.5.2800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 250.777495][ T39] audit: type=1400 audit(1739913736.649:26029): avc: denied { map_create } for pid=14717 comm="syz.5.2800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 250.823470][T14724] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.894712][T14730] netlink: 'syz.1.2804': attribute type 1 has an invalid length. [ 250.924579][T14730] netlink: 'syz.1.2804': attribute type 1 has an invalid length. [ 250.972206][T14724] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.989372][T14736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14736 comm=syz.4.2805 [ 250.995558][T14736] netlink: 'syz.4.2805': attribute type 1 has an invalid length. [ 251.004274][T14736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.017088][T14736] bond0: (slave ip6gretap1): making interface the new active one [ 251.019821][T14736] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 251.079176][T14724] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.185062][T14724] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.190166][T14735] loop2: detected capacity change from 0 to 7 [ 251.201241][T14735] Dev loop2: unable to read RDB block 7 [ 251.203611][T14735] loop2: unable to read partition table [ 251.205350][T14735] loop2: partition table beyond EOD, truncated [ 251.207215][T14735] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 251.284748][T14724] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.323393][ T5978] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 251.329083][T14724] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.342925][T14724] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.347539][T14746] xt_l2tp: invalid flags combination: c [ 251.358866][T14724] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.456564][T14748] lo speed is unknown, defaulting to 1000 [ 251.515795][ T5978] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 251.518556][ T5978] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 251.521404][ T5978] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 251.533416][ T5978] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 251.536551][ T5978] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 251.551787][ T5978] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 251.554329][ T5978] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 251.557092][ T5978] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 251.559757][ T5978] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 251.562836][ T5978] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 251.573719][ T5978] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 251.576115][ T5978] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 251.583316][ T5978] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 251.585984][ T5978] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 251.588833][ T5978] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 251.620269][ T5978] usb 6-1: string descriptor 0 read error: -22 [ 251.622153][ T5978] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 251.625017][ T5978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.653038][ T5978] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 251.881308][ T7708] usb 6-1: USB disconnect, device number 21 [ 252.556137][T14774] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2817'. [ 252.561604][T14774] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2817'. [ 252.863837][T14791] dlm: no locking on control device [ 252.963519][ T1465] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 253.113423][ T1465] usb 10-1: Using ep0 maxpacket: 16 [ 253.128859][ T1465] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 253.142796][ T1465] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.149955][ T1465] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 253.153091][ T1465] usb 10-1: SerialNumber: syz [ 253.415899][T14807] netlink: 'syz.6.2827': attribute type 12 has an invalid length. [ 253.490195][T14813] vlan2: entered allmulticast mode [ 253.526233][T14814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.617897][ T1465] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 253.628473][ T1465] usb 10-1: USB disconnect, device number 6 [ 254.026750][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2838'. [ 254.056406][T14838] vlan2: entered allmulticast mode [ 254.441709][T14851] netlink: 'syz.6.2844': attribute type 10 has an invalid length. [ 254.444298][T14851] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2844'. [ 254.458067][T14851] team0: Port device geneve0 added [ 254.859790][T14855] Bluetooth: Invalid byte 02 after esc byte [ 254.863097][T14855] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 255.105078][T14857] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 255.107363][T14857] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 255.109166][T14857] syzkaller0: Linktype set failed because interface is up [ 255.271318][T14862] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2848'. [ 255.278411][T14862] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2848'. [ 255.684938][ T39] kauditd_printk_skb: 1479 callbacks suppressed [ 255.684960][ T39] audit: type=1400 audit(1739913741.629:27509): avc: denied { module_request } for pid=14867 comm="syz.6.2850" kmod="block-major-6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 255.734740][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.736561][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.741030][ T39] audit: type=1400 audit(1739913741.699:27510): avc: denied { egress } for pid=24 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 255.748939][ T39] audit: type=1400 audit(1739913741.699:27511): avc: denied { sendto } for pid=24 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 255.882431][ T39] audit: type=1400 audit(1739913741.839:27512): avc: denied { recv } for pid=5918 comm="syz-executor" saddr=127.0.0.1 src=50370 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 255.891505][ T39] audit: type=1400 audit(1739913741.839:27513): avc: denied { recv } for pid=5915 comm="sshd" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 255.913483][ T39] audit: type=1400 audit(1739913741.859:27514): avc: denied { read write } for pid=8296 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 255.920052][ T39] audit: type=1400 audit(1739913741.859:27515): avc: denied { read write open } for pid=8296 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 255.927445][ T39] audit: type=1400 audit(1739913741.859:27516): avc: denied { ioctl } for pid=8296 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 255.934586][ T39] audit: type=1400 audit(1739913741.889:27517): avc: denied { recv } for pid=29 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50370 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 255.941564][ T39] audit: type=1400 audit(1739913741.889:27518): avc: denied { recv } for pid=29 comm="ksoftirqd/1" saddr=127.0.0.1 src=50370 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 256.925466][ T5940] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 257.072800][T14879] netlink: 'syz.1.2853': attribute type 2 has an invalid length. [ 257.075051][T14879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2853'. [ 257.862368][T14876] netlink: 'syz.6.2852': attribute type 12 has an invalid length. [ 258.031088][T14886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.438265][T14884] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 258.612139][T14883] syz.5.2854 (14883): drop_caches: 1 [ 258.627927][T14902] lo speed is unknown, defaulting to 1000 [ 258.653637][T14883] syz.5.2854 (14883): drop_caches: 1 [ 258.867264][T14913] netlink: 'syz.1.2863': attribute type 12 has an invalid length. [ 259.340131][T14926] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2865'. [ 259.399460][T14920] GUP no longer grows the stack in syz.6.2865 (14920): 400000004000-40000000a000 (400000002000) [ 259.405891][T14920] CPU: 2 UID: 0 PID: 14920 Comm: syz.6.2865 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 259.405910][T14920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 259.405918][T14920] Call Trace: [ 259.405922][T14920] [ 259.405927][T14920] dump_stack_lvl+0x16c/0x1f0 [ 259.405949][T14920] gup_vma_lookup+0x1d2/0x220 [ 259.406003][T14920] __get_user_pages+0x236/0x36f0 [ 259.406015][T14920] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 259.406063][T14920] ? __gup_longterm_locked+0x124/0x1870 [ 259.406074][T14920] ? __gup_longterm_locked+0x124/0x1870 [ 259.406088][T14920] ? __pfx___get_user_pages+0x10/0x10 [ 259.406105][T14920] ? down_read_killable+0xcc/0x380 [ 259.406122][T14920] ? __pfx_down_read_killable+0x10/0x10 [ 259.406136][T14920] ? mark_lock+0xb5/0xc60 [ 259.406158][T14920] ? find_held_lock+0x2d/0x110 [ 259.406171][T14920] __gup_longterm_locked+0x212/0x1870 [ 259.406182][T14920] ? __pfx_lock_release+0x10/0x10 [ 259.406198][T14920] ? trace_lock_acquire+0x14e/0x1f0 [ 259.406214][T14920] ? __pfx___gup_longterm_locked+0x10/0x10 [ 259.406224][T14920] ? gup_fast_fallback+0x84c/0x2690 [ 259.406235][T14920] ? __pfx_lock_release+0x10/0x10 [ 259.406252][T14920] ? mark_held_locks+0x9f/0xe0 [ 259.406269][T14920] gup_fast_fallback+0x1802/0x2690 [ 259.406287][T14920] ? __pfx_gup_fast_fallback+0x10/0x10 [ 259.406301][T14920] ? hlock_class+0x4e/0x130 [ 259.406315][T14920] get_user_pages_fast+0xa8/0x100 [ 259.406325][T14920] ? __pfx_get_user_pages_fast+0x10/0x10 [ 259.406336][T14920] ? __mutex_trylock_common+0xea/0x250 [ 259.406354][T14920] __iov_iter_get_pages_alloc+0x8ed/0x2280 [ 259.406413][T14920] ? trace_contention_end+0xee/0x140 [ 259.406431][T14920] ? __mutex_lock+0x1cc/0xb10 [ 259.406444][T14920] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 259.406457][T14920] ? pipe_lock+0x64/0x80 [ 259.406491][T14920] ? __fget_files+0x1fc/0x3a0 [ 259.406504][T14920] ? __pfx___mutex_lock+0x10/0x10 [ 259.406516][T14920] ? import_ubuf+0x1b6/0x220 [ 259.406536][T14920] iov_iter_get_pages2+0xa4/0x100 [ 259.406548][T14920] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 259.406560][T14920] ? wait_for_space+0x224/0x2d0 [ 259.406580][T14920] __do_sys_vmsplice+0xa13/0xef0 [ 259.406601][T14920] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 259.406625][T14920] ? __pfx_futex_wait+0x10/0x10 [ 259.406646][T14920] ? lock_acquire.part.0+0x11b/0x380 [ 259.406660][T14920] ? find_held_lock+0x2d/0x110 [ 259.406684][T14920] ? rcu_is_watching+0x12/0xc0 [ 259.406701][T14920] ? do_syscall_64+0xcd/0x250 [ 259.406713][T14920] do_syscall_64+0xcd/0x250 [ 259.406726][T14920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.406744][T14920] RIP: 0033:0x7f4abd18cde9 [ 259.406754][T14920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.406764][T14920] RSP: 002b:00007f4abdffb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 259.406776][T14920] RAX: ffffffffffffffda RBX: 00007f4abd3a5fa0 RCX: 00007f4abd18cde9 [ 259.406782][T14920] RDX: 0000000000000001 RSI: 00004000000000c0 RDI: 000000000000000a [ 259.406789][T14920] RBP: 00007f4abd20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 259.406797][T14920] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 259.406804][T14920] R13: 0000000000000000 R14: 00007f4abd3a5fa0 R15: 00007ffe1b98f8a8 [ 259.406818][T14920] [ 259.523445][ T9196] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 259.614235][T14936] netlink: 'syz.4.2870': attribute type 5 has an invalid length. [ 259.621133][T14935] netlink: 596 bytes leftover after parsing attributes in process `syz.5.2871'. [ 259.693375][ T9196] usb 6-1: Invalid ep0 maxpacket: 16 [ 259.700749][T14940] netlink: 'syz.4.2872': attribute type 12 has an invalid length. [ 259.833636][ T9196] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 259.906683][T14946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2874'. [ 259.910174][T14946] netlink: 'syz.4.2874': attribute type 7 has an invalid length. [ 259.913176][T14946] netlink: 'syz.4.2874': attribute type 8 has an invalid length. [ 259.915058][T14947] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2874'. [ 259.920281][T14946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2874'. [ 259.923568][T14947] netlink: 'syz.4.2874': attribute type 7 has an invalid length. [ 259.926733][T14947] netlink: 'syz.4.2874': attribute type 8 has an invalid length. [ 259.929759][T14947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2874'. [ 260.007374][ T9196] usb 6-1: Invalid ep0 maxpacket: 16 [ 260.011256][ T9196] usb usb6-port1: attempt power cycle [ 260.035759][T14949] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2875'. [ 260.353619][ T9196] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 260.375230][ T9196] usb 6-1: Invalid ep0 maxpacket: 16 [ 260.503429][ T9196] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 260.517904][T14971] vlan2: entered allmulticast mode [ 260.528520][ T9196] usb 6-1: Invalid ep0 maxpacket: 16 [ 260.530828][ T9196] usb usb6-port1: unable to enumerate USB device [ 260.695057][ T39] kauditd_printk_skb: 786 callbacks suppressed [ 260.695069][ T39] audit: type=1400 audit(1739913746.659:28305): avc: denied { recv } for pid=5918 comm="syz-executor" saddr=127.0.0.1 src=50370 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 260.712496][ T39] audit: type=1400 audit(1739913746.669:28306): avc: denied { mounton } for pid=14974 comm="syz.5.2883" path="/30/bus" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 260.728954][ T39] audit: type=1400 audit(1739913746.689:28307): avc: denied { recv } for pid=5918 comm="syz-executor" saddr=127.0.0.1 src=50370 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 260.736306][ T39] audit: type=1400 audit(1739913746.689:28308): avc: denied { recv } for pid=5915 comm="sshd" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 260.743045][ T39] audit: type=1400 audit(1739913746.699:28309): avc: denied { unlink } for pid=14974 comm="syz.5.2883" name="#3e" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 260.769759][ T39] audit: type=1400 audit(1739913746.729:28310): avc: denied { create } for pid=14974 comm="syz.5.2883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 260.783453][ T39] audit: type=1400 audit(1739913746.729:28311): avc: denied { connect } for pid=14974 comm="syz.5.2883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 260.789045][ T39] audit: type=1400 audit(1739913746.729:28312): avc: denied { mount } for pid=14974 comm="syz.5.2883" name="/" dev="overlay" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 260.796379][ T39] audit: type=1400 audit(1739913746.739:28313): avc: denied { recv } for pid=13773 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50370 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 260.803552][ T39] audit: type=1400 audit(1739913746.739:28314): avc: denied { recv } for pid=13773 comm="syz-executor" saddr=127.0.0.1 src=50370 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 260.997882][T14980] kvm: pic: non byte read [ 261.272014][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2888'. [ 261.421144][T15005] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2891'. [ 261.524558][T15001] loop2: detected capacity change from 0 to 7 [ 261.527216][T15001] Dev loop2: unable to read RDB block 7 [ 261.528836][T15001] loop2: unable to read partition table [ 261.530486][T15001] loop2: partition table beyond EOD, truncated [ 261.532255][T15001] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 261.651296][T15013] block device autoloading is deprecated and will be removed. [ 261.676611][T15016] sg_write: data in/out 489/14 bytes for SCSI command 0x0-- guessing data in; [ 261.676611][T15016] program syz.6.2896 not setting count and/or reply_len properly [ 261.694190][T15017] netlink: 'syz.4.2895': attribute type 12 has an invalid length. [ 262.009294][T15032] vlan2: entered allmulticast mode [ 262.166762][T15039] netlink: 448 bytes leftover after parsing attributes in process `syz.5.2903'. [ 262.295383][T15043] : renamed from bond0 (while UP) [ 262.431816][T15051] vivid-001: disconnect [ 262.480138][T15059] vivid-001: reconnect [ 262.793450][ T1465] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 262.883460][T15079] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input28 [ 262.958228][T15080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2917'. [ 262.970683][ T1465] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 262.977542][ T1465] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 262.991444][ T1465] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 262.997926][ T1465] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 263.013462][ T1465] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 263.016290][ T1465] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.019627][ T1465] usb 9-1: Product: syz [ 263.020893][ T1465] usb 9-1: Manufacturer: syz [ 263.022251][ T1465] usb 9-1: SerialNumber: syz [ 263.035952][ T1465] usb 9-1: config 0 descriptor?? [ 263.042670][T15052] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 263.055437][ T1465] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input29 [ 263.278319][ T7708] usb 9-1: USB disconnect, device number 13 [ 263.659846][T15105] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 263.919177][T15108] loop2: detected capacity change from 0 to 7 [ 263.921610][T15108] Dev loop2: unable to read RDB block 7 [ 263.923415][T15108] loop2: unable to read partition table [ 263.925223][T15108] loop2: partition table beyond EOD, truncated [ 263.927087][T15108] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 264.313458][ T69] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 264.315833][T15124] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 264.500231][ T69] usb 11-1: Using ep0 maxpacket: 8 [ 264.518178][ T69] usb 11-1: config 2 interface 0 has no altsetting 0 [ 264.536112][ T69] usb 11-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 264.538855][ T69] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.541141][ T69] usb 11-1: Product: syz [ 264.542339][ T69] usb 11-1: Manufacturer: syz [ 264.552995][ T69] usb 11-1: SerialNumber: syz [ 264.797531][T15116] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 264.799846][T15116] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 264.808785][T15116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.828940][ T69] usb 11-1: USB disconnect, device number 7 [ 264.952414][T15146] netlink: 'syz.4.2937': attribute type 10 has an invalid length. [ 264.958321][T15146] syz_tun: entered promiscuous mode [ 265.136673][T15168] __nla_validate_parse: 3 callbacks suppressed [ 265.136687][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2942'. [ 265.140884][T15168] netlink: 'syz.5.2942': attribute type 22 has an invalid length. [ 265.143153][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2942'. [ 265.163028][T15168] batman_adv: batadv0: Adding interface: geneve2 [ 265.166709][T15168] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 265.498888][T15190] netlink: 'syz.4.2948': attribute type 15 has an invalid length. [ 265.508549][T15190] syz_tun: left promiscuous mode [ 265.526154][T15190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.675451][T15196] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2950'. [ 265.705456][ T39] kauditd_printk_skb: 1368 callbacks suppressed [ 265.705475][ T39] audit: type=1400 audit(1739913751.669:29683): avc: denied { mounton } for pid=15198 comm="syz.4.2952" path="/103/file0" dev="tmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 265.717781][ T39] audit: type=1400 audit(1739913751.679:29684): avc: denied { recv } for pid=29 comm="ksoftirqd/1" saddr=127.0.0.1 src=50370 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 265.728833][ T39] audit: type=1400 audit(1739913751.689:29685): avc: denied { mount } for pid=15198 comm="syz.4.2952" name="/" dev="9p" ino=36185978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 265.738257][ T39] audit: type=1400 audit(1739913751.699:29686): avc: denied { create } for pid=15198 comm="syz.4.2952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 265.746316][ T39] audit: type=1400 audit(1739913751.709:29687): avc: denied { getopt } for pid=15198 comm="syz.4.2952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 265.751951][ T39] audit: type=1400 audit(1739913751.709:29688): avc: denied { read } for pid=15201 comm="syz.5.2953" dev="nsfs" ino=4026532902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 265.759990][ T39] audit: type=1400 audit(1739913751.709:29689): avc: denied { read open } for pid=15201 comm="syz.5.2953" path="net:[4026532902]" dev="nsfs" ino=4026532902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 265.768769][ T39] audit: type=1400 audit(1739913751.709:29690): avc: denied { create } for pid=15201 comm="syz.5.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 265.770744][T15200] fuse: Bad value for 'fd' [ 265.776209][ T39] audit: type=1400 audit(1739913751.719:29691): avc: denied { ioctl } for pid=15201 comm="syz.5.2953" path="socket:[67896]" dev="sockfs" ino=67896 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 265.786295][ T39] audit: type=1400 audit(1739913751.719:29692): avc: denied { ioctl } for pid=15201 comm="syz.5.2953" path="socket:[67896]" dev="sockfs" ino=67896 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 265.856066][T15202] fuse: Bad value for 'user_id' [ 265.858050][T15202] fuse: Bad value for 'user_id' [ 266.096442][T15211] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2956'. [ 266.141891][T15215] vlan2: entered allmulticast mode [ 266.246619][T15222] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 266.359267][T15227] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 266.362250][T15227] overlayfs: missing 'lowerdir' [ 266.417880][T15228] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 266.584480][T15232] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 266.594935][T15239] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2964'. [ 266.778448][T15244] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2967'. [ 266.781896][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2967'. [ 266.893097][T15250] vlan2: entered allmulticast mode [ 267.002326][T15257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2971'. [ 267.186801][T15260] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 267.189956][T15260] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 267.209660][T15260] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 267.217867][T15260] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 267.220273][T15260] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 267.290081][T15260] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 268.119773][T15290] vlan2: entered allmulticast mode [ 268.358818][T15310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2984'. [ 268.663612][ T5977] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 268.823382][ T5977] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.828651][ T5977] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.834480][ T5977] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 268.839401][ T5977] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.850985][ T5977] usb 10-1: config 0 descriptor?? [ 268.880491][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2991'. [ 268.893541][T15324] netlink: 'syz.6.2991': attribute type 30 has an invalid length. [ 269.165165][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 269.243432][ T5940] Bluetooth: hci4: command 0x0c1a tx timeout [ 269.483384][T15344] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(37) [ 269.485298][T15344] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 269.489822][T15344] vhci_hcd vhci_hcd.0: Device attached [ 269.502250][T15345] vhci_hcd: connection closed [ 269.502588][ T7731] vhci_hcd: stop threads [ 269.505774][ T7731] vhci_hcd: release socket [ 269.507325][ T7731] vhci_hcd: disconnect device [ 269.699489][T15351] ntfs3(sr0): Primary boot signature is not NTFS. [ 269.701839][T15351] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 269.721395][T15330] ntfs3(sr0): Primary boot signature is not NTFS. [ 269.723543][T15330] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 269.764844][ T5977] usbhid 10-1:0.0: can't add hid device: -71 [ 269.766793][ T5977] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 269.784100][ T5977] usb 10-1: USB disconnect, device number 7 [ 270.734150][ T39] kauditd_printk_skb: 1199 callbacks suppressed [ 270.734171][ T39] audit: type=1400 audit(1739913756.699:30892): avc: denied { recv } for pid=5918 comm="syz-executor" saddr=127.0.0.1 src=50370 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 270.746870][ T39] audit: type=1400 audit(1739913756.699:30893): avc: denied { recv } for pid=13975 comm="syz-executor" saddr=10.0.2.2 src=36092 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 270.756449][ T39] audit: type=1400 audit(1739913756.709:30894): avc: denied { read write } for pid=13975 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 270.765188][ T39] audit: type=1400 audit(1739913756.709:30895): avc: denied { read write open } for pid=13975 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 270.772205][ T39] audit: type=1400 audit(1739913756.709:30896): avc: denied { ioctl } for pid=13975 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 270.779432][ T39] audit: type=1400 audit(1739913756.709:30897): avc: denied { read } for pid=5333 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 270.785506][ T39] audit: type=1400 audit(1739913756.709:30898): avc: denied { search } for pid=5333 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.791782][ T39] audit: type=1400 audit(1739913756.709:30899): avc: denied { append } for pid=5333 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 270.804056][T15362] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 270.823412][ T39] audit: type=1400 audit(1739913756.709:30900): avc: denied { append open } for pid=5333 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 270.830679][ T39] audit: type=1400 audit(1739913756.709:30901): avc: denied { getattr } for pid=5333 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 271.115239][T15393] lo speed is unknown, defaulting to 1000 [ 271.253494][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 271.307896][T15404] vlan2: entered allmulticast mode [ 271.323496][ T5940] Bluetooth: hci4: command 0x0c1a tx timeout [ 271.999152][T15396] rtc_cmos 00:05: Alarms can be up to one day in the future [ 272.036965][ T5980] rtc_cmos 00:05: Alarms can be up to one day in the future [ 272.040243][ T5980] rtc_cmos 00:05: Alarms can be up to one day in the future [ 272.043658][ T5980] rtc_cmos 00:05: Alarms can be up to one day in the future [ 272.046494][ T5980] rtc_cmos 00:05: Alarms can be up to one day in the future [ 272.048944][ T5980] rtc rtc0: __rtc_set_alarm: err=-22 [ 272.759035][T15440] __nla_validate_parse: 3 callbacks suppressed [ 272.759048][T15440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3025'. [ 272.763548][T15440] tipc: Invalid UDP bearer configuration [ 272.763581][T15440] tipc: Enabling of bearer rejected, failed to enable media [ 272.769474][ T5940] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 272.896159][T15447] ucma_write: process 1504 (syz.6.3028) changed security contexts after opening file descriptor, this is not allowed. [ 273.001111][T15440] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3025'. [ 273.175118][T15452] loop2: detected capacity change from 0 to 7 [ 273.189994][T15452] Dev loop2: unable to read RDB block 7 [ 273.191790][T15452] loop2: unable to read partition table [ 273.200345][T15452] loop2: partition table beyond EOD, truncated [ 273.202450][T15452] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 273.333987][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 273.380471][T15472] nft_compat: unsupported protocol 1 [ 273.403606][ T5940] Bluetooth: hci4: command 0x0c1a tx timeout [ 273.695213][T15478] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 273.930822][T15483] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 273.948591][T15483] netlink: 'syz.5.3039': attribute type 10 has an invalid length. [ 273.951696][T15483] syz_tun: entered promiscuous mode [ 273.967782][T15483] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 274.300696][T15496] vlan2: entered allmulticast mode [ 274.329848][T15495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3045'. [ 274.708056][T15507] block nbd4: NBD_DISCONNECT [ 274.713138][T15507] [ 274.713896][T15507] ====================================================== [ 274.715837][T15507] WARNING: possible circular locking dependency detected [ 274.717786][T15507] 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 Not tainted [ 274.721072][T15507] ------------------------------------------------------ [ 274.724048][T15507] syz.4.3048/15507 is trying to acquire lock: [ 274.725755][T15507] ffff88804ed2bbd8 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_sendmsg+0x47/0x520 [ 274.728402][T15507] [ 274.728402][T15507] but task is already holding lock: [ 274.730639][T15507] ffff888028f74e70 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_disconnect+0x321/0x540 [ 274.733425][T15507] [ 274.733425][T15507] which lock already depends on the new lock. [ 274.733425][T15507] [ 274.736255][T15507] [ 274.736255][T15507] the existing dependency chain (in reverse order) is: [ 274.738720][T15507] [ 274.738720][T15507] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 274.740994][T15507] __mutex_lock+0x19b/0xb10 [ 274.742524][T15507] sock_shutdown+0x16f/0x280 [ 274.743958][T15507] nbd_config_put+0x1e6/0x750 [ 274.745437][T15507] nbd_release+0xb7/0x190 [ 274.746806][T15507] blkdev_put_whole+0xad/0xf0 [ 274.748426][T15507] bdev_release+0x47e/0x6d0 [ 274.749836][T15507] blkdev_release+0x15/0x20 [ 274.751295][T15507] __fput+0x3ff/0xb70 [ 274.752741][T15507] task_work_run+0x14e/0x250 [ 274.754273][T15507] syscall_exit_to_user_mode+0x27b/0x2a0 [ 274.755985][T15507] do_syscall_64+0xda/0x250 [ 274.757398][T15507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.759213][T15507] [ 274.759213][T15507] -> #5 (&nbd->config_lock){+.+.}-{4:4}: [ 274.761412][T15507] __mutex_lock+0x19b/0xb10 [ 274.763137][T15507] refcount_dec_and_mutex_lock+0x51/0xc0 [ 274.765677][T15507] nbd_config_put+0x31/0x750 [ 274.767305][T15507] nbd_release+0xb7/0x190 [ 274.768683][T15507] blkdev_put_whole+0xad/0xf0 [ 274.770130][T15507] bdev_release+0x47e/0x6d0 [ 274.771580][T15507] blkdev_release+0x15/0x20 [ 274.773051][T15507] __fput+0x3ff/0xb70 [ 274.774477][T15507] __fput_sync+0xa1/0xc0 [ 274.775822][T15507] __x64_sys_close+0x86/0x100 [ 274.777268][T15507] do_syscall_64+0xcd/0x250 [ 274.778680][T15507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.780450][T15507] [ 274.780450][T15507] -> #4 (&disk->open_mutex){+.+.}-{4:4}: [ 274.782622][T15507] __mutex_lock+0x19b/0xb10 [ 274.784276][T15507] bdev_open+0x41a/0xe20 [ 274.786174][T15507] bdev_file_open_by_dev+0x17d/0x210 [ 274.788095][T15507] disk_scan_partitions+0x1ed/0x320 [ 274.789679][T15507] add_disk_fwnode+0x1006/0x1320 [ 274.791181][T15507] pmem_attach_disk+0x9a1/0x13e0 [ 274.792692][T15507] nd_pmem_probe+0x1a9/0x1f0 [ 274.794137][T15507] nvdimm_bus_probe+0x169/0x5d0 [ 274.796043][T15507] really_probe+0x23e/0xa90 [ 274.797818][T15507] __driver_probe_device+0x1de/0x440 [ 274.799384][T15507] driver_probe_device+0x4c/0x1b0 [ 274.800912][T15507] __driver_attach+0x283/0x580 [ 274.802337][T15507] bus_for_each_dev+0x13c/0x1d0 [ 274.803819][T15507] bus_add_driver+0x2e9/0x690 [ 274.805454][T15507] driver_register+0x15c/0x4b0 [ 274.807483][T15507] __nd_driver_register+0x103/0x1a0 [ 274.809363][T15507] do_one_initcall+0x128/0x700 [ 274.810875][T15507] kernel_init_freeable+0x5c7/0x900 [ 274.812591][T15507] kernel_init+0x1c/0x2b0 [ 274.813954][T15507] ret_from_fork+0x45/0x80 [ 274.815364][T15507] ret_from_fork_asm+0x1a/0x30 [ 274.816878][T15507] [ 274.816878][T15507] -> #3 (&nvdimm_namespace_key){+.+.}-{4:4}: [ 274.819106][T15507] __mutex_lock+0x19b/0xb10 [ 274.820519][T15507] uevent_show+0x188/0x3b0 [ 274.821987][T15507] dev_attr_show+0x53/0xe0 [ 274.823385][T15507] sysfs_kf_seq_show+0x23e/0x410 [ 274.824985][T15507] seq_read_iter+0x4f4/0x12b0 [ 274.826596][T15507] kernfs_fop_read_iter+0x414/0x580 [ 274.828810][T15507] vfs_read+0x886/0xbf0 [ 274.830501][T15507] ksys_read+0x12b/0x250 [ 274.831876][T15507] do_syscall_64+0xcd/0x250 [ 274.833313][T15507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.835117][T15507] [ 274.835117][T15507] -> #2 (kn->active#5){++++}-{0:0}: [ 274.837207][T15507] kernfs_drain+0x48f/0x590 [ 274.838627][T15507] __kernfs_remove+0x281/0x670 [ 274.840096][T15507] kernfs_remove_by_name_ns+0xb2/0x130 [ 274.841804][T15507] device_del+0x381/0x9f0 [ 274.843179][T15507] unregister_netdevice_many_notify+0x13aa/0x1f30 [ 274.845242][T15507] unregister_netdevice_queue+0x307/0x3f0 [ 274.846996][T15507] unregister_netdev+0x21/0x30 [ 274.848928][T15507] sixpack_close+0x1e7/0x2f0 [ 274.851147][T15507] tty_ldisc_close+0x111/0x1a0 [ 274.853058][T15507] tty_ldisc_kill+0x8e/0x150 [ 274.854505][T15507] tty_ldisc_release+0x116/0x2a0 [ 274.856039][T15507] tty_release_struct+0x23/0xe0 [ 274.857597][T15507] tty_release+0xe25/0x1410 [ 274.859090][T15507] __fput+0x3ff/0xb70 [ 274.860343][T15507] task_work_run+0x14e/0x250 [ 274.861837][T15507] syscall_exit_to_user_mode+0x27b/0x2a0 [ 274.863612][T15507] do_syscall_64+0xda/0x250 [ 274.865040][T15507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.866826][T15507] [ 274.866826][T15507] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 274.868873][T15507] __mutex_lock+0x19b/0xb10 [ 274.870795][T15507] smc_vlan_by_tcpsk+0x251/0x620 [ 274.872976][T15507] __smc_connect+0x44d/0x4890 [ 274.874850][T15507] smc_connect+0x2fc/0x760 [ 274.876231][T15507] __sys_connect_file+0x13e/0x1a0 [ 274.877800][T15507] __sys_connect+0x14f/0x170 [ 274.879235][T15507] __x64_sys_connect+0x72/0xb0 [ 274.881061][T15507] do_syscall_64+0xcd/0x250 [ 274.882473][T15507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.884255][T15507] [ 274.884255][T15507] -> #0 (sk_lock-AF_SMC){+.+.}-{0:0}: [ 274.886359][T15507] __lock_acquire+0x249e/0x3c40 [ 274.887893][T15507] lock_acquire.part.0+0x11b/0x380 [ 274.889464][T15507] lock_sock_nested+0x3a/0xf0 [ 274.891180][T15507] smc_sendmsg+0x47/0x520 [ 274.893127][T15507] sock_sendmsg+0x3d3/0x490 [ 274.894951][T15507] __sock_xmit+0x1e8/0x4f0 [ 274.896338][T15507] nbd_disconnect+0x390/0x540 [ 274.897796][T15507] nbd_ioctl+0x8d1/0xd60 [ 274.899134][T15507] blkdev_ioctl+0x276/0x6d0 [ 274.900561][T15507] __x64_sys_ioctl+0x190/0x200 [ 274.902081][T15507] do_syscall_64+0xcd/0x250 [ 274.903491][T15507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.905277][T15507] [ 274.905277][T15507] other info that might help us debug this: [ 274.905277][T15507] [ 274.908324][T15507] Chain exists of: [ 274.908324][T15507] sk_lock-AF_SMC --> &nbd->config_lock --> &nsock->tx_lock [ 274.908324][T15507] [ 274.912005][T15507] Possible unsafe locking scenario: [ 274.912005][T15507] [ 274.914081][T15507] CPU0 CPU1 [ 274.915571][T15507] ---- ---- [ 274.917060][T15507] lock(&nsock->tx_lock); [ 274.918314][T15507] lock(&nbd->config_lock); [ 274.920271][T15507] lock(&nsock->tx_lock); [ 274.922285][T15507] lock(sk_lock-AF_SMC); [ 274.923924][T15507] [ 274.923924][T15507] *** DEADLOCK *** [ 274.923924][T15507] [ 274.926772][T15507] 2 locks held by syz.4.3048/15507: [ 274.928214][T15507] #0: ffff888026642198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xd60 [ 274.930792][T15507] #1: ffff888028f74e70 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_disconnect+0x321/0x540 [ 274.933548][T15507] [ 274.933548][T15507] stack backtrace: [ 274.935209][T15507] CPU: 1 UID: 0 PID: 15507 Comm: syz.4.3048 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 274.935222][T15507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 274.935230][T15507] Call Trace: [ 274.935234][T15507] [ 274.935241][T15507] dump_stack_lvl+0x116/0x1f0 [ 274.935259][T15507] print_circular_bug+0x490/0x760 [ 274.935276][T15507] check_noncircular+0x31a/0x400 [ 274.935289][T15507] ? __pfx_check_noncircular+0x10/0x10 [ 274.935304][T15507] ? lockdep_lock+0xc6/0x200 [ 274.935315][T15507] ? __pfx_lockdep_lock+0x10/0x10 [ 274.935326][T15507] __lock_acquire+0x249e/0x3c40 [ 274.935343][T15507] ? __pfx___lock_acquire+0x10/0x10 [ 274.935358][T15507] lock_acquire.part.0+0x11b/0x380 [ 274.935372][T15507] ? smc_sendmsg+0x47/0x520 [ 274.935386][T15507] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 274.935400][T15507] ? rcu_is_watching+0x12/0xc0 [ 274.935450][T15507] ? trace_lock_acquire+0x14e/0x1f0 [ 274.935461][T15507] ? smc_sendmsg+0x47/0x520 [ 274.935473][T15507] ? lock_acquire+0x2f/0xb0 [ 274.935490][T15507] ? smc_sendmsg+0x47/0x520 [ 274.935502][T15507] lock_sock_nested+0x3a/0xf0 [ 274.935518][T15507] ? smc_sendmsg+0x47/0x520 [ 274.935530][T15507] smc_sendmsg+0x47/0x520 [ 274.935542][T15507] sock_sendmsg+0x3d3/0x490 [ 274.935553][T15507] ? __pfx_sock_sendmsg+0x10/0x10 [ 274.935565][T15507] ? rcu_is_watching+0x12/0xc0 [ 274.935574][T15507] ? trace_contention_end+0xee/0x140 [ 274.935591][T15507] __sock_xmit+0x1e8/0x4f0 [ 274.935608][T15507] ? __pfx___sock_xmit+0x10/0x10 [ 274.935621][T15507] ? __pfx___mutex_lock+0x10/0x10 [ 274.935637][T15507] nbd_disconnect+0x390/0x540 [ 274.935649][T15507] ? __pfx_nbd_disconnect+0x10/0x10 [ 274.935659][T15507] ? __pfx___mutex_lock+0x10/0x10 [ 274.935671][T15507] ? bpf_lsm_capable+0x9/0x10 [ 274.935713][T15507] nbd_ioctl+0x8d1/0xd60 [ 274.935722][T15507] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 274.935767][T15507] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 274.935783][T15507] ? __pfx_nbd_ioctl+0x10/0x10 [ 274.935792][T15507] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 274.935809][T15507] ? __pfx_lock_release+0x10/0x10 [ 274.935823][T15507] ? __pfx_nbd_ioctl+0x10/0x10 [ 274.935832][T15507] blkdev_ioctl+0x276/0x6d0 [ 274.935850][T15507] ? __pfx_blkdev_ioctl+0x10/0x10 [ 274.935865][T15507] ? selinux_file_ioctl+0x180/0x270 [ 274.935879][T15507] ? selinux_file_ioctl+0xb4/0x270 [ 274.935894][T15507] ? __pfx_blkdev_ioctl+0x10/0x10 [ 274.935910][T15507] __x64_sys_ioctl+0x190/0x200 [ 274.935925][T15507] do_syscall_64+0xcd/0x250 [ 274.935938][T15507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.935954][T15507] RIP: 0033:0x7f0b5198cde9 [ 274.935964][T15507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.935974][T15507] RSP: 002b:00007f0b52883038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.935985][T15507] RAX: ffffffffffffffda RBX: 00007f0b51ba6080 RCX: 00007f0b5198cde9 [ 274.935991][T15507] RDX: 0000000000000000 RSI: 000000000000ab08 RDI: 0000000000000006 [ 274.935997][T15507] RBP: 00007f0b51a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 274.936003][T15507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.936009][T15507] R13: 0000000000000000 R14: 00007f0b51ba6080 R15: 00007ffce7c4c0d8 [ 274.936018][T15507] [ 275.047737][T15511] sctp: [Deprecated]: syz.1.3049 (pid 15511) Use of int in maxseg socket option. [ 275.047737][T15511] Use struct sctp_assoc_value instead [ 275.060672][T15507] block nbd4: Send disconnect failed -107 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 275.065519][T15507] block nbd4: Disconnected due to user request. [ 275.067435][T15507] block nbd4: shutting down sockets [ 275.223646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 275.378013][T14423] bond0: (slave syz_tun): Releasing backup interface [ 275.478414][ T7731] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.597992][ T7731] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.676930][ T7731] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.726359][ T7731] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.823560][ T7731] bridge_slave_1: left allmulticast mode [ 275.825724][ T7731] bridge_slave_1: left promiscuous mode [ 275.827437][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.835129][ T7731] bridge_slave_0: left allmulticast mode [ 275.836804][ T7731] bridge_slave_0: left promiscuous mode [ 275.838541][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.959586][ T7731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.963222][ T7731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.974773][ T7731] bond0 (unregistering): Released all slaves [ 275.978758][ T7731] bond1 (unregistering): Released all slaves [ 276.355001][ T7731] hsr_slave_0: left promiscuous mode [ 276.356885][ T7731] hsr_slave_1: left promiscuous mode [ 276.359021][ T7731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.361314][ T7731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.369298][ T39] kauditd_printk_skb: 1203 callbacks suppressed [ 276.369316][ T39] audit: type=1400 audit(1739913762.329:32105): avc: denied { read } for pid=5333 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 276.373904][ T7731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.381680][ T39] audit: type=1400 audit(1739913762.329:32106): avc: denied { search } for pid=5333 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.381922][ T7731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.391015][ T39] audit: type=1400 audit(1739913762.329:32107): avc: denied { append } for pid=5333 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.400571][ T39] audit: type=1400 audit(1739913762.329:32108): avc: denied { append open } for pid=5333 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.410850][ T39] audit: type=1400 audit(1739913762.329:32109): avc: denied { getattr } for pid=5333 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.411168][ T7731] veth1_macvtap: left promiscuous mode [ 276.418708][ T7731] veth0_macvtap: left promiscuous mode [ 276.420271][ T7731] veth1_vlan: left promiscuous mode [ 276.746226][ T7731] team0 (unregistering): Port device team_slave_1 removed [ 276.817028][ T7731] team0 (unregistering): Port device team_slave_0 removed [ 277.358099][ T7731] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.364331][ T39] audit: type=1400 audit(1739913763.329:32110): avc: denied { read } for pid=5333 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 277.372454][ T39] audit: type=1400 audit(1739913763.329:32111): avc: denied { search } for pid=5333 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.380368][ T39] audit: type=1400 audit(1739913763.329:32112): avc: denied { append } for pid=5333 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 277.388591][ T39] audit: type=1400 audit(1739913763.329:32113): avc: denied { append open } for pid=5333 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 277.397104][ T39] audit: type=1400 audit(1739913763.329:32114): avc: denied { getattr } for pid=5333 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 277.406736][ T7731] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.471040][ T7731] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.559722][ T7731] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.674923][ T7731] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.717039][ T7731] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.746371][ T7731] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.799035][ T7731] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.917096][ T7731] bridge_slave_1: left allmulticast mode [ 277.919355][ T7731] bridge_slave_1: left promiscuous mode [ 277.921649][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.934766][ T7731] bridge_slave_0: left allmulticast mode [ 277.936374][ T7731] bridge_slave_0: left promiscuous mode [ 277.938014][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.941627][ T7731] bridge_slave_1: left allmulticast mode [ 277.943232][ T7731] bridge_slave_1: left promiscuous mode [ 277.945443][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.951549][ T7731] bridge_slave_0: left allmulticast mode [ 277.953171][ T7731] bridge_slave_0: left promiscuous mode [ 277.954962][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.995959][ T7731]  (unregistering): (slave ip6gretap1): Releasing active interface [ 278.057007][ T7731] batman_adv: batadv0: Removing interface: geneve2 [ 278.257002][ T7731]  (unregistering): Released all slaves [ 278.262959][ T7731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.267190][ T7731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.269991][ T7731] bond0 (unregistering): Released all slaves [ 278.845083][ T7731] hsr_slave_0: left promiscuous mode [ 278.846953][ T7731] hsr_slave_1: left promiscuous mode [ 278.848663][ T7731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.850721][ T7731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.853092][ T7731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.855672][ T7731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.860270][ T7731] hsr_slave_0: left promiscuous mode [ 278.862697][ T7731] hsr_slave_1: left promiscuous mode [ 278.864981][ T7731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.867855][ T7731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.884013][ T7731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.886813][ T7731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.893393][ T7731] veth1_macvtap: left promiscuous mode [ 278.895460][ T7731] veth0_macvtap: left promiscuous mode [ 278.897514][ T7731] veth1_vlan: left promiscuous mode [ 278.899399][ T7731] veth0_vlan: left promiscuous mode [ 278.902692][ T7731] veth1_macvtap: left promiscuous mode [ 278.904827][ T7731] veth0_macvtap: left promiscuous mode [ 278.906822][ T7731] veth1_vlan: left promiscuous mode [ 278.908803][ T7731] veth0_vlan: left promiscuous mode [ 279.082521][ T7731] team0 (unregistering): Port device team_slave_1 removed [ 279.150252][ T7731] team0 (unregistering): Port device team_slave_0 removed [ 279.817498][ T7731] team0 (unregistering): Port device team_slave_1 removed [ 279.880836][ T7731] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 21:18:23 Registers: info registers vcpu 0 CPU#0 RAX=000000000017abb4 RBX=0000000000000000 RCX=ffffffff8b572469 RDX=ffffed100d4c6f86 RSI=ffffffff8bd35400 RDI=ffffffff81907289 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c6f85 R10=ffff88806a637c2b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90624f10 R15=0000000000000000 RIP=ffffffff8b57384f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000040000078e000 CR3=000000004b82e000 CR4=00352ef0 DR0=0000000000008000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd4f800f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd4f800f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd4f800f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd4f800f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd4f800f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd4f800f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd4f817c488 00007fd4f817c480 00007fd4f817c478 00007fd4f817c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd4f8cdd100 00007fd4f817c440 00007fd4f8170004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd4f817c498 00007fd4f817c490 00007fd4f817c488 00007fd4f817c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d1ebf228e136b5d 426aaab0ea1f4abf 1b5e497f6e103db9 59c99cef8bcdea67 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 42b74f8c2766f773 8dc58ef8c2108c36 dfdf7d8fc03aef83 e5f6baddfe68fe32 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6ca41de352328c a211e9ed013e3e2a 9f29bebbc88d2d6f a6827d6e51c467c4 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 252f36cd683f2bed 6a4bb1f7852fd3f2 0fa0493e7cdc2661 b2553fb34b73ceb7 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85406a90 RDI=ffffffff9ab80740 RBP=ffffffff9ab80700 RSP=ffffc90007bcf020 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e34312e36 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff357013a R15=dffffc0000000000 RIP=ffffffff85406ab7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f0b528836c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00004000007eb000 CR3=0000000044a4c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffe00 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b51a0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b51a0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b51a0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b51a0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b51a0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b51a0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 64626e2f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000017 47414d0c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000015b09c RBX=0000000000000002 RCX=ffffffff8b572469 RDX=ffffed100d506f86 RSI=ffffffff8bd35400 RDI=ffffffff81907289 RBP=ffffed1003b55000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d506f85 R10=ffff88806a837c2b R11=0000000000000001 R12=0000000000000002 R13=ffff88801daa8000 R14=ffffffff90624f10 R15=0000000000000000 RIP=ffffffff8b57384f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0b52883d58 CR3=000000005e06e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff61b69190 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73b260f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73b260f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73b260f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73b260f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73b260f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73b260f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000018d3c4 RBX=0000000000000003 RCX=ffffffff8b572469 RDX=ffffed100d526f86 RSI=ffffffff8bd35400 RDI=ffffffff81907289 RBP=ffffed1003b55488 RSP=ffffc900001a7e08 R8 =0000000000000000 R9 =ffffed100d526f85 R10=ffff88806a937c2b R11=0000000000000001 R12=0000000000000003 R13=ffff88801daaa440 R14=ffffffff90624f10 R15=0000000000000000 RIP=ffffffff8b57384f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000400000558000 CR3=0000000036582000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000050020 0000000000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73b260f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73b260f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73b260f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73b260f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73b260f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73b260f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 924b8afe133b4167 fe8570258c061779 27bcb30507dbab3c 27eddd9f5586a2b1 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 668e97e936114880 88336624d2fc2e88 8b3bc92d297c0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49a1975b58fe5f99 bd1d63e721c6bf7d 9f5bf2bdc6be7dbe e6f4bd17bdaf27f4 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000b8b0faa261 46398f73cb6f49a1 975b58fe5f99bd1d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63e721c6bf7d9f5b f2bdc6be7dbee6f4 bd17bdaf27f4668e 97e9361148808833 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6624d2fc2e888b3b c92d297c996ddf1d c71de74064a3924b 8afe133b4167fe85 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 70258c06177927bc b30507dbab3c27ed dd9f5586a2b176d5 21adf833e2823406 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04bbc525ca0b7f64 522343efd86f8e3c 9fd29eb50908d4c8 343c5bb94e4eff54 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000