last executing test programs: 57.029154336s ago: executing program 0 (id=149): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000042"], 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) 57.028766228s ago: executing program 0 (id=150): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x515000, 0xd2) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/142, 0x8e) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x5, 0x5}}, './file1\x00'}) recvmmsg$unix(r1, &(0x7f00000011c0)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000200)=""/172, 0xac}, {&(0x7f00000002c0)=""/22, 0x16}, {&(0x7f0000000300)=""/216, 0xd8}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/69, 0x45}], 0x5}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/234, 0xea}, {&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/36, 0x24}, {&(0x7f0000000840)=""/37, 0x25}, {&(0x7f0000000880)=""/154, 0x9a}, {&(0x7f0000000940)=""/164, 0xa4}], 0x6}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/153, 0x99}], 0x1, &(0x7f0000000c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000000d40), 0x6e, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/26, 0x1a}, {&(0x7f0000000e00)=""/99, 0x63}, {&(0x7f0000000e80)=""/125, 0x7d}, {&(0x7f0000000f00)=""/55, 0x37}, {&(0x7f0000000f40)=""/229, 0xe5}], 0x5, &(0x7f00000010c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}], 0x4, 0x2002, &(0x7f00000012c0)={0x0, 0x989680}) accept$unix(r3, &(0x7f0000001300), &(0x7f0000001380)=0x6e) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f00000013c0)={0x6, 'lo\x00', {0x7}, 0x5}) (async) r13 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r13, &(0x7f00000018c0)={&(0x7f0000001400)=@nfc_llcp, 0x80, &(0x7f0000001780)=[{&(0x7f0000001480)=""/106, 0x6a}, {&(0x7f0000001500)=""/254, 0xfe}, {&(0x7f0000001600)=""/92, 0x5c}, {&(0x7f0000001680)=""/214, 0xd6}], 0x4, &(0x7f00000017c0)=""/219, 0xdb}, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r11, 0xc018937e, &(0x7f0000001900)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_ADD(r14, 0x0, 0x482, &(0x7f0000001940)={0x87, @broadcast, 0x4e22, 0x4, 'nq\x00', 0x8, 0x1a, 0x2}, 0x2c) (async) r15 = fcntl$dupfd(r9, 0x0, r2) setxattr$trusted_overlay_nlink(&(0x7f0000001980)='./file1\x00', &(0x7f00000019c0), &(0x7f0000001a00)={'U+', 0x10}, 0x16, 0x3) bind$tipc(r12, &(0x7f0000001a40)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x4}}, 0x10) (async) recvmsg$kcm(r4, &(0x7f0000002e40)={&(0x7f0000001a80)=@ax25={{0x3, @bcast}, [@bcast, @remote, @netrom, @remote, @default, @rose, @remote, @rose]}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/130, 0x82}, {&(0x7f0000002c80)=""/92, 0x5c}, {&(0x7f0000002d00)=""/59, 0x3b}, {&(0x7f0000002d40)=""/74, 0x4a}], 0x6}, 0x100) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000002f00)={'sit0\x00', &(0x7f0000002ec0)={'syztnl1\x00', 0x0, 0x80, 0x7, 0x1, 0x0, {{0x8, 0x4, 0x2, 0x6, 0x20, 0x67, 0x0, 0xb2, 0x2f, 0x0, @local, @local, {[@timestamp_addr={0x44, 0xc, 0x5f, 0x1, 0x2, [{@empty, 0x7}]}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000002fc0)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)=@getstats={0x1c, 0x5e, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r16, 0x3}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040050) r17 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000003000), r17) mknodat$null(r1, &(0x7f0000003040)='./file0\x00', 0x400, 0x103) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000003080)={0x89, @multicast1, 0x4e23, 0x2, 'wlc\x00', 0x2, 0x8, 0x36}, 0x2c) (async) syslog(0x1, 0x0, 0x0) (async) socket$inet6(0xa, 0x5, 0x9) (async) ioctl$TCFLSH(r5, 0x540b, 0x1) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f00000030c0)={{0xc, @multicast2, 0x4e22, 0x1, 'wlc\x00', 0x21, 0x0, 0xd}, {@remote, 0x4e24, 0x2000, 0x4, 0x4, 0xc8}}, 0x44) (async) getsockopt$sock_int(r15, 0x1, 0x4, &(0x7f0000003140), &(0x7f0000003180)=0x4) syslog(0x2, &(0x7f00000031c0)=""/29, 0x1d) (async) getsockname$packet(r8, &(0x7f0000003200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003240)=0x14) r18 = openat$zero(0xffffffffffffff9c, &(0x7f0000003280), 0x434880, 0x0) sendmsg$tipc(r18, &(0x7f00000034c0)={&(0x7f00000032c0)=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x3}}, 0x10, &(0x7f0000003440)=[{&(0x7f0000003300)="98a641a15ae75b1b9eafdc3258b2df26934253b6bf02d75d4cae770c95af512a710759395080099b64ee9cf2f32c383dc5a715cd89682e964bc2a892e665fa5a624665a664a66df6ea258896dfb1a27cd8305eafd359e558e37f34a54629d6d0652b00cca9bfb21a7c61a75786ad6763b1d6d0e2882e5148ddfc97dc953ee7f1112d3e37b3f9780676a0dac294743a806a70f8dda3677a1ef81ae55a7920836738f4c0e0fd84660345ef555c28", 0xad}, {&(0x7f00000033c0)="f183ac82718d76ff7620ff9caacbacef55e147e44c682c", 0x17}, {&(0x7f0000003400)="43e9b7f913dd466403d9d8c6cfa6b898ec74c8998875e844b940b6a4e7d425fb170c89d06e3f44f1ba085de9", 0x2c}], 0x3, &(0x7f0000003480)="38592fdb6865acc87a4889396fa0a96363bd309061ed5a7b41e7d1712a7b8d001a287449146b39983496ae41e3afb7d2f693b7e4619685c59f", 0x39, 0x44000}, 0x1) ioctl$sock_qrtr_SIOCGIFADDR(r11, 0x8915, &(0x7f0000003500)={'dvmrp0\x00'}) 56.770263963s ago: executing program 0 (id=153): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="938a96eed03261f118d72fc1033c00000000000000"], 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000580)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xd, 0xc9}}}, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x3, 0x0, &(0x7f0000000440)=""/65, &(0x7f00000004c0)=""/32, &(0x7f0000000500)=""/39, 0xeeef0000}) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2080, 0x6ae0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r3) r4 = syz_io_uring_setup(0x1a5, &(0x7f0000000340)={0x0, 0xa9c2, 0x1, 0x0, 0x19}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000a80)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[@dstopts={0x2f}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 50.977083835s ago: executing program 0 (id=153): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="938a96eed03261f118d72fc1033c00000000000000"], 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000580)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xd, 0xc9}}}, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x3, 0x0, &(0x7f0000000440)=""/65, &(0x7f00000004c0)=""/32, &(0x7f0000000500)=""/39, 0xeeef0000}) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2080, 0x6ae0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r3) r4 = syz_io_uring_setup(0x1a5, &(0x7f0000000340)={0x0, 0xa9c2, 0x1, 0x0, 0x19}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000a80)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[@dstopts={0x2f}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 47.845592194s ago: executing program 2 (id=258): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b1401"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) sendmsg$tipc(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="02cd7ed1c743a3b1d8c0472e57265c45daee05fdc1480ea2039b6fdd51113f4f62a189aa8ed5ad47b4d0001721adb241f79cb11e32dae99655b00df28b9a8b4df14a5708eb88d00b7da443cfabdd8971b8cd1b3770fb723caad1070357e4085c00f87b3cd75213a7f97144f29c49f7214ad2b42fe8edf5097b08e930b2a1e4c163b3ede5cf6ae4d6cf9fcee3cbdfac072f3c8aabb7566d0b4603260838f16cd78b839b78d0dc347b6dea663954b73b08e59c084975b3f4f1bacb177f89bcb17d1fcc8570b641a85e02b74fac6d1065e2e8dc1e49c5038d563e288a92c96cb326fa3a7095f2186c7be112", 0xea}, {&(0x7f0000000400)="a29b2b00f40e1d59ef9da48ba8b8f452b32192638cd7063fc113e1b2de47e50995241ab28d4ec9719568312ea7def30d48a5b1cd5ab313e815e39cdf08a25f68e3b94f789fd1da6e7916", 0x4a}], 0x2, &(0x7f0000000600)="bf384439ee05d4a6c881a35449c103be826f57a32dee3ce4fbe71b254784d52b035a619c528cd66a975ed994d00c77de25d4e6519e971aeb052705b1e0eaf98f4d3180c32b7425978972727a17be4c7591e3c1c15f711c4960d78a9f2430df40877bba61bc2af7bfe9ca5ed8a9f6300e42b55f44861a3dcea8244a96803428", 0x7f, 0x4000000}, 0x2001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001200010a28bd7003000000000a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYRES8=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_generic(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001a"], 0x14}}, 0x4040080) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x34008802}, 0x4) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x515002, 0xc6) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21021, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x200800, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000O00000000,\x00']) 47.585754535s ago: executing program 2 (id=260): r0 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}}, [@srcaddr={0x14, 0xd, @in=@private=0xa010102}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x969f}]}, 0x44}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x9}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x38}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) (async) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x2}) (async) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, 0x0, 0x0) r3 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) (async) sendmsg$can_bcm(r3, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) recvfrom$l2tp6(r5, &(0x7f0000000000)=""/176, 0xb0, 0x20, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x20) 47.226403176s ago: executing program 2 (id=262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private1, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x80, 0x20, 0x68e, 0x1, {{0x9, 0x4, 0x0, 0x2c, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @remote, {[@end, @timestamp_addr={0x44, 0xc, 0xb8, 0x1, 0x6, [{@loopback, 0xffffffff}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x1, 0x7800, 0x8, 0x7ff, {{0x8, 0x4, 0x1, 0xf, 0x20, 0x68, 0x0, 0x60, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@ssrr={0x89, 0xb, 0x49, [@private=0xa010102, @remote]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x89, 0x52, 0x4, 0x24, @mcast2, @dev={0xfe, 0x80, '\x00', 0x10}, 0x8000, 0x8, 0x0, 0x4}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1b8, r1, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x81}, 0x0) munlockall() syz_emit_vhci(&(0x7f0000000580)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) r7 = signalfd4(r0, &(0x7f00000005c0)={[0x3]}, 0x8, 0x800) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000640)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001440)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20100002}, 0xc, &(0x7f0000001400)={&(0x7f0000000680)={0xd60, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xcfc, 0x8, 0x0, 0x1, [{0x514, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x31c, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x31}}, {0x5, 0x3, 0x2}}]}, {0x4}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4db}, @WGPEER_A_ALLOWEDIPS={0x174, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0xa}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c98163137e06b6f91fa3bf269f7032a0d0348d6d82575f797d7265414ce102fa"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xe}, 0x22f0}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x65}]}, {0x454, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x414, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x360, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ebf81286b7a0de079a654707f2ca0c4998683aac6adfb70741d722a460fb37ce"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2220b82552c9e02c2582954e539205f6a19bee9ce8efe44307f38e618a40a209"}, @WGPEER_A_ALLOWEDIPS={0x2e8, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0xd60}}, 0x20000810) read$FUSE(r7, &(0x7f0000001480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r10) sendmsg$xdp(r7, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)=[{&(0x7f00000034c0)="6be0a0bc568b3f3ac337ce48f17702b7ce5f966386b85ac8b2fd45f74605e33f3e867206dcd32879b782c941e5df7b7ca6de1741a5a8f833d284065897b079093547ef52685a1627394d0c2b6c34eac3bef0b09158dd3bfd8387b1d8be3d5a3de33ee0c053a6e9b129f474262d7d0d7965093986d89e7b35d4ae0f240b71b29b1c46e12d0ddbe47b2584564deeb776d48f8c1090", 0x94}, {&(0x7f0000003580)="60559f79dd92f82535622b58e7831eee6d3e140448a2fffd87a3e294db093f678732285102f08524a9b45e2e73c09bf42bbf5b07bc39af5906239009df3893d2b0069a955b97c7354d9468bbb14c73285dce62db4d20acdc87b14d7129c8f26473b8f0313c60cc0f521a0e0ec330d7003108b3964d481d1750565d344784b39b2cbedd4dde8f34c11206e9a5572d5568665c7c1aa7eb76b5daa35caadf6039413b579199701e58cd9beeb2dd050e27772b", 0xb1}], 0x2, 0x0, 0x0, 0x4010}, 0x8040) link(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)='./file0\x00') write$sysctl(r7, &(0x7f0000003740)='6\x00', 0x2) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000037c0)={[0x8, 0x5, 0x7, 0x3, 0x6, 0x498d, 0x8, 0x1, 0xffffffffffffff81, 0x9, 0xd, 0x0, 0xffffffffffffffff, 0xe, 0x937, 0x5], 0x2, 0x243080}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000003880)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003dc0), r8) syz_genetlink_get_family_id$nl80211(&(0x7f0000004500), 0xffffffffffffffff) 47.067485526s ago: executing program 2 (id=264): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x1, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) chdir(&(0x7f0000000080)='./file1\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, 0x0) setpgid(0x0, r6) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x800000000000001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 46.72801437s ago: executing program 2 (id=268): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r1 = fanotify_init(0x0, 0x0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x71, 0x8000000, r2, 0x0) (async) fanotify_mark(r1, 0x12, 0x8000001, r0, 0x0) (async) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = syz_open_dev$evdev(&(0x7f0000002640), 0x6, 0x204000) (async) clock_gettime(0x0, &(0x7f0000002680)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f00000026c0)={0x0, 0x0}) write$evdev(r6, &(0x7f0000002700)=[{{}, 0x1, 0x0, 0xffffff00}, {{r7, r8/1000+60000}, 0x11, 0x9, 0x21}, {{r9, r10/1000+10000}, 0x2, 0x4, 0x10}, {{0x0, 0x2710}, 0x11, 0x0, 0xd}, {{}, 0x2, 0x4, 0x3}, {{}, 0x15, 0x9, 0x800}, {{}, 0x1, 0x2, 0xffff7fff}, {{}, 0x11, 0x9, 0xffff}], 0xc0) (async) close(r5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000027c0)=ANY=[@ANYRES32=r13, @ANYRES32=r12, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="b2a981c0a3805925ab287398b2", @ANYRES64=0x0], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r13}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) (async) sendmsg$inet(r11, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000380)=""/4096}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/112}, {&(0x7f0000001380)=""/4096}, {&(0x7f00000000c0)=""/44}, {&(0x7f00000001c0)=""/136}, {&(0x7f0000000280)=""/101}, {&(0x7f0000000300)=""/40}, {&(0x7f0000002380)=""/61}, {&(0x7f00000023c0)=""/96}], 0x0, &(0x7f0000002500)=""/209}, 0x6}], 0x3d, 0x30120, 0x0) 39.187655426s ago: executing program 2 (id=295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x3, 0x8, 0x7, 0x140, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x9) sync_file_range(r3, 0x0, 0x0, 0x3) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000002, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syslog(0x9, &(0x7f00000001c0), 0x0) flock(0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000005c0)=@ctrl_frame=@bar={{}, {0x8}, @device_b, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x6}, [{0x0, 0x8, {0xe, 0xd21}, "943bc88f2886554e"}, {0x0, 0x1, {0x1, 0x2}, "dfd70661a661f6b5"}, {0x0, 0x4, {0x1, 0x9}, "b5cfabd73543e4ee"}, {0x0, 0x5, {0x9, 0x5}, "53f7498f361ac150"}, {0x0, 0x6, {0x4, 0x4}, "e26117123f2e155a"}, {0x0, 0x7, {0x0, 0x7}, "b2085b300d631674"}]}}, 0x5a) nanosleep(0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0x8, r0}, 0x38) setrlimit(0x7, &(0x7f0000000400)={0xfffffffffffffffb, 0x6}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) 39.07814086s ago: executing program 32 (id=295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x3, 0x8, 0x7, 0x140, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x9) sync_file_range(r3, 0x0, 0x0, 0x3) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000002, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syslog(0x9, &(0x7f00000001c0), 0x0) flock(0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000005c0)=@ctrl_frame=@bar={{}, {0x8}, @device_b, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x6}, [{0x0, 0x8, {0xe, 0xd21}, "943bc88f2886554e"}, {0x0, 0x1, {0x1, 0x2}, "dfd70661a661f6b5"}, {0x0, 0x4, {0x1, 0x9}, "b5cfabd73543e4ee"}, {0x0, 0x5, {0x9, 0x5}, "53f7498f361ac150"}, {0x0, 0x6, {0x4, 0x4}, "e26117123f2e155a"}, {0x0, 0x7, {0x0, 0x7}, "b2085b300d631674"}]}}, 0x5a) nanosleep(0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0x8, r0}, 0x38) setrlimit(0x7, &(0x7f0000000400)={0xfffffffffffffffb, 0x6}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) 32.175519027s ago: executing program 0 (id=153): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="938a96eed03261f118d72fc1033c00000000000000"], 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000580)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xd, 0xc9}}}, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x3, 0x0, &(0x7f0000000440)=""/65, &(0x7f00000004c0)=""/32, &(0x7f0000000500)=""/39, 0xeeef0000}) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2080, 0x6ae0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r3) r4 = syz_io_uring_setup(0x1a5, &(0x7f0000000340)={0x0, 0xa9c2, 0x1, 0x0, 0x19}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000a80)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[@dstopts={0x2f}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 6.852109619s ago: executing program 3 (id=366): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046}) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000002000/0x2000)=nil) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xe0002001}) 6.600180404s ago: executing program 3 (id=367): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x100, 0x1, &(0x7f0000000340)=[r1], 0x0, 0x0, 0x0, 0x0, 0x7f}) 5.759895365s ago: executing program 3 (id=371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf252100000008000300", @ANYRESDEC=r0, @ANYBLOB="0a000600ffffffffffff000008009e0084"], 0x12c}, 0x1, 0x0, 0x0, 0x20000494}, 0x40000) 5.070220932s ago: executing program 3 (id=373): r0 = io_uring_setup(0x2b9b, &(0x7f0000000640)={0x0, 0xfffffffd, 0x800, 0x400, 0x2b4}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x80, 0x0, 0x80}]}, 0x10) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) pwrite64(r2, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read$FUSE(r3, &(0x7f0000001300)={0x2020}, 0x2020) 3.717951091s ago: executing program 3 (id=374): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000001540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x12) wait4(r3, 0x0, 0x4000000a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="000000000a0002", @ANYRESDEC=r2, @ANYBLOB="92f86116a4b834ee1c5ad6c5a37c3fde81cbf572ee91c1b6039297"], 0x28}}, 0x0) 3.679883742s ago: executing program 0 (id=153): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="938a96eed03261f118d72fc1033c00000000000000"], 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000580)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xd, 0xc9}}}, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x3, 0x0, &(0x7f0000000440)=""/65, &(0x7f00000004c0)=""/32, &(0x7f0000000500)=""/39, 0xeeef0000}) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2080, 0x6ae0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r3) r4 = syz_io_uring_setup(0x1a5, &(0x7f0000000340)={0x0, 0xa9c2, 0x1, 0x0, 0x19}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000a80)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[@dstopts={0x2f}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 3.630019177s ago: executing program 4 (id=375): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) chdir(&(0x7f0000000540)='./cgroup\x00') (async) r1 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x3, 0xb5}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x2, &(0x7f0000000180), 0xfe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async) rename(&(0x7f0000000600)='./file1\x00', &(0x7f0000000640)='./file2\x00') (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) (async, rerun: 32) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50) (rerun: 32) 2.870146341s ago: executing program 4 (id=376): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)=ANY=[@ANYBLOB="400000003c0007010100000000400000017c00000400fc800c00018006000600800a0000080002800400728014000700"/64], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2.869715065s ago: executing program 3 (id=377): getgid() unshare(0x4000400) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x203, 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x631}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setlease(r3, 0x400, 0x0) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$nl_generic(0x11, 0x3, 0x10) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x40802, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000002740)={0x0, 0xfffffffffffffffc, 0x6, 0x4, @buffer={0x0, 0x1000, &(0x7f0000000200)=""/4096}, &(0x7f00000025c0)="85c8800bfad6", 0x0, 0x8, 0x0, 0x1, 0x0}) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000200)=@bloom_filter={0x1e, 0xb603, 0x6, 0x9, 0x20c60, 0x1, 0x0, '\x00', r5, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0xd, @void, @value, @void, @value}, 0x50) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) (async) syz_clone(0x100004000, &(0x7f0000000040), 0x0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000001200)="dc9351839a5d3172f9654157e33746dd9df89d48414c6cb9a6f3620fe86063fcbcaad62d765d7706884d01f364ac6336ddd38ac460ecd940a329f275b60ea203894edb56df52f6b715c4fd3b802f78a2b6b5701d0bafe619916c15e60e2885f398d5522fa5a2cb1dba31ba74b7ecaf127063a25762ccb6cdb997613db2844accd4c34aeccdf19dda920ff6383954a2398dd7ae68fcd1c48b754ab181b56cd35b1752b5d31ef45912") syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2d, 'cpu'}, {0x2b, 'memory'}]}, 0xd) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount(&(0x7f00000000c0)=@filename='./bus\x00', &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='btrfs\x00', 0x2800080, &(0x7f00000001c0)='discard') 2.869385289s ago: executing program 33 (id=377): getgid() unshare(0x4000400) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x203, 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x631}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setlease(r3, 0x400, 0x0) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$nl_generic(0x11, 0x3, 0x10) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x40802, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000002740)={0x0, 0xfffffffffffffffc, 0x6, 0x4, @buffer={0x0, 0x1000, &(0x7f0000000200)=""/4096}, &(0x7f00000025c0)="85c8800bfad6", 0x0, 0x8, 0x0, 0x1, 0x0}) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000200)=@bloom_filter={0x1e, 0xb603, 0x6, 0x9, 0x20c60, 0x1, 0x0, '\x00', r5, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0xd, @void, @value, @void, @value}, 0x50) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) (async) syz_clone(0x100004000, &(0x7f0000000040), 0x0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000001200)="dc9351839a5d3172f9654157e33746dd9df89d48414c6cb9a6f3620fe86063fcbcaad62d765d7706884d01f364ac6336ddd38ac460ecd940a329f275b60ea203894edb56df52f6b715c4fd3b802f78a2b6b5701d0bafe619916c15e60e2885f398d5522fa5a2cb1dba31ba74b7ecaf127063a25762ccb6cdb997613db2844accd4c34aeccdf19dda920ff6383954a2398dd7ae68fcd1c48b754ab181b56cd35b1752b5d31ef45912") syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2d, 'cpu'}, {0x2b, 'memory'}]}, 0xd) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount(&(0x7f00000000c0)=@filename='./bus\x00', &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='btrfs\x00', 0x2800080, &(0x7f00000001c0)='discard') 2.617971355s ago: executing program 4 (id=378): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) setrlimit(0x8, &(0x7f0000000000)) mlockall(0x5) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x84d8, 0x10000}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005"], 0x48) r2 = syz_io_uring_setup(0x1ed3, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x5, 0x279}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0xb, 0x1}) landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x2, 0x2}, 0x18, 0x1) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2.043292537s ago: executing program 1 (id=379): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040), &(0x7f0000000180)=0x4) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000540)={0x2, "2a123b084c7f8324cc76356ea2c2ef76068115ecfb56b46998cd6a640317a26f", 0x0, 0x0, 0x1, 0x400000, 0x2060501}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}]}}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 2.042648254s ago: executing program 4 (id=380): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000040)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x1000) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = syz_open_dev$media(&(0x7f0000000100), 0x2, 0x101000) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}]}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x1, 0x0) fchdir(r3) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r6, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mmap(&(0x7f000067a000/0x3000)=nil, 0x3000, 0xb635773f04ebbee1, 0x8031, 0xffffffffffffffff, 0x0) renameat2(r5, &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000003c0)='./file2\x00', 0x2) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000040)={0x5ffe, 0x80600}) 1.961859088s ago: executing program 1 (id=381): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x20000, 0x800, 0x7f, 0x1}, 0x20) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x7, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.1959476s ago: executing program 4 (id=382): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0xe, 0x2}, 0x14) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="ad4300000000009c260821"], 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r5, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x10}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x29}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x10d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 844.063949ms ago: executing program 1 (id=383): ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a300000000008000440000000000900010073797a30000000000800034000000004"], 0x64}}, 0x0) 582.858996ms ago: executing program 4 (id=385): ioperm(0x0, 0x7fff, 0x15f9) getegid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4101, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000f00000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x408c0}, 0xc000) 279.332636ms ago: executing program 1 (id=386): mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000ba00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7823005f13d8ded5577ecaf469b8d685cf12f476642d41027457dcb25ef1fa2a8f78adbd88b90817", @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf258100000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x378}, 0x1, 0x0, 0x0, 0x48001}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRES64=0x0, @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 169.754286ms ago: executing program 1 (id=387): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0xf5, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500010006"], 0x6c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000009) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0xf5, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500010006"], 0x6c}}, 0x40000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) (async) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000009) (async) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) (async) socket$packet(0x11, 0x3, 0x300) (async) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) (async) 0s ago: executing program 1 (id=388): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xd, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): [ 43.997831][ T40] audit: type=1400 audit(1748618086.809:58): avc: denied { noatsecure } for pid=5911 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.006459][ T40] audit: type=1400 audit(1748618086.809:59): avc: denied { write } for pid=5911 comm="sh" path="pipe:[5656]" dev="pipefs" ino=5656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.015616][ T40] audit: type=1400 audit(1748618086.809:60): avc: denied { rlimitinh } for pid=5911 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.022968][ T40] audit: type=1400 audit(1748618086.809:61): avc: denied { siginh } for pid=5911 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:48367' (ED25519) to the list of known hosts. [ 44.752414][ T40] audit: type=1400 audit(1748618087.579:62): avc: denied { name_bind } for pid=5921 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 44.776565][ T40] audit: type=1400 audit(1748618087.609:63): avc: denied { write } for pid=5922 comm="sh" path="pipe:[5678]" dev="pipefs" ino=5678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.795953][ T40] audit: type=1400 audit(1748618087.629:64): avc: denied { execute } for pid=5922 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.804755][ T40] audit: type=1400 audit(1748618087.629:65): avc: denied { execute_no_trans } for pid=5922 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.598591][ T40] audit: type=1400 audit(1748618089.429:66): avc: denied { mounton } for pid=5922 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.601221][ T5922] cgroup: Unknown subsys name 'net' [ 46.756728][ T5922] cgroup: Unknown subsys name 'cpuset' [ 46.761007][ T5922] cgroup: Unknown subsys name 'rlimit' [ 46.919000][ T5927] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 47.567710][ T5922] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.657014][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 50.657024][ T40] audit: type=1400 audit(1748618093.489:80): avc: denied { execmem } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.863827][ T40] audit: type=1400 audit(1748618093.689:81): avc: denied { create } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.870556][ T40] audit: type=1400 audit(1748618093.689:82): avc: denied { read write } for pid=5935 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.878685][ T40] audit: type=1400 audit(1748618093.689:83): avc: denied { open } for pid=5935 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.886041][ T40] audit: type=1400 audit(1748618093.699:84): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="socket:[7288]" dev="sockfs" ino=7288 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.915211][ T5949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 50.918524][ T5949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 50.921837][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 50.924610][ T5949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 50.927481][ T5949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 50.930237][ T5949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 50.932596][ T5950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 50.933414][ T5949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 50.939386][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 50.939643][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 50.943667][ T40] audit: type=1400 audit(1748618093.769:85): avc: denied { read } for pid=5946 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.945239][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 50.947726][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 50.948896][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 50.949433][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 50.951847][ T40] audit: type=1400 audit(1748618093.769:86): avc: denied { open } for pid=5946 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.955069][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 50.956388][ T5953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 50.956851][ T40] audit: type=1400 audit(1748618093.779:87): avc: denied { mounton } for pid=5946 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 50.962580][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 50.971465][ T5953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 50.973722][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 50.975806][ T5953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.215997][ T40] audit: type=1400 audit(1748618094.049:88): avc: denied { module_request } for pid=5946 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.242764][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 51.308796][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 51.326420][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 51.396907][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.399403][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.402401][ T5946] bridge_slave_0: entered allmulticast mode [ 51.405602][ T5946] bridge_slave_0: entered promiscuous mode [ 51.409070][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 51.414765][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.416881][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.419017][ T5946] bridge_slave_1: entered allmulticast mode [ 51.421514][ T5946] bridge_slave_1: entered promiscuous mode [ 51.531292][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.589093][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.613056][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.616069][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.618311][ T5938] bridge_slave_0: entered allmulticast mode [ 51.620874][ T5938] bridge_slave_0: entered promiscuous mode [ 51.638474][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.640743][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.642996][ T5936] bridge_slave_0: entered allmulticast mode [ 51.646732][ T5936] bridge_slave_0: entered promiscuous mode [ 51.682402][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.685642][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.687685][ T5938] bridge_slave_1: entered allmulticast mode [ 51.690159][ T5938] bridge_slave_1: entered promiscuous mode [ 51.708145][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.711011][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.714159][ T5936] bridge_slave_1: entered allmulticast mode [ 51.716992][ T5936] bridge_slave_1: entered promiscuous mode [ 51.765264][ T5946] team0: Port device team_slave_0 added [ 51.804317][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.806315][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.808416][ T5935] bridge_slave_0: entered allmulticast mode [ 51.810821][ T5935] bridge_slave_0: entered promiscuous mode [ 51.816442][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.821867][ T5946] team0: Port device team_slave_1 added [ 51.826221][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.830059][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.832145][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.834446][ T5935] bridge_slave_1: entered allmulticast mode [ 51.836845][ T5935] bridge_slave_1: entered promiscuous mode [ 51.840260][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.864081][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.914342][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.916596][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.923613][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.985851][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.987914][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.995871][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.000842][ T5936] team0: Port device team_slave_0 added [ 52.004615][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.009299][ T5938] team0: Port device team_slave_0 added [ 52.017430][ T5938] team0: Port device team_slave_1 added [ 52.020251][ T5936] team0: Port device team_slave_1 added [ 52.023422][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.123480][ T5935] team0: Port device team_slave_0 added [ 52.141151][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.143316][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.153460][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.171477][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.174200][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.182198][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.187420][ T5935] team0: Port device team_slave_1 added [ 52.190293][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.192357][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.200367][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.228099][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.230365][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.239078][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.300685][ T5946] hsr_slave_0: entered promiscuous mode [ 52.303699][ T5946] hsr_slave_1: entered promiscuous mode [ 52.315376][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.317560][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.325574][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.329931][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.332601][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.341465][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.423499][ T5936] hsr_slave_0: entered promiscuous mode [ 52.427081][ T5936] hsr_slave_1: entered promiscuous mode [ 52.429220][ T5936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.432302][ T5936] Cannot create hsr debugfs directory [ 52.438322][ T5938] hsr_slave_0: entered promiscuous mode [ 52.441351][ T5938] hsr_slave_1: entered promiscuous mode [ 52.443980][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.446764][ T5938] Cannot create hsr debugfs directory [ 52.506180][ T5935] hsr_slave_0: entered promiscuous mode [ 52.508351][ T5935] hsr_slave_1: entered promiscuous mode [ 52.510387][ T5935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.512667][ T5935] Cannot create hsr debugfs directory [ 52.848428][ T5946] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.854751][ T5946] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.859341][ T5946] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.868860][ T5946] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.895128][ T5935] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.899908][ T5935] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.905703][ T5935] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.912612][ T5935] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.944942][ T5300] Bluetooth: hci3: command tx timeout [ 52.965152][ T5938] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.969894][ T5938] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.974782][ T5938] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.984048][ T5938] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.024090][ T5953] Bluetooth: hci2: command tx timeout [ 53.024190][ T5943] Bluetooth: hci1: command tx timeout [ 53.025529][ T5300] Bluetooth: hci0: command tx timeout [ 53.038057][ T5936] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.042112][ T5936] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.054611][ T5936] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.058617][ T5936] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.072595][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.097136][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.106304][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.122820][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.125127][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.132639][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.139828][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.142170][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.155201][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.157430][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.166670][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.169600][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.188510][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.220382][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.235992][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.238253][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.260054][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.262315][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.274877][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.293994][ T40] audit: type=1400 audit(1748618096.119:89): avc: denied { sys_module } for pid=5946 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.310651][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.317913][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.320161][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.340547][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.342947][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.386933][ T5936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.402496][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.419629][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.438868][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.456841][ T5935] veth0_vlan: entered promiscuous mode [ 53.466885][ T5946] veth0_vlan: entered promiscuous mode [ 53.471266][ T5935] veth1_vlan: entered promiscuous mode [ 53.487790][ T5946] veth1_vlan: entered promiscuous mode [ 53.518550][ T5946] veth0_macvtap: entered promiscuous mode [ 53.526393][ T5938] veth0_vlan: entered promiscuous mode [ 53.531598][ T5946] veth1_macvtap: entered promiscuous mode [ 53.541251][ T5935] veth0_macvtap: entered promiscuous mode [ 53.547626][ T5938] veth1_vlan: entered promiscuous mode [ 53.552177][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.558239][ T5935] veth1_macvtap: entered promiscuous mode [ 53.567523][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.572631][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.587572][ T5946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.590332][ T5946] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.593002][ T5946] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.596096][ T5946] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.604623][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.611417][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.619087][ T5935] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.622616][ T5935] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.626212][ T5935] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.629586][ T5935] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.638695][ T5938] veth0_macvtap: entered promiscuous mode [ 53.655404][ T5938] veth1_macvtap: entered promiscuous mode [ 53.670807][ T5936] veth0_vlan: entered promiscuous mode [ 53.674358][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.682615][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.701629][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.705792][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.709210][ T5938] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.712876][ T5938] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.716691][ T5938] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.719288][ T5938] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.729366][ T5936] veth1_vlan: entered promiscuous mode [ 53.747175][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.750223][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.771349][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.774436][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.804539][ T5936] veth0_macvtap: entered promiscuous mode [ 53.805700][ T5946] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 53.808170][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.808191][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.826288][ T5936] veth1_macvtap: entered promiscuous mode [ 53.846026][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.848506][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.858495][ T5998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 53.861182][ T5998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 53.867173][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.887259][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.888098][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.893506][ T5936] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.893828][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.902701][ T5936] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.907636][ T5936] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.910809][ T5936] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.920798][ T6002] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 53.963517][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.969657][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.976158][ T5943] Bluetooth: Wrong link type (-22) [ 54.001843][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.006836][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.020926][ T6008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.080948][ T6015] 9pnet_virtio: no channels available for device syz [ 54.101118][ T6015] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 54.135617][ T6024] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 54.142836][ T6029] Zero length message leads to an empty skb [ 54.149623][ T6030] syz.0.12: attempt to access beyond end of device [ 54.149623][ T6030] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 54.176638][ T6030] EXT4-fs (nbd0): unable to read superblock [ 54.180827][ T6028] syz.0.12: attempt to access beyond end of device [ 54.180827][ T6028] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 54.185210][ T6028] EXT4-fs (nbd0): unable to read superblock [ 54.245113][ T6043] overlayfs: missing 'lowerdir' [ 54.252680][ T5943] Bluetooth: Wrong link type (-22) [ 54.319563][ T1143] bond0: (slave bond_slave_0): interface is now down [ 54.326128][ T1143] bond0: (slave bond_slave_1): interface is now down [ 54.330693][ T1143] bond0: now running without any active interface! [ 54.340244][ T6053] capability: warning: `syz.0.19' uses 32-bit capabilities (legacy support in use) [ 54.389412][ T6065] loop6: detected capacity change from 0 to 63 [ 54.401941][ T6065] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 54.406820][ T6065] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 54.409807][ T6065] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 54.412824][ T6065] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 54.416544][ T6065] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 54.419442][ T6065] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 54.422077][ T6065] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 54.451638][ T6071] tmpfs: Invalid gid '0x00000000ffffffff' [ 54.454721][ T6071] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 54.488584][ T6076] SELinux: truncated policydb string identifier [ 54.490727][ T6076] SELinux: failed to load policy [ 54.492778][ T6076] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24'. [ 54.498003][ T6076] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24'. [ 54.504469][ T6076] gretap0: entered promiscuous mode [ 54.507009][ T6076] gretap0: left promiscuous mode [ 54.659870][ T5943] Bluetooth: Wrong link type (-22) [ 54.718673][ T6099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.023943][ T5943] Bluetooth: hci3: command tx timeout [ 55.049931][ T5943] Bluetooth: Wrong link type (-22) [ 55.085172][ T6125] ======================================================= [ 55.085172][ T6125] WARNING: The mand mount option has been deprecated and [ 55.085172][ T6125] and is ignored by this kernel. Remove the mand [ 55.085172][ T6125] option from the mount to silence this warning. [ 55.085172][ T6125] ======================================================= [ 55.089249][ T6126] process 'syz.3.40' launched './file1' with NULL argv: empty string added [ 55.104027][ T5943] Bluetooth: hci1: command tx timeout [ 55.104041][ T5953] Bluetooth: hci0: command tx timeout [ 55.104050][ T5300] Bluetooth: hci2: command tx timeout [ 55.108116][ T6128] 9pnet_virtio: no channels available for device syz [ 55.230938][ T6137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.277267][ T6141] syz.3.46 uses obsolete (PF_INET,SOCK_PACKET) [ 55.294537][ C2] Illegal XDP return value 16128 on prog (id 6) dev bond_slave_1, expect packet loss! [ 55.376863][ T5943] Bluetooth: Wrong link type (-22) [ 55.441780][ T6156] input: syz0 as /devices/virtual/input/input5 [ 55.544591][ T5943] Bluetooth: Wrong link type (-22) [ 55.644220][ T6187] tmpfs: Bad value for 'mpol' [ 55.673323][ T40] kauditd_printk_skb: 150 callbacks suppressed [ 55.673334][ T40] audit: type=1400 audit(1748618098.499:240): avc: denied { setopt } for pid=6189 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.681583][ T40] audit: type=1400 audit(1748618098.509:241): avc: denied { setopt } for pid=6189 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 55.724769][ T40] audit: type=1400 audit(1748618098.559:242): avc: denied { accept } for pid=6189 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.763111][ T40] audit: type=1400 audit(1748618098.589:243): avc: denied { create } for pid=6196 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.766896][ T6198] capability: warning: `syz.2.66' uses deprecated v2 capabilities in a way that may be insecure [ 55.775198][ T40] audit: type=1400 audit(1748618098.609:244): avc: denied { ioctl } for pid=6196 comm="syz.2.66" path="socket:[9559]" dev="sockfs" ino=9559 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.818096][ T6203] syz.2.67: attempt to access beyond end of device [ 55.818096][ T6203] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 55.822035][ T6203] EXT4-fs (nbd2): unable to read superblock [ 55.855758][ T40] audit: type=1400 audit(1748618098.689:245): avc: denied { write } for pid=6204 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.861997][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 56.121255][ T40] audit: type=1400 audit(1748618098.949:246): avc: denied { create } for pid=6211 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.173580][ T40] audit: type=1400 audit(1748618098.999:247): avc: denied { create } for pid=6211 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.179857][ T40] audit: type=1400 audit(1748618099.009:248): avc: denied { setopt } for pid=6211 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.190403][ T40] audit: type=1400 audit(1748618099.019:249): avc: denied { connect } for pid=6211 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.676950][ T6223] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.681011][ T6223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.73'. [ 56.782643][ T6232] overlayfs: failed to resolve './bus': -2 [ 57.057214][ T6270] warning: `syz.0.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.114750][ T5943] Bluetooth: hci3: command tx timeout [ 57.121616][ T6274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.87'. [ 57.124772][ T6274] netlink: 48 bytes leftover after parsing attributes in process `syz.0.87'. [ 57.127807][ T6274] mac80211_hwsim hwsim3 `ëÿÿ: renamed from wlan1 (while UP) [ 57.183928][ T5943] Bluetooth: hci0: command tx timeout [ 57.185859][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.193966][ T5943] Bluetooth: hci2: command tx timeout [ 57.194945][ T5300] Bluetooth: hci1: command tx timeout [ 57.344179][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 57.348913][ T24] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 57.355970][ T24] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 57.358798][ T24] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 57.361411][ T24] usb 8-1: Product: syz [ 57.363867][ T24] usb 8-1: Manufacturer: syz [ 57.365453][ T24] usb 8-1: SerialNumber: syz [ 57.369354][ T24] usb 8-1: config 0 descriptor?? [ 57.372681][ T6250] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 57.376293][ T24] hub 8-1:0.0: bad descriptor, ignoring hub [ 57.378521][ T24] hub 8-1:0.0: probe with driver hub failed with error -5 [ 57.612613][ T6292] netlink: 'syz.2.93': attribute type 1 has an invalid length. [ 57.627590][ T6293] syz.1.92 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.684275][ T838] usb 8-1: USB disconnect, device number 2 [ 57.870932][ T5300] Bluetooth: Wrong link type (-22) [ 58.023914][ T1461] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 58.161134][ T6314] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 58.162068][ T836] IPVS: starting estimator thread 0... [ 58.183980][ T1461] usb 8-1: Using ep0 maxpacket: 32 [ 58.189257][ T1461] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 58.197099][ T1461] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 58.199979][ T1461] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 58.202654][ T1461] usb 8-1: Product: syz [ 58.207125][ T1461] usb 8-1: Manufacturer: syz [ 58.208777][ T1461] usb 8-1: SerialNumber: syz [ 58.212389][ T1461] usb 8-1: config 0 descriptor?? [ 58.217268][ T6250] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 58.220918][ T1461] hub 8-1:0.0: bad descriptor, ignoring hub [ 58.223643][ T1461] hub 8-1:0.0: probe with driver hub failed with error -5 [ 58.232555][ T6324] tipc: Started in network mode [ 58.234977][ T6324] tipc: Node identity ac1414aa, cluster identity 4711 [ 58.237789][ T6324] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 58.239998][ T6324] tipc: Enabled bearer , priority 10 [ 58.275713][ T6325] IPVS: using max 45 ests per chain, 108000 per kthread [ 58.288858][ T5300] Bluetooth: Wrong link type (-22) [ 58.384321][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 58.520956][ T6365] netlink: 14 bytes leftover after parsing attributes in process `syz.3.114'. [ 58.523863][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 58.554716][ T1461] usb 8-1: USB disconnect, device number 3 [ 58.576405][ T5300] Bluetooth: Wrong link type (-22) [ 58.613959][ T6380] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 58.620930][ T6377] can0: slcan on ttyS3. [ 58.622480][ T6379] overlayfs: upper fs does not support file handles, falling back to index=off. [ 58.631401][ T6379] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 58.638384][ T6379] overlayfs: conflicting lowerdir path [ 58.648858][ T6384] overlayfs: failed to resolve './file0': -2 [ 58.663878][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 58.698915][ T6377] can0 (unregistered): slcan off ttyS3. [ 58.702349][ T6392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.122'. [ 58.767917][ T6399] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 58.770877][ T6399] overlayfs: missing 'lowerdir' [ 58.824881][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 58.842721][ T5300] Bluetooth: Wrong link type (-22) [ 58.952800][ T6431] netlink: 'syz.0.131': attribute type 11 has an invalid length. [ 58.957462][ T6431] netlink: 132 bytes leftover after parsing attributes in process `syz.0.131'. [ 58.963881][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 59.040680][ T6442] unknown channel width for channel at 909000KHz? [ 59.042798][ T6442] unknown channel width for channel at 909000KHz? [ 59.046937][ T6442] unknown channel width for channel at 909000KHz? [ 59.079753][ T5300] Bluetooth: Wrong link type (-22) [ 59.114066][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 59.188632][ T5300] Bluetooth: hci3: command tx timeout [ 59.194627][ T836] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.264293][ T5943] Bluetooth: hci0: command tx timeout [ 59.264696][ T5979] tipc: Node number set to 2886997162 [ 59.266875][ T5300] Bluetooth: hci2: command tx timeout [ 59.274008][ T5943] Bluetooth: hci1: command tx timeout [ 59.314710][ T6471] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6471 comm=syz.3.143 [ 59.333939][ T836] usb 6-1: device descriptor read/64, error -71 [ 59.345555][ T6461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.141'. [ 59.404191][ T5943] Bluetooth: Wrong link type (-22) [ 59.413841][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 59.442926][ T6481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.147'. [ 59.450407][ T6481] 8021q: VLANs not supported on vcan0 [ 59.584608][ T836] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 59.683864][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 59.723977][ T836] usb 6-1: device descriptor read/64, error -71 [ 59.834236][ T836] usb usb6-port1: attempt power cycle [ 59.878318][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.979790][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.013113][ T5300] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.017259][ T5300] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.019908][ T5300] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.025412][ T5300] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.028025][ T5300] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.053952][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.097512][ T5943] Bluetooth: Wrong link type (-22) [ 60.140066][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.146446][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 60.149236][ T82] bond0: (slave bond_slave_0): interface is now down [ 60.151341][ T82] bond0: (slave bond_slave_1): interface is now down [ 60.153689][ T6510] netlink: 'syz.2.157': attribute type 10 has an invalid length. [ 60.155293][ T82] bond0: now running without any active interface! [ 60.159705][ T6510] syz_tun: entered promiscuous mode [ 60.166089][ T6510] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 60.172199][ T6498] chnl_net:caif_netlink_parms(): no params data found [ 60.193994][ T836] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 60.201723][ T6514] /dev/nullb0: Can't open blockdev [ 60.213930][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 60.224536][ T836] usb 6-1: device descriptor read/8, error -71 [ 60.260872][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.263209][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.265629][ T6498] bridge_slave_0: entered allmulticast mode [ 60.268319][ T6498] bridge_slave_0: entered promiscuous mode [ 60.271414][ T6498] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.273610][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.275948][ T6498] bridge_slave_1: entered allmulticast mode [ 60.278514][ T6498] bridge_slave_1: entered promiscuous mode [ 60.388667][ T6498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.393741][ T6498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.435637][ T6498] team0: Port device team_slave_0 added [ 60.439072][ T6498] team0: Port device team_slave_1 added [ 60.459877][ T46] bridge_slave_1: left allmulticast mode [ 60.461791][ T46] bridge_slave_1: left promiscuous mode [ 60.464370][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.472116][ T46] bridge_slave_0: left allmulticast mode [ 60.474602][ T46] bridge_slave_0: left promiscuous mode [ 60.476434][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.477328][ T836] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 60.491239][ T5943] Bluetooth: Wrong link type (-22) [ 60.494614][ T836] usb 6-1: device descriptor read/8, error -71 [ 60.606349][ T836] usb usb6-port1: unable to enumerate USB device [ 60.748702][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.754241][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.758349][ T46] bond0 (unregistering): Released all slaves [ 60.781193][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.783585][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.791398][ T6498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.807498][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.810578][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.821884][ T6498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.963150][ T6498] hsr_slave_0: entered promiscuous mode [ 60.966687][ T6498] hsr_slave_1: entered promiscuous mode [ 60.968823][ T6498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.972114][ T6498] Cannot create hsr debugfs directory [ 61.049247][ T40] kauditd_printk_skb: 95 callbacks suppressed [ 61.049258][ T40] audit: type=1400 audit(1748618103.879:345): avc: denied { write } for pid=6557 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 61.162097][ T46] hsr_slave_0: left promiscuous mode [ 61.165089][ T46] hsr_slave_1: left promiscuous mode [ 61.168067][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.171187][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.175997][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.179036][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.195961][ T46] veth1_macvtap: left promiscuous mode [ 61.197853][ T46] veth0_macvtap: left promiscuous mode [ 61.199591][ T46] veth1_vlan: left promiscuous mode [ 61.201277][ T46] veth0_vlan: left promiscuous mode [ 61.273981][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 61.647069][ T46] team0 (unregistering): Port device team_slave_1 removed [ 61.692685][ T46] team0 (unregistering): Port device team_slave_0 removed [ 62.066246][ T5943] Bluetooth: hci3: command tx timeout [ 62.185792][ T6541] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 62.191890][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 62.201120][ T6582] vlan2: entered promiscuous mode [ 62.203338][ T6582] vlan2: entered allmulticast mode [ 62.206638][ T6582] hsr_slave_1: entered allmulticast mode [ 62.313853][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 62.337145][ T40] audit: type=1326 audit(1748618105.169:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.2.175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2f58e969 code=0x7ffc0000 [ 62.350534][ T40] audit: type=1326 audit(1748618105.179:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.2.175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2f58e969 code=0x7ffc0000 [ 62.360676][ T40] audit: type=1326 audit(1748618105.179:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.2.175" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe2f58e969 code=0x7ffc0000 [ 62.369205][ T40] audit: type=1326 audit(1748618105.179:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.2.175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2f58e969 code=0x7ffc0000 [ 62.377400][ T40] audit: type=1326 audit(1748618105.179:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.2.175" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe2f58e969 code=0x7ffc0000 [ 62.387465][ T40] audit: type=1326 audit(1748618105.179:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.2.175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2f58e969 code=0x7ffc0000 [ 62.394618][ T40] audit: type=1326 audit(1748618105.179:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.2.175" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe2f58e969 code=0x7ffc0000 [ 62.401535][ T40] audit: type=1326 audit(1748618105.189:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.2.175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2f58e969 code=0x7ffc0000 [ 62.409792][ T40] audit: type=1326 audit(1748618105.189:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.2.175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2f58e969 code=0x7ffc0000 [ 62.453577][ T6603] xfrm0 speed is unknown, defaulting to 1000 [ 62.468862][ T6603] xfrm0 speed is unknown, defaulting to 1000 [ 62.476762][ T6603] xfrm0 speed is unknown, defaulting to 1000 [ 62.481151][ T6603] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 62.497554][ T6603] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 62.512961][ T6608] xfrm0 speed is unknown, defaulting to 1000 [ 62.533091][ T6603] xfrm0 speed is unknown, defaulting to 1000 [ 62.536589][ T6603] xfrm0 speed is unknown, defaulting to 1000 [ 62.546738][ T6603] xfrm0 speed is unknown, defaulting to 1000 [ 62.556670][ T6617] sctp: [Deprecated]: syz.3.180 (pid 6617) Use of int in max_burst socket option. [ 62.556670][ T6617] Use struct sctp_assoc_value instead [ 62.567255][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'. [ 62.605169][ T6603] xfrm0 speed is unknown, defaulting to 1000 [ 62.622437][ T6617] nft_compat: unsupported protocol 0 [ 62.749867][ T6635] 9p: Unknown access argument 00000000000000000000o: -22 [ 63.317643][ T6498] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.332618][ T6498] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.340193][ T6498] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.353855][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 63.366323][ T6498] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.390307][ T5943] Bluetooth: Unexpected continuation frame (len 12) [ 63.394112][ T5943] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 63.448017][ T6498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.472995][ T6498] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.487381][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.489604][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.495707][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.498020][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.510305][ T6658] netlink: 172 bytes leftover after parsing attributes in process `syz.2.187'. [ 63.538160][ T6657] syzkaller0: entered promiscuous mode [ 63.540371][ T6657] syzkaller0: entered allmulticast mode [ 63.547046][ T6660] bridge0: entered promiscuous mode [ 63.548919][ T6660] macvlan2: entered promiscuous mode [ 63.552304][ T6660] bridge0: port 3(macvlan2) entered blocking state [ 63.555042][ T6660] bridge0: port 3(macvlan2) entered disabled state [ 63.557111][ T6660] macvlan2: entered allmulticast mode [ 63.558816][ T6660] bridge0: entered allmulticast mode [ 63.561451][ T6660] macvlan2: left allmulticast mode [ 63.563148][ T6660] bridge0: left allmulticast mode [ 63.566608][ T6660] bridge0: left promiscuous mode [ 63.708898][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 63.761092][ T6672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6672 comm=syz.2.191 [ 63.993913][ T61] bond0: (slave syz_tun): interface is now down [ 64.155646][ T5943] Bluetooth: hci3: command tx timeout [ 64.365681][ T6679] netlink: 20 bytes leftover after parsing attributes in process `syz.3.194'. [ 64.383985][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 64.398418][ T6498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.432252][ T6692] futex_wake_op: syz.3.197 tries to shift op by 32; fix this program [ 64.528993][ T6704] binder: 6703:6704 ioctl c04064a0 200000000740 returned -22 [ 64.530510][ T6498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.531644][ T6704] binder: 6703:6704 ioctl c010640b 200000000280 returned -22 [ 64.538080][ T6704] binder: 6703:6704 ioctl c00c642e 200000000300 returned -22 [ 64.540548][ T6704] binder: 6703:6704 ioctl c06864ce 2000000004c0 returned -22 [ 64.549948][ T6704] binder: 6703:6704 ioctl c06864b8 200000000600 returned -22 [ 64.559961][ T6498] veth0_vlan: entered promiscuous mode [ 64.567982][ T6498] veth1_vlan: entered promiscuous mode [ 64.585038][ T6498] veth0_macvtap: entered promiscuous mode [ 64.589283][ T6498] veth1_macvtap: entered promiscuous mode [ 64.598259][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.604570][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.609555][ T6498] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.612302][ T6498] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.619373][ T6498] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.622232][ T6498] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.622987][ T6710] overlayfs: upper fs does not support file handles, falling back to index=off. [ 64.628538][ T6710] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 64.631201][ T6710] overlayfs: conflicting lowerdir path [ 64.646221][ T6717] bridge0: port 3(veth0_to_bridge) entered blocking state [ 64.648533][ T6717] bridge0: port 3(veth0_to_bridge) entered disabled state [ 64.651035][ T6717] veth0_to_bridge: entered allmulticast mode [ 64.653748][ T6717] veth0_to_bridge: entered promiscuous mode [ 64.657563][ T6717] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 64.661910][ T6717] bridge0: port 3(veth0_to_bridge) entered blocking state [ 64.664712][ T6717] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 64.670681][ T6717] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 808 [ 64.700179][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.702686][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.717930][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.722301][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.761669][ T6727] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 64.792659][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.208'. [ 64.842990][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'. [ 64.898175][ T6750] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 65.036063][ T6760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 65.162487][ T6770] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 65.164637][ T6770] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 65.168459][ T6770] vhci_hcd vhci_hcd.0: Device attached [ 65.171773][ T6771] vhci_hcd: connection closed [ 65.172525][ T46] vhci_hcd: stop threads [ 65.176311][ T46] vhci_hcd: release socket [ 65.177826][ T46] vhci_hcd: disconnect device [ 65.425576][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 65.675731][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.851967][ T6797] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.858306][ T6797] Bluetooth: MGMT ver 1.23 [ 65.884870][ T5300] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.889270][ T5300] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.892726][ T5300] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.895491][ T5300] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.899091][ T5300] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.922584][ T61] bond0: (slave syz_tun): interface is now down [ 65.926340][ T61] bond0: now running without any active interface! [ 65.931639][ T6800] xfrm0 speed is unknown, defaulting to 1000 [ 66.014298][ T6816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=6816 comm=syz.1.228 [ 66.028145][ T6816] geneve2: entered promiscuous mode [ 66.036076][ T6800] chnl_net:caif_netlink_parms(): no params data found [ 66.066353][ T6821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.090526][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 66.090537][ T40] audit: type=1400 audit(1748618108.919:403): avc: denied { append } for pid=6820 comm="syz.1.229" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.093933][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 66.114839][ T40] audit: type=1400 audit(1748618108.949:404): avc: denied { ioctl } for pid=6820 comm="syz.1.229" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.203608][ T6800] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.209938][ T6800] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.212304][ T6800] bridge_slave_0: entered allmulticast mode [ 66.215061][ T6800] bridge_slave_0: entered promiscuous mode [ 66.218489][ T6800] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.220733][ T6800] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.223004][ T6800] bridge_slave_1: entered allmulticast mode [ 66.226253][ T6800] bridge_slave_1: entered promiscuous mode [ 66.259839][ T6800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.265378][ T6800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.299252][ T6800] team0: Port device team_slave_0 added [ 66.302706][ T6800] team0: Port device team_slave_1 added [ 66.335274][ T6800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.337407][ T6800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.346244][ T6800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.350518][ T6800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.352691][ T6800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.353642][ T40] audit: type=1400 audit(1748618109.179:405): avc: denied { read } for pid=6826 comm="syz.1.230" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.360581][ T6800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.378248][ T40] audit: type=1400 audit(1748618109.209:406): avc: denied { append } for pid=6826 comm="syz.1.230" name="v4l-subdev2" dev="devtmpfs" ino=967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.413099][ T6800] hsr_slave_0: entered promiscuous mode [ 66.416149][ T6800] hsr_slave_1: entered promiscuous mode [ 66.445074][ T6832] tipc: Enabling of bearer rejected, failed to enable media [ 66.463919][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 66.495439][ T40] audit: type=1400 audit(1748618109.329:407): avc: denied { read } for pid=6836 comm="syz.1.232" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.502535][ T40] audit: type=1400 audit(1748618109.329:408): avc: denied { open } for pid=6836 comm="syz.1.232" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.518848][ T6839] MINIX-fs: blocksize too small for device [ 66.540876][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.704492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 66.708455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 66.712416][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 66.716794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 66.720839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 66.725023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 66.745820][ T40] audit: type=1400 audit(1748618109.579:409): avc: denied { mounton } for pid=6856 comm="syz.3.238" path="/76/file0" dev="proc" ino=4026533133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 66.835450][ T6860] netlink: 'syz.1.239': attribute type 1 has an invalid length. [ 66.848714][ T6860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.852331][ T40] audit: type=1400 audit(1748618109.679:410): avc: denied { create } for pid=6859 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 66.859772][ T40] audit: type=1400 audit(1748618109.679:411): avc: denied { write } for pid=6859 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 66.879593][ T6867] netlink: 108 bytes leftover after parsing attributes in process `syz.3.241'. [ 66.883754][ T6867] netlink: 108 bytes leftover after parsing attributes in process `syz.3.241'. [ 66.887100][ T6867] netlink: 84 bytes leftover after parsing attributes in process `syz.3.241'. [ 66.887629][ T40] audit: type=1400 audit(1748618109.719:412): avc: denied { open } for pid=6868 comm="syz.1.242" path="/dev/ttyq7" dev="devtmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 67.080589][ T6879] xt_hashlimit: size too large, truncated to 1048576 [ 67.129563][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.194957][ T6885] geneve3: entered promiscuous mode [ 67.196671][ T6885] geneve3: entered allmulticast mode [ 67.292390][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.562677][ T6897] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 67.662193][ T46] bridge_slave_1: left allmulticast mode [ 67.665549][ T46] bridge_slave_1: left promiscuous mode [ 67.667414][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.722484][ T46] bridge_slave_0: left allmulticast mode [ 67.724395][ T46] bridge_slave_0: left promiscuous mode [ 67.726379][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.779147][ T6911] netlink: 'syz.3.255': attribute type 27 has an invalid length. [ 67.984719][ T5300] Bluetooth: hci3: command tx timeout [ 68.506157][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.525446][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.538289][ T46] bond0 (unregistering): Released all slaves [ 68.670253][ T6911] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.673287][ T6911] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.843064][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'. [ 68.870154][ T6923] fuse: Bad value for 'blksize' [ 69.319391][ T6911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.379811][ T6933] input: syz0 as /devices/virtual/input/input7 [ 69.474459][ T6911] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.477139][ T6911] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.493023][ T6911] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.495918][ T6911] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.658585][ T6944] Mount JFS Failure: -22 [ 69.665619][ T6947] Mount JFS Failure: -22 [ 70.043843][ C3] net_ratelimit: 41782 callbacks suppressed [ 70.043854][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 70.043857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 70.044016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 70.044084][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 70.044591][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 70.045089][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 70.045586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 70.045858][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 70.046212][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 70.046736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 70.064013][ T5300] Bluetooth: hci3: command tx timeout [ 70.296008][ T6974] netlink: 'syz.1.271': attribute type 1 has an invalid length. [ 70.427245][ T6974] bond2: entered promiscuous mode [ 70.507555][ T6974] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.700227][ T6986] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20002 [ 70.745638][ T6990] netlink: 'syz.1.274': attribute type 1 has an invalid length. [ 70.910270][ T6800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.920701][ T6800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.938378][ T6800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.956185][ T6800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.078244][ T6800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.103447][ T6800] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.118776][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.121236][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.138948][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.141215][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.276771][ T7003] block nbd3: NBD_DISCONNECT [ 71.314619][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.317705][ T7001] block nbd3: Disconnected due to user request. [ 71.319790][ T7001] block nbd3: shutting down sockets [ 71.319846][ T6800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.327669][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.377843][ T6800] veth0_vlan: entered promiscuous mode [ 71.399700][ T6800] veth1_vlan: entered promiscuous mode [ 71.419701][ T6800] veth0_macvtap: entered promiscuous mode [ 71.423393][ T6800] veth1_macvtap: entered promiscuous mode [ 71.433947][ T6935] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 71.438958][ T6800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.448103][ T6800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.452678][ T6800] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.455707][ T6800] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.458441][ T6800] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.461064][ T6800] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.595506][ T6935] usb 6-1: Using ep0 maxpacket: 8 [ 71.598830][ T6935] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 71.601369][ T6935] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.606059][ T6935] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 71.609123][ T6935] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.612125][ T6935] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.618279][ T6935] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 71.621151][ T6935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.848513][ T6935] usb 6-1: GET_CAPABILITIES returned 0 [ 71.850258][ T6935] usbtmc 6-1:16.0: can't read capabilities [ 72.064348][ T6935] usb 6-1: USB disconnect, device number 6 [ 72.146480][ T5300] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.148498][ T5300] Bluetooth: hci3: command tx timeout [ 72.150749][ T24] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 72.152817][ T24] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 72.743524][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 72.743534][ T40] audit: type=1400 audit(1748618115.569:425): avc: denied { read } for pid=7052 comm="syz.1.285" dev="sockfs" ino=16601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.753453][ T7053] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 72.780459][ T40] audit: type=1400 audit(1748618115.609:426): avc: denied { ioctl } for pid=7052 comm="syz.1.285" path="socket:[16611]" dev="sockfs" ino=16611 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 72.821731][ T40] audit: type=1400 audit(1748618115.649:427): avc: denied { watch watch_reads } for pid=7054 comm="syz.1.286" path="pipe:[7279]" dev="pipefs" ino=7279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 72.857408][ T7055] erofs (device loop1): cannot find valid erofs superblock [ 73.834169][ T40] audit: type=1400 audit(1748618116.669:428): avc: denied { bind } for pid=7061 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.901752][ T40] audit: type=1400 audit(1748618116.729:429): avc: denied { map } for pid=7064 comm="syz.1.288" path="pipe:[7279]" dev="pipefs" ino=7279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 74.223937][ T24] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 74.225895][ T24] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 74.228467][ T5943] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.230404][ T5943] Bluetooth: hci3: command tx timeout [ 75.053900][ C3] net_ratelimit: 79382 callbacks suppressed [ 75.053914][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 75.053933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 75.054093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 75.054595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 75.055106][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 75.055608][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 75.055933][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 75.056114][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 75.057006][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 75.057892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 75.253797][ C0] sched: DL replenish lagged too much [ 76.624074][ T5300] Bluetooth: hci3: command 0x0c1a tx timeout [ 76.626682][ T24] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 76.628553][ T24] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 76.955248][ T1969] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 77.027671][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.291'. [ 77.056037][ T6951] bond0: (slave syz_tun): Releasing backup interface [ 77.058509][ T7079] overlay: Bad value for 'workdir' [ 77.082633][ T40] audit: type=1400 audit(1748618119.909:430): avc: denied { create } for pid=7077 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 77.115369][ T40] audit: type=1400 audit(1748618119.949:431): avc: denied { write } for pid=7077 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 77.124935][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.291'. [ 77.402037][ T7096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.297'. [ 77.526342][ T7099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.297'. [ 77.529160][ T40] audit: type=1400 audit(1748618120.359:432): avc: denied { ioctl } for pid=7093 comm="syz.1.297" path="mnt:[4026533161]" dev="nsfs" ino=4026533161 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.624297][ T5943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.631748][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.638833][ T5943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.664159][ T5943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.666984][ T5943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.856845][ T7110] trusted_key: syz.3.298 sent an empty control message without MSG_MORE. [ 79.320979][ T221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.337110][ T221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.432671][ T46] hsr_slave_0: left promiscuous mode [ 79.443608][ T46] hsr_slave_1: left promiscuous mode [ 79.447179][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.449636][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.461578][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.465617][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.493953][ T7112] netlink: 44 bytes leftover after parsing attributes in process `syz.1.299'. [ 79.520875][ T46] veth1_macvtap: left promiscuous mode [ 79.522763][ T46] veth0_macvtap: left promiscuous mode [ 79.525464][ T46] veth1_vlan: left promiscuous mode [ 79.527242][ T46] veth0_vlan: left promiscuous mode [ 79.743935][ T5300] Bluetooth: hci2: command tx timeout [ 80.063857][ C0] net_ratelimit: 80388 callbacks suppressed [ 80.063870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 80.063871][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.063998][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.064250][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 80.064745][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 80.065226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 80.065683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 80.066030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 80.066186][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 80.066655][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 81.468104][ T46] team0 (unregistering): Port device team_slave_1 removed [ 81.598299][ T53] cfg80211: failed to load regulatory.db [ 81.716577][ T46] team0 (unregistering): Port device team_slave_0 removed [ 81.823973][ T5300] Bluetooth: hci2: command tx timeout [ 83.357031][ T7101] xfrm0 speed is unknown, defaulting to 1000 [ 83.361137][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.369667][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.667980][ T7101] chnl_net:caif_netlink_parms(): no params data found [ 83.759293][ T40] audit: type=1400 audit(1748618126.589:433): avc: denied { listen } for pid=7118 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.777814][ T40] audit: type=1400 audit(1748618126.599:434): avc: denied { accept } for pid=7118 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.903872][ T5300] Bluetooth: hci2: command tx timeout [ 84.103680][ T7134] syz.3.303: attempt to access beyond end of device [ 84.103680][ T7134] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 84.114780][ T7134] syz.3.303: attempt to access beyond end of device [ 84.114780][ T7134] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 84.118800][ T7134] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 84.126465][ T7134] syz.3.303: attempt to access beyond end of device [ 84.126465][ T7134] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 84.131609][ T7134] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 84.137516][ T7134] syz.3.303: attempt to access beyond end of device [ 84.137516][ T7134] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 84.141673][ T7134] syz.3.303: attempt to access beyond end of device [ 84.141673][ T7134] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 84.148074][ T7134] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 84.151210][ T7134] syz.3.303: attempt to access beyond end of device [ 84.151210][ T7134] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 84.157017][ T7134] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 84.163076][ T7134] syz.3.303: attempt to access beyond end of device [ 84.163076][ T7134] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 84.168323][ T7134] syz.3.303: attempt to access beyond end of device [ 84.168323][ T7134] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 84.172516][ T7134] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 84.177301][ T7134] syz.3.303: attempt to access beyond end of device [ 84.177301][ T7134] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 84.182774][ T7134] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 84.186305][ T7134] syz.3.303: attempt to access beyond end of device [ 84.186305][ T7134] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 84.192051][ T7134] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 84.202744][ T7134] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 84.206678][ T7134] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 84.222870][ T7101] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.225719][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.228225][ T7101] bridge_slave_0: entered allmulticast mode [ 84.233742][ T7101] bridge_slave_0: entered promiscuous mode [ 84.245195][ T7101] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.251137][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.259793][ T7101] bridge_slave_1: entered allmulticast mode [ 84.262880][ T7101] bridge_slave_1: entered promiscuous mode [ 84.339275][ T7138] xt_hashlimit: size too large, truncated to 1048576 [ 84.405579][ T7101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.410268][ T7101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.756035][ T40] audit: type=1400 audit(1748618127.589:435): avc: denied { connect } for pid=7145 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.793720][ T40] audit: type=1400 audit(1748618127.589:436): avc: denied { setopt } for pid=7145 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.837285][ T40] audit: type=1400 audit(1748618127.609:437): avc: denied { bind } for pid=7145 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.889433][ T40] audit: type=1400 audit(1748618127.609:438): avc: denied { ioctl } for pid=7145 comm="syz.1.306" path="socket:[17382]" dev="sockfs" ino=17382 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.901979][ T7101] team0: Port device team_slave_0 added [ 84.932711][ T40] audit: type=1400 audit(1748618127.609:439): avc: denied { write } for pid=7145 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.963977][ T40] audit: type=1400 audit(1748618127.619:440): avc: denied { read } for pid=7145 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.073827][ C0] net_ratelimit: 80399 callbacks suppressed [ 85.073842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 85.073895][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.074148][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 85.074433][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 85.075053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 85.075334][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 85.075913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 85.075949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 85.076279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 85.076894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 85.114179][ T7101] team0: Port device team_slave_1 added [ 85.189158][ T5943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.192886][ T5943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.196049][ T5943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.204444][ T5943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.206852][ T5943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.438732][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.441804][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.454623][ T7101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.466896][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.470025][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.483297][ T7101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.569495][ T7155] xfrm0 speed is unknown, defaulting to 1000 [ 85.691724][ T7101] hsr_slave_0: entered promiscuous mode [ 85.695519][ T7101] hsr_slave_1: entered promiscuous mode [ 85.698650][ T7101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.702047][ T7101] Cannot create hsr debugfs directory [ 85.759667][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.983879][ T5943] Bluetooth: hci2: command tx timeout [ 86.058474][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.081988][ T40] audit: type=1400 audit(1748618128.909:441): avc: denied { read } for pid=7160 comm="syz.3.309" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 86.571542][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.612069][ T7155] chnl_net:caif_netlink_parms(): no params data found [ 86.940920][ T7180] netlink: 'syz.3.313': attribute type 1 has an invalid length. [ 86.962197][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.165426][ T7188] mmap: syz.3.314 (7188): VmData 37462016 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 87.170555][ T40] audit: type=1400 audit(1748618129.999:442): avc: denied { create } for pid=7187 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.264123][ T5943] Bluetooth: hci3: command tx timeout [ 87.288375][ T7190] netpci0: tun_chr_ioctl cmd 1074025672 [ 87.291632][ T7190] netpci0: ignored: set checksum disabled [ 87.788694][ T7155] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.792882][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.796393][ T7155] bridge_slave_0: entered allmulticast mode [ 87.801223][ T7155] bridge_slave_0: entered promiscuous mode [ 87.831043][ T7155] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.835630][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.840493][ T7155] bridge_slave_1: entered allmulticast mode [ 87.844506][ T7155] bridge_slave_1: entered promiscuous mode [ 87.981090][ T7155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.125419][ T7155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.265878][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.331041][ T7101] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.360140][ T7101] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.424780][ T7155] team0: Port device team_slave_0 added [ 88.510709][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.533027][ T7101] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.550444][ T7101] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.561428][ T7155] team0: Port device team_slave_1 added [ 88.839506][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.888197][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.890885][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.938583][ T7155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.944358][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.946728][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.974222][ T7155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.344588][ T5943] Bluetooth: hci3: command tx timeout [ 89.541460][ T7223] uprobe: syz.3.323:7223 failed to unregister, leaking uprobe [ 90.074763][ T7233] bio_check_eod: 2 callbacks suppressed [ 90.074775][ T7233] syz.3.325: attempt to access beyond end of device [ 90.074775][ T7233] loop3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 90.081120][ T7233] XFS (loop3): SB validate failed with error -5. [ 90.084351][ C0] net_ratelimit: 77421 callbacks suppressed [ 90.084355][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.084364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 90.084512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 90.084816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 90.085159][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 90.085912][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 90.086260][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 90.086382][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.086522][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.086682][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.426807][ T5943] Bluetooth: hci3: command tx timeout [ 91.452850][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.564642][ T7244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.327'. [ 91.567402][ T7244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.327'. [ 91.714999][ T7155] hsr_slave_0: entered promiscuous mode [ 91.717401][ T7155] hsr_slave_1: entered promiscuous mode [ 91.721373][ T7155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.724132][ T7155] Cannot create hsr debugfs directory [ 91.729659][ T7101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.781603][ T7101] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.834791][ T221] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.837310][ T221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.903041][ T221] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.905396][ T221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.009618][ T7101] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.024595][ T7101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.035511][ T46] bridge_slave_1: left allmulticast mode [ 92.037903][ T46] bridge_slave_1: left promiscuous mode [ 92.041357][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.069968][ T46] bridge_slave_0: left allmulticast mode [ 92.079278][ T46] bridge_slave_0: left promiscuous mode [ 92.081374][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.100881][ T7257] xt_hashlimit: size too large, truncated to 1048576 [ 92.125069][ T46] bridge_slave_1: left allmulticast mode [ 92.147462][ T46] bridge_slave_1: left promiscuous mode [ 92.149322][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.197395][ T46] bridge_slave_0: left allmulticast mode [ 92.201999][ T46] bridge_slave_0: left promiscuous mode [ 92.209997][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.579504][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 92.579514][ T40] audit: type=1400 audit(1748618135.409:452): avc: denied { create } for pid=7267 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 92.617017][ T40] audit: type=1400 audit(1748618135.429:453): avc: denied { write } for pid=7267 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 92.957461][ T40] audit: type=1400 audit(1748618135.789:454): avc: denied { mounton } for pid=7274 comm="syz.3.334" path="/124/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 93.120256][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.131614][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.141738][ T46] bond0 (unregistering): Released all slaves [ 93.504222][ T5943] Bluetooth: hci3: command tx timeout [ 93.680261][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.690474][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.696719][ T46] bond0 (unregistering): Released all slaves [ 93.703388][ T46] bond1 (unregistering): Released all slaves [ 93.710713][ T46] bond2 (unregistering): Released all slaves [ 93.719404][ T46] bond3 (unregistering): Released all slaves [ 93.730098][ T46] bond4 (unregistering): Released all slaves [ 93.740998][ T46] bond5 (unregistering): Released all slaves [ 93.752572][ T46] bond6 (unregistering): Released all slaves [ 93.761820][ T46] bond7 (unregistering): Released all slaves [ 93.769474][ T46] bond8 (unregistering): Released all slaves [ 93.778437][ T46] bond9 (unregistering): Released all slaves [ 93.786355][ T46] bond10 (unregistering): Released all slaves [ 93.796120][ T46] bond11 (unregistering): Released all slaves [ 93.807132][ T46] bond12 (unregistering): Released all slaves [ 94.064743][ T7296] netlink: 32 bytes leftover after parsing attributes in process `syz.3.338'. [ 94.453929][ T46] tipc: Disabling bearer [ 94.456722][ T46] tipc: Left network mode [ 94.662896][ T7321] fuse: Unknown parameter 'al…Í3;<>§+f' [ 94.794868][ T40] audit: type=1400 audit(1748618137.629:455): avc: denied { mounton } for pid=7322 comm="syz.1.342" path="/proc/292/task" dev="proc" ino=18653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 94.811838][ T40] audit: type=1400 audit(1748618137.639:456): avc: denied { setopt } for pid=7322 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 94.925626][ T7101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.983914][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 95.093925][ C1] net_ratelimit: 78275 callbacks suppressed [ 95.093940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 95.093963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 95.093970][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.094135][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.094313][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.094517][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.094694][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.094851][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.095043][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.095239][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.134619][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 95.137634][ T24] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 95.142183][ T24] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 95.147193][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.149682][ T24] usb 8-1: Product: syz [ 95.151070][ T24] usb 8-1: Manufacturer: syz [ 95.152661][ T24] usb 8-1: SerialNumber: syz [ 95.164247][ T24] usb 8-1: config 0 descriptor?? [ 95.263949][ T1969] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 95.433044][ T1969] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.441259][ T1969] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 95.446234][ T1969] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 95.454016][ T1969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.461400][ T1969] usb 6-1: config 0 descriptor?? [ 95.483191][ T1969] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 95.490177][ T1969] dvb-usb: bulk message failed: -22 (3/0) [ 95.502194][ T1969] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 95.511616][ T1969] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 95.514687][ T1969] usb 6-1: media controller created [ 95.519597][ T1969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.531131][ T1969] dvb-usb: bulk message failed: -22 (6/0) [ 95.541652][ T1969] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 95.550001][ T1969] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input8 [ 95.568962][ T1969] dvb-usb: schedule remote query interval to 150 msecs. [ 95.576413][ T1969] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 95.734827][ T1969] dvb-usb: bulk message failed: -22 (1/0) [ 95.738390][ T1969] dvb-usb: error while querying for an remote control event. [ 95.904345][ T838] dvb-usb: bulk message failed: -22 (1/0) [ 95.906820][ T838] dvb-usb: error while querying for an remote control event. [ 96.067983][ T838] dvb-usb: bulk message failed: -22 (1/0) [ 96.070522][ T838] dvb-usb: error while querying for an remote control event. [ 96.227164][ T838] dvb-usb: bulk message failed: -22 (1/0) [ 96.229590][ T838] dvb-usb: error while querying for an remote control event. [ 96.349358][ T838] usb 6-1: USB disconnect, device number 8 [ 96.401832][ T838] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 97.399156][ T838] usb 8-1: USB disconnect, device number 4 [ 97.519756][ T40] audit: type=1400 audit(1748618140.349:457): avc: denied { ioctl } for pid=7342 comm="syz.3.345" path="socket:[18788]" dev="sockfs" ino=18788 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.910637][ T7155] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.916658][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.349'. [ 97.916856][ T40] audit: type=1400 audit(1748618140.749:458): avc: denied { ioctl } for pid=7353 comm="syz.3.349" path="socket:[12847]" dev="sockfs" ino=12847 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.939025][ T7357] netlink: 'syz.3.349': attribute type 1 has an invalid length. [ 97.941503][ T7357] netlink: 780 bytes leftover after parsing attributes in process `syz.3.349'. [ 97.947031][ T7101] veth0_vlan: entered promiscuous mode [ 97.949739][ T7101] veth1_vlan: entered promiscuous mode [ 97.985817][ T7101] veth0_macvtap: entered promiscuous mode [ 97.991804][ T7101] veth1_macvtap: entered promiscuous mode [ 98.492121][ T7155] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.651576][ T7155] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.679324][ T7155] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.690873][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.928339][ T46] hsr_slave_0: left promiscuous mode [ 98.938998][ T46] hsr_slave_1: left promiscuous mode [ 98.941857][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.945795][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.958461][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.961646][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.026099][ T46] hsr_slave_0: left promiscuous mode [ 99.036917][ T46] hsr_slave_1: left promiscuous mode [ 99.039786][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.042901][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.057179][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.060288][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.166658][ T46] veth1_macvtap: left promiscuous mode [ 99.169133][ T46] veth0_macvtap: left promiscuous mode [ 99.171601][ T46] veth1_vlan: left promiscuous mode [ 99.179998][ T46] veth0_vlan: left promiscuous mode [ 99.231115][ T46] veth1_macvtap: left promiscuous mode [ 99.233495][ T46] veth0_macvtap: left promiscuous mode [ 99.242051][ T46] veth1_vlan: left promiscuous mode [ 99.245219][ T46] veth0_vlan: left promiscuous mode [ 100.103919][ C0] net_ratelimit: 61000 callbacks suppressed [ 100.103932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.103935][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.104118][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.105086][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 100.105756][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 100.106627][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.107130][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 100.107531][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 100.108284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 100.108626][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 101.268809][ T46] team0 (unregistering): Port device team_slave_1 removed [ 101.590618][ T46] team0 (unregistering): Port device team_slave_0 removed [ 102.314028][ T7371] ALSA: mixer_oss: invalid OSS volume '' [ 102.316528][ T7371] ALSA: mixer_oss: invalid OSS volume '' [ 102.322558][ T7371] ALSA: mixer_oss: invalid OSS volume '' [ 102.326081][ T7371] ALSA: mixer_oss: invalid OSS volume '' [ 102.615936][ T1969] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 102.801864][ T1969] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.812751][ T1969] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 102.818388][ T1969] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.821946][ T1969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.829377][ T7373] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 102.840186][ T1969] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.038278][ T7373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.043562][ T7373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.091606][ T1969] usb 6-1: USB disconnect, device number 9 [ 103.844245][ T40] audit: type=1400 audit(1748618146.669:459): avc: denied { mount } for pid=7379 comm="syz.1.354" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 104.319770][ T7388] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.356' sets config #1 [ 104.323538][ T7388] netlink: 48 bytes leftover after parsing attributes in process `syz.3.356'. [ 104.328398][ T7388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.356'. [ 104.332193][ T7388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.356'. [ 104.662506][ T40] audit: type=1400 audit(1748618147.489:460): avc: denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 104.887972][ T7394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.358'. [ 104.897694][ T7394] netlink: 40 bytes leftover after parsing attributes in process `syz.1.358'. [ 105.113856][ C1] net_ratelimit: 56961 callbacks suppressed [ 105.113876][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 105.113952][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.113995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.114377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.114754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.115110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.115316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.115506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.115693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.115884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 106.742917][ T46] team0 (unregistering): Port device team_slave_1 removed [ 106.957191][ T46] team0 (unregistering): Port device team_slave_0 removed [ 108.331558][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.340827][ T7101] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.343584][ T7101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.346942][ T7101] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.350589][ T7101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.007949][ T7412] macsec0: entered promiscuous mode [ 109.009751][ T7412] macsec0: entered allmulticast mode [ 109.017163][ T7412] veth1_macvtap: entered allmulticast mode [ 109.091016][ T7155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.150947][ T7155] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.213090][ T221] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.215453][ T221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.225653][ T221] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.227910][ T221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.297054][ T7421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.363'. [ 109.416566][ T6830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.421973][ T6830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.486552][ T40] audit: type=1400 audit(1748618152.319:461): avc: denied { listen } for pid=7418 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.610753][ T6829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.631960][ T6829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.937764][ T40] audit: type=1400 audit(1748618152.769:462): avc: denied { read } for pid=7439 comm="syz.4.296" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 109.979987][ T40] audit: type=1400 audit(1748618152.769:463): avc: denied { open } for pid=7439 comm="syz.4.296" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 110.046485][ T40] audit: type=1400 audit(1748618152.789:464): avc: denied { ioctl } for pid=7439 comm="syz.4.296" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 110.120567][ T7155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.123828][ C3] net_ratelimit: 55544 callbacks suppressed [ 110.123839][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.123968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.124706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 110.125149][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 110.125935][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.126119][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 110.126573][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 110.127537][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 110.127968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 110.128881][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 110.242978][ T7155] veth0_vlan: entered promiscuous mode [ 110.279849][ T7155] veth1_vlan: entered promiscuous mode [ 110.373321][ T7155] veth0_macvtap: entered promiscuous mode [ 110.393321][ T7155] veth1_macvtap: entered promiscuous mode [ 110.446258][ T7155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.462603][ T7155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.493928][ T24] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 110.517065][ T7155] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.520446][ T7155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.523205][ T7155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.548407][ T7155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.682570][ T24] usb 6-1: config 146 has too many interfaces: 215, using maximum allowed: 32 [ 110.692200][ T24] usb 6-1: config 146 has an invalid descriptor of length 1, skipping remainder of the config [ 110.700975][ T24] usb 6-1: config 146 has 0 interfaces, different from the descriptor's value: 215 [ 110.720895][ T24] usb 6-1: New USB device found, idVendor=1b3d, idProduct=0138, bcdDevice=74.e6 [ 110.741106][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.808032][ T6830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.810758][ T6830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.895303][ T6829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.902696][ T6829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.973374][ T24] usb 6-1: string descriptor 0 read error: -71 [ 110.997018][ T7462] netlink: 272 bytes leftover after parsing attributes in process `syz.3.371'. [ 111.005357][ T24] usb 6-1: USB disconnect, device number 10 [ 111.605883][ T46] IPVS: stop unused estimator thread 0... [ 113.377165][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.689006][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.777514][ T7502] netlink: 'syz.4.376': attribute type 7 has an invalid length. [ 113.887253][ T7502] : entered promiscuous mode [ 114.180027][ T5300] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.185196][ T5300] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.188840][ T5300] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.192023][ T5300] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.196757][ T5300] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.230396][ T7509] xfrm0 speed is unknown, defaulting to 1000 [ 114.247156][ T5300] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.254650][ T5300] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.267912][ T5300] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.294080][ T5300] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.297348][ T5300] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.355826][ T7513] xfrm0 speed is unknown, defaulting to 1000 [ 114.402347][ T40] audit: type=1400 audit(1748618157.229:465): avc: denied { setopt } for pid=7523 comm="syz.1.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.438617][ T40] audit: type=1400 audit(1748618157.269:466): avc: denied { map } for pid=7520 comm="syz.4.380" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 114.508978][ T7524] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.756918][ T7509] chnl_net:caif_netlink_parms(): no params data found [ 114.883131][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.038635][ T7513] chnl_net:caif_netlink_parms(): no params data found [ 115.133884][ C0] net_ratelimit: 45014 callbacks suppressed [ 115.133897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 115.133972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:47:15:cd:33:89, vlan:0) [ 115.134000][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.134326][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.134682][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.135078][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.135518][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.135869][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.136011][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 115.136208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 115.289983][ T7509] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.292671][ T7509] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.295587][ T7509] bridge_slave_0: entered allmulticast mode [ 115.298294][ T7509] bridge_slave_0: entered promiscuous mode [ 115.355856][ T7509] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.373934][ T7509] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.382423][ T7509] bridge_slave_1: entered allmulticast mode [ 115.387038][ T7509] bridge_slave_1: entered promiscuous mode [ 115.827011][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.975203][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'. [ 116.046735][ T7513] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.049043][ T7513] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.058679][ T7513] bridge_slave_0: entered allmulticast mode [ 116.064817][ T7513] bridge_slave_0: entered promiscuous mode [ 116.073530][ T7509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.096090][ T7509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.107685][ T7513] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.120446][ T7513] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.127479][ T7513] bridge_slave_1: entered allmulticast mode [ 116.133002][ T7513] bridge_slave_1: entered promiscuous mode [ 116.224240][ T5300] Bluetooth: hci1: command tx timeout [ 116.361182][ T7509] team0: Port device team_slave_0 added [ 116.366566][ T7509] team0: Port device team_slave_1 added [ 116.384455][ T5300] Bluetooth: hci3: command tx timeout [ 116.396539][ T7513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.622830][ T7513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.686018][ T7509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.688248][ T7509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.698479][ T7509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.733969][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'. [ 116.781037][ T7509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.783262][ T7509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.793396][ T7591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7591 comm=syz.1.389 [ 116.799400][ T7509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.823298][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000098: 0000 [#1] SMP KASAN NOPTI [ 116.827092][ C0] KASAN: null-ptr-deref in range [0x00000000000004c0-0x00000000000004c7] [ 116.830321][ C0] CPU: 0 UID: 0 PID: 7060 Comm: kworker/0:5 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) [ 116.834903][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.838224][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 116.840430][ C0] RIP: 0010:veth_xdp_rcv.constprop.0+0x142/0xda0 [ 116.842364][ C0] Code: b4 4f 32 fb 45 85 e4 0f 85 db 08 00 00 e8 66 54 32 fb 48 8d bd c0 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 18 0c 00 00 44 8b a5 c0 04 00 [ 116.848761][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010202 [ 116.850915][ C0] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff86897e66 [ 116.853395][ C0] RDX: 0000000000000098 RSI: ffffffff8689757a RDI: 00000000000004c0 [ 116.855875][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 116.858383][ C0] R10: 0000000000000001 R11: ffffc90000007ff8 R12: 0000000000000001 [ 116.860818][ C0] R13: 1ffff92000000f45 R14: ffffc90000007e58 R15: ffff8880330c0000 [ 116.863297][ C0] FS: 0000000000000000(0000) GS:ffff8880d6971000(0000) knlGS:0000000000000000 [ 116.866071][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.868637][ C0] CR2: 0000564208a38ce8 CR3: 000000000e182000 CR4: 0000000000352ef0 [ 116.871238][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.873748][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.876014][ C0] Call Trace: [ 116.876966][ C0] [ 116.877803][ C0] ? __pfx_veth_xdp_rcv.constprop.0+0x10/0x10 [ 116.879693][ C0] veth_poll+0x19c/0x9c0 [ 116.881180][ C0] ? __pfx_veth_poll+0x10/0x10 [ 116.882730][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 116.885038][ C0] ? process_backlog+0x3f0/0x15e0 [ 116.886670][ C0] ? process_backlog+0xcef/0x15e0 [ 116.888744][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 116.890422][ C0] net_rx_action+0xa9f/0xfe0 [ 116.891872][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 116.893440][ C0] ? find_held_lock+0x2b/0x80 [ 116.894962][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 116.896597][ C0] ? sched_clock+0x38/0x60 [ 116.898049][ C0] ? sched_clock_cpu+0x6c/0x530 [ 116.899562][ C0] ? mark_held_locks+0x49/0x80 [ 116.901056][ C0] handle_softirqs+0x219/0x8e0 [ 116.902559][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 116.904382][ C0] ? kernel_fpu_end+0x59/0x70 [ 116.906382][ C0] do_softirq+0xb2/0xf0 [ 116.908150][ C0] [ 116.909404][ C0] [ 116.910675][ C0] __local_bh_enable_ip+0x100/0x120 [ 116.912867][ C0] kernel_fpu_end+0x5e/0x70 [ 116.914793][ C0] blake2s_compress+0x7f/0xe0 [ 116.916749][ C0] blake2s_final+0xc9/0x150 [ 116.918601][ C0] hmac.constprop.0+0x335/0x420 [ 116.920654][ C0] ? __pfx_hmac.constprop.0+0x10/0x10 [ 116.922924][ C0] ? __asan_memcpy+0x3c/0x60 [ 116.924879][ C0] ? __pfx_encode_point+0x10/0x10 [ 116.927010][ C0] kdf.constprop.0+0x122/0x280 [ 116.928916][ C0] ? __pfx_kdf.constprop.0+0x10/0x10 [ 116.931054][ C0] ? __pfx_curve25519_arch+0x10/0x10 [ 116.932937][ C0] ? kdf.constprop.0+0x223/0x280 [ 116.934530][ C0] ? __pfx_mix_hash+0x10/0x10 [ 116.935999][ C0] ? __crypto_memneq+0x203/0x430 [ 116.937625][ C0] mix_dh+0xe8/0x150 [ 116.938837][ C0] ? __pfx_mix_dh+0x10/0x10 [ 116.940212][ C0] wg_noise_handshake_create_response+0x3bc/0x640 [ 116.942182][ C0] ? __pfx_wg_noise_handshake_create_response+0x10/0x10 [ 116.944499][ C0] ? ktime_get_coarse_with_offset+0x1af/0x240 [ 116.947089][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.949232][ C0] ? ktime_get_coarse_with_offset+0x1c1/0x240 [ 116.951756][ C0] ? ktime_get_coarse_with_offset+0x150/0x240 [ 116.954301][ C0] wg_packet_send_handshake_response+0xe0/0x310 [ 116.956941][ C0] ? wg_socket_set_peer_endpoint+0x31f/0xbd0 [ 116.959490][ C0] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 116.962358][ C0] wg_receive_handshake_packet+0x247/0xbf0 [ 116.964780][ C0] ? __pfx_wg_receive_handshake_packet+0x10/0x10 [ 116.967451][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 116.969690][ C0] wg_packet_handshake_receive_worker+0x17f/0x3a0 [ 116.972306][ C0] process_one_work+0x9cc/0x1b70 [ 116.974353][ C0] ? __pfx_process_one_work+0x10/0x10 [ 116.976538][ C0] ? assign_work+0x1a0/0x250 [ 116.978434][ C0] worker_thread+0x6c8/0xf10 [ 116.980386][ C0] ? __kthread_parkme+0x19e/0x250 [ 116.982364][ C0] ? __pfx_worker_thread+0x10/0x10 [ 116.983977][ C0] kthread+0x3c2/0x780 [ 116.985254][ C0] ? __pfx_kthread+0x10/0x10 [ 116.987036][ C0] ? rcu_is_watching+0x12/0xc0 [ 116.989060][ C0] ? __pfx_kthread+0x10/0x10 [ 116.991021][ C0] ret_from_fork+0x5d4/0x6f0 [ 116.992966][ C0] ? __pfx_kthread+0x10/0x10 [ 116.994948][ C0] ret_from_fork_asm+0x1a/0x30 [ 116.997079][ C0] [ 116.998428][ C0] Modules linked in: [ 117.000220][ C0] ---[ end trace 0000000000000000 ]--- [ 117.002528][ C0] RIP: 0010:veth_xdp_rcv.constprop.0+0x142/0xda0 [ 117.005213][ C0] Code: b4 4f 32 fb 45 85 e4 0f 85 db 08 00 00 e8 66 54 32 fb 48 8d bd c0 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 18 0c 00 00 44 8b a5 c0 04 00 [ 117.011775][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010202 [ 117.013745][ C0] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff86897e66 [ 117.016331][ T40] audit: type=1400 audit(1748618159.839:467): avc: denied { read } for pid=5331 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 117.016333][ C0] RDX: 0000000000000098 RSI: ffffffff8689757a RDI: 00000000000004c0 [ 117.016348][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 117.023525][ T40] audit: type=1400 audit(1748618159.839:468): avc: denied { search } for pid=5331 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.025634][ C0] R10: 0000000000000001 R11: ffffc90000007ff8 R12: 0000000000000001 [ 117.025644][ C0] R13: 1ffff92000000f45 R14: ffffc90000007e58 R15: ffff8880330c0000 [ 117.025652][ C0] FS: 0000000000000000(0000) GS:ffff8880d6971000(0000) knlGS:0000000000000000 [ 117.025675][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.025684][ C0] CR2: 0000564208a38ce8 CR3: 000000000e182000 CR4: 0000000000352ef0 [ 117.025691][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.025698][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.025712][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 117.028698][ C0] Kernel Offset: disabled VM DIAGNOSIS: 15:15:59 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85585bc5 RDI=ffffffff9ae6a6a0 RBP=ffffffff9ae6a660 RSP=ffffc900000073b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9ae6a660 R15=ffffffff85585b60 RIP=ffffffff85585bef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6971000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000564208a38ce8 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080404108 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 29b6937fb373fbe9 d92646e3718c427b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 79d44e76a073e054 5b75a0427346a98c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2485039814fac700 46c3601d5670e071 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a0320fc1ab34ff9 696daab36eadef6f ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000060 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e6a6660967f0f36 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e4183c6600000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9af75859d22a531f 4963435464cc3ffe ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000cceb693d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7fbef2f766f9c874 51cba381037d7c61 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 eb13c3d47201d6d6 34557e8e7e13e3de ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6576003068746576 00306e6170737265 0030657267367069 00306c6e74367069 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00306974765f3670 6900306974765f70 6900306c6e757400 3074697300326777 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000002 RCX=ffffffff91ad850c RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffc9000069ffc0 RSP=ffffc9000069ff08 R8 =ffffffff91ad8510 R9 =0000000000000000 R10=ffffc9000069ff78 R11=00000000000857a2 R12=ffffc9000069ffc8 R13=ffffc9000069ff78 R14=ffffc900006a0c68 R15=ffffc9000069ffac RIP=ffffffff816a9ff8 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f76d8778300 ffffffff 00c00000 GS =0000 ffff8880d6a71000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe2b8c7f286 CR3=000000003215c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=dd2fad52806c6fc0 9509640fb5d98de6 dd2fad52806c6fc0 9509640fb5d98de6 dd2fad52806c6fc0 9509640fb5d98de6 dd2fad52806c6fc0 9509640fb5d98de6 ZMM18=7b71423726a82b99 8d28c99d35a74b12 7b71423726a82b99 8d28c99d35a74b12 7b71423726a82b99 8d28c99d35a74b12 7b71423726a82b99 8d28c99d35a74b12 ZMM19=f704000000000000 0000000000000007 f704000000000000 0000000000000006 f704000000000000 0000000000000005 f704000000000000 0000000000000004 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000800080007 000c000800000000 0000001000000034 0000000003000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000160000000c 0000000a00040008 000f0010000a0000 000003e600000008 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00040000000a0008 0000002000000001 0000000000000000 0000000000000070 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008d40300040008 d00302100008c003 00080008b8030008 0008b00302100008 ZMM25=7a0b971d7a0b971d 7a0b971d7a0b971d 7a0b971d7a0b971d 7a0b971d7a0b971d 7a0b971d7a0b971d 7a0b971d7a0b971d 7a0b971d7a0b971d 7a0b971d7a0b971d ZMM26=9834b8a49834b8a4 9834b8a49834b8a4 9834b8a49834b8a4 9834b8a49834b8a4 9834b8a49834b8a4 9834b8a49834b8a4 9834b8a49834b8a4 9834b8a49834b8a4 ZMM27=ba468655ba468655 ba468655ba468655 ba468655ba468655 ba468655ba468655 ba468655ba468655 ba468655ba468655 ba468655ba468655 ba468655ba468655 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=bc020000bc020000 bc020000bc020000 bc020000bc020000 bc020000bc020000 bc020000bc020000 bc020000bc020000 bc020000bc020000 bc020000bc020000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a443840 RCX=ffffffff81afb2dd RDX=ffff888028cd0000 RSI=ffffffff81afb2b9 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc9000652f8a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffffffff9ad97f30 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d488709 R15=ffff88806a63cfc0 RIP=ffffffff81afb2bb RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b71000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f40ac873fb8 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000070300 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe54d3bde0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40aba11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40aba11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40aba11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40aba11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40aba11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40aba11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000013b70 00000000000005a2 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffc90004c778a0 RCX=ffffc90004c78001 RDX=0000000000000000 RSI=ffffffff8bf52f40 RDI=ffff888024934cc4 RBP=ffff888024934880 RSP=ffffc90004c77408 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90004c774a8 R11=00000000000117c4 R12=ffffc90004c774f8 R13=ffffc90004c774a8 R14=ffffc90004c778a0 R15=ffffc90004c774dc RIP=ffffffff81a1f0f0 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c71000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3d1e25c43c CR3=0000000045919000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff00ffffffff00 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00010001010100ff ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f4342494c470033 2e325f4342494c47 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000002e 322e325f4342494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c4700362e322e32 5f4342494c470035 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3d1e25b6b0 00007f3d1e25b0c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3d1e559ab0 00007f3d1e559580 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3d1e558b20 00007f3d1e559050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000