last executing test programs: 1m43.61401793s ago: executing program 1 (id=185): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x78, 0x1000000, &(0x7f0000000280)="c594fc84777e66cf6fa9b2f750096c6fbbeb3490fb2f31e4363877954bf3e1169ab91097f075901640d73de8205440a24bd53379f7da30f020b7d23b2c74219eaebfe846c07ea276493240a4a65410e67b8d411787b538d3d04ca001f84697d2d14f53522103ca6b0133150c737556e443553268928dae41"}) 1m43.552946816s ago: executing program 1 (id=188): r0 = syz_open_dev$video4linux(&(0x7f0000000300), 0x4, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000001c0)=0x399c, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'nicvf0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r2, 0x1, 0x20, 0x6, @local}, 0x14) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x8, 0x7, 0x201b, 0x6, 0x10, 0x8, 0x1, 0x5}}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000040)=0x1, 0x4) chroot(&(0x7f0000000000)='./bus\x00') link(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)='./file0/file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) 1m43.402155525s ago: executing program 1 (id=191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000280)=':', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f000000cf40)='htcp\x00', 0x5) shutdown(r2, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x158, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xfeff, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x16, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, {0x18, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x158}}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ptrace(0x11, r6) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000280)="360f01c866baf80cb8483a3088ef66bafc0cb800400000ef0acac74424001ebc0000c744240258ae6098c7442406000000000f011c2466f33e0f2252650f79f90fc7aff1ffffffc4e1795bfb672626f20f1280f8eb66ba210066b8272f66ef", 0x5f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m43.123055012s ago: executing program 1 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\xa3X\xbf){P\xbd&\xfa\xd5\xc7\x1a^L\x8c\nc\b\x03\x00\x00\x00\x00\x00\x00\x0018-\xf9\x18\xfb\xb1\xf9\xff\xff\xff\xff\xff\xff\xffN\x8db\xc9\x0fJ\x00d%\xb6wV\"UP\x00-\x1c\xb2\xa2\x17Z\xd7', &(0x7f00000000c0)='\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2244, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r2, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x2, 0x20002) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="24000000541c36ad6ea4d82c0100000000000000000008000000", @ANYRES32, @ANYBLOB="040000000800368004000100"], 0x24}], 0x1}, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) fsopen(&(0x7f0000000100)='cifs\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\xa3X\xbf){P\xbd&\xfa\xd5\xc7\x1a^L\x8c\nc\b\x03\x00\x00\x00\x00\x00\x00\x0018-\xf9\x18\xfb\xb1\xf9\xff\xff\xff\xff\xff\xff\xffN\x8db\xc9\x0fJ\x00d%\xb6wV\"UP\x00-\x1c\xb2\xa2\x17Z\xd7', &(0x7f00000000c0)='\x00', 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2244, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) (async) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000000)) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') (async) preadv(r2, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x2, 0x20002) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="24000000541c36ad6ea4d82c0100000000000000000008000000", @ANYRES32, @ANYBLOB="040000000800368004000100"], 0x24}], 0x1}, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (async) 1m42.853585596s ago: executing program 1 (id=198): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x4, 0x34565348, 0x2, 0x6, 0x46, 0x2, 0x3, 0x1, 0x7, 0x0, 0x7}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xb, 0x10}, {}, {0x9, 0x5}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xcc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1dc, r3, 0x705, 0x70bd27, 0x1, {}, [{{0x8, 0x1, r4}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x20008080}, 0x804) 1m42.422459754s ago: executing program 1 (id=203): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000040)) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x1853}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xd2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x34, 0x66, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff2}, {0xa, 0xffe0}, {0x3, 0xffe0}}, [{0x8, 0xb, 0x51}, {0x8, 0xb, 0x3757}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40011) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='pvfs2\x00', 0x1200013, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 1m42.359138368s ago: executing program 32 (id=203): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000040)) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x1853}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xd2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x34, 0x66, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff2}, {0xa, 0xffe0}, {0x3, 0xffe0}}, [{0x8, 0xb, 0x51}, {0x8, 0xb, 0x3757}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40011) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='pvfs2\x00', 0x1200013, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 1m18.76244668s ago: executing program 3 (id=455): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_create(r0, 0x0, 0x0) pwrite64(r0, 0x0, 0x0, 0x2) mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x618008, &(0x7f0000000200)={[{@uid={'uid', 0x3d, 0xee00}}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') gettid() lseek(r1, 0x10001, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) write$selinux_create(r0, 0x0, 0x0) (async) pwrite64(r0, 0x0, 0x0, 0x2) (async) mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x618008, &(0x7f0000000200)={[{@uid={'uid', 0x3d, 0xee00}}]}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) gettid() (async) lseek(r1, 0x10001, 0x0) (async) 1m18.683365517s ago: executing program 3 (id=456): syz_emit_ethernet(0x7e, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x3c}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000000c0), 0xffffd6c0, r1}, 0x38) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket(0x40000000015, 0x5, 0x0) 1m18.572928677s ago: executing program 3 (id=457): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, &(0x7f00000000c0)="a6e4dc9b126ee6bbfd14e6a2a993693dd6dacaf8da7008f05dfa02b44d3d66086042259999df57568aca68d3df65032ac27df4f34cb3b56b823b38a56ad774e5319a89edd244bd3c5192b654dcaf97f4588753d0a8e8d1acae5a0cebdec14ee25516db3c34104b5c0c39f7c142f4fc7ffd7eb71cec530b4b", 0x78, 0x40088d5, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = fsopen(&(0x7f00000010c0)='nfs4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) init_module(&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xaf, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="401000010400000000000000baf3bc4845700000000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000200012800b00010067656e657665000010000280060005004e23000004000600"], 0x40}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in=@private, @in=@local}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) 1m18.571256112s ago: executing program 3 (id=458): unshare(0x22020400) r0 = eventfd(0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xe7, 0xffb, 0x7, 0xb69, 0xc5, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x5c1, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) prctl$PR_SET_THP_DISABLE(0x41, 0x1) prctl$PR_SET_THP_DISABLE(0x41, 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) prctl$PR_MCE_KILL_GET(0x22) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000002c0)="1456d880f073c5661da55ba45dd43b2add", 0x18) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x3, 0x0, 0x0) r5 = accept4$alg(r3, 0x0, 0x0, 0x80800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x405}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmmsg$alg(r5, &(0x7f0000002b40), 0x0, 0x800) semget$private(0x0, 0x2, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfffff001}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6}]}, 0x54}}, 0x4004000) r8 = syz_io_uring_setup(0x7793, &(0x7f00000001c0)={0x0, 0x251b9, 0x26, 0x6, 0x2d9, 0x0, r0}, 0x0, 0x0) unshare(0x8040000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0xbc, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x7f}}}}, [@NL80211_ATTR_SSID={0x1c, 0x34, @random="f2984ab9048643a9d4409bd83a45feee80c9bd077f41a7e4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1a}, @NL80211_ATTR_PMKID={0x14, 0x55, "03035dd671ad1a37ee05333e198516b8"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x60}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "c6b8a7a05def96ed88020164ec8045bf"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x18}, @NL80211_ATTR_PMKID={0x14, 0x55, "553cd2f9b9718e59c52ef389b03e29e3"}, @NL80211_ATTR_PMKID={0x14, 0x55, "bed50def2c32f43bf2aa1700d4e452a7"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x51}, 0x8000800) getpeername$l2tp(r8, &(0x7f0000000000), &(0x7f0000000040)=0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) openat(r9, &(0x7f0000000600)='./file1\x00', 0x80, 0x100) getdents64(r9, 0x0, 0x0) 1m18.353417916s ago: executing program 3 (id=459): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@bridge_getlink={0x28, 0x12, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x886b, 0x956b4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x47) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x2, 0x5) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000030429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001800128008000100707070000c00028008000100", @ANYRES32=r7, @ANYBLOB="08001f"], 0x40}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@uuid_on}]}) 1m17.423360167s ago: executing program 3 (id=464): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r1, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:userio_device_t:s0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x11c) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='vxfs\x00', 0x11, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1m11.112037013s ago: executing program 4 (id=518): syz_usb_connect(0x6, 0xed4, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x6c, 0x2b, 0xf, 0x8, 0x83a, 0x4507, 0x1c40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec2, 0x3, 0x8, 0x3, 0x80, 0xdf, [{{0x9, 0x4, 0xb, 0x3, 0xf, 0x66, 0x29, 0xe3, 0x2, [], [{{0x9, 0x5, 0x2, 0x8, 0x10, 0x7, 0xe0, 0x8, [@generic={0xbd, 0x1, "2798aed0541670a9c5c1b0563b2a539eef88b9d488807595bd603974f7dd521c184146ac43d68e067996ebd6607f2cb6559e1eb12fb264be33db1e3fc5efdd2ea5c43d0b7afda48643562021d87f0ef45478699c39ae95a2ac75c4bfd46bf16743dbf5ba157dba6a18f787e04e21fd8dd520a26c2436e599fa54cb950e05cb9e9e6146349d7e1253c1a3c4a46fa2c18e821c670b4d766185ca4fbb6b1c5eb00377d108ad789d6cd87ef5b9dcafd47cd43a76dee2b7646633971216"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x80, 0x9e, 0x2}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0xc, 0x9, [@generic={0xe7, 0x23, "e816d14d4f1e25ff0ae2f8d93b96fae6e943f7acf4e27c9126aa95059bd9814aee09c74d40a3294cdd09076919703e440f12e5c3e9954fe20ae02d9f9794bd908a900835694caf96a1799f610df662d7d0258ea3254e77c315781b2025f66d0a07fa465f5ebfeea31031571bb6a08b78150f0fbc0c2bb44fcdac5ec9729d153e291c14e075cd22cecd7364142fae77970d1fc1e8039c87bc6a60d55fb523766544c5d40011b329c7e452996871e8727f6d28a8f1542e8393e990e0a0ac2b0eefd0c92b27613b24a435e240722d7fef40b65e263f14e68fa79cf5a230753531fd0e97644143"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x1, 0x8, 0x7, [@generic={0x58, 0xa, "ef65b42fb631fc74e0dbb0ec3ed99b7443ce29d4509aebc1d1a2ac89e8b486029c8c40487e23d8f9193b63a42a1844f49b9ec6e214181e8da4aa62e82695e5b19e099a67f4fab1e3f8a734ef91de40489bcc7fd1a2e0"}]}}, {{0x9, 0x5, 0xd, 0x2f9c4fd4398a7c8a, 0x8, 0x6, 0x3, 0x8, [@generic={0x92, 0x7, "55682c28fe53d7f8265cb3d85f5d7475be56d36a7e947f5180313297f04eee3c87eb4e66ac40a801ba0fe618b5d6444ee553b929797b4f62767af445de36a747eb5f8feccc4ae99810a3faf897340c5c10ce57004803a748db1a7c3ac6f815fd4581fdc4a15a1b2d25ae4863d33ad9a19fcf25e75daa947e30d1fbef40928d521c731092060f24cfd0b9aa2f3eb78812"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x4, 0x3d, 0xb}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0xdf, 0x91, 0x8}}, {{0x9, 0x5, 0x1, 0x0, 0x410, 0x3, 0x0, 0x2}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x7, 0x2, 0x6, [@generic={0x18, 0x9, "2d2a20cb20923f8e5225bf62168f73b52404be7ad62f"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x3, 0x6, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf2, 0x547}]}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0xf, 0xf1, 0x9, [@generic={0x5b, 0x13, "9a34873aa8cf05660abc20673de90cf1666ee5288e65bd09a55213431afc8dd343afb1470b268910b8b625c804b14c21233ecc52bf47f30524d3d77998809b71776d0623d61e671f50e951f15de13404338a0f04074babb314"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x7, 0x8, 0x25, [@generic={0xbc, 0x8, "e58efde4e31a93775d96b261169fe2fe6ec02c470c6b6866ec1211303369bfb1cccb48d5f1de449cb710e35bcb16a6e2619c2f7cde44e55ce3129cf9ed0325832319efef7abf13f847ccca0921308c4c8f2d614dbc52a6eed61efad87a180e6b6d1641092ad2957413c3d4ca978672209c49b3eaeae7f2c50f18a380fafd5a09b131afaa21b4b05aa9f18a67a9b7273275ca8a1ca0764e03756fc81b64503e1e2cdf44271e8b1d2e8c62a097aa4522382a78a722527480ad364b"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4a, 0x6}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0xf8, 0x3c, 0x71, [@generic={0x3b, 0x31, "8e07977bd6c6f95035c8dda002fd6efdcb20af636d67ba204d2f19b869709b7b188cfdaec6b69f3e27221447341a1ae3cda4893d4f8cc9bd57"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x9}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x5a, 0x6, 0x60, [@generic={0xdd, 0x2, "73392d64712097dc2e9edf233b45c8a4a9c48121e6b516e1b2263885b1d2497fb58870f483523d51f875a5c9b3486067231dc73f9dfd9d22dcd6ff43345c915cb57daf5eac593e8157a71e8e075cadac862a2b13ab40b611b9f270c5ff199a233eba1a0efecb12dc9a8f9b1b94647d4fa451cedd49a4d5f3e1af84272411cf9dac4c77b0b4f32902f9251023b00675dbe278644ae7984142359604885226bc6ed512be05e67faf75fecd8eed2321adca1edff656738c8ef8c6c79a54dae808813c621b16e6068890187ff57b394da5f3d1abd5e802a06d0b4d82c4"}, @generic={0x31, 0xe, "60a9fafecb494b5b393ed93d537a3b8b0104a126cfbd24df96c64b4065c971a5f5150057eb2764d9b58d68f7d6ee60"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x1, 0x9, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5}]}}]}}, {{0x9, 0x4, 0x82, 0xbe, 0x10, 0x90, 0x3b, 0xa, 0xf7, [], [{{0x9, 0x5, 0xb, 0x10, 0x40, 0x7, 0x40, 0xbd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x70, 0x4}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x1, 0x40, 0x5f, [@generic={0x8c, 0x24, "abaaa59a3c1c0c5e781c4854d9ac59d84f5d1314a542a0ddf4d28bf9bcf5799411eff15aab29e6b00483c79870b62f3e96822e078ef25e89c8d73192e9124702a6cfa380a2fbf91f6459fa2fc7a8ea4d59a73ca55d02dea9f3bb24ee55e8758d50314163cc6278385b94542779ff6e99f4d071359b602cafd80953fc2fc18360eed5139571dd9bd24869"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x200, 0x8, 0x2, 0x4, [@generic={0x9, 0x8, "b15fedfe792271"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x8, 0x8, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x26, 0x9}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3, 0x8, 0x2, [@generic={0xf3, 0x5, "0ec445c8d9f6371b5c432f25ef6947756cb4db63b9f7107e2699a87fda6c79a0b822bf8e07f7a19665f7adca9295c752ef9df809ea0656a971601873c88017d055cc8b1256b5bafe05e309702d9437d7717a5506c33cf9351c7f491db51d83c968383ac39f2f7e8e1e621de440f9f5ead242756407463515b278765e4ab1864546e0707712ba7afc7b4367de792a68b88d4a394469c3901a070a05dab1b99204c441fcf0498c289734d3a23e0e891cad3fc7e4d46882beb886b35424919c55f3e226c96c1738dc07378682b1e88d11d1de7d0d284550b16730c7672e1ede7021cea29b9a7da63602d79f850b84a4d8862a"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0x9, 0x3, 0xfd, [@generic={0xc9, 0xb, "27c9f5aa540d9b0b3b2a923b23cc090c083a6ac219f5a5a530e688e37daade2f28b3e2627e3c14eab7991c9dbe308b1359e15b8b033e7cee278fc37afa67c72e6313321b4e38e31c866c8735848ffa496419ee08a87906122fb294b95993e5ed86e08212e5fb8d9b70388c6c004a045665d0fdece30b607192b42d15ea6112720cd9df5675732e876478c160c9ef9747476c83d52cf95bc32647e33606a5c852c2c4842c88fb1b3d7d23107db0fd8035943296c1d9b083e615fd43c9f5bc3a4ab30a25704bb761"}, @generic={0x92, 0x0, "6b962d5e531a463cbbfce28cdd66dd5922b61d1fc5094c2a87a94e7c56377428193d7fe3ba46c38593ad43544ac744ac13b742416e80eb54ef86103dc88004cd627ce90a691f06779ecf7c97519f25614008557d961ac1a32f2e79cbca94f4b89ee87a7fa91b7c6c19d823296ba5ce953a494948dc67a123a6d5d2d94c9e88c0c240be657e70764a73274c63fcd93b10"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x2, 0x2, 0x0, [@generic={0xc0, 0x6, "d3e1896209f9a0fcb7c72c0bdfc25fe5a1c3be3ce93bb5d0b3d3407d89021f49af7946f0af1b70ca44f8d051e3e7496d3c153367f553f31404c66aa9e40f3838fa356c5b4324396dcff5c4af8668d829318c262069cc0813d459bd785b244c176db67591a1a8d9496c4346b7f9ddee6896336a2a95ff59fd81c03d9b40f917aa254a98482ced0d182bef1e48a5076d06d713210fa6fe11f6a7cc9a719ae66da5bcadedb81f42c0fcbdae8b806eba46afb3d35152f4350fc60ab1b27861aa"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x7, 0xff, 0xb}}, {{0x9, 0x5, 0xb, 0x4, 0x8, 0x8, 0xff, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x22, 0xfffa}, @generic={0x21, 0x11, "714cdd0361682a1bdb5e262dfb4302282f45716ecab01918ed2e85327b255c"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x1, 0x0, 0x0, [@generic={0xdb, 0x22, "e999702d854cdfdbcfa406fbdc07b09505e88033bc9f5a1cc6404e881ea8db93fd58c7a84da29c2e08cbe382d90aa513567ba846fcd93216f2d35d1aaa9a903a47dc1122aa4863dffa44b9f1bfcfc43fefa3de7569a8230520b5b8d6a26988498a53957864771add7495cc9841f0fd302a89c61d4f4d45ed6bf83be73d3607f584b80d63f76612196a7669912133f5b88be5ebeef9ca7c7ed1a661a063526215b4171a993d107072e747854889acce994eed0a6c8749d1966dacedebde8ef8c4b1624ef521a339666a54a9bdeb72541e480fd49dc6a226909a"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x5}]}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x2, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x2}]}}, {{0x9, 0x5, 0x80, 0x8, 0x39f, 0x10, 0x9, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x40}]}}, {{0x9, 0x5, 0x2, 0x1d, 0x40, 0xd, 0x2, 0x7, [@generic={0x91, 0x8, "f06b8dcf4620004fced359db95fbbffcf25501cbf83d7f20eb42221a3291fb840ece5676b080c7e98d6946fcc6f99f2fe4a78657a36634b90569a722303a0aadebc31058581f85075b5b05889c4b64cf37a088338b2853f0fe617ff47a080dc4b967e583f813b7b8ebcf5d42291e60f022121c621e64eaeb7fccf7f57a5558ef6b0ddc62a8e3a5fab4425eeee71d88"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x9}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x5, 0x2b, 0x6, [@generic={0x64, 0x24, "61d3e08c2d86e35bc820cc04f8acc8a31d55a1d549115ffec32c78ef4cc6a6eb7ae3020685f94de70155e7c69ced219dc87d4fd35063df0150751c013da75c3937baa6a84da408a6b7cca8422f39ce698ba3644cbd52b0d83391bfee43bcf56ea9a9"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xea, 0x10}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0xff, 0x8, 0x2, [@generic={0xdc, 0x6, "e912df5ac1a1dd08ce063d4b9e7b70a653c412f0d7681b39c47ee66285cb44cbd008d5728332fb5469bd97a0e5f23b407f7c853849c90335c4b4018a90848f7f55dc8e2c175ae48f51a66ec27245948e062d07016331e58187433d96e0e20ecbf2beeca83020ab2a18e3c3ac7b3abb33fa5e06633b5751f7178f9ef97df518633ad6c6ceea28cacada48dcaccc7dafe0a6df61e67f65c6b29e618699eba6d8387c1841bc1e33547e9b63caa10790d022ae1c2d034899902b8d308ca6e82434a7ad2f3f59cc43b79fd30f8e0e116da1047bee1adf5dc86932d17a"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x10, 0x4a, 0x7f}}]}}, {{0x9, 0x4, 0x20, 0x1, 0x1, 0x28, 0x14, 0x6c, 0xd, [], [{{0x9, 0x5, 0xf, 0x4, 0x40, 0x80, 0x5, 0x9, [@generic={0xaf, 0x1, "916973ca23736e092c889ba3769af8a14ed1b64c98d79b0b40a42509be60ff6659c82418b3e104e11d15bb6383cbae7c872bad7a11fe41beb94e0042c4b1619e8602f52b2d1123d694b0eda31f92381b9be6489795a342ac5ef09aafe5fead275a47149a22cf04721ce8567fed687339208d606476acd6245518b4081e3228f1cff0fd7836aa167275b5390d0434d31eaed3254dac47e8b3651c7a1c581313e76e09f1389f5af8e37622e58de9"}, @generic={0xfe, 0x5, "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"}]}}]}}]}}]}}, &(0x7f0000001680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x7, 0x3e, 0x10, 0xff, 0x80}, 0x47, &(0x7f00000011c0)={0x5, 0xf, 0x47, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x6, 0xff00, 0x9, [0x3f00, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x6, 0x41, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0xf1, 0x89a4}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "f937be503931a650dd96f138a20caf2f"}]}, 0xa, [{0x58, &(0x7f0000001240)=@string={0x58, 0x3, "81efc423bf9eb0251c309b6be4bf634ee206cf027a4c7b9118318865fb73d3d7b3112d302d65d43d6688567e5fedadfa500bc909e9015afae7f780c400e429e47c36a2019bc4ed5f0913a565f990591d67d9f1218ffa"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x458}}, {0x40, &(0x7f00000013c0)=@string={0x40, 0x3, "9cfa2f33a4cdc9c01707c0bc3d015858d30783680318274f8720423592edb7ed2fde44a837fea8d859b1342668267a3720d84f858b6abff12d137c7e7552"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x41a}}, {0x97, &(0x7f0000001440)=@string={0x97, 0x3, "aee7efe873f461ce10615cee93c6bcaaacec8d2404561ff8776f239cac4e96924052224a3cac0b11e0a03e11dde5e354c53afcdcd0ac6cca04179934f13f1bbabe3e24477d97d658b4c5c1dd078a08a14430d67ba89977df370ad6240edfe40130816a7b4bb6b73c2c2000528cdd2e0d894115134e12cfbc8b20cfabe42d6f5155ed643c101b3f0a0294651bd98e3dec85010377fc"}}, {0xb, &(0x7f0000001500)=@string={0xb, 0x3, "f2535d6916b6a178d5"}}, {0xd3, &(0x7f0000001540)=@string={0xd3, 0x3, "1897c951a05c983ff62fa4474309e636542f7f67e4d27913e6812cbac75d736f650303115fbe00e36a4e54dd1d524920b456dcd20939d30232444ceba67e64e43c70212fa42ab73e82953f6754e550fdb1135a07aaf630a45628e89e69bcb54c5e3baec84d7b7b166635ae3a3b1329c6883f543692d3ff4a7a235f27b920217c31a67d93d5ab07e842869410987716cec42d256cb1c9635a79f9c16f33006b21ca77374bf186856eb3d1ae470e327fd5aa22c76c38e5081b23ffa692c90ecbfec743649aaa4aa539eecd55bd51b85b41ee"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x40d}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x9403, 0x0, 0x2e0, 0x2c0, 0x410, 0x3d8, 0x3d8, 0x410, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xffffffff, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@empty, @local, [], [], 'ip6erspan0\x00', 'bridge_slave_1\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r2, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) 1m10.483528349s ago: executing program 4 (id=519): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x4, 0x8, 0xfffffffffffff2d9, 0x6}) 1m10.482355328s ago: executing program 4 (id=520): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000001c0)={0x1, 0x5, 0x1}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x7, 0x0, r1, &(0x7f0000000000)="98", 0x1, 0x1000000, 0x0, 0x10}]) 1m10.242873448s ago: executing program 4 (id=521): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2, 0x0) chdir(&(0x7f0000000300)='./file0\x00') (async) rmdir(&(0x7f0000000180)='./file2\x00') (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0001040080a001005400128008000100736974004800028008000300ac1414bb08000c000008000014000b00fe800000000000001a000000000000aa060011004e210000060008002f000000060011004e22000006000d"], 0x74}}, 0x80) 1m10.153578148s ago: executing program 4 (id=522): mknod(&(0x7f0000000180)='./bus\x00', 0xc000, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000180)={{0x80, 0xfe}, 'port0\x00', 0x0, 0x49, 0x0, 0x0, 0xa6ed}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) fchdir(r1) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x991018, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x1) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='vfat\x00', 0x8080, &(0x7f00000001c0)='discard') 1m10.053047476s ago: executing program 4 (id=523): r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000149000/0x1000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000180)=""/162) r1 = socket$rxrpc(0x21, 0x2, 0xa) get_mempolicy(0x0, &(0x7f0000000440), 0x4000, &(0x7f0000fff000/0x1000)=nil, 0x2) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000002) bind$rxrpc(r1, &(0x7f0000000400)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @local, 0x80000001}}, 0x24) 1m2.142921628s ago: executing program 33 (id=464): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r1, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:userio_device_t:s0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x11c) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='vxfs\x00', 0x11, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 54.058192996s ago: executing program 34 (id=523): r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000149000/0x1000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000180)=""/162) r1 = socket$rxrpc(0x21, 0x2, 0xa) get_mempolicy(0x0, &(0x7f0000000440), 0x4000, &(0x7f0000fff000/0x1000)=nil, 0x2) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000002) bind$rxrpc(r1, &(0x7f0000000400)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @local, 0x80000001}}, 0x24) 39.316312751s ago: executing program 0 (id=197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x78, 0x1000000, &(0x7f0000000280)="c594fc84777e66cf6fa9b2f750096c6fbbeb3490fb2f31e4363877954bf3e1169ab91097f075901640d73de8205440a24bd53379f7da30f020b7d23b2c74219eaebfe846c07ea276493240a4a65410e67b8d411787b538d3d04ca001f84697d2d14f53522103ca6b0133150c737556e443553268928dae41"}) 32.907119321s ago: executing program 0 (id=197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x78, 0x1000000, &(0x7f0000000280)="c594fc84777e66cf6fa9b2f750096c6fbbeb3490fb2f31e4363877954bf3e1169ab91097f075901640d73de8205440a24bd53379f7da30f020b7d23b2c74219eaebfe846c07ea276493240a4a65410e67b8d411787b538d3d04ca001f84697d2d14f53522103ca6b0133150c737556e443553268928dae41"}) 25.930306393s ago: executing program 0 (id=197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x78, 0x1000000, &(0x7f0000000280)="c594fc84777e66cf6fa9b2f750096c6fbbeb3490fb2f31e4363877954bf3e1169ab91097f075901640d73de8205440a24bd53379f7da30f020b7d23b2c74219eaebfe846c07ea276493240a4a65410e67b8d411787b538d3d04ca001f84697d2d14f53522103ca6b0133150c737556e443553268928dae41"}) 24.758755144s ago: executing program 6 (id=786): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x28840, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) setsockopt(0xffffffffffffffff, 0x9, 0x80, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[], 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000180)=0xc, 0x4) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f00000000c0)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@private2}, {@in=@remote, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, {0x0, 0x1}, {0x0, 0x400}, 0x0, 0x4, 0xa, 0x3, 0x0, 0x90}, [@algo_crypt={0x4c, 0x2, {{'ecb(cipher_null)\x00'}, 0x20, "19c503cd"}}, @replay_esn_val={0x1c, 0x17, {0x501c87fb5741b023, 0x0, 0x0, 0x0, 0x0, 0x10001}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r5, &(0x7f0000000380)='./mnt\x00', r5, &(0x7f0000000340)='./file0\x00', 0x5) write$vga_arbiter(r0, &(0x7f0000000080)=ANY=[], 0x13) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x10, 0x8, 0x60, @dev={0xfe, 0x80, '\x00', 0x32}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800, 0x8000, 0xffffffff, 0x722}}) sendmsg$inet(r3, &(0x7f0000000740)={&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000580), 0x0, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @loopback}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x80}, 0x1) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r9, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94) 24.71247383s ago: executing program 6 (id=788): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) unlink(&(0x7f0000000100)='./file0/file1\x00') rmdir(&(0x7f0000000000)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r0 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r3 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x4b, 0x0, 0x4) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {}, 0x1, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x80000001}}}, 0x118) io_uring_enter(r0, 0x2def, 0x4000, 0x0, 0x0, 0x0) 24.403349882s ago: executing program 6 (id=789): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0xffffffffffffff34) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000004a00611400000000000000000a"], 0x24}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = syz_open_dev$sndpcmc(&(0x7f0000000280), 0x2, 0x105000) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) recvmsg$can_j1939(r2, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003bc0)=""/128, 0x80}], 0x1}, 0x10000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r6, 0x4068aea3, &(0x7f0000000140)) sendmmsg$alg(r2, &(0x7f00000005c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="10b074492f61c684d1f6201bc0be32385577ecf3ca7d04e7c13b53c6265890a9d26c7df7f76e7b9091e3e7e31eef8f83cf853a80ca8352187834244e9b8c13831fe63cdd36065c99bdc1b4d63aaa18e68cd9b9814509e5a7c5712c1368cc172aa375b83e1fc5979a647debbe3eaafe56164c79f2c6bb21181cef08e3648564438c74", 0x82}], 0x1, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x4000000) 18.33107048s ago: executing program 6 (id=789): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0xffffffffffffff34) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000004a00611400000000000000000a"], 0x24}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = syz_open_dev$sndpcmc(&(0x7f0000000280), 0x2, 0x105000) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) recvmsg$can_j1939(r2, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003bc0)=""/128, 0x80}], 0x1}, 0x10000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r6, 0x4068aea3, &(0x7f0000000140)) sendmmsg$alg(r2, &(0x7f00000005c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="10b074492f61c684d1f6201bc0be32385577ecf3ca7d04e7c13b53c6265890a9d26c7df7f76e7b9091e3e7e31eef8f83cf853a80ca8352187834244e9b8c13831fe63cdd36065c99bdc1b4d63aaa18e68cd9b9814509e5a7c5712c1368cc172aa375b83e1fc5979a647debbe3eaafe56164c79f2c6bb21181cef08e3648564438c74", 0x82}], 0x1, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x4000000) 18.050794108s ago: executing program 0 (id=197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x78, 0x1000000, &(0x7f0000000280)="c594fc84777e66cf6fa9b2f750096c6fbbeb3490fb2f31e4363877954bf3e1169ab91097f075901640d73de8205440a24bd53379f7da30f020b7d23b2c74219eaebfe846c07ea276493240a4a65410e67b8d411787b538d3d04ca001f84697d2d14f53522103ca6b0133150c737556e443553268928dae41"}) 11.241366004s ago: executing program 0 (id=197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x78, 0x1000000, &(0x7f0000000280)="c594fc84777e66cf6fa9b2f750096c6fbbeb3490fb2f31e4363877954bf3e1169ab91097f075901640d73de8205440a24bd53379f7da30f020b7d23b2c74219eaebfe846c07ea276493240a4a65410e67b8d411787b538d3d04ca001f84697d2d14f53522103ca6b0133150c737556e443553268928dae41"}) 10.9589019s ago: executing program 6 (id=789): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0xffffffffffffff34) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000004a00611400000000000000000a"], 0x24}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = syz_open_dev$sndpcmc(&(0x7f0000000280), 0x2, 0x105000) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) recvmsg$can_j1939(r2, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003bc0)=""/128, 0x80}], 0x1}, 0x10000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r6, 0x4068aea3, &(0x7f0000000140)) sendmmsg$alg(r2, &(0x7f00000005c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="10b074492f61c684d1f6201bc0be32385577ecf3ca7d04e7c13b53c6265890a9d26c7df7f76e7b9091e3e7e31eef8f83cf853a80ca8352187834244e9b8c13831fe63cdd36065c99bdc1b4d63aaa18e68cd9b9814509e5a7c5712c1368cc172aa375b83e1fc5979a647debbe3eaafe56164c79f2c6bb21181cef08e3648564438c74", 0x82}], 0x1, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x4000000) 4.983057782s ago: executing program 0 (id=197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x78, 0x1000000, &(0x7f0000000280)="c594fc84777e66cf6fa9b2f750096c6fbbeb3490fb2f31e4363877954bf3e1169ab91097f075901640d73de8205440a24bd53379f7da30f020b7d23b2c74219eaebfe846c07ea276493240a4a65410e67b8d411787b538d3d04ca001f84697d2d14f53522103ca6b0133150c737556e443553268928dae41"}) 4.110773512s ago: executing program 6 (id=789): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0xffffffffffffff34) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000004a00611400000000000000000a"], 0x24}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = syz_open_dev$sndpcmc(&(0x7f0000000280), 0x2, 0x105000) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) recvmsg$can_j1939(r2, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003bc0)=""/128, 0x80}], 0x1}, 0x10000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r6, 0x4068aea3, &(0x7f0000000140)) sendmmsg$alg(r2, &(0x7f00000005c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="10b074492f61c684d1f6201bc0be32385577ecf3ca7d04e7c13b53c6265890a9d26c7df7f76e7b9091e3e7e31eef8f83cf853a80ca8352187834244e9b8c13831fe63cdd36065c99bdc1b4d63aaa18e68cd9b9814509e5a7c5712c1368cc172aa375b83e1fc5979a647debbe3eaafe56164c79f2c6bb21181cef08e3648564438c74", 0x82}], 0x1, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x4000000) 3.191785882s ago: executing program 2 (id=898): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4000082) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0xb9, @local, 0x6, 0x2}, 0x20) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e21, 0x10001, @local, 0x7f}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) prctl$PR_MCE_KILL_GET(0x22) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r6 = eventfd(0x800a6) write$eventfd(r6, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) read$eventfd(r6, &(0x7f0000000040), 0x8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0xc20, 0xadb12e32f182386c, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESOCT=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0xffeffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 1.401253s ago: executing program 2 (id=902): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x0, 0x0, 'queue1\x00', 0x1000049}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x62181) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x40, &(0x7f0000000500)={[{@mode}], [{@fowner_eq}]}) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x40, &(0x7f0000000500)={[{@mode}], [{@fowner_eq}]}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e", @ANYBLOB='\v'], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000080) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e", @ANYBLOB='\v'], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000080) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x90) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) (async) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) sendfile(r5, r3, &(0x7f0000002080)=0x3a, 0x2) 1.262341348s ago: executing program 2 (id=903): r0 = fsopen(&(0x7f0000000100)='iso9660\x00', 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) sync() r3 = syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x200) ioctl$SG_BLKTRACESTOP(r3, 0x1275, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) fsopen(&(0x7f0000000100)='iso9660\x00', 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) (async) sync() (async) syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x200) (async) ioctl$SG_BLKTRACESTOP(r3, 0x1275, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) (async) 639.985949ms ago: executing program 2 (id=905): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="defbcf273b0787077809f84d53c374413cdd4032e10d6c42959ac4e6eaa77d1363e3c1324356c5db", 0x28}], 0x1, 0x0, 0x0, 0xa}}], 0x1, 0x40000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000004, 0x13, r3, 0xf45f2000) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r6 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x2e, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x20, 0xdc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@timestamp={0x44, 0x4, 0x7f, 0x0, 0x9}]}}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x5}}}}}, 0x0) syz_emit_ethernet(0x5eb, &(0x7f00000009c0)={@link_local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x8, 0x5dd, 0x67, 0x0, 0x5, 0x2f, 0x0, @local, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x7, 0x3, 0x0, 0x0, 0x6, 0x1}, 0x1, {0x38}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x6, 0x1, 0x0, 0x1, 0x3, 0x6}, 0x2, {0x7, 0x4, 0x0, 0x5, 0x1, 0x1, 0x2}}}, {0x8, 0x6558, 0x0, "b045d1206a51329c95e184f888b4ab90c0537bc85be8c475edf28c093030dfd5c8e97f9eca319a93ae964422a900385d2effa2dafe74d19eff06a11ae7b2fdd64b0d78bad7f77eef3308ce9befef166f07f9e5f47b587962e68a9ca81c67437737d863d9256ac2940036791b820f66ee3dcd6b8de729a82f31c6b885863e6b4249927ac93efd4bc146c70312cdad7a461807aaaf8320c4bfac0625299de40af1c70672eed686bb713f64a4665c0152af00e5c52d1599303dc8ccfafafe5bb478c18810e39a9048bc125a9fa82639ee154aae5c21bbb6a9a37026d9"}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 453.50649ms ago: executing program 5 (id=909): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000068000100033ba57b359a4a8478d2997bea2c0010000000008000000000000000000c00020001000000150000000c000c8006000100000000000600030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000068000100033ba57b359a4a8478d2997bea2c0010000000008000000000000000000c00020001000000150000000c000c8006000100000000000600030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000b00)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x3, 0x4, 0x0, 0x3b, 'syz1\x00', 0x8}, 0x4, 0x10000000, 0xc, r2, 0x2, 0x9, 'syz1\x00', &(0x7f0000000140)=['-\x00', '[*\xf8#$)/$[\x00'], 0x67}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000882228fd8f4a6dda0007000000000000000000000001050000000800000000000000010000850000000000000000020000000000000a00000000da00"], 0x0, 0x52, 0x0, 0x1}, 0x28) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) (async) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) read$fb(r3, &(0x7f0000000180)=""/194, 0xc2) read$FUSE(r3, &(0x7f0000000b40)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000000b40)={0x2020}, 0x2020) 411.653007ms ago: executing program 2 (id=910): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb-twofish-avx)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x51, 0xa, 0xdf7b7a5625e873df, "d9c2955351f9acb1ee54ecc4b00f11f11867b5302c11500e8b8152682b7afe20", 0x48524742}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41b28, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4054) 410.338421ms ago: executing program 5 (id=911): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x14) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1010440}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xa79}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20000804) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) sendmsg$nl_route(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@RTM_GETNSID={0x24, 0x5a, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NETNSA_PID={0x8, 0x2, r5}, @NETNSA_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000881}, 0x20000044) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000009c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000600)={0x350, r7, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x868}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x68}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x83}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x440}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x958c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x18}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa9097c6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ea}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff29a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x44c04}, 0x800) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000a00)=0x5, 0x9, 0xb) r8 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000f00)={&(0x7f0000000a40)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000a80)="c3833f2e1a021cf3f3d2004718b4a78f3d79e8182bba4ffa9b2e266c0643d4e08ec238c64808dc38f82f0ea6e397ee3027d4628416b81932463e79", 0x3b}, {&(0x7f0000000ac0)="97330462b59965496dced20a262d172a0edff495e9156b49f464a961f6abd394c577ada9e9c5a6195f26c4d52e0342acc46945bc9a6c23771aeb110909c1e14ab65077d35a74971eb98d7a066fa3e87f119b97e1ade0ac7257274a15842d9cefea90ed53c3cb55661b9297a64490775f2f488b0026101730c1814d8396acc86f2303d0a7f4", 0x85}, {&(0x7f0000000b80)="b8c1b0e4a9479f9a4dbebae38444bedb123ed000f3febbb800ee187c507f074866189fd8d60d7e5b7a23541ed23e23dbabfa714202ac75388b88ac1f8d4e7d74bf352c20e99b5397008f7c0b3a4755c6ca33d7715053e445a5ccb16d17b280890b47268e6658806a68e7a456df98f5cdee", 0x71}, {&(0x7f0000000c00)="e2cab73aadca329020aa2edfebada592e9f60927ff815e7dfa7a7d44afdde34309d493312990292858ae22ceb63090caab70d3d25c1785701a9325fe190d3dc006714252d17ad6cfa41a3ab4a2a79e931e1820949111d843b6b36c", 0x5b}, {&(0x7f0000000c80)="4c4daabc3579d951b1f2c7096517ddb622ae41c2335476ffacfe865454b593e01862d847f6d814bb4ebeafa307c5a4a84c011f45ab4e12454a50e340a296bf73693e72830d98ec5c229fe46aec2a3569c96afd5ab2e150ce47627ccc46d6a313e4cc9c47c4931f0c82192171cc88eb39194133", 0x73}], 0x5, &(0x7f0000000d80)=[@ip_retopts={{0x38, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0xce, 0x1, 0x4, [{@multicast1, 0x1}, {@multicast2, 0x29e}, {@multicast2, 0x1}, {@private=0xa010100, 0x7}]}]}}}, @ip_retopts={{0x128, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x7d, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0xf}}, {@multicast1, 0x10}, {@multicast2, 0x8001}]}, @timestamp_prespec={0x44, 0x14, 0x93, 0x3, 0x0, [{@rand_addr=0x64010100, 0x7}, {@empty, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x50, 0x3, 0x1, [{@multicast2, 0xba0}, {@empty}, {@rand_addr=0x64010100, 0x3}, {@loopback, 0x6}]}, @cipso={0x86, 0x32, 0x0, [{0x6, 0x8, "1bf4ba425a78"}, {0x0, 0x7, "b256c2018f"}, {0x5, 0xa, "5e5c243a79d8e15a"}, {0x1, 0x8, "91dc4452807f"}, {0x1, 0xb, "220b2ed13262683bb9"}]}, @generic={0x83, 0x7, "a82a38a28e"}, @timestamp_addr={0x44, 0x44, 0xd0, 0x1, 0x1, [{@rand_addr=0x64010100, 0x38}, {@multicast1, 0x4}, {@multicast2, 0x3}, {@multicast2, 0x3}, {@rand_addr=0x64010102, 0x5a}, {@rand_addr=0x64010101, 0x401}, {@empty, 0x6}, {@private=0xa010100, 0x1}]}, @noop, @timestamp_prespec={0x44, 0x44, 0x20, 0x3, 0x3, [{@local, 0x38}, {@private=0xa010100, 0x1}, {@private=0xa010101, 0xa}, {@loopback, 0x9e}, {@loopback, 0xfffff621}, {@loopback, 0x8}, {@remote, 0x2}, {@loopback, 0x40000}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x178}, 0x8040) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000001080)={&(0x7f0000000f40), 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x7c, r9, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5f}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x0, 0x3, 0x0, {0x9, 0x16d3, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x800, 0x7a, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x3}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x400}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xfff9}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0x24, 0x1}, {0x41, 0x1}, {0x24}, {0x60, 0x1}, {0x1b}, {0x1}, {0x12, 0x1}, {0x1b, 0x1}, {0x4}, {0x24, 0x1}, {0x3, 0x1}, {0x16, 0x1}, {0x3}, {0x19}, {0x6}, {0x1b, 0x1}, {0x0, 0x1}, {0x6}, {0x60}, {0x6c}, {0x36}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x20004011) r10 = openat$incfs(0xffffffffffffff9c, &(0x7f00000010c0)='.pending_reads\x00', 0x200000, 0x42) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000001180)={&(0x7f0000001100)="f2dea567f85750979c071d7b9eca78d6a649f134ff7194bbfb227f7797adabd384ca540f064c03c2ed06d52c12db8c30ada095caaa3b35c93392d615b6bc19d60c780addeb0156f97c38b680ae1a2942473f4317fb17241efe48ba1ce174a66d5e5b552f", 0x64, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r10, 0xc01064ac, &(0x7f0000001280)={r11, 0x81, &(0x7f00000011c0)=""/129}) read$proc_mixer(r10, &(0x7f00000012c0)=""/4096, 0x1000) r12 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFBRDADDR(r12, 0x891a, &(0x7f00000022c0)={'macvtap0\x00', {0x2, 0x4e21, @empty}}) r13 = accept4$tipc(r12, &(0x7f0000002300), &(0x7f0000002340)=0x10, 0x80000) setsockopt$TIPC_MCAST_BROADCAST(r13, 0x10f, 0x85) mount$9p_virtio(&(0x7f0000002380), &(0x7f00000023c0)='./file0\x00', &(0x7f0000002400), 0x3021881, &(0x7f0000002440)={'trans=virtio,', {[{@cachetag={'cachetag', 0x3d, ']#+^$\x1c'}}, {@version_9p2000}, {@debug={'debug', 0x3d, 0x8000}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '+[!\\-)/.\'%:\x8a'}}, {@subj_user={'subj_user', 0x3d, '{)'}}, {@smackfsdef={'smackfsdef', 0x3d, 'broadcast-link\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@context={'context', 0x3d, 'user_u'}}, {@fowner_lt={'fowner<', r6}}, {@subj_type={'subj_type', 0x3d, '$:{#'}}, {@smackfsroot}, {@appraise_type}]}}) socketpair(0x8, 0xa, 0x9, &(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r14, &(0x7f0000002680)={&(0x7f00000025c0), 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x18, r9, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 321.550729ms ago: executing program 5 (id=912): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000140)=ANY=[@ANYBLOB="c8000000380001002cbd7000ffdbdf250b000000225e27e7c1f583d1bbc734fea95bb9f400e6d47a537ffd0db54ae11769deac9ed777ee765b35d29287fb67dd7a90aae4c241c7ad5bbeb2c7f0a4b6a0b0af1d9fa73622ac57afaaa05cf11cbaa7d7133ab5faad2001cf6620669aa5a6a9fccc20371de365cdfb8d8a176c104ebf1b1260f689b1816463be25c9de1725544439bb207e12f761f32c36a939ba73a4c45c5e568bbe64b94c9fe835b40c719fd3c90ce8a518ba95a90000", @ANYRES8=r0, @ANYRES32=r0], 0xc8}, 0x1, 0x0, 0x0, 0x8001}, 0xc814) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@ipv6_delrule={0x90, 0x21, 0x100, 0x70bd2a, 0x25dfdbfe, {0xa, 0x14, 0x20, 0x80, 0x0, 0x0, 0x0, 0x5, 0x11}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0xb}, @FRA_SRC={0x14, 0x2, @remote}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x24ce}, @FRA_SRC={0x14, 0x2, @local}, @FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x13}}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x8084}, 0x80) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)={0x14, r4, 0x301, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x0, 0x3, 0x5}]}, 0xffffffffffffffb6}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r4, 0x1, 0x200, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xc}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffff5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi2\x00', 0x90040, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xec3ce9a7755d6a51, 0x1010, r0, 0x6b2000) 321.329134ms ago: executing program 5 (id=913): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000240012800b0001006272696467650000140002800800050001000000080001001c004aa0"], 0x44}}, 0x0) 244.610912ms ago: executing program 2 (id=914): r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x3, 0x108302) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) unshare(0x6a040000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0xe, 0x7ff, 0x0, 0x8, 0x45e]}, &(0x7f0000000100)=0x54) syz_open_dev$sndmidi(&(0x7f0000000040), 0x8, 0x14000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e00010069703667726503e278bf06d67461700000000c00", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000640)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="14002c8008"], 0x30}}, 0x40084) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='pvfs2\x00', 0x1200013, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000000)={0x9f0000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r8 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001}}, [0xa, 0x800000000000000, 0xffffffffffffbe4d, 0x4, 0xc, 0x8000000000000001, 0x6, 0xfffffffffffffff9, 0x6, 0x5, 0x1, 0xecd, 0x1, 0x4c3, 0x6]}, &(0x7f0000000180)=0x100) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r9, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x10, 0x15, 0x142, 0x0}) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000200), 0x4) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250601f2800c0002000700000000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 801.947µs ago: executing program 5 (id=915): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ipvlan1\x00', 0x10) r1 = syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x1000000, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0203b1001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600002000000a0000000000000000000000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe88000000000000000000000000000100000000000000000300070000000000020000000000000000000000000000000100150000000000010014"], 0xd8}}, 0x0) (async) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x0, 0xc, 0x0, "f934d54fe9691861d45d30b8b4798ec5963606bed2309d47a4eb118c04fe9496", 0x31384142}) (async) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c20000000000000000ff85dd603f00e700182c00fe8000000000000000000000000000aaff0200000000000000000000000000010000fffd001890780400000009000000070000000000674c"], 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x407, 0x0, 0x0, 0xb, 0x8, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0010b420a1a93c5240c87aab08d53023d5458dcc672861ac0000000000004000fcff00", "f4bd0000000000fc86199040589e8a00", [0x0, 0x4]}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0xfffffffc, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}]}, 0xa0}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b2a, &(0x7f0000000040)) (async) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000000)=0x1) 0s ago: executing program 5 (id=916): r0 = syz_clone3(&(0x7f0000000300)={0x4100, 0x0, &(0x7f0000000080), 0x0, {0x15}, &(0x7f0000000100)=""/23, 0x17, 0x0, 0x0}, 0x58) migrate_pages(r0, 0xfffffffffffffff8, 0x0, &(0x7f00000003c0)=0xfffffffffffffffd) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c90002"], 0x22) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6, 0x0, 0xfc}]}, 0x10) kernel console output (not intermixed with test programs): sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 119.324286][ T8436] 9pnet_fd: Insufficient options for proto=fd [ 119.328483][ T40] audit: type=1400 audit(1752376161.886:528): avc: denied { read } for pid=8435 comm="syz.2.585" path="socket:[22182]" dev="sockfs" ino=22182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 119.443257][ T8447] program syz.2.588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.474895][ T7862] hsr_slave_0: left promiscuous mode [ 119.477964][ T7862] hsr_slave_1: left promiscuous mode [ 119.481210][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.483722][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.486435][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.488634][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.513426][ T7862] veth1_macvtap: left promiscuous mode [ 119.515629][ T7862] veth0_macvtap: left promiscuous mode [ 119.518114][ T7862] veth1_vlan: left promiscuous mode [ 119.519769][ T7862] veth0_vlan: left promiscuous mode [ 119.556819][ T40] audit: type=1400 audit(1752376162.116:529): avc: denied { ioctl } for pid=8449 comm="syz.2.589" path="socket:[23683]" dev="sockfs" ino=23683 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.565575][ T40] audit: type=1400 audit(1752376162.116:530): avc: denied { connect } for pid=8449 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.571817][ T40] audit: type=1400 audit(1752376162.116:531): avc: denied { shutdown } for pid=8449 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.879319][ T8459] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8459 comm=syz.2.590 [ 120.111758][ T7862] team0 (unregistering): Port device team_slave_1 removed [ 120.176727][ T7862] team0 (unregistering): Port device team_slave_0 removed [ 120.650444][ T8455] syzkaller0: entered promiscuous mode [ 120.652303][ T8455] syzkaller0: entered allmulticast mode [ 120.656802][ T40] audit: type=1400 audit(1752376163.216:532): avc: denied { relabelfrom } for pid=8451 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 120.663104][ T40] audit: type=1400 audit(1752376163.216:533): avc: denied { relabelto } for pid=8451 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 120.674431][ T7858] syzkaller0: tun_net_xmit 48 [ 120.705609][ T8303] chnl_net:caif_netlink_parms(): no params data found [ 121.326643][ T5961] Bluetooth: hci5: command tx timeout [ 121.337102][ T5961] Bluetooth: hci2: command tx timeout [ 121.672629][ T8386] chnl_net:caif_netlink_parms(): no params data found [ 121.781749][ T8303] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.784639][ T8303] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.786932][ T8303] bridge_slave_0: entered allmulticast mode [ 121.789632][ T8303] bridge_slave_0: entered promiscuous mode [ 121.809599][ T8303] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.811969][ T8303] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.814546][ T8303] bridge_slave_1: entered allmulticast mode [ 121.817286][ T8303] bridge_slave_1: entered promiscuous mode [ 121.852595][ T8364] chnl_net:caif_netlink_parms(): no params data found [ 121.875767][ T8303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.895303][ T8386] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.898200][ T8386] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.901090][ T8386] bridge_slave_0: entered allmulticast mode [ 121.906260][ T8386] bridge_slave_0: entered promiscuous mode [ 121.920915][ T8303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.937137][ T8386] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.939969][ T8386] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.942621][ T8386] bridge_slave_1: entered allmulticast mode [ 121.946230][ T8386] bridge_slave_1: entered promiscuous mode [ 122.029680][ T8386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.041834][ T8303] team0: Port device team_slave_0 added [ 122.045608][ T8303] team0: Port device team_slave_1 added [ 122.049107][ T8386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.137909][ T8364] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.140229][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.142533][ T8364] bridge_slave_0: entered allmulticast mode [ 122.145573][ T8364] bridge_slave_0: entered promiscuous mode [ 122.148876][ T8303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.151129][ T8303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.159675][ T8303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.197697][ T8364] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.200367][ T8489] netlink: 'syz.2.591': attribute type 8 has an invalid length. [ 122.200952][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.211786][ T8364] bridge_slave_1: entered allmulticast mode [ 122.218940][ T8364] bridge_slave_1: entered promiscuous mode [ 122.236983][ T8303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.239141][ T8303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.248623][ T8303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.260633][ T8386] team0: Port device team_slave_0 added [ 122.287470][ T8364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.292475][ T8364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.296470][ T8386] team0: Port device team_slave_1 added [ 122.398311][ T8386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.400527][ T8386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.411065][ T8386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.452910][ T8303] hsr_slave_0: entered promiscuous mode [ 122.456730][ T8303] hsr_slave_1: entered promiscuous mode [ 122.459174][ T8303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.461708][ T8303] Cannot create hsr debugfs directory [ 122.464120][ T8386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.466370][ T8386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.474411][ T8386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.480231][ T8364] team0: Port device team_slave_0 added [ 122.499583][ T7862] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.502854][ T7862] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.506460][ T7862] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 122.533467][ T8364] team0: Port device team_slave_1 added [ 122.566009][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.568240][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.576373][ T8364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.606324][ T7862] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.610616][ T7862] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.615110][ T7862] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 122.626355][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.628564][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.636835][ T8364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.682988][ T8386] hsr_slave_0: entered promiscuous mode [ 122.686639][ T8386] hsr_slave_1: entered promiscuous mode [ 122.689752][ T8386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.692816][ T8386] Cannot create hsr debugfs directory [ 122.722789][ T7862] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.727070][ T7862] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.730852][ T7862] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 122.770510][ T8364] hsr_slave_0: entered promiscuous mode [ 122.773404][ T8364] hsr_slave_1: entered promiscuous mode [ 122.776073][ T8364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.778563][ T8364] Cannot create hsr debugfs directory [ 122.838634][ T7862] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.841752][ T7862] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.845739][ T7862] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 123.149158][ T7862] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.164015][ T8303] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.170026][ T8303] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.228185][ T8303] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.235853][ T8303] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.249691][ T7862] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.346264][ T7862] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.375851][ T8303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.384677][ T8303] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.389352][ T7873] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.391698][ T7873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.408197][ T7873] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.410487][ T7873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.413862][ T5961] Bluetooth: hci2: command tx timeout [ 123.413885][ T5955] Bluetooth: hci5: command tx timeout [ 123.481326][ T7862] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.531885][ T8303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.607341][ T7862] bridge_slave_1: left allmulticast mode [ 123.609169][ T7862] bridge_slave_1: left promiscuous mode [ 123.611081][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.624287][ T7862] bridge_slave_0: left allmulticast mode [ 123.626094][ T7862] bridge_slave_0: left promiscuous mode [ 123.627936][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.635439][ T7862] bridge_slave_1: left allmulticast mode [ 123.637271][ T7862] bridge_slave_1: left promiscuous mode [ 123.639111][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.644568][ T7862] bridge_slave_0: left allmulticast mode [ 123.646411][ T7862] bridge_slave_0: left promiscuous mode [ 123.648296][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.154469][ T7862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.159884][ T7862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.164391][ T7862] bond0 (unregistering): Released all slaves [ 124.170753][ T7862] bond1 (unregistering): Released all slaves [ 124.241952][ T7862] bond2 (unregistering): Released all slaves [ 124.313530][ T7862] bond3 (unregistering): Released all slaves [ 124.459062][ T7862] bond4 (unregistering): (slave vlan2): Releasing active interface [ 124.462725][ T7862] bond4 (unregistering): Released all slaves [ 124.539935][ T7862] bond5 (unregistering): Released all slaves [ 124.840115][ T7862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.844968][ T7862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.848551][ T7862] bond0 (unregistering): Released all slaves [ 124.932538][ T8303] veth0_vlan: entered promiscuous mode [ 124.944725][ T8303] veth1_vlan: entered promiscuous mode [ 124.974805][ T8303] veth0_macvtap: entered promiscuous mode [ 124.982243][ T8303] veth1_macvtap: entered promiscuous mode [ 125.025258][ T8553] syz.2.597: attempt to access beyond end of device [ 125.025258][ T8553] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 125.029367][ T8553] EXT4-fs (nbd2): unable to read superblock [ 125.087758][ T8303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.093544][ T8303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.100699][ T8303] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.104087][ T8303] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.107345][ T8303] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.110052][ T8303] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.200753][ T7859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.211363][ T7859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.235763][ T7858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.238265][ T7858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.249991][ T8386] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.261726][ T8386] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.279349][ T8386] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.286465][ T8386] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.359463][ T8364] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 125.367879][ T7862] hsr_slave_0: left promiscuous mode [ 125.370071][ T7862] hsr_slave_1: left promiscuous mode [ 125.372067][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.374779][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.379029][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.381424][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.388409][ T7862] hsr_slave_0: left promiscuous mode [ 125.390695][ T7862] hsr_slave_1: left promiscuous mode [ 125.392727][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.396206][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.398964][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.401376][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.437517][ T7862] veth1_macvtap: left promiscuous mode [ 125.439339][ T7862] veth0_macvtap: left promiscuous mode [ 125.441363][ T7862] veth1_vlan: left promiscuous mode [ 125.443074][ T7862] veth0_vlan: left promiscuous mode [ 125.447006][ T7862] veth1_macvtap: left promiscuous mode [ 125.448762][ T7862] veth0_macvtap: left promiscuous mode [ 125.450584][ T7862] veth1_vlan: left promiscuous mode [ 125.452283][ T7862] veth0_vlan: left promiscuous mode [ 125.483919][ T5955] Bluetooth: hci2: command tx timeout [ 125.486151][ T5955] Bluetooth: hci5: command tx timeout [ 126.094675][ T8596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.602'. [ 126.131171][ T7862] team0 (unregistering): Port device team_slave_1 removed [ 126.219585][ T7862] team0 (unregistering): Port device team_slave_0 removed [ 126.288138][ T8609] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 126.291239][ T8609] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 126.304757][ T8609] vhci_hcd vhci_hcd.0: Device attached [ 126.308434][ T8610] vhci_hcd: cannot find a urb of seqnum 4294967226 max seqnum 0 [ 126.316207][ T7858] vhci_hcd: stop threads [ 126.317556][ T7858] vhci_hcd: release socket [ 126.319047][ T7858] vhci_hcd: disconnect device [ 127.244414][ T7862] team0 (unregistering): Port device team_slave_1 removed [ 127.304448][ T7862] team0 (unregistering): Port device team_slave_0 removed [ 127.563805][ T5961] Bluetooth: hci2: command tx timeout [ 127.565853][ T5955] Bluetooth: hci5: command tx timeout [ 127.732785][ T8364] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 127.737270][ T8364] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 127.763973][ T8364] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 127.787650][ T8620] Driver unsupported XDP return value 0 on prog (id 111) dev N/A, expect packet loss! [ 127.860774][ T8386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.883406][ T8386] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.889002][ T7854] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.891314][ T7854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.898412][ T7855] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.901426][ T7855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.956086][ T8364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.974881][ T8364] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.981265][ T7873] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.983549][ T7873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.994311][ T7873] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.997096][ T7873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.129060][ T8386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.149552][ T40] audit: type=1400 audit(1752376170.706:534): avc: denied { read } for pid=8659 comm="syz.5.613" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 128.150182][ T8364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.156992][ T40] audit: type=1400 audit(1752376170.706:535): avc: denied { open } for pid=8659 comm="syz.5.613" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 128.188530][ T8386] veth0_vlan: entered promiscuous mode [ 128.191517][ T40] audit: type=1400 audit(1752376170.706:536): avc: denied { ioctl } for pid=8659 comm="syz.5.613" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 128.199113][ T8386] veth1_vlan: entered promiscuous mode [ 128.232782][ T8386] veth0_macvtap: entered promiscuous mode [ 128.238830][ T8386] veth1_macvtap: entered promiscuous mode [ 128.265067][ T8386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.277375][ T8386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.283524][ T8386] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.290494][ T8386] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.293992][ T8386] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.297724][ T8386] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.479741][ T7861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.482372][ T7861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.487274][ T8364] veth0_vlan: entered promiscuous mode [ 128.508512][ T8364] veth1_vlan: entered promiscuous mode [ 128.518294][ T7861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.520835][ T7861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.537746][ T8364] veth0_macvtap: entered promiscuous mode [ 128.552639][ T8364] veth1_macvtap: entered promiscuous mode [ 128.571054][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.577377][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.581717][ T8364] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.585373][ T8364] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.588065][ T8364] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.590800][ T8364] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.649654][ T7861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.653893][ T7861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.732287][ T7859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.738708][ T7859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.830212][ T8718] program syz.6.578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.921567][ T40] audit: type=1400 audit(1752376171.476:537): avc: denied { override_creds } for pid=8726 comm="syz.2.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 129.037898][ T40] audit: type=1400 audit(1752376171.596:538): avc: denied { append } for pid=8738 comm="syz.2.623" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 129.038949][ T8739] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 129.049252][ T8739] vivid-000: ================= START STATUS ================= [ 129.051957][ T8739] vivid-000: Test Pattern: 75% Colorbar [ 129.053906][ T8739] vivid-000: Fill Percentage of Frame: 100 [ 129.055867][ T8739] vivid-000: Horizontal Movement: No Movement [ 129.058488][ T8739] vivid-000: Vertical Movement: No Movement [ 129.060655][ T8739] vivid-000: OSD Text Mode: All [ 129.062711][ T8739] vivid-000: Show Border: false [ 129.064787][ T8739] vivid-000: Show Square: false [ 129.066847][ T8739] vivid-000: Sensor Flipped Horizontally: false [ 129.069206][ T8739] vivid-000: Sensor Flipped Vertically: false [ 129.071575][ T8739] vivid-000: Insert SAV Code in Image: false [ 129.073507][ T8739] vivid-000: Insert EAV Code in Image: false [ 129.076906][ T8739] vivid-000: Insert Video Guard Band: false [ 129.079365][ T8739] vivid-000: Reduced Framerate: false [ 129.081611][ T8739] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 001-0 [ 129.085198][ T8739] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 129.087876][ T8739] vivid-000: Enable Capture Cropping: true [ 129.089811][ T8739] vivid-000: Enable Capture Composing: true [ 129.091772][ T8739] vivid-000: Enable Capture Scaler: true [ 129.097433][ T8739] vivid-000: Timestamp Source: End of Frame [ 129.101022][ T8739] vivid-000: Colorspace: sRGB [ 129.102984][ T8739] vivid-000: Transfer Function: Default [ 129.106001][ T8739] vivid-000: Y'CbCr Encoding: Default [ 129.107712][ T8739] vivid-000: HSV Encoding: Hue 0-179 [ 129.109391][ T8739] vivid-000: Quantization: Default [ 129.111101][ T8739] vivid-000: Apply Alpha To Red Only: false [ 129.112988][ T8739] vivid-000: Standard Aspect Ratio: 4x3 [ 129.115725][ T8739] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 129.118590][ T8739] vivid-000: DV Timings: 720x480p59 inactive [ 129.120496][ T8739] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 129.132277][ T8739] vivid-000: Maximum EDID Blocks: 2 [ 129.134836][ T8739] vivid-000: Limited RGB Range (16-235): false [ 129.137392][ T8739] vivid-000: Rx RGB Quantization Range: Automatic [ 129.140005][ T8739] vivid-000: Power Present: 0x00000001 [ 129.142235][ T8739] tpg source WxH: 320x240 (R'G'B) [ 129.146493][ T8739] tpg field: 1 [ 129.148667][ T8739] tpg crop: (0,0)/320x240 [ 129.150869][ T8739] tpg compose: (0,0)/320x240 [ 129.152752][ T8739] tpg colorspace: 8 [ 129.155180][ T8739] tpg transfer function: 0/0 [ 129.157180][ T8739] tpg quantization: 0/0 [ 129.158918][ T8739] tpg RGB range: 0/2 [ 129.160556][ T8739] vivid-000: ================== END STATUS ================== [ 129.266488][ T8748] hsr0: entered promiscuous mode [ 129.268343][ T8748] macsec1: entered allmulticast mode [ 129.270009][ T8748] hsr0: entered allmulticast mode [ 129.271627][ T8748] hsr_slave_0: entered allmulticast mode [ 129.273374][ T8748] hsr_slave_1: entered allmulticast mode [ 129.597061][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803773d400: rx timeout, send abort [ 129.601143][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803773e400: rx timeout, send abort [ 129.604099][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803773d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 129.606290][ T40] audit: type=1400 audit(1752376172.166:539): avc: denied { read } for pid=5341 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 129.609470][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803773e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 129.616744][ T40] audit: type=1400 audit(1752376172.166:540): avc: denied { search } for pid=5341 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.636796][ T40] audit: type=1400 audit(1752376172.166:541): avc: denied { search } for pid=5341 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.645403][ T40] audit: type=1400 audit(1752376172.166:542): avc: denied { add_name } for pid=5341 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.651735][ T40] audit: type=1400 audit(1752376172.166:543): avc: denied { create } for pid=5341 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 129.671944][ T8780] program syz.5.629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.047761][ T7860] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.134772][ T8787] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.630'. [ 130.137720][ T8787] netlink: 24 bytes leftover after parsing attributes in process `syz.5.630'. [ 130.531383][ T8829] netlink: 28 bytes leftover after parsing attributes in process `syz.6.632'. [ 130.535750][ T8829] netlink: 28 bytes leftover after parsing attributes in process `syz.6.632'. [ 130.661144][ T8838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5126 sclass=netlink_route_socket pid=8838 comm=syz.6.635 [ 130.783512][ T5961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.788849][ T5961] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.800897][ T5961] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.808167][ T5961] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.821195][ T5961] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.986300][ T8881] netlink: 32 bytes leftover after parsing attributes in process `syz.6.642'. [ 130.989242][ T8886] netlink: 32 bytes leftover after parsing attributes in process `syz.6.642'. [ 130.990910][ T8860] chnl_net:caif_netlink_parms(): no params data found [ 131.132295][ T8860] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.138103][ T8860] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.140443][ T8860] bridge_slave_0: entered allmulticast mode [ 131.147472][ T8860] bridge_slave_0: entered promiscuous mode [ 131.150756][ T8860] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.153185][ T8860] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.155608][ T8860] bridge_slave_1: entered allmulticast mode [ 131.158316][ T8860] bridge_slave_1: entered promiscuous mode [ 131.166269][ T8900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.646'. [ 131.169046][ T8900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.646'. [ 131.209811][ T8860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.214590][ T8860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.271992][ T8909] x_tables: duplicate underflow at hook 1 [ 131.279031][ T8860] team0: Port device team_slave_0 added [ 131.282450][ T8860] team0: Port device team_slave_1 added [ 131.346551][ T8860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.349737][ T8860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.360290][ T8860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.364587][ T8860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.366765][ T8860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.377205][ T8860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.413180][ T8860] hsr_slave_0: entered promiscuous mode [ 131.415515][ T8860] hsr_slave_1: entered promiscuous mode [ 131.666303][ T7860] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.677898][ T8942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.692846][ T8944] fuse: Bad value for 'fd' [ 131.773118][ T7860] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.888426][ T8967] Bluetooth: MGMT ver 1.23 [ 131.889184][ T7860] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.007461][ T7860] bridge_slave_1: left allmulticast mode [ 132.009262][ T7860] bridge_slave_1: left promiscuous mode [ 132.011153][ T7860] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.016190][ T7860] bridge_slave_0: left allmulticast mode [ 132.017985][ T7860] bridge_slave_0: left promiscuous mode [ 132.019844][ T7860] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.133931][ T7494] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 132.143718][ T34] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 132.227147][ T7860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.231534][ T7860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.237815][ T7860] bond0 (unregistering): Released all slaves [ 132.288705][ T7494] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.291591][ T7494] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 132.295304][ T7494] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.298218][ T7494] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 132.307658][ T7494] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 132.317409][ T7494] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.320350][ T7494] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.331123][ T7494] usb 10-1: Product: syz [ 132.332576][ T7494] usb 10-1: Manufacturer: syz [ 132.340964][ T7494] cdc_wdm 10-1:1.0: skipping garbage [ 132.342702][ T7494] cdc_wdm 10-1:1.0: skipping garbage [ 132.347690][ T7494] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 132.349676][ T7494] cdc_wdm 10-1:1.0: Unknown control protocol [ 132.527563][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.529643][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.608805][ T7860] hsr_slave_0: left promiscuous mode [ 132.611560][ T7860] hsr_slave_1: left promiscuous mode [ 132.616148][ T7860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.618559][ T7860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.621339][ T7860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.623990][ T7860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.646130][ T7860] veth1_macvtap: left promiscuous mode [ 132.648044][ T7860] veth0_macvtap: left promiscuous mode [ 132.649900][ T7860] veth1_vlan: left promiscuous mode [ 132.651642][ T7860] veth0_vlan: left promiscuous mode [ 132.843816][ T5961] Bluetooth: hci2: command tx timeout [ 132.936417][ T8997] netlink: 14 bytes leftover after parsing attributes in process `syz.2.663'. [ 133.166075][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 133.168300][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 133.168514][ T7494] usb 10-1: USB disconnect, device number 2 [ 133.170259][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 133.277895][ T7860] team0 (unregistering): Port device team_slave_1 removed [ 133.338450][ T7860] team0 (unregistering): Port device team_slave_0 removed [ 133.854753][ T9003] netlink: 20 bytes leftover after parsing attributes in process `syz.6.665'. [ 133.857661][ T9009] netlink: 'syz.5.666': attribute type 12 has an invalid length. [ 133.894753][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 133.894764][ T40] audit: type=1400 audit(1752376176.446:555): avc: denied { bind } for pid=9015 comm="syz.6.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 133.920468][ T40] audit: type=1400 audit(1752376176.486:556): avc: denied { getopt } for pid=9014 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 133.982112][ T8860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 133.993188][ T9030] netlink: 36 bytes leftover after parsing attributes in process `syz.2.670'. [ 133.997621][ T9030] netlink: 36 bytes leftover after parsing attributes in process `syz.2.670'. [ 134.010578][ T8860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.026122][ T8860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 134.030340][ T8860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.088464][ T9045] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 134.126779][ T8860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.137942][ T8860] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.143424][ T7861] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.145953][ T7861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.151719][ T7854] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.154038][ T7854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.241960][ T9059] bridge1: entered promiscuous mode [ 134.243675][ T9059] bridge1: entered allmulticast mode [ 134.320818][ T8860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.342408][ T40] audit: type=1400 audit(1752376176.896:557): avc: denied { write } for pid=9070 comm="syz.5.680" path="socket:[28134]" dev="sockfs" ino=28134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 134.354331][ T6015] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 134.358966][ T8860] veth0_vlan: entered promiscuous mode [ 134.364049][ T8860] veth1_vlan: entered promiscuous mode [ 134.369976][ T40] audit: type=1400 audit(1752376176.926:558): avc: denied { append } for pid=9067 comm="syz.2.679" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 134.385742][ T8860] veth0_macvtap: entered promiscuous mode [ 134.389709][ T8860] veth1_macvtap: entered promiscuous mode [ 134.400290][ T8860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.406986][ T8860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.411458][ T8860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.416909][ T8860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.419701][ T8860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.422685][ T8860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.465451][ T7860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.467993][ T7860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.482221][ T7861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.485306][ T7861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.514001][ T6015] usb 11-1: Using ep0 maxpacket: 8 [ 134.519382][ T6015] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 134.521890][ T6015] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.526417][ T6015] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.530144][ T6015] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 50, changing to 9 [ 134.532998][ T925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.534766][ T6015] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 1792, setting to 1024 [ 134.545810][ T6015] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 134.548203][ T6015] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.551757][ T6015] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.555767][ T6015] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 50, changing to 9 [ 134.559361][ T6015] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 1792, setting to 1024 [ 134.564346][ T6015] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 134.566937][ T6015] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.570496][ T6015] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.574472][ T6015] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 50, changing to 9 [ 134.578108][ T6015] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 1792, setting to 1024 [ 134.585965][ T6015] usb 11-1: string descriptor 0 read error: -22 [ 134.588027][ T6015] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 134.591005][ T6015] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.603025][ T6015] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 134.994804][ T925] usb 11-1: USB disconnect, device number 2 [ 135.484552][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.574805][ T925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.699622][ T9098] /dev/nullb0: Can't open blockdev [ 135.701634][ T9099] /dev/nullb0: Can't open blockdev [ 135.704275][ T9099] netlink: 'syz.5.685': attribute type 1 has an invalid length. [ 135.706065][ T9098] netlink: 'syz.5.685': attribute type 1 has an invalid length. [ 135.724978][ T9099] bond1: entered promiscuous mode [ 135.727404][ T9099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.738267][ T9099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.741096][ T9099] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 135.745056][ T9099] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 135.750701][ T9099] bond1: (slave ip6gre1): making interface the new active one [ 135.753172][ T9099] ip6gre1: entered promiscuous mode [ 135.755727][ T9099] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 136.425770][ T7854] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.614339][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.060472][ T9118] overlay: filesystem on ./bus not supported [ 137.083591][ T40] audit: type=1400 audit(1752376179.636:559): avc: denied { create } for pid=9115 comm="syz.5.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 137.092234][ T40] audit: type=1400 audit(1752376179.636:560): avc: denied { bind } for pid=9115 comm="syz.5.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 137.103406][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.692'. [ 137.182966][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.185634][ T9120] hsr_slave_1 (unregistering): left promiscuous mode [ 137.186532][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.190719][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.195283][ T9122] bridge_slave_0: left allmulticast mode [ 137.195910][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.197045][ T9122] bridge_slave_0: left promiscuous mode [ 137.199645][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 137.201095][ T9122] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.208074][ T9122] bridge_slave_1: left allmulticast mode [ 137.209950][ T9122] bridge_slave_1: left promiscuous mode [ 137.211900][ T9122] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.218229][ T9122] bond0: (slave bond_slave_0): Releasing backup interface [ 137.222965][ T9122] bond0: (slave bond_slave_1): Releasing backup interface [ 137.244280][ T9122] team0: Port device team_slave_0 removed [ 137.251094][ T9122] team0: Port device team_slave_1 removed [ 137.253571][ T9122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.256327][ T9122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.259826][ T9122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.262292][ T9122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.288215][ T40] audit: type=1400 audit(1752376179.846:561): avc: denied { ioctl } for pid=9126 comm="syz.5.693" path="socket:[28194]" dev="sockfs" ino=28194 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 137.296787][ T40] audit: type=1400 audit(1752376179.846:562): avc: denied { setopt } for pid=9126 comm="syz.5.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 137.354277][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 137.415965][ T40] audit: type=1400 audit(1752376179.956:563): avc: denied { read } for pid=9143 comm="syz.6.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 137.450960][ T40] audit: type=1400 audit(1752376180.006:564): avc: denied { ioctl } for pid=9145 comm="syz.2.697" path="socket:[28231]" dev="sockfs" ino=28231 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.469895][ T9123] chnl_net:caif_netlink_parms(): no params data found [ 137.570581][ T9123] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.573751][ T9123] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.576164][ T9123] bridge_slave_0: entered allmulticast mode [ 137.588749][ T9123] bridge_slave_0: entered promiscuous mode [ 137.613219][ T9163] mkiss: ax0: crc mode is auto. [ 137.613306][ T9123] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.619010][ T9123] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.621821][ T9163] fuse: Unknown parameter 'gromÇ.xd' [ 137.622149][ T9123] bridge_slave_1: entered allmulticast mode [ 137.627474][ T9123] bridge_slave_1: entered promiscuous mode [ 137.644881][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.654536][ T9165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.690490][ T9168] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 137.696896][ T9123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.699053][ T9171] netlink: 'syz.5.704': attribute type 1 has an invalid length. [ 137.701765][ T9123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.749615][ T9171] bond2: entered promiscuous mode [ 137.751276][ T9171] bond2: entered allmulticast mode [ 137.753083][ T9171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.759774][ T9175] netlink: 128 bytes leftover after parsing attributes in process `syz.2.705'. [ 137.761436][ T9176] netlink: 16 bytes leftover after parsing attributes in process `syz.6.706'. [ 137.778052][ T9171] bridge2: entered promiscuous mode [ 137.779823][ T9171] bridge2: entered allmulticast mode [ 137.781937][ T9171] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 137.792306][ T9123] team0: Port device team_slave_0 added [ 137.804597][ T9123] team0: Port device team_slave_1 added [ 137.805042][ T9180] netlink: 'syz.6.708': attribute type 10 has an invalid length. [ 137.853776][ T7862] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 137.857392][ T9180] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 137.861524][ T9123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.865980][ T9123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.876258][ T9123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.891102][ T9123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.893992][ T9123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.904160][ T9123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.916676][ T9188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.964631][ T7860] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 137.970413][ T9123] hsr_slave_0: entered promiscuous mode [ 137.972578][ T9123] hsr_slave_1: entered promiscuous mode [ 137.976487][ T9123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.978702][ T9123] Cannot create hsr debugfs directory [ 138.007444][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'. [ 138.011088][ T9194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.712'. [ 138.012272][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.6.711'. [ 138.015228][ T9194] netlink: 'syz.2.712': attribute type 7 has an invalid length. [ 138.026389][ T9192] chnl_net:caif_netlink_parms(): no params data found [ 138.064588][ T6040] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 138.225707][ T6040] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.230424][ T6040] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.234414][ T6040] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.239744][ T6040] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.243686][ T6040] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.248931][ T6040] usb 10-1: config 0 descriptor?? [ 138.269156][ T7854] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.297066][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.356549][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 138.360809][ T7854] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.483365][ T7854] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.503756][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 138.507569][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 138.510069][ T9] usb 7-1: no configurations [ 138.511467][ T9] usb 7-1: can't read configurations, error -22 [ 138.564586][ T9209] netlink: 24 bytes leftover after parsing attributes in process `syz.6.716'. [ 138.659259][ T7854] bridge_slave_1: left allmulticast mode [ 138.662541][ T7854] bridge_slave_1: left promiscuous mode [ 138.665345][ T7854] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.670899][ T7854] bridge_slave_0: left allmulticast mode [ 138.676315][ T7854] bridge_slave_0: left promiscuous mode [ 138.678507][ T7854] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.689068][ T6040] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 138.993378][ T7854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.997828][ T7854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.001593][ T7854] bond0 (unregistering): Released all slaves [ 139.030024][ T7494] usb 10-1: USB disconnect, device number 3 [ 139.253774][ T5955] Bluetooth: hci2: command tx timeout [ 139.298347][ T7854] hsr_slave_0: left promiscuous mode [ 139.300904][ T7854] hsr_slave_1: left promiscuous mode [ 139.303285][ T7854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.306294][ T7854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.308983][ T7854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.311346][ T7854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.331071][ T7854] veth1_macvtap: left promiscuous mode [ 139.332854][ T7854] veth0_macvtap: left promiscuous mode [ 139.335342][ T7854] veth1_vlan: left promiscuous mode [ 139.337354][ T7854] veth0_vlan: left promiscuous mode [ 139.574182][ T34] net_ratelimit: 1 callbacks suppressed [ 139.574194][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.725040][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.818206][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 139.818217][ T40] audit: type=1400 audit(1752376182.376:575): avc: denied { read } for pid=9249 comm="syz.5.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.935698][ T9253] netlink: 36 bytes leftover after parsing attributes in process `syz.5.724'. [ 140.055728][ T7854] team0 (unregistering): Port device team_slave_1 removed [ 140.123413][ T7854] team0 (unregistering): Port device team_slave_0 removed [ 140.751740][ T9123] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.756349][ T9123] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.760671][ T9123] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.764053][ T7859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.764470][ T9123] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 140.767268][ T7494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.773215][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.822116][ T9123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.832583][ T9123] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.837873][ T7855] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.840134][ T7855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.848059][ T7855] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.850310][ T7855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.965834][ T9123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.988504][ T9123] veth0_vlan: entered promiscuous mode [ 140.993280][ T9123] veth1_vlan: entered promiscuous mode [ 141.009571][ T9123] veth0_macvtap: entered promiscuous mode [ 141.013328][ T9123] veth1_macvtap: entered promiscuous mode [ 141.024872][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.032144][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.038474][ T9123] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.041200][ T9123] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.044027][ T9123] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.046721][ T9123] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.109909][ T9273] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 141.122171][ T9273] cramfs: wrong magic [ 141.129313][ T9273] xt_hashlimit: size too large, truncated to 1048576 [ 141.225635][ T9288] netlink: 'syz.2.731': attribute type 13 has an invalid length. [ 141.228056][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'. [ 141.323806][ T5955] Bluetooth: hci2: command tx timeout [ 141.338113][ T40] audit: type=1400 audit(1752376183.896:576): avc: denied { write } for pid=9287 comm="syz.2.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.441708][ T9258] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 141.444708][ T9258] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 141.452458][ T9258] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 141.457844][ T9258] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.460288][ T9258] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.466918][ T9258] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.492358][ T7854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.498839][ T7854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.499556][ T40] audit: type=1400 audit(1752376184.056:577): avc: denied { ioctl } for pid=9300 comm="syz.6.735" path="socket:[31002]" dev="sockfs" ino=31002 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 141.529442][ T7862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.532152][ T7862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.539593][ T9301] mkiss: ax0: crc mode is auto. [ 141.595923][ T9301] support for cryptoloop has been removed. Use dm-crypt instead. [ 141.655048][ T40] audit: type=1400 audit(1752376184.216:578): avc: denied { setopt } for pid=9322 comm="syz.2.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.687566][ T40] audit: type=1400 audit(1752376184.246:579): avc: denied { setopt } for pid=9317 comm="syz.5.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 141.804096][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.536611][ T9342] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9342 comm=syz.5.746 [ 142.543266][ T9342] __nla_validate_parse: 3 callbacks suppressed [ 142.543279][ T9342] netlink: 16 bytes leftover after parsing attributes in process `syz.5.746'. [ 142.549867][ T9342] sit0: Master is either lo or non-ether device [ 142.614616][ T7853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.618158][ T1150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.622128][ T6851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.685118][ T9357] openvswitch: netlink: Flow key attr not present in new flow. [ 142.764496][ T5961] Bluetooth: hci5: command 0x0c1a tx timeout [ 142.819041][ T40] audit: type=1400 audit(1752376185.376:580): avc: denied { getopt } for pid=9359 comm="syz.5.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 142.822883][ T9360] netlink: 36 bytes leftover after parsing attributes in process `syz.5.751'. [ 143.132392][ T40] audit: type=1400 audit(1752376185.686:581): avc: denied { map } for pid=9376 comm="syz.5.756" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 143.189573][ T40] audit: type=1400 audit(1752376185.746:582): avc: denied { read } for pid=9380 comm="syz.5.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 143.411393][ T7855] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.045187][ T5961] Bluetooth: hci2: command 0x1003 tx timeout [ 144.047976][ T5955] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 144.111352][ T40] audit: type=1400 audit(1752376186.666:583): avc: denied { read } for pid=9394 comm="syz.2.764" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 144.190096][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.6.763'. [ 144.194232][ T9400] xt_hashlimit: size too large, truncated to 1048576 [ 144.254751][ T5961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.258729][ T5961] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.262384][ T5961] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.265715][ T5961] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 144.268522][ T5961] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 144.282384][ T40] audit: type=1400 audit(1752376186.836:584): avc: denied { create } for pid=9419 comm="syz.2.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 144.367473][ T9435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.773'. [ 144.387291][ T9414] chnl_net:caif_netlink_parms(): no params data found [ 144.397099][ T9443] netlink: 'syz.2.777': attribute type 63 has an invalid length. [ 144.505377][ T9414] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.507832][ T9414] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.510294][ T9414] bridge_slave_0: entered allmulticast mode [ 144.512971][ T9469] No control pipe specified [ 144.516723][ T9414] bridge_slave_0: entered promiscuous mode [ 144.526569][ T9414] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.528857][ T9414] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.531163][ T9414] bridge_slave_1: entered allmulticast mode [ 144.533962][ T9414] bridge_slave_1: entered promiscuous mode [ 144.582000][ T9414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.586912][ T9414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.644958][ T9414] team0: Port device team_slave_0 added [ 144.648277][ T9414] team0: Port device team_slave_1 added [ 144.683386][ T9414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.685684][ T9414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.693573][ T9414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.698057][ T9414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.700231][ T9414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.708125][ T9414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.743993][ T9414] hsr_slave_0: entered promiscuous mode [ 144.746249][ T9414] hsr_slave_1: entered promiscuous mode [ 144.924248][ T6162] net_ratelimit: 3 callbacks suppressed [ 144.924265][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.065544][ T5961] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.070001][ T5961] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.073318][ T5961] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.079408][ T5961] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.082657][ T5961] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.163319][ T7855] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.224695][ T7855] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.285252][ T7855] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.292459][ T9482] chnl_net:caif_netlink_parms(): no params data found [ 145.357475][ T9482] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.359715][ T9482] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.362002][ T9482] bridge_slave_0: entered allmulticast mode [ 145.365105][ T9482] bridge_slave_0: entered promiscuous mode [ 145.368694][ T9482] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.370975][ T9482] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.373203][ T9482] bridge_slave_1: entered allmulticast mode [ 145.377062][ T9482] bridge_slave_1: entered promiscuous mode [ 145.424435][ T9482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.435175][ T9482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.450425][ T9494] netlink: 32 bytes leftover after parsing attributes in process `syz.5.790'. [ 145.463606][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 145.463617][ T40] audit: type=1400 audit(1752376188.016:591): avc: denied { getopt } for pid=9492 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.471843][ T40] audit: type=1400 audit(1752376188.026:592): avc: denied { ioctl } for pid=9492 comm="syz.2.791" path="/308/file0" dev="tmpfs" ino=1654 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 145.491159][ T9482] team0: Port device team_slave_0 added [ 145.494037][ T9493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'. [ 145.494193][ T9491] usb usb8: usbfs: process 9491 (syz.5.790) did not claim interface 0 before use [ 145.496411][ T9482] team0: Port device team_slave_1 added [ 145.539331][ T9482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.541600][ T9482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.550378][ T9482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.554729][ T7855] bridge_slave_1: left allmulticast mode [ 145.556658][ T7855] bridge_slave_1: left promiscuous mode [ 145.558616][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.563317][ T7855] bridge_slave_0: left allmulticast mode [ 145.565819][ T7855] bridge_slave_0: left promiscuous mode [ 145.568264][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.645757][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.667321][ T9505] netlink: 'syz.2.795': attribute type 1 has an invalid length. [ 145.669938][ T9505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.820609][ T7855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.824823][ T7855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.828452][ T7855] bond0 (unregistering): Released all slaves [ 145.846142][ T9482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.848426][ T9482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.856572][ T9482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.874088][ T9507] sch_tbf: burst 0 is lower than device geneve0 mtu (1514) ! [ 145.926180][ T9482] hsr_slave_0: entered promiscuous mode [ 145.928466][ T9482] hsr_slave_1: entered promiscuous mode [ 145.930584][ T9482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.932956][ T9482] Cannot create hsr debugfs directory [ 145.965513][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.978041][ T40] audit: type=1400 audit(1752376188.536:593): avc: denied { map } for pid=9515 comm="syz.2.800" path="socket:[32888]" dev="sockfs" ino=32888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 146.023851][ T9521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.026701][ T9521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.176729][ T7855] hsr_slave_0: left promiscuous mode [ 146.179334][ T7855] hsr_slave_1: left promiscuous mode [ 146.181823][ T7855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.184513][ T7855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.187143][ T7855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.189464][ T7855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.210849][ T7855] veth1_macvtap: left promiscuous mode [ 146.212639][ T7855] veth0_macvtap: left promiscuous mode [ 146.215109][ T7855] veth1_vlan: left promiscuous mode [ 146.216892][ T7855] veth0_vlan: left promiscuous mode [ 146.263722][ T6162] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 146.286032][ T5955] Bluetooth: hci2: command tx timeout [ 146.413730][ T6162] usb 7-1: Using ep0 maxpacket: 8 [ 146.426342][ T6162] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 146.428899][ T6162] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.431896][ T6162] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 146.436467][ T6162] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 146.439539][ T6162] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.443563][ T6162] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 146.447329][ T6162] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.656554][ T6162] usb 7-1: usb_control_msg returned -71 [ 146.658367][ T6162] usbtmc 7-1:16.0: can't read capabilities [ 146.662805][ T6162] usb 7-1: USB disconnect, device number 20 [ 146.829351][ T9527] Process accounting resumed [ 146.832037][ T7855] team0 (unregistering): Port device team_slave_1 removed [ 146.851798][ T9530] netlink: 28 bytes leftover after parsing attributes in process `syz.5.803'. [ 146.854796][ T9530] netlink: 28 bytes leftover after parsing attributes in process `syz.5.803'. [ 146.905717][ T7855] team0 (unregistering): Port device team_slave_0 removed [ 147.006926][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.166389][ T5955] Bluetooth: hci3: command tx timeout [ 147.508124][ T9482] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.606943][ T9482] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.653936][ T6015] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 147.688362][ T9482] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.718963][ T9569] xt_hashlimit: size too large, truncated to 1048576 [ 147.816518][ T6015] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 147.819368][ T6015] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.821849][ T6015] usb 10-1: Product: syz [ 147.823185][ T6015] usb 10-1: Manufacturer: syz [ 147.824740][ T6015] usb 10-1: SerialNumber: syz [ 147.834917][ T6015] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 147.846128][ T9482] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.863187][ T6851] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 147.863314][ T9577] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 148.047984][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.087565][ T9584] netlink: 'syz.2.819': attribute type 5 has an invalid length. [ 148.196685][ T9588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.819'. [ 148.199493][ T9588] netlink: 'syz.2.819': attribute type 5 has an invalid length. [ 148.205854][ T7855] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 148.210997][ T7855] bond0 (unregistering): Released all slaves [ 148.222447][ T9585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.254706][ T9482] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 148.259287][ T9482] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 148.263558][ T9482] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 148.289058][ T9482] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 148.314204][ T9414] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.318506][ T9414] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.324512][ T9414] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.329472][ T9414] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 148.374195][ T5955] Bluetooth: hci2: command tx timeout [ 148.400956][ T9482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.438393][ T9414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.442916][ T9482] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.456406][ T7853] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.458759][ T7853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.463224][ T7853] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.465519][ T7853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.472377][ T9414] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.500290][ T7855] hsr0: left allmulticast mode [ 148.501875][ T7855] veth1_macvtap: left promiscuous mode [ 148.503582][ T7855] veth0_macvtap: left promiscuous mode [ 148.505439][ T7855] veth1_vlan: left promiscuous mode [ 148.507281][ T7855] veth0_vlan: left promiscuous mode [ 148.923899][ T6851] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 148.942793][ T6851] ath9k_htc: Failed to initialize the device [ 148.975389][ T6851] usb 10-1: ath9k_htc: USB layer deinitialized [ 149.243865][ T5955] Bluetooth: hci3: command tx timeout [ 149.306349][ T40] audit: type=1400 audit(1752376191.876:594): avc: denied { watch watch_reads } for pid=9621 comm="syz.2.826" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 149.444530][ T9627] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.828'. [ 149.724008][ T7854] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.726987][ T7854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.750477][ T7861] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.752927][ T7861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.897589][ T9482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.905418][ T9414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.938366][ T9414] veth0_vlan: entered promiscuous mode [ 149.946443][ T9414] veth1_vlan: entered promiscuous mode [ 149.966345][ T9414] veth0_macvtap: entered promiscuous mode [ 149.971092][ T9414] veth1_macvtap: entered promiscuous mode [ 149.988739][ T9414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.997226][ T9414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.998241][ T40] audit: type=1400 audit(1752376192.556:595): avc: denied { create } for pid=9663 comm="syz.2.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 150.002883][ T9414] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.008788][ T40] audit: type=1400 audit(1752376192.556:596): avc: denied { setopt } for pid=9663 comm="syz.2.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 150.010929][ T9414] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.017734][ T9414] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.020468][ T9414] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.054706][ T40] audit: type=1400 audit(1752376192.616:597): avc: denied { setopt } for pid=9663 comm="syz.2.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 150.073425][ T7853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.081135][ T7853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.100399][ T7859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.103269][ T7859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.127377][ T9482] veth0_vlan: entered promiscuous mode [ 150.135325][ T9482] veth1_vlan: entered promiscuous mode [ 150.175915][ T9482] veth0_macvtap: entered promiscuous mode [ 150.179750][ T9482] veth1_macvtap: entered promiscuous mode [ 150.187908][ T9482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.196386][ T9482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.202332][ T9482] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.205595][ T9482] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.208315][ T9482] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.211060][ T9482] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.262515][ T7861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.267628][ T7861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.280584][ T7853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.283242][ T7853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.434501][ T6002] usb 10-1: USB disconnect, device number 4 [ 150.621171][ T9668] team0 (unregistering): Port device team_slave_0 removed [ 150.627927][ T9668] team0 (unregistering): Port device team_slave_1 removed [ 150.903836][ T40] audit: type=1400 audit(1752376193.456:598): avc: denied { wake_alarm } for pid=9683 comm="syz.2.841" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 150.951860][ T9687] xt_TCPMSS: Only works on TCP SYN packets [ 151.005987][ T7862] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.133749][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 151.184580][ T5961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.188617][ T5961] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.191521][ T5961] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.195564][ T5961] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.198230][ T5961] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.283793][ T9] usb 7-1: device descriptor read/64, error -71 [ 151.299428][ T9689] chnl_net:caif_netlink_parms(): no params data found [ 151.359118][ T9689] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.361453][ T9689] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.363891][ T9689] bridge_slave_0: entered allmulticast mode [ 151.366932][ T9689] bridge_slave_0: entered promiscuous mode [ 151.370787][ T9689] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.373025][ T9689] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.375952][ T9689] bridge_slave_1: entered allmulticast mode [ 151.378568][ T9689] bridge_slave_1: entered promiscuous mode [ 151.421183][ T7862] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.429312][ T9689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.436276][ T9689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.473599][ T9689] team0: Port device team_slave_0 added [ 151.478748][ T9689] team0: Port device team_slave_1 added [ 151.509106][ T9689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.511295][ T9689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.519266][ T9689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.523868][ T9689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.526044][ T9689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.533960][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 151.536528][ T9689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.578543][ T9689] hsr_slave_0: entered promiscuous mode [ 151.581261][ T9689] hsr_slave_1: entered promiscuous mode [ 151.583489][ T9689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.585908][ T9689] Cannot create hsr debugfs directory [ 151.683803][ T9] usb 7-1: device descriptor read/64, error -71 [ 151.795892][ T9] usb usb7-port1: attempt power cycle [ 151.858556][ T7862] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.065093][ T9699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63187 sclass=netlink_route_socket pid=9699 comm=syz.5.843 [ 152.133752][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 152.156463][ T9] usb 7-1: device descriptor read/8, error -71 [ 152.159332][ T5961] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.163355][ T5961] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.166432][ T5961] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.169853][ T5961] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.172758][ T5961] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.275616][ T9704] chnl_net:caif_netlink_parms(): no params data found [ 152.315658][ T7862] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.347114][ T6002] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 152.360213][ T9704] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.362525][ T9704] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.365849][ T9704] bridge_slave_0: entered allmulticast mode [ 152.368511][ T9704] bridge_slave_0: entered promiscuous mode [ 152.371600][ T9704] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.374110][ T9704] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.376374][ T9704] bridge_slave_1: entered allmulticast mode [ 152.378998][ T9704] bridge_slave_1: entered promiscuous mode [ 152.393714][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 152.410390][ T9704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.415062][ T9704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.415310][ T9] usb 7-1: device descriptor read/8, error -71 [ 152.446896][ T9704] team0: Port device team_slave_0 added [ 152.450277][ T9704] team0: Port device team_slave_1 added [ 152.479527][ T9704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.481749][ T9704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.490500][ T9704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.495020][ T9704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.495302][ T6002] usb 10-1: Using ep0 maxpacket: 16 [ 152.497175][ T9704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.500052][ T6002] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.506879][ T9704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.514071][ T6002] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.517089][ T6002] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 152.521050][ T6002] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 152.523873][ T9] usb usb7-port1: unable to enumerate USB device [ 152.524103][ T6002] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.529995][ T6002] usb 10-1: config 0 descriptor?? [ 152.548568][ T9704] hsr_slave_0: entered promiscuous mode [ 152.551099][ T9704] hsr_slave_1: entered promiscuous mode [ 152.553513][ T9704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.556164][ T9704] Cannot create hsr debugfs directory [ 152.735269][ T9701] netlink: 44 bytes leftover after parsing attributes in process `syz.5.844'. [ 152.745660][ T6002] usbhid 10-1:0.0: can't add hid device: -71 [ 152.747582][ T6002] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 152.753159][ T6002] usb 10-1: USB disconnect, device number 5 [ 152.795661][ T7862] bridge_slave_1: left allmulticast mode [ 152.797599][ T7862] bridge_slave_1: left promiscuous mode [ 152.799981][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.805022][ T7862] bridge_slave_0: left allmulticast mode [ 152.807064][ T7862] bridge_slave_0: left promiscuous mode [ 152.809736][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.089471][ T7862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.094318][ T7862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.098666][ T7862] bond0 (unregistering): Released all slaves [ 153.244340][ T5961] Bluetooth: hci2: command tx timeout [ 153.350580][ T7862] hsr_slave_0: left promiscuous mode [ 153.353151][ T7862] hsr_slave_1: left promiscuous mode [ 153.356077][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.358424][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.361398][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.363847][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.388607][ T7862] veth1_macvtap: left promiscuous mode [ 153.391069][ T7862] veth0_macvtap: left promiscuous mode [ 153.392996][ T7862] veth1_vlan: left promiscuous mode [ 153.395733][ T7862] veth0_vlan: left promiscuous mode [ 153.673818][ T6162] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 153.847886][ T6162] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 153.851331][ T6162] usb 10-1: config index 0 descriptor too short (expected 8192, got 27) [ 153.854039][ T6162] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.857262][ T6162] usb 10-1: config 0 has no interfaces? [ 153.859840][ T6162] usb 10-1: config index 1 descriptor too short (expected 8192, got 27) [ 153.862464][ T6162] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.865904][ T6162] usb 10-1: config 0 has no interfaces? [ 153.868350][ T6162] usb 10-1: config index 2 descriptor too short (expected 8192, got 27) [ 153.870960][ T6162] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.874951][ T6162] usb 10-1: config 0 has no interfaces? [ 153.877489][ T6162] usb 10-1: config index 3 descriptor too short (expected 8192, got 27) [ 153.880102][ T6162] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.883315][ T6162] usb 10-1: config 0 has no interfaces? [ 153.886016][ T6162] usb 10-1: config index 4 descriptor too short (expected 8192, got 27) [ 153.888597][ T6162] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.892109][ T6162] usb 10-1: config 0 has no interfaces? [ 153.895108][ T6162] usb 10-1: config index 5 descriptor too short (expected 8192, got 27) [ 153.897735][ T6162] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.900863][ T6162] usb 10-1: config 0 has no interfaces? [ 153.903435][ T6162] usb 10-1: config index 6 descriptor too short (expected 8192, got 27) [ 153.906176][ T6162] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.909365][ T6162] usb 10-1: config 0 has no interfaces? [ 153.912037][ T6162] usb 10-1: config index 7 descriptor too short (expected 8192, got 27) [ 153.914771][ T6162] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.917931][ T6162] usb 10-1: config 0 has no interfaces? [ 153.921135][ T6162] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 153.924108][ T6162] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 153.926777][ T6162] usb 10-1: Product: syz [ 153.928117][ T6162] usb 10-1: Manufacturer: syz [ 153.929647][ T6162] usb 10-1: SerialNumber: syz [ 153.932857][ T6162] usb 10-1: config 0 descriptor?? [ 153.995421][ T7862] team0 (unregistering): Port device team_slave_1 removed [ 154.070144][ T7862] team0 (unregistering): Port device team_slave_0 removed [ 154.213767][ T5961] Bluetooth: hci3: command tx timeout [ 154.595192][ T6162] usb 10-1: USB disconnect, device number 6 [ 154.626326][ T9704] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.711250][ T9704] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.757336][ T9731] QAT: failed to copy from user. [ 154.838954][ T9704] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.929774][ T9704] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.978906][ T40] audit: type=1400 audit(1752376197.536:599): avc: denied { kexec_image_load } for pid=9737 comm="syz.2.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 155.083071][ T9689] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 155.090263][ T9689] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 155.095674][ T9689] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 155.106751][ T9689] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 155.139010][ T9748] netlink: 'syz.5.853': attribute type 10 has an invalid length. [ 155.141615][ T9748] netlink: 2 bytes leftover after parsing attributes in process `syz.5.853'. [ 155.147965][ T9748] 8021q: VLANs not supported on caif0 [ 155.187888][ T9704] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 155.193232][ T9704] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 155.197308][ T9704] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 155.203270][ T9704] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 155.238296][ T9689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.240203][ T9762] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 155.242705][ T9762] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 155.247602][ T9762] vhci_hcd vhci_hcd.0: Device attached [ 155.267621][ T7862] bridge_slave_1: left allmulticast mode [ 155.269494][ T7862] bridge_slave_1: left promiscuous mode [ 155.271431][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.275546][ T7862] bridge_slave_0: left allmulticast mode [ 155.277570][ T7862] bridge_slave_0: left promiscuous mode [ 155.279850][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.333916][ T5961] Bluetooth: hci2: command tx timeout [ 155.493907][ T34] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 155.514435][ T7862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.519417][ T7862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.524616][ T7862] bond0 (unregistering): Released all slaves [ 155.544830][ T9689] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.555307][ T7859] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.557493][ T7859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.567086][ T7861] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.569361][ T7861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.586020][ T9704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.636161][ T9704] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.645367][ T7853] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.647544][ T7853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.678240][ T7861] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.680508][ T7861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.776855][ T9689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.819235][ T9704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.835990][ T7862] hsr_slave_0: left promiscuous mode [ 155.838159][ T7862] hsr_slave_1: left promiscuous mode [ 155.840327][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.842748][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.854454][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.856844][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.877670][ T7862] veth1_macvtap: left promiscuous mode [ 155.879451][ T7862] veth0_macvtap: left promiscuous mode [ 155.881422][ T7862] veth1_vlan: left promiscuous mode [ 155.883174][ T7862] veth0_vlan: left promiscuous mode [ 156.034357][ T9763] vhci_hcd: connection reset by peer [ 156.040314][ T7861] vhci_hcd: stop threads [ 156.042690][ T7861] vhci_hcd: release socket [ 156.049937][ T7861] vhci_hcd: disconnect device [ 156.283780][ T5961] Bluetooth: hci3: command tx timeout [ 156.513190][ T7862] team0 (unregistering): Port device team_slave_1 removed [ 156.590039][ T7862] team0 (unregistering): Port device team_slave_0 removed [ 156.608078][ T9787] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 157.092053][ T9704] veth0_vlan: entered promiscuous mode [ 157.109211][ T9704] veth1_vlan: entered promiscuous mode [ 157.142565][ T9689] veth0_vlan: entered promiscuous mode [ 157.158809][ T9704] veth0_macvtap: entered promiscuous mode [ 157.165435][ T9689] veth1_vlan: entered promiscuous mode [ 157.170190][ T9704] veth1_macvtap: entered promiscuous mode [ 157.192527][ T9704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.210612][ T9704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.215272][ T9689] veth0_macvtap: entered promiscuous mode [ 157.221872][ T9689] veth1_macvtap: entered promiscuous mode [ 157.227232][ T9704] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.230136][ T9704] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.232982][ T9704] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.235797][ T9704] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.248808][ T9689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.267870][ T9689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.287250][ T9689] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.290347][ T9689] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.293003][ T9689] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.299325][ T9689] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.329696][ T7855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.332199][ T7855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.373229][ T7855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.377788][ T7855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.382650][ T7854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.385847][ T7854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.403732][ T5961] Bluetooth: hci2: command tx timeout [ 157.407978][ T7859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.410904][ T7859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.994578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 158.054637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 158.057882][ T9815] netlink: 16 bytes leftover after parsing attributes in process `syz.5.865'. [ 158.057882][ T9817] netlink: 16 bytes leftover after parsing attributes in process `syz.5.865'. [ 158.102918][ T7862] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.209335][ T7862] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.383101][ T40] audit: type=1400 audit(1752376200.936:600): avc: denied { listen } for pid=9824 comm="syz.5.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.485135][ T5962] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.485913][ T5955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.488896][ T5962] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.491390][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.495579][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.495678][ T5962] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.499316][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.503803][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.505065][ T5962] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.507122][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.524912][ T40] audit: type=1400 audit(1752376201.086:601): avc: denied { ioctl } for pid=9833 comm="syz.5.870" path="/dev/ptyqf" dev="devtmpfs" ino=142 ioctlcmd=0x5436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 158.704780][ T9829] chnl_net:caif_netlink_parms(): no params data found [ 158.739874][ T9830] chnl_net:caif_netlink_parms(): no params data found [ 158.808571][ T9855] netlink: 'syz.2.874': attribute type 1 has an invalid length. [ 158.811051][ T9855] netlink: 224 bytes leftover after parsing attributes in process `syz.2.874'. [ 158.819487][ T9829] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.821930][ T9829] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.822097][ T9855] SELinux: policydb string does not match my string SE Linux [ 158.825058][ T9829] bridge_slave_0: entered allmulticast mode [ 158.828345][ T9855] SELinux: failed to load policy [ 158.829379][ T9829] bridge_slave_0: entered promiscuous mode [ 158.860375][ T9829] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.861626][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.876'. [ 158.862948][ T9829] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.867089][ T9862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.876'. [ 158.868966][ T9829] bridge_slave_1: entered allmulticast mode [ 158.871633][ T9862] netlink: 'syz.2.876': attribute type 7 has an invalid length. [ 158.874962][ T9829] bridge_slave_1: entered promiscuous mode [ 158.946799][ T9829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.953011][ T9830] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.956289][ T9830] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.959261][ T9830] bridge_slave_0: entered allmulticast mode [ 158.959312][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.875'. [ 158.962734][ T9830] bridge_slave_0: entered promiscuous mode [ 158.969070][ T9830] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.971546][ T9830] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.974110][ T9830] bridge_slave_1: entered allmulticast mode [ 158.976624][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.877'. [ 158.976732][ T9830] bridge_slave_1: entered promiscuous mode [ 158.979925][ T9870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.877'. [ 158.984439][ T9829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.006420][ T9870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.877'. [ 159.050633][ T9830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.056493][ T9829] team0: Port device team_slave_0 added [ 159.060141][ T9830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.065521][ T9829] team0: Port device team_slave_1 added [ 159.141985][ T7862] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.151815][ T9830] team0: Port device team_slave_0 added [ 159.155904][ T9830] team0: Port device team_slave_1 added [ 159.158500][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.160691][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.169810][ T9829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.184457][ T40] audit: type=1400 audit(1752376201.746:602): avc: denied { mounton } for pid=9874 comm="syz.2.879" path="/369/file0" dev="hugetlbfs" ino=33674 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 159.211886][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.214598][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.222570][ T9829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.244680][ T9830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.247189][ T9830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.258511][ T9830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.292690][ T9880] cgroup: noprefix used incorrectly [ 159.294824][ T9830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.294835][ T9830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.294856][ T9830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.297844][ T9829] hsr_slave_0: entered promiscuous mode [ 159.311773][ T9829] hsr_slave_1: entered promiscuous mode [ 159.359765][ T9882] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 159.361888][ T9882] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.365550][ T9882] vhci_hcd vhci_hcd.0: Device attached [ 159.394211][ T9830] hsr_slave_0: entered promiscuous mode [ 159.396471][ T9830] hsr_slave_1: entered promiscuous mode [ 159.398829][ T9830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.401203][ T9830] Cannot create hsr debugfs directory [ 159.613824][ T7494] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 159.616817][ T6838] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 159.647674][ T7862] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.773719][ T6838] usb 7-1: Using ep0 maxpacket: 16 [ 159.777390][ T6838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.781216][ T6838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.785099][ T6838] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 159.789571][ T6838] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 159.792711][ T6838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.802436][ T6838] usb 7-1: config 0 descriptor?? [ 159.805234][ T7862] bridge_slave_1: left allmulticast mode [ 159.807330][ T7862] bridge_slave_1: left promiscuous mode [ 159.809509][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.814413][ T7862] bridge_slave_0: left allmulticast mode [ 159.816504][ T7862] bridge_slave_0: left promiscuous mode [ 159.818692][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.005701][ T9882] program syz.2.881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.011766][ T6838] usbhid 7-1:0.0: can't add hid device: -71 [ 160.013846][ T9883] vhci_hcd: connection closed [ 160.015110][ T6838] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 160.018840][ T7855] vhci_hcd: stop threads [ 160.021333][ T7855] vhci_hcd: release socket [ 160.023162][ T7855] vhci_hcd: disconnect device [ 160.025967][ T6838] usb 7-1: USB disconnect, device number 25 [ 160.045452][ T7862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.049349][ T7862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.052904][ T7862] bond0 (unregistering): Released all slaves [ 160.073730][ T7494] vhci_hcd: vhci_device speed not set [ 160.306022][ T7862] hsr_slave_0: left promiscuous mode [ 160.308067][ T7862] hsr_slave_1: left promiscuous mode [ 160.310052][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.312359][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.315362][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.317721][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.335944][ T7862] veth1_macvtap: left promiscuous mode [ 160.337751][ T7862] veth0_macvtap: left promiscuous mode [ 160.339523][ T7862] veth1_vlan: left promiscuous mode [ 160.341218][ T7862] veth0_vlan: left promiscuous mode [ 160.523962][ T5951] Bluetooth: hci2: command tx timeout [ 160.524470][ T5961] Bluetooth: hci3: command tx timeout [ 160.593883][ T34] vhci_hcd: vhci_device speed not set [ 160.985446][ T7862] team0 (unregistering): Port device team_slave_1 removed [ 161.052227][ T7862] team0 (unregistering): Port device team_slave_0 removed [ 161.559042][ T9829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 161.590842][ T9830] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.598054][ T9829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 161.602440][ T9829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 161.608250][ T9829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 161.657541][ T9829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.680669][ T9830] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.704880][ T9829] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.711552][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.713763][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.720837][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.723145][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.764038][ T9830] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.879782][ T9830] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.893783][ T925] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 161.898718][ T9829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.932811][ T9829] veth0_vlan: entered promiscuous mode [ 161.940637][ T9829] veth1_vlan: entered promiscuous mode [ 161.959257][ T9829] veth0_macvtap: entered promiscuous mode [ 161.962981][ T9829] veth1_macvtap: entered promiscuous mode [ 161.978159][ T9829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.996768][ T9829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.002919][ T9829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.007157][ T9829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.010790][ T9829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.015525][ T9829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.064744][ T925] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 162.069615][ T925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 162.075248][ T925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 162.079138][ T925] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.085502][ T925] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.089246][ T925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.097673][ T925] usb 7-1: config 0 descriptor?? [ 162.099486][ T7862] bridge_slave_1: left allmulticast mode [ 162.100616][ T9897] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 162.101632][ T7862] bridge_slave_1: left promiscuous mode [ 162.109302][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.114911][ T7862] bridge_slave_0: left allmulticast mode [ 162.117307][ T7862] bridge_slave_0: left promiscuous mode [ 162.119811][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.388308][ T7862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.395849][ T7862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.400725][ T7862] bond0 (unregistering): Released all slaves [ 162.427761][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.430340][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.468999][ T9830] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 162.477528][ T9830] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 162.482571][ T9830] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 162.487120][ T9830] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 162.487197][ T7860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.491620][ T7860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.511802][ T925] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 162.529039][ T925] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 162.604035][ T5961] Bluetooth: hci3: command tx timeout [ 162.625290][ T9830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.637347][ T9830] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.643107][ T7859] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.645440][ T7859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.651958][ T7859] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.654184][ T7859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.691932][ T7862] hsr_slave_0: left promiscuous mode [ 162.695713][ T7862] hsr_slave_1: left promiscuous mode [ 162.698188][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.700613][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.703325][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.705801][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.725468][ T7862] veth1_macvtap: left promiscuous mode [ 162.727307][ T7862] veth0_macvtap: left promiscuous mode [ 162.729153][ T7862] veth1_vlan: left promiscuous mode [ 162.730849][ T7862] veth0_vlan: left promiscuous mode [ 163.328880][ T7862] team0 (unregistering): Port device team_slave_1 removed [ 163.397049][ T7862] team0 (unregistering): Port device team_slave_0 removed [ 163.854669][ T29] usb 7-1: reset high-speed USB device number 26 using dummy_hcd [ 164.046532][ T9830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.220959][ T9830] veth0_vlan: entered promiscuous mode [ 164.227674][ T9830] veth1_vlan: entered promiscuous mode [ 164.248867][ T9830] veth0_macvtap: entered promiscuous mode [ 164.254969][ T9830] veth1_macvtap: entered promiscuous mode [ 164.268887][ T9830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.283359][ T9830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.290906][ T9830] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.295918][ T9830] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.299486][ T9830] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.303042][ T9830] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.333502][ T7853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.339339][ T7853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.352772][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.358438][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.380792][ T7862] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.677387][ T6040] usb 7-1: USB disconnect, device number 26 [ 165.331024][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.337465][ T5951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.341224][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.345138][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.349325][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.452766][ T7862] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.466715][ T9940] chnl_net:caif_netlink_parms(): no params data found [ 165.532425][ T9940] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.535307][ T9940] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.537486][ T9940] bridge_slave_0: entered allmulticast mode [ 165.540035][ T9940] bridge_slave_0: entered promiscuous mode [ 165.543082][ T9940] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.545716][ T9940] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.547893][ T9940] bridge_slave_1: entered allmulticast mode [ 165.550467][ T9940] bridge_slave_1: entered promiscuous mode [ 165.584612][ T9940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.591164][ T9940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.649953][ T9950] __nla_validate_parse: 1 callbacks suppressed [ 165.649964][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.889'. [ 165.654886][ T9940] team0: Port device team_slave_0 added [ 165.655365][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.889'. [ 165.669579][ T9940] team0: Port device team_slave_1 added [ 165.728349][ T9953] syz_tun: entered allmulticast mode [ 165.733159][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.738255][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.750537][ T9940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.756918][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.757482][ T9953] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 165.759889][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.763445][ T9953] mroute: pending queue full, dropping entries [ 165.776643][ T9940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.817601][ T7862] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.824314][ T5951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.829060][ T5951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.833154][ T5951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.841776][ T5951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.846743][ T5951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.863580][ T9951] syz_tun: left allmulticast mode [ 165.907231][ T9940] hsr_slave_0: entered promiscuous mode [ 165.910419][ T9940] hsr_slave_1: entered promiscuous mode [ 165.913345][ T9940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.916809][ T9940] Cannot create hsr debugfs directory [ 166.006469][ T7862] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.054575][ T9971] netlink: 28 bytes leftover after parsing attributes in process `syz.5.897'. [ 166.130300][ T9975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=9975 comm=syz.2.898 [ 166.136033][ T40] audit: type=1400 audit(1752376208.669:603): avc: denied { connect } for pid=9974 comm="syz.2.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 166.217899][ T7862] bridge_slave_1: left allmulticast mode [ 166.220048][ T7862] bridge_slave_1: left promiscuous mode [ 166.222477][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.229878][ T7862] bridge_slave_0: left allmulticast mode [ 166.232084][ T7862] bridge_slave_0: left promiscuous mode [ 166.234067][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.323665][ T9976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.898'. [ 166.590365][ T7862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.594830][ T7862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.598663][ T7862] bond0 (unregistering): Released all slaves [ 166.757974][ T9965] chnl_net:caif_netlink_parms(): no params data found [ 166.940358][ T9965] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.943596][ T9965] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.946791][ T9965] bridge_slave_0: entered allmulticast mode [ 166.950830][ T9965] bridge_slave_0: entered promiscuous mode [ 166.956298][ T9965] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.959347][ T9965] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.962354][ T9965] bridge_slave_1: entered allmulticast mode [ 166.967931][ T9965] bridge_slave_1: entered promiscuous mode [ 167.043092][ T9965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.047729][ T9965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.074121][ T7862] hsr_slave_0: left promiscuous mode [ 167.076334][ T7862] hsr_slave_1: left promiscuous mode [ 167.078386][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.080729][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.085138][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.087502][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.109596][ T7862] veth1_macvtap: left promiscuous mode [ 167.111441][ T7862] veth0_macvtap: left promiscuous mode [ 167.113282][ T7862] veth1_vlan: left promiscuous mode [ 167.115324][ T7862] veth0_vlan: left promiscuous mode [ 167.228614][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.901'. [ 167.531158][ T5951] Bluetooth: hci2: command tx timeout [ 167.845289][ T7862] team0 (unregistering): Port device team_slave_1 removed [ 167.954296][ T7862] team0 (unregistering): Port device team_slave_0 removed [ 168.043851][ T5951] Bluetooth: hci3: command tx timeout [ 168.624570][ T9965] team0: Port device team_slave_0 added [ 168.628749][ T9965] team0: Port device team_slave_1 added [ 168.673354][ T9965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.676116][ T9965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.686271][ T9965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.694543][ T9965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.698194][ T9965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.706179][ T9965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.729137][T10011] overlayfs: workdir and upperdir must be separate subtrees [ 168.735597][T10011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.775138][ T9940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 168.781580][ T9965] hsr_slave_0: entered promiscuous mode [ 168.783804][ T9965] hsr_slave_1: entered promiscuous mode [ 168.787202][ T9940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 168.792768][ T9940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 168.797285][T10015] syz.5.908: attempt to access beyond end of device [ 168.797285][T10015] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 168.798129][ T9940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.801369][T10015] befs: (nbd5): unable to read superblock [ 168.853642][T10024] netlink: 32 bytes leftover after parsing attributes in process `syz.5.909'. [ 168.853672][T10025] netlink: 32 bytes leftover after parsing attributes in process `syz.5.909'. [ 168.918070][ T40] audit: type=1400 audit(1752376211.270:604): avc: denied { getopt } for pid=10029 comm="syz.5.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.934901][ T40] audit: type=1400 audit(1752376211.289:605): avc: denied { accept } for pid=10029 comm="syz.5.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.940786][ T40] audit: type=1400 audit(1752376211.289:606): avc: denied { create } for pid=10029 comm="syz.5.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 168.960461][T10034] netlink: 180 bytes leftover after parsing attributes in process `syz.5.912'. [ 168.968548][ T40] audit: type=1400 audit(1752376211.317:607): avc: denied { map } for pid=10033 comm="syz.5.912" path="socket:[39258]" dev="sockfs" ino=39258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.984710][ T9965] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.003664][ T9940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.017136][ T9940] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.021874][ T7861] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.024260][ T7861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.030557][ T7860] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.032806][ T7860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.101155][ T9965] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.170752][ T9965] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.179588][T10040] netlink: 'syz.2.914': attribute type 1 has an invalid length. [ 169.182672][T10040] netlink: 228 bytes leftover after parsing attributes in process `syz.2.914'. [ 169.219379][ T9940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.244242][ T9940] veth0_vlan: entered promiscuous mode [ 169.250744][ T9940] veth1_vlan: entered promiscuous mode [ 169.267214][ T40] audit: type=1400 audit(1752376211.597:608): avc: denied { setopt } for pid=10046 comm="syz.5.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 169.271153][ T9940] veth0_macvtap: entered promiscuous mode [ 169.276890][ T9940] veth1_macvtap: entered promiscuous mode [ 169.296124][ T9965] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.304285][ T9940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.310506][ T9940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.314805][ T9940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.318450][ T9940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.321158][ T9940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.324249][ T9940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.356843][ T7859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.366121][ T7859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.368904][ T7862] bridge_slave_1: left allmulticast mode [ 169.375259][ T7862] bridge_slave_1: left promiscuous mode [ 169.377725][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.382109][ T7862] bridge_slave_0: left allmulticast mode [ 169.383723][ T7862] bridge_slave_0: left promiscuous mode [ 169.385384][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.655332][ T7862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.662809][ T7862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.667234][ T7862] bond0 (unregistering): Released all slaves [ 169.702549][ T7854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.704995][ T7854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.730721][ T9965] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 169.735154][ T9965] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 169.740258][ T9965] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 169.743870][ C1] ------------[ cut here ]------------ [ 169.745906][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 169.747986][ C1] WARNING: CPU: 1 PID: 9965 at kernel/workqueue.c:2257 __queue_work+0xc9c/0x10f0 [ 169.750754][ C1] Modules linked in: [ 169.752165][ C1] CPU: 1 UID: 0 PID: 9965 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 169.757301][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 169.760672][ C1] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 169.762603][ C1] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 c0 07 ac 8b e8 f5 16 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 56 19 38 00 90 0f 0b 90 e9 1b f6 ff [ 169.770450][ C1] RSP: 0018:ffffc900006a0be8 EFLAGS: 00010082 [ 169.772957][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817af1a8 [ 169.776189][ C1] RDX: ffff88805b47c880 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 169.779399][ C1] RBP: ffff88804f760970 R08: 0000000000000001 R09: 0000000000000000 [ 169.782623][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000d418f [ 169.785838][ C1] R13: 0000000000000100 R14: ffff888055e46978 R15: 0000000000000001 [ 169.788997][ C1] FS: 00005555861c0500(0000) GS:ffff8880d6813000(0000) knlGS:0000000000000000 [ 169.792646][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.794897][ C1] CR2: 00007f6b2aee35c0 CR3: 000000005d6c6000 CR4: 0000000000352ef0 [ 169.797372][ C1] Call Trace: [ 169.798438][ C1] [ 169.799353][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 169.801225][ C1] call_timer_fn+0x197/0x620 [ 169.802666][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 169.804253][ C1] ? __run_timers+0x559/0x960 [ 169.805761][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 169.807530][ C1] __run_timers+0x569/0x960 [ 169.808984][ C1] ? __pfx___run_timers+0x10/0x10 [ 169.810632][ C1] run_timer_base+0x114/0x190 [ 169.812109][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 169.813780][ C1] run_timer_softirq+0x1a/0x40 [ 169.815272][ C1] handle_softirqs+0x219/0x8e0 [ 169.816761][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 169.818416][ C1] __irq_exit_rcu+0x109/0x170 [ 169.819915][ C1] irq_exit_rcu+0x9/0x30 [ 169.821244][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 169.823206][ C1] [ 169.824429][ C1] [ 169.825702][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 169.828122][ C1] RIP: 0010:lock_release+0x183/0x2f0 [ 169.830287][ C1] Code: 0f c1 05 08 8d 38 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 1d 4b 38 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 169.837951][ C1] RSP: 0018:ffffc9000449e9a0 EFLAGS: 00000206 [ 169.840409][ C1] RAX: 6daf77f41ce16c00 RBX: ffffffff8e5c4dc0 RCX: ffffc9000449e9ac [ 169.843607][ C1] RDX: 0000000000000002 RSI: ffffffff8de0d975 RDI: ffffffff8c158f60 [ 169.846843][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 169.850156][ C1] R10: 0000000000000000 R11: 0000000000006afc R12: ffffffff816adac4 [ 169.852755][ C1] R13: 0000000000000206 R14: ffff88805b47c880 R15: 0000000000000003 [ 169.855166][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 169.856785][ C1] unwind_next_frame+0x3f9/0x20a0 [ 169.858339][ C1] ? __unwind_start+0x574/0x7f0 [ 169.859974][ C1] __unwind_start+0x45f/0x7f0 [ 169.861971][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 169.864524][ C1] arch_stack_walk+0x73/0x100 [ 169.866166][ C1] ? arch_stack_walk+0x73/0x100 [ 169.867674][ C1] stack_trace_save+0x8e/0xc0 [ 169.869113][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 169.870799][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 169.872327][ C1] kasan_save_stack+0x33/0x60 [ 169.873815][ C1] kasan_save_track+0x14/0x30 [ 169.875286][ C1] kasan_save_free_info+0x3b/0x60 [ 169.876832][ C1] __kasan_slab_free+0x51/0x70 [ 169.878328][ C1] kfree+0x2b4/0x4d0 [ 169.879565][ C1] ? skb_free_head+0x114/0x210 [ 169.881088][ C1] skb_free_head+0x114/0x210 [ 169.882510][ C1] ? lock_acquire+0x179/0x350 [ 169.883945][ C1] skb_release_data+0x776/0x9c0 [ 169.885912][ C1] consume_skb+0xbf/0x100 [ 169.887752][ C1] netlink_broadcast_filtered+0x3c9/0xf30 [ 169.890161][ C1] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 169.892756][ C1] ? rtmsg_ifinfo_build_skb+0x151/0x280 [ 169.895079][ C1] nlmsg_notify+0x9e/0x220 [ 169.896954][ C1] rtnetlink_event+0x177/0x1f0 [ 169.898949][ C1] notifier_call_chain+0xbc/0x410 [ 169.901057][ C1] ? __pfx_rtnetlink_event+0x10/0x10 [ 169.903286][ C1] ? __pfx___might_resched+0x10/0x10 [ 169.905470][ C1] call_netdevice_notifiers_info+0xbe/0x140 [ 169.907898][ C1] netif_change_name+0x557/0x920 [ 169.909977][ C1] ? __pfx_netif_change_name+0x10/0x10 [ 169.912218][ C1] ? __pfx_validate_linkmsg+0x10/0x10 [ 169.914460][ C1] ? __asan_memset+0x23/0x50 [ 169.916388][ C1] do_setlink.constprop.0+0x3362/0x4380 [ 169.918489][ C1] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 169.920334][ C1] ? stack_trace_save+0x8e/0xc0 [ 169.921853][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 169.923592][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 169.925105][ C1] ? find_held_lock+0x2b/0x80 [ 169.926572][ C1] ? __mutex_trylock_common+0xe9/0x250 [ 169.928243][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 169.930124][ C1] ? __pfx___might_resched+0x10/0x10 [ 169.931752][ C1] ? rcu_is_watching+0x12/0xc0 [ 169.933227][ C1] ? trace_contention_end+0xdd/0x130 [ 169.934851][ C1] ? __mutex_lock+0x1ca/0xb90 [ 169.936308][ C1] ? rtnl_newlink+0x600/0x2000 [ 169.937792][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 169.939317][ C1] ? cap_capable+0xb3/0x250 [ 169.941144][ C1] ? netlink_ns_capable+0xfa/0x130 [ 169.942719][ C1] rtnl_newlink+0x1446/0x2000 [ 169.944589][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 169.946686][ C1] ? find_held_lock+0x2b/0x80 [ 169.948646][ C1] ? avc_has_perm_noaudit+0x117/0x3b0 [ 169.950845][ C1] ? avc_has_perm_noaudit+0x149/0x3b0 [ 169.953075][ C1] ? cred_has_capability.isra.0+0x193/0x2f0 [ 169.955497][ C1] ? __lock_acquire+0x622/0x1c90 [ 169.957553][ C1] ? find_held_lock+0x2b/0x80 [ 169.959492][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 169.961584][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 169.963646][ C1] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 169.965760][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 169.967816][ C1] rtnetlink_rcv_msg+0x95b/0xe90 [ 169.969906][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 169.972150][ C1] ? __lock_acquire+0x622/0x1c90 [ 169.974214][ C1] netlink_rcv_skb+0x158/0x420 [ 169.975805][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 169.977493][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.979110][ C1] ? netlink_deliver_tap+0x1ae/0xd30 [ 169.980772][ C1] ? is_vmalloc_addr+0x86/0xa0 [ 169.982270][ C1] netlink_unicast+0x58a/0x850 [ 169.983758][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 169.985235][ C1] netlink_sendmsg+0x8d1/0xdd0 [ 169.986700][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.988331][ C1] __sys_sendto+0x4a0/0x520 [ 169.989853][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 169.991982][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 169.994129][ C1] ? dnotify_flush+0x79/0x4c0 [ 169.995610][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 169.997086][ C1] ? do_syscall_64+0x91/0x4c0 [ 169.998564][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 170.000212][ C1] do_syscall_64+0xcd/0x4c0 [ 170.001632][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.003745][ C1] RIP: 0033:0x7f6b2a1907bc [ 170.005630][ C1] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 170.013324][ C1] RSP: 002b:00007ffcd7f8e3b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 170.016622][ C1] RAX: ffffffffffffffda RBX: 00007f6b2aee35c0 RCX: 00007f6b2a1907bc [ 170.019706][ C1] RDX: 0000000000000030 RSI: 00007f6b2aee3610 RDI: 0000000000000006 [ 170.022830][ C1] RBP: 0000000000000000 R08: 00007ffcd7f8e404 R09: 000000000000000c [ 170.025963][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 170.028847][ C1] R13: 0000000000000000 R14: 00007f6b2aee3610 R15: 0000000000000000 [ 170.031958][ C1] [ 170.033132][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 170.036006][ C1] CPU: 1 UID: 0 PID: 9965 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 170.040431][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 170.043675][ C1] Call Trace: [ 170.044712][ C1] [ 170.045618][ C1] dump_stack_lvl+0x3d/0x1f0 [ 170.047056][ C1] panic+0x71c/0x800 [ 170.048365][ C1] ? __pfx_panic+0x10/0x10 [ 170.049860][ C1] ? show_trace_log_lvl+0x29b/0x3e0 [ 170.051477][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 170.053053][ C1] ? __queue_work+0xc9c/0x10f0 [ 170.054537][ C1] check_panic_on_warn+0xab/0xb0 [ 170.056022][ C1] __warn+0xf6/0x3c0 [ 170.057243][ C1] ? __queue_work+0xc9c/0x10f0 [ 170.059118][ C1] report_bug+0x3c3/0x580 [ 170.060799][ C1] ? __queue_work+0xc9c/0x10f0 [ 170.062296][ C1] handle_bug+0x184/0x210 [ 170.063641][ C1] exc_invalid_op+0x17/0x50 [ 170.065027][ C1] asm_exc_invalid_op+0x1a/0x20 [ 170.066534][ C1] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 170.068169][ C1] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 c0 07 ac 8b e8 f5 16 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 56 19 38 00 90 0f 0b 90 e9 1b f6 ff [ 170.073973][ C1] RSP: 0018:ffffc900006a0be8 EFLAGS: 00010082 [ 170.075837][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817af1a8 [ 170.078224][ C1] RDX: ffff88805b47c880 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 170.080616][ C1] RBP: ffff88804f760970 R08: 0000000000000001 R09: 0000000000000000 [ 170.083611][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000d418f [ 170.086192][ C1] R13: 0000000000000100 R14: ffff888055e46978 R15: 0000000000000001 [ 170.088580][ C1] ? __warn_printk+0x198/0x350 [ 170.090108][ C1] ? __warn_printk+0x1a5/0x350 [ 170.091590][ C1] ? __queue_work+0xc9b/0x10f0 [ 170.093062][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 170.094895][ C1] call_timer_fn+0x197/0x620 [ 170.096357][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 170.097977][ C1] ? __run_timers+0x559/0x960 [ 170.099461][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 170.101850][ C1] __run_timers+0x569/0x960 [ 170.103293][ C1] ? __pfx___run_timers+0x10/0x10 [ 170.105414][ C1] run_timer_base+0x114/0x190 [ 170.107434][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 170.109664][ C1] run_timer_softirq+0x1a/0x40 [ 170.111329][ C1] handle_softirqs+0x219/0x8e0 [ 170.112836][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 170.114465][ C1] __irq_exit_rcu+0x109/0x170 [ 170.115937][ C1] irq_exit_rcu+0x9/0x30 [ 170.117320][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 170.119059][ C1] [ 170.120056][ C1] [ 170.120994][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 170.122857][ C1] RIP: 0010:lock_release+0x183/0x2f0 [ 170.124496][ C1] Code: 0f c1 05 08 8d 38 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 1d 4b 38 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 170.130707][ C1] RSP: 0018:ffffc9000449e9a0 EFLAGS: 00000206 [ 170.132602][ C1] RAX: 6daf77f41ce16c00 RBX: ffffffff8e5c4dc0 RCX: ffffc9000449e9ac [ 170.134985][ C1] RDX: 0000000000000002 RSI: ffffffff8de0d975 RDI: ffffffff8c158f60 [ 170.137435][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 170.140394][ C1] R10: 0000000000000000 R11: 0000000000006afc R12: ffffffff816adac4 [ 170.143715][ C1] R13: 0000000000000206 R14: ffff88805b47c880 R15: 0000000000000003 [ 170.146995][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 170.149187][ C1] unwind_next_frame+0x3f9/0x20a0 [ 170.151317][ C1] ? __unwind_start+0x574/0x7f0 [ 170.153367][ C1] __unwind_start+0x45f/0x7f0 [ 170.155350][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 170.157913][ C1] arch_stack_walk+0x73/0x100 [ 170.159905][ C1] ? arch_stack_walk+0x73/0x100 [ 170.161887][ C1] stack_trace_save+0x8e/0xc0 [ 170.163402][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 170.165242][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 170.166878][ C1] kasan_save_stack+0x33/0x60 [ 170.168358][ C1] kasan_save_track+0x14/0x30 [ 170.169880][ C1] kasan_save_free_info+0x3b/0x60 [ 170.171417][ C1] __kasan_slab_free+0x51/0x70 [ 170.172921][ C1] kfree+0x2b4/0x4d0 [ 170.174370][ C1] ? skb_free_head+0x114/0x210 [ 170.175994][ C1] skb_free_head+0x114/0x210 [ 170.177805][ C1] ? lock_acquire+0x179/0x350 [ 170.179291][ C1] skb_release_data+0x776/0x9c0 [ 170.180867][ C1] consume_skb+0xbf/0x100 [ 170.182304][ C1] netlink_broadcast_filtered+0x3c9/0xf30 [ 170.184158][ C1] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 170.186273][ C1] ? rtmsg_ifinfo_build_skb+0x151/0x280 [ 170.188466][ C1] nlmsg_notify+0x9e/0x220 [ 170.189913][ C1] rtnetlink_event+0x177/0x1f0 [ 170.191420][ C1] notifier_call_chain+0xbc/0x410 [ 170.193003][ C1] ? __pfx_rtnetlink_event+0x10/0x10 [ 170.194725][ C1] ? __pfx___might_resched+0x10/0x10 [ 170.196531][ C1] call_netdevice_notifiers_info+0xbe/0x140 [ 170.198516][ C1] netif_change_name+0x557/0x920 [ 170.200100][ C1] ? __pfx_netif_change_name+0x10/0x10 [ 170.201818][ C1] ? __pfx_validate_linkmsg+0x10/0x10 [ 170.203504][ C1] ? __asan_memset+0x23/0x50 [ 170.204965][ C1] do_setlink.constprop.0+0x3362/0x4380 [ 170.206746][ C1] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 170.208591][ C1] ? stack_trace_save+0x8e/0xc0 [ 170.210159][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 170.211853][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 170.213436][ C1] ? find_held_lock+0x2b/0x80 [ 170.214968][ C1] ? __mutex_trylock_common+0xe9/0x250 [ 170.216826][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 170.218816][ C1] ? __pfx___might_resched+0x10/0x10 [ 170.220496][ C1] ? rcu_is_watching+0x12/0xc0 [ 170.222024][ C1] ? trace_contention_end+0xdd/0x130 [ 170.223691][ C1] ? __mutex_lock+0x1ca/0xb90 [ 170.225176][ C1] ? rtnl_newlink+0x600/0x2000 [ 170.226817][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 170.228386][ C1] ? cap_capable+0xb3/0x250 [ 170.229858][ C1] ? netlink_ns_capable+0xfa/0x130 [ 170.231464][ C1] rtnl_newlink+0x1446/0x2000 [ 170.232957][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 170.234554][ C1] ? find_held_lock+0x2b/0x80 [ 170.236055][ C1] ? avc_has_perm_noaudit+0x117/0x3b0 [ 170.237997][ C1] ? avc_has_perm_noaudit+0x149/0x3b0 [ 170.239667][ C1] ? cred_has_capability.isra.0+0x193/0x2f0 [ 170.241523][ C1] ? __lock_acquire+0x622/0x1c90 [ 170.243069][ C1] ? find_held_lock+0x2b/0x80 [ 170.244554][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 170.246181][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 170.247764][ C1] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 170.249399][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 170.251013][ C1] rtnetlink_rcv_msg+0x95b/0xe90 [ 170.252588][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.254315][ C1] ? __lock_acquire+0x622/0x1c90 [ 170.255889][ C1] netlink_rcv_skb+0x158/0x420 [ 170.257556][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.259284][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.260996][ C1] ? netlink_deliver_tap+0x1ae/0xd30 [ 170.262686][ C1] ? is_vmalloc_addr+0x86/0xa0 [ 170.264205][ C1] netlink_unicast+0x58a/0x850 [ 170.265743][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 170.267429][ C1] netlink_sendmsg+0x8d1/0xdd0 [ 170.268943][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.270864][ C1] __sys_sendto+0x4a0/0x520 [ 170.272305][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 170.273921][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 170.275597][ C1] ? dnotify_flush+0x79/0x4c0 [ 170.277116][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 170.278650][ C1] ? do_syscall_64+0x91/0x4c0 [ 170.280354][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 170.282279][ C1] do_syscall_64+0xcd/0x4c0 [ 170.283739][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.285606][ C1] RIP: 0033:0x7f6b2a1907bc [ 170.287090][ C1] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 170.293128][ C1] RSP: 002b:00007ffcd7f8e3b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 170.295774][ C1] RAX: ffffffffffffffda RBX: 00007f6b2aee35c0 RCX: 00007f6b2a1907bc [ 170.298267][ C1] RDX: 0000000000000030 RSI: 00007f6b2aee3610 RDI: 0000000000000006 [ 170.300765][ C1] RBP: 0000000000000000 R08: 00007ffcd7f8e404 R09: 000000000000000c [ 170.303248][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 170.305648][ C1] R13: 0000000000000000 R14: 00007f6b2aee3610 R15: 0000000000000000 [ 170.308113][ C1] [ 170.309641][ C1] Kernel Offset: disabled [ 170.311024][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:10:12 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=00000000000500ff RCX=ffffffff822e6d53 RDX=ffff888025258000 RSI=ffffffff822e6d5d RDI=0000000000000007 RBP=000fffffffffffff RSP=ffffc900058ff540 R8 =0000000000000007 R9 =000fffffffffffff R10=00000000000500ff R11=0000000000000001 R12=0000000000000013 R13=0000000000000001 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81bbf280 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6713000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8d2c37af98 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=3a810b1eb6134bdc DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6a1bcf60 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c89a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c89a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c89a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c89a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c89a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c89a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bced5 RDI=ffffffff9b0c72a0 RBP=ffffffff9b0c7260 RSP=ffffc900006a0550 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0c7260 R15=ffffffff855bce70 RIP=ffffffff855bceff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555861c0500 ffffffff 00c00000 GS =0000 ffff8880d6813000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6b2aee35c0 CR3=000000005d6c6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec0c400 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000001 0000004500000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b2a211ae7 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b2a211adf ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b2a211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b2a211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b2a211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b2a211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b2a211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b2a211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697376656474656e 0001000e00000107 0000000100000000 0022001700000070 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000003004e0008 00000000004d0006 0000000000940005 0000000032687465 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000125d7b RBX=0000000000000002 RCX=ffffffff8b885c99 RDX=0000000000000000 RSI=ffffffff8de32e3f RDI=ffffffff8c158f60 RBP=ffffed1003bd8910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801dec4880 R14=ffffffff90a98650 R15=0000000000000000 RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6913000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff40a08ae0 CR3=000000005fce4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe7c0d00c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d2b611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d2b611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d2b611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d2b611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d2b611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d2b611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a73b500 RCX=ffffffff81afeb83 RDX=ffff88801debc880 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffc90000157d08 RSP=ffffc90000157bb8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1cb9f96 R12=1ffff9200002af80 R13=0000000000000002 R14=0000000000000001 R15=ffffed100d4e76a1 RIP=ffffffff81bbec42 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a13000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8d2c3bcf98 CR3=000000002c918000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000000010000 Opmask03=0000000000000000 Opmask04=00000000fffeffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe65dfda6b 00007ffe65dfda6b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe65dfdf70 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe65dfdf70 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3537312874696475 6120303034313d65 707974203a746964 7561205d30345400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3537312274636475 6120303034313765 7073742030746364 7561205730345400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e65756575716b72 6f772f6c656e7265 6b20746120353639 39203a4449502031 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d7265702074656b 636f735f74656e6f 68703d7373616c63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7420745f6d646173 79733a725f6d6461 7379733a746f6f72 3d747865746e6f63 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7420745f6d646173 79733a725f6d6461 7379733a746f6f72 3d747865746e6f63 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7320223531392e35 2e7a7973223d6d6d 6f63203634303031 3d6469702020726f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 723d747865746e6f 6373203835323933 3d6f6e6920227366 6b636f73223d7665 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000