last executing test programs: 3.757813077s ago: executing program 2 (id=752): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000240)="0f2058f00fabb150236766c7442400d44200006766c7442402a72b00006766c744240600000000670f011c24660f38803e9b00f30f090f1864196766c74424001800c0fe6766c744240201ffffff6766c744240600000000670f0114240f090f070f011b", 0x6c}], 0x1, 0x11, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r13 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r13, 0x29, 0xca, &(0x7f0000000280)={0x4, 0x0, 0x9, r12, 0x3}, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.480452356s ago: executing program 2 (id=759): prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@empty]}}}], 0x40}, 0x40010) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003440), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/115, 0xffffffffffffff47}], 0x1, 0x9, 0xcfc) 3.418365438s ago: executing program 2 (id=761): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="2bad36f5", 0x4}], 0x1) timer_create(0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 340.796367ms ago: executing program 1 (id=819): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000a18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000037000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000076000000bf91000000000000b7020000000000001400000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 339.265883ms ago: executing program 3 (id=820): socket$packet(0x11, 0xa, 0x300) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x3, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{}, {}, {0xeeee8000, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x1}, {0xdddd1000, 0x0, 0x0, 0x4, 0x1}, {0x0, 0x2, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x3e, 0x26}, {}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8080000}) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000040)) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x0, 0x4e22, r0, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x8000) syz_emit_ethernet(0x187, &(0x7f00000000c0)={@local, @broadcast, @val={@void, {0x8100, 0x6}}, {@ipv6={0x86dd, @tcp={0xd, 0x6, "7b8f10", 0x14d, 0x6, 0xff, @empty, @mcast2, {[@fragment={0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x64}, @fragment={0x73, 0x0, 0x9, 0x1, 0x0, 0x3, 0x64}, @routing={0x2f, 0x14, 0x0, 0x0, 0x0, [@remote, @private0, @loopback, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2a}, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x22}, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x1d, 0x0, 0x7f, 0x1, 0x0, 0xb, 0x65}], {{0x4e22, 0x4e21, r0, r4, 0x1, 0x0, 0x7, 0xc2, 0x6, 0x0, 0x9, {[@mss={0x2, 0x4, 0x2}, @sack_perm={0x4, 0x2}]}}, {"6760e8566e5629ba2c7a05b3be19b0202f381a717840bba75cafb27cb6cccc5024c53c2a00622d48e01a275289754b6ed2a6f2a4c5af10259dd647ba1fda8318822119620b6b0c935d7dcf6c1b0c8bfc1988b1c0c8c49af59b1cfd3aa6c3a1b8f1cec74fc8db9182fd4bb1ad49de822244"}}}}}}}, 0x0) 338.863023ms ago: executing program 1 (id=822): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001a000000bca300000000000024030000c0feffff620af0fff8ffffff71a4f2ff000018001f03000000000000e5000200000000002604fdffff02000014010000030000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 338.763861ms ago: executing program 0 (id=823): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 337.94213ms ago: executing program 1 (id=824): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32, @ANYBLOB="0417000000000000000022100000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400"/28], 0x50) fsopen(&(0x7f0000000000)='msdos\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x17, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x767, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb1b}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000200)={0x0, 0x2, 0x1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000580), 0x0, 0x21, &(0x7f0000000300), 0x2e, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x9c, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540)={r2}, 0x4) 270.436003ms ago: executing program 0 (id=825): socket(0x15, 0x5, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="1e", 0x1}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000f80)="a1", 0x1}], 0x1}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000016fcd6d13f8bc4ad41cb652f24001a0001000000000000000000020000000002000000"], 0x1c}}, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000900)) sendmsg$802154_dgram(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001200)=@nat={'nat\x00', 0x2, 0x5, 0x540, 0x298, 0x388, 0xffffffff, 0x298, 0xf0, 0x470, 0x470, 0xffffffff, 0x470, 0x470, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [0x0, 0xffffff00], [], 'dvmrp0\x00', 'veth1_macvtap\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x16, @ipv6=@private0, @ipv4=@local, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ipv6={@dev, @empty, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@remote, [], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}, @ipv6=@empty, @icmp_id=0x67, @port=0x4e21}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x11, @ipv6=@mcast1, @ipv6=@local, @port=0x4e21, @gre_key=0xb}}}, {{@ipv6={@mcast2, @private2, [0x0, 0x0, 0xffff00], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0xc4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000480)={r4, 0x9, 0x0, [0xfffffffffffffffb, 0xd2ce, 0x76c, 0x55, 0x24ee], [0x80, 0x80000001, 0x9, 0xb, 0x1, 0x4, 0x100, 0x2, 0x7fffffffffffffff, 0x8, 0x80, 0xfffffffffffffffc, 0xfffffffffffff63a, 0x1ff, 0x3, 0xec9a, 0x1ff, 0xfffffffffffffff8, 0x8e, 0x7, 0x8, 0x400, 0xfffffffffffffff8, 0xce7, 0x2, 0x7, 0x83, 0xe, 0x1, 0x8, 0x8, 0x9, 0x9b, 0x9, 0x4, 0xf52a, 0x0, 0x80000000, 0x4, 0x830, 0xfef, 0xfffffffffffffffb, 0x1ff, 0x7fffffff, 0xff, 0x2, 0x5, 0x7f, 0xffffffffffffdad6, 0x401, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x0, 0xbd, 0x8, 0x5, 0x1, 0x7, 0xffffffff, 0x200, 0x38d, 0x6, 0x400, 0x25c5, 0x48e, 0xe, 0xffffffff7fffffff, 0x100000001, 0x4, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0xffffffffffff0000, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0xb0, 0x6000000000000000, 0x8, 0x80000001, 0xf, 0x8000000000000001, 0x2, 0xfffffffffffffc01, 0x6a50, 0x7, 0xfffffffffffffffd, 0xb229, 0x40, 0x1d0, 0x4, 0x3aa1, 0x101, 0x800, 0xfffffffffffff49b, 0xd23a, 0x6, 0x80000001, 0x100000001, 0x50, 0x5, 0x274, 0xffffffffffffffec, 0x1, 0xffffffff, 0xf1, 0x80, 0x1, 0x9, 0x2, 0x8, 0x7, 0x8c, 0xdc4, 0x9, 0x8, 0x5, 0x7d]}) getsockopt(r3, 0x200000000114, 0x271e, &(0x7f0000019580)=""/102398, &(0x7f0000000040)=0x18ffe) 270.279921ms ago: executing program 1 (id=826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40800) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="671d00000000fbdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000c008f0001000000000000000c009000a700000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000) 269.876628ms ago: executing program 1 (id=827): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r3, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_GET_CPUID(0x1e, r4, 0x0, 0x1011) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749bc}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r5, 0x0, 0x81, 0xf80, &(0x7f0000000700)="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", 0x4}) 244.212144ms ago: executing program 3 (id=828): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) (fail_nth: 7) 243.140109ms ago: executing program 1 (id=829): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r0}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$dsp(r2, &(0x7f0000000300)="55ac", 0x2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x400, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}, @address_reply}}}}, 0x0) 128.163141ms ago: executing program 2 (id=830): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2810000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x0, 0x200000000000000}, 0x0) 81.547359ms ago: executing program 0 (id=831): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r1, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}]}}}]}, 0x3c}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000000c0)={@private=0xa010100, @loopback, @loopback}, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000008c0)={0x104, 0x0, 0x40c, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0xfffffffffffffdeb, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa23}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4048010}, 0x4004080) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000000c0)='fd', 0x0, r3) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000000)='fd', 0x0, r3) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f0000000100)) 80.107249ms ago: executing program 3 (id=832): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000d18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000037000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000076000000bf91000000000000b7020000000000001400000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 77.728595ms ago: executing program 2 (id=833): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 77.608987ms ago: executing program 3 (id=834): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x83d79f1e8021ba05, 0x70bd28, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 75.746601ms ago: executing program 0 (id=835): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x10, 0x80002, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000280)={0x28, 0xe, r5, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x1, 0x0, 0xa, 0x261663, 0x1000249801}) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async, rerun: 64) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x5, 0x80}) (async) r8 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x2a55, 0x80, 0x1, 0x30a}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000580)="0f01c9baf80c66b89c98ed8466efbafc0ced660f38de3d0f08baf80c66b8fcc2d88766efbafc0c66b8c437000066ef66b9800000c00f326635000800000f3066b9800000c00f326635001000000f3066b9230b00000f3266b9800000c00f326635000100000f30ba2000ed", 0x6b}], 0x1, 0x74, 0x0, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x343bc0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r14 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r14, 0x2203, &(0x7f00000001c0)={0xa3, 0x16, 0x42, 0xff}) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x4, &(0x7f0000000380)=[{0x8ebb, 0x0, 0x0, 0x4}, {0x3, 0x18, 0x0, 0x9}, {0x6, 0xec, 0x5, 0x6}, {0x6, 0x88, 0x10, 0x1}]}, 0x10) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, r10, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x10001, &(0x7f0000000100)=[r2, r6, r3, r2, r2, r8, r0, r3], 0x8, 0x0, 0x1}) (rerun: 32) io_uring_enter(r8, 0x47bc, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r4, @ANYRES32, @ANYRES64, @ANYRES16=r1, @ANYRES64=r0], 0x44}}, 0x40000) 75.478898ms ago: executing program 2 (id=836): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000680)={0x1, 0x101, 0x4, {0x0, 0xb, 0x0, 0x287f}}) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = memfd_create(&(0x7f0000000680)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x0) write(r5, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000032240)=""/102400, 0x19000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="d4120000", @ANYRES16=r6, @ANYBLOB="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"], 0x12d4}, 0x1, 0x0, 0x0, 0x90}, 0x8008) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r7, 0x4100}], 0x1, 0x1) recvmsg(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000001480)=""/138, 0x8a}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f0000001540)=""/112, 0x70}, {&(0x7f00000015c0)=""/97, 0x61}, {&(0x7f00000041c0)=""/4096, 0x1000}], 0x6, &(0x7f00000016c0)=""/253, 0xfd}, 0x0) 1.095571ms ago: executing program 3 (id=837): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x0, "08000000000000000000000000000000000000b582000000010000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x1000000000000c, 0x2) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000000)={0x2}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000080)={"000c00816800df00"}) 634.685µs ago: executing program 0 (id=838): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) mmap$KVM_VCPU(&(0x7f0000b8b000/0x3000)=nil, 0x930, 0x300000b, 0x12, r0, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58) open(&(0x7f0000000100)='.\x00', 0x5d5481, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x10) 387.143µs ago: executing program 0 (id=839): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x1) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4006, 0x5, 0xffffffff, 0x200}, 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000001600156f00000600000000000000000034"], 0x18}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000023c0)=ANY=[@ANYBLOB="98000000100005ff00000000fcdbdf2500778f93", @ANYRES32=0x0, @ANYBLOB="0180000000000000480012800b00010062726964676500003800028005002d000000000008001a00ff070000050017000000000006000900ffff00000c002000090000000000000008000400ff0300000a0001"], 0x98}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x0, 0x10, 0xffffffffffffffff, 0x401}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000300)={0x6, 0x0, 0x6, 0xffff, r7}, &(0x7f0000000440)=0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x2080, 0xcb) mkdirat(r9, &(0x7f0000000200)='./file0\x00', 0x8) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000080000000", @ANYRES16=0x0, @ANYRES32], 0x48) r10 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r10, 0xc008640a, &(0x7f0000000180)) (async) sendmsg$DEVLINK_CMD_PORT_SPLIT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="4200000012c6d49d2935df07b57569352101bb6000f42c4814b8ff24a3e933b27d0bc1c94f69d8106803b645fda0790d6f41922af57a5ef243e9ae37fc94e964238730e28b717baca57f2d7202d62b71d6f1dc891cc82d0fd045c29d99cfe5a8c93e5e00c68ab3d3931d10ea87b6f732c43386a3feda00e52eb93eadcc6076328d8de7", @ANYRES8=r9, @ANYBLOB="01000000000000000000090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000800090000000000f8455d7da9d32573f3c0a2a87bcb0c18bc6576afa253226a3fca122addf0ae98814a6b76e77e209a942a8664855e52e6c6331ed65faf7f0624bd", @ANYBLOB="36ceac4ef02a783f7cf1f52c442e4c883931ae083fa263f9df31bea50495f51897710ad593ef0ebffe11db5be4eaa1886acbab4b798f431b5071e9c24c122e4583028cdd155d74e8cf9409f75d5a56076d963c5e571320ec2a76be6f96d4ec1ef2c8c2d8654b86c059ec934a058721f132e578c9e04698b05d5c1626bc45195010844968f30f62a02c6039fcc63f798cab50deb10c7b300a8b93e1f65ebb39f20e450545b21b63e08f58af002db9127990ee12090e5d0f9370e8554726d82dc732dc3d0a013f162e069dfaa80d12053a97", @ANYBLOB="f6aeccad370fc08cb0e8a0982a59fc7c1ba63bd34cc8e5a108df1e2808631dd5f60aff3db77254795819e441164bf097202fd38b49c5c6cf6f5eeb244bcbb71072775a5bafee6ca2d1c35cbe8a0f"], 0x44}, 0x1, 0x0, 0x0, 0xc880}, 0x0) (async, rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002abd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="2a777735de684ec51a208447f56d89ea9c02aa2aa702d3bc7a6dffdc8c1eda5b03945e0621e73b21a477f3cb317299d62452c7563608eec68ead7d3a760781d4db27a761"], 0x3c}}, 0x20048880) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r6, 0x0, 0x8, 0x0, 0x0, [], [0x0, 0x7], [0x0, 0x0, 0x2], [0x0, 0x0, 0x1, 0x1]}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=840): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000000680)='net\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004101, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r3, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0xfcf6}], 0x1}}], 0x1, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000480)=""/223, 0xdf) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) sendto$inet6(r1, 0x0, 0x0, 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x6, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000000)=0x7bb3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r10, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r11}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="98000000", @ANYRES16=r8, @ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="56000e00800000000802110000000802110000000802110000010000000000000000000064000100000001003c040196386d2d1a0200110400000000000000080002000c00000001000200000007760605093f00ffff000008000e8004000100080026006c0900000c001b80050001000300000008000d0065790000"], 0x98}}, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000300)={0x3, 0x0, [{0x9de, 0x0, 0x3}, {0x3ac, 0x0, 0x5}, {0x1a6, 0x0, 0xb9}]}) kernel console output (not intermixed with test programs): ate [ 46.004856][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.007474][ T5937] bridge_slave_0: entered allmulticast mode [ 46.010482][ T5937] bridge_slave_0: entered promiscuous mode [ 46.022455][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.024494][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.026519][ T5940] bridge_slave_1: entered allmulticast mode [ 46.028711][ T5940] bridge_slave_1: entered promiscuous mode [ 46.046404][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.048432][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.050427][ T5937] bridge_slave_1: entered allmulticast mode [ 46.052702][ T5937] bridge_slave_1: entered promiscuous mode [ 46.126038][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.131493][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.139417][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 46.146996][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.151697][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.237824][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.240546][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.243499][ T5950] bridge_slave_0: entered allmulticast mode [ 46.246624][ T5950] bridge_slave_0: entered promiscuous mode [ 46.250777][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.255455][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.258117][ T5950] bridge_slave_1: entered allmulticast mode [ 46.261229][ T5950] bridge_slave_1: entered promiscuous mode [ 46.283621][ T5937] team0: Port device team_slave_0 added [ 46.286993][ T5940] team0: Port device team_slave_0 added [ 46.314361][ T5937] team0: Port device team_slave_1 added [ 46.316827][ T5940] team0: Port device team_slave_1 added [ 46.383851][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.403378][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.405340][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.412466][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.417960][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.420673][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.430559][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.460876][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.475074][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.476936][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.484124][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.487538][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.489888][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.499781][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.504388][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.506421][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.508372][ T5936] bridge_slave_0: entered allmulticast mode [ 46.510639][ T5936] bridge_slave_0: entered promiscuous mode [ 46.537335][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.539316][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.541382][ T5936] bridge_slave_1: entered allmulticast mode [ 46.543603][ T5936] bridge_slave_1: entered promiscuous mode [ 46.548313][ T5950] team0: Port device team_slave_0 added [ 46.551482][ T5950] team0: Port device team_slave_1 added [ 46.629590][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.632391][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.639309][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.643877][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.669998][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.673500][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.680482][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.685698][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.690261][ T5940] hsr_slave_0: entered promiscuous mode [ 46.692314][ T5940] hsr_slave_1: entered promiscuous mode [ 46.696371][ T5937] hsr_slave_0: entered promiscuous mode [ 46.698286][ T5937] hsr_slave_1: entered promiscuous mode [ 46.700025][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.702938][ T5937] Cannot create hsr debugfs directory [ 46.733993][ T5936] team0: Port device team_slave_0 added [ 46.737102][ T5936] team0: Port device team_slave_1 added [ 46.808121][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.810100][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.818218][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.825351][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.827881][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.836940][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.910637][ T5950] hsr_slave_0: entered promiscuous mode [ 46.913457][ T5950] hsr_slave_1: entered promiscuous mode [ 46.915597][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.918246][ T5950] Cannot create hsr debugfs directory [ 46.970658][ T5936] hsr_slave_0: entered promiscuous mode [ 46.973867][ T5936] hsr_slave_1: entered promiscuous mode [ 46.975790][ T5936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.977943][ T5936] Cannot create hsr debugfs directory [ 47.196032][ T5937] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.204176][ T5937] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.207750][ T5937] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.215736][ T5937] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.239785][ T5940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.244261][ T5940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.248097][ T5940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.252017][ T5940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.282544][ T5950] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.286855][ T5950] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.294419][ T5950] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.307212][ T5950] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.349275][ T5936] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.356806][ T5936] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.362745][ T5936] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.366510][ T5936] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.406717][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.445271][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.452856][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.466572][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.469316][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.483218][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.486043][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.493237][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.500987][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.511040][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.513237][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.530696][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.532906][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.545565][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.556021][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.571031][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.573579][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.582625][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.593256][ T1065] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.595786][ T1065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.610503][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.612579][ T68] Bluetooth: hci0: command tx timeout [ 47.612988][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.621272][ T68] Bluetooth: hci2: command tx timeout [ 47.625991][ T5940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.633432][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.635557][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.692364][ T68] Bluetooth: hci3: command tx timeout [ 47.692378][ T5951] Bluetooth: hci1: command tx timeout [ 47.711647][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.743884][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.750551][ T5937] veth0_vlan: entered promiscuous mode [ 47.758132][ T5937] veth1_vlan: entered promiscuous mode [ 47.786343][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.791055][ T5937] veth0_macvtap: entered promiscuous mode [ 47.797979][ T5937] veth1_macvtap: entered promiscuous mode [ 47.803924][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.824840][ T5940] veth0_vlan: entered promiscuous mode [ 47.829833][ T5940] veth1_vlan: entered promiscuous mode [ 47.833750][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.843422][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.850026][ T5937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.854094][ T5937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.857415][ T5937] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.860733][ T5937] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.897554][ T5936] veth0_vlan: entered promiscuous mode [ 47.899369][ T5950] veth0_vlan: entered promiscuous mode [ 47.916556][ T5940] veth0_macvtap: entered promiscuous mode [ 47.919758][ T5950] veth1_vlan: entered promiscuous mode [ 47.922349][ T5936] veth1_vlan: entered promiscuous mode [ 47.930263][ T5940] veth1_macvtap: entered promiscuous mode [ 47.945322][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.947529][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.969465][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.973322][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.976623][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.979939][ T5950] veth0_macvtap: entered promiscuous mode [ 47.983805][ T5936] veth0_macvtap: entered promiscuous mode [ 47.988165][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.988379][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.990210][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.993689][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.998750][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.002204][ T5936] veth1_macvtap: entered promiscuous mode [ 48.007425][ T5950] veth1_macvtap: entered promiscuous mode [ 48.014696][ T5940] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.017155][ T5940] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.019527][ T5940] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.022872][ T5940] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.032723][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.035622][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.038278][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.041571][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.044914][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.051763][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.054662][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.057347][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.060210][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.063563][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.066444][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.067489][ T5937] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.069842][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.078255][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.081261][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.083928][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.086714][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.090004][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.096196][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.099107][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.102165][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.105030][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.107730][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.110619][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.114385][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.127420][ T5950] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.129835][ T5950] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.132541][ T5950] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.134881][ T5950] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.138409][ T5936] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.140706][ T5936] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.143720][ T5936] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.146022][ T5936] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.166784][ T6001] tipc: Started in network mode [ 48.167144][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.168211][ T6001] tipc: Node identity 7f000001, cluster identity 4711 [ 48.171025][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.175532][ T6001] tipc: Enabled bearer , priority 10 [ 48.207093][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.209326][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.235184][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.235943][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.239671][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.240107][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.274773][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.275261][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.277023][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.283613][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.358128][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 48.376124][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'. [ 48.384273][ T6018] program syz.2.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.448782][ T5951] Bluetooth: hci1: hardware error 0xff [ 48.457723][ T6032] ieee802154 phy0 wpan0: encryption failed: -22 [ 48.517898][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 48.520221][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 48.551812][ T6043] sctp: [Deprecated]: syz.0.12 (pid 6043) Use of struct sctp_assoc_value in delayed_ack socket option. [ 48.551812][ T6043] Use struct sctp_sack_info instead [ 48.557412][ T6043] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12'. [ 48.560269][ T6043] netlink: 124 bytes leftover after parsing attributes in process `syz.0.12'. [ 48.563854][ T6043] ======================================================= [ 48.563854][ T6043] WARNING: The mand mount option has been deprecated and [ 48.563854][ T6043] and is ignored by this kernel. Remove the mand [ 48.563854][ T6043] option from the mount to silence this warning. [ 48.563854][ T6043] ======================================================= [ 48.685318][ T6066] sp0: Synchronizing with TNC [ 48.699050][ T6065] [U] ` [ 48.725649][ T6069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=6069 comm=syz.3.20 [ 48.789069][ T6074] netlink: 'syz.3.20': attribute type 16 has an invalid length. [ 48.791973][ T6074] netlink: 'syz.3.20': attribute type 17 has an invalid length. [ 48.798298][ T6074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 48.988757][ T6088] ip6erspan0: entered promiscuous mode [ 48.996606][ T6088] netlink: 48 bytes leftover after parsing attributes in process `syz.1.26'. [ 48.996633][ T6089] netlink: 48 bytes leftover after parsing attributes in process `syz.1.26'. [ 49.036170][ T6089] overlayfs: empty lowerdir [ 49.036314][ T6088] overlayfs: empty lowerdir [ 49.110134][ T6100] lo speed is unknown, defaulting to 1000 [ 49.113845][ T6100] lo speed is unknown, defaulting to 1000 [ 49.116166][ T6100] lo speed is unknown, defaulting to 1000 [ 49.196692][ T6100] infiniband syz2: set active [ 49.198611][ T5971] lo speed is unknown, defaulting to 1000 [ 49.200330][ T6100] infiniband syz2: added lo [ 49.213885][ T6105] netlink: 'syz.2.29': attribute type 1 has an invalid length. [ 49.217485][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 49.219269][ T6100] RDS/IB: syz2: added [ 49.221744][ T6100] smc: adding ib device syz2 with port count 1 [ 49.223480][ T6100] smc: ib device syz2 port 1 has pnetid [ 49.225688][ T5971] lo speed is unknown, defaulting to 1000 [ 49.227490][ T6100] lo speed is unknown, defaulting to 1000 [ 49.257544][ T6107] tipc: Started in network mode [ 49.259027][ T6107] tipc: Node identity 7f000001, cluster identity 4711 [ 49.262829][ T6107] tipc: Enabled bearer , priority 10 [ 49.301638][ T9] tipc: Node number set to 2130706433 [ 49.313096][ T6100] lo speed is unknown, defaulting to 1000 [ 49.376327][ T6100] lo speed is unknown, defaulting to 1000 [ 49.452875][ T6100] lo speed is unknown, defaulting to 1000 [ 49.701410][ T5945] Bluetooth: hci0: command tx timeout [ 49.703573][ T68] Bluetooth: hci2: command tx timeout [ 49.781350][ T68] Bluetooth: hci3: command tx timeout [ 50.030056][ T6155] syz.3.45 uses obsolete (PF_INET,SOCK_PACKET) [ 50.063027][ T6157] netfs: Couldn't get user pages (rc=-14) [ 50.074147][ T6157] rose0: entered allmulticast mode [ 50.079645][ T6159] 9pnet_virtio: no channels available for device syz [ 50.152622][ T6162] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.189389][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'. [ 50.258641][ T6184] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.261265][ T6184] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.377039][ T6200] tipc: Started in network mode [ 50.378448][ T6200] tipc: Node identity 7f000001, cluster identity 4711 [ 50.380578][ T6200] tipc: Enabled bearer , priority 10 [ 50.381926][ T5982] tipc: Node number set to 2130706433 [ 50.430762][ T40] kauditd_printk_skb: 142 callbacks suppressed [ 50.430773][ T40] audit: type=1400 audit(1743407976.287:257): avc: denied { setopt } for pid=6201 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.438754][ T40] audit: type=1400 audit(1743407976.297:258): avc: denied { create } for pid=6201 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.445881][ T40] audit: type=1400 audit(1743407976.307:259): avc: denied { ioctl } for pid=6201 comm="syz.0.58" path="socket:[7843]" dev="sockfs" ino=7843 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.458130][ T6205] raw_sendmsg: syz.3.59 forgot to set AF_INET. Fix it! [ 50.461513][ T40] audit: type=1400 audit(1743407976.317:260): avc: denied { setopt } for pid=6204 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.491566][ T5951] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 50.504133][ T40] audit: type=1400 audit(1743407976.367:261): avc: denied { mounton } for pid=6210 comm="syz.3.60" path="/11/file0" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.512170][ T40] audit: type=1400 audit(1743407976.377:262): avc: denied { append } for pid=6210 comm="syz.3.60" name="v4l-subdev4" dev="devtmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.549483][ T40] audit: type=1400 audit(1743407976.407:263): avc: denied { create } for pid=6214 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 50.555487][ T40] audit: type=1400 audit(1743407976.417:264): avc: denied { bind } for pid=6214 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 50.747294][ T40] audit: type=1400 audit(1743407976.607:265): avc: denied { write } for pid=6231 comm="syz.3.68" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.258812][ T40] audit: type=1400 audit(1743407977.117:266): avc: denied { read write } for pid=6236 comm="syz.0.70" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.261749][ T6237] input: syz1 as /devices/virtual/input/input5 [ 51.371385][ T1023] tipc: Node number set to 2130706433 [ 51.403207][ T6246] netlink: 'syz.0.74': attribute type 39 has an invalid length. [ 51.454719][ T6250] netlink: 'syz.0.74': attribute type 32 has an invalid length. [ 51.457244][ T6250] netlink: 'syz.0.74': attribute type 12 has an invalid length. [ 51.502736][ T6253] overlayfs: workdir and upperdir must be separate subtrees [ 51.772075][ T68] Bluetooth: hci0: command tx timeout [ 51.773076][ T5951] Bluetooth: hci2: command tx timeout [ 51.851386][ T5951] Bluetooth: hci3: command tx timeout [ 51.988565][ T6276] xt_hashlimit: size too large, truncated to 1048576 [ 51.990411][ T6276] xt_hashlimit: max too large, truncated to 1048576 [ 52.035160][ T6276] netlink: 'syz.1.85': attribute type 25 has an invalid length. [ 52.064352][ T6288] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 52.067361][ T6288] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 52.087893][ T6291] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.363431][ T6312] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6312 comm=syz.2.99 [ 52.642219][ T5979] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 52.691147][ T65] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.814216][ T5979] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 52.817294][ T5979] usb 5-1: config 0 has no interface number 0 [ 52.821387][ T5979] usb 5-1: New USB device found, idVendor=145f, idProduct=013a, bcdDevice= 5.86 [ 52.824711][ T5979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.827659][ T5979] usb 5-1: Product: syz [ 52.829216][ T5979] usb 5-1: Manufacturer: syz [ 52.831516][ T5979] usb 5-1: SerialNumber: syz [ 52.836931][ T5979] usb 5-1: config 0 descriptor?? [ 52.842786][ T5979] gspca_main: pac207-2.14.0 probing 145f:013a [ 52.853573][ T65] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 52.855964][ T65] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 52.858729][ T65] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 52.861725][ T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 52.864658][ T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 52.868616][ T65] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 52.871010][ T65] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 52.873203][ T65] usb 7-1: Product: syz [ 52.874345][ T65] usb 7-1: Manufacturer: syz [ 52.879450][ T65] cdc_wdm 7-1:1.0: skipping garbage [ 52.880900][ T65] cdc_wdm 7-1:1.0: skipping garbage [ 52.884384][ T65] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 52.886056][ T65] cdc_wdm 7-1:1.0: Unknown control protocol [ 52.962201][ T5979] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 53.060790][ T65] usb 5-1: USB disconnect, device number 2 [ 53.095626][ T6328] lo speed is unknown, defaulting to 1000 [ 53.138635][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 53.139022][ T837] usb 7-1: USB disconnect, device number 2 [ 53.140873][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 53.144298][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 53.307482][ T6343] dccp_invalid_packet: invalid packet type [ 53.414980][ T6346] netlink: 'syz.1.108': attribute type 33 has an invalid length. [ 53.447993][ T6348] program syz.1.109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.525907][ T6353] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 53.530970][ T6353] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 53.821912][ T6355] kvm: pic: level sensitive irq not supported [ 53.829828][ T6355] kvm: pic: single mode not supported [ 53.831778][ T6355] kvm: pic: level sensitive irq not supported [ 53.839874][ T6355] kvm: pic: single mode not supported [ 53.841671][ T6355] kvm: pic: level sensitive irq not supported [ 53.845991][ T6355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=6355 comm=syz.3.112 [ 53.861726][ T5951] Bluetooth: hci2: command tx timeout [ 53.861822][ T68] Bluetooth: hci0: command tx timeout [ 53.918454][ T6361] program syz.0.113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.941509][ T68] Bluetooth: hci3: command tx timeout [ 53.981861][ T6373] use of bytesused == 0 is deprecated and will be removed in the future, [ 53.984288][ T6373] use the actual size instead. [ 54.025842][ T6378] netlink: 'syz.2.119': attribute type 39 has an invalid length. [ 54.173279][ T6388] __nla_validate_parse: 10 callbacks suppressed [ 54.173289][ T6388] netlink: 165 bytes leftover after parsing attributes in process `syz.0.124'. [ 54.303856][ T6392] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 54.303856][ T6392] The task syz.0.125 (6392) triggered the difference, watch for misbehavior. [ 54.365459][ T6394] mmap: syz.2.126 (6394) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.520805][ T6398] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 54.524061][ T6398] SELinux: failed to load policy [ 54.584416][ T6413] futex_wake_op: syz.1.134 tries to shift op by 32; fix this program [ 54.614164][ T6416] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 54.675294][ T6416] team0 (unregistering): Port device team_slave_0 removed [ 54.683349][ T6416] team0 (unregistering): Port device team_slave_1 removed [ 54.874892][ T6436] program syz.3.139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.904123][ T6441] autofs4:pid:6441:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294934528.1), cmd(0xc0189374) [ 54.907852][ T6441] autofs4:pid:6441:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 54.955188][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 54.966504][ T6443] random: crng reseeded on system resumption [ 55.254914][ T6461] capability: warning: `syz.2.150' uses deprecated v2 capabilities in a way that may be insecure [ 55.328491][ T6463] input: syz0 as /devices/virtual/input/input6 [ 55.458468][ T65] kernel read not supported for file /zero (pid: 65 comm: kworker/3:2) [ 55.464626][ T40] kauditd_printk_skb: 107 callbacks suppressed [ 55.464637][ T40] audit: type=1400 audit(1743407981.327:374): avc: denied { read write } for pid=6478 comm="syz.2.156" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.472568][ T40] audit: type=1400 audit(1743407981.327:375): avc: denied { open } for pid=6478 comm="syz.2.156" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.487546][ T6483] capability: warning: `syz.2.158' uses 32-bit capabilities (legacy support in use) [ 55.511028][ T6487] Zero length message leads to an empty skb [ 55.538924][ T40] audit: type=1400 audit(1743407981.397:376): avc: denied { setopt } for pid=6490 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.545458][ T40] audit: type=1400 audit(1743407981.397:377): avc: denied { connect } for pid=6490 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.550911][ T40] audit: type=1400 audit(1743407981.397:378): avc: denied { write } for pid=6490 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.589950][ T40] audit: type=1400 audit(1743407981.447:379): avc: denied { execute } for pid=6493 comm="syz.0.162" path=2F6D656D66643A70726F644DB0EA0706BEAE6E2FCE34B7C1EFBA219D0D5374A23409202864656C6574656429 dev="hugetlbfs" ino=10162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 55.602392][ T6489] gtp0: entered promiscuous mode [ 55.611975][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 55.669217][ T6500] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.779233][ T40] audit: type=1400 audit(1743407981.637:380): avc: denied { open } for pid=6514 comm="syz.0.169" path="/dev/ptyq5" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 55.782917][ T6515] netlink: 60 bytes leftover after parsing attributes in process `syz.0.169'. [ 55.788582][ T40] audit: type=1400 audit(1743407981.647:381): avc: denied { write } for pid=6514 comm="syz.0.169" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.799346][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 55.802810][ T6516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6516 comm=syz.0.169 [ 55.852541][ T6523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.171'. [ 55.855223][ T6524] netlink: 28 bytes leftover after parsing attributes in process `syz.1.171'. [ 55.950343][ T40] audit: type=1400 audit(1743407981.807:382): avc: denied { setopt } for pid=6533 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.124737][ T6544] warning: `syz.1.178' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 56.159573][ T40] audit: type=1400 audit(1743407982.017:383): avc: denied { ioctl } for pid=6549 comm="syz.1.180" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 56.334574][ T6567] syz_tun: entered allmulticast mode [ 56.405217][ T6566] syz_tun: left allmulticast mode [ 56.564724][ T6578] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 56.602202][ T6577] syz.2.189: attempt to access beyond end of device [ 56.602202][ T6577] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 56.606128][ T6577] XFS (nbd2): SB validate failed with error -5. [ 56.654209][ T6589] usb 1-1: USB disconnect, device number 2 [ 57.180161][ T6622] program syz.0.202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.340871][ T5971] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.491444][ T5971] usb 6-1: Using ep0 maxpacket: 8 [ 57.494073][ T5971] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 57.496328][ T5971] usb 6-1: config 0 has no interface number 0 [ 57.498258][ T5971] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 57.502140][ T5971] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 57.505328][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.509299][ T5971] usb 6-1: config 0 descriptor?? [ 57.513827][ T5971] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 57.863946][ T6645] xt_l2tp: unknown flags: 17 [ 58.358519][ T68] block nbd0: Receive control failed (result -32) [ 58.359135][ T6634] block nbd0: shutting down sockets [ 58.505335][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'. [ 58.576380][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.583935][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.639752][ T6655] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.642448][ T6655] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.644945][ T6655] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.647393][ T6655] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.734744][ T5982] usb 6-1: USB disconnect, device number 2 [ 58.750302][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'. [ 58.963029][ T6695] 9pnet_fd: p9_fd_create_tcp (6695): problem binding to privport [ 59.221213][ T5971] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 59.361291][ T5971] usb 7-1: device descriptor read/64, error -71 [ 59.410560][ T6706] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 59.413946][ T6706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.228'. [ 59.582338][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'. [ 59.612790][ T5971] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 59.741181][ T5971] usb 7-1: device descriptor read/64, error -71 [ 59.851959][ T5971] usb usb7-port1: attempt power cycle [ 59.881696][ T6723] lo speed is unknown, defaulting to 1000 [ 60.202809][ T6727] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 60.211706][ T5971] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 60.241970][ T5971] usb 7-1: device descriptor read/8, error -71 [ 60.316124][ T6730] evm: overlay not supported [ 60.360239][ T6732] ieee802154 phy0 wpan0: encryption failed: -22 [ 60.394637][ T6736] Bluetooth: MGMT ver 1.23 [ 60.481193][ T5971] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 60.487242][ T6739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.490086][ T65] hid-generic 0005:00C6:5505.0002: unknown main item tag 0x0 [ 60.492715][ T65] hid-generic 0005:00C6:5505.0002: unknown main item tag 0x0 [ 60.494724][ T65] hid-generic 0005:00C6:5505.0002: unknown main item tag 0x0 [ 60.498928][ T65] hid-generic 0005:00C6:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 60.511546][ T5971] usb 7-1: device descriptor read/8, error -71 [ 60.534248][ T40] kauditd_printk_skb: 63 callbacks suppressed [ 60.534257][ T40] audit: type=1400 audit(1743407986.397:447): avc: denied { read } for pid=6754 comm="syz.0.243" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 60.542105][ T40] audit: type=1400 audit(1743407986.397:448): avc: denied { open } for pid=6754 comm="syz.0.243" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 60.548353][ T40] audit: type=1400 audit(1743407986.397:449): avc: denied { ioctl } for pid=6754 comm="syz.0.243" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 60.555428][ T40] audit: type=1400 audit(1743407986.397:450): avc: denied { create } for pid=6754 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 60.622080][ T5971] usb usb7-port1: unable to enumerate USB device [ 60.856496][ T40] audit: type=1400 audit(1743407986.717:451): avc: denied { write } for pid=6772 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.862210][ T40] audit: type=1400 audit(1743407986.717:452): avc: denied { accept } for pid=6772 comm="syz.1.247" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.179910][ T40] audit: type=1400 audit(1743407987.037:453): avc: denied { write } for pid=6793 comm="syz.1.253" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 61.186727][ T40] audit: type=1400 audit(1743407987.037:454): avc: denied { open } for pid=6793 comm="syz.1.253" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 61.193202][ T40] audit: type=1400 audit(1743407987.037:455): avc: denied { getopt } for pid=6793 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.199644][ T40] audit: type=1400 audit(1743407987.057:456): avc: denied { search } for pid=5335 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.214768][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'. [ 61.218062][ T6799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.254'. [ 61.270045][ T6803] syz.1.255: attempt to access beyond end of device [ 61.270045][ T6803] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 61.275970][ T6803] syz.1.255: attempt to access beyond end of device [ 61.275970][ T6803] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 61.394589][ T6817] bridge0: port 3(veth0_to_bridge) entered blocking state [ 61.396606][ T6817] bridge0: port 3(veth0_to_bridge) entered disabled state [ 61.398625][ T6817] veth0_to_bridge: entered allmulticast mode [ 61.400798][ T6817] veth0_to_bridge: entered promiscuous mode [ 61.409543][ T9] IPVS: starting estimator thread 0... [ 61.428444][ T6819] 9pnet: Could not find request transport: fOЇ d [ 61.511521][ T6820] IPVS: using max 46 ests per chain, 110400 per kthread [ 61.554155][ T68] Bluetooth: Wrong link type (-22) [ 61.572125][ T6320] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.585920][ T6845] netlink: 'syz.3.265': attribute type 10 has an invalid length. [ 61.588544][ T6843] netlink: 'syz.3.265': attribute type 10 has an invalid length. [ 61.609868][ T6845] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 61.710814][ T6859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.270'. [ 61.716243][ T6859] netlink: 'syz.3.270': attribute type 1 has an invalid length. [ 61.720795][ T6859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.270'. [ 61.724857][ T6320] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.727826][ T6320] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 61.730646][ T6320] usb 6-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 61.745618][ T6320] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.748360][ T6320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.750776][ T6320] usb 6-1: Product: syz [ 61.761307][ T6320] usb 6-1: Manufacturer: syz [ 61.762635][ T6320] usb 6-1: SerialNumber: syz [ 61.798527][ T6868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.275'. [ 61.924835][ T6885] netlink: 24 bytes leftover after parsing attributes in process `syz.3.280'. [ 61.996967][ T6320] cdc_mbim 6-1:1.0: bind() failure [ 62.014938][ T6320] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 62.017097][ T6320] cdc_ncm 6-1:1.1: bind() failure [ 62.026984][ T6320] usb 6-1: USB disconnect, device number 3 [ 62.076375][ T6902] netlink: 165 bytes leftover after parsing attributes in process `syz.2.286'. [ 62.110163][ T6907] syz_tun: entered allmulticast mode [ 62.120022][ T6907] syz_tun: left allmulticast mode [ 62.146174][ T6914] netlink: 'syz.1.290': attribute type 10 has an invalid length. [ 62.148355][ T6914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.290'. [ 62.152403][ T6914] dummy0: entered promiscuous mode [ 62.154204][ T6914] bridge0: port 3(dummy0) entered blocking state [ 62.156014][ T6914] bridge0: port 3(dummy0) entered disabled state [ 62.157840][ T6914] dummy0: entered allmulticast mode [ 62.170127][ T6914] bridge0: port 3(dummy0) entered blocking state [ 62.172011][ T6914] bridge0: port 3(dummy0) entered forwarding state [ 62.319226][ T6952] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 62.399352][ T6962] loop6: detected capacity change from 0 to 524287999 [ 62.406248][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.408924][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.411863][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.414368][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.417244][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.419817][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.423457][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.425988][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.428226][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.430759][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.433356][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.435817][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.438350][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.440881][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.444364][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.446897][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.449627][ T6962] ldm_validate_partition_table(): Disk read failed. [ 62.452559][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.455078][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.457419][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.460024][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.512272][ T6962] Dev loop6: unable to read RDB block 0 [ 62.573376][ T6962] loop6: unable to read partition table [ 62.583056][ T6976] tmpfs: Cannot enable quota on remount [ 62.584447][ T6962] loop_reread_partitions: partition scan of loop6 (17dÈ1)+df`BYX+/ [ 68.611054][ T7374] dump_stack_lvl+0x16c/0x1f0 [ 68.611115][ T7374] should_fail_ex+0x512/0x640 [ 68.611144][ T7374] _copy_from_user+0x2e/0xd0 [ 68.611173][ T7374] move_addr_to_kernel+0x65/0x170 [ 68.611192][ T7374] __sys_sendto+0x1be/0x510 [ 68.611211][ T7374] ? __pfx___sys_sendto+0x10/0x10 [ 68.611249][ T7374] ? ksys_write+0x1b9/0x240 [ 68.611269][ T7374] ? __pfx_ksys_write+0x10/0x10 [ 68.611287][ T7374] ? rcu_is_watching+0x12/0xc0 [ 68.611311][ T7374] __x64_sys_sendto+0xe0/0x1c0 [ 68.611329][ T7374] ? do_syscall_64+0x91/0x260 [ 68.611350][ T7374] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.611371][ T7374] do_syscall_64+0xcd/0x260 [ 68.611396][ T7374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.611412][ T7374] RIP: 0033:0x7f083b58d169 [ 68.611425][ T7374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.611439][ T7374] RSP: 002b:00007f083c469038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 68.611454][ T7374] RAX: ffffffffffffffda RBX: 00007f083b7a5fa0 RCX: 00007f083b58d169 [ 68.611463][ T7374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 68.611472][ T7374] RBP: 00007f083c469090 R08: 0000200000b63fe4 R09: 000000000000001c [ 68.611481][ T7374] R10: 0000000020000004 R11: 0000000000000246 R12: 0000000000000001 [ 68.611490][ T7374] R13: 0000000000000000 R14: 00007f083b7a5fa0 R15: 00007ffd7a0bbb68 [ 68.611512][ T7374] [ 69.317336][ T7391] openvswitch: netlink: Key type 7684 is out of range max 32 [ 69.351765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.740131][ T7413] FAULT_INJECTION: forcing a failure. [ 69.740131][ T7413] name failslab, interval 1, probability 0, space 0, times 1 [ 69.744725][ T7413] CPU: 2 UID: 0 PID: 7413 Comm: syz.2.457 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 69.744740][ T7413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.744746][ T7413] Call Trace: [ 69.744750][ T7413] [ 69.744754][ T7413] dump_stack_lvl+0x16c/0x1f0 [ 69.744773][ T7413] should_fail_ex+0x512/0x640 [ 69.744786][ T7413] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 69.744814][ T7413] should_failslab+0xc2/0x120 [ 69.744832][ T7413] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 69.744847][ T7413] ? __alloc_skb+0x2b2/0x380 [ 69.744863][ T7413] __alloc_skb+0x2b2/0x380 [ 69.744876][ T7413] ? __pfx___alloc_skb+0x10/0x10 [ 69.744890][ T7413] ? tcp_chrono_stop+0x95/0x420 [ 69.744905][ T7413] tcp_stream_alloc_skb+0x34/0x570 [ 69.744917][ T7413] tcp_connect+0xe75/0x5480 [ 69.744936][ T7413] ? __pfx_tcp_connect+0x10/0x10 [ 69.744948][ T7413] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 69.744968][ T7413] ? inet6_hash_connect+0xe2/0x180 [ 69.744984][ T7413] tcp_v6_connect+0x155a/0x2150 [ 69.744998][ T7413] ? __pfx_stack_trace_save+0x10/0x10 [ 69.745016][ T7413] ? __pfx_tcp_v6_connect+0x10/0x10 [ 69.745030][ T7413] ? kasan_save_stack+0x42/0x60 [ 69.745043][ T7413] ? kasan_save_track+0x14/0x30 [ 69.745057][ T7413] ? tcp_sendmsg_locked+0x203a/0x3930 [ 69.745067][ T7413] ? tcp_sendmsg+0x2e/0x50 [ 69.745075][ T7413] ? inet6_sendmsg+0xb9/0x140 [ 69.745088][ T7413] ? __sys_sendto+0x37d/0x510 [ 69.745099][ T7413] ? __x64_sys_sendto+0xe0/0x1c0 [ 69.745110][ T7413] ? do_syscall_64+0xcd/0x260 [ 69.745133][ T7413] ? __inet_stream_connect+0x3c5/0x1020 [ 69.745143][ T7413] __inet_stream_connect+0x3c5/0x1020 [ 69.745157][ T7413] ? __pfx___inet_stream_connect+0x10/0x10 [ 69.745174][ T7413] tcp_sendmsg_fastopen+0x3ed/0x750 [ 69.745187][ T7413] tcp_sendmsg_locked+0x203a/0x3930 [ 69.745200][ T7413] ? avc_has_perm+0x11a/0x1c0 [ 69.745213][ T7413] ? __lock_acquire+0xaa4/0x1ba0 [ 69.745228][ T7413] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 69.745239][ T7413] ? do_raw_spin_lock+0x12c/0x2b0 [ 69.745251][ T7413] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 69.745266][ T7413] ? __local_bh_enable_ip+0xa4/0x120 [ 69.745283][ T7413] tcp_sendmsg+0x2e/0x50 [ 69.745292][ T7413] ? __pfx_tcp_sendmsg+0x10/0x10 [ 69.745301][ T7413] inet6_sendmsg+0xb9/0x140 [ 69.745314][ T7413] __sys_sendto+0x37d/0x510 [ 69.745327][ T7413] ? __pfx___sys_sendto+0x10/0x10 [ 69.745351][ T7413] ? ksys_write+0x1b9/0x240 [ 69.745364][ T7413] ? __pfx_ksys_write+0x10/0x10 [ 69.745378][ T7413] __x64_sys_sendto+0xe0/0x1c0 [ 69.745390][ T7413] ? do_syscall_64+0x91/0x260 [ 69.745405][ T7413] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.745429][ T7413] do_syscall_64+0xcd/0x260 [ 69.745445][ T7413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.745455][ T7413] RIP: 0033:0x7f083b58d169 [ 69.745463][ T7413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.745472][ T7413] RSP: 002b:00007f083c469038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 69.745481][ T7413] RAX: ffffffffffffffda RBX: 00007f083b7a5fa0 RCX: 00007f083b58d169 [ 69.745487][ T7413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 69.745492][ T7413] RBP: 00007f083c469090 R08: 0000200000b63fe4 R09: 000000000000001c [ 69.745498][ T7413] R10: 0000000020000004 R11: 0000000000000246 R12: 0000000000000001 [ 69.745503][ T7413] R13: 0000000000000000 R14: 00007f083b7a5fa0 R15: 00007ffd7a0bbb68 [ 69.745516][ T7413] [ 69.869166][ T7417] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 69.888567][ T7417] ALSA: seq fatal error: cannot create timer (-19) [ 69.891995][ T7422] trusted_key: syz.3.461 sent an empty control message without MSG_MORE. [ 69.959110][ T7428] input: syz0 as /devices/virtual/input/input12 [ 70.154577][ T5338] bcm5974 6-1:0.0: could not read from device [ 70.158005][ T5338] bcm5974 6-1:0.0: could not read from device [ 70.161787][ T5338] bcm5974 6-1:0.0: could not read from device [ 70.163938][ T65] usb 6-1: USB disconnect, device number 5 [ 70.172295][ T7433] pim6reg1: entered promiscuous mode [ 70.173867][ T7433] pim6reg1: entered allmulticast mode [ 70.237515][ T7439] __nla_validate_parse: 12 callbacks suppressed [ 70.237530][ T7439] netlink: 173 bytes leftover after parsing attributes in process `syz.2.466'. [ 70.238246][ T7438] netlink: 'syz.1.467': attribute type 10 has an invalid length. [ 70.244824][ T7438] netlink: 40 bytes leftover after parsing attributes in process `syz.1.467'. [ 70.273174][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 70.276652][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 70.313700][ T7441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=7441 comm=syz.2.468 [ 70.325902][ T7441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7441 comm=syz.2.468 [ 70.423333][ T7462] trusted_key: encrypted_key: master key parameter '00000000000000004045' is invalid [ 70.579748][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 70.609568][ T7474] FAULT_INJECTION: forcing a failure. [ 70.609568][ T7474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.613690][ T7474] CPU: 1 UID: 0 PID: 7474 Comm: syz.2.480 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 70.613703][ T7474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.613709][ T7474] Call Trace: [ 70.613713][ T7474] [ 70.613716][ T7474] dump_stack_lvl+0x16c/0x1f0 [ 70.613736][ T7474] should_fail_ex+0x512/0x640 [ 70.613751][ T7474] _copy_from_user+0x2e/0xd0 [ 70.613764][ T7474] copy_msghdr_from_user+0x98/0x160 [ 70.613779][ T7474] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 70.613798][ T7474] ___sys_sendmsg+0xfe/0x1d0 [ 70.613811][ T7474] ? __pfx____sys_sendmsg+0x10/0x10 [ 70.613839][ T7474] __sys_sendmsg+0x16d/0x220 [ 70.613870][ T7474] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.613887][ T7474] ? rcu_is_watching+0x12/0xc0 [ 70.613905][ T7474] do_syscall_64+0xcd/0x260 [ 70.613921][ T7474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.613931][ T7474] RIP: 0033:0x7f083b58d169 [ 70.613940][ T7474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.613949][ T7474] RSP: 002b:00007f083c469038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.613958][ T7474] RAX: ffffffffffffffda RBX: 00007f083b7a5fa0 RCX: 00007f083b58d169 [ 70.613964][ T7474] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 70.613970][ T7474] RBP: 00007f083c469090 R08: 0000000000000000 R09: 0000000000000000 [ 70.613976][ T7474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.613981][ T7474] R13: 0000000000000000 R14: 00007f083b7a5fa0 R15: 00007ffd7a0bbb68 [ 70.613993][ T7474] [ 70.806686][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.487'. [ 70.818782][ T7497] netlink: 165 bytes leftover after parsing attributes in process `syz.3.488'. [ 70.894687][ T7502] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 70.935860][ T7512] openvswitch: netlink: IPv4 tunnel dst address is zero [ 70.938525][ T7509] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 71.000784][ T7525] netlink: 84 bytes leftover after parsing attributes in process `syz.1.500'. [ 71.053898][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.055860][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.169141][ T7546] netlink: 'syz.2.505': attribute type 5 has an invalid length. [ 71.183452][ T7549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 71.236287][ T7555] netlink: 'syz.2.509': attribute type 10 has an invalid length. [ 71.238906][ T7555] netlink: 40 bytes leftover after parsing attributes in process `syz.2.509'. [ 71.274001][ T7563] netlink: 'syz.3.512': attribute type 10 has an invalid length. [ 71.276543][ T7563] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.281503][ T7563] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.282679][ T7560] Mount JFS Failure: -22 [ 71.283518][ T7563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.284702][ T7560] jfs_mount failed w/return code = -22 [ 71.288407][ T7563] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 71.328466][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 71.328474][ T40] audit: type=1326 audit(1743407997.187:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7569 comm="syz.3.515" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb35fd8d169 code=0x0 [ 71.341810][ T40] audit: type=1400 audit(1743407997.207:553): avc: denied { accept } for pid=7575 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.347003][ T40] audit: type=1400 audit(1743407997.207:554): avc: denied { bind } for pid=7575 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.352321][ T40] audit: type=1400 audit(1743407997.207:555): avc: denied { listen } for pid=7575 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.357549][ T40] audit: type=1400 audit(1743407997.207:556): avc: denied { create } for pid=7575 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 71.455060][ T7591] netlink: 'syz.0.522': attribute type 10 has an invalid length. [ 71.461310][ T7591] netlink: 40 bytes leftover after parsing attributes in process `syz.0.522'. [ 71.464028][ T7591] dummy0: entered promiscuous mode [ 71.465564][ T7595] netlink: 'syz.1.524': attribute type 10 has an invalid length. [ 71.469682][ T7591] bridge0: port 4(dummy0) entered blocking state [ 71.472877][ T7591] bridge0: port 4(dummy0) entered disabled state [ 71.475229][ T7591] dummy0: entered allmulticast mode [ 71.478053][ T7595] bridge0: port 3(dummy0) entered disabled state [ 71.480056][ T7595] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.483331][ T7595] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.495625][ T7598] FAULT_INJECTION: forcing a failure. [ 71.495625][ T7598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.496148][ T7595] bridge0: port 3(dummy0) entered blocking state [ 71.499691][ T7598] CPU: 1 UID: 0 PID: 7598 Comm: syz.2.525 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 71.499711][ T7598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.499720][ T7598] Call Trace: [ 71.499725][ T7598] [ 71.499731][ T7598] dump_stack_lvl+0x16c/0x1f0 [ 71.499757][ T7598] should_fail_ex+0x512/0x640 [ 71.499779][ T7598] _copy_from_iter+0x2a4/0x15b0 [ 71.499800][ T7598] ? __alloc_skb+0x200/0x380 [ 71.499821][ T7598] ? __pfx__copy_from_iter+0x10/0x10 [ 71.499838][ T7598] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 71.499859][ T7598] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 71.499888][ T7598] netlink_sendmsg+0x829/0xdd0 [ 71.499914][ T7598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.499943][ T7598] ____sys_sendmsg+0xa95/0xc70 [ 71.499959][ T7598] ? copy_msghdr_from_user+0x10a/0x160 [ 71.499976][ T7598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.499991][ T7598] ___sys_sendmsg+0x134/0x1d0 [ 71.500005][ T7598] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.500033][ T7598] __sys_sendmsg+0x16d/0x220 [ 71.500047][ T7598] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.500063][ T7598] ? rcu_is_watching+0x12/0xc0 [ 71.500094][ T7598] do_syscall_64+0xcd/0x260 [ 71.500117][ T7598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.500132][ T7598] RIP: 0033:0x7f083b58d169 [ 71.500144][ T7598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.500154][ T7598] RSP: 002b:00007f083c469038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.500167][ T7598] RAX: ffffffffffffffda RBX: 00007f083b7a5fa0 RCX: 00007f083b58d169 [ 71.500175][ T7598] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 71.500181][ T7598] RBP: 00007f083c469090 R08: 0000000000000000 R09: 0000000000000000 [ 71.500186][ T7598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.500192][ T7598] R13: 0000000000000000 R14: 00007f083b7a5fa0 R15: 00007ffd7a0bbb68 [ 71.500204][ T7598] [ 71.552339][ T7601] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 71.553043][ T7595] bridge0: port 3(dummy0) entered forwarding state [ 71.565711][ T7595] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.567748][ T7595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.570205][ T7595] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.572292][ T7595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.579695][ T7595] : (slave bridge0): Enslaving as an active interface with an up link [ 71.583395][ T40] audit: type=1400 audit(1743407997.447:557): avc: denied { setattr } for pid=7599 comm="syz.0.526" name="file0" dev="overlay" ino=36831295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.589612][ T40] audit: type=1400 audit(1743407997.447:558): avc: denied { write open } for pid=7599 comm="syz.0.526" path=2F202864656C6574656429 dev="tmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.619056][ T7605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.626973][ T7605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.676499][ T40] audit: type=1400 audit(1743407997.537:559): avc: denied { read } for pid=7599 comm="syz.0.526" dev="tmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.684062][ T40] audit: type=1400 audit(1743407997.537:560): avc: denied { link } for pid=7599 comm="syz.0.526" name="#695" dev="tmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.701286][ T40] audit: type=1400 audit(1743407997.557:561): avc: denied { unlink } for pid=5937 comm="syz-executor" name="file0" dev="tmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.816713][ T7627] tipc: Enabling of bearer rejected, media not registered [ 71.850259][ T7630] netlink: 'syz.1.535': attribute type 10 has an invalid length. [ 72.368976][ T7663] netlink: 'syz.3.543': attribute type 29 has an invalid length. [ 72.399258][ T7662] block device autoloading is deprecated and will be removed. [ 72.478796][ T7666] bpf: Bad value for 'uid' [ 72.479553][ T7667] netlink: 'syz.2.545': attribute type 10 has an invalid length. [ 72.490023][ T7667] bond0: (slave netdevsim0): no link monitoring support [ 72.495533][ T7667] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 72.504188][ T7667] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 72.608075][ T7685] trusted_key: encrypted_key: master key parameter 'ecryptfs000000000003724' is invalid [ 72.610938][ T7686] trusted_key: encrypted_key: master key parameter 'ecryptfs000000000003724' is invalid [ 72.717115][ T7702] block nbd0: NBD_DISCONNECT [ 72.718859][ T7702] block nbd0: NBD_DISCONNECT [ 72.720238][ T7702] block nbd0: NBD_DISCONNECT [ 72.754353][ T7707] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 72.787407][ T7716] netlink: 'syz.1.561': attribute type 10 has an invalid length. [ 73.205199][ T7734] FAULT_INJECTION: forcing a failure. [ 73.205199][ T7734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.209005][ T7734] CPU: 2 UID: 0 PID: 7734 Comm: syz.3.568 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 73.209017][ T7734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.209023][ T7734] Call Trace: [ 73.209027][ T7734] [ 73.209031][ T7734] dump_stack_lvl+0x16c/0x1f0 [ 73.209050][ T7734] should_fail_ex+0x512/0x640 [ 73.209064][ T7734] _copy_to_user+0x32/0xd0 [ 73.209078][ T7734] simple_read_from_buffer+0xcb/0x170 [ 73.209092][ T7734] proc_fail_nth_read+0x197/0x270 [ 73.209105][ T7734] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 73.209117][ T7734] ? rw_verify_area+0xcf/0x680 [ 73.209129][ T7734] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 73.209141][ T7734] vfs_read+0x1de/0xc70 [ 73.209154][ T7734] ? __pfx___mutex_lock+0x10/0x10 [ 73.209169][ T7734] ? __pfx_vfs_read+0x10/0x10 [ 73.209184][ T7734] ? __fget_files+0x20e/0x3c0 [ 73.209202][ T7734] ksys_read+0x12a/0x240 [ 73.209213][ T7734] ? __pfx_ksys_read+0x10/0x10 [ 73.209229][ T7734] do_syscall_64+0xcd/0x260 [ 73.209244][ T7734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.209254][ T7734] RIP: 0033:0x7fb35fd8bb7c [ 73.209262][ T7734] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 73.209272][ T7734] RSP: 002b:00007fb360b2f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.209281][ T7734] RAX: ffffffffffffffda RBX: 00007fb35ffa5fa0 RCX: 00007fb35fd8bb7c [ 73.209287][ T7734] RDX: 000000000000000f RSI: 00007fb360b2f0a0 RDI: 0000000000000004 [ 73.209292][ T7734] RBP: 00007fb360b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 73.209297][ T7734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.209303][ T7734] R13: 0000000000000000 R14: 00007fb35ffa5fa0 R15: 00007ffe4f9981c8 [ 73.209315][ T7734] [ 73.375150][ T68] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 73.497107][ T7759] qnx6: unable to set blocksize [ 73.527277][ T7769] lo speed is unknown, defaulting to 1000 [ 73.556744][ T7773] tipc: Started in network mode [ 73.558187][ T7773] tipc: Node identity 080211000001, cluster identity 4711 [ 73.560171][ T7773] tipc: Enabled bearer , priority 0 [ 73.725722][ T7789] cgroup: name respecified [ 74.330898][ T7810] tipc: Enabling of bearer rejected, already enabled [ 74.424119][ T7816] sp0: Synchronizing with TNC [ 74.690093][ T34] tipc: Node number set to 134418688 [ 74.768399][ T7845] netlink: 'syz.3.603': attribute type 4 has an invalid length. [ 75.241619][ T7853] syz.2.606: vmalloc error: size 3572858880, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 75.245185][ T7853] CPU: 1 UID: 0 PID: 7853 Comm: syz.2.606 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 75.245199][ T7853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.245205][ T7853] Call Trace: [ 75.245209][ T7853] [ 75.245214][ T7853] dump_stack_lvl+0x16c/0x1f0 [ 75.245232][ T7853] warn_alloc+0x248/0x3a0 [ 75.245248][ T7853] ? __pfx_warn_alloc+0x10/0x10 [ 75.245263][ T7853] ? stack_depot_save_flags+0x3e6/0xa50 [ 75.245281][ T7853] ? kasan_save_stack+0x42/0x60 [ 75.245294][ T7853] ? kasan_save_stack+0x33/0x60 [ 75.245307][ T7853] ? kasan_save_track+0x14/0x30 [ 75.245319][ T7853] ? __kasan_kmalloc+0xaa/0xb0 [ 75.245331][ T7853] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 75.245345][ T7853] ? vb2_core_create_bufs+0x559/0xab0 [ 75.245357][ T7853] ? vb2_create_bufs+0x5e8/0x840 [ 75.245366][ T7853] ? vb2_ioctl_create_bufs+0x244/0x3e0 [ 75.245379][ T7853] __vmalloc_node_range_noprof+0x10ea/0x1540 [ 75.245397][ T7853] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 75.245412][ T7853] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 75.245432][ T7853] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 75.245450][ T7853] vmalloc_user_noprof+0x6b/0x90 [ 75.245481][ T7853] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 75.245504][ T7853] vb2_vmalloc_alloc+0x135/0x3f0 [ 75.245519][ T7853] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 75.245534][ T7853] __vb2_queue_alloc+0x8c6/0x1280 [ 75.245554][ T7853] vb2_core_create_bufs+0x559/0xab0 [ 75.245569][ T7853] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 75.245590][ T7853] vb2_create_bufs+0x5e8/0x840 [ 75.245605][ T7853] ? __pfx_vb2_create_bufs+0x10/0x10 [ 75.245617][ T7853] ? v4l_sanitize_colorspace+0x213/0x400 [ 75.245632][ T7853] vb2_ioctl_create_bufs+0x244/0x3e0 [ 75.245644][ T7853] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.245656][ T7853] vidioc_create_bufs+0x7d/0xf0 [ 75.245668][ T7853] v4l_create_bufs+0x156/0x270 [ 75.245683][ T7853] __video_do_ioctl+0xb3d/0xfc0 [ 75.245700][ T7853] ? __might_fault+0xe3/0x190 [ 75.245716][ T7853] ? __pfx___video_do_ioctl+0x10/0x10 [ 75.245736][ T7853] video_usercopy+0x4cd/0x1720 [ 75.245747][ T7853] ? __pfx___video_do_ioctl+0x10/0x10 [ 75.245763][ T7853] ? selinux_bprm_creds_for_exec+0xba0/0xc60 [ 75.245774][ T7853] ? __pfx_video_usercopy+0x10/0x10 [ 75.245793][ T7853] v4l2_ioctl+0x1ba/0x250 [ 75.245801][ T7853] ? __pfx_v4l2_ioctl+0x10/0x10 [ 75.245834][ T7853] __x64_sys_ioctl+0x190/0x200 [ 75.245847][ T7853] do_syscall_64+0xcd/0x260 [ 75.245865][ T7853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.245876][ T7853] RIP: 0033:0x7f083b58d169 [ 75.245885][ T7853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.245895][ T7853] RSP: 002b:00007f083c469038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.245905][ T7853] RAX: ffffffffffffffda RBX: 00007f083b7a5fa0 RCX: 00007f083b58d169 [ 75.245918][ T7853] RDX: 0000200000000300 RSI: 00000000c100565c RDI: 0000000000000004 [ 75.245924][ T7853] RBP: 00007f083b60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 75.245930][ T7853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.245935][ T7853] R13: 0000000000000000 R14: 00007f083b7a5fa0 R15: 00007ffd7a0bbb68 [ 75.245949][ T7853] [ 75.246011][ T7853] Mem-Info: [ 75.327879][ T7853] active_anon:24895 inactive_anon:0 isolated_anon:0 [ 75.327879][ T7853] active_file:6424 inactive_file:48706 isolated_file:0 [ 75.327879][ T7853] unevictable:1795 dirty:220 writeback:0 [ 75.327879][ T7853] slab_reclaimable:11443 slab_unreclaimable:74704 [ 75.327879][ T7853] mapped:36703 shmem:21086 pagetables:1023 [ 75.327879][ T7853] sec_pagetables:305 bounce:0 [ 75.327879][ T7853] kernel_misc_reclaimable:0 [ 75.327879][ T7853] free:439905 free_pcp:5122 free_cma:0 [ 75.342945][ T7853] Node 0 active_anon:101688kB inactive_anon:0kB active_file:25696kB inactive_file:194748kB unevictable:3644kB isolated(anon):0kB isolated(file):0kB mapped:147060kB dirty:876kB writeback:0kB shmem:82916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12336kB pagetables:3844kB sec_pagetables:1220kB all_unreclaimable? no [ 75.352257][ T7853] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 75.360476][ T7853] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 75.368354][ T7853] lowmem_reserve[]: 0 1238 1238 1238 1238 [ 75.370013][ T7853] Node 0 DMA32 free:176624kB boost:0kB min:27576kB low:34468kB high:41360kB reserved_highatomic:0KB active_anon:101688kB inactive_anon:0kB active_file:25696kB inactive_file:194748kB unevictable:3644kB writepending:876kB present:2080628kB managed:1268436kB mlocked:0kB bounce:0kB free_pcp:6312kB local_pcp:624kB free_cma:0kB [ 75.379717][ T7853] lowmem_reserve[]: 0 0 0 0 0 [ 75.381248][ T7853] Node 1 Normal free:1565764kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781964kB mlocked:0kB bounce:0kB free_pcp:13984kB local_pcp:9832kB free_cma:0kB [ 75.389614][ T7853] lowmem_reserve[]: 0 0 0 0 0 [ 75.391045][ T7853] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 75.394592][ T7853] Node 0 DMA32: 77*4kB (UME) 22*8kB (UME) 65*16kB (UE) 62*32kB (UE) 83*64kB (UME) 94*128kB (UE) 68*256kB (UM) 29*512kB (UME) 18*1024kB (UM) 13*2048kB (UME) 19*4096kB (UM) = 175988kB [ 75.399766][ T7853] Node 1 Normal: 77*4kB (UME) 56*8kB (UME) 61*16kB (UME) 34*32kB (UME) 39*64kB (UME) 15*128kB (UME) 8*256kB (UE) 6*512kB (UME) 3*1024kB (UE) 3*2048kB (UME) 377*4096kB (UM) = 1565764kB [ 75.404890][ T7853] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 75.407459][ T7853] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 75.410143][ T7853] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 75.422721][ T7853] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 75.425731][ T7853] 71137 total pagecache pages [ 75.427290][ T7853] 0 pages in swap cache [ 75.428483][ T7853] Free swap = 124880kB [ 75.429664][ T7853] Total swap = 124996kB [ 75.430893][ T7853] 1048443 pages RAM [ 75.432190][ T7853] 0 pages HighMem/MovableOnly [ 75.433691][ T7853] 282003 pages reserved [ 75.434854][ T7853] 0 pages cma reserved [ 75.548422][ T7862] __nla_validate_parse: 14 callbacks suppressed [ 75.548437][ T7862] netlink: 337 bytes leftover after parsing attributes in process `syz.0.611'. [ 75.584673][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 75.590595][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'. [ 75.591054][ T7870] netlink: 165 bytes leftover after parsing attributes in process `syz.2.614'. [ 75.591454][ T7872] vivid-001: disconnect [ 75.597903][ T7871] vivid-001: reconnect [ 75.615629][ T7869] bridge1: port 1(ip6gretap1) entered blocking state [ 75.618229][ T7869] bridge1: port 1(ip6gretap1) entered disabled state [ 75.620702][ T7869] ip6gretap1: entered allmulticast mode [ 75.629291][ T24] hid-generic 0001:0009:0005.0003: reserved main item tag 0xe [ 75.633845][ T7869] ip6gretap1: entered promiscuous mode [ 75.638450][ T7880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.618'. [ 75.639659][ T24] hid-generic 0001:0009:0005.0003: ignoring exceeding usage max [ 75.644370][ T24] hid-generic 0001:0009:0005.0003: unknown main item tag 0x3 [ 75.646924][ T24] hid-generic 0001:0009:0005.0003: item fetching failed at offset 16/144 [ 75.650750][ T24] hid-generic 0001:0009:0005.0003: probe with driver hid-generic failed with error -22 [ 75.673110][ T7869] kvm: user requested TSC rate below hardware speed [ 75.675922][ T7882] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 75.686370][ T7882] CIFS mount error: No usable UNC path provided in device string! [ 75.686370][ T7882] [ 75.689999][ T7882] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 75.772691][ T7880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.618'. [ 75.885394][ T7904] netlink: 165 bytes leftover after parsing attributes in process `syz.3.626'. [ 75.930697][ T7909] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 75.933292][ T7909] overlayfs: failed to set xattr on upper [ 75.935482][ T7909] overlayfs: ...falling back to redirect_dir=nofollow. [ 75.937394][ T7909] overlayfs: ...falling back to index=off. [ 75.939541][ T7909] overlayfs: ...falling back to uuid=null. [ 75.941233][ T7909] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 75.961201][ T6003] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 76.034783][ T7926] netlink: 'syz.0.632': attribute type 10 has an invalid length. [ 76.037882][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 76.082362][ T7933] netlink: 'syz.3.633': attribute type 10 has an invalid length. [ 76.085398][ T7933] netlink: 40 bytes leftover after parsing attributes in process `syz.3.633'. [ 76.088705][ T7933] dummy0: entered promiscuous mode [ 76.092939][ T7933] bridge0: port 3(dummy0) entered blocking state [ 76.095373][ T7933] bridge0: port 3(dummy0) entered disabled state [ 76.097395][ T7933] dummy0: entered allmulticast mode [ 76.099768][ T7933] bridge0: port 3(dummy0) entered blocking state [ 76.101145][ T6003] usb 7-1: device descriptor read/64, error -71 [ 76.102156][ T7933] bridge0: port 3(dummy0) entered forwarding state [ 76.156394][ T7941] program syz.0.634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.283924][ T7958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7958 comm=syz.0.636 [ 76.353539][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 76.353550][ T40] audit: type=1400 audit(1743408002.217:595): avc: denied { read } for pid=7968 comm="syz.0.640" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.361243][ T6003] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 76.480486][ T7988] netlink: 165 bytes leftover after parsing attributes in process `syz.3.644'. [ 76.501374][ T6003] usb 7-1: device descriptor read/64, error -71 [ 76.623087][ T6003] usb usb7-port1: attempt power cycle [ 76.648881][ T8006] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 76.652701][ T8006] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 76.655106][ T8006] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 76.657997][ T8006] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 76.660785][ T8006] geneve2: entered promiscuous mode [ 76.662917][ T8006] geneve2: entered allmulticast mode [ 76.714932][ T40] audit: type=1400 audit(1743408002.577:596): avc: denied { map } for pid=8010 comm="syz.1.653" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.972127][ T6003] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 76.991801][ T6003] usb 7-1: device descriptor read/8, error -71 [ 77.009155][ T8034] qnx4: no qnx4 filesystem (no root dir). [ 77.013464][ T40] audit: type=1400 audit(1743408002.877:597): avc: denied { ioctl } for pid=8032 comm="syz.3.660" path="socket:[16984]" dev="sockfs" ino=16984 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.231230][ T6003] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 77.232533][ T8040] ipvlan2: entered allmulticast mode [ 77.235664][ T8040] veth0_vlan: entered allmulticast mode [ 77.254543][ T6003] usb 7-1: device descriptor read/8, error -71 [ 77.363019][ T6003] usb usb7-port1: unable to enumerate USB device [ 77.786605][ T8049] MINIX-fs: blocksize too small for device [ 77.789492][ T8049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.824881][ T40] audit: type=1326 audit(1743408003.687:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.1.668" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f5f78d169 code=0x0 [ 77.836915][ T8049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.845370][ T40] audit: type=1400 audit(1743408003.707:599): avc: denied { create } for pid=8048 comm="syz.3.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 78.074232][ T8075] batman_adv: batadv0: Adding interface: ip6gretap1 [ 78.076758][ T8075] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.087248][ T8075] batman_adv: batadv0: Interface activated: ip6gretap1 [ 78.213471][ T40] audit: type=1400 audit(1743408004.077:600): avc: denied { mount } for pid=8096 comm="syz.1.680" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 78.224214][ T40] audit: type=1400 audit(1743408004.087:601): avc: denied { watch } for pid=8096 comm="syz.1.680" path="/220/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 78.254443][ T40] audit: type=1400 audit(1743408004.117:602): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 78.442721][ T8110] geneve0: entered promiscuous mode [ 78.444676][ T8110] geneve0: entered allmulticast mode [ 78.680332][ T40] audit: type=1400 audit(1743408004.537:603): avc: denied { associate } for pid=8114 comm="syz.2.686" name="pids.current" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.694710][ T8115] netfs: Couldn't get user pages (rc=-14) [ 78.849613][ T40] audit: type=1400 audit(1743408004.707:604): avc: denied { read write } for pid=8118 comm="syz.2.687" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.029885][ T8109] syz.1.684 (8109): drop_caches: 1 [ 79.066538][ T8109] syz.1.684 (8109): drop_caches: 1 [ 79.407709][ T68] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 79.458945][ T68] Bluetooth: hci0: failed to read key size for handle 201 [ 79.648191][ T8186] netlink: 'syz.1.710': attribute type 1 has an invalid length. [ 79.660651][ T8186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.685161][ T8186] veth7: entered promiscuous mode [ 79.689917][ T8186] bond0: (slave veth7): Enslaving as an active interface with a down link [ 80.044279][ T8200] syz.1.716 (8200): drop_caches: 1 [ 80.064829][ T8200] syz.1.716 (8200): drop_caches: 1 [ 80.220608][ T8210] netlink: 'syz.1.719': attribute type 10 has an invalid length. [ 80.289110][ T8216] lo speed is unknown, defaulting to 1000 [ 80.353544][ T8223] sp0: Synchronizing with TNC [ 80.575527][ T8233] 9pnet_fd: p9_fd_create_tcp (8233): problem connecting socket to 127.0.0.1 [ 80.627129][ T8235] syzkaller1: entered promiscuous mode [ 80.628714][ T8235] syzkaller1: entered allmulticast mode [ 80.636632][ T8235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.639072][ T8235] batadv_slave_1: entered promiscuous mode [ 80.839563][ T8241] __nla_validate_parse: 23 callbacks suppressed [ 80.839574][ T8241] netlink: 165 bytes leftover after parsing attributes in process `syz.0.730'. [ 80.922681][ T8247] lo speed is unknown, defaulting to 1000 [ 80.991157][ T8249] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 80.993353][ T8249] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 81.011728][ T8249] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.014535][ T8249] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 81.023246][ T8249] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.027160][ T8249] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 81.128647][ T8249] tipc: Resetting bearer [ 81.223874][ T8278] netlink: 32 bytes leftover after parsing attributes in process `syz.1.739'. [ 81.232415][ T8278] program syz.1.739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.235551][ T8278] vivid-003: disconnect [ 81.237933][ T8278] vivid-003: reconnect [ 81.288822][ T8285] netlink: 48 bytes leftover after parsing attributes in process `syz.1.741'. [ 81.293912][ T29] cfg80211: failed to load regulatory.db [ 81.305681][ T8285] netlink: 'syz.1.741': attribute type 1 has an invalid length. [ 81.861845][ T6320] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 82.015247][ T6320] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 82.018690][ T6320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.028961][ T6320] usb 6-1: Product: syz [ 82.030538][ T6320] usb 6-1: Manufacturer: syz [ 82.033325][ T6320] usb 6-1: SerialNumber: syz [ 82.038124][ T6320] usb 6-1: config 0 descriptor?? [ 82.083456][ T8350] lo: entered allmulticast mode [ 82.122484][ T8367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.756'. [ 82.128866][ T8367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.756'. [ 82.136169][ T8367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.756'. [ 82.139477][ T8367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.756'. [ 82.143075][ T8367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.756'. [ 82.146223][ T8367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.756'. [ 82.154888][ T8367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.756'. [ 82.248751][ T6320] usb 6-1: USB disconnect, device number 6 [ 82.313469][ T8382] overlayfs: unescaped trailing colons in lowerdir mount option. [ 82.400130][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 82.400145][ T40] audit: type=1400 audit(1743408008.257:615): avc: denied { connect } for pid=8383 comm="syz.3.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.584720][ T8400] netlink: 'syz.0.766': attribute type 10 has an invalid length. [ 82.591390][ T6003] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 82.710217][ T40] audit: type=1400 audit(1743408008.567:616): avc: denied { link } for pid=8407 comm="syz.0.769" name="file1" dev="overlay" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.720079][ T40] audit: type=1400 audit(1743408008.567:617): avc: denied { setattr } for pid=8407 comm="syz.0.769" name="#1e" dev="tmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.726199][ T8408] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 82.728727][ T40] audit: type=1400 audit(1743408008.567:618): avc: denied { rename } for pid=8407 comm="syz.0.769" name="#1e" dev="tmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.751290][ T6003] usb 7-1: Using ep0 maxpacket: 8 [ 82.762864][ T6003] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 82.765318][ T6003] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 82.768365][ T6003] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.771625][ T6003] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.774724][ T6003] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 82.778628][ T6003] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 82.780745][ T6003] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 82.784525][ T6003] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.787863][ T6003] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.790886][ T6003] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 82.796279][ T6003] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 82.798366][ T6003] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 82.808497][ T6003] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.817391][ T6003] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.820615][ T6003] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 82.827877][ T6003] usb 7-1: string descriptor 0 read error: -22 [ 82.830159][ T6003] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 82.833878][ T6003] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.842379][ T6003] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 83.103180][ T40] audit: type=1326 audit(1743408008.967:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.1.777" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f5f78d169 code=0x0 [ 83.217299][ T40] audit: type=1400 audit(1743408009.077:620): avc: denied { setopt } for pid=8425 comm="syz.1.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.225224][ T40] audit: type=1400 audit(1743408009.087:621): avc: denied { write } for pid=8425 comm="syz.1.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.281974][ T8432] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 84.022300][ T8478] FAULT_INJECTION: forcing a failure. [ 84.022300][ T8478] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 84.026910][ T8478] CPU: 0 UID: 0 PID: 8478 Comm: syz.1.794 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 84.026930][ T8478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.026940][ T8478] Call Trace: [ 84.026946][ T8478] [ 84.026953][ T8478] dump_stack_lvl+0x16c/0x1f0 [ 84.027001][ T8478] should_fail_ex+0x512/0x640 [ 84.027030][ T8478] should_fail_alloc_page+0xe7/0x130 [ 84.027054][ T8478] prepare_alloc_pages+0x3c2/0x610 [ 84.027072][ T8478] ? rcu_is_watching+0x12/0xc0 [ 84.027093][ T8478] __alloc_frozen_pages_noprof+0x18f/0x2370 [ 84.027125][ T8478] ? __lock_acquire+0x5ca/0x1ba0 [ 84.027143][ T8478] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 84.027167][ T8478] ? __lock_acquire+0x5ca/0x1ba0 [ 84.027191][ T8478] ? lock_acquire+0x179/0x350 [ 84.027202][ T8478] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.027214][ T8478] ? policy_nodemask+0xea/0x4e0 [ 84.027231][ T8478] alloc_pages_mpol+0x1fb/0x550 [ 84.027246][ T8478] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 84.027262][ T8478] ? __lock_acquire+0x5ca/0x1ba0 [ 84.027273][ T8478] folio_alloc_mpol_noprof+0x36/0x2f0 [ 84.027286][ T8478] vma_alloc_folio_noprof+0xed/0x1e0 [ 84.027296][ T8478] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 84.027311][ T8478] do_pte_missing+0x2049/0x3ea0 [ 84.027339][ T8478] __handle_mm_fault+0x1043/0x2a50 [ 84.027365][ T8478] ? __pfx___handle_mm_fault+0x10/0x10 [ 84.027385][ T8478] ? __pte_offset_map_lock+0x155/0x2f0 [ 84.027402][ T8478] ? find_held_lock+0x2b/0x80 [ 84.027419][ T8478] ? find_held_lock+0x2b/0x80 [ 84.027452][ T8478] handle_mm_fault+0x404/0xae0 [ 84.027476][ T8478] __get_user_pages+0x771/0x36f0 [ 84.027505][ T8478] ? __pfx___get_user_pages+0x10/0x10 [ 84.027524][ T8478] ? __pfx_down_read_killable+0x10/0x10 [ 84.027546][ T8478] __gup_longterm_locked+0x20d/0x1850 [ 84.027580][ T8478] ? try_get_folio+0x495/0x800 [ 84.027597][ T8478] ? __pfx___gup_longterm_locked+0x10/0x10 [ 84.027618][ T8478] ? try_get_folio+0x517/0x800 [ 84.027635][ T8478] ? find_held_lock+0x2b/0x80 [ 84.027654][ T8478] ? sanity_check_pinned_pages+0x3ac/0x11e0 [ 84.027677][ T8478] gup_fast_fallback+0x17ff/0x2690 [ 84.027710][ T8478] ? __pfx_gup_fast_fallback+0x10/0x10 [ 84.027741][ T8478] pin_user_pages_fast+0xa7/0xf0 [ 84.027761][ T8478] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 84.027778][ T8478] ? __kmalloc_noprof+0x242/0x510 [ 84.027804][ T8478] rds_info_getsockopt+0x39f/0x4f0 [ 84.027831][ T8478] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 84.027854][ T8478] ? find_held_lock+0x2b/0x80 [ 84.027872][ T8478] ? __might_fault+0x13b/0x190 [ 84.027901][ T8478] rds_getsockopt+0x173/0x2d0 [ 84.027918][ T8478] ? __pfx_rds_getsockopt+0x10/0x10 [ 84.027937][ T8478] do_sock_getsockopt+0x3fc/0x800 [ 84.027953][ T8478] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 84.027967][ T8478] ? __fget_files+0x204/0x3c0 [ 84.027997][ T8478] __sys_getsockopt+0x12f/0x260 [ 84.028022][ T8478] __x64_sys_getsockopt+0xbd/0x160 [ 84.028040][ T8478] ? do_syscall_64+0x91/0x260 [ 84.028059][ T8478] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.028079][ T8478] do_syscall_64+0xcd/0x260 [ 84.028101][ T8478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.028116][ T8478] RIP: 0033:0x7f1f5f78d169 [ 84.028128][ T8478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.028142][ T8478] RSP: 002b:00007f1f6069b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 84.028157][ T8478] RAX: ffffffffffffffda RBX: 00007f1f5f9a5fa0 RCX: 00007f1f5f78d169 [ 84.028167][ T8478] RDX: 000000000000271b RSI: 0000200000000114 RDI: 0000000000000003 [ 84.028176][ T8478] RBP: 00007f1f6069b090 R08: 0000200000000040 R09: 0000000000000000 [ 84.028185][ T8478] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 84.028194][ T8478] R13: 0000000000000000 R14: 00007f1f5f9a5fa0 R15: 00007ffe9931f9a8 [ 84.028215][ T8478] [ 84.156247][ T40] audit: type=1400 audit(1743408010.017:622): avc: denied { write } for pid=8479 comm="syz.0.795" name="rt6_stats" dev="proc" ino=4026533081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 84.278796][ T40] audit: type=1400 audit(1743408010.137:623): avc: denied { getopt } for pid=8497 comm="syz.1.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.291211][ T40] audit: type=1400 audit(1743408010.137:624): avc: denied { ioctl } for pid=8498 comm="syz.0.803" path="socket:[21973]" dev="sockfs" ino=21973 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 84.307819][ T8502] FAULT_INJECTION: forcing a failure. [ 84.307819][ T8502] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 84.311632][ T8502] CPU: 1 UID: 0 PID: 8502 Comm: syz.0.805 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 84.311646][ T8502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.311652][ T8502] Call Trace: [ 84.311656][ T8502] [ 84.311660][ T8502] dump_stack_lvl+0x16c/0x1f0 [ 84.311679][ T8502] should_fail_ex+0x512/0x640 [ 84.311694][ T8502] should_fail_alloc_page+0xe7/0x130 [ 84.311711][ T8502] prepare_alloc_pages+0x3c2/0x610 [ 84.311723][ T8502] ? rcu_is_watching+0x12/0xc0 [ 84.311737][ T8502] __alloc_frozen_pages_noprof+0x18f/0x2370 [ 84.311756][ T8502] ? __lock_acquire+0x5ca/0x1ba0 [ 84.311767][ T8502] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 84.311783][ T8502] ? __lock_acquire+0x5ca/0x1ba0 [ 84.311798][ T8502] ? lock_acquire+0x179/0x350 [ 84.311806][ T8502] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.311819][ T8502] ? policy_nodemask+0xea/0x4e0 [ 84.311835][ T8502] alloc_pages_mpol+0x1fb/0x550 [ 84.311851][ T8502] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 84.311866][ T8502] ? __lock_acquire+0x5ca/0x1ba0 [ 84.311878][ T8502] folio_alloc_mpol_noprof+0x36/0x2f0 [ 84.311889][ T8502] vma_alloc_folio_noprof+0xed/0x1e0 [ 84.311899][ T8502] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 84.311914][ T8502] do_pte_missing+0x2049/0x3ea0 [ 84.311932][ T8502] __handle_mm_fault+0x1043/0x2a50 [ 84.311949][ T8502] ? __pfx___handle_mm_fault+0x10/0x10 [ 84.311962][ T8502] ? __pte_offset_map_lock+0x155/0x2f0 [ 84.311974][ T8502] ? find_held_lock+0x2b/0x80 [ 84.311985][ T8502] ? find_held_lock+0x2b/0x80 [ 84.312006][ T8502] handle_mm_fault+0x404/0xae0 [ 84.312022][ T8502] __get_user_pages+0x771/0x36f0 [ 84.312039][ T8502] ? __pfx___get_user_pages+0x10/0x10 [ 84.312052][ T8502] ? __pfx_down_read_killable+0x10/0x10 [ 84.312066][ T8502] __gup_longterm_locked+0x20d/0x1850 [ 84.312082][ T8502] ? try_get_folio+0x495/0x800 [ 84.312094][ T8502] ? __pfx___gup_longterm_locked+0x10/0x10 [ 84.312108][ T8502] ? try_get_folio+0x517/0x800 [ 84.312118][ T8502] ? find_held_lock+0x2b/0x80 [ 84.312131][ T8502] ? sanity_check_pinned_pages+0x3ac/0x11e0 [ 84.312146][ T8502] gup_fast_fallback+0x17ff/0x2690 [ 84.312167][ T8502] ? __pfx_gup_fast_fallback+0x10/0x10 [ 84.312186][ T8502] pin_user_pages_fast+0xa7/0xf0 [ 84.312199][ T8502] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 84.312211][ T8502] ? __kmalloc_noprof+0x242/0x510 [ 84.312228][ T8502] rds_info_getsockopt+0x39f/0x4f0 [ 84.312246][ T8502] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 84.312261][ T8502] ? find_held_lock+0x2b/0x80 [ 84.312274][ T8502] ? __might_fault+0x13b/0x190 [ 84.312292][ T8502] rds_getsockopt+0x173/0x2d0 [ 84.312304][ T8502] ? __pfx_rds_getsockopt+0x10/0x10 [ 84.312316][ T8502] do_sock_getsockopt+0x3fc/0x800 [ 84.312327][ T8502] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 84.312336][ T8502] ? __fget_files+0x204/0x3c0 [ 84.312355][ T8502] __sys_getsockopt+0x12f/0x260 [ 84.312371][ T8502] __x64_sys_getsockopt+0xbd/0x160 [ 84.312383][ T8502] ? do_syscall_64+0x91/0x260 [ 84.312398][ T8502] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.312411][ T8502] do_syscall_64+0xcd/0x260 [ 84.312426][ T8502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.312436][ T8502] RIP: 0033:0x7f231b18d169 [ 84.312445][ T8502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.312454][ T8502] RSP: 002b:00007f231c08c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 84.312464][ T8502] RAX: ffffffffffffffda RBX: 00007f231b3a5fa0 RCX: 00007f231b18d169 [ 84.312470][ T8502] RDX: 000000000000271b RSI: 0000200000000114 RDI: 0000000000000003 [ 84.312476][ T8502] RBP: 00007f231c08c090 R08: 0000200000000040 R09: 0000000000000000 [ 84.312481][ T8502] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 84.312487][ T8502] R13: 0000000000000000 R14: 00007f231b3a5fa0 R15: 00007ffd3f944e18 [ 84.312499][ T8502] [ 84.480774][ T8506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=8506 comm=syz.1.807 [ 84.484461][ T8506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=8506 comm=syz.1.807 [ 84.487864][ T8506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8506 comm=syz.1.807 [ 84.732183][ T8530] lo speed is unknown, defaulting to 1000 [ 85.052397][ T65] usb 7-1: USB disconnect, device number 11 [ 85.243791][ T8537] aaaaaaaaa: renamed from lo (while UP) [ 85.272403][ T8540] FAULT_INJECTION: forcing a failure. [ 85.272403][ T8540] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 85.276117][ T8540] CPU: 1 UID: 0 PID: 8540 Comm: syz.1.817 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 85.276131][ T8540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.276137][ T8540] Call Trace: [ 85.276141][ T8540] [ 85.276145][ T8540] dump_stack_lvl+0x16c/0x1f0 [ 85.276163][ T8540] should_fail_ex+0x512/0x640 [ 85.276179][ T8540] should_fail_alloc_page+0xe7/0x130 [ 85.276195][ T8540] prepare_alloc_pages+0x3c2/0x610 [ 85.276207][ T8540] ? rcu_is_watching+0x12/0xc0 [ 85.276221][ T8540] __alloc_frozen_pages_noprof+0x18f/0x2370 [ 85.276240][ T8540] ? __lock_acquire+0x5ca/0x1ba0 [ 85.276251][ T8540] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 85.276267][ T8540] ? __lock_acquire+0x5ca/0x1ba0 [ 85.276282][ T8540] ? lock_acquire+0x179/0x350 [ 85.276290][ T8540] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.276302][ T8540] ? policy_nodemask+0xea/0x4e0 [ 85.276319][ T8540] alloc_pages_mpol+0x1fb/0x550 [ 85.276335][ T8540] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 85.276350][ T8540] ? __lock_acquire+0x5ca/0x1ba0 [ 85.276361][ T8540] folio_alloc_mpol_noprof+0x36/0x2f0 [ 85.276373][ T8540] vma_alloc_folio_noprof+0xed/0x1e0 [ 85.276383][ T8540] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 85.276398][ T8540] do_pte_missing+0x2049/0x3ea0 [ 85.276416][ T8540] __handle_mm_fault+0x1043/0x2a50 [ 85.276433][ T8540] ? __pfx___handle_mm_fault+0x10/0x10 [ 85.276446][ T8540] ? __pte_offset_map_lock+0x155/0x2f0 [ 85.276457][ T8540] ? find_held_lock+0x2b/0x80 [ 85.276469][ T8540] ? find_held_lock+0x2b/0x80 [ 85.276489][ T8540] handle_mm_fault+0x404/0xae0 [ 85.276505][ T8540] __get_user_pages+0x771/0x36f0 [ 85.276523][ T8540] ? __pfx___get_user_pages+0x10/0x10 [ 85.276539][ T8540] ? __pfx_down_read_killable+0x10/0x10 [ 85.276553][ T8540] __gup_longterm_locked+0x20d/0x1850 [ 85.276569][ T8540] ? try_get_folio+0x495/0x800 [ 85.276580][ T8540] ? __pfx___gup_longterm_locked+0x10/0x10 [ 85.276594][ T8540] ? try_get_folio+0x517/0x800 [ 85.276605][ T8540] ? find_held_lock+0x2b/0x80 [ 85.276618][ T8540] ? sanity_check_pinned_pages+0x3ac/0x11e0 [ 85.276632][ T8540] gup_fast_fallback+0x17ff/0x2690 [ 85.276653][ T8540] ? __pfx_gup_fast_fallback+0x10/0x10 [ 85.276672][ T8540] pin_user_pages_fast+0xa7/0xf0 [ 85.276685][ T8540] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 85.276697][ T8540] ? __kmalloc_noprof+0x242/0x510 [ 85.276714][ T8540] rds_info_getsockopt+0x39f/0x4f0 [ 85.276732][ T8540] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 85.276747][ T8540] ? find_held_lock+0x2b/0x80 [ 85.276760][ T8540] ? __might_fault+0x13b/0x190 [ 85.276778][ T8540] rds_getsockopt+0x173/0x2d0 [ 85.276790][ T8540] ? __pfx_rds_getsockopt+0x10/0x10 [ 85.276802][ T8540] do_sock_getsockopt+0x3fc/0x800 [ 85.276813][ T8540] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 85.276825][ T8540] ? __fget_files+0x204/0x3c0 [ 85.276852][ T8540] __sys_getsockopt+0x12f/0x260 [ 85.276874][ T8540] __x64_sys_getsockopt+0xbd/0x160 [ 85.276891][ T8540] ? do_syscall_64+0x91/0x260 [ 85.276910][ T8540] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.276929][ T8540] do_syscall_64+0xcd/0x260 [ 85.276950][ T8540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.276966][ T8540] RIP: 0033:0x7f1f5f78d169 [ 85.276979][ T8540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.276993][ T8540] RSP: 002b:00007f1f6069b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 85.277008][ T8540] RAX: ffffffffffffffda RBX: 00007f1f5f9a5fa0 RCX: 00007f1f5f78d169 [ 85.277017][ T8540] RDX: 000000000000271b RSI: 0000200000000114 RDI: 0000000000000003 [ 85.277026][ T8540] RBP: 00007f1f6069b090 R08: 0000200000000040 R09: 0000000000000000 [ 85.277036][ T8540] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 85.277044][ T8540] R13: 0000000000000000 R14: 00007f1f5f9a5fa0 R15: 00007ffe9931f9a8 [ 85.277063][ T8540] [ 85.533877][ T8564] FAULT_INJECTION: forcing a failure. [ 85.533877][ T8564] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 85.537399][ T8564] CPU: 3 UID: 0 PID: 8564 Comm: syz.3.828 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 85.537413][ T8564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.537419][ T8564] Call Trace: [ 85.537423][ T8564] [ 85.537427][ T8564] dump_stack_lvl+0x16c/0x1f0 [ 85.537445][ T8564] should_fail_ex+0x512/0x640 [ 85.537459][ T8564] should_fail_alloc_page+0xe7/0x130 [ 85.537481][ T8564] prepare_alloc_pages+0x3c2/0x610 [ 85.537494][ T8564] ? rcu_is_watching+0x12/0xc0 [ 85.537508][ T8564] __alloc_frozen_pages_noprof+0x18f/0x2370 [ 85.537527][ T8564] ? __lock_acquire+0x5ca/0x1ba0 [ 85.537538][ T8564] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 85.537554][ T8564] ? __lock_acquire+0x5ca/0x1ba0 [ 85.537568][ T8564] ? lock_acquire+0x179/0x350 [ 85.537577][ T8564] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.537589][ T8564] ? policy_nodemask+0xea/0x4e0 [ 85.537605][ T8564] alloc_pages_mpol+0x1fb/0x550 [ 85.537620][ T8564] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 85.537636][ T8564] ? __lock_acquire+0x5ca/0x1ba0 [ 85.537647][ T8564] folio_alloc_mpol_noprof+0x36/0x2f0 [ 85.537659][ T8564] vma_alloc_folio_noprof+0xed/0x1e0 [ 85.537669][ T8564] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 85.537683][ T8564] do_pte_missing+0x2049/0x3ea0 [ 85.537701][ T8564] __handle_mm_fault+0x1043/0x2a50 [ 85.537736][ T8564] ? __pfx___handle_mm_fault+0x10/0x10 [ 85.537750][ T8564] ? __pte_offset_map_lock+0x155/0x2f0 [ 85.537761][ T8564] ? find_held_lock+0x2b/0x80 [ 85.537773][ T8564] ? find_held_lock+0x2b/0x80 [ 85.537794][ T8564] handle_mm_fault+0x404/0xae0 [ 85.537809][ T8564] __get_user_pages+0x771/0x36f0 [ 85.537827][ T8564] ? __pfx___get_user_pages+0x10/0x10 [ 85.537840][ T8564] ? __pfx_down_read_killable+0x10/0x10 [ 85.537854][ T8564] __gup_longterm_locked+0x20d/0x1850 [ 85.537869][ T8564] ? try_get_folio+0x495/0x800 [ 85.537881][ T8564] ? __pfx___gup_longterm_locked+0x10/0x10 [ 85.537896][ T8564] ? try_get_folio+0x517/0x800 [ 85.537911][ T8564] ? find_held_lock+0x2b/0x80 [ 85.537928][ T8564] ? sanity_check_pinned_pages+0x3ac/0x11e0 [ 85.537948][ T8564] gup_fast_fallback+0x17ff/0x2690 [ 85.537973][ T8564] ? __pfx_gup_fast_fallback+0x10/0x10 [ 85.537992][ T8564] pin_user_pages_fast+0xa7/0xf0 [ 85.538005][ T8564] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 85.538017][ T8564] ? __kmalloc_noprof+0x242/0x510 [ 85.538034][ T8564] rds_info_getsockopt+0x39f/0x4f0 [ 85.538052][ T8564] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 85.538068][ T8564] ? find_held_lock+0x2b/0x80 [ 85.538081][ T8564] ? __might_fault+0x13b/0x190 [ 85.538100][ T8564] rds_getsockopt+0x173/0x2d0 [ 85.538111][ T8564] ? __pfx_rds_getsockopt+0x10/0x10 [ 85.538123][ T8564] do_sock_getsockopt+0x3fc/0x800 [ 85.538135][ T8564] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 85.538143][ T8564] ? __fget_files+0x204/0x3c0 [ 85.538163][ T8564] __sys_getsockopt+0x12f/0x260 [ 85.538179][ T8564] __x64_sys_getsockopt+0xbd/0x160 [ 85.538191][ T8564] ? do_syscall_64+0x91/0x260 [ 85.538205][ T8564] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.538218][ T8564] do_syscall_64+0xcd/0x260 [ 85.538233][ T8564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.538244][ T8564] RIP: 0033:0x7fb35fd8d169 [ 85.538252][ T8564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.538262][ T8564] RSP: 002b:00007fb360b2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 85.538271][ T8564] RAX: ffffffffffffffda RBX: 00007fb35ffa5fa0 RCX: 00007fb35fd8d169 [ 85.538277][ T8564] RDX: 000000000000271b RSI: 0000200000000114 RDI: 0000000000000003 [ 85.538283][ T8564] RBP: 00007fb360b2f090 R08: 0000200000000040 R09: 0000000000000000 [ 85.538289][ T8564] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 85.538294][ T8564] R13: 0000000000000000 R14: 00007fb35ffa5fa0 R15: 00007ffe4f9981c8 [ 85.538307][ T8564] [ 85.652978][ C3] vkms_vblank_simulate: vblank timer overrun [ 85.681384][ T8573] macvlan1: entered promiscuous mode [ 85.682953][ T8573] macvlan1: entered allmulticast mode [ 85.721380][ T8584] netlink: 'syz.2.836': attribute type 27 has an invalid length. [ 85.758511][ T8584] bridge0: port 3(dummy0) entered disabled state [ 85.760446][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.762616][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.824419][ T8584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.833292][ T8584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.874754][ T8584] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.877243][ T8584] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.879681][ T8584] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.882658][ T8584] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.895638][ T8584] gtp0: left promiscuous mode [ 85.899289][ T8605] __nla_validate_parse: 69 callbacks suppressed [ 85.899298][ T8605] netlink: 132 bytes leftover after parsing attributes in process `syz.3.840'. [ 85.905297][ T8584] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.907843][ T8584] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.910241][ T8584] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.912721][ T8584] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.918144][ T8584] vxlan0: left promiscuous mode [ 85.919535][ T8584] vxlan0: left allmulticast mode [ 85.945881][ T8594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.949175][ T8594] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.955229][ T8594] bridge0: port 3(dummy0) entered blocking state [ 85.957094][ T8594] bridge0: port 3(dummy0) entered forwarding state [ 85.960897][ T8594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.961263][ T1151] [ 85.967902][ T1151] ============================= [ 85.969262][ T1151] WARNING: suspicious RCU usage [ 85.970673][ T1151] 6.14.0-syzkaller-10892-g4e82c87058f4 #0 Not tainted [ 85.973478][ T1151] ----------------------------- [ 85.975353][ T1151] net/sched/sch_generic.c:1251 suspicious rcu_dereference_protected() usage! [ 85.977745][ T1151] [ 85.977745][ T1151] other info that might help us debug this: [ 85.977745][ T1151] [ 85.980539][ T1151] [ 85.980539][ T1151] rcu_scheduler_active = 2, debug_locks = 1 [ 85.982828][ T1151] 3 locks held by kworker/u32:8/1151: [ 85.984385][ T1151] #0: ffff88804b4ce148 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 85.987254][ T1151] #1: ffffc90005d97d18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 85.990594][ T1151] #2: ffffffff8e3bf140 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0 [ 85.993350][ T1151] [ 85.993350][ T1151] stack backtrace: [ 85.995044][ T1151] CPU: 3 UID: 0 PID: 1151 Comm: kworker/u32:8 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 85.995058][ T1151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.995075][ T1151] Workqueue: bond0 bond_mii_monitor [ 85.995090][ T1151] Call Trace: [ 85.995094][ T1151] [ 85.995098][ T1151] dump_stack_lvl+0x16c/0x1f0 [ 85.995115][ T1151] lockdep_rcu_suspicious+0x166/0x260 [ 85.995133][ T1151] dev_activate+0x45c/0x12d0 [ 85.995147][ T1151] ? ethtool_op_get_link+0x1d/0x70 [ 85.995161][ T1151] ? bond_check_dev_link+0x196/0x480 [ 85.995170][ T1151] ? bond_mii_monitor+0x3c0/0x2dc0 [ 85.995181][ T1151] ? process_one_work+0x9cc/0x1b70 [ 85.995192][ T1151] ? worker_thread+0x6c8/0xf10 [ 85.995203][ T1151] ? kthread+0x3c2/0x780 [ 85.995212][ T1151] ? ret_from_fork+0x45/0x80 [ 85.995223][ T1151] ? __pfx_dev_activate+0x10/0x10 [ 85.995236][ T1151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.995250][ T1151] linkwatch_do_dev+0x13d/0x160 [ 85.995260][ T1151] linkwatch_sync_dev+0x181/0x210 [ 85.995271][ T1151] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 85.995285][ T1151] ethtool_op_get_link+0x1d/0x70 [ 85.995300][ T1151] bond_check_dev_link+0x196/0x480 [ 85.995311][ T1151] ? __pfx_bond_check_dev_link+0x10/0x10 [ 85.995327][ T1151] bond_mii_monitor+0x3c0/0x2dc0 [ 85.995343][ T1151] ? __pfx_bond_mii_monitor+0x10/0x10 [ 85.995359][ T1151] ? rcu_is_watching+0x12/0xc0 [ 85.995373][ T1151] process_one_work+0x9cc/0x1b70 [ 85.995388][ T1151] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 85.995400][ T1151] ? __pfx_process_one_work+0x10/0x10 [ 85.995416][ T1151] ? assign_work+0x1a0/0x250 [ 85.995427][ T1151] worker_thread+0x6c8/0xf10 [ 85.995443][ T1151] ? __kthread_parkme+0x19e/0x250 [ 85.995458][ T1151] ? __pfx_worker_thread+0x10/0x10 [ 85.995470][ T1151] kthread+0x3c2/0x780 [ 85.995480][ T1151] ? __pfx_kthread+0x10/0x10 [ 85.995493][ T1151] ? __pfx_kthread+0x10/0x10 [ 85.995503][ T1151] ? __pfx_kthread+0x10/0x10 [ 85.995513][ T1151] ? __pfx_kthread+0x10/0x10 [ 85.995522][ T1151] ? rcu_is_watching+0x12/0xc0 [ 85.995535][ T1151] ? __pfx_kthread+0x10/0x10 [ 85.995545][ T1151] ret_from_fork+0x45/0x80 [ 85.995555][ T1151] ? __pfx_kthread+0x10/0x10 [ 85.995565][ T1151] ret_from_fork_asm+0x1a/0x30 [ 85.995587][ T1151] [ 85.995652][ T1151] [ 86.061686][ T1151] ============================= [ 86.063134][ T1151] WARNING: suspicious RCU usage [ 86.064890][ T1151] 6.14.0-syzkaller-10892-g4e82c87058f4 #0 Not tainted [ 86.066897][ T1151] ----------------------------- [ 86.068360][ T1151] net/sched/sch_generic.c:1229 suspicious rcu_dereference_protected() usage! [ 86.070857][ T1151] [ 86.070857][ T1151] other info that might help us debug this: [ 86.070857][ T1151] [ 86.073736][ T1151] [ 86.073736][ T1151] rcu_scheduler_active = 2, debug_locks = 1 [ 86.075896][ T1151] 3 locks held by kworker/u32:8/1151: [ 86.077402][ T1151] #0: ffff88804b4ce148 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 86.080343][ T1151] #1: ffffc90005d97d18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 86.083771][ T1151] #2: ffffffff8e3bf140 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0 [ 86.086408][ T1151] [ 86.086408][ T1151] stack backtrace: [ 86.088035][ T1151] CPU: 3 UID: 0 PID: 1151 Comm: kworker/u32:8 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 86.088048][ T1151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.088055][ T1151] Workqueue: bond0 bond_mii_monitor [ 86.088068][ T1151] Call Trace: [ 86.088072][ T1151] [ 86.088077][ T1151] dump_stack_lvl+0x16c/0x1f0 [ 86.088092][ T1151] lockdep_rcu_suspicious+0x166/0x260 [ 86.088110][ T1151] transition_one_qdisc+0x1d4/0x210 [ 86.088123][ T1151] dev_activate+0x216/0x12d0 [ 86.088137][ T1151] ? worker_thread+0x6c8/0xf10 [ 86.088148][ T1151] ? kthread+0x3c2/0x780 [ 86.088157][ T1151] ? ret_from_fork+0x45/0x80 [ 86.088168][ T1151] ? __pfx_dev_activate+0x10/0x10 [ 86.088181][ T1151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.088195][ T1151] linkwatch_do_dev+0x13d/0x160 [ 86.088206][ T1151] linkwatch_sync_dev+0x181/0x210 [ 86.088216][ T1151] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 86.088231][ T1151] ethtool_op_get_link+0x1d/0x70 [ 86.088246][ T1151] bond_check_dev_link+0x196/0x480 [ 86.088257][ T1151] ? __pfx_bond_check_dev_link+0x10/0x10 [ 86.088272][ T1151] bond_mii_monitor+0x3c0/0x2dc0 [ 86.088289][ T1151] ? __pfx_bond_mii_monitor+0x10/0x10 [ 86.088304][ T1151] ? rcu_is_watching+0x12/0xc0 [ 86.088319][ T1151] process_one_work+0x9cc/0x1b70 [ 86.088334][ T1151] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 86.088347][ T1151] ? __pfx_process_one_work+0x10/0x10 [ 86.088361][ T1151] ? assign_work+0x1a0/0x250 [ 86.088373][ T1151] worker_thread+0x6c8/0xf10 [ 86.088389][ T1151] ? __kthread_parkme+0x19e/0x250 [ 86.088403][ T1151] ? __pfx_worker_thread+0x10/0x10 [ 86.088415][ T1151] kthread+0x3c2/0x780 [ 86.088426][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.088435][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.088444][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.088454][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.088463][ T1151] ? rcu_is_watching+0x12/0xc0 [ 86.088475][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.088491][ T1151] ret_from_fork+0x45/0x80 [ 86.088500][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.088510][ T1151] ret_from_fork_asm+0x1a/0x30 [ 86.088531][ T1151] [ 86.088539][ T1151] [ 86.150074][ T1151] ============================= [ 86.151478][ T1151] WARNING: suspicious RCU usage [ 86.152819][ T1151] 6.14.0-syzkaller-10892-g4e82c87058f4 #0 Not tainted [ 86.155158][ T1151] ----------------------------- [ 86.156500][ T1151] ./include/linux/rtnetlink.h:163 suspicious rcu_dereference_protected() usage! [ 86.158944][ T1151] [ 86.158944][ T1151] other info that might help us debug this: [ 86.158944][ T1151] [ 86.161942][ T1151] [ 86.161942][ T1151] rcu_scheduler_active = 2, debug_locks = 1 [ 86.164342][ T1151] 3 locks held by kworker/u32:8/1151: [ 86.165868][ T1151] #0: ffff88804b4ce148 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 86.168732][ T1151] #1: ffffc90005d97d18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 86.172213][ T1151] #2: ffffffff8e3bf140 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0 [ 86.175360][ T1151] [ 86.175360][ T1151] stack backtrace: [ 86.176975][ T1151] CPU: 3 UID: 0 PID: 1151 Comm: kworker/u32:8 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 86.176988][ T1151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.176995][ T1151] Workqueue: bond0 bond_mii_monitor [ 86.177008][ T1151] Call Trace: [ 86.177012][ T1151] [ 86.177016][ T1151] dump_stack_lvl+0x16c/0x1f0 [ 86.177032][ T1151] lockdep_rcu_suspicious+0x166/0x260 [ 86.177050][ T1151] dev_activate+0x7f8/0x12d0 [ 86.177065][ T1151] ? worker_thread+0x6c8/0xf10 [ 86.177076][ T1151] ? kthread+0x3c2/0x780 [ 86.177085][ T1151] ? ret_from_fork+0x45/0x80 [ 86.177097][ T1151] ? __pfx_dev_activate+0x10/0x10 [ 86.177110][ T1151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.177123][ T1151] linkwatch_do_dev+0x13d/0x160 [ 86.177134][ T1151] linkwatch_sync_dev+0x181/0x210 [ 86.177144][ T1151] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 86.177159][ T1151] ethtool_op_get_link+0x1d/0x70 [ 86.177174][ T1151] bond_check_dev_link+0x196/0x480 [ 86.177185][ T1151] ? __pfx_bond_check_dev_link+0x10/0x10 [ 86.177200][ T1151] bond_mii_monitor+0x3c0/0x2dc0 [ 86.177216][ T1151] ? __pfx_bond_mii_monitor+0x10/0x10 [ 86.177232][ T1151] ? rcu_is_watching+0x12/0xc0 [ 86.177247][ T1151] process_one_work+0x9cc/0x1b70 [ 86.177262][ T1151] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 86.177275][ T1151] ? __pfx_process_one_work+0x10/0x10 [ 86.177290][ T1151] ? assign_work+0x1a0/0x250 [ 86.177302][ T1151] worker_thread+0x6c8/0xf10 [ 86.177317][ T1151] ? __kthread_parkme+0x19e/0x250 [ 86.177332][ T1151] ? __pfx_worker_thread+0x10/0x10 [ 86.177343][ T1151] kthread+0x3c2/0x780 [ 86.177354][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.177363][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.177373][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.177382][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.177391][ T1151] ? rcu_is_watching+0x12/0xc0 [ 86.177404][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.177414][ T1151] ret_from_fork+0x45/0x80 [ 86.177424][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.177434][ T1151] ret_from_fork_asm+0x1a/0x30 [ 86.177455][ T1151] [ 86.177502][ T1151] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 86.239729][ T1151] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 1151, name: kworker/u32:8 [ 86.242343][ T1151] preempt_count: 0, expected: 0 [ 86.243720][ T1151] RCU nest depth: 1, expected: 0 [ 86.245043][ T1151] 3 locks held by kworker/u32:8/1151: [ 86.246489][ T1151] #0: ffff88804b4ce148 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 86.249259][ T1151] #1: ffffc90005d97d18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 86.252650][ T1151] #2: ffffffff8e3bf140 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0 [ 86.255854][ T1151] CPU: 3 UID: 0 PID: 1151 Comm: kworker/u32:8 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 86.255868][ T1151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.255875][ T1151] Workqueue: bond0 bond_mii_monitor [ 86.255889][ T1151] Call Trace: [ 86.255894][ T1151] [ 86.255898][ T1151] dump_stack_lvl+0x16c/0x1f0 [ 86.255914][ T1151] __might_resched+0x3c0/0x5e0 [ 86.255930][ T1151] ? __pfx___might_resched+0x10/0x10 [ 86.255946][ T1151] down_read+0x74/0x480 [ 86.255956][ T1151] ? __pfx_down_read+0x10/0x10 [ 86.255965][ T1151] ? dev_map_notification+0x6a/0xb00 [ 86.255980][ T1151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.255994][ T1151] wireless_nlevent_flush+0x1b/0x100 [ 86.256010][ T1151] wext_netdev_notifier_call+0xe/0x20 [ 86.256023][ T1151] notifier_call_chain+0xb9/0x410 [ 86.256038][ T1151] ? __pfx_wext_netdev_notifier_call+0x10/0x10 [ 86.256056][ T1151] call_netdevice_notifiers_info+0xbe/0x140 [ 86.256068][ T1151] netdev_state_change+0x113/0x150 [ 86.256077][ T1151] ? __pfx_netdev_state_change+0x10/0x10 [ 86.256089][ T1151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.256102][ T1151] linkwatch_do_dev+0x12b/0x160 [ 86.256113][ T1151] linkwatch_sync_dev+0x181/0x210 [ 86.256124][ T1151] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 86.256138][ T1151] ethtool_op_get_link+0x1d/0x70 [ 86.256153][ T1151] bond_check_dev_link+0x196/0x480 [ 86.256164][ T1151] ? __pfx_bond_check_dev_link+0x10/0x10 [ 86.256180][ T1151] bond_mii_monitor+0x3c0/0x2dc0 [ 86.256197][ T1151] ? __pfx_bond_mii_monitor+0x10/0x10 [ 86.256213][ T1151] ? rcu_is_watching+0x12/0xc0 [ 86.256228][ T1151] process_one_work+0x9cc/0x1b70 [ 86.256244][ T1151] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 86.256257][ T1151] ? __pfx_process_one_work+0x10/0x10 [ 86.256272][ T1151] ? assign_work+0x1a0/0x250 [ 86.256284][ T1151] worker_thread+0x6c8/0xf10 [ 86.256300][ T1151] ? __kthread_parkme+0x19e/0x250 [ 86.256315][ T1151] ? __pfx_worker_thread+0x10/0x10 [ 86.256327][ T1151] kthread+0x3c2/0x780 [ 86.256338][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.256347][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.256356][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.256366][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.256375][ T1151] ? rcu_is_watching+0x12/0xc0 [ 86.256388][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.256398][ T1151] ret_from_fork+0x45/0x80 [ 86.256409][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.256419][ T1151] ret_from_fork_asm+0x1a/0x30 [ 86.256441][ T1151] [ 86.256445][ T1151] [ 86.327992][ T1151] ============================= [ 86.329333][ T1151] [ BUG: Invalid wait context ] [ 86.330728][ T1151] 6.14.0-syzkaller-10892-g4e82c87058f4 #0 Tainted: G W [ 86.332951][ T1151] ----------------------------- [ 86.334773][ T1151] kworker/u32:8/1151 is trying to lock: [ 86.336277][ T1151] ffffffff9010c390 (net_rwsem){++++}-{4:4}, at: wireless_nlevent_flush+0x1b/0x100 [ 86.338794][ T1151] other info that might help us debug this: [ 86.340442][ T1151] context-{5:5} [ 86.341412][ T1151] 3 locks held by kworker/u32:8/1151: [ 86.343000][ T1151] #0: ffff88804b4ce148 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 86.346210][ T1151] #1: ffffc90005d97d18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 86.349508][ T1151] #2: ffffffff8e3bf140 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0 [ 86.352161][ T1151] stack backtrace: [ 86.353414][ T1151] CPU: 3 UID: 0 PID: 1151 Comm: kworker/u32:8 Tainted: G W 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 86.353438][ T1151] Tainted: [W]=WARN [ 86.353443][ T1151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.353455][ T1151] Workqueue: bond0 bond_mii_monitor [ 86.353475][ T1151] Call Trace: [ 86.353487][ T1151] [ 86.353494][ T1151] dump_stack_lvl+0x116/0x1f0 [ 86.353518][ T1151] __lock_acquire+0x3ff/0x1ba0 [ 86.353535][ T1151] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 86.353555][ T1151] lock_acquire+0x179/0x350 [ 86.353569][ T1151] ? wireless_nlevent_flush+0x1b/0x100 [ 86.353593][ T1151] ? __pfx___might_resched+0x10/0x10 [ 86.353619][ T1151] down_read+0x9b/0x480 [ 86.353632][ T1151] ? wireless_nlevent_flush+0x1b/0x100 [ 86.353654][ T1151] ? __pfx_down_read+0x10/0x10 [ 86.353667][ T1151] ? dev_map_notification+0x6a/0xb00 [ 86.353690][ T1151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.353727][ T1151] wireless_nlevent_flush+0x1b/0x100 [ 86.353750][ T1151] wext_netdev_notifier_call+0xe/0x20 [ 86.353772][ T1151] notifier_call_chain+0xb9/0x410 [ 86.353796][ T1151] ? __pfx_wext_netdev_notifier_call+0x10/0x10 [ 86.353821][ T1151] call_netdevice_notifiers_info+0xbe/0x140 [ 86.353839][ T1151] netdev_state_change+0x113/0x150 [ 86.353854][ T1151] ? __pfx_netdev_state_change+0x10/0x10 [ 86.353870][ T1151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.353889][ T1151] linkwatch_do_dev+0x12b/0x160 [ 86.353905][ T1151] linkwatch_sync_dev+0x181/0x210 [ 86.353922][ T1151] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 86.353946][ T1151] ethtool_op_get_link+0x1d/0x70 [ 86.353969][ T1151] bond_check_dev_link+0x196/0x480 [ 86.353986][ T1151] ? __pfx_bond_check_dev_link+0x10/0x10 [ 86.354006][ T1151] bond_mii_monitor+0x3c0/0x2dc0 [ 86.354027][ T1151] ? __pfx_bond_mii_monitor+0x10/0x10 [ 86.354049][ T1151] ? rcu_is_watching+0x12/0xc0 [ 86.354070][ T1151] process_one_work+0x9cc/0x1b70 [ 86.354091][ T1151] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 86.354111][ T1151] ? __pfx_process_one_work+0x10/0x10 [ 86.354132][ T1151] ? assign_work+0x1a0/0x250 [ 86.354149][ T1151] worker_thread+0x6c8/0xf10 [ 86.354169][ T1151] ? __kthread_parkme+0x19e/0x250 [ 86.354193][ T1151] ? __pfx_worker_thread+0x10/0x10 [ 86.354211][ T1151] kthread+0x3c2/0x780 [ 86.354228][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.354243][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.354259][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.354274][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.354289][ T1151] ? rcu_is_watching+0x12/0xc0 [ 86.354309][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.354325][ T1151] ret_from_fork+0x45/0x80 [ 86.354341][ T1151] ? __pfx_kthread+0x10/0x10 [ 86.354357][ T1151] ret_from_fork_asm+0x1a/0x30 [ 86.354386][ T1151] [ 86.430601][ C3] vkms_vblank_simulate: vblank timer overrun [ 86.451272][ T12] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 86.453833][ T12] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 86.456354][ T12] bond0: (slave netdevsim0): link status definitely down, disabling slave VM DIAGNOSIS: 08:00:11 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000002 RBX=ffffffff90127878 RCX=ffffffff81ca66eb RDX=ffff8880275e4880 RSI=00007fb35fd8d169 RDI=0000000000000006 RBP=ffffffff90127878 RSP=ffffc90006fde780 R8 =0000000000000006 R9 =00007fb35fd8d169 R10=ffffffffa00045c0 R11=0000000000000000 R12=00007fb35fd8d169 R13=dffffc0000000000 R14=0000000000000000 R15=ffffffffa00045c0 RIP=ffffffff81ca66eb RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb360b2f6c0 ffffffff 00c00000 GS =0000 ffff8880d69d4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f231b170f20 CR3=0000000050998000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000003 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4f998550 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb35fe0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb35fe0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb35fe0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb35fe0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb35fe0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb35fe0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000b2b56cd9 RBX=ffff888028848b40 RCX=000000003fec5b05 RDX=00000000591f0d66 RSI=000000004d9fe6cd RDI=000000003fec5b05 RBP=ffff888028848af0 RSP=ffffc900066ee528 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000002 R11=0000000000000000 R12=0000000000000007 R13=0000000000000001 R14=ffff888028848000 R15=0000000000000000 RIP=ffffffff8197e677 RFL=00000017 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f231c06b6c0 ffffffff 00c00000 GS =0000 ffff8880d6ad4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb35dbf5f98 CR3=0000000029cdc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=e305fc9be305fc9b e305fc9be305fc9b e305fc9be305fc9b e305fc9be305fc9b e305fc9be305fc9b e305fc9be305fc9b e305fc9be305fc9b e305fc9be305fc9b ZMM22=b1c8ed01b1c8ed01 b1c8ed01b1c8ed01 b1c8ed01b1c8ed01 b1c8ed01b1c8ed01 b1c8ed01b1c8ed01 b1c8ed01b1c8ed01 b1c8ed01b1c8ed01 b1c8ed01b1c8ed01 ZMM23=5b2918e65b2918e6 5b2918e65b2918e6 5b2918e65b2918e6 5b2918e65b2918e6 5b2918e65b2918e6 5b2918e65b2918e6 5b2918e65b2918e6 5b2918e65b2918e6 ZMM24=c7760c58c7760c58 c7760c58c7760c58 c7760c58c7760c58 c7760c58c7760c58 c7760c58c7760c58 c7760c58c7760c58 c7760c58c7760c58 c7760c58c7760c58 ZMM25=45a2e13545a2e135 45a2e13545a2e135 45a2e13545a2e135 45a2e13545a2e135 45a2e13545a2e135 45a2e13545a2e135 45a2e13545a2e135 45a2e13545a2e135 ZMM26=debcaa0cdebcaa0c debcaa0cdebcaa0c debcaa0cdebcaa0c debcaa0cdebcaa0c debcaa0cdebcaa0c debcaa0cdebcaa0c debcaa0cdebcaa0c debcaa0cdebcaa0c ZMM27=a7097b79a7097b79 a7097b79a7097b79 a7097b79a7097b79 a7097b79a7097b79 a7097b79a7097b79 a7097b79a7097b79 a7097b79a7097b79 a7097b79a7097b79 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9704000097040000 9704000097040000 9704000097040000 9704000097040000 9704000097040000 9704000097040000 9704000097040000 9704000097040000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=00007f083c2d5720 RCX=ffffffff8aa22aaf RDX=0000000000000ab0 RSI=ffffffff8aa22aaf RDI=000000000000000f RBP=ffffffff8aa22aaf RSP=00007ffd7a0bbba0 R8 =00007f083b7a6118 R9 =00007f083b792000 R10=00007f083a7fd008 R11=000000000000000f R12=000000000000000f R13=0000000000000000 R14=ffffffff8aa22aaf R15=0000000000058f16 RIP=00007f083b46d166 RFL=00000283 [--S---C] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055559502f500 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3ba15d CR3=00000000515f0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000003 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff854b8120 RDI=ffffffff9ae04360 RBP=ffffffff9ae04320 RSP=ffffc90005d973d0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35c08be R15=dffffc0000000000 RIP=ffffffff854b8147 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cd4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb35d7d2f98 CR3=0000000050998000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb35fe0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb35fe0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb35fe0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb35fe0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb35fe0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb35fe0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb35ff7c488 00007fb35ff7c480 00007fb35ff7c478 00007fb35ff7c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb360add100 00007fb35ff7c440 00007fb35ff70004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb35ff7c498 00007fb35ff7c490 00007fb35ff7c488 00007fb35ff7c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000