last executing test programs: 12.341514289s ago: executing program 1 (id=213): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300239c87e19fdabd663e3cd0362e5f954db23560d55ba2458ffba2cadbe73aab1192fd20cd7784ee6efd8761dbe6f78a3214b99b49786051b3bd044c8640e74afd61e77cef1c66d8ed603cc97524678fbc53ca7b21e70b86894fbade020000000000000017bf2e06101234744f0831af0ff39bae7233568a3b4417", @ANYRES32=r1, @ANYBLOB="14005e8008000200000000000800010000000000", @ANYRES16=r0], 0x30}}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x8, 0xc2b81) r4 = dup(r3) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x32ec, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f00000000c0), &(0x7f00000001c0)) r5 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r5, &(0x7f0000000340)='net/nf_conntrack\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x6ed5d8af055a4fb7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c0000000001010400000000ffffff8802000000240001801400018008000100ac1414bb08000200ac1414bb0c00028005000100000000002400028014000180080001000000004008000200ac1414bb0c00028005000100ffff"], 0x8c}, 0x1, 0x600000000000000, 0x0, 0x40}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$read(0x0, 0x0, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r11) syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x0) clock_adjtime(0x5, &(0x7f0000000140)={0x930b, 0xa92a, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x80000000, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0c, 0xfffffffffffffffe, 0x0, 0x0, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0xaaaaaaaaaaaab22, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 10.305520595s ago: executing program 1 (id=220): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000010002b00020300000000000000000000fe880000000000000000000000000001fc01000000000000000000000000000004000400af"], 0xc0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x6) fanotify_mark(0xffffffffffffffff, 0x8, 0x800003e, r2, 0x0) r3 = dup(r1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x84, 0x80, 0x100000}, 0x20) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180), 0x0) io_uring_enter(r8, 0x2def, 0x4000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r9 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) socket$inet6(0xa, 0x3, 0xff) mkdir(&(0x7f0000000400)='./file0\x00', 0x21) socket$kcm(0x10, 0x2, 0x4) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps_rollup\x00') 5.582226697s ago: executing program 3 (id=236): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000010002b00020300000000000000000000fe880000000000000000000000000001fc01000000000000000000000000000004000400af"], 0xc0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x6) fanotify_mark(0xffffffffffffffff, 0x8, 0x800003e, r2, 0x0) r3 = dup(r1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x84, 0x80, 0x100000}, 0x20) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180), 0x0) io_uring_enter(r8, 0x2def, 0x4000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r9 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) socket$inet6(0xa, 0x3, 0xff) mkdir(&(0x7f0000000400)='./file0\x00', 0x21) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps_rollup\x00') 5.536790513s ago: executing program 1 (id=221): socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_pts(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x28, 0x1, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newtfilter={0x788, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x2}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x75c, 0x2, [@TCA_U32_POLICE={0x41c, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x902, 0x0, 0x9, 0x8000, 0xff, 0x0, 0xa, 0x5, 0x4, 0x800, 0x9, 0xc, 0x7, 0x3, 0x3, 0x40, 0x3, 0x2, 0x9, 0xc9b, 0x1000, 0x9, 0x6, 0xeea0, 0x400, 0x3, 0x2, 0x4, 0x30b9, 0x5, 0x5df, 0x2, 0xffff, 0x100, 0x5, 0xffffffff, 0x2, 0x6, 0x0, 0x60, 0x6, 0xe, 0x1ff, 0x0, 0xa58, 0x3, 0x3, 0x4, 0x3, 0x3, 0x8, 0x1, 0x1, 0xf8bd, 0x0, 0xc599, 0x0, 0x9, 0x4, 0x3, 0x7fff, 0x51f, 0x5, 0x6f, 0x80, 0x40, 0x3, 0x0, 0x8, 0x7, 0x5, 0x4, 0x5, 0xd68f, 0x3, 0x4, 0x2, 0x1, 0x4, 0x0, 0x2, 0x14da, 0x68, 0x6, 0x88b4, 0x4, 0x3, 0x8, 0x7, 0xfffffffa, 0x40, 0xfffffffa, 0x5, 0xc, 0xe, 0x9, 0x5, 0x1000, 0x8, 0x7, 0x4, 0xc000000, 0x81, 0x9, 0x2, 0x9, 0x7ff, 0x5a5, 0xffffffff, 0xb761, 0x12, 0x7, 0x6, 0x499, 0xfffffff8, 0x64a, 0x1, 0x5, 0x9, 0x3, 0x3, 0x2, 0xf, 0x4, 0x40, 0x100, 0x3, 0x3, 0x6, 0x60000, 0x9, 0xc6, 0xf8, 0xe9, 0x4, 0x8, 0x6d5, 0xfffffffa, 0xf, 0x9b6, 0xffffffff, 0x2, 0x5, 0x3, 0x56, 0x8ee8, 0x0, 0x0, 0x4, 0x8, 0x1, 0x6, 0x401, 0x80d, 0x24, 0x5, 0x9, 0x1, 0x3, 0x101, 0x8, 0x1, 0xfff, 0x3, 0x0, 0x10000, 0xffff7fff, 0x7, 0xc, 0x8, 0x9, 0x0, 0x2, 0x6, 0xc3e, 0x4, 0x9, 0x3, 0x8001, 0x53, 0xc12, 0x8, 0x6, 0x43, 0x7fffffff, 0x9c7, 0x101, 0x1, 0xfffffffc, 0x9, 0x2, 0x7, 0x6, 0x4, 0x10001, 0x7f, 0x3, 0x5, 0xfffffffa, 0x4, 0x8, 0x25, 0x7, 0x9, 0x9, 0x100, 0x8000, 0x9, 0x9, 0x4, 0x2, 0x9, 0x48b, 0x10001, 0x5, 0x12, 0x4, 0xa08a, 0x8, 0x8, 0x5, 0x3, 0x2, 0xf9, 0x673, 0x4, 0x674f, 0x3, 0x5, 0x4, 0x2, 0x5, 0x0, 0x6, 0x2, 0x7ff, 0x5, 0x2, 0x2d3, 0x5, 0x0, 0x7, 0x2, 0x2e3c, 0x7, 0x1ff, 0x0, 0x91f2, 0x8001, 0x3, 0x5, 0x7fff, 0x6, 0x0, 0x4, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_U32_LINK={0x8, 0x3, 0x4}, @TCA_U32_DIVISOR={0x8, 0x4, 0xf9}, @TCA_U32_MARK={0x10, 0xa, {0x5, 0xf}}, @TCA_U32_HASH={0x8, 0x2, 0x8}, @TCA_U32_SEL={0x314, 0x5, {0xd, 0x1, 0xe, 0x0, 0x5, 0xa, 0x5, 0x10001, [{0x3, 0xaa8b, 0x2, 0x401}, {0x4, 0x6, 0x3, 0x800}, {0x0, 0x0, 0x7fff, 0x4}, {0x8000, 0xb, 0x1ff, 0xffffffff}, {0x1, 0xdbd3, 0x3, 0x6}, {0x2, 0xd50, 0x7, 0xfffffffe}, {0xf, 0x80000001, 0x8}, {0xfffff800, 0xadba, 0x9, 0x5}, {0x496, 0x2, 0xe, 0x2d}, {0x4, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7}, {0x6, 0xff, 0x1, 0x4d3f3533}, {0x1000, 0x3, 0x4db6, 0x7}, {0x4, 0x1d, 0x7c}, {0x8001, 0x7f, 0x7, 0xb4}, {0x2, 0x7, 0x4d55, 0x2}, {0xfffffffb, 0x9f, 0x6, 0x5}, {0x730, 0x9, 0x6, 0x2}, {0x3, 0x2000000, 0xe, 0xfffffffc}, {0x8000, 0x6, 0x0, 0x1}, {0x4, 0x4, 0x10000, 0x8000}, {0x9, 0x6, 0xac5, 0x4}, {0x7, 0x3, 0x84, 0x8}, {0xe201, 0x10001, 0x0, 0x59}, {0x1, 0x4, 0x2, 0x7}, {0x7, 0x7, 0x15e60, 0x100}, {0x100, 0x2, 0x3, 0x7}, {0xa, 0x80000001, 0xfffffffe, 0x6e}, {0x8, 0x8daa, 0x4, 0x9}, {0xb, 0x80000000, 0x4, 0xf}, {0x40, 0x2, 0xff, 0x2bf}, {0x9, 0xfff, 0x4, 0x9}, {0x3ff, 0x370640, 0x6, 0xffff0001}, {0x7, 0x1400, 0x84e9, 0x2}, {0x80, 0x7, 0x61d0, 0xfffffffb}, {0x7, 0xe, 0x1, 0x4}, {0xc8, 0x9, 0x8e37, 0x694}, {0x859, 0xac3, 0x5074, 0x2}, {0x401, 0x4, 0x9, 0x8}, {0x24, 0x6, 0x8, 0x101}, {0x1, 0x9, 0x9, 0x7}, {0x9, 0x5, 0x2, 0xff}, {0xfffffffb, 0x7, 0x9, 0x39}, {0x56fb, 0x4, 0x0, 0x4}, {0x8, 0x1, 0x4, 0xfffffffb}, {0x2, 0x6, 0x8, 0x5}, {0x6, 0x7fffffff, 0x80, 0x1}, {0x7, 0x9f4a, 0xfff, 0x4}]}}]}}]}, 0x788}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00ffee0000eeffffffffffffff00ff0300000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 5.312048811s ago: executing program 2 (id=237): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000004140)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000003fc0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/169, 0xa9}, {&(0x7f0000000280)=""/148, 0x94}], 0x2, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000000400)=""/235, 0xeb}, {&(0x7f0000000680)=""/219, 0xdb}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000500)=""/2, 0x2}, {&(0x7f0000000540)=""/32, 0x20}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/175, 0xaf}, {&(0x7f0000001940)=""/199, 0xc7}], 0x8, &(0x7f0000001ac0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}}, {{&(0x7f0000001c40), 0x6e, &(0x7f0000003240)=[{&(0x7f0000004440)=""/223, 0xdf}, {&(0x7f0000001dc0)=""/65, 0x41}, {&(0x7f0000001e40)=""/242, 0xf2}, {&(0x7f0000000580)=""/53, 0x35}, {&(0x7f0000000600)=""/37, 0x25}, {&(0x7f0000001f40)=""/158, 0x9e}, {&(0x7f0000002000)=""/65, 0x41}, {&(0x7f0000002080)=""/152, 0x98}, {&(0x7f0000002140)=""/201, 0xc9}, {&(0x7f0000002240)=""/4096, 0x1000}], 0xa, &(0x7f0000003300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f00000033c0)=@abs, 0x6e, &(0x7f0000003540)=[{&(0x7f0000003440)=""/212, 0xd4}], 0x1, &(0x7f0000003580)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000003680)=@abs, 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003700)=""/206, 0xce}, {&(0x7f0000003800)=""/201, 0xc9}, {&(0x7f0000003900)=""/7, 0x7}, {&(0x7f0000003940)=""/187, 0xbb}, {&(0x7f0000003a00)=""/206, 0xce}, {&(0x7f0000003b00)=""/238, 0xee}, {&(0x7f0000003c00)=""/121, 0x79}], 0x7, &(0x7f0000003d00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000003d80), 0x6e, &(0x7f0000003f80)=[{&(0x7f0000003e00)=""/209, 0xd1}, {&(0x7f0000003f00)=""/121, 0x79}], 0x2}}], 0x6, 0x40000100, &(0x7f0000004180)={r1, r2+60000000}) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = userfaultfd(0x80001) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x8000) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x102c0c, &(0x7f0000000400), &(0x7f0000000480), &(0x7f00000004c0)) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000043c0)={&(0x7f0000004200)={0x1bc, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_USERDATA={0x70, 0x7, 0x1, 0x0, "aaf297f9951850189b6c003864aae1072585f144ff5e60bc6656a193d847d1933dc120f271b00b698f253ed73d114c3a56a52000a07ee0c70a04ef9d793a1834df9f3cc738f1b4f72c539be2d5d34eb2263c6c73374a8a4f2dd7afafe19a19e8acd61faa5c414dc77e3b74d9"}, @NFTA_RULE_EXPRESSIONS={0x110, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x6c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_MASK={0x38, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x1bc}}, 0x1) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) r6 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x16}}}}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x0, "2f97a683"}, 0xc, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c000310"], 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x3) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 4.958683309s ago: executing program 3 (id=238): socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x6, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000769, 0x0, 0x0) socket$inet6(0xa, 0x6, 0xa6) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x22000c0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) socket$key(0xf, 0x3, 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = open(&(0x7f0000000300)='./bus\x00', 0x121000, 0x13c) ftruncate(r3, 0x2008002) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(r4, 0xfffffffffffffebe, &(0x7f0000000180)=0x2) 4.591926327s ago: executing program 1 (id=239): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x48}}, 0x8000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000006280)="382c1fedaf023bd55640c316e44c011327f97924e5d5aac258e1e9fcc3cffdcf5f122c531cfa765707f6a50737c263545180dc10a69056b9deca02cc4be9d32a61c296609f783cc29340d5b7cc6e5131f7f51a47ab78febd6816a0659e028b99ace9ba3d1e8fee7949b4aa018ab813ce9e82da65eb7726cbd554a005b10415c9cba49179d75c558fda1e000eb35a5a9ac6bb7f4748e7bc56bcfd6d4d4cd1efef20d8b6a6deeddef38571289bb76f4d360bf36976244ebdc1533c2a4137d908165f48676b9f836aa2dc55d88579b908e91021b240cd64df75c16b643d8ef612fcfcbe064e4f404c1d82cd562b1d998dc3880cea8c973035b67b0b5e6d258b883bf936a731fccd463755a2720052b27cdd6bb8aff9838e88d993631288c2724aa377c977df238ca6061091da4b303a59472aadb97f44850c5eb4cf20b8a03a48b836c55b065e98f8ebd5c270483864c5f34862bd223e5df209b0cdc2fa4ea718b186d7c7716532af6b1d8ebc1eca23b7d2439340f1b906ad0aab6cbf0c7e716f8b6e26168e53ce83211a69048e2fa208ce49e4fa75db7adcd1954e72bd926529cbd2919f55d12cea56ac71729a7c3c31bfd05fd646f36e1e093bbd76038b9aa43536e2320415f7e44df57a3f3da057020f4a4032dc2f5dd6b9215af91917abfc0247817536762693a405908267bbcf16f24cada76f604933970c4dc6acbcac02df7a6bddd993336a226890081aea7b782f56bc0f3c334923a524f189fa13ff6f91c3e2f9bea34899e4e883e97a1debe3b192940c383b93174a330c0d2467ec845d8c14184c89c3980b042078a03e394f96ca8deea0c31d19c7687ff60c1013e7fd1f674f6d247933484a73e4a7474fba3fabfffcac470ff5084d068b7feec8f316e570e65dec305db4005173f7cee2c6c10c4b36bc1ea98862eb1c36507803cc6a91df4499ee183d6f126b063f2be49721c0edd84acdcfea536c4cd6119d08d6dea98b9cf4d5e2e868bde6be00bb9f6843b711481e7b3cc2b9a29580f042b620ceb4dbba0a3984edb1d82268ad737146c3bec6c8be1e327c4fa172ddce39aabe36ca0254855d3e3cb90835e87e1c0ae20dd2e4e2012851f5be5e92d23ff4f292d877be28afbf9eebfffbfc7602b41ce880b27622c62382be5a504dc077702fe7e06f99e35b7888b099178a372abdf4b00d6976a0af7cbe791416628e9e2bc67448cd72bfea6d0a546f6ada8049be8df153b6ce60d3fbad52c6ac5dfca71992f2310922df1f39ed1606992752bcb947101ec49fef2be2f88e118421091431179bfc876851955416955d245b646fb43df614cc4f0282f7e022ed3dd46654e644961df8875f3d7d7d3b07e2296aa13455db1a71e97d56fa82ec94d47df23d722b2bd76acd9f9becff5ddd23a724af924b856ab3ae509685155682ff4bdffb139d3c19545d1c9aea088828c1140d5a0b6b698f96a04948f47b4777767e387419c03f19ef05e8f7f90c9fea399dd07297f701dc19aa9b570d96570d59f5158eaeb01e300127ac98edb726c3ead2b57c478621348d160943a5ac1fbde6de36f3d7bfd32a78475033e3e7e1e1a51f7d781aa4f6cb05dcaef23390b07960f3d594482d1fb435af8d031b94923b4a95d71a92fc4385c6155a1bb251374912a74bb9a93ea49c32dceb79ee7b039332fcc2474d80ae668a750914b26eddfedc1b6775829c3b167c1bbc27fc2a286c61217baea3a084411df433a64d7385880e6da85869286bc08a584769875837ede54874c11f38ed3722a18abd45746149fa59f79db25fb51649f7483faec28569ed058a0bdfaabefc062ca8ea6ad45bf5759725aa62e249131b33951e2bdce3055d357ff3138204f62b37236434bcc54180ba8e1329b8c5b6b7d4b5d5dbfa473030c2a289fff573ddf7c9e5cbcb6907c836c8a1ee2605bdec36e29c6681e16628f2cf5c53fdbacca60e5a497885d8a53f74775e716aac7d6e8a2d8c6e901f8fab75d7f689b031add22a5776b186d9efe3890b0d48497addb21ea971d3a463eb4fd44ad209ae5a4b0e13d28c6838689019f5c09bee0ec2c97bd8495f761f07de47d85c64250373eff1e5dcefb8d44ff1d5ca5dc9954096d18d64fc146d93647a1fb0612962a07946305f7a8329611569bb0fee5ca5d9bb3574a07336dfd4dbd185a55fc9acdaa97481664c7a3f1fd0afc23d545a704f76c8b684656a2567a5dc3d1ee0385a003dfcbbfc988990a11871b8825073f11f3e596ec4cbd310649299e9e9a569215eae227964086a3aeb327c477b10bdb6263c0ec83a1364d0d45392c8dc4322ad5a9095548c7f2a90e2c858dca72a4376133dd3bcabf752428424c3dfdd45eaf6686c88971825849905e82de9a18a65a539cf61affad7f06368ac9cdab53e8754cf6bae6ac927ec177fc320d22d0b3da9c88284c45563066f4f194a35387238b592048dcf58873c9307cf803e3badf0ad53222825a172e00a4c678b3b6aa1785c92841b98a3be17c6becbae8dc6fc1bd3a14516780c4bf372a565a89cb8d136aa268721bfe9a988e94eb2d9ada00cd44b4815bff09d2273776a483d10e4b902fe10d3b7e5abb70bb899ed2eebabc739a2826cfe8613430210e8d9055600f61293290c767c104e881985c5db9442e0421c8013c46c70ac4719fc709b6a4d061b9d61e43914f4e2fdcea52f49086001ee848fa3a3b187229e556dc6cdb612261e57f81833fff4cf5b87fe4a6644996b5813af2e223f6bcdfa60934d195dab4413659aadac5879e0a2bbcd7074d2a2572cad5a8c57e54c658d6ef8e5ec12a18a5e3b639528931f9edb8b48f558beac97e4a361107217fde4f6cdb3977bf6153137a0de01f4537d172466e33c4a144678eac1d66f3739421592bb29aa1a82d79905c92ded53294b99b32bda357f9e5c54c0446cef03f9094920a8f12cf9b20a0532d8bf3807a5cd8cda48c65c1d076ead4f4294e2611be2bf259f1c130ddf4dd529d91bc89c5e00976d6426529515455d9beb4e5e8017f0462e5df4564b80f30c8d1dc5f5952bb8ebec67e9ac32d9bea7766b13299bbd795e086574826d67e8995ceec28b5e9f4910b2406dde7e4f0785173d955186f8cac8e0bf1998334fe9038cb6c1d2a78748d608e6931094946d69fa39a1a975e76cddb0760e5f385116c504863df0e0e46577f56f3651c2933de50072783752d48b72e160b00bd43504968e4c10eaa78b3d817efbb5e0801c807ad6706f40b0ee2a6d7b8c1380160052cdccb92d85da00612f2c117f4a7c478d1542ce4bb2b1a98d51080244256bb81195095249fabf5c8145dd2877726a3460fab386fae85ea817ae9727af519788a9e609e2c7af7b05dafa86e46acaa0d4db68a8ca1f3141a9a9f30913c9cfee4ee77b07c173701e6ac1782f7c0fcd04ec8dc857d63385e5334d2c6257b026bd1693c1a5873fcb0f47758516a252a36d192e223bde5ac01172e34b219b1973357f46191841490cce974753e16585f52c76302c1f0dca863e173490ef04562f7be29a89075b1edbbd6aca69ac55a657679853044a932ae0a1680703cd63360408d5b95b3cf88aac3647a4e7f9e0aa164f6ea15caa3d7a322a135838e21148ce3e2c6094df711e1b9929cecd2849fc8853b9577e7b2746856b2765ee9d25f76c5c1dd2eb50a6637445d14769dd50f89de41750f5386b62bb11bc40771290bff2688066979a9287ef3bdbc03c147a63fa65de0093a8e051fee9bd1b6cb6b08e854d786de031d5b7725b8c425d1fe449496e4ba2a7c074b1776a27b3e12120a909800ff2c0a0170e3a2ab3bf287428b3ce2e2cc4e2033a69a1e7f2079a2433b65f82baee57fc56a7f61e120951af47eeae897bdce10567a0ca23bedd75b0d5bcd1762082bd49e50260b1f70321f8d9b189093a8911f41b85ba9837c9d2ce20d714bf5031aff30c1e8980eb78b9443b42b4540f5bd199d24a11a4000f85a61378dd6639712e136b0f22ba72e9611e7622dd63ab955ace811a940205067f4436a835d9697e5c05b9172769d09f5b5ed476baff9a02d25ec9ddb649d14329c98d5cccd3e8aede4148560a464f3ebf72c871400ee9fb3c080ad237de65483cc828fb7afab7accd4cd6662cfe4aec487e36fb0acdda8dafae7d87691be9de4b606409b4017fe0acfa096e70d3eb6c910a9892133ee009a5469aff6de342615650237a4b56d713cec4cbe9e4a6c1ec8e7e8ffd56335d2396221b88e9a0c80612647917dcfc70f7e4a379d7be34e4370df2bfa3c1be04e8da937c6be893ff236578a8006ea09cfb2f9834e695010ebddf7521c3452ded726d8e4ecd30fc64369a555daf78339a297312e3de18a8ec54f0ea2c08a5539666913bddf24e3aee03d96675a69dc0fe359db6ed5cd8ffcc6fb3d5ea8e10cd2c6ec8f0309ab88f70d46cbe94d97e8fb9f63fcae87614fdedb83d0974a4ab3a7444591cbc7b801d9f8720d0bb97af6c6f7ddbae27266c60ad327085c5b04e33523628f5925bd15364398a6d76a257289fc6dd5512f1cd3a6352bc9b5801edcb517519185dc57f2c14627f21c98afb94a477a437cd8a3a48a37e76d1b31ddf29576abcaf16c9d2a2c22ea33e0c144bcfa13d556cda8de376e22625f7aec285289f18b75855f041e6e8c6582e9bc923d0b1c488f1a2b7969b5327978d2c762e9a657fff6902d5cd8708a8e1132b8146001b456ec33645ec4205b6e6e1430c38f3107c2fdbb3ad02d6856104c6a7fe7fc6d654af773e3da3453d0ffbb217feafd7490f2ab83ca7f50fc89f3ed3adff4e61ffdb62d50fb91ba4072a18a800492d8eea8a8f1114f91b150c725f5082520ae5aca257c42cdf35f30700a697f299fa5b02ca4c5cc8bb2972672c76a72efb89b8b1ae3ce10cb9c5a1f3bf975ee430a2f22a7124a733c83a9e7e8c1c49f824d4d57a30b7626e670ccf6ad3d547930a99e48fe17fae0a0568a090df479ecd2d1897d625b7921543c81d8e0badd93917e2265c50ecd2f343a9cc542d86890062c305084b12c1c6c6c32c5379d0f0c1af0703d9560b23f1109bd8fcaa77bb0777cd06ae3344ca53e67c8f749627711182b4a323b267894c1fe5b549181b60f92008a9eaf520a8b372e2e60e9353c46a68bd83aeb0e82ce226d1a268a288a3b3869f4bd279a85e9ed1a803cda7155f97f22c3bd36c6ab0a33fb57fdba1807557797dc8b85e9d73ef2da20769fd5d8b5928a6a14b3dde35b77b1924f6e0671b3d9059f9909f8139b9a0baf5e21a0161363ec9b6277a9e6c7bc5483575607d2c3762bf5be86a3c0d1e47c62856bb9691eea45f491ad34c73ddee85ac578ba491de427709626b8fa6d5766615d301650d4f1b606acefe1a49ede6972c561878237c913f81ec39a6ffc4c17e0c1f10c9de8aed2e157a22636f8646f3d78fd29b9a7bbc43ab7b7e8ed9ad2c583e57727b2bd9e7a124706ae25b9326883fbd18d534865c5155e1781e42173095c8db6e0fc9237e48a7c1a24d7698f458caad66c1ef8d8e386e4737a18be478c124ca0030b41ae22104cbd1e2aa336c59b0acafbb40e0def248804230a0f59082bb35c183c482906c8d45e73a5020f10428696dc4048ad8ee7cf5fbb41c735ac05633f1937e1aec67a309ba58bde0afb0829520eeae6084a0c8928950ad25966950608e087e7565f1aae5787b5107395dd39bb50c18e3f8890bec7298795213e28cadfd22972bd99e7ad3aec85762fee9ce414aa89308d8d412190adf2703b2888aebee775d531e846af311e1dac7ff5ffc993c5ac2035fc3a8453184d2d692155eaa641a2fa415a0d38dfb2d99de15cde91e9e104859f17e784a27fcf79e5c43174a6af10f4b6882ada6ce4b1285c0fdeaf661f80f2be78351f3d363143c5c21ac447d57829e949212c5525a939b7f51bece42bb372ce7e8cf370f9c3591b0fbce47d420ccc3958116fbe8cc7dbfdb45cbd350227ce48a395782668fedc203d812bbbc322f6d475b9d2cdd28964344fd29f9bb954704ba383a1db119f68f89b37d2aaa7f86a18dbf7435fc39f3eddb1644f2e10460f8f32ea90983eb6b7ea941c6d0f94165408999d548caa84ff46c38d86d1419602784d22e1a54e881f71df4cbe943acded1d18ffb8db8765bec4be8feea691aafbf137a6cd42f1fff228e27b6b82fcd486663a8dd7c91a562c05b3e6de94ef6f8711c1e023e1ca2020f452ba0ea83ac5f64ba5c4c766471eade35889930c38e6ea18ae96fe74dcd0fd304cc1cfac04082fd59fcfd735742e95b2f33b07fe018d23ee2400d91532b08bff3bea8304a6e941fcd0c58391a6a2f5c1aefb9e61c08a62914eb638f192ae3ad55a3203ae31945fb2d32fafad0dc28e11bce85797cacbfbda6b6a3d4ce680c0f0569c8292970b02926be030bff5c4d62e93a5f2ce6eb606494d640b6669c2f8370964c0676a586f06480739043d30c5d83d1aa3395fecc3d2f068fd0fde71baab4c26bca0192334c8e28dbe97212c931a8a089ebd7f10d63729a2185dd669cf2569c498cf2e89014b1bd60e44f8026397f61c36bc447b040ef6e944f140bf876a3e8ec6a0ce521d20f96f2b106740400f9136ceb9217b43839cc7557568b749d66bf7488a720e18d25f5dc81c928950e32006558558243e2c002422ef729197c718ede15990fbde8dfb5cd08beec0a1e8cdcdd474193c7869e4556803511088c9f323924d82c540fabc29231da2cb0a4aa3f998232f3452d7e7e26ce5de5198403c71203d0ff4a544fb97bf52f61038b61c4370be5619c9711f5f613a735edfd5eb881344cb2aef5e6aad12983e35c0ac93b6a9d29f2891129bc03da2030960f35958c6766c46b1498cc326cf8942b60a7debb27604897ee84c8458d0368a152e425ca346b5e929a22e6cf1dbfd15377089b8e2a9052e084435ac7e3d0bafecf7a4532bdad29883adac4b75ff764ff64ae7b5600836c0ca5a43eb0469a886c21f4c4fcaf9771e985c8355a2dcdb178c08664a9dda356e0f50791c90ba0c94a2336e8b995259de8a68a9d7ed4d35aea75bbde772c0b9281d907e2f4eaabc1fc4f492dc761f3a1f881e2eabcbbf120f03e143962fcb247cddff91ba9dffee9ffb471c73a59c2b5f19e297cf27d10474049b8b446f31ba33e2d955d4acf213720f7490af581797a806aa46a2e107dd79108ed179e9e3cf3dbc3e14939eb546690b1adea764db66fedb74424b6d4b64911b1ddbb0e0913268211ca3ca100d504a330ca7008e5981071bdac88d445e950cb8b8d4451b020ccc22670639d36baee55c30d55a204cf17434504b7eb0ab7dc1881a02579c7bb7967b8406994b446130eb3271a465792b7b99bce8028235864ba14c27eb0d4a1a4d45b20e9ba38936aa4ce5ccff19cc6346b91b36776198cc702c984fa547ddcd6ded7151fed93dfccd08d5da74884122c649170f994fb5eafc1f662b6185a78a8da314e5742124665bd56fd88c1091d93d4f2d4d59c730793f832b5d61f8fdb0697b1a16caae9a62ac4b1d796c9e003d88b1de3626609bc2b56add42752361540001eb0faea64218663313a273b77ca91028786737a1417050a3bf1476ca841fc9c6c366af214b9d0cd1578f0bfdf085e7ad2ca4531d062d99005f4017bed4634a883b2a29b7c7bd74e29430e799e63cfc2a9d1428d201a16f91eff77f2cbf759286c0208910b3a4dec4d172c8cdf8c268d008473d68d497174b692e342a7a02aa53e64130e2b8cfab79e398cb31c32343ff741f0067909e7e1ad6aeafa82efa6b8afeb7a4a46d48b967d0fb6b701a76510b99ccc7ee5f8de307e09b3a7ccf11fd209cf21402e83cad1b6bb5f66afcb612ea266a8850fc4bf2543bba7666460fd88db849de13d3c52b72e1b6e6c452dc3ac224f20407e44909f7f8f4fc3d57284b29300d74d11cab87ba0da9b8845d80dc1e3096cb5dc8411c5786a9c24edbe9870fba22f5379fe16b97b022ca02f5e329bc6e828e7035bf91985c9bfe4da82478b102f1515530883d0da0fe983f468c69e4cede1b219540ddf3b41e1adb5923f93a3f20b2de186aac8a70976c5a93ae5116c91b9dc47544cffca0926369f050f38573c2674ac91eca23e279ac8dab712e752c63959f77c578544e38b3dd4e9f55baf5bde26c1685fabef020cefc99932ecbc66d6840223ec0d37a2897e727a0e1d51233181c5f8079257994f0a3a83aabba189f84499923dde93356c330854a0bc4e8c21e01979688d8213ad442c98cc8e3b43fbb76e043e1c3b296fec481c0c9bc2413cb41f4a141efc27d8d3d602d715228c94d2abc18cafde56f2f500eeb33e103b4b7efc424168c2002ca64181938b45d13ea35a0df6496f5222bc7c35f5e43c3293128e2d20aaf01c939fe7b30e656e73961ed17f5f30a4016120993569e54e47d745d4a0b83e1a637d59784794c619176d1f44e791e6baee751e07a5d75147d783cd9518226178bac8063ffe80e1039d6df6d68522f29740a2880e0e60959af462b6d4cfca81c8535c29a1a3ab9e2cf1e9fe40d8617eab67f4d7e623c29feec5f7e2be4f0f3a24632e680b99070ea2c4f9beca376cbe243bdbf7ab6529e920b59723d0934adc1820e988663c9398fd3e939aea005b15f86d0d2f33d3507b79b58e418bf99abc2bf2e07193ae2dc6378ec021acfd7b9327b0cfa4c4f5d5e0e544ccc3567693436a3dbda2c1611c56a5b9c05b43bb6885246a6691063e0a6e0fe3b37cdfadc42564ddbe68e940e218335c7211561fcc9f3a3fdf68126b66a16546c0a7e889faff0b4089a7f9a6f74ceebafdb4cae66530a9b6876b1710b79069496ae71d5ba00de8e68fa57c3a409d3a6fbf87298f31a82a379ea3888689901119b2c1ff5956fc0181c497f0d5adac827ca77c0ae1af06c3aa0012bce0364f91381fcb85eba00887212d9d12cc342f30a7a13f360a4ed9434b9ace6e1ad15f4ac938a550b7daabe5bf03b5aebd4d7baf590e8f9f28198ec0a35ebd715c9743f4dc6454034aac4a18045cd7c965bf0de14f3a90657706d25eb47152eca1cc7ee96910851ab48fd22c77bb09286fb17669dd88655694552678d671c5f6621e6ae2c699dad5ab49ea98d1ae9329d3cc46b10b9a21801dc9004ed4ca0784f6dba45a7010915c6a3dc9c71213b56be981882efa196b697439d855fe358a95ade507873a39faf60c4f2831d65cc8ecaa9bfd62a8ecc4f414a410600ba20bdb721e7cd0cd814db4493921c4bdd7855797ebf803a73783405e8afbfd63a15dcc5abafcf45ac17c1cc320c9694003785951a75066ff5863b217d15af6fd403442e91e7b06b4753757586bc6940b51d9cceffcd5fcb8c00e2b72a971eb874712c40e52e770120fe35e6aaae1e11dcd00611dfbc435dddaa52c64c857b10cdb43fa8b05aed2d931f8df74b12a358d1d7cecf4b06f42e227dabd8772b40e076e666e5158d12c010159f9a0716d47625ed7018afa1ba8756184db30c14157a600e2667a4e45fc3f4c251a1bd9f4f32e455db6b1bc13331a91bd8fd7fe657996b6d8ab41c966cdfbbd70e2fcb8a31613a0f6ebb1038bc048957db55e91739298676306f719abe01624cb72b93908ee1f738c4bbd8a51d942dfd86d80e97361a426eaf1bd39513fc34f200d3b5e953b870a9b03c3a6a9b7f10e8b6382f3ca7ff1ab1b8811e11099d0e676be5325ba4186a2bc6e838658ebc53b9ec6880096fe33afda5f567f0deeaf79bf68816eabf2af1f38e872bbd563188f1ac50d716d8ce13089e1976c8cfc54a86090cd6d4f78deaaed0f2fba3556741968032e4ef476d05b8b97bd53fa387b8877929732577311bd1d23bbcd082b3a91a081122e3211a61fd03399cdeff80dca65ce877bd945b37dca482687309536d0b19d20ed38a9648131ff8230a57c43a0ac711eaa2adc34a0df475db73343556014043723307987d897590a1ce6525a226b28ff482a45412b9037d23dcbb67b37a5e93bba88dcb827f7822762e4c1ead43c43ab49b086745a92d37246674b582fb8954613b3937011a048e9ca2de3f1eb0598b2aa24a0dcb998c6240f44b98595da8a636386c5e3917d2f8c0057266d13efe7ffaac554d6b906724b4e83b52632ba1ef27c6c0e940ceb92a36eaf302594abdde5d7dbad905a8ada88e8d28b55b85a776227644db813ecd62daac1eacbab70c16ff5e200c8a9287b939350b2f88ab3ea3c081edfbb24822c76a33e1b3b1df00b2bf4104fdfa680ee2e5e02ccd2b2f6ca97de2ce621f778564dd45a0ac72fb0264e4b23c5c6e06d25aff17388a41e5e33e3d2b9324b9a0f30a02ee43544ae5ab476a46a93d85eda215326c45bb4dffd9bea409fd04523910a86183a0b03a052c0c22fadb62216dea93f3b95ff53a863144110c3473d4c05d39dd8136209c811b44de92ac63467fd514b748b76796ea16329263dbc0740bf8fe0d0ef5add510794c46b51a6386fdd3bbaded99905458170d1730b697ac0aac3ab9c8d47054640f57c88b7f4192f10ae394c25a13fb1f82ed1af56cc59ace39bbc9981a272cb77ad9d1c69eaf07581705d869687256a71f9c205f415afa3097efaa181ff2cb8f23459e7fbcdfef40cf4e74b0756aa56e2fe7d9981f27f6987185abb5b56753343c337e7570b900f07a710832bce233032de7443c2f32152782b79a92aee101cb1f5663b46caf068becafea95a1ec6e5306ce3a8b611b2a99274ee431ed22619ad8517c486534e106cb792b6ad70dbb53e73aefbd81138541560d9e5b8d9a0ff1982bf6bedf7e71c94638bd11c68c31ecd49d77e63b19fcbc0076e32c6e598e497a0ab546b7fe7987791cdac866b92823a424e4c480acd30f2059d9f9fc46e42882cba81fa80c30c941d0913e8e677bddb8609301b2806b977f9796630168c4449aad8f6503385f17307ab015207384c55da1123e24c7c6ea50e70b4ac039b155271a48759cacfb61554cd7e57a732e7d6e5b0c6f68fdae987af62977c2deb5633c8d55847114c094410002d47b00ecfaaa5eb9c34101e7de63452d26df77994f1a1d457448a9d4acd0bbeca5c2278c406edfe841a01ef7294346e3dc4953cb6f15c61f3f796b83397c0d2f10ff1841ce3456443aba74bc666b98cecc1759f8bdc8cbfd2c19ff2a57ac4524c6d5cf8fe33fd54789e3992f64d35926f0661171dd343ee42113b0f79ed142d328e7ac4968081e04b25b1a279a3fdaa07b78a0ce443fd72fb026a20acda3240339ef36cd156c93d7dc937ccc9e031f61c76f2af8972287033f74f90030bc36d04dcaa842ea773d116b25773458053d89b5b30583fe1194662c91bbc59a95fec4a4eb1481c8623e5aff0d48b7979c1f15bc55cee72dc536d68ba0fbfeb98c0fc8838bbdee38405782b25a0bd2fa501aa82d0b97b857d48c2548624869fed43bbe8599361ea8db3a6c86df42da6c8c8ad40c989db6bf860d5fa5219f6fc667c8076936fec1fb46ef6e2e677ff404cf17c2d478424c8e01b2cbb4f3bb6526d773db7bae4a5d26a50d081c6e2f16ad1f36e7d3b7e79a9f39a389b438ea150c14bdeec8dcd46488ab6eca454c3e5a2eddc", 0x2000, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x6, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cd6, 0x4000}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4}, 0x50) mount$fuse(0x0, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r5]) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000100), 0x0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={&(0x7f00000014c0)="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", &(0x7f0000000300)=""/207, &(0x7f0000000080)="b2b95db366c6d7a8c0ebed0eb2bcb7bba2919d1622b73b0c8694849d7e91893e407948746862a7e475ec0b6248656ca11269828e2e58cf2e7fe690ebad6690b6469cb89176254b693805bb6c869bdd0b9599ec772b96101282c786c4135bace8034083b7c62c2018c6b0a5ffb7", &(0x7f0000000140)="29bee24eb1911758a4a0b03790aeac7f70ca787f5565482c3685a707346ef99010d943efacb773e27e11fc2706726792e07876113204e0d9866da2a8044a15ab49078763cbdd92f50cdada", 0x5, r2, 0x4}, 0x38) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f00000004c0)={0x5, 0x3, 0x3, 0x855c, 0x7, 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.501945231s ago: executing program 1 (id=240): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4.351335234s ago: executing program 2 (id=241): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {{0x66, 0x0, 0x9eff}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 4.350889763s ago: executing program 3 (id=242): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000005ac0)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x0, @local, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000015c0)=[@hoplimit_2292={{0x18, 0x29, 0x8, 0x8}}], 0x18}}, {{&(0x7f0000001600)={0xa, 0x4e21, 0xcd3, @private2, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000001980)=[@dstopts={{0x18, 0x29, 0x37, {0x2e}}}], 0x28}}], 0x2, 0x4000300) 4.272275867s ago: executing program 2 (id=243): socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) read$msr(0xffffffffffffffff, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r0, 0x409, 0xb) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) ptrace$getregs(0xc, 0x0, 0x1ff, &(0x7f0000000640)=""/131) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYBLOB="1fe8ffff000000000f", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r3], 0x40}}, 0x0) io_uring_setup(0x6a1, &(0x7f0000000180)={0x0, 0x2000, 0x0, 0x3, 0x2cc}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x2}, &(0x7f0000ff0000), &(0x7f0000000000)) 3.351849502s ago: executing program 2 (id=244): socket$xdp(0x2c, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioperm(0x0, 0x444, 0xb1f) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)=0x0) r6 = memfd_secret(0x0) ftruncate(r6, 0x5) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000000c0)={0xa3, 0xd, 0x0, 0x0, 0x3, 0x0, 0x0}) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r6, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r5, &(0x7f0000000e40)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x1, 0x3, 0x0, {0x0, r9}}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x20000003, 0x4000, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}) 2.161391904s ago: executing program 1 (id=245): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000010002b00020300000000000000000000fe880000000000000000000000000001fc01000000000000000000000000000004000400af"], 0xc0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x6) fanotify_mark(0xffffffffffffffff, 0x8, 0x800003e, r2, 0x0) r3 = dup(r1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x84, 0x80, 0x100000}, 0x20) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180), 0x0) io_uring_enter(r8, 0x2def, 0x4000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r9 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) socket$inet6(0xa, 0x3, 0xff) mkdir(&(0x7f0000000400)='./file0\x00', 0x21) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps_rollup\x00') 2.110797567s ago: executing program 0 (id=247): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r3 = eventfd2(0xb0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000140)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00'}) io_uring_enter(r0, 0x54, 0x4, 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000000206010800000000000000000000000014000780080011400000000005001500110000000500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r5, @ANYBLOB="050000000000000000007a00000008000300", @ANYRES32=r6], 0x234}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) r12 = openat$cgroup_pressure(r11, &(0x7f0000000200)='io.pressure\x00', 0x2, 0x0) io_setup(0x5, &(0x7f0000000480)=0x0) io_submit(r13, 0x1, &(0x7f0000000780)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, r12, &(0x7f00000004c0)=')', 0x1}]) r14 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r14, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) r17 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r18 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r17, r18, 0x0, 0x138) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r16, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000}) ioctl$IOMMU_VFIO_IOAS$SET(r18, 0x3b88, &(0x7f0000000000)={0xc, r15}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r15, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r14, 0x3ba0, &(0x7f0000000180)={0x48, 0x8, r19, 0x0, 0x0, 0x1, &(0x7f0000000480)="ae", 0x5}) 1.932124326s ago: executing program 0 (id=249): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x18) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) syz_emit_ethernet(0x103, &(0x7f0000000600)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x3f, 0xf5, 0x0, 0x60, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0xe1, 0x0, @opaque="d4cc955fb03fc15ecb685ffb740cb29c0641d264040934b35a148977dedec1688cc9a45c6c1a38b9daf0e0f65584c8184a273e44bec89f571d955027511c8853e0dc6894d2f09e27b903b9d97953751d83f1ca6eb6eae4b85ea6efcadd6cbc6fdc567e2a0a311b42113caf9a2d3d0df4834fc55bb8e0ff7f0df060dc3e4a105940e9385e2047b1b529ad0c6cb46cf9fe2191c91e85f11cfb10af07b74036a04b6ccca531b043a8ef8d18b5a5d94eb381360579879ef218157fa82169813dc32fd1d6d0ce48a2f538de998e0db39598e705f67b7ea235036e86"}}}}}, 0x0) 1.841315542s ago: executing program 0 (id=250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f1ac6c479696c88d2eacc91e0835b494df0cc00000000000000500010007000000098262e26d665b47466cd65a3c3c0f943cfddd767bb5ec8336917e"], 0x28}}, 0x20040090) socket(0x25, 0x1, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)=""/100, 0x64}], 0x1, 0x0) open(0x0, 0x400141040, 0x146) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) syz_open_pts(r2, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000004a80)={0x1, 0x1, {0x0, 0x1, 0x401, 0x0, 0x1ff}, 0x6}) syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r4, &(0x7f0000000580)=[{&(0x7f00000003c0)="46d0e1a2a06de93fd59c73da4f6604033f39b96822e929fb8ceee5617d7eb11e1c197c274ea2ee5b0b1d8a981e0ef57207b64aa639100dc9b8a8c57c687ae80fcfd84b0705aedd90d97b1d81a1efb72e5d3d6119efd8d46681e723ff9782b738037634f26d632ee2bdd4bc0000000000000002e972d2ef5d42370c7bdcfa33d622fc440799b6a58898c4bbb64d417403d62dfb19658f758becaedd3a66a7b9c19a7dcb1f5b0f2b8dacd36f6f4a8209832b51", 0xb2}, {&(0x7f0000000480)="bf98b0378e3ec6c3ebd170bf674f7e3a55575b040f6018b9178942d3ca6c0da26e465df93dcf6dd475f36e7ec35751ec56ecd2bd2e75e049dadef82139d290269fa1a8d9a9963eeb6cb3574f70745d2fdcf9dbd018f46c6f3e0b578c059130a9a333b7273ba3d4cdb8", 0x69}, {&(0x7f0000000040)}, {&(0x7f00000002c0)="32d74d6280769ca0699e77cbe7135140dd6b12d25a861a77852d260c26e1d441155b7ed0c7f1a5173025", 0x2a}, {&(0x7f0000000600)="bd55a4e3afba88be1b466acf7603579d7f96f6e0c323933d7fbd78bdf8cdeb5f57bc468cf91cf6c3d60730b2d242bf0ea6d0fa77857535485204ab93723204619f9f41a580e260996f1ec9f8f9be762b19371b25912b8571ec1ebb486018f2a1433633a3cecf5ccb6f0c6084bbea", 0x6e}, {&(0x7f00000005c0)}, {&(0x7f0000000880)="22afc9053c712bcbf7340eb2be4bcff88cd4c555efd8399f5552076ea4da32a77e272fd651ac521a4f5a7bc6b4dcd0563e56931ff3067911a3581b6956749bc0f58bc8dffb03c01a72c6826283f646bf5b1dbebd703bf807d4dcaf922d1ee51143b812a60f4304f008b7f4904464584a22f72e390da66d503b44846b05e1e4c66fe174e5080dc5a00526e926d21ac111f3a9d9a8c82a317e88dccd64ce58a50999448417cac805c34f566fd69351811b8f2d6c3f261ec24ada6d3afefe561c5c401dbe3d2a386f515e8d74796f345ec50da1319814c83388dcf55838a9ada0c36f679b7b684c1d09eb0f73", 0xeb}, {&(0x7f00000006c0)="ea01c2530189892ae2cc75fb1848afad2ec5f35366b46b2b4a9a62648a55161f8225ff92a87315bff8ff8a55a90bcfd82221c136bd07c49b498313ea178d352c2a0caaad0bd4c373251cc29db2c8736338b8a0b8e82d2e932f232545", 0x5c}], 0x8) (async) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) (async) r6 = accept$alg(r5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x20088080) (async) sendmmsg$alg(r6, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) 1.772199239s ago: executing program 0 (id=251): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x20002) r1 = dup(r0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) write$FUSE_LSEEK(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1.771825002s ago: executing program 0 (id=252): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r0, 0x31f, &(0x7f0000000080)={0xa1, 0x16, 0x43, 0x9}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) syz_open_dev$audion(&(0x7f00000000c0), 0x8, 0x10000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r6, 0x4bfa, &(0x7f0000000080)) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r7) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000001ac0)=r7, 0x4) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000ee4e2f9663a918fa1efd9b0b"}, 0xfe68}}, 0x0) ioctl$CDROMCLOSETRAY(r0, 0x5319) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/126, 0x7e}], 0x1) 1.672159671s ago: executing program 0 (id=253): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.313476183s ago: executing program 3 (id=248): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000004140)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000003fc0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/169, 0xa9}, {&(0x7f0000000280)=""/148, 0x94}], 0x2, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000000400)=""/235, 0xeb}, {&(0x7f0000000680)=""/219, 0xdb}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000500)=""/2, 0x2}, {&(0x7f0000000540)=""/32, 0x20}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/175, 0xaf}, {&(0x7f0000001940)=""/199, 0xc7}], 0x8, &(0x7f0000001ac0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}}, {{&(0x7f0000001c40), 0x6e, &(0x7f0000003240)=[{&(0x7f0000004440)=""/223, 0xdf}, {&(0x7f0000001dc0)=""/65, 0x41}, {&(0x7f0000001e40)=""/242, 0xf2}, {&(0x7f0000000580)=""/53, 0x35}, {&(0x7f0000000600)=""/37, 0x25}, {&(0x7f0000001f40)=""/158, 0x9e}, {&(0x7f0000002000)=""/65, 0x41}, {&(0x7f0000002080)=""/152, 0x98}, {&(0x7f0000002140)=""/201, 0xc9}, {&(0x7f0000002240)=""/4096, 0x1000}], 0xa, &(0x7f0000003300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f00000033c0)=@abs, 0x6e, &(0x7f0000003540)=[{&(0x7f0000003440)=""/212, 0xd4}], 0x1, &(0x7f0000003580)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000003680)=@abs, 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003700)=""/206, 0xce}, {&(0x7f0000003800)=""/201, 0xc9}, {&(0x7f0000003900)=""/7, 0x7}, {&(0x7f0000003940)=""/187, 0xbb}, {&(0x7f0000003a00)=""/206, 0xce}, {&(0x7f0000003b00)=""/238, 0xee}, {&(0x7f0000003c00)=""/121, 0x79}], 0x7, &(0x7f0000003d00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000003d80), 0x6e, &(0x7f0000003f80)=[{&(0x7f0000003e00)=""/209, 0xd1}, {&(0x7f0000003f00)=""/121, 0x79}], 0x2}}], 0x6, 0x40000100, &(0x7f0000004180)={r1, r2+60000000}) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = userfaultfd(0x80001) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x8000) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x102c0c, &(0x7f0000000400), &(0x7f0000000480), &(0x7f00000004c0)) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000043c0)={&(0x7f0000004200)={0x1bc, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_USERDATA={0x70, 0x7, 0x1, 0x0, "aaf297f9951850189b6c003864aae1072585f144ff5e60bc6656a193d847d1933dc120f271b00b698f253ed73d114c3a56a52000a07ee0c70a04ef9d793a1834df9f3cc738f1b4f72c539be2d5d34eb2263c6c73374a8a4f2dd7afafe19a19e8acd61faa5c414dc77e3b74d9"}, @NFTA_RULE_EXPRESSIONS={0x110, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x6c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_MASK={0x38, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x1bc}}, 0x1) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) r6 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x16}}}}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x0, "2f97a683"}, 0xc, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c000310"], 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x3) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 531.687191ms ago: executing program 3 (id=254): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000010002b00020300000000000000000000fe880000000000000000000000000001fc01000000000000000000000000000004000400af"], 0xc0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x6) fanotify_mark(0xffffffffffffffff, 0x8, 0x800003e, r2, 0x0) r3 = dup(r1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x84, 0x80, 0x100000}, 0x20) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180), 0x0) io_uring_enter(r8, 0x2def, 0x4000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r9 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) socket$inet6(0xa, 0x3, 0xff) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps_rollup\x00') 281.332902ms ago: executing program 2 (id=255): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0x7ffffffff7ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000140)=0x7) chdir(&(0x7f0000000140)='./bus\x00') syz_open_dev$vim2m(&(0x7f0000000400), 0x400010000000086, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1001}) ioctl$TUNSETOFFLOAD(r4, 0x400454ce, 0x7) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) link(&(0x7f0000000200)='./file1\x00', 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000480)={[{@redirect_dir_nofollow}, {@nfs_export_on}]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) acct(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') linkat(r0, &(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 53.729393ms ago: executing program 3 (id=256): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x1407, 0x1, 0x0, 0x9eff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x60, 0x1}]}, 0x18}}, 0x20000880) 0s ago: executing program 2 (id=257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500000000000000c4694baf000008000300", @ANYRES32=r3], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x60, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2694bd91d6"}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bb778b24cca4543662b01e076a"}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4008040) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, 0x0, 0x0, 0x34000, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, 0x0, 0x0) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0), 0x2) read(r5, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r5, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x200}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000070400000000100000200b000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) kernel console output (not intermixed with test programs): dv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.522428][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.529500][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.532248][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.537044][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.539517][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.565004][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.567324][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.577772][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.580432][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.855863][ T5937] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 64.862005][ T5937] syzkaller0: entered promiscuous mode [ 64.863745][ T5937] syzkaller0: entered allmulticast mode [ 65.014098][ T56] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.164122][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 65.167330][ T56] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 65.169548][ T56] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 65.172076][ T56] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 65.175308][ T56] usb 6-1: config 250 has no interface number 0 [ 65.177359][ T56] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 65.180942][ T56] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 65.184342][ T56] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 65.187722][ T56] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 65.192219][ T56] usb 6-1: config 250 interface 228 has no altsetting 0 [ 65.197133][ T56] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 65.200017][ T56] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 65.202619][ T56] usb 6-1: Product: syz [ 65.204060][ T56] usb 6-1: SerialNumber: syz [ 65.211519][ T56] hub 6-1:250.228: bad descriptor, ignoring hub [ 65.213548][ T56] hub 6-1:250.228: probe with driver hub failed with error -5 [ 65.416913][ T56] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 65.744134][ T5348] Bluetooth: hci1: command tx timeout [ 65.984130][ T5348] Bluetooth: hci2: command tx timeout [ 66.463669][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 66.463680][ T39] audit: type=1400 audit(1729495427.202:254): avc: denied { connect } for pid=5938 comm="syz.2.91" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.064802][ T5884] usblp0: removed [ 67.179315][ T828] usb 6-1: USB disconnect, device number 3 [ 67.186635][ T828] usblp0: removed [ 67.255796][ T39] audit: type=1400 audit(1729495428.002:255): avc: denied { read } for pid=5950 comm="syz.2.96" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.262544][ T39] audit: type=1400 audit(1729495428.002:256): avc: denied { ioctl } for pid=5950 comm="syz.2.96" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.294342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.320354][ T39] audit: type=1400 audit(1729495428.062:257): avc: denied { connect } for pid=5946 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.384030][ T39] audit: type=1400 audit(1729495428.122:258): avc: denied { shutdown } for pid=5946 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.448206][ T39] audit: type=1400 audit(1729495428.192:259): avc: denied { write } for pid=5946 comm="syz.1.94" name="snmp" dev="proc" ino=4026533809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 67.463193][ T5960] netlink: 32 bytes leftover after parsing attributes in process `syz.2.98'. [ 67.466635][ T39] audit: type=1400 audit(1729495428.212:260): avc: denied { write } for pid=5959 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.504333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 68.084079][ T5964] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 68.145459][ T39] audit: type=1400 audit(1729495428.892:261): avc: denied { create } for pid=5973 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 68.150410][ T39] audit: type=1400 audit(1729495428.892:262): avc: denied { getopt } for pid=5973 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.281810][ T5342] bond0: (slave syz_tun): Releasing backup interface [ 68.335248][ T39] audit: type=1400 audit(1729495429.032:263): avc: denied { sqpoll } for pid=5973 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.506427][ T78] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.608753][ T78] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.647926][ T5356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.652114][ T5356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.658418][ T5356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.661189][ T5356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.664873][ T5356] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.667312][ T5356] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.679001][ T78] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.772233][ T78] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.970443][ T78] bridge_slave_1: left allmulticast mode [ 68.972089][ T78] bridge_slave_1: left promiscuous mode [ 68.973883][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.979009][ T78] bridge_slave_0: left allmulticast mode [ 68.980508][ T78] bridge_slave_0: left promiscuous mode [ 68.982631][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.383423][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.391736][ T5999] input: syz1 as /devices/virtual/input/input7 [ 69.392254][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.401781][ T78] bond0 (unregistering): Released all slaves [ 69.579129][ T5980] chnl_net:caif_netlink_parms(): no params data found [ 69.833069][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.835381][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.837316][ T5980] bridge_slave_0: entered allmulticast mode [ 69.839326][ T5980] bridge_slave_0: entered promiscuous mode [ 69.841988][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.845078][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.848206][ T5980] bridge_slave_1: entered allmulticast mode [ 69.851172][ T5980] bridge_slave_1: entered promiscuous mode [ 69.859633][ T78] hsr_slave_0: left promiscuous mode [ 69.864736][ T78] hsr_slave_1: left promiscuous mode [ 69.867625][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.869582][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.871777][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.873728][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.887737][ T78] veth1_macvtap: left promiscuous mode [ 69.889236][ T78] veth0_macvtap: left promiscuous mode [ 69.890695][ T78] veth1_vlan: left promiscuous mode [ 69.892108][ T78] veth0_vlan: left promiscuous mode [ 70.131737][ T6019] FAULT_INJECTION: forcing a failure. [ 70.131737][ T6019] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 70.135273][ T6019] CPU: 0 UID: 0 PID: 6019 Comm: syz.0.112 Not tainted 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 [ 70.137987][ T6019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.140763][ T6019] Call Trace: [ 70.141654][ T6019] [ 70.142441][ T6019] dump_stack_lvl+0x16c/0x1f0 [ 70.143683][ T6019] should_fail_ex+0x497/0x5b0 [ 70.144946][ T6019] _copy_from_iter+0x2a1/0x1540 [ 70.146233][ T6019] ? __pfx__copy_from_iter+0x10/0x10 [ 70.147619][ T6019] ? __pfx_lock_release+0x10/0x10 [ 70.148951][ T6019] ? kernel_fpu_end+0x45/0x70 [ 70.150205][ T6019] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 70.151735][ T6019] write_pool_user+0xe9/0x2f0 [ 70.152988][ T6019] ? __pfx_write_pool_user+0x10/0x10 [ 70.154362][ T6019] ? __might_fault+0xe3/0x190 [ 70.155598][ T6019] ? __might_fault+0xe3/0x190 [ 70.156840][ T6019] random_ioctl+0x2d0/0x4a0 [ 70.158042][ T6019] ? __pfx_random_ioctl+0x10/0x10 [ 70.159355][ T6019] ? selinux_file_ioctl+0x180/0x270 [ 70.160706][ T6019] ? selinux_file_ioctl+0xb4/0x270 [ 70.162046][ T6019] ? __pfx_random_ioctl+0x10/0x10 [ 70.163363][ T6019] __x64_sys_ioctl+0x18f/0x220 [ 70.164629][ T6019] do_syscall_64+0xcd/0x250 [ 70.165832][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.167375][ T6019] RIP: 0033:0x7fb559f7dff9 [ 70.168544][ T6019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.173514][ T6019] RSP: 002b:00007fb55adc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.175764][ T6019] RAX: ffffffffffffffda RBX: 00007fb55a135f80 RCX: 00007fb559f7dff9 [ 70.177821][ T6019] RDX: 0000000020000d00 RSI: 0000000040085203 RDI: 0000000000000004 [ 70.179864][ T6019] RBP: 00007fb55adc8090 R08: 0000000000000000 R09: 0000000000000000 [ 70.181928][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.183984][ T6019] R13: 0000000000000000 R14: 00007fb55a135f80 R15: 00007ffff94ff608 [ 70.186060][ T6019] [ 70.473255][ T78] team0 (unregistering): Port device team_slave_1 removed [ 70.524484][ T78] team0 (unregistering): Port device team_slave_0 removed [ 70.694920][ T5353] Bluetooth: hci0: command tx timeout [ 70.993059][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.000696][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.017619][ T1380] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.019983][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.042322][ T5980] team0: Port device team_slave_0 added [ 71.056478][ T5980] team0: Port device team_slave_1 added [ 71.086216][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.087934][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.094399][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.097877][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.099605][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.106091][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.136192][ T5980] hsr_slave_0: entered promiscuous mode [ 71.140773][ T5980] hsr_slave_1: entered promiscuous mode [ 71.144018][ T5980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.147402][ T5980] Cannot create hsr debugfs directory [ 71.574403][ T5353] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 71.576856][ T5353] Bluetooth: hci1: Injecting HCI hardware error event [ 71.578974][ T5353] Bluetooth: hci1: hardware error 0x00 [ 71.647770][ T5980] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.650724][ T5980] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.653499][ T5980] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.656730][ T5980] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.688714][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.714314][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.720924][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.722790][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.729559][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.731419][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.808326][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.830733][ T5980] veth0_vlan: entered promiscuous mode [ 71.834879][ T5980] veth1_vlan: entered promiscuous mode [ 71.847440][ T5980] veth0_macvtap: entered promiscuous mode [ 71.850404][ T5980] veth1_macvtap: entered promiscuous mode [ 71.859353][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.861968][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.866630][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.869322][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.871833][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.876633][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.880048][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.887091][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 71.887099][ T39] audit: type=1400 audit(1729495432.632:266): avc: denied { rename } for pid=4817 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.896784][ T39] audit: type=1400 audit(1729495432.632:267): avc: denied { unlink } for pid=4817 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.896885][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.902612][ T39] audit: type=1400 audit(1729495432.632:268): avc: denied { create } for pid=4817 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.905784][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.911204][ T5356] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 71.915073][ T5356] Bluetooth: hci2: Injecting HCI hardware error event [ 71.915498][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.919277][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.921639][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.925467][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.928811][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.932761][ T5980] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.933054][ T6071] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 71.935193][ T5980] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.940512][ T5980] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.942749][ T5980] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.970421][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.972513][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.983142][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.985369][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.016969][ T6091] netlink: 40 bytes leftover after parsing attributes in process `syz.2.106'. [ 72.774083][ T5356] Bluetooth: hci0: command tx timeout [ 72.885917][ T78] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.112913][ T78] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.127606][ T5345] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.130372][ T5345] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.135707][ T5345] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.143771][ T5345] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.146630][ T5345] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.150309][ T5345] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.207446][ T78] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.265785][ T78] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.285601][ T6113] chnl_net:caif_netlink_parms(): no params data found [ 73.321993][ T6113] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.324069][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.326051][ T6113] bridge_slave_0: entered allmulticast mode [ 73.328098][ T6113] bridge_slave_0: entered promiscuous mode [ 73.330902][ T6113] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.332914][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.335338][ T6113] bridge_slave_1: entered allmulticast mode [ 73.337435][ T6113] bridge_slave_1: entered promiscuous mode [ 73.357162][ T6113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.371591][ T6113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.399724][ T6113] team0: Port device team_slave_0 added [ 73.408221][ T6113] team0: Port device team_slave_1 added [ 73.420563][ T78] bridge_slave_1: left allmulticast mode [ 73.422063][ T78] bridge_slave_1: left promiscuous mode [ 73.423578][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.426759][ T78] bridge_slave_0: left allmulticast mode [ 73.428271][ T78] bridge_slave_0: left promiscuous mode [ 73.429793][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.634893][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.639206][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.642737][ T78] bond0 (unregistering): Released all slaves [ 73.654104][ T5353] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 73.674640][ T6113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.676478][ T6113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.683010][ T6113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.689650][ T6113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.691469][ T6113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.698522][ T6113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.728075][ T6113] hsr_slave_0: entered promiscuous mode [ 73.732701][ T6113] hsr_slave_1: entered promiscuous mode [ 73.734805][ T6113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.736676][ T6113] Cannot create hsr debugfs directory [ 73.867284][ T6141] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 73.909215][ T39] audit: type=1400 audit(1729495434.652:269): avc: denied { create } for pid=6143 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 73.915551][ T39] audit: type=1400 audit(1729495434.652:270): avc: denied { setopt } for pid=6143 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.033027][ T78] hsr_slave_0: left promiscuous mode [ 74.036657][ T78] hsr_slave_1: left promiscuous mode [ 74.039446][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.041666][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.044847][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.046892][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.083648][ T78] veth1_macvtap: left promiscuous mode [ 74.085253][ T78] veth0_macvtap: left promiscuous mode [ 74.086832][ T78] veth1_vlan: left promiscuous mode [ 74.088492][ T78] veth0_vlan: left promiscuous mode [ 74.629191][ T78] team0 (unregistering): Port device team_slave_1 removed [ 74.710031][ T78] team0 (unregistering): Port device team_slave_0 removed [ 75.176992][ T5353] Bluetooth: hci3: command tx timeout [ 75.320326][ T6113] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.323699][ T6113] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.329587][ T6113] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.337460][ T6113] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.378080][ T6113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.388463][ T6113] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.392502][ T1191] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.394953][ T1191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.402246][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.404145][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.425550][ T6113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.485006][ T78] IPVS: stop unused estimator thread 0... [ 75.504386][ T63] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.535767][ T6113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.552218][ T6113] veth0_vlan: entered promiscuous mode [ 75.556235][ T6113] veth1_vlan: entered promiscuous mode [ 75.575123][ T6113] veth0_macvtap: entered promiscuous mode [ 75.579663][ T6113] veth1_macvtap: entered promiscuous mode [ 75.585286][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.587984][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.594517][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.597282][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.599804][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.602567][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.605817][ T6113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.609800][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.612822][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.615775][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.615785][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.615791][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.615798][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.627460][ T6113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.632852][ T6113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.635964][ T6113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.638238][ T6113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.640535][ T6113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.663920][ T1191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.664064][ T63] usb 5-1: Using ep0 maxpacket: 8 [ 75.666662][ T1191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.678974][ T1191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.681551][ T1191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.681743][ T63] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 75.686320][ T63] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 75.688498][ T63] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 75.690844][ T63] usb 5-1: config 250 has no interface number 0 [ 75.692501][ T63] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 75.696274][ T63] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 75.698994][ T63] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 75.701799][ T63] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 75.705484][ T63] usb 5-1: config 250 interface 228 has no altsetting 0 [ 75.708368][ T63] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 75.710710][ T63] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 75.712832][ T63] usb 5-1: Product: syz [ 75.716322][ T63] usb 5-1: SerialNumber: syz [ 75.719952][ T63] hub 5-1:250.228: bad descriptor, ignoring hub [ 75.721607][ T63] hub 5-1:250.228: probe with driver hub failed with error -5 [ 75.829816][ T39] audit: type=1400 audit(1729495436.572:271): avc: denied { bind } for pid=6195 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.838828][ T39] audit: type=1400 audit(1729495436.572:272): avc: denied { setopt } for pid=6195 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.931631][ T63] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 75.956262][ T6199] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 76.147352][ T30] cfg80211: failed to load regulatory.db [ 76.195701][ C1] usblp0: nonzero read bulk status received: -71 [ 76.214368][ T982] usb 5-1: USB disconnect, device number 2 [ 76.220045][ T982] usblp0: removed [ 77.174352][ T5353] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 77.177628][ T5353] Bluetooth: hci0: Injecting HCI hardware error event [ 77.180132][ T5353] Bluetooth: hci0: hardware error 0x00 [ 77.264154][ T5356] Bluetooth: hci3: command tx timeout [ 77.298116][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'. [ 77.348661][ T39] audit: type=1400 audit(1729495438.092:273): avc: denied { read append } for pid=6217 comm="syz.2.146" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 77.354725][ T39] audit: type=1400 audit(1729495438.092:274): avc: denied { open } for pid=6217 comm="syz.2.146" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 77.360369][ T39] audit: type=1400 audit(1729495438.092:275): avc: denied { map } for pid=6217 comm="syz.2.146" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 77.366540][ T39] audit: type=1400 audit(1729495438.092:276): avc: denied { write execute } for pid=6217 comm="syz.2.146" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 77.421656][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 77.831173][ T6222] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 78.134048][ T5356] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 78.136377][ T5356] Bluetooth: hci2: Injecting HCI hardware error event [ 78.223306][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.324945][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.330605][ T5345] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.334019][ T5345] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.336436][ T5345] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.339150][ T5345] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.341397][ T5345] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.343435][ T5345] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.385191][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.427633][ T6228] chnl_net:caif_netlink_parms(): no params data found [ 78.450535][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.489666][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.491548][ T6228] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.493412][ T6228] bridge_slave_0: entered allmulticast mode [ 78.495553][ T6228] bridge_slave_0: entered promiscuous mode [ 78.499900][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.502054][ T6228] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.503911][ T6228] bridge_slave_1: entered allmulticast mode [ 78.505973][ T6228] bridge_slave_1: entered promiscuous mode [ 78.526755][ T6228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.530329][ T6228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.567237][ T6228] team0: Port device team_slave_0 added [ 78.570190][ T6228] team0: Port device team_slave_1 added [ 78.597070][ T12] bridge_slave_1: left allmulticast mode [ 78.598658][ T12] bridge_slave_1: left promiscuous mode [ 78.600141][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.603637][ T12] bridge_slave_0: left allmulticast mode [ 78.605945][ T12] bridge_slave_0: left promiscuous mode [ 78.607510][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.823805][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.828091][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.831346][ T12] bond0 (unregistering): Released all slaves [ 78.835116][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.836889][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.843363][ T6228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.847046][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.848851][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.855292][ T6228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.883734][ T6228] hsr_slave_0: entered promiscuous mode [ 78.885798][ T6228] hsr_slave_1: entered promiscuous mode [ 78.887603][ T6228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.889543][ T6228] Cannot create hsr debugfs directory [ 79.205335][ T12] hsr_slave_0: left promiscuous mode [ 79.207101][ T12] hsr_slave_1: left promiscuous mode [ 79.208776][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.210629][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.212817][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.214814][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.227333][ T12] veth1_macvtap: left promiscuous mode [ 79.228786][ T12] veth0_macvtap: left promiscuous mode [ 79.230191][ T12] veth1_vlan: left promiscuous mode [ 79.231477][ T12] veth0_vlan: left promiscuous mode [ 79.265161][ T5353] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 79.347105][ T5353] Bluetooth: hci3: command tx timeout [ 79.368645][ T39] audit: type=1400 audit(1729495440.112:277): avc: denied { read } for pid=6249 comm="syz.2.152" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.378495][ T39] audit: type=1400 audit(1729495440.112:278): avc: denied { open } for pid=6249 comm="syz.2.152" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.387028][ T39] audit: type=1400 audit(1729495440.112:279): avc: denied { ioctl } for pid=6249 comm="syz.2.152" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.395538][ T39] audit: type=1400 audit(1729495440.112:280): avc: denied { create } for pid=6249 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.401852][ T39] audit: type=1400 audit(1729495440.112:281): avc: denied { bind } for pid=6249 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.765902][ T12] team0 (unregistering): Port device team_slave_1 removed [ 79.817255][ T12] team0 (unregistering): Port device team_slave_0 removed [ 80.355050][ T6228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.359720][ T6228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.374801][ T5353] Bluetooth: hci1: command tx timeout [ 80.380319][ T6228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.400944][ T6228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.449090][ T6228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.458743][ T6228] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.463030][ T1191] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.465677][ T1191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.471813][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.474726][ T1021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.829652][ T6228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.863405][ T6228] veth0_vlan: entered promiscuous mode [ 80.905605][ T6228] veth1_vlan: entered promiscuous mode [ 80.922403][ T6228] veth0_macvtap: entered promiscuous mode [ 80.926127][ T6228] veth1_macvtap: entered promiscuous mode [ 80.933099][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.935990][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.938547][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.941306][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.943827][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.946829][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.951474][ T6228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.959157][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.961914][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.964592][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.967275][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.969781][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.972271][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.975598][ T6228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.983477][ T6228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.986346][ T6228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.988730][ T6228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.998712][ T6228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.029098][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.031109][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.042340][ T1021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.045096][ T1021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.060089][ T39] audit: type=1400 audit(1729495441.802:282): avc: denied { write } for pid=6298 comm="syz.1.156" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 81.417103][ T5356] Bluetooth: hci3: command tx timeout [ 82.454817][ T5356] Bluetooth: hci1: command tx timeout [ 83.578267][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 83.578278][ T39] audit: type=1400 audit(1729495444.322:286): avc: denied { execute } for pid=6334 comm="syz.0.162" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 83.753399][ T39] audit: type=1400 audit(1729495444.492:287): avc: denied { create } for pid=6334 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.760845][ T39] audit: type=1400 audit(1729495444.492:288): avc: denied { write } for pid=6334 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.767582][ T39] audit: type=1400 audit(1729495444.492:289): avc: denied { nlmsg_write } for pid=6334 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.773129][ T39] audit: type=1400 audit(1729495444.502:290): avc: denied { name_connect } for pid=6334 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 83.954077][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 84.104309][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 84.107544][ T9] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 84.109852][ T9] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 84.112090][ T9] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 84.114729][ T9] usb 6-1: config 250 has no interface number 0 [ 84.116467][ T9] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 84.119586][ T9] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 84.122462][ T9] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 84.125320][ T9] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 84.128884][ T9] usb 6-1: config 250 interface 228 has no altsetting 0 [ 84.131855][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 84.134436][ T9] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 84.136773][ T9] usb 6-1: Product: syz [ 84.137936][ T9] usb 6-1: SerialNumber: syz [ 84.141310][ T9] hub 6-1:250.228: bad descriptor, ignoring hub [ 84.143037][ T9] hub 6-1:250.228: probe with driver hub failed with error -5 [ 84.348274][ T9] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 84.364534][ T9] usb 6-1: USB disconnect, device number 4 [ 84.367374][ T9] usblp0: removed [ 84.435207][ T39] audit: type=1400 audit(1729495445.182:291): avc: denied { create } for pid=6342 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 84.456465][ T39] audit: type=1400 audit(1729495445.202:292): avc: denied { mount } for pid=6342 comm="syz.0.164" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 84.462556][ T39] audit: type=1400 audit(1729495445.202:293): avc: denied { unmount } for pid=6342 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 84.534084][ T5356] Bluetooth: hci1: command 0x040f tx timeout [ 84.884344][ T39] audit: type=1400 audit(1729495445.622:294): avc: denied { ioctl } for pid=6353 comm="syz.1.167" path="socket:[13909]" dev="sockfs" ino=13909 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.805019][ T6368] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 85.925800][ T6374] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.201892][ T39] audit: type=1400 audit(1729495446.942:295): avc: denied { create } for pid=6375 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.263107][ T65] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.333628][ T65] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.391567][ T5356] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.396591][ T5356] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.398856][ T5356] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.402013][ T5356] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.405456][ T5356] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.407879][ T5356] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.427063][ T65] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.439776][ T5353] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.442855][ T5353] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.445460][ T5353] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.449036][ T5353] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.451306][ T5353] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.453829][ T5353] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.507253][ T65] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.532302][ T6382] chnl_net:caif_netlink_parms(): no params data found [ 86.614334][ T5356] Bluetooth: hci1: command 0x040f tx timeout [ 86.684777][ T6386] chnl_net:caif_netlink_parms(): no params data found [ 86.691257][ T6390] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 86.698875][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.700760][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.702633][ T6382] bridge_slave_0: entered allmulticast mode [ 86.705625][ T6382] bridge_slave_0: entered promiscuous mode [ 86.745895][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.747972][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.749975][ T6382] bridge_slave_1: entered allmulticast mode [ 86.751967][ T6382] bridge_slave_1: entered promiscuous mode [ 86.753892][ T65] bridge_slave_1: left allmulticast mode [ 86.755551][ T65] bridge_slave_1: left promiscuous mode [ 86.757133][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.767176][ T65] bridge_slave_0: left allmulticast mode [ 86.768678][ T65] bridge_slave_0: left promiscuous mode [ 86.770199][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.025367][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.029683][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.033192][ T65] bond0 (unregistering): Released all slaves [ 87.086217][ T6382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.112618][ T6386] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.115358][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.118001][ T6386] bridge_slave_0: entered allmulticast mode [ 87.120173][ T6386] bridge_slave_0: entered promiscuous mode [ 87.124127][ T6382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.126634][ T6386] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.128597][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.130554][ T6386] bridge_slave_1: entered allmulticast mode [ 87.132556][ T6386] bridge_slave_1: entered promiscuous mode [ 87.173053][ T6386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.187340][ T6382] team0: Port device team_slave_0 added [ 87.190398][ T6386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.198105][ T6382] team0: Port device team_slave_1 added [ 87.266213][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.268076][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.274798][ T6382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.278371][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.280293][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.287051][ T6382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.303258][ T6386] team0: Port device team_slave_0 added [ 87.309082][ T6386] team0: Port device team_slave_1 added [ 87.313479][ T5353] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.316766][ T5353] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.319496][ T5353] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.323061][ T5353] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.325182][ T5353] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.327070][ T5353] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.350463][ T6382] hsr_slave_0: entered promiscuous mode [ 87.352362][ T6382] hsr_slave_1: entered promiscuous mode [ 87.362483][ T6386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.365410][ T6386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.373880][ T6386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.396014][ T6386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.398330][ T6386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.407190][ T6386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.412271][ T65] hsr_slave_0: left promiscuous mode [ 87.414584][ T65] hsr_slave_1: left promiscuous mode [ 87.416705][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.419178][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.421932][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.424524][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.439160][ T65] veth1_macvtap: left promiscuous mode [ 87.440671][ T65] veth0_macvtap: left promiscuous mode [ 87.442147][ T65] veth1_vlan: left promiscuous mode [ 87.443836][ T65] veth0_vlan: left promiscuous mode [ 87.944422][ T65] team0 (unregistering): Port device team_slave_1 removed [ 88.001153][ T65] team0 (unregistering): Port device team_slave_0 removed [ 88.456110][ T5356] Bluetooth: hci3: command tx timeout [ 88.480869][ T6386] hsr_slave_0: entered promiscuous mode [ 88.485007][ T6386] hsr_slave_1: entered promiscuous mode [ 88.487704][ T6386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.489694][ T6386] Cannot create hsr debugfs directory [ 88.545021][ T5356] Bluetooth: hci4: command tx timeout [ 88.562121][ T6416] chnl_net:caif_netlink_parms(): no params data found [ 88.644314][ T6416] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.646981][ T6416] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.649607][ T6416] bridge_slave_0: entered allmulticast mode [ 88.652703][ T6416] bridge_slave_0: entered promiscuous mode [ 88.676899][ T6416] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.678783][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.680663][ T6416] bridge_slave_1: entered allmulticast mode [ 88.683228][ T6416] bridge_slave_1: entered promiscuous mode [ 88.697036][ T5356] Bluetooth: hci1: command 0x040f tx timeout [ 88.705975][ T6416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.709767][ T6416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.729829][ T6416] team0: Port device team_slave_0 added [ 88.732374][ T6416] team0: Port device team_slave_1 added [ 88.751655][ T6416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.753547][ T6416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.760305][ T6416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.763803][ T6416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.766680][ T6416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.773293][ T6416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.815319][ T6416] hsr_slave_0: entered promiscuous mode [ 88.817577][ T6416] hsr_slave_1: entered promiscuous mode [ 88.819370][ T6416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.821363][ T6416] Cannot create hsr debugfs directory [ 88.894826][ T6382] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.911192][ T6386] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.916608][ T6382] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.920180][ T6382] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.928815][ T6382] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.941912][ T65] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.969747][ T6386] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.995802][ T6382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.011010][ T6382] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.015700][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.017629][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.036387][ T65] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.045345][ T1191] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.047218][ T1191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.066223][ T6386] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.081380][ T6382] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.084667][ T6382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.137770][ T65] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.149166][ T6382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.169178][ T6382] veth0_vlan: entered promiscuous mode [ 89.174991][ T6382] veth1_vlan: entered promiscuous mode [ 89.194641][ T6386] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.200898][ T6382] veth0_macvtap: entered promiscuous mode [ 89.203895][ T6382] veth1_macvtap: entered promiscuous mode [ 89.210513][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.213312][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.216493][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.219179][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.221688][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.224436][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.227636][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.231835][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.234784][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.237311][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.239956][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.242437][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.246208][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.249401][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.275467][ T65] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.281773][ T6382] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.284186][ T6382] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.286457][ T6382] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.288703][ T6382] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.322618][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.329750][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.347875][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.350564][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.358797][ T39] audit: type=1400 audit(1729495450.102:296): avc: denied { mounton } for pid=6382 comm="syz-executor" path="/syzkaller.nfgmqY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 89.405035][ T6386] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.409444][ T6386] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.412606][ T6386] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.424071][ T5356] Bluetooth: hci0: command tx timeout [ 89.424451][ T6386] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.473387][ T6386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.495016][ T6386] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.529677][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.531614][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.533864][ T65] bridge_slave_1: left allmulticast mode [ 89.535795][ T65] bridge_slave_1: left promiscuous mode [ 89.537434][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.540512][ T65] bridge_slave_0: left allmulticast mode [ 89.542068][ T65] bridge_slave_0: left promiscuous mode [ 89.543630][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.733675][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.740914][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.744517][ T65] bond0 (unregistering): Released all slaves [ 89.760355][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.762305][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.865178][ T6386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.885390][ T6386] veth0_vlan: entered promiscuous mode [ 89.893626][ T6386] veth1_vlan: entered promiscuous mode [ 89.965342][ T6386] veth0_macvtap: entered promiscuous mode [ 89.968533][ T6386] veth1_macvtap: entered promiscuous mode [ 89.975885][ T6386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.978733][ T6386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.981464][ T6386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.985742][ T6386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.988334][ T6386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.994207][ T6386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.996815][ T6386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.999560][ T6386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.002963][ T6386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.040938][ T65] hsr_slave_0: left promiscuous mode [ 90.045887][ T65] hsr_slave_1: left promiscuous mode [ 90.050810][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.064084][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.084946][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.086957][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.106930][ T65] veth1_macvtap: left promiscuous mode [ 90.108442][ T65] veth0_macvtap: left promiscuous mode [ 90.109943][ T65] veth1_vlan: left promiscuous mode [ 90.111362][ T65] veth0_vlan: left promiscuous mode [ 90.614098][ T5356] Bluetooth: hci4: command tx timeout [ 90.648337][ T65] team0 (unregistering): Port device team_slave_1 removed [ 90.702304][ T65] team0 (unregistering): Port device team_slave_0 removed [ 91.073499][ T6386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.076256][ T6386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.078804][ T6386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.081497][ T6386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.084023][ T6386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.086793][ T6386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.090017][ T6386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.093517][ T6386] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.096192][ T6386] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.098399][ T6386] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.100626][ T6386] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.144323][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.147510][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.159170][ T6416] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.171018][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.173063][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.175496][ T6416] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.179579][ T6416] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.183721][ T6416] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.241122][ T6416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.255017][ T6416] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.261716][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.263606][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.269249][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.271054][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.352662][ T6416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.370246][ T6416] veth0_vlan: entered promiscuous mode [ 91.374803][ T6416] veth1_vlan: entered promiscuous mode [ 91.385158][ T6416] veth0_macvtap: entered promiscuous mode [ 91.388415][ T6416] veth1_macvtap: entered promiscuous mode [ 91.395729][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.398471][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.400945][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.403581][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.408448][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.411168][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.413529][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.416797][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.420043][ T6416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.424312][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.426324][ T6534] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 91.426958][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.426968][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.435518][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.438005][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.441083][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.443540][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.446493][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.449759][ T6416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.454529][ T6416] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.456773][ T6416] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.458997][ T6416] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.461157][ T6416] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.488861][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.490852][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.494074][ T5356] Bluetooth: hci0: command tx timeout [ 91.501933][ T1021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.504452][ T1021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.544639][ T6541] netlink: 81772 bytes leftover after parsing attributes in process `syz.2.182'. [ 91.713327][ T39] audit: type=1400 audit(1729495452.452:297): avc: denied { map } for pid=6545 comm="syz.1.196" path="socket:[16382]" dev="sockfs" ino=16382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 91.719438][ T39] audit: type=1400 audit(1729495452.452:298): avc: denied { read } for pid=6545 comm="syz.1.196" path="socket:[16382]" dev="sockfs" ino=16382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 91.725782][ T39] audit: type=1400 audit(1729495452.452:299): avc: denied { create } for pid=6545 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 91.730600][ T39] audit: type=1400 audit(1729495452.452:300): avc: denied { getopt } for pid=6545 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 91.736300][ T39] audit: type=1400 audit(1729495452.462:301): avc: denied { create } for pid=6548 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 91.741080][ T39] audit: type=1400 audit(1729495452.462:302): avc: denied { connect } for pid=6548 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 91.751383][ T39] audit: type=1400 audit(1729495452.462:303): avc: denied { write } for pid=6548 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 91.853632][ T39] audit: type=1400 audit(1729495452.592:304): avc: denied { setopt } for pid=6555 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.251603][ T6567] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 92.815725][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 92.831623][ T6572] þü: entered promiscuous mode [ 92.947628][ T6386] syz-executor (6386) used greatest stack depth: 21248 bytes left [ 92.966133][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.071582][ T5353] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.075822][ T5353] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.078258][ T5353] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.080748][ T5353] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.083058][ T5353] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.086346][ T5353] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.177941][ T6574] chnl_net:caif_netlink_parms(): no params data found [ 93.242220][ T6574] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.244646][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.247861][ T6574] bridge_slave_0: entered allmulticast mode [ 93.250471][ T6574] bridge_slave_0: entered promiscuous mode [ 93.254744][ T6574] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.257033][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.259231][ T6574] bridge_slave_1: entered allmulticast mode [ 93.261305][ T6574] bridge_slave_1: entered promiscuous mode [ 93.291181][ T6574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.296652][ T6574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.327273][ T6574] team0: Port device team_slave_0 added [ 93.330707][ T6574] team0: Port device team_slave_1 added [ 93.359834][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.362042][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.371375][ T6574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.375306][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.377011][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.383260][ T6574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.405922][ T6574] hsr_slave_0: entered promiscuous mode [ 93.407826][ T6574] hsr_slave_1: entered promiscuous mode [ 93.409511][ T6574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.411376][ T6574] Cannot create hsr debugfs directory [ 93.574081][ T5356] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 93.577128][ T5356] Bluetooth: hci3: Injecting HCI hardware error event [ 93.581516][ T5353] Bluetooth: hci3: hardware error 0x00 [ 93.647083][ T5345] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.649765][ T5345] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.652414][ T5345] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.656420][ T5345] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.659263][ T5345] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.661552][ T5345] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.807044][ T39] audit: type=1400 audit(1729495454.552:305): avc: denied { create } for pid=6588 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.999747][ T6586] chnl_net:caif_netlink_parms(): no params data found [ 94.354788][ T6586] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.356750][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.359355][ T6586] bridge_slave_0: entered allmulticast mode [ 94.364560][ T6586] bridge_slave_0: entered promiscuous mode [ 94.370827][ T6586] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.373058][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.375313][ T6586] bridge_slave_1: entered allmulticast mode [ 94.378633][ T6586] bridge_slave_1: entered promiscuous mode [ 94.436530][ T6586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.440126][ T6586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.466284][ T6586] team0: Port device team_slave_0 added [ 94.469227][ T6586] team0: Port device team_slave_1 added [ 94.490397][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.493190][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.504683][ T6586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.508154][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.509894][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.516400][ T6586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.542950][ T6586] hsr_slave_0: entered promiscuous mode [ 94.545301][ T6586] hsr_slave_1: entered promiscuous mode [ 94.547592][ T6586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.550433][ T6603] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 94.553620][ T6586] Cannot create hsr debugfs directory [ 94.691071][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.775546][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.864106][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.938447][ T12] bridge_slave_1: left allmulticast mode [ 94.939944][ T12] bridge_slave_1: left promiscuous mode [ 94.941454][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.944813][ T12] bridge_slave_0: left allmulticast mode [ 94.946267][ T12] bridge_slave_0: left promiscuous mode [ 94.947793][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.156941][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.160846][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.164454][ T12] bond0 (unregistering): Released all slaves [ 95.174658][ T5345] Bluetooth: hci0: command tx timeout [ 95.533175][ T12] hsr_slave_0: left promiscuous mode [ 95.537476][ T12] hsr_slave_1: left promiscuous mode [ 95.539260][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.541155][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.543399][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.545851][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.561721][ T12] veth1_macvtap: left promiscuous mode [ 95.563183][ T12] veth0_macvtap: left promiscuous mode [ 95.566677][ T12] veth1_vlan: left promiscuous mode [ 95.568127][ T12] veth0_vlan: left promiscuous mode [ 95.655794][ T5353] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 95.744530][ T5353] Bluetooth: hci4: command tx timeout [ 95.928689][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 95.928745][ T39] audit: type=1400 audit(1729495456.672:312): avc: denied { create } for pid=6640 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.070124][ T12] team0 (unregistering): Port device team_slave_1 removed [ 96.130970][ T12] team0 (unregistering): Port device team_slave_0 removed [ 96.568216][ T6586] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.703712][ T6586] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.734349][ T6646] FAULT_INJECTION: forcing a failure. [ 96.734349][ T6646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.737639][ T6646] CPU: 3 UID: 0 PID: 6646 Comm: syz.0.219 Not tainted 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 [ 96.740282][ T6646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.743019][ T6646] Call Trace: [ 96.744059][ T6646] [ 96.744881][ T6646] dump_stack_lvl+0x16c/0x1f0 [ 96.746094][ T6646] should_fail_ex+0x497/0x5b0 [ 96.747294][ T6646] _copy_from_iter+0x2a1/0x1540 [ 96.748570][ T6646] ? __pfx__copy_from_iter+0x10/0x10 [ 96.749936][ T6646] ? __virt_addr_valid+0x1a4/0x590 [ 96.751265][ T6646] ? __virt_addr_valid+0x5e/0x590 [ 96.752551][ T6646] ? __phys_addr_symbol+0x30/0x80 [ 96.753863][ T6646] ? __check_object_size+0x488/0x710 [ 96.755202][ T6646] netlink_sendmsg+0x813/0xd70 [ 96.756428][ T6646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.757791][ T6646] ? __import_iovec+0x1fd/0x6e0 [ 96.759046][ T6646] ____sys_sendmsg+0xaaf/0xc90 [ 96.760430][ T6646] ? copy_msghdr_from_user+0x10b/0x160 [ 96.761840][ T6646] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.763201][ T6646] ? __pfx___lock_acquire+0x10/0x10 [ 96.764545][ T6646] ___sys_sendmsg+0x135/0x1e0 [ 96.765804][ T6646] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.767151][ T6646] ? lock_acquire+0x2f/0xb0 [ 96.768320][ T6646] ? __fget_files+0x40/0x3f0 [ 96.769533][ T6646] ? fdget+0x176/0x210 [ 96.770600][ T6646] __sys_sendmsg+0x117/0x1f0 [ 96.771810][ T6646] ? __pfx___sys_sendmsg+0x10/0x10 [ 96.773146][ T6646] ? __fget_files+0x244/0x3f0 [ 96.774358][ T6646] do_syscall_64+0xcd/0x250 [ 96.775535][ T6646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.777188][ T6646] RIP: 0033:0x7f803457dff9 [ 96.778629][ T6646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.783542][ T6646] RSP: 002b:00007f80352ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.785695][ T6646] RAX: ffffffffffffffda RBX: 00007f8034735f80 RCX: 00007f803457dff9 [ 96.787678][ T6646] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 96.789644][ T6646] RBP: 00007f80352ec090 R08: 0000000000000000 R09: 0000000000000000 [ 96.791625][ T6646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.793585][ T6646] R13: 0000000000000000 R14: 00007f8034735f80 R15: 00007ffec8e78538 [ 96.795584][ T6646] [ 96.882008][ T6586] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.891001][ T5345] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.893680][ T5345] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.896099][ T5345] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.898529][ T5345] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.901136][ T5345] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 96.903269][ T5345] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.948076][ T5345] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 96.966808][ T6650] chnl_net:caif_netlink_parms(): no params data found [ 97.013894][ T6586] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.025261][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.027062][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.028936][ T6650] bridge_slave_0: entered allmulticast mode [ 97.030942][ T6650] bridge_slave_0: entered promiscuous mode [ 97.033628][ T6650] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.035827][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.037699][ T6650] bridge_slave_1: entered allmulticast mode [ 97.039686][ T6650] bridge_slave_1: entered promiscuous mode [ 97.058839][ T6650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.063343][ T6650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.085841][ T6650] team0: Port device team_slave_0 added [ 97.089257][ T6650] team0: Port device team_slave_1 added [ 97.111963][ T6650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.113746][ T6650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.120106][ T6650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.125823][ T6650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.127588][ T6650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.133864][ T6650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.158384][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.178206][ T6650] hsr_slave_0: entered promiscuous mode [ 97.180518][ T6650] hsr_slave_1: entered promiscuous mode [ 97.182714][ T6650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.184841][ T6650] Cannot create hsr debugfs directory [ 97.201536][ T6586] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.212786][ T6586] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.217526][ T6586] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.221622][ T6586] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.234715][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.254141][ T5345] Bluetooth: hci0: command tx timeout [ 97.271494][ T6574] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.277618][ T6574] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.280463][ T6574] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.287020][ T6574] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.309366][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.340329][ T6574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.344348][ T6586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.360542][ T6586] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.363926][ T6574] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.368347][ T1191] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.370154][ T1191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.378641][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.388143][ T1191] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.389978][ T1191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.395113][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.396961][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.403508][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.405410][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.457852][ T12] bridge_slave_1: left allmulticast mode [ 97.459299][ T12] bridge_slave_1: left promiscuous mode [ 97.460785][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.463708][ T12] bridge_slave_0: left allmulticast mode [ 97.465909][ T12] bridge_slave_0: left promiscuous mode [ 97.467367][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.471203][ T12] bridge_slave_1: left allmulticast mode [ 97.472639][ T12] bridge_slave_1: left promiscuous mode [ 97.474859][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.477875][ T12] bridge_slave_0: left allmulticast mode [ 97.479301][ T12] bridge_slave_0: left promiscuous mode [ 97.480762][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.824083][ T5345] Bluetooth: hci4: command tx timeout [ 97.861722][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.867164][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.870681][ T12] bond0 (unregistering): Released all slaves [ 97.921519][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.925733][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.929160][ T12] bond0 (unregistering): Released all slaves [ 97.972390][ T6574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.980889][ T6586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.998254][ T6574] veth0_vlan: entered promiscuous mode [ 98.020120][ T12] þü: left promiscuous mode [ 98.028001][ T6586] veth0_vlan: entered promiscuous mode [ 98.030369][ T6574] veth1_vlan: entered promiscuous mode [ 98.035435][ T6586] veth1_vlan: entered promiscuous mode [ 98.058250][ T6574] veth0_macvtap: entered promiscuous mode [ 98.063857][ T6574] veth1_macvtap: entered promiscuous mode [ 98.067363][ T6586] veth0_macvtap: entered promiscuous mode [ 98.090512][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.093331][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.096324][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.098952][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.101342][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.104037][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.106528][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.109167][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.112456][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.114992][ T6586] veth1_macvtap: entered promiscuous mode [ 98.123414][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.127049][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.130096][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.131106][ T6679] netlink: 81772 bytes leftover after parsing attributes in process `syz.0.224'. [ 98.133282][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.133295][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.142778][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.146206][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.149464][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.155114][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.161392][ T6574] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.164989][ T6574] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.167896][ T6574] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.170654][ T6574] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.221623][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.229290][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.231764][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.234704][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.237544][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.240128][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.242562][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.246868][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.249470][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.252040][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.256127][ T6586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.262824][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.266393][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.269544][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.272773][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.276479][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.279724][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.282727][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.286225][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.289238][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.292401][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.297413][ T6586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.329650][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 98.335612][ T39] audit: type=1400 audit(1729495459.082:313): avc: denied { bind } for pid=6684 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 98.340242][ T39] audit: type=1400 audit(1729495459.082:314): avc: denied { name_bind } for pid=6684 comm="syz.0.225" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 98.345428][ T39] audit: type=1400 audit(1729495459.082:315): avc: denied { node_bind } for pid=6684 comm="syz.0.225" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 98.350591][ T39] audit: type=1400 audit(1729495459.082:316): avc: denied { listen } for pid=6684 comm="syz.0.225" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 98.352778][ T6586] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.356007][ T39] audit: type=1400 audit(1729495459.082:317): avc: denied { accept } for pid=6684 comm="syz.0.225" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 98.359439][ T6586] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.366582][ T6586] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.369275][ T6586] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.387636][ T39] audit: type=1400 audit(1729495459.132:318): avc: denied { connect } for pid=6684 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 98.392526][ T39] audit: type=1400 audit(1729495459.132:319): avc: denied { name_connect } for pid=6684 comm="syz.0.225" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 98.401685][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.404383][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.416816][ T39] audit: type=1400 audit(1729495459.162:320): avc: denied { mounton } for pid=6687 comm="syz.0.226" path="/proc/100/task" dev="proc" ino=19908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 98.432049][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.434540][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.503734][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.509094][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.538247][ T6650] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.550545][ T6650] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.595108][ T6650] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.595116][ T1021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.595130][ T1021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.624043][ T6650] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.689066][ T12] hsr_slave_0: left promiscuous mode [ 98.692277][ T12] hsr_slave_1: left promiscuous mode [ 98.698117][ T6694] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 98.716941][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.719027][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.722387][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.724570][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.737884][ T12] hsr_slave_0: left promiscuous mode [ 98.739799][ T12] hsr_slave_1: left promiscuous mode [ 98.757226][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.759535][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.762220][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.764821][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.810494][ T12] veth1_macvtap: left promiscuous mode [ 98.812866][ T12] veth0_macvtap: left promiscuous mode [ 98.814744][ T12] veth1_vlan: left promiscuous mode [ 98.816180][ T12] veth0_vlan: left promiscuous mode [ 98.824058][ T12] veth1_macvtap: left promiscuous mode [ 98.825518][ T12] veth0_macvtap: left promiscuous mode [ 98.826921][ T12] veth1_vlan: left promiscuous mode [ 98.828215][ T12] veth0_vlan: left promiscuous mode [ 98.934726][ T5345] Bluetooth: hci3: command tx timeout [ 99.746759][ T12] team0 (unregistering): Port device team_slave_1 removed [ 99.802778][ T12] team0 (unregistering): Port device team_slave_0 removed [ 99.905040][ T5345] Bluetooth: hci4: command tx timeout [ 100.049941][ T39] audit: type=1400 audit(1729495460.792:321): avc: denied { bind } for pid=6718 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 100.755062][ T12] team0 (unregistering): Port device team_slave_1 removed [ 100.812417][ T12] team0 (unregistering): Port device team_slave_0 removed [ 101.015625][ T5345] Bluetooth: hci3: command tx timeout [ 101.253584][ T6650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.267733][ T6650] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.277830][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.279647][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.284659][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.286433][ T1021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.362261][ T6650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.377052][ T6650] veth0_vlan: entered promiscuous mode [ 101.382041][ T6650] veth1_vlan: entered promiscuous mode [ 101.403114][ T6650] veth0_macvtap: entered promiscuous mode [ 101.411628][ T6650] veth1_macvtap: entered promiscuous mode [ 101.418076][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.420788][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.423241][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.426839][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.429405][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.431920][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.434598][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.437206][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.440925][ T6650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.446482][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.449116][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.451568][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.455147][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.457654][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.460176][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.462547][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.466283][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.469645][ T6650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.475322][ T6650] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.477537][ T6650] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.479803][ T6650] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.481990][ T6650] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.519869][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.521904][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.531232][ T5353] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.535649][ T5353] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.537963][ T5353] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.540898][ T5353] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.543176][ T5353] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 101.549158][ T1191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.549489][ T5353] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.551218][ T1191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.674127][ T6739] chnl_net:caif_netlink_parms(): no params data found [ 101.861835][ T6739] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.863731][ T6739] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.866208][ T6739] bridge_slave_0: entered allmulticast mode [ 101.868200][ T6739] bridge_slave_0: entered promiscuous mode [ 101.871433][ T6739] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.873344][ T6739] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.875852][ T6739] bridge_slave_1: entered allmulticast mode [ 101.877843][ T6739] bridge_slave_1: entered promiscuous mode [ 101.908487][ T6739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.915299][ T6739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.955837][ T6747] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 101.956396][ T6739] team0: Port device team_slave_0 added [ 101.961808][ T6739] team0: Port device team_slave_1 added [ 101.974522][ T5345] Bluetooth: hci4: command tx timeout [ 101.998995][ T6739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.001116][ T6739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.017758][ T6739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.024975][ T6739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.027030][ T6739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.034141][ T6739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.081687][ T6739] hsr_slave_0: entered promiscuous mode [ 102.084719][ T6739] hsr_slave_1: entered promiscuous mode [ 102.183992][ T6739] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.277038][ T6739] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.355242][ T6739] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.455123][ T6739] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.546701][ T6760] Zero length message leads to an empty skb [ 102.551382][ T12] bridge_slave_1: left allmulticast mode [ 102.552871][ T12] bridge_slave_1: left promiscuous mode [ 102.554517][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.558024][ T12] bridge_slave_0: left allmulticast mode [ 102.559439][ T12] bridge_slave_0: left promiscuous mode [ 102.560901][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.795585][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.799587][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.803024][ T12] bond0 (unregistering): Released all slaves [ 102.854267][ T6739] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.856470][ T5353] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.859712][ T5353] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.860388][ T6739] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.862618][ T5353] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.867019][ T5353] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.868872][ T6739] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.874331][ T5353] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 102.875453][ T6739] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.876242][ T5353] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.024729][ T6739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.104174][ T6767] chnl_net:caif_netlink_parms(): no params data found [ 103.161259][ T6739] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.187471][ T1021] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.190456][ T1021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.194743][ T6767] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.196849][ T6767] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.199228][ T6767] bridge_slave_0: entered allmulticast mode [ 103.201337][ T6767] bridge_slave_0: entered promiscuous mode [ 103.204073][ T6767] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.206110][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.208142][ T6767] bridge_slave_1: entered allmulticast mode [ 103.210461][ T6767] bridge_slave_1: entered promiscuous mode [ 103.241065][ T12] hsr_slave_0: left promiscuous mode [ 103.243297][ T12] hsr_slave_1: left promiscuous mode [ 103.245819][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.247753][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.249956][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.251882][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.281876][ T12] veth1_macvtap: left promiscuous mode [ 103.283549][ T12] veth0_macvtap: left promiscuous mode [ 103.285533][ T12] veth1_vlan: left promiscuous mode [ 103.287266][ T12] veth0_vlan: left promiscuous mode [ 103.576055][ T5353] Bluetooth: hci1: command tx timeout [ 103.881133][ T12] team0 (unregistering): Port device team_slave_1 removed [ 103.956953][ T12] team0 (unregistering): Port device team_slave_0 removed [ 104.369613][ T1191] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.371511][ T1191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.375760][ T6767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.380844][ T6767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.412458][ T6767] team0: Port device team_slave_0 added [ 104.415532][ T6767] team0: Port device team_slave_1 added [ 104.431978][ T6767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.433763][ T6767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.440882][ T6767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.444932][ T6767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.446701][ T6767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.453316][ T6767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.496182][ T6767] hsr_slave_0: entered promiscuous mode [ 104.498119][ T6767] hsr_slave_1: entered promiscuous mode [ 104.499903][ T6767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.501852][ T6767] Cannot create hsr debugfs directory [ 104.589108][ T6767] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.632264][ T6739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.649121][ T6739] veth0_vlan: entered promiscuous mode [ 104.653365][ T6739] veth1_vlan: entered promiscuous mode [ 104.666011][ T6739] veth0_macvtap: entered promiscuous mode [ 104.669252][ T6739] veth1_macvtap: entered promiscuous mode [ 104.675494][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.678214][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.680819][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.683500][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.686265][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.688918][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.691463][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.694227][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.697504][ T6739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.720039][ T6767] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.727267][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.730049][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.732508][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.735352][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.737920][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.740674][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.743225][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.746102][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.749391][ T6739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.753897][ T6739] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.756448][ T6739] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.758846][ T6739] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.761162][ T6739] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.785487][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.787901][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.801039][ T6767] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.812575][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.815282][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.901647][ T6767] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.934059][ T5353] Bluetooth: hci0: command tx timeout [ 104.968605][ T78] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.972524][ T6791] netlink: 536 bytes leftover after parsing attributes in process `syz.0.247'. [ 104.981167][ T39] audit: type=1400 audit(1729495465.722:322): avc: denied { mount } for pid=6790 comm="syz.0.247" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 105.029328][ T5345] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.034174][ T5345] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.037109][ T5345] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.040118][ T5345] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.043516][ T5345] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 105.047346][ T5345] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.047724][ T6767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.052958][ T6767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.057155][ T6767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.064469][ T6767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.180208][ T6792] chnl_net:caif_netlink_parms(): no params data found [ 105.237648][ T39] audit: type=1400 audit(1729495465.982:323): avc: denied { write } for pid=6801 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.267191][ T6767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.269834][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.272428][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.275101][ T6792] bridge_slave_0: entered allmulticast mode [ 105.278158][ T6792] bridge_slave_0: entered promiscuous mode [ 105.285755][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.287991][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.290704][ T6792] bridge_slave_1: entered allmulticast mode [ 105.293826][ T6792] bridge_slave_1: entered promiscuous mode [ 105.308574][ T8] kernel write not supported for file /input/event0 (pid: 8 comm: kworker/0:0) [ 105.320742][ T6767] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.343683][ T39] audit: type=1400 audit(1729495466.082:324): avc: denied { ioctl } for pid=6808 comm="syz.0.252" path="socket:[23056]" dev="sockfs" ino=23056 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.344636][ T6792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.356714][ T6792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.356845][ T39] audit: type=1400 audit(1729495466.102:325): avc: denied { connect } for pid=6808 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.366854][ T39] audit: type=1400 audit(1729495466.102:326): avc: denied { write } for pid=6808 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.389226][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.391249][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.403663][ T6792] team0: Port device team_slave_0 added [ 105.406609][ T39] audit: type=1400 audit(1729495466.162:327): avc: denied { read write } for pid=6810 comm="syz.0.253" name="raw-gadget" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.409172][ T6792] team0: Port device team_slave_1 added [ 105.413418][ T39] audit: type=1400 audit(1729495466.162:328): avc: denied { open } for pid=6810 comm="syz.0.253" path="/dev/raw-gadget" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.422011][ T39] audit: type=1400 audit(1729495466.162:329): avc: denied { ioctl } for pid=6810 comm="syz.0.253" path="/dev/raw-gadget" dev="devtmpfs" ino=761 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.441970][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.444074][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.455078][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.457121][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.465259][ T6792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.470918][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.472718][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.479577][ T6792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.503432][ T6792] hsr_slave_0: entered promiscuous mode [ 105.505638][ T6792] hsr_slave_1: entered promiscuous mode [ 105.507401][ T6792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.509474][ T6792] Cannot create hsr debugfs directory [ 105.625932][ T6767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.642060][ T6767] veth0_vlan: entered promiscuous mode [ 105.646212][ T6767] veth1_vlan: entered promiscuous mode [ 105.657039][ T6767] veth0_macvtap: entered promiscuous mode [ 105.660100][ T6767] veth1_macvtap: entered promiscuous mode [ 105.664653][ T5353] Bluetooth: hci1: command tx timeout [ 105.664805][ T70] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.667690][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.671337][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.673830][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.677031][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.679518][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.682201][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.684783][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.687420][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.689891][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.692567][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.696361][ T6767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.700824][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.703517][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.706799][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.709498][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.711969][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.714859][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.717374][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.720045][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.722552][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.725416][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.729056][ T6767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.733420][ T6767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.736444][ T6767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.738900][ T6767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.741134][ T6767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.763414][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.765609][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.774956][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.777047][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.804052][ T70] usb 5-1: device descriptor read/64, error -71 [ 105.906666][ T78] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.986631][ T78] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.044104][ T70] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.054779][ T5353] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 106.057434][ T5353] Bluetooth: hci4: Injecting HCI hardware error event [ 106.058413][ T78] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.059796][ T5353] Bluetooth: hci4: hardware error 0x00 [ 106.131611][ T78] bridge_slave_1: left allmulticast mode [ 106.133078][ T78] bridge_slave_1: left promiscuous mode [ 106.134813][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.137614][ T78] bridge_slave_0: left allmulticast mode [ 106.139057][ T78] bridge_slave_0: left promiscuous mode [ 106.140538][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.143566][ T78] bridge_slave_1: left allmulticast mode [ 106.145778][ T78] bridge_slave_1: left promiscuous mode [ 106.147188][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.150291][ T78] bridge_slave_0: left allmulticast mode [ 106.151803][ T78] bridge_slave_0: left promiscuous mode [ 106.153486][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.174138][ T70] usb 5-1: device descriptor read/64, error -71 [ 106.294305][ T70] usb usb5-port1: attempt power cycle [ 106.569991][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.575798][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.581149][ T78] bond0 (unregistering): Released all slaves [ 106.644954][ T70] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 106.647531][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.651653][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.658889][ T78] bond0 (unregistering): Released all slaves [ 106.664595][ T70] usb 5-1: device descriptor read/8, error -71 [ 106.753502][ T6821] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 106.813872][ T39] audit: type=1400 audit(1729495467.552:330): avc: denied { unlink } for pid=6827 comm="syz.2.255" name="#1" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 106.830271][ T39] audit: type=1400 audit(1729495467.572:331): avc: denied { mount } for pid=6827 comm="syz.2.255" name="/" dev="overlay" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 106.914128][ T70] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 106.935582][ T70] usb 5-1: device descriptor read/8, error -71 [ 107.046358][ T70] usb usb5-port1: unable to enumerate USB device [ 107.094167][ T5345] Bluetooth: hci3: command tx timeout [ 107.094974][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 107.123256][ T6842] misc userio: Invalid payload size [ 107.125156][ T6842] misc userio: No port type given on /dev/userio [ 107.153151][ T6792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.157155][ T6792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.160739][ T6792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.163685][ T6792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.177553][ T6849] misc userio: Invalid payload size [ 107.179247][ T6849] misc userio: Invalid payload size [ 107.218749][ T6792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.239115][ T6792] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.267481][ T1191] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.269534][ T1191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.275213][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.277075][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.338655][ T78] hsr_slave_0: left promiscuous mode [ 107.341148][ T78] hsr_slave_1: left promiscuous mode [ 107.343838][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.348111][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.351210][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.353859][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.359970][ T78] hsr_slave_0: left promiscuous mode [ 107.362354][ T78] hsr_slave_1: left promiscuous mode [ 107.364830][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.366953][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.369138][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.371086][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.403548][ T78] veth1_macvtap: left promiscuous mode [ 107.405161][ T78] veth0_macvtap: left promiscuous mode [ 107.406628][ T78] veth1_vlan: left promiscuous mode [ 107.408014][ T78] veth0_vlan: left promiscuous mode [ 107.410380][ T78] veth1_macvtap: left promiscuous mode [ 107.411847][ T78] veth0_macvtap: left promiscuous mode [ 107.413308][ T78] veth1_vlan: left promiscuous mode [ 107.415041][ T78] veth0_vlan: left promiscuous mode [ 107.498109][ T5345] Bluetooth: hci2: hardware error 0x00 [ 107.506313][ T5345] [ 107.506950][ T5345] ============================================ [ 107.508496][ T5345] WARNING: possible recursive locking detected [ 107.510050][ T5345] 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 Not tainted [ 107.512636][ T5345] -------------------------------------------- [ 107.515321][ T5345] kworker/u33:2/5345 is trying to acquire lock: [ 107.516876][ T5345] ffff888049b82148 ((wq_completion)hci2){+.+.}-{0:0}, at: touch_wq_lockdep_map+0xa7/0x1c0 [ 107.519323][ T5345] [ 107.519323][ T5345] but task is already holding lock: [ 107.521146][ T5345] ffff888049b82148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 107.523582][ T5345] [ 107.523582][ T5345] other info that might help us debug this: [ 107.525568][ T5345] Possible unsafe locking scenario: [ 107.525568][ T5345] [ 107.527406][ T5345] CPU0 [ 107.528247][ T5345] ---- [ 107.529081][ T5345] lock((wq_completion)hci2); [ 107.530270][ T5345] lock((wq_completion)hci2); [ 107.531473][ T5345] [ 107.531473][ T5345] *** DEADLOCK *** [ 107.531473][ T5345] [ 107.533450][ T5345] May be due to missing lock nesting notation [ 107.533450][ T5345] [ 107.535460][ T5345] 2 locks held by kworker/u33:2/5345: [ 107.536791][ T5345] #0: ffff888049b82148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 107.539287][ T5345] #1: ffffc90003c2fd80 ((work_completion)(&hdev->error_reset)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 107.542124][ T5345] [ 107.542124][ T5345] stack backtrace: [ 107.543592][ T5345] CPU: 1 UID: 0 PID: 5345 Comm: kworker/u33:2 Not tainted 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 [ 107.546275][ T5345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.548923][ T5345] Workqueue: hci2 hci_error_reset [ 107.550173][ T5345] Call Trace: [ 107.551010][ T5345] [ 107.551772][ T5345] dump_stack_lvl+0x116/0x1f0 [ 107.552980][ T5345] print_deadlock_bug+0x2e3/0x410 [ 107.554254][ T5345] __lock_acquire+0x2185/0x3ce0 [ 107.555475][ T5345] ? __pfx___lock_acquire+0x10/0x10 [ 107.556759][ T5345] lock_acquire.part.0+0x11b/0x380 [ 107.558023][ T5345] ? touch_wq_lockdep_map+0xa7/0x1c0 [ 107.559331][ T5345] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 107.560723][ T5345] ? rcu_is_watching+0x12/0xc0 [ 107.561950][ T5345] ? trace_lock_acquire+0x14a/0x1d0 [ 107.563261][ T5345] ? lock_acquire.part.0+0x11b/0x380 [ 107.564626][ T5345] ? touch_wq_lockdep_map+0xa7/0x1c0 [ 107.565968][ T5345] ? lock_acquire+0x2f/0xb0 [ 107.567118][ T5345] ? touch_wq_lockdep_map+0xa7/0x1c0 [ 107.568465][ T5345] ? touch_wq_lockdep_map+0xa7/0x1c0 [ 107.569754][ T5345] touch_wq_lockdep_map+0xad/0x1c0 [ 107.571024][ T5345] ? touch_wq_lockdep_map+0xa7/0x1c0 [ 107.572330][ T5345] __flush_workqueue+0x129/0x1200 [ 107.573593][ T5345] ? rcu_is_watching+0x12/0xc0 [ 107.574767][ T5345] ? trace_contention_end+0xea/0x140 [ 107.576062][ T5345] ? __pfx___flush_workqueue+0x10/0x10 [ 107.577402][ T5345] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.578855][ T5345] ? destroy_workqueue+0x7c3/0xaa0 [ 107.580126][ T5345] drain_workqueue+0x18f/0x3d0 [ 107.581308][ T5345] destroy_workqueue+0xc2/0xaa0 [ 107.582503][ T5345] hci_release_dev+0x14e/0x600 [ 107.583704][ T5345] ? __pfx_hci_release_dev+0x10/0x10 [ 107.585026][ T5345] ? rcu_is_watching+0x12/0xc0 [ 107.586212][ T5345] ? kfree+0x274/0x4b0 [ 107.587219][ T5345] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 107.588577][ T5345] bt_host_release+0x6a/0xb0 [ 107.589745][ T5345] ? __pfx_bt_host_release+0x10/0x10 [ 107.591066][ T5345] device_release+0xa1/0x240 [ 107.592227][ T5345] kobject_put+0x1e4/0x5a0 [ 107.593367][ T5345] put_device+0x1f/0x30 [ 107.594404][ T5345] process_one_work+0x9c5/0x1ba0 [ 107.595635][ T5345] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 107.597066][ T5345] ? __pfx_process_one_work+0x10/0x10 [ 107.598419][ T5345] ? assign_work+0x1a0/0x250 [ 107.599571][ T5345] worker_thread+0x6c8/0xf00 [ 107.600713][ T5345] ? __kthread_parkme+0x148/0x220 [ 107.601966][ T5345] ? __pfx_worker_thread+0x10/0x10 [ 107.603219][ T5345] kthread+0x2c1/0x3a0 [ 107.604272][ T5345] ? _raw_spin_unlock_irq+0x23/0x50 [ 107.605583][ T5345] ? __pfx_kthread+0x10/0x10 [ 107.606736][ T5345] ret_from_fork+0x45/0x80 [ 107.607872][ T5345] ? __pfx_kthread+0x10/0x10 [ 107.609022][ T5345] ret_from_fork_asm+0x1a/0x30 [ 107.610223][ T5345] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 108.134064][ T5353] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 108.143225][ T78] team0 (unregistering): Port device team_slave_1 removed [ 108.193144][ T78] team0 (unregistering): Port device team_slave_0 removed [ 109.062169][ T78] team0 (unregistering): Port device team_slave_1 removed [ 109.115826][ T78] team0 (unregistering): Port device team_slave_0 removed [ 109.184037][ T5353] Bluetooth: hci3: command tx timeout [ 110.361431][ T78] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.436783][ T78] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.506823][ T78] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.566625][ T78] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.601700][ T78] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.680482][ T78] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.766801][ T78] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.819396][ T78] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.909046][ T78] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.957904][ T78] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.016654][ T78] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.096620][ T78] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.178192][ T78] bridge_slave_1: left allmulticast mode [ 112.180056][ T78] bridge_slave_1: left promiscuous mode [ 112.181936][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.185862][ T78] bridge_slave_0: left allmulticast mode [ 112.187322][ T78] bridge_slave_0: left promiscuous mode [ 112.188792][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.191552][ T78] bridge_slave_1: left allmulticast mode [ 112.193001][ T78] bridge_slave_1: left promiscuous mode [ 112.194680][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.197028][ T78] bridge_slave_0: left allmulticast mode [ 112.198448][ T78] bridge_slave_0: left promiscuous mode [ 112.199863][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.202693][ T78] bridge_slave_1: left allmulticast mode [ 112.206046][ T78] bridge_slave_1: left promiscuous mode [ 112.207753][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.211026][ T78] bridge_slave_0: left allmulticast mode [ 112.212831][ T78] bridge_slave_0: left promiscuous mode [ 112.214836][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.218530][ T78] bridge_slave_1: left allmulticast mode [ 112.220366][ T78] bridge_slave_1: left promiscuous mode [ 112.222233][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.225726][ T78] bridge_slave_0: left allmulticast mode [ 112.227564][ T78] bridge_slave_0: left promiscuous mode [ 112.229438][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.232909][ T78] bridge_slave_1: left allmulticast mode [ 112.234970][ T78] bridge_slave_1: left promiscuous mode [ 112.236450][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.238837][ T78] bridge_slave_0: left allmulticast mode [ 112.240281][ T78] bridge_slave_0: left promiscuous mode [ 112.241737][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.707547][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.711272][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.713909][ T78] bond0 (unregistering): Released all slaves [ 112.718376][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.721488][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.724141][ T78] bond0 (unregistering): Released all slaves [ 112.728873][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.732225][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.734984][ T78] bond0 (unregistering): Released all slaves [ 112.739596][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.742358][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.745267][ T78] bond0 (unregistering): Released all slaves [ 112.749783][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.752582][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.756065][ T78] bond0 (unregistering): Released all slaves [ 113.431504][ T78] hsr_slave_0: left promiscuous mode [ 113.433156][ T78] hsr_slave_1: left promiscuous mode [ 113.435132][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.436873][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.439108][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.440723][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.446605][ T78] hsr_slave_0: left promiscuous mode [ 113.448759][ T78] hsr_slave_1: left promiscuous mode [ 113.450864][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.453276][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.457064][ T78] hsr_slave_0: left promiscuous mode [ 113.458859][ T78] hsr_slave_1: left promiscuous mode [ 113.460642][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.462601][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.465329][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.467289][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.471110][ T78] hsr_slave_0: left promiscuous mode [ 113.472840][ T78] hsr_slave_1: left promiscuous mode [ 113.475582][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.477560][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.479716][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.481657][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.486491][ T78] hsr_slave_0: left promiscuous mode [ 113.488278][ T78] hsr_slave_1: left promiscuous mode [ 113.490013][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.491921][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.494184][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.496139][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.502273][ T78] veth1_macvtap: left promiscuous mode [ 113.503744][ T78] veth0_macvtap: left promiscuous mode [ 113.505642][ T78] veth1_vlan: left promiscuous mode [ 113.506999][ T78] veth0_vlan: left promiscuous mode [ 113.508909][ T78] veth1_macvtap: left promiscuous mode [ 113.510413][ T78] veth0_macvtap: left promiscuous mode [ 113.511779][ T78] veth1_vlan: left promiscuous mode [ 113.513332][ T78] veth0_vlan: left promiscuous mode [ 113.515958][ T78] veth1_macvtap: left promiscuous mode [ 113.517484][ T78] veth0_macvtap: left promiscuous mode [ 113.518958][ T78] veth1_vlan: left promiscuous mode [ 113.520347][ T78] veth0_vlan: left promiscuous mode [ 113.522198][ T78] veth1_macvtap: left promiscuous mode [ 113.523610][ T78] veth0_macvtap: left promiscuous mode [ 113.525395][ T78] veth1_vlan: left promiscuous mode [ 113.526910][ T78] veth0_vlan: left promiscuous mode [ 113.793612][ T78] team0 (unregistering): Port device team_slave_1 removed [ 113.824868][ T78] team0 (unregistering): Port device team_slave_0 removed [ 114.015372][ T78] team0 (unregistering): Port device team_slave_1 removed [ 114.023225][ T78] team0 (unregistering): Port device team_slave_0 removed [ 114.249807][ T78] team0 (unregistering): Port device team_slave_1 removed [ 114.277847][ T78] team0 (unregistering): Port device team_slave_0 removed [ 114.516679][ T78] team0 (unregistering): Port device team_slave_1 removed [ 114.545872][ T78] team0 (unregistering): Port device team_slave_0 removed [ 114.774504][ T78] team0 (unregistering): Port device team_slave_1 removed [ 114.802089][ T78] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 07:24:28 Registers: info registers vcpu 0 CPU#0 RAX=0000000000217674 RBX=0000000000000000 RCX=ffffffff8b227579 RDX=ffffed100d4c7026 RSI=ffffffff8bd1aa00 RDI=ffffffff81647b8c RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f4b08 R15=0000000000000000 RIP=ffffffff8b22895f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f69ecfe6440 CR3=000000003d788000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=000000007ffbffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4b168ca0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fad3f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fad3f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fad3f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fad3f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fad3f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fad3f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000230 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 0000000000000230 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff850afa70 RDI=ffffffff9aae6b80 RBP=ffffffff9aae6b40 RSP=ffffc90003c2f218 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=ffffffff9aae6b40 R14=ffffffff9aae6b90 R15=0000000000000044 RIP=ffffffff850afa97 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f666801b4e2 CR3=0000000024e74000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=48cb0fa7239d22a3 cc36d1b51fb3daff 48cb0fa7239d22a3 cc36d1b51fb3daff 48cb0fa7239d22a3 cc36d1b51fb3daff 48cb0fa7239d22a3 cc36d1b51fb3daff ZMM18=57f3ab72d333a54e c907901fe3fe8abd 57f3ab72d333a54e c907901fe3fe8abd 57f3ab72d333a54e c907901fe3fe8abd 57f3ab72d333a54e c907901fe3fe8abd ZMM19=6603000000000000 0000000000000005 6603000000000000 0000000000000004 6603000000000000 0000000000000003 6603000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=cc36d1b5cc36d1b5 cc36d1b5cc36d1b5 cc36d1b5cc36d1b5 cc36d1b5cc36d1b5 cc36d1b5cc36d1b5 cc36d1b5cc36d1b5 cc36d1b5cc36d1b5 cc36d1b5cc36d1b5 ZMM22=239d22a3239d22a3 239d22a3239d22a3 239d22a3239d22a3 239d22a3239d22a3 239d22a3239d22a3 239d22a3239d22a3 239d22a3239d22a3 239d22a3239d22a3 ZMM23=48cb0fa748cb0fa7 48cb0fa748cb0fa7 48cb0fa748cb0fa7 48cb0fa748cb0fa7 48cb0fa748cb0fa7 48cb0fa748cb0fa7 48cb0fa748cb0fa7 48cb0fa748cb0fa7 ZMM24=e3fe8abde3fe8abd e3fe8abde3fe8abd e3fe8abde3fe8abd e3fe8abde3fe8abd e3fe8abde3fe8abd e3fe8abde3fe8abd e3fe8abde3fe8abd e3fe8abde3fe8abd ZMM25=c907901fc907901f c907901fc907901f c907901fc907901f c907901fc907901f c907901fc907901f c907901fc907901f c907901fc907901f c907901fc907901f ZMM26=d333a54ed333a54e d333a54ed333a54e d333a54ed333a54e d333a54ed333a54e d333a54ed333a54e d333a54ed333a54e d333a54ed333a54e d333a54ed333a54e ZMM27=57f3ab7257f3ab72 57f3ab7257f3ab72 57f3ab7257f3ab72 57f3ab7257f3ab72 57f3ab7257f3ab72 57f3ab7257f3ab72 57f3ab7257f3ab72 57f3ab7257f3ab72 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6503000065030000 6503000065030000 6503000065030000 6503000065030000 6503000065030000 6503000065030000 6503000065030000 6503000065030000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff90fed926 RDX=ffffc90000fe72c0 RSI=ffffc90000fe7600 RDI=ffffc90000fe72b8 RBP=ffffc90000fe7300 RSP=ffffc90000fe7218 R8 =ffffffff90fed92c R9 =ffffffff90fed92a R10=ffffc90000fe72b8 R11=000000000000eecb R12=0000000000000008 R13=ffffc90000fe72b8 R14=ffffc90000fe72c0 R15=ffffc90000fe7600 RIP=ffffffff813d4bcd RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb1a6f6e440 CR3=00000000411b6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=000000007ffbffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe455c14d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13bd5f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13bd5f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13bd5f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13bd5f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13bd5f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13bd5f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000e254c RBX=0000000000000003 RCX=ffffffff8b227579 RDX=ffffed100d527026 RSI=ffffffff8bd1aa00 RDI=ffffffff81647b8c RBP=ffffed1003b5b488 RSP=ffffc900001a7e08 R8 =0000000000000000 R9 =ffffed100d527025 R10=ffff88806a93812b R11=0000000000000001 R12=0000000000000003 R13=ffff88801dada440 R14=ffffffff905f4b08 R15=0000000000000000 RIP=ffffffff8b22895f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fda35d4c440 CR3=0000000023898000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000