last executing test programs: 45.469515747s ago: executing program 1 (id=80): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc000004) (fail_nth: 2) 38.281374794s ago: executing program 1 (id=80): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc000004) (fail_nth: 2) 26.239763964s ago: executing program 1 (id=80): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc000004) (fail_nth: 2) 19.260333111s ago: executing program 1 (id=80): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc000004) (fail_nth: 2) 11.339127264s ago: executing program 1 (id=80): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc000004) (fail_nth: 2) 3.140538657s ago: executing program 2 (id=861): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rfcomm\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000680)={{r0}, "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"}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=""/155}) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000001c0), &(0x7f0000000200)=0x4) lseek(r0, 0x3, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff00000004"], 0x48) r1 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='fd/4\x00') recvmsg$unix(r2, &(0x7f0000001900)={&(0x7f0000000240), 0x6e, &(0x7f0000001880)=[{&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000380)=""/131, 0x83}, {&(0x7f0000000440)=""/119, 0x77}, {&(0x7f00000004c0)=""/213, 0xd5}, {&(0x7f0000001680)=""/253, 0xfd}, {&(0x7f00000005c0)}, {&(0x7f0000001780)=""/204, 0xcc}], 0x7, &(0x7f0000000600)}, 0x2001) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rfcomm\x00') (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000680)={{r0}, "65589e6d13d971f20af05940b6159a63e07e53dc67684363c086429fa81e1b13c7c448d2016c78382e5c21f51f764d7b2b6200fec28822b6a2c7f15913cce0f302a5ff8df73e6233dcc30b3c27d632b1f9420ac7127fea434a5e718bd32f886ddb4dcac5584da104b83c42040c0ec276c0d214811c34560901c92fda28202b940585c6b25580fb07db6be0e044330766ba4c396067bd4b1a6e89fa98e1f0cb9155bd660d46277cceecb7d9b4d4dea975afa77e1a2d2ae62eccbb65dea6da65637dd6ba8d9df7a36b617c15fbbaac9ed2f2fe26d34732c277c2848ff8fa2bdb383b0cad54b84aa95d7611519d04325a8253dc631a0a0327c48115312e313593b48aee322cc6d20a28c1af1fe7744acfd741741087170bc1214dc66e3f96455ab3d9c0c234d81a0e56f0ae0dd121b12bfae1633c144b50a60dbd9be4b26787a414e7bf05424d24b012d8549ad734df892ffc8e4f4ecca62688a14a0c560e994e038327c87c7cd0b2d3523f67e92ca09c5b9661daa36cf04ffb5026062b328d4a040c142c4fb1ce046f5d074b67d4ecf0bf7ff4f4a2c9b0e7ca3ecb0c51faf08eae0edb3763cfbb7f3cb391d19e15e77663fcddbacf529813385beae16a4448e45aae8bb05b113d8b18a5938cdf7bdcbf82dfc4e00d670caa2d4b43117081a07f7dd538810c3373b8ab4227ec6ebfd97c1e6284d2d4fefefe9d3d0fe10613860047380204a2ccc075bbd4ce4c11b9cd068b73aa3d6c9855bdc5ddeadce951bd5a8881874d43acb7e829492361d43bed6019f9999493b6bba3a0fdf70b68545f4711bd1019baad315c3c1210b9bbd652601e4cf87f4310fa96fe7007f4ca46506def879afc63273e993178fa8bc26ca8fd2e82d70430e4c033735994df100748b36320de34db10e4287d57711b25a17f0975660c13efd7d384a7364f615e33b5e0f3657f81ece12be3c48e4a0833282da188f019a349e3baffc99b241ca5cd9e5451b0c7a3121cf39dcb759defee7807bea52cc30ccd9067468ce2d46eb500a771c507a577368e631385982b2355a3880639c90f98e8ca7f8e26343cbfce5f8a6bd1dbc89219fc7acceb5517c4b6e4bdfbb0efb61d31cdb3ee41773aadf3ec1f3184622e37db643cc01e42f3e69796ef904c87a75b94766e2eabadd91b5c0017269b25a6ed4ddd5f181ab24f940f9bafe19aed212b24bdd4f6de51433eeaf06a06eb0d7e2545151a2358ad90ef69151527ae639821136ee960e7f7e63a2107c65cd6ef440bdc4af3162321676500c1334295c75cf27f2cb7f2e6193c2483ad4594f0346b4f611388e55cfbd127953ebde4dc82b5ce4e9208b4840e9aa016cc763125afb8951f19958d5109030d49456afaebb38b6a0f026ceeedf27bc8227cc20bcaba5912bd9b95d6a4932d3c42a1f167f0b9fc4840e6762d5151a57d1e4532361515007268a449bc41b706dbd5b5d5ee67ae9698e4b10fb327d5378108fec917aa3c9f112e6e58cb94d5041929cfaba11049433c9ee70e690b6153646737156d658508b48e082e1971d39a48db367c358820f87beb4bdcfd56299355a8969cf7199df1c4f8e43290cbad9e54f8b8f6f67a954aebbe9ad3e000438a7a41266f9ea835b0dccdca5712a90a59bb750f68df567083d7c298ee94131a2ccfba60084500a5e116a0b189f304f6d2f7fad50d64e1e9b3ae5f5baa865664ef9c6ee6abac6c777e18f58d2c392c7f9a5c0cbfc9a5b3fcb4e87ae04d09e7e5e8131591f9ce1ac9e7667bf42be9465f0ea16aa2853872d7cd49ea91203c0df4f48b6ff882e4cc703be82a6cca3abb9b59d8a64ce7ba262eb94a5522a3135766d4aba9740a279e2f52a9b5d84fdb29c5c525f910bc6e446d486da195b5e5ad6843b91ad04071a9b6c079ca01fa93023784a808f03e4f36741ef17e0e97554eae9269a765a14e1051b311776618c7526ded4a3965924de6cfba2291abd37407055a914018ea7b58a9cd254ffa5af222f429211031b7bc264f9145523cf902c08226b6bc8c350405fd5ed1b521b0084662af3c6b6a41a33322d006d474a767454835bde764dcf871600ff9c47a7e0334e65458b1830d5a1005989286dfed133013b9bb64d21ca094f80790336ef6702a4e4be9d449d48e9577bc679332e612028283914eaf36766ddd262f5c72777c37de1c8aca2cdc5e67813e8a7b32204e49563b70a51d7d0c6adfc4d863ebb0f41c5a741ef0136ef5da299a61ac21c63dcea58ee7a2bc1c87299d800609366c5979daa5865b0b38312ba5fe0160402f4ce5a8b5a3ee3a26536537e78795c8cad90d5489681f7c5309fda7e997c3871a409d89eef648037c3c8986e1e891ea76674a0c1e8461ecb9fac49be66c0d5d64665375589159269e1c412e031f4e81566ad55bcb01ec39c2be24fd784a1d911f0732dab757d207615b4124e6c8ea07047214e39c2e76de5a578ebc4bcd93985a7f46be60957f2022b68fc1e1665ddef1961e8acf2fcbccb2721118d0ca2821020a8b571e0649dd8ed534778d5c181d26eb09d5797d665c14185f218c858a07f8cde0277a8a7075d849d5e5993417a86b4dcee3b2482f6fc331081ec73eb9b0f497da046d8aafe9e189bfc2901555d70b0d9cdc47f88927f48e5ef6e66a972973794e6e66147fddf004a2668e286e2a7bebe73f805cefd5f44d811e823daa39db2140e1ff32dc29a4f2384f509f6f1263440662afe7060472c0aad2f3837e46d024d08ec63855a25d63b08515b06e07f1669ed81e60819775d5915f20822de5d6a41868c472678d88d20fd70ef0b0365971751f24f1bd6454472afb477874be7c0c786f75dd466059b3005ce29ac7ee8a7d7370e071c736dc4805210734a256e0b11944408bbc01d0b7706fea85ebd92a496c3b9389708b81c1f7057d61d1c0846b333f9361e2435585786e1a5100090b2db435802c0e7ecfe94e6e77201304bb9c61879f161a4c10582910aefbacaf211fe625ee42d3847777007c2924483cea0e901f6d95a7bf9d626c852643dc0ea5aa586af930405b3c5785e0f00a5a8e79c44123af267a6ce15e2c45f7e5295a2df77bb400f0464b1f7e1cd2b1fcc1364f31ea944951a4238c9b5e2ad8fcbaeaa04aff751521448dd38908af8675f19e53d70e547b0d9aa8eada0d78e6b64af8bfe3f9a1d0e3eebb97857af96fd177cb76f6fb63166cf539a1ddce0ce4d962ea26c61896f3d6c9005a1e4ee6c9eff82b55def3cc02399765531e77094055b6f8c0b60ce4462dc57ebff5b4e9b907170be15c2324936690d2e6c2e6dece6868d533984fd06d093f3c9ae342c33baee95b8951ec15caff4c30345faa2fd5d4ff049bda2630b76ae3cdbe2171f9dad71dafb9ad76042b371f6159acee8ed942416e28f4e4099dd4f2bcd8fd83f90bb04bd5dc86d2d3f46aa619a4113c1f1408b2c6dc47a7f46bdf953d9dea7df484b0961df107fce93eb0d927d4df41ade807d4cc44eb0d318cd37998b2eb91459470262d63eeb8668a94ff349176f097d7f4a06c893b168fb16ae28ff56cf88fb590ef2619ffc5f9d4ad0d92aecfd5ca99dee3da107c59ab4b1d7167fa4bb0c18f6220330ff655decf487827630ba3649737f7ea92f4b6122d83d10d3ae47d978c6e3b8c9dd91fd157adbb4d51cfcdc3d96a3d717c567c481650cbe51911bd2e564226e5e1ab08c4adb46999ef9b40245e029d73d8fdc2cc86913629793a80b164782be0b6b51f67bc736cb3842f905b7fc6b148f826e80a8e9cc2a02251b16cf0ab02c5da5c33776b7f174741506b9e4a0bba560391bb52ff03e87503f280b440270d6e623ecf470b862ba596c7fb2cf0305fb83dd72ceb2b1134519fd55c6ad13043bedbd40b7bc7349217fa1e71b888717fcbd8bc58b296caef3b8b1756e1a232831930ca5fc5b52bd7c4ee22b1ef75dfea1c1e94b4c5e91af92c11caa287c75a15330bfa10a3fcef40fe02597589be494cc07d0e6c6a0013d54cb06cba29d989d54bc1a149321fc82cbbe7485c644dd766fa70967bf0b4466952d3cbc93c955035b46878ba92b50b8a6dc3e71da107b92c4dabfa42fb9a77b5c4b73e820913572ef351ccc9c4061ef78947f044c1071a70eb96c29a659481f12ca83918496397d193a41c4b7c711f6ea962092f7fd45980355e292ca180aabcb22a8314a74d346643a8efa686524c331dd5ad2255893f2ca848886e86b2ee53eac607c1d6030de01965b4dc58224b738efd8d6335ac139f6bb3bfdea84fb9f06b147e187c68d3475c52aa8f4d1c3de4944dc8376ae954f96061d8becaa44a6875af6b16369f0cfddc241a7ef276c342ce0c52778a8e9b27591f192b9d767688f2e9949e0af9e476b0ae3674f6feff4867c2a104921e7af55e86d830fa9d01572227e0d812f43dfd80fa36904f9dc1d91721a896621b782b4630c12305af277284b873a9ac0427ec3c4300d81144139f18cf5ba21a400b42c1e708def648d72b326dc587d03043a70ec4b593f1134fcf43fc75fcf1b3a0084ee9206561cc3c0488ba203786c1fb3e62e166edda55ea44ac4d6ba872aaeaa83f416abc2d188875ac57555f86cdb41fe25e67ef2bf91ea1d8195662419db556d8404ebe6af5e5ec96e0aff953e0aed979c8e6364928670032bb801c628823294aed0efd8e5005b2e787cd7c7792f6c35b9e301fca51cff0ff3caa970767ffc43ab45105a904aa14e1a368bd49bbd15a032d2a94f2d1098d83115a4c267c79b04e6c07e80bc1ee3bd37e1882a6c5a2932629e59de62575c64644d9cf4df1df591b15aefc796a96eeeae2c42f5dbd30ac3740416520f5f02674de2efc68f550e86a4ab06bd825195f50858a857ca316560362313bfdbe7493137aca29d5a8973e17a540a548377ca1a20ec5b29142e95470c7a3b31a6d56a9c870d7c23f3fee48e95d236288510baefcead074bccad8defa0b0a2fc24c0f11bd9d9c1667a13ea0b6a5f8cd83adeb4a4a1131a0c6d86f48faf58bca3089648e4f9f102ecead61e438a2f487b7f3e4192bb5cf276997ee67d13a949450da84228795a92205b7be9f0ce30db6d1b8a5bab606fd819b1547192aee90aa28f47839126f079e695c5a3d0dc20bd3e4abc274a10129d7b5fac4d502f9fc550448a682889bb5836bfbbe02f5fee8b042318eea75b25b0f6f5aefbc7d3693a1723cad65fa3d594ebdf9e48acb516bdfdb967de210087c38f64d6c0197a0bfa769d86e8122f1891ca3f69875dcdb932bd9ff1696baf352dc1e12a617384d358f43091094c34aa528ce0a6e2f8532eaa96342dfdb623b1a83c6662c2a8cea3635a69cf0237e578deab5c70c99c603ea01789a77417f83256c47aa484c656b39e9e1d37c2e47c00e225466e1be321b5aed976c8eec496fd696efc9ebc4c59e90cedda1389067965d42d1543f2ea83cf6c1acd850317addf530efbad6a1fe74d338afef5a7dd30d693e1e516b1f5979adfb9f0ee10e1ac1695b7f1835d305f4f955fb4bacf430211d8c5fd8240ec211f68aa60afb8e0a55182d1662be19a0251db20212218d26204a62766f1e2970ce3c3ca51d518e0863fba3098f53e7b7f5e55eb1e52400f36a55a3b56ffdba6e9e88ca68571342ff3b7330e2468abe9fc27979504ec65ddb93c3a0cefe6cc12ce64aaefadaf8fa76877a02e6ffb6a570c7980b9e536854b990388279174e96743c550f5bc0fb40a908dc0a8dcb1d10fcf73ee8c0ec2d8abc49adfa15dee860f2a51181205d741e3d0d739f653ebb5285d6cf74"}) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=""/155}) (async) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) lseek(r0, 0x3, 0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff00000004"], 0x48) (async) socket$inet_sctp(0x2, 0x0, 0x84) (async) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='fd/4\x00') (async) recvmsg$unix(r2, &(0x7f0000001900)={&(0x7f0000000240), 0x6e, &(0x7f0000001880)=[{&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000380)=""/131, 0x83}, {&(0x7f0000000440)=""/119, 0x77}, {&(0x7f00000004c0)=""/213, 0xd5}, {&(0x7f0000001680)=""/253, 0xfd}, {&(0x7f00000005c0)}, {&(0x7f0000001780)=""/204, 0xcc}], 0x7, &(0x7f0000000600)}, 0x2001) (async) 3.059302665s ago: executing program 2 (id=864): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x14, 0x0, &(0x7f0000000080)) sendto$packet(r0, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 2.970579409s ago: executing program 2 (id=865): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x4000084, &(0x7f00000003c0)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74a", 0xc6}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63e", 0x82}, {&(0x7f0000000700)="6a8fa35a5ac69c3f3504610b7a65154b8a319d412cae86d445126356a7ea73e2cc334fba45667941bdeaebee3915c7685d4a2c125a1898bb727147075b79a19e162ca01c17cdb0398d7303a2955433e8f9de6d144dddc2ca170b10d505c3eb024dcacee0c139b5a9044f1f3a0fd4e958406a6ba551007ed89e2312e678f38707c8f37e5c8fe3cb977b7035046ea60fc263c1f72c13c1c7be3f14407e96c832dd5b10a03966185a38402e2cf26722ddeb0ef8f2d4a071d516ed09b0adec288e14e03b42147a29ba7f26c6886c05bea9ef56a3bb171e67a92b838a19c3a646", 0xde}], 0x3}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)="23004e4ee760d4", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="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", 0x1eb}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.932396379s ago: executing program 1 (id=80): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc000004) (fail_nth: 2) 1.600328142s ago: executing program 2 (id=868): mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce03d4}, 0x9c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xf, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "13176b"}}}}}}}, 0x35) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mlockall(0x1) write$khugepaged_scan(r5, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000001, 0x10, r5, 0xc6e6c000) syz_open_procfs(r4, &(0x7f0000000080)='stat\x00') 879.793236ms ago: executing program 3 (id=874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 879.465693ms ago: executing program 3 (id=875): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x100000000000000}) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_role_discovery={{0x3}, {0x4, 0x0, 0xc0}}}}, 0xa) close_range(r3, 0xffffffffffffffff, 0x0) 800.177386ms ago: executing program 3 (id=877): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000002ec0)={0x1, @pix={0xdab, 0x103, 0x34343459, 0x1, 0x7, 0x8, 0xa, 0x8, 0x1, 0x7, 0x1, 0x7}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r2 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x7fff, 0x282) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0085666, &(0x7f0000000100)={0x1, 0x0, {0xaca2a353, 0x7fffffe, 0x1016, 0x2, 0x0, 0x0, 0x1, 0x5}}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000040)={0x0, {0x0, 0x81}}) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000440)=""/167) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(xeta)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r5 = syz_io_uring_setup(0x417d, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x3, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x44, 0x2004, @fd_index=0x7, 0xe, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/117, 0x75}, {&(0x7f0000002fc0)=""/4096, 0x1000}], 0x2, 0x8, 0x1}) syz_io_uring_setup(0x6d3b, &(0x7f0000000340)={0x0, 0xa7f2, 0x10100, 0x800000, 0x3cc}, &(0x7f0000000280), &(0x7f0000000240)) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r10 = accept(r8, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4f6ffffff00ef00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r10}, 0x47) recvmsg$can_bcm(r10, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x27e0, 0x10000000, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004180)=@newtaction={0x1244, 0x30, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [{0x1230, 0x1, [@m_ipt={0x2c, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ipt={0x2c, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x11d4, 0xe, 0x0, 0x0, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x34, 0x6, {0x50f2, 'raw\x00', 0x4, 0x5, "b01ce1d430e6de4e8cdf"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x28e638bfab3714ba}, @TCA_IPT_TARG={0xb2, 0x6, {0x2, 'mangle\x00', 0x40, 0x8, "6b05026675e18e3ed2e74a382a70bb8425b11ca9422edc0aa562723719f31790be26d339d12323b9876ffa96445cb8cdadde7607206ee6248af117f57445817a24bbcf7a805696d14af173f3da4c85e9fcad6599a475fbb37a3da3fbc37696e572d40171ef7920a890151b528ff99aae2036174cff63e66fe2c71a5a0b100cd1dbb9623631d251cd"}}, @TCA_IPT_TARG={0xb0, 0x6, {0x400, 'filter\x00', 0xf, 0x800, "810650bb7d5fb828b668e3473076ea75853f73aeec0954f92c7791a97e6f67aa1d06fd6c204ab71766876c689c6e3bc32c66d428e49a0d845715940d16a3c5464281aaea6214b5ec230d0c93fee8a0748b6321b4eb7ae25fba4c62378851164565b6e264ca4a3fe4806b3e2303b5f033c0095b29892b0d9787ffafbb803cf60d59b118766115"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x2a400}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x1244}, 0x1, 0x0, 0x0, 0x50}, 0x20000880) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/89, 0x59}, {&(0x7f00000003c0)=""/56, 0x38}], 0x2}}], 0x1, 0x60, 0x0) 730.80407ms ago: executing program 0 (id=878): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000580)=ANY=[@ANYBLOB="380100001a000100000000000000000064010102000000000000000000000000ac14140000000000002dd1f79080251f77000008486785000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006c000000fe8000000000000000000000000900bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003"], 0x138}}, 0x0) 729.102034ms ago: executing program 2 (id=879): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="66bad004ecc402399014e5320000000fc738440f20c0350c000000440f22c0400f205f470f01c3670f32c4212d72f00566410f38811d00700000410f017f05", 0x3f}], 0x1, 0x41, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="baf80c66b858cc2e8166efbafc0cb80058efea7100780064650f01c46764260f01ca0f0f93008097d8bf304e65263e653e0f01c565f3da1b66b9800000c00f326635000100000f30643e360f01d1", 0x4e}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 728.929958ms ago: executing program 0 (id=880): modify_ldt$write(0x1, &(0x7f0000000000)={0x1001}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) r2 = dup(r1) ioctl$EVIOCSABS20(r2, 0x401845e0, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x40400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x40, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400006}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}, @CTA_STATUS={0xffffffffffffffeb}]}, 0x40}}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xc) 728.166416ms ago: executing program 3 (id=881): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000002c0), 0x4) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000000)=0x100000001, 0x4) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000600, 0x0, &(0x7f0000000140)={0x400000000000000, 0x0, 0x0, 0x7}) (async) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'tls\x00'}, {0x20, '\xb7'}, {0x20, '@\\@,\xaf*]^'}, {0x20, 'tls\x00'}, {0x20, 'tls\x00'}, {0x20, 'tls\x00'}, {0x20, '/dev/snd/controlC#\x00'}]}, 0x3e) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r4 = dup2(r3, r3) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x680182, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000080)) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000001c00)=@gcm_256={{0x303}, "5660db7ebd1472bf", "e3d997a6bf18c75ba4790c593b889d3a1a50682dcb3d951cdc2523faff4e152c", "050000fa"}, 0x38) (async) sendto$inet6(r1, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0xfdef) (async) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) (async) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) (async) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) (async) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r7, 0xc0844123, &(0x7f0000000080)={0x0, 0x0}) (async) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, &(0x7f0000000000)) (async) sendto$inet6(r1, &(0x7f00000000c0)="c62ee5d6a89f2387faa1e4605ab1f419", 0x10, 0x8040, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0x78) (async) syz_open_dev$dri(&(0x7f0000000140), 0x9b, 0x40000) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) 600.709625ms ago: executing program 2 (id=882): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x0, 0x0, 0xf, 0x0, "0c9e8100000001860b479037073d223b3c1b324debec40e57a050000007eb48821996aff367154e746be4d76062e2700c425a7519cc275d04e6205abd307a0c4fa381300"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x0, 0x0, 0xf, 0x0, "0c9e8100000001860b479037073d223b3c1b324debec40e57a050000007eb48821996aff367154e746be4d76062e2700c425a7519cc275d04e6205abd307a0c4fa381300"}, 0xd8) socket$netlink(0x10, 0x3, 0x8000000004) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000740)={0x2, 0x100, 0x3, 0xffff, 0x2, 0xfffffffe, 0x7, 0x9, 0x2, 0x9, 0x8, 0x4, 0x1, 0x410}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c}}], 0x20, 0x44}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='4\x00', 0xfffffffffffffe12) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 490.634269ms ago: executing program 0 (id=883): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') fchdir(r2) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) (async) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000180)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b0000007f00000002000000ff00000000010000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0200"/18], 0x50) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfbfffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='block_plug\x00', r5}, 0x18) (async) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) (async) setsockopt$rose(r0, 0x104, 0x6, &(0x7f00000000c0)=0x6, 0x4) 430.420687ms ago: executing program 0 (id=884): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x200, 0x7d, 0x4}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x2, 0x4) (async, rerun: 64) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000000c0)={{{0xb}}, 0x0, 0x7fff, &(0x7f0000000080)}) (rerun: 64) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={r1, 0xffff, 0x7b, "1c0e66708d16585890da269307a3e183c086014db294391420deb73624753919fbf62d30b5019ef660a4c13b4b7ab0f58a180e37a4199576311f7322bc3c92b4000c0b052de26f3333cca276bb154c67740cb6ec4690dab1425073656d501406e274f371bb5da37249436d100b0aebb5c75bd75196d459830ce12a"}, 0x83) (async) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) (async) bind$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x2711, @local}, 0x10) r2 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f00000002c0)=""/252) msgctl$MSG_INFO(r2, 0xc, &(0x7f00000003c0)=""/85) (async, rerun: 32) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e20, @remote}, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, r3, 0x408, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000000}, 0x20040000) (async) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40880) (async) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000700)) (async) pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000780)={{0x1, 0x1, 0x18, r4, {0xa9e}}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000002940)={0x7, 0x6c, {0xffffffffffffffff}, {0xee01}, 0x6, 0x5}) (async) r7 = geteuid() (async, rerun: 32) r8 = getegid() (async, rerun: 32) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002b80)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000002c80)=0xe8) read$FUSE(r5, &(0x7f0000002cc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000004ec0)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) (async) r12 = getgid() (async) r13 = geteuid() (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004f00)={0x0, 0x0, 0x0}, &(0x7f0000004f40)=0xc) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000005100)='./file0\x00', &(0x7f0000005140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000052c0)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in=@broadcast}}, &(0x7f00000053c0)=0xe8) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005400)={0x0, 0x0, 0x0}, &(0x7f0000005440)=0xc) syz_fuse_handle_req(r5, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000055c0)={&(0x7f00000027c0)={0x50, 0x8029759ea851f628, 0x8, {0x7, 0x29, 0x7, 0x7fffffffd0000040, 0xf64, 0x8, 0x1ff, 0x0, 0x0, 0x0, 0x4, 0x9}}, &(0x7f0000002840)={0x18, 0x0, 0x7, {0x5}}, &(0x7f0000002880)={0x18, 0x0, 0x4, {0xc}}, &(0x7f00000028c0)={0x18, 0x0, 0x3ef3, {0x200}}, &(0x7f0000002900)={0x18, 0x0, 0x10000, {0x5}}, &(0x7f0000002980)={0x28, 0x0, 0x7, {{0x1, 0x1000, 0x1, r6}}}, &(0x7f00000029c0)={0x60, 0x0, 0x2, {{0x3, 0x7, 0x0, 0x100000001, 0x4, 0xaf1, 0x8, 0x7}}}, &(0x7f0000002a40)={0x18, 0x0, 0x0, {0x8}}, &(0x7f0000002a80)={0x15, 0x0, 0x5, {'IPVS\x00'}}, &(0x7f0000002ac0)={0x20, 0x0, 0x7, {0x0, 0x18}}, &(0x7f0000002b00)={0x78, 0x0, 0x5, {0xfb, 0x80000001, 0x0, {0x0, 0x8000, 0x82e2, 0x1, 0x2, 0x1, 0x1, 0x7, 0x3, 0xc000, 0xccf7, r7, r8, 0x9a5, 0x4}}}, &(0x7f0000004d00)={0x90, 0xfffffffffffffffe, 0x5, {0x864, 0x1, 0x7, 0x2, 0x3, 0x2, {0x3, 0x8000, 0xfff, 0xffffffffffffa203, 0x1, 0x8000000, 0x5, 0x1c311a73, 0xde9, 0x6000, 0x0, r9, r10, 0x2, 0xac}}}, &(0x7f0000004dc0)={0xd0, 0x0, 0x101, [{0x0, 0xfffffffffffffcf4, 0x4, 0x4c1, 'sip\x00'}, {0x5, 0x9, 0xd, 0x3, 'bond_slave_0\x00'}, {0x5, 0xd, 0x0, 0x7f}, {0x2, 0xfffffffffffffffd, 0x2, 0x81, '\\}'}, {0x0, 0x40, 0x5, 0x7, 'IPVS\x00'}, {0x4, 0x322e, 0x4, 0x7, 'sip\x00'}]}, &(0x7f0000004f80)={0x150, 0x0, 0xfffffffffffff100, [{{0x2, 0x3, 0x5, 0x6dad, 0x1, 0x5, {0x1, 0xfffffffffffffff7, 0x14, 0xf8d1, 0xb191, 0x446, 0x8, 0x80, 0x7fffffff, 0x8000, 0x5, r11, r12, 0x2d, 0x7}}, {0x1, 0x25d, 0x4, 0x9, 'sip\x00'}}, {{0x4, 0x0, 0x1, 0x6, 0x0, 0x1, {0x1, 0x2, 0x0, 0x3, 0x22, 0x7, 0x2, 0x9, 0x9, 0x4000, 0x3, r13, r14, 0x1, 0x9}}, {0x4, 0xffffffffb2a76a2f, 0x2, 0xb, '/%'}}]}, &(0x7f00000051c0)={0xa0, 0x0, 0x0, {{0x3, 0x0, 0x9, 0x4, 0x7f, 0x6, {0x0, 0x0, 0x7, 0x155, 0x6, 0x8, 0x1, 0x4, 0x1, 0xa000, 0x5d1, 0xee00, r15, 0x1000, 0x300000}}, {0x0, 0x6}}}, &(0x7f0000005280)={0x20, 0x0, 0x1, {0x8, 0x4, 0x390b, 0x2}}, &(0x7f0000005480)={0x130, 0xffffffffffffffda, 0x5, {0x0, 0x3, 0x0, '\x00', {0x104, 0x6, 0x2, 0x9, r16, r17, 0x6000, '\x00', 0x2, 0x89b, 0x1, 0x0, {0x9, 0x9}, {0x9, 0x1}, {0x441350f2, 0x8}, {0x6, 0xd4b}, 0x12, 0x7, 0x6, 0x4}}}}) 430.0215ms ago: executing program 0 (id=885): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3c}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0x1}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x4000000) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xa}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x20004000) r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r8, 0xc0945662, &(0x7f0000000100)={0x70, 0x0, '\x00', {0x0, @reserved}}) getsockopt$nfc_llcp(r3, 0x118, 0x0, 0x0, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_STD(r9, 0x40085618, &(0x7f0000000040)=0xc00000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x47, 0x6103, 0x61, @mcast2, @local, 0x80, 0x8000, 0x3, 0x6}}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r10, &(0x7f0000000000), 0x400000000000235, 0x0) pidfd_getfd(0xffffffffffffffff, r9, 0x0) r11 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) 118.960504ms ago: executing program 3 (id=886): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1410, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x40}}, 0x2000) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x700, 0x10, 0x0, 0x1000, {{0x2c, 0x4, 0x1, 0x5, 0xb0, 0x65, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x28}, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x28, 0x7b, 0x0, 0xc, [0x9, 0x81, 0xb16, 0x9, 0x3, 0x9, 0x2, 0x2, 0x1]}, @noop, @ssrr={0x89, 0x2b, 0x55, [@remote, @local, @multicast1, @empty, @remote, @local, @multicast2, @private=0xa010100, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0x41, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x18}, 0x3}, {@empty, 0x2}, {@empty, 0x401}, {@remote, 0x9}]}, @ssrr={0x89, 0xf, 0xa7, [@remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}]}, @rr={0x7, 0xf, 0xd3, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb0, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000780)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f00000007c0)={0x3c0, r2, 0x8, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r3}, {0x200, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x0, 0x6, 0x94a}, {0x1000, 0xbc, 0xf6, 0x87}, {0x3ff, 0x5, 0x5, 0x4}, {0xfff7, 0x1, 0x10, 0x400}, {0x4, 0x4, 0x4, 0x4}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xfff, 0x81, 0xe, 0x2}, {0x4, 0xca, 0x3, 0x9}, {0x9, 0xe, 0x7, 0x81}, {0x2, 0x3, 0x0, 0x3}, {0xd, 0x8, 0xfd, 0x8}, {0x7, 0x80, 0x7f, 0x4}, {0x7, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x7, 0x7}, {0x1, 0x8, 0x0, 0x8}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffeff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x200000c7}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r1) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r9, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa01}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000d40)="eebe5d226c0ccb33dbd247c98ec038bc4fe853db9c3664a8393d40821d6ffafadf92a08c5b31e9d7d841f039959284eda12d8e7a126cea52a2cb18c513369610b74eae428f7da6ff456072363f5e96a1a465528df57af6e90e78b19b45a8cb1d4efe0fb36220effa56badc1a820e70effdde5c2b15334fccca94f1c576eaac28a37d85df024084041f263067e055396b404a42a8af5b3fa9358318005d1420b4bd") setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000e00)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r5}, 0x14) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f40)={0xffffffffffffffff, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, r10, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x2, 0xc}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f80)={'wlan0\x00'}) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0xc022011}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x44, r12, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001280)={0x8, &(0x7f0000001240)=[{0x400, 0x8, 0x3, 0x8}, {0x339c, 0x81, 0x6, 0x9}, {0x1, 0x0, 0x5, 0x2}, {0x8, 0x1, 0xaa, 0x1ff}, {0x6, 0x8d, 0x80, 0x9}, {0x3d35, 0xd, 0xd, 0x6}, {0xc, 0xc, 0x9, 0xf}, {0xf86c, 0x3, 0x40, 0x741}]}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4080118}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x34, r12, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001400)={0xd0, r10, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x8b, 0xbe, "c268b297e3b2184449d0ae49a1fabc4253f4a368f43ac32739fcf3d47aaf00c6821808c7d3ac95d61f23ead1d164763d25ef67437ee3b34d832b36c55f24bd82068628c79e10a5defec7b010aef134a8ba0fc3006a34ee9c5317669a5c1b44652f44e151208ac4ab6118417a920a699df55350b663efee45cda4667797cfeaf3d43ff503eb5367"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x42d}]}, 0xd0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4048010) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000001740)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001700)={&(0x7f00000015c0)={0x134, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x50}, 0x0) ptrace$ARCH_SET_GS(0x1e, 0xffffffffffffffff, &(0x7f0000001780), 0x1001) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001800), r1) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000019c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001840)={0x10c, r13, 0x112, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x810}, 0x8000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008080) 446.313µs ago: executing program 0 (id=887): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7fdfffffffffffff, 0x8080) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000001000), 0xe09) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000400)={0x9, 0x0, 0x4, {0x1, @pix_mp={0x8, 0x5828a49, 0x32314d48, 0x6, 0x6, [{0xa, 0x4}, {0x7, 0x5}, {0x80, 0x6}, {0x5, 0x9}, {0xc, 0x3ed}, {0x160, 0x3}, {0x1, 0xff}, {0x3, 0x3}], 0x38, 0x2, 0x7, 0x1, 0x4}}, 0x675}) write$char_usb(r1, &(0x7f0000002e80)="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", 0x3f7) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) pread64(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x8) 0s ago: executing program 3 (id=888): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) chmod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2004c8, 0x0, 0x1fe], 0xdddd1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000000c0)='./file0\x00', 0x100, 0x0) chdir(&(0x7f0000000140)='./bus\x00') syz_80211_join_ibss(&(0x7f0000000600)='wlan1\x00', &(0x7f0000000640)=@default_ibss_ssid, 0x6, 0x2) ioprio_get$pid(0x2, 0x0) linkat(r3, &(0x7f00000001c0)='./bus\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1ab083, 0x0) unlink(&(0x7f0000000180)='./file1\x00') r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x10000, 0x0) renameat2(r6, &(0x7f00000004c0)='./bus\x00', r4, &(0x7f0000000500)='./file0\x00', 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r7, r7, 0x0, 0x3) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000000)={0xc078, r5}, 0x0) kernel console output (not intermixed with test programs): 0.726586][ T7296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.729154][ T7296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.738467][ T7296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.750407][ T7296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.753464][ T7296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.761259][ T7296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.821553][ T7324] dvmrp8: entered allmulticast mode [ 80.826027][ T39] audit: type=1400 audit(1733782688.479:42377): avc: denied { create } for pid=7323 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 80.836946][ T39] audit: type=1400 audit(1733782688.499:42378): avc: denied { getopt } for pid=7323 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 80.846210][ T39] audit: type=1400 audit(1733782688.499:42379): avc: denied { shutdown } for pid=7323 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 80.855702][ T7296] hsr_slave_0: entered promiscuous mode [ 80.865391][ T7296] hsr_slave_1: entered promiscuous mode [ 80.874626][ T7323] dvmrp8: left allmulticast mode [ 81.027893][ T7335] netlink: 'syz.2.362': attribute type 3 has an invalid length. [ 81.030134][ T7335] netlink: 44 bytes leftover after parsing attributes in process `syz.2.362'. [ 81.072527][ T7335] trusted_key: syz.2.362 sent an empty control message without MSG_MORE. [ 81.105757][ T103] IPVS: stop unused estimator thread 0... [ 81.139571][ T7319] chnl_net:caif_netlink_parms(): no params data found [ 81.194720][ T39] audit: type=1400 audit(1733782688.849:42380): avc: denied { write } for pid=7346 comm="syz.2.364" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 81.240078][ T39] audit: type=1400 audit(1733782688.899:42381): avc: denied { ioctl } for pid=7357 comm="syz.2.366" path="socket:[17380]" dev="sockfs" ino=17380 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 81.246961][ T39] audit: type=1400 audit(1733782688.899:42382): avc: denied { write } for pid=7357 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 81.299497][ T103] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.324803][ T7360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.365'. [ 81.332644][ T9] cfg80211: failed to load regulatory.db [ 81.338659][ T7360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.365'. [ 81.374844][ T7363] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 81.403017][ T39] audit: type=1400 audit(1733782689.059:42383): avc: denied { setopt } for pid=7361 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 81.471354][ T39] audit: type=1400 audit(1733782689.129:42384): avc: denied { connect } for pid=7371 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 81.483351][ T103] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.509165][ T7319] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.512379][ T7319] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.515609][ T7319] bridge_slave_0: entered allmulticast mode [ 81.519284][ T7319] bridge_slave_0: entered promiscuous mode [ 81.524392][ T7319] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.526655][ T7319] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.529671][ T7319] bridge_slave_1: entered allmulticast mode [ 81.532884][ T7319] bridge_slave_1: entered promiscuous mode [ 81.593539][ T39] audit: type=1400 audit(1733782689.249:42385): avc: denied { append } for pid=7375 comm="syz.0.369" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.641416][ T103] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.681781][ T7319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.685412][ T7319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.693629][ T7376] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 81.723647][ T103] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.737576][ T7319] team0: Port device team_slave_0 added [ 81.752702][ T7319] team0: Port device team_slave_1 added [ 81.837436][ T7319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.839980][ T7319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.847016][ T7319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.850955][ T7394] netlink: 'syz.2.371': attribute type 5 has an invalid length. [ 81.853739][ T7394] netlink: 'syz.2.371': attribute type 33 has an invalid length. [ 81.874592][ T7319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.876469][ T7319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.883357][ T5944] Bluetooth: hci2: command tx timeout [ 81.883767][ T7319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.900227][ T7296] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.904088][ T7296] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.907664][ T7296] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.953959][ T7296] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.983481][ T7319] hsr_slave_0: entered promiscuous mode [ 81.986240][ T7319] hsr_slave_1: entered promiscuous mode [ 82.007572][ T7319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.010351][ T7319] Cannot create hsr debugfs directory [ 82.066956][ T103] bridge_slave_1: left allmulticast mode [ 82.069247][ T103] bridge_slave_1: left promiscuous mode [ 82.070863][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.082559][ T103] bridge_slave_0: left allmulticast mode [ 82.084874][ T103] bridge_slave_0: left promiscuous mode [ 82.087102][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.162777][ T7417] capability: warning: `syz.2.374' uses 32-bit capabilities (legacy support in use) [ 82.200546][ T5944] Bluetooth: hci0: command tx timeout [ 82.322995][ T7424] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 82.539019][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 82.539038][ T39] audit: type=1400 audit(1733782690.199:42394): avc: denied { read write } for pid=7432 comm="syz.2.381" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 82.549235][ T103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.549467][ T39] audit: type=1400 audit(1733782690.199:42395): avc: denied { open } for pid=7432 comm="syz.2.381" path="/157/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 82.564762][ T103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.569464][ T103] bond0 (unregistering): Released all slaves [ 82.719838][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.722546][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.724650][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.728593][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.731738][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.739681][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.743595][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.746350][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.757401][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.763391][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.767345][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.770191][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.777300][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.780032][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.787339][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.790080][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.792775][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.795903][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.807292][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.810237][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.813017][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.815841][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.818685][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.830478][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.833055][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.835612][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.839543][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.843105][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.845696][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.848783][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.853441][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.864129][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.865411][ T7296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.866786][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.877135][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.880288][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.883104][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.886006][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.889793][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.892403][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.895004][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.897810][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.900029][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.902312][ T831] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.908409][ T831] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 82.925390][ T7296] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.942721][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.944686][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.949124][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.951047][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.006779][ T103] hsr_slave_0: left promiscuous mode [ 83.009811][ T103] hsr_slave_1: left promiscuous mode [ 83.012637][ T103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.014625][ T103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.017460][ T103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.019482][ T103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.036365][ T103] veth1_macvtap: left promiscuous mode [ 83.038103][ T103] veth0_macvtap: left promiscuous mode [ 83.039602][ T103] veth1_vlan: left promiscuous mode [ 83.041029][ T103] veth0_vlan: left promiscuous mode [ 83.530400][ T7468] loop8: detected capacity change from 0 to 7 [ 83.564027][ T7468] Dev loop8: unable to read RDB block 7 [ 83.565572][ T7468] loop8: unable to read partition table [ 83.568781][ T7468] loop8: partition table beyond EOD, truncated [ 83.570428][ T7468] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 83.570428][ T7468] ) failed (rc=-5) [ 83.759999][ T7483] netlink: 404 bytes leftover after parsing attributes in process `syz.2.388'. [ 83.895778][ T103] team0 (unregistering): Port device team_slave_1 removed [ 83.957340][ T5944] Bluetooth: hci2: command tx timeout [ 83.973581][ T103] team0 (unregistering): Port device team_slave_0 removed [ 84.277338][ T5944] Bluetooth: hci0: command tx timeout [ 84.594375][ T7296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.623404][ T7296] veth0_vlan: entered promiscuous mode [ 84.631293][ T7296] veth1_vlan: entered promiscuous mode [ 84.696894][ T7296] veth0_macvtap: entered promiscuous mode [ 84.703204][ T7296] veth1_macvtap: entered promiscuous mode [ 84.713816][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.717850][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.729287][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.735885][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.741134][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.745918][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.756492][ T7296] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.759833][ T7296] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.763034][ T7296] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.766320][ T7296] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.800874][ T7498] ebtables: ebtables: counters copy to user failed while replacing table [ 84.804663][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 84.808106][ T7498] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 84.865811][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.873054][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.901260][ T7319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.918444][ T7319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.922543][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.924699][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.929474][ T7319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.934323][ T7319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.994799][ T7319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.005968][ T7319] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.013376][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.015630][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.034367][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.036357][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.089414][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.395'. [ 85.117129][ T7518] netlink: 'syz.3.395': attribute type 4 has an invalid length. [ 85.120736][ T7518] netlink: 'syz.3.395': attribute type 11 has an invalid length. [ 85.123500][ T7518] netlink: 224 bytes leftover after parsing attributes in process `syz.3.395'. [ 85.152659][ T7319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.203948][ T7319] veth0_vlan: entered promiscuous mode [ 85.212208][ T7319] veth1_vlan: entered promiscuous mode [ 85.226549][ T7319] veth0_macvtap: entered promiscuous mode [ 85.235825][ T7319] veth1_macvtap: entered promiscuous mode [ 85.269338][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.272586][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.287394][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.290381][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.293590][ T7319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.307379][ T7537] binder: BINDER_SET_CONTEXT_MGR already set [ 85.312137][ T7537] binder: 7535:7537 ioctl 4018620d 20000080 returned -16 [ 85.314358][ T7537] binder: BINDER_SET_CONTEXT_MGR already set [ 85.316052][ T7537] binder: 7535:7537 ioctl 4018620d 20000080 returned -16 [ 85.318978][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.320508][ T39] audit: type=1400 audit(1733782692.979:42396): avc: denied { write } for pid=7533 comm="syz.0.399" name="tcp6" dev="proc" ino=4026533092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 85.321256][ T7537] binder: BINDER_SET_CONTEXT_MGR already set [ 85.321283][ T7537] binder: 7535:7537 ioctl 4018620d 20000080 returned -16 [ 85.321322][ T7537] binder: BINDER_SET_CONTEXT_MGR already set [ 85.321327][ T7537] binder: 7535:7537 ioctl 4018620d 20000080 returned -16 [ 85.321371][ T7537] binder: BINDER_SET_CONTEXT_MGR already set [ 85.321375][ T7537] binder: 7535:7537 ioctl 4018620d 20000080 returned -16 [ 85.321425][ T7537] binder: BINDER_SET_CONTEXT_MGR already set [ 85.321430][ T7537] binder: 7535:7537 ioctl 4018620d 20000080 returned -16 [ 85.321465][ T7537] binder: BINDER_SET_CONTEXT_MGR already set [ 85.321470][ T7537] binder: 7535:7537 ioctl 4018620d 20000080 returned -16 [ 85.321505][ T7537] binder: BINDER_SET_CONTEXT_MGR already set [ 85.321510][ T7537] binder: 7535:7537 ioctl 4018620d 20000080 returned -16 [ 85.321545][ T7537] binder: BINDER_SET_CONTEXT_MGR already set [ 85.321549][ T7537] binder: 7535:7537 ioctl 4018620d 20000080 returned -16 [ 85.321602][ T7537] binder: BINDER_SET_CONTEXT_MGR already set [ 85.321607][ T7537] binder: 7535:7537 ioctl 4018620d 20000080 returned -16 [ 85.321642][ T7537] binder: BINDER_SET_CONTEXT_MGR already set [ 85.321646][ T7537] binder: 7535:7537 ioctl 4018620d 20000080 returned -16 [ 85.321682][ T7537] binder: BINDER_SET_CONTEXT_MGR already set [ 85.321686][ T7537] binder: 7535:7537 ioctl 4018620d 20000080 returned -16 [ 85.321722][ T7537] binder: BINDER_SET_CONTEXT_MGR already set [ 85.321726][ T7537] binder: 7535:7537 ioctl 4018620d 20000080 returned -16 [ 85.321776][ T7537] binder: BINDER_SET_CONTEXT_MGR already set [ 85.321781][ T7537] binder: 7535:7537 ioctl 4018620d 20000080 returned -16 [ 85.321816][ T7537] binder: BINDER_SET_CONTEXT_MGR already set [ 85.321821][ T7537] binder: 7535:7537 ioctl 4018620d 20000080 returned -16 [ 85.321928][ T7537] binder: BINDER_SET_CONTEXT_MGR already set [ 85.321937][ T7537] binder: 7535:7537 ioctl 4018620d 20000080 returned -16 [ 85.321977][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.321997][ T7537] binder: BINDER_SET_CONTEXT_MGR already set [ 85.322016][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.322026][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.322615][ T7319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.326916][ T7319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.326940][ T7319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.326956][ T7319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.326972][ T7319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.413551][ T7537] binder: 7535:7537 ioctl 4018620d 20000080 returned -16 [ 85.416971][ T7539] binder: BINDER_SET_CONTEXT_MGR already set [ 85.419614][ T7539] binder: 7535:7539 ioctl 4018620d 200001c0 returned -16 [ 85.517025][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.517455][ T39] audit: type=1400 audit(1733782693.179:42397): avc: denied { setopt } for pid=7545 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 85.521221][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.554053][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.556487][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.590661][ T7554] openvswitch: netlink: IP tunnel attribute has 7 unknown bytes. [ 85.750155][ T7562] 9pnet_virtio: no channels available for device syz [ 85.969654][ T39] audit: type=1400 audit(1733782693.609:42398): avc: denied { mounton } for pid=7582 comm="syz.3.409" path="/13/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=sock_file permissive=1 [ 86.120869][ T7596] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.413'. [ 86.123946][ T7596] openvswitch: netlink: Actions may not be safe on all matching packets [ 86.357576][ T5944] Bluetooth: hci0: command tx timeout [ 86.418650][ T30] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 86.461831][ T7622] openvswitch: netlink: IP tunnel attribute has 7 unknown bytes. [ 86.588973][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 86.593674][ T30] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.597543][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.600866][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.605939][ T30] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.611837][ T30] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.615118][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.636845][ T7634] syz.3.424 (7634): /proc/7633/oom_adj is deprecated, please use /proc/7633/oom_score_adj instead. [ 86.637449][ T7635] Bluetooth: MGMT ver 1.23 [ 86.741941][ T7640] binder: 7638:7640 ioctl c0306201 20000080 returned -14 [ 86.829343][ T30] usb 5-1: GET_CAPABILITIES returned 0 [ 86.831699][ T30] usbtmc 5-1:16.0: can't read capabilities [ 87.031857][ T9] usb 5-1: USB disconnect, device number 8 [ 87.557682][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.426'. [ 87.561877][ T7646] /dev/sg0: Can't lookup blockdev [ 87.593496][ T7648] SELinux: Context 7P1+ye'>X0 is not valid (left unmapped). [ 87.598101][ T39] audit: type=1400 audit(1733782695.249:42399): avc: denied { create } for pid=7647 comm="syz.3.427" name="syz0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=9A8CBD3750E4E931019B2BB1EEE379A465A3FDE91CC7CB273E1CC5589430 [ 87.607542][ T39] audit: type=1400 audit(1733782695.259:42400): avc: denied { associate } for pid=7647 comm="syz.3.427" name="syz0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon=9A8CBD3750E4E931019B2BB1EEE379A465A3FDE91CC7CB273E1CC5589430 [ 87.615618][ T39] audit: type=1400 audit(1733782695.259:42401): avc: denied { create } for pid=7647 comm="syz.3.427" name="cgroup.freeze" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=9A8CBD3750E4E931019B2BB1EEE379A465A3FDE91CC7CB273E1CC5589430 [ 87.625987][ T39] audit: type=1400 audit(1733782695.259:42402): avc: denied { associate } for pid=7647 comm="syz.3.427" name="cgroup.controllers" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=9A8CBD3750E4E931019B2BB1EEE379A465A3FDE91CC7CB273E1CC5589430 [ 87.636462][ T39] audit: type=1400 audit(1733782695.259:42403): avc: denied { read append open } for pid=7647 comm="syz.3.427" path="/30/cgroup.controllers" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=9A8CBD3750E4E931019B2BB1EEE379A465A3FDE91CC7CB273E1CC5589430 [ 87.647958][ T39] audit: type=1400 audit(1733782695.259:42404): avc: denied { map } for pid=7647 comm="syz.3.427" path="/30/cgroup.controllers" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=9A8CBD3750E4E931019B2BB1EEE379A465A3FDE91CC7CB273E1CC5589430 [ 87.657760][ T39] audit: type=1400 audit(1733782695.279:42405): avc: denied { ioctl } for pid=7647 comm="syz.3.427" path="/30/cgroup.controllers" dev="tmpfs" ino=171 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=9A8CBD3750E4E931019B2BB1EEE379A465A3FDE91CC7CB273E1CC5589430 [ 87.668822][ T39] audit: type=1400 audit(1733782695.299:42406): avc: denied { unlink } for pid=7296 comm="syz-executor" name="cgroup.controllers" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=9A8CBD3750E4E931019B2BB1EEE379A465A3FDE91CC7CB273E1CC5589430 [ 87.692521][ T39] audit: type=1400 audit(1733782695.349:42407): avc: denied { listen } for pid=7651 comm="syz.3.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 87.698778][ T39] audit: type=1400 audit(1733782695.349:42408): avc: denied { write } for pid=7651 comm="syz.3.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 87.731944][ T7658] openvswitch: netlink: IP tunnel attribute has 7 unknown bytes. [ 87.795479][ T7668] Falling back ldisc for ttyS3. [ 87.851007][ T75] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.507950][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.437'. [ 88.559175][ T7684] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 88.561490][ T7684] PKCS7: Only support pkcs7_signedData type [ 88.641404][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.650698][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.654122][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.659985][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.663142][ T5954] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.666737][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.781746][ T7693] chnl_net:caif_netlink_parms(): no params data found [ 88.907054][ T7693] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.910373][ T7693] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.913036][ T7693] bridge_slave_0: entered allmulticast mode [ 88.916846][ T7693] bridge_slave_0: entered promiscuous mode [ 88.921155][ T7693] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.923594][ T7693] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.926197][ T7693] bridge_slave_1: entered allmulticast mode [ 88.930284][ T7693] bridge_slave_1: entered promiscuous mode [ 88.933221][ T7706] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 88.979512][ T7693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.985129][ T7693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.032139][ T7693] team0: Port device team_slave_0 added [ 89.039599][ T7693] team0: Port device team_slave_1 added [ 89.070208][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.072891][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.081411][ T7693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.087660][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.089881][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.098344][ T7693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.149398][ T7693] hsr_slave_0: entered promiscuous mode [ 89.152942][ T7693] hsr_slave_1: entered promiscuous mode [ 89.155758][ T7693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.158596][ T7693] Cannot create hsr debugfs directory [ 89.217995][ T7716] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 89.587671][ T7748] netlink: 44 bytes leftover after parsing attributes in process `syz.2.452'. [ 89.588563][ T75] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.590070][ T7748] netlink: 43 bytes leftover after parsing attributes in process `syz.2.452'. [ 89.607460][ T7748] netlink: 'syz.2.452': attribute type 6 has an invalid length. [ 89.609584][ T7748] netlink: 'syz.2.452': attribute type 5 has an invalid length. [ 89.611949][ T7748] netlink: 43 bytes leftover after parsing attributes in process `syz.2.452'. [ 89.660538][ T7745] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 89.668258][ T75] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.679013][ T7738] Process accounting resumed [ 89.713435][ T7738] overlayfs: failed to resolve './file0/bus': -2 [ 89.770136][ T75] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.893118][ T7775] evm: overlay not supported [ 89.923976][ T75] bridge_slave_1: left allmulticast mode [ 89.926046][ T75] bridge_slave_1: left promiscuous mode [ 89.927752][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.932208][ T75] bridge_slave_0: left allmulticast mode [ 89.933854][ T75] bridge_slave_0: left promiscuous mode [ 89.935800][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.296112][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.301965][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.306287][ T75] bond0 (unregistering): Released all slaves [ 90.627844][ T75] hsr_slave_0: left promiscuous mode [ 90.631156][ T75] hsr_slave_1: left promiscuous mode [ 90.633962][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.636667][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.640061][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.642665][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.686235][ T75] veth1_macvtap: left promiscuous mode [ 90.688454][ T75] veth0_macvtap: left promiscuous mode [ 90.690618][ T75] veth1_vlan: left promiscuous mode [ 90.693057][ T75] veth0_vlan: left promiscuous mode [ 90.705245][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 90.773496][ T5944] Bluetooth: hci2: command tx timeout [ 90.773805][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 90.781402][ T7798] netlink: 44 bytes leftover after parsing attributes in process `syz.2.463'. [ 91.619159][ T75] team0 (unregistering): Port device team_slave_1 removed [ 91.729203][ T75] team0 (unregistering): Port device team_slave_0 removed [ 92.470715][ T7693] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.493902][ T7693] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.500205][ T7693] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.505542][ T7693] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.514234][ T7813] ERROR: device name not specified. [ 92.577059][ T7693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.603041][ T7693] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.604529][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'. [ 92.605905][ T7823] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 92.612543][ T7823] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 92.619928][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.622621][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.639392][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.642077][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.670047][ T7825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.474'. [ 92.673586][ T7825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.474'. [ 92.686801][ T7825] veth0: entered promiscuous mode [ 92.690272][ T7825] veth0: left promiscuous mode [ 92.766690][ T7693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.786961][ T7693] veth0_vlan: entered promiscuous mode [ 92.793223][ T7693] veth1_vlan: entered promiscuous mode [ 92.806493][ T7693] veth0_macvtap: entered promiscuous mode [ 92.812773][ T7693] veth1_macvtap: entered promiscuous mode [ 92.815630][ T7840] netlink: 96 bytes leftover after parsing attributes in process `syz.2.477'. [ 92.820065][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 92.820081][ T39] audit: type=1400 audit(1733782700.479:42431): avc: denied { remount } for pid=7839 comm="syz.2.477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 92.825728][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.833988][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.837021][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.840711][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.843864][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.844029][ T5944] Bluetooth: hci2: command tx timeout [ 92.847228][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.850988][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.854180][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.857752][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.861957][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.867797][ T7693] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.870330][ T7693] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.872639][ T7693] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.875584][ T7693] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.900489][ T7843] tmpfs: Invalid uid '0x00000000ffffffff' [ 92.910998][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.914042][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.919996][ T39] audit: type=1400 audit(1733782700.579:42432): avc: denied { accept } for pid=7844 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.943346][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.946756][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.982337][ T7852] bpf: Bad value for 'gid' [ 93.088150][ T7861] xt_hashlimit: size too large, truncated to 1048576 [ 93.104872][ T7860] macvlan0: entered allmulticast mode [ 93.106823][ T7860] veth1_vlan: entered allmulticast mode [ 93.118714][ T7870] pim6reg: entered allmulticast mode [ 93.123172][ T7860] veth1_vlan: left allmulticast mode [ 93.142226][ T7860] macvlan0 (unregistering): left allmulticast mode [ 94.225108][ T39] audit: type=1326 audit(1733782701.879:42433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.3.491" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ed7ff19 code=0x7ffc0000 [ 94.232829][ T39] audit: type=1326 audit(1733782701.879:42434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.3.491" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ed7ff19 code=0x7ffc0000 [ 94.525706][ T7924] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 94.617993][ T7930] dccp_invalid_packet: invalid packet type [ 94.644657][ T7935] __nla_validate_parse: 9 callbacks suppressed [ 94.644669][ T7935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 94.652251][ T39] audit: type=1326 audit(1733782702.309:42435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.3.499" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ed7ff19 code=0x7ffc0000 [ 94.663345][ T39] audit: type=1326 audit(1733782702.309:42436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.3.499" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff59ed7ff19 code=0x7ffc0000 [ 94.671092][ T39] audit: type=1326 audit(1733782702.309:42437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.3.499" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ed7ff19 code=0x7ffc0000 [ 94.680219][ T39] audit: type=1326 audit(1733782702.309:42438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.3.499" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff59ed7ff19 code=0x7ffc0000 [ 94.687077][ T39] audit: type=1326 audit(1733782702.309:42439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.3.499" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ed7ff19 code=0x7ffc0000 [ 94.696605][ T39] audit: type=1326 audit(1733782702.309:42440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.3.499" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ed7ff19 code=0x7ffc0000 [ 95.077055][ T7987] netlink: zone id is out of range [ 95.289864][ T7996] syzkaller0: entered allmulticast mode [ 95.345659][ T1140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.145810][ T8003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.519'. [ 96.182784][ T8008] FAULT_INJECTION: forcing a failure. [ 96.182784][ T8008] name failslab, interval 1, probability 0, space 0, times 1 [ 96.187450][ T8008] CPU: 1 UID: 0 PID: 8008 Comm: syz.2.520 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 96.189037][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 96.191017][ T8008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.193379][ T8007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.521'. [ 96.196115][ T8008] Call Trace: [ 96.199627][ T8008] [ 96.200516][ T8008] dump_stack_lvl+0x16c/0x1f0 [ 96.202248][ T8008] should_fail_ex+0x497/0x5b0 [ 96.203679][ T8008] should_failslab+0xc2/0x120 [ 96.205073][ T8008] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 96.206732][ T8008] ? skb_clone+0x190/0x3f0 [ 96.208369][ T8008] skb_clone+0x190/0x3f0 [ 96.209955][ T8008] netlink_deliver_tap+0xabd/0xd30 [ 96.211941][ T8008] netlink_unicast+0x5e1/0x7f0 [ 96.213709][ T8008] ? __pfx_netlink_unicast+0x10/0x10 [ 96.215707][ T8008] netlink_sendmsg+0x8b8/0xd70 [ 96.217425][ T8008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.219314][ T8008] ____sys_sendmsg+0xaaf/0xc90 [ 96.221089][ T8008] ? copy_msghdr_from_user+0x10b/0x160 [ 96.224170][ T8008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.226346][ T8008] ___sys_sendmsg+0x135/0x1e0 [ 96.228239][ T8008] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.230361][ T8008] ? __pfx_lock_release+0x10/0x10 [ 96.232324][ T8008] ? trace_lock_acquire+0x14e/0x1f0 [ 96.234306][ T8008] ? __fget_files+0x206/0x3a0 [ 96.236035][ T8008] __sys_sendmsg+0x16e/0x220 [ 96.237482][ T8008] ? __pfx___sys_sendmsg+0x10/0x10 [ 96.238833][ T8008] do_syscall_64+0xcd/0x250 [ 96.240014][ T8008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.241560][ T8008] RIP: 0033:0x7f2012b7ff19 [ 96.242716][ T8008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.247650][ T8008] RSP: 002b:00007f20138d1058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.249808][ T8008] RAX: ffffffffffffffda RBX: 00007f2012d45fa0 RCX: 00007f2012b7ff19 [ 96.251950][ T8008] RDX: 000000000c000004 RSI: 0000000020000380 RDI: 0000000000000003 [ 96.254136][ T8008] RBP: 00007f20138d10a0 R08: 0000000000000000 R09: 0000000000000000 [ 96.256307][ T8008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.258442][ T8008] R13: 0000000000000000 R14: 00007f2012d45fa0 R15: 00007ffd97e07fb8 [ 96.260567][ T8008] [ 96.277899][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.305833][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.310801][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.312907][ T8015] nbd: must specify an index to disconnect [ 96.317162][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.320481][ T5954] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.323235][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.380501][ T8019] netlink: 'syz.0.525': attribute type 26 has an invalid length. [ 96.436667][ T8009] chnl_net:caif_netlink_parms(): no params data found [ 96.529160][ T8009] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.531655][ T8009] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.534112][ T8009] bridge_slave_0: entered allmulticast mode [ 96.536966][ T8009] bridge_slave_0: entered promiscuous mode [ 96.544038][ T8009] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.546480][ T8009] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.551281][ T8009] bridge_slave_1: entered allmulticast mode [ 96.572343][ T8009] bridge_slave_1: entered promiscuous mode [ 96.589742][ T8048] netlink: 48 bytes leftover after parsing attributes in process `syz.0.533'. [ 96.630466][ T8050] FAULT_INJECTION: forcing a failure. [ 96.630466][ T8050] name failslab, interval 1, probability 0, space 0, times 0 [ 96.635051][ T8050] CPU: 1 UID: 0 PID: 8050 Comm: syz.0.534 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 96.638703][ T8050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.639269][ T8009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.641876][ T8050] Call Trace: [ 96.641911][ T8050] [ 96.641921][ T8050] dump_stack_lvl+0x16c/0x1f0 [ 96.647648][ T8009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.649189][ T8050] should_fail_ex+0x497/0x5b0 [ 96.653930][ T8050] ? fs_reclaim_acquire+0xae/0x150 [ 96.655398][ T8050] should_failslab+0xc2/0x120 [ 96.656673][ T8050] __kmalloc_noprof+0xcb/0x510 [ 96.658112][ T8050] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 96.660623][ T8050] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 96.662620][ T8050] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 96.664836][ T8050] ? bpf_lsm_capable+0x9/0x10 [ 96.666558][ T8050] ? security_capable+0x7e/0x260 [ 96.668416][ T8050] ? ns_capable+0xd7/0x110 [ 96.670126][ T8050] genl_rcv_msg+0x565/0x800 [ 96.671826][ T8050] ? __pfx_genl_rcv_msg+0x10/0x10 [ 96.673734][ T8050] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 96.675700][ T8050] ? __pfx_nl80211_set_station+0x10/0x10 [ 96.677753][ T8050] ? __pfx_nl80211_post_doit+0x10/0x10 [ 96.679729][ T8050] netlink_rcv_skb+0x16b/0x440 [ 96.681342][ T8050] ? __pfx_genl_rcv_msg+0x10/0x10 [ 96.683134][ T8050] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 96.684825][ T8050] ? down_read+0xc9/0x330 [ 96.686014][ T8050] ? __pfx_down_read+0x10/0x10 [ 96.687438][ T8050] ? netlink_deliver_tap+0x1ae/0xd30 [ 96.689146][ T8050] genl_rcv+0x28/0x40 [ 96.690593][ T8050] netlink_unicast+0x53c/0x7f0 [ 96.692293][ T8050] ? __pfx_netlink_unicast+0x10/0x10 [ 96.694222][ T8050] netlink_sendmsg+0x8b8/0xd70 [ 96.695949][ T8050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.697851][ T8050] ____sys_sendmsg+0xaaf/0xc90 [ 96.699561][ T8050] ? copy_msghdr_from_user+0x10b/0x160 [ 96.701504][ T8050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.703463][ T8050] ___sys_sendmsg+0x135/0x1e0 [ 96.705311][ T8050] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.707405][ T8050] ? __pfx_lock_release+0x10/0x10 [ 96.709362][ T8050] ? trace_lock_acquire+0x14e/0x1f0 [ 96.711167][ T8050] ? __fget_files+0x206/0x3a0 [ 96.712857][ T8050] __sys_sendmsg+0x16e/0x220 [ 96.714509][ T8050] ? __pfx___sys_sendmsg+0x10/0x10 [ 96.716368][ T8050] do_syscall_64+0xcd/0x250 [ 96.718016][ T8050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.720133][ T8050] RIP: 0033:0x7f525ab7ff19 [ 96.721723][ T8050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.728791][ T8050] RSP: 002b:00007f525ba40058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.732068][ T8050] RAX: ffffffffffffffda RBX: 00007f525ad45fa0 RCX: 00007f525ab7ff19 [ 96.734762][ T8050] RDX: 000000000c000004 RSI: 0000000020000380 RDI: 0000000000000003 [ 96.736890][ T8050] RBP: 00007f525ba400a0 R08: 0000000000000000 R09: 0000000000000000 [ 96.738979][ T8050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.741207][ T8050] R13: 0000000000000000 R14: 00007f525ad45fa0 R15: 00007ffcec272468 [ 96.744348][ T8050] [ 96.773231][ T8009] team0: Port device team_slave_0 added [ 96.787705][ T8009] team0: Port device team_slave_1 added [ 96.807831][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.810602][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.820189][ T8009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.825862][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.828482][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.838026][ T8009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.879141][ T8009] hsr_slave_0: entered promiscuous mode [ 96.881324][ T8009] hsr_slave_1: entered promiscuous mode [ 96.883140][ T8009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.885133][ T8009] Cannot create hsr debugfs directory [ 97.141707][ T1140] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.218893][ T1140] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.229573][ T8069] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 97.279799][ T1140] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.392575][ T1140] bridge_slave_1: left allmulticast mode [ 97.394190][ T1140] bridge_slave_1: left promiscuous mode [ 97.395812][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.400051][ T1140] bridge_slave_0: left allmulticast mode [ 97.401847][ T1140] bridge_slave_0: left promiscuous mode [ 97.403906][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.758511][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.762754][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.766103][ T1140] bond0 (unregistering): Released all slaves [ 97.875390][ T8091] syz.0.546 (8091) used greatest stack depth: 18720 bytes left [ 98.041666][ T8107] netlink: 44 bytes leftover after parsing attributes in process `syz.0.550'. [ 98.045753][ T8107] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 98.050391][ T8107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.550'. [ 98.120457][ T8009] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.141479][ T1140] hsr_slave_0: left promiscuous mode [ 98.143443][ T1140] hsr_slave_1: left promiscuous mode [ 98.145475][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.149089][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.152815][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.155304][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.174549][ T1140] veth1_macvtap: left promiscuous mode [ 98.176154][ T1140] veth0_macvtap: left promiscuous mode [ 98.178150][ T1140] veth1_vlan: left promiscuous mode [ 98.179788][ T1140] veth0_vlan: left promiscuous mode [ 98.321080][ T8085] orangefs_mount: mount request failed with -4 [ 98.357437][ T5944] Bluetooth: hci2: command tx timeout [ 98.438055][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.000197][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 99.003348][ T8123] misc userio: Invalid payload size [ 99.107682][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 99.874132][ T8009] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.882835][ T8009] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.893995][ T8009] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.979396][ T8009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.003292][ T8009] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.017548][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.020357][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.028427][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.030634][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.185892][ T8140] ipvlan2: entered promiscuous mode [ 100.353140][ T8009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.377792][ T8009] veth0_vlan: entered promiscuous mode [ 100.384256][ T39] kauditd_printk_skb: 37 callbacks suppressed [ 100.384273][ T39] audit: type=1400 audit(1733782708.039:42478): avc: denied { append } for pid=8146 comm="syz.0.561" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 100.385161][ T8009] veth1_vlan: entered promiscuous mode [ 100.414942][ T8009] veth0_macvtap: entered promiscuous mode [ 100.428371][ T8009] veth1_macvtap: entered promiscuous mode [ 100.437587][ T5944] Bluetooth: hci2: command tx timeout [ 100.450570][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.454401][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.460960][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.465014][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.470867][ T8009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.476636][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.481942][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.484810][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.489096][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.492720][ T8009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.497783][ T8009] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.501411][ T8009] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.503825][ T8009] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.506210][ T8009] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.563474][ T8159] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.564'. [ 100.563858][ T39] audit: type=1400 audit(1733782708.219:42479): avc: denied { create } for pid=8158 comm="syz.2.564" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.566352][ T8159] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 100.575111][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.579835][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.600323][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.602662][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.613350][ T39] audit: type=1400 audit(1733782708.269:42480): avc: denied { unlink } for pid=5947 comm="syz-executor" name="file0" dev="tmpfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.702056][ T8168] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 101.781772][ T39] audit: type=1400 audit(1733782709.439:42481): avc: denied { write } for pid=8205 comm="syz.3.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.976068][ T8211] 9pnet_fd: Insufficient options for proto=fd [ 102.122774][ T8217] netlink: 'syz.2.582': attribute type 2 has an invalid length. [ 102.125138][ T8217] netlink: 132 bytes leftover after parsing attributes in process `syz.2.582'. [ 102.150704][ T8217] bridge: RTM_NEWNEIGH with invalid ether address [ 102.266160][ T39] audit: type=1400 audit(1733782709.919:42482): avc: denied { relabelfrom } for pid=8223 comm="syz.2.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 102.273647][ T39] audit: type=1400 audit(1733782709.919:42483): avc: denied { relabelto } for pid=8223 comm="syz.2.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 102.282459][ T39] audit: type=1400 audit(1733782709.949:42484): avc: denied { attach_queue } for pid=8223 comm="syz.2.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 102.405362][ T8228] tmpfs: Bad value for 'mpol' [ 102.483633][ T8230] "syz.2.588" (8230) uses obsolete ecb(arc4) skcipher [ 102.493340][ T39] audit: type=1400 audit(1733782710.149:42485): avc: denied { setopt } for pid=8229 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.533146][ T1140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.410966][ T8242] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 103.413276][ T8242] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.416749][ T8242] vhci_hcd vhci_hcd.0: Device attached [ 103.420573][ T8243] vhci_hcd: cannot find a urb of seqnum 9 max seqnum 0 [ 103.424946][ T1147] vhci_hcd: stop threads [ 103.426546][ T1147] vhci_hcd: release socket [ 103.430228][ T1147] vhci_hcd: disconnect device [ 103.538007][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.544952][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.549229][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.554821][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.559471][ T5954] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 103.562424][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.609829][ T8250] xt_hashlimit: size too large, truncated to 1048576 [ 103.674357][ T8247] chnl_net:caif_netlink_parms(): no params data found [ 103.751353][ T8247] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.753964][ T8247] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.756590][ T8247] bridge_slave_0: entered allmulticast mode [ 103.760064][ T8247] bridge_slave_0: entered promiscuous mode [ 103.765001][ T8247] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.767707][ T8247] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.770394][ T8247] bridge_slave_1: entered allmulticast mode [ 103.773419][ T8247] bridge_slave_1: entered promiscuous mode [ 103.807957][ T8247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.813543][ T8247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.856289][ T8247] team0: Port device team_slave_0 added [ 103.862740][ T8247] team0: Port device team_slave_1 added [ 103.896907][ T8247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.900868][ T8247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.910906][ T8247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.915441][ T8247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.917701][ T8247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.924563][ T8247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.965303][ T8247] hsr_slave_0: entered promiscuous mode [ 103.968070][ T8247] hsr_slave_1: entered promiscuous mode [ 103.970776][ T8247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.975119][ T8247] Cannot create hsr debugfs directory [ 104.007241][ T8262] input: syz0 as /devices/virtual/input/input7 [ 104.016072][ T39] audit: type=1400 audit(1733782711.669:42486): avc: denied { read } for pid=5339 comm="acpid" name="event4" dev="devtmpfs" ino=2839 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.031186][ T39] audit: type=1400 audit(1733782711.669:42487): avc: denied { open } for pid=5339 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2839 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.597535][ T1140] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.693192][ T1140] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.951681][ T1140] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.199197][ T1140] bridge_slave_1: left allmulticast mode [ 105.200954][ T1140] bridge_slave_1: left promiscuous mode [ 105.202637][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.210219][ T1140] bridge_slave_0: left allmulticast mode [ 105.211981][ T1140] bridge_slave_0: left promiscuous mode [ 105.213554][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.351376][ T8316] FAULT_INJECTION: forcing a failure. [ 105.351376][ T8316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.364238][ T8316] CPU: 0 UID: 0 PID: 8316 Comm: syz.0.600 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 105.368153][ T8316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.371939][ T8316] Call Trace: [ 105.373145][ T8316] [ 105.374228][ T8316] dump_stack_lvl+0x16c/0x1f0 [ 105.376037][ T8316] should_fail_ex+0x497/0x5b0 [ 105.377455][ T8316] _copy_from_user+0x2e/0xd0 [ 105.379000][ T8316] kstrtouint_from_user+0xd7/0x1c0 [ 105.380635][ T8316] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 105.382691][ T8316] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 105.384878][ T8316] proc_fail_nth_write+0x84/0x250 [ 105.386760][ T8316] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 105.389093][ T8316] ? ksys_write+0x12b/0x250 [ 105.391258][ T8316] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 105.393792][ T8316] vfs_write+0x24c/0x1150 [ 105.395132][ T8316] ? __fget_files+0x1fc/0x3a0 [ 105.396385][ T8316] ? __pfx___mutex_lock+0x10/0x10 [ 105.397885][ T8316] ? __pfx_vfs_write+0x10/0x10 [ 105.399592][ T8316] ? __fget_files+0x206/0x3a0 [ 105.401313][ T8316] ksys_write+0x12b/0x250 [ 105.402877][ T8316] ? __pfx_ksys_write+0x10/0x10 [ 105.404669][ T8316] do_syscall_64+0xcd/0x250 [ 105.406261][ T8316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.408162][ T8316] RIP: 0033:0x7f525ab7e9cf [ 105.409961][ T8316] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 105.416758][ T8316] RSP: 002b:00007f525ba1f050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 105.419502][ T8316] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f525ab7e9cf [ 105.422825][ T8316] RDX: 0000000000000001 RSI: 00007f525ba1f0b0 RDI: 0000000000000006 [ 105.425343][ T8316] RBP: 00007f525ba1f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 105.428277][ T8316] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 105.431740][ T8316] R13: 0000000000000000 R14: 00007f525ad46080 R15: 00007ffcec272468 [ 105.434989][ T8316] [ 105.640806][ T5944] Bluetooth: hci2: command tx timeout [ 105.718205][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.722905][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.726470][ T1140] bond0 (unregistering): Released all slaves [ 105.937759][ T6009] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 106.049806][ T5944] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 106.093792][ T6009] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 106.099715][ T6009] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.102619][ T6009] usb 5-1: Product: syz [ 106.104292][ T6009] usb 5-1: Manufacturer: syz [ 106.106076][ T6009] usb 5-1: SerialNumber: syz [ 106.112768][ T6009] usb 5-1: config 0 descriptor?? [ 106.125345][ T8355] 9pnet_fd: Insufficient options for proto=fd [ 106.129470][ T69] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 106.135203][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.137877][ T69] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 106.202813][ T8247] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.210715][ T8247] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.218061][ T8362] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 106.226898][ T8247] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.238748][ T8247] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.278950][ T8368] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 106.318215][ T8247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.330928][ T8247] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.338208][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.341333][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.348274][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.350388][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.423564][ T8373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8373 comm=syz.0.603 [ 106.428244][ T8373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.603'. [ 106.439792][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 106.439803][ T39] audit: type=1400 audit(1733782714.099:42491): avc: denied { write } for pid=5336 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.448489][ T39] audit: type=1400 audit(1733782714.099:42492): avc: denied { remove_name } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.457145][ T39] audit: type=1400 audit(1733782714.099:42493): avc: denied { add_name } for pid=5336 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.459319][ T6009] usb 5-1: USB disconnect, device number 9 [ 106.485288][ T8247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.511751][ T8247] veth0_vlan: entered promiscuous mode [ 106.516747][ T8247] veth1_vlan: entered promiscuous mode [ 106.532313][ T8247] veth0_macvtap: entered promiscuous mode [ 106.539317][ T8247] veth1_macvtap: entered promiscuous mode [ 106.549416][ T8247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.552082][ T8247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.554868][ T8247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.558268][ T8247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.561632][ T8247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.564922][ T8247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.568400][ T8247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.575362][ T8247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.578998][ T8247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.581659][ T8247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.584997][ T8247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.589142][ T8247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.592574][ T8247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.596167][ T8247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.603232][ T8247] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.606538][ T8247] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.610708][ T8247] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.613934][ T8247] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.683076][ T39] audit: type=1400 audit(1733782714.339:42494): avc: denied { view } for pid=8395 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 106.850720][ T832] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 106.852855][ T39] audit: type=1400 audit(1733782714.509:42495): avc: denied { write } for pid=8395 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 107.025324][ T832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.029363][ T832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.032798][ T832] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 107.036227][ T832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.045530][ T832] usb 7-1: config 0 descriptor?? [ 107.559252][ T39] audit: type=1400 audit(1733782715.219:42496): avc: denied { write } for pid=8405 comm="syz.0.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 107.564676][ T39] audit: type=1400 audit(1733782715.219:42497): avc: denied { nlmsg_read } for pid=8405 comm="syz.0.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 107.571678][ T39] audit: type=1400 audit(1733782715.219:42498): avc: denied { read } for pid=8405 comm="syz.0.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 107.576917][ T39] audit: type=1400 audit(1733782715.219:42499): avc: denied { map } for pid=8405 comm="syz.0.621" path="socket:[27895]" dev="sockfs" ino=27895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.600507][ T8408] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 107.663296][ T8411] netlink: 44 bytes leftover after parsing attributes in process `syz.0.623'. [ 107.727396][ T5944] Bluetooth: hci2: command tx timeout [ 108.207716][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.209964][ T69] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 108.211655][ T69] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 108.245761][ T832] usbhid 7-1:0.0: can't add hid device: -71 [ 108.247547][ T832] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 108.253137][ T832] usb 7-1: USB disconnect, device number 5 [ 108.453846][ T39] audit: type=1400 audit(1733782716.109:42500): avc: denied { mount } for pid=8424 comm="syz.2.628" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 108.567552][ T8429] gfs2: gfs2 mount does not exist [ 108.754597][ T8435] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 109.797314][ T5944] Bluetooth: hci2: command tx timeout [ 110.277417][ T69] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 110.279074][ T69] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 110.279534][ T5944] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.878104][ T5944] Bluetooth: hci2: command tx timeout [ 112.357382][ T69] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 112.359247][ T69] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 112.395445][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.400447][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.403562][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 112.403577][ T39] audit: type=1400 audit(1733782720.049:42503): avc: denied { unmount } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 112.446439][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.449451][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.462298][ T39] audit: type=1400 audit(1733782720.119:42504): avc: denied { mounton } for pid=8247 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 112.494740][ T1140] hsr_slave_0: left promiscuous mode [ 112.498941][ T1140] hsr_slave_1: left promiscuous mode [ 112.501370][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.503354][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.510865][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.512941][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.538581][ T1140] veth1_macvtap: left promiscuous mode [ 112.540239][ T1140] veth0_macvtap: left promiscuous mode [ 112.541741][ T1140] veth1_vlan: left promiscuous mode [ 112.543200][ T1140] veth0_vlan: left promiscuous mode [ 112.544034][ T39] audit: type=1400 audit(1733782720.199:42505): avc: denied { ioctl } for pid=8445 comm="syz.0.634" path="socket:[27185]" dev="sockfs" ino=27185 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 113.401633][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 113.522464][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 114.315971][ T8452] netlink: 108 bytes leftover after parsing attributes in process `syz.0.634'. [ 114.322853][ T8452] netlink: 108 bytes leftover after parsing attributes in process `syz.0.634'. [ 114.325573][ T8452] netlink: 84 bytes leftover after parsing attributes in process `syz.0.634'. [ 114.330089][ T8453] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 114.342127][ T8473] 9pnet_fd: Insufficient options for proto=fd [ 114.357579][ T39] audit: type=1400 audit(1733782722.019:42506): avc: denied { checkpoint_restore } for pid=8472 comm="syz.2.639" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.418580][ T39] audit: type=1400 audit(1733782722.079:42507): avc: denied { mounton } for pid=8477 comm="syz.2.641" path="/236/file0" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.427347][ T39] audit: type=1400 audit(1733782722.079:42508): avc: denied { getattr } for pid=8477 comm="syz.2.641" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 114.433267][ T8478] overlayfs: statfs failed on './file0' [ 114.905928][ T1140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.972592][ T1140] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.053445][ T1140] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.122148][ T1140] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.225417][ T1140] bridge_slave_1: left allmulticast mode [ 115.227423][ T1140] bridge_slave_1: left promiscuous mode [ 115.229523][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.233207][ T1140] bridge_slave_0: left allmulticast mode [ 115.234718][ T1140] bridge_slave_0: left promiscuous mode [ 115.236169][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.602989][ T8507] 9pnet_fd: Insufficient options for proto=fd [ 115.661283][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.667948][ T8514] netlink: 700 bytes leftover after parsing attributes in process `syz.2.651'. [ 115.671307][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.682790][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.698789][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.706349][ T5954] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 115.706847][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.716281][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.735957][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.741388][ T1140] bond0 (unregistering): Released all slaves [ 115.766310][ T39] audit: type=1400 audit(1733782723.419:42509): avc: denied { getopt } for pid=8524 comm="syz.3.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 115.777467][ T39] audit: type=1400 audit(1733782723.419:42510): avc: denied { write } for pid=8524 comm="syz.3.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 115.913986][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'. [ 115.918376][ T8541] netlink: 108 bytes leftover after parsing attributes in process `syz.2.656'. [ 115.967262][ T39] audit: type=1400 audit(1733782723.619:42511): avc: denied { setopt } for pid=8538 comm="syz.2.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 115.987944][ T8508] chnl_net:caif_netlink_parms(): no params data found [ 116.114167][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.116997][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.120000][ T8508] bridge_slave_0: entered allmulticast mode [ 116.124923][ T8508] bridge_slave_0: entered promiscuous mode [ 116.130552][ T8508] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.133088][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.135093][ T8508] bridge_slave_1: entered allmulticast mode [ 116.137684][ T8508] bridge_slave_1: entered promiscuous mode [ 116.180923][ T1140] hsr_slave_0: left promiscuous mode [ 116.183125][ T1140] hsr_slave_1: left promiscuous mode [ 116.187165][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.190795][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.194308][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.196403][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.220084][ T1140] veth1_macvtap: left promiscuous mode [ 116.221987][ T1140] veth0_macvtap: left promiscuous mode [ 116.223535][ T1140] veth1_vlan: left promiscuous mode [ 116.225139][ T1140] veth0_vlan: left promiscuous mode [ 116.507514][ T8568] xt_ecn: cannot match TCP bits for non-tcp packets [ 116.517815][ T39] audit: type=1400 audit(1733782724.169:42512): avc: denied { listen } for pid=8564 comm="syz.2.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.157879][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 117.270455][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 117.799162][ T5944] Bluetooth: hci2: command tx timeout [ 117.956750][ T8508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.967971][ T8565] netlink: 'syz.2.661': attribute type 4 has an invalid length. [ 117.986100][ T8508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.071523][ T8508] team0: Port device team_slave_0 added [ 118.080932][ T8508] team0: Port device team_slave_1 added [ 118.135190][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.137057][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.145541][ T8508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.149682][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.151961][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.159711][ T8508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.210593][ T8508] hsr_slave_0: entered promiscuous mode [ 118.213294][ T8508] hsr_slave_1: entered promiscuous mode [ 118.215578][ T8508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.218896][ T8508] Cannot create hsr debugfs directory [ 118.282282][ T39] audit: type=1400 audit(1733782725.939:42513): avc: denied { sqpoll } for pid=8591 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 118.658932][ T8630] netlink: 'syz.0.674': attribute type 10 has an invalid length. [ 118.667916][ T8630] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 118.672558][ T39] audit: type=1400 audit(1733782726.329:42514): avc: denied { ioctl } for pid=8622 comm="syz.0.674" path="socket:[28293]" dev="sockfs" ino=28293 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 118.731234][ T8508] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 118.734533][ T8508] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 118.737890][ T8508] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 118.741100][ T8508] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 118.782811][ T8508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.811953][ T8508] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.818037][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.820002][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.825442][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.827435][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.842057][ T39] audit: type=1400 audit(1733782726.499:42515): avc: denied { append } for pid=8639 comm="syz.2.675" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.933829][ T8508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.961140][ T8508] veth0_vlan: entered promiscuous mode [ 118.966157][ T8508] veth1_vlan: entered promiscuous mode [ 118.982316][ T8508] veth0_macvtap: entered promiscuous mode [ 118.988761][ T8508] veth1_macvtap: entered promiscuous mode [ 118.999745][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.002765][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.005334][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.009238][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.014161][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.025777][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.029754][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.033010][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.036761][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.042182][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.046519][ T8508] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.049698][ T8508] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.052467][ T8508] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.055151][ T8508] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.111168][ T39] audit: type=1400 audit(1733782726.769:42516): avc: denied { wake_alarm } for pid=8668 comm="syz.2.678" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 119.129648][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.135867][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.150676][ T39] audit: type=1400 audit(1733782726.809:42517): avc: denied { setattr } for pid=8671 comm="syz.0.679" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.155201][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.160058][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.181932][ T39] audit: type=1400 audit(1733782726.839:42518): avc: denied { setopt } for pid=8679 comm="syz.0.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 119.211085][ T39] audit: type=1400 audit(1733782726.869:42519): avc: denied { connect } for pid=8679 comm="syz.0.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 119.219781][ T39] audit: type=1400 audit(1733782726.879:42520): avc: denied { name_connect } for pid=8679 comm="syz.0.680" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 119.363745][ T39] audit: type=1400 audit(1733782727.019:42521): avc: denied { lock } for pid=8695 comm="syz.3.685" path="socket:[30799]" dev="sockfs" ino=30799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.395833][ T8702] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 119.398754][ T8702] overlayfs: missing 'lowerdir' [ 119.515938][ T8710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.690'. [ 119.521974][ T8710] bond0: entered allmulticast mode [ 119.523745][ T8710] bond_slave_0: entered allmulticast mode [ 119.525612][ T8710] bond_slave_1: entered allmulticast mode [ 119.659075][ T8710] /dev/sr0: Can't open blockdev [ 119.887515][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 119.986313][ T8728] netlink: 60 bytes leftover after parsing attributes in process `syz.3.695'. [ 120.067607][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 120.071752][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.082725][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 120.085102][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.098744][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.101213][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.103267][ T9] usb 7-1: Product: syz [ 120.104361][ T9] usb 7-1: Manufacturer: syz [ 120.106072][ T8736] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 120.109005][ T9] usb 7-1: SerialNumber: syz [ 120.154820][ T8742] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 120.160202][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 120.174039][ T39] audit: type=1400 audit(1733782727.829:42522): avc: denied { mounton } for pid=8741 comm="syz.3.701" path="/124/file0" dev="tmpfs" ino=674 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 120.182418][ T8742] bond0: (slave syz_tun): Releasing backup interface [ 120.188343][ T8743] overlay: ./file0 is not a directory [ 120.318046][ T8706] syz.2.688[8706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.318102][ T8706] syz.2.688[8706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.322287][ T8706] syz.2.688[8706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.382448][ T8759] xt_hashlimit: size too large, truncated to 1048576 [ 120.401062][ T9] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 120.403538][ T9] cdc_ncm 7-1:1.0: bind() failure [ 120.420780][ T9] usb 7-1: USB disconnect, device number 6 [ 120.440944][ T8762] xt_policy: output policy not valid in PREROUTING and INPUT [ 120.901078][ T8772] /dev/sr0: Can't open blockdev [ 121.048042][ T8773] /dev/sr0: Can't open blockdev [ 121.257715][ T8806] binder: 8805:8806 ioctl 540f 200000c0 returned -22 [ 121.359323][ T8814] batman_adv: batadv0: Adding interface: dummy0 [ 121.361610][ T8814] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.371970][ T8814] batman_adv: batadv0: Interface activated: dummy0 [ 121.377119][ T8818] batadv0: mtu less than device minimum [ 121.381789][ T8818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 121.386089][ T8818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 121.390643][ T8818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 121.395492][ T8818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 121.399160][ T8818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 121.402481][ T8818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 121.405907][ T8818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 121.409364][ T8818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 121.537571][ T8830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.710'. [ 121.548071][ T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.597663][ T8831] nbd: must specify a device to reconfigure [ 122.723792][ T8851] FAULT_INJECTION: forcing a failure. [ 122.723792][ T8851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.729746][ T8851] CPU: 3 UID: 0 PID: 8851 Comm: syz.0.730 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 122.733035][ T8851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 122.736544][ T8851] Call Trace: [ 122.738179][ T8851] [ 122.739190][ T8851] dump_stack_lvl+0x16c/0x1f0 [ 122.740802][ T8851] should_fail_ex+0x497/0x5b0 [ 122.742030][ T8851] _copy_to_user+0x32/0xd0 [ 122.743202][ T8851] simple_read_from_buffer+0xd0/0x160 [ 122.744631][ T8851] proc_fail_nth_read+0x198/0x270 [ 122.745938][ T8851] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.747639][ T8851] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.749932][ T8851] vfs_read+0x1df/0xbe0 [ 122.751567][ T8851] ? __fget_files+0x1fc/0x3a0 [ 122.753576][ T8851] ? __pfx___mutex_lock+0x10/0x10 [ 122.755162][ T8851] ? __pfx_vfs_read+0x10/0x10 [ 122.756543][ T8851] ? __fget_files+0x206/0x3a0 [ 122.758135][ T8851] ksys_read+0x12b/0x250 [ 122.759196][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 122.759402][ T8851] ? __pfx_ksys_read+0x10/0x10 [ 122.763492][ T8851] do_syscall_64+0xcd/0x250 [ 122.764204][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 122.765130][ T8851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.768316][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 122.769027][ T8851] RIP: 0033:0x7f525ab7e92c [ 122.771966][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 122.772332][ T8851] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 122.776715][ T5954] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 122.781337][ T8851] RSP: 002b:00007f525ba40050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.781367][ T8851] RAX: ffffffffffffffda RBX: 00007f525ad45fa0 RCX: 00007f525ab7e92c [ 122.781380][ T8851] RDX: 000000000000000f RSI: 00007f525ba400b0 RDI: 0000000000000004 [ 122.781392][ T8851] RBP: 00007f525ba400a0 R08: 0000000000000000 R09: 0000000000000000 [ 122.781403][ T8851] R10: 000000000000004e R11: 0000000000000246 R12: 0000000000000001 [ 122.781414][ T8851] R13: 0000000000000000 R14: 00007f525ad45fa0 R15: 00007ffcec272468 [ 122.781441][ T8851] [ 122.802004][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 122.915208][ T8854] chnl_net:caif_netlink_parms(): no params data found [ 122.979510][ T8854] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.981721][ T8854] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.987427][ T8854] bridge_slave_0: entered allmulticast mode [ 122.990506][ T8854] bridge_slave_0: entered promiscuous mode [ 122.993183][ T8854] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.995080][ T8854] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.996999][ T8854] bridge_slave_1: entered allmulticast mode [ 123.000031][ T8854] bridge_slave_1: entered promiscuous mode [ 123.034962][ T8854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.039150][ T8854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.062419][ T8854] team0: Port device team_slave_0 added [ 123.067033][ T8854] team0: Port device team_slave_1 added [ 123.095020][ T8854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.096963][ T8854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.103817][ T8854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.107476][ T8854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.109531][ T8854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.116921][ T8854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.145592][ T8877] netlink: 48 bytes leftover after parsing attributes in process `syz.0.738'. [ 123.150185][ T8854] hsr_slave_0: entered promiscuous mode [ 123.152673][ T8854] hsr_slave_1: entered promiscuous mode [ 123.154787][ T8854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.156931][ T8854] Cannot create hsr debugfs directory [ 123.379682][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 123.379696][ T39] audit: type=1326 audit(1733782731.039:42531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8884 comm="syz.0.741" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f525ab7ff19 code=0x0 [ 123.476269][ T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.602076][ T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.671429][ T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.765438][ T8889] autofs4:pid:8889:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2863311530.2147592874), cmd(0xc0189374) [ 123.766218][ T8890] autofs4:pid:8890:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2863311530.2147592874), cmd(0xc0189374) [ 123.770633][ T8889] autofs4:pid:8889:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 123.780876][ T8890] autofs4:pid:8890:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 123.789071][ T39] audit: type=1400 audit(1733782731.449:42532): avc: denied { bind } for pid=8888 comm="syz.2.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 123.807537][ T64] bridge_slave_1: left allmulticast mode [ 123.809214][ T64] bridge_slave_1: left promiscuous mode [ 123.811082][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.815166][ T64] bridge_slave_0: left allmulticast mode [ 123.816772][ T64] bridge_slave_0: left promiscuous mode [ 123.818988][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.182410][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.187065][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.192430][ T64] bond0 (unregistering): Released all slaves [ 124.289493][ T39] audit: type=1400 audit(1733782731.949:42533): avc: denied { setattr } for pid=8915 comm="syz.2.749" name="fib_trie" dev="proc" ino=4026532908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 124.587007][ T8934] mac80211_hwsim hwsim9 : renamed from wlan1 [ 124.592084][ T8943] program syz.3.753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.614958][ T64] hsr_slave_0: left promiscuous mode [ 124.619870][ T64] hsr_slave_1: left promiscuous mode [ 124.624600][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.627366][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.630741][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.633639][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.656551][ T64] veth1_macvtap: left promiscuous mode [ 124.659636][ T64] veth0_macvtap: left promiscuous mode [ 124.661591][ T64] veth1_vlan: left promiscuous mode [ 124.663382][ T64] veth0_vlan: left promiscuous mode [ 124.838585][ T5944] Bluetooth: hci2: command tx timeout [ 125.587585][ T64] team0 (unregistering): Port device team_slave_1 removed [ 125.680490][ T64] team0 (unregistering): Port device team_slave_0 removed [ 126.104760][ T8964] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 126.440533][ T8959] tipc: Started in network mode [ 126.445316][ T8959] tipc: Node identity 101, cluster identity 4711 [ 126.448342][ T8959] tipc: Node number set to 257 [ 126.451010][ T8964] netlink: 'syz.2.760': attribute type 1 has an invalid length. [ 126.453389][ T8964] netlink: 'syz.2.760': attribute type 2 has an invalid length. [ 126.456535][ T8964] netlink: 16074 bytes leftover after parsing attributes in process `syz.2.760'. [ 126.602573][ T39] audit: type=1400 audit(1733782734.259:42534): avc: denied { remove_name } for pid=8979 comm="syz.2.763" name="file0" dev="9p" ino=38535235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.611086][ T39] audit: type=1400 audit(1733782734.259:42535): avc: denied { rename } for pid=8979 comm="syz.2.763" name="file0" dev="9p" ino=38535235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.616113][ T8854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 126.625399][ T8854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 126.629483][ T8854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 126.631408][ T39] audit: type=1400 audit(1733782734.289:42536): avc: denied { setopt } for pid=8979 comm="syz.2.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 126.649576][ T8854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 126.733021][ T8854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.742169][ T8854] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.746981][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.750114][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.760931][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.763527][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.854415][ T8854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.871766][ T8854] veth0_vlan: entered promiscuous mode [ 126.877251][ T8854] veth1_vlan: entered promiscuous mode [ 126.888492][ T8854] veth0_macvtap: entered promiscuous mode [ 126.892801][ T8854] veth1_macvtap: entered promiscuous mode [ 126.898958][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.901669][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.904215][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.906938][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.911215][ T8854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.915625][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.917947][ T5944] Bluetooth: hci2: command tx timeout [ 126.919104][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.923530][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.926394][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.929807][ T8854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.934151][ T8854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.936451][ T8854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.939994][ T8854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.942259][ T8854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.986159][ T9007] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 126.995456][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.001308][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.014615][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.017835][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.072619][ T39] audit: type=1400 audit(1733782734.729:42537): avc: denied { read } for pid=9009 comm="syz.3.766" path="socket:[33000]" dev="sockfs" ino=33000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.355285][ T39] audit: type=1400 audit(1733782735.009:42538): avc: denied { shutdown } for pid=9025 comm="syz.0.770" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.428604][ T9028] overlayfs: conflicting lowerdir path [ 127.597320][ T69] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 127.708015][ T39] audit: type=1400 audit(1733782735.369:42539): avc: denied { recv } for pid=29 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=44800 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 127.715275][ T39] audit: type=1400 audit(1733782735.369:42540): avc: denied { recv } for pid=29 comm="ksoftirqd/1" saddr=127.0.0.1 src=44800 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 127.760168][ T69] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.763652][ T69] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 127.768438][ T69] usb 5-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 127.771816][ T69] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.780210][ T69] usb 5-1: config 0 descriptor?? [ 128.002512][ T69] usbhid 5-1:0.0: can't add hid device: -71 [ 128.004173][ T69] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 128.008759][ T9045] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 128.011037][ T9044] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 128.011244][ T69] usb 5-1: USB disconnect, device number 10 [ 128.058459][ T6641] IPVS: starting estimator thread 0... [ 128.157483][ T9050] IPVS: using max 38 ests per chain, 91200 per kthread [ 128.557804][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 128.557821][ T39] audit: type=1400 audit(1733782736.209:42548): avc: denied { setrlimit } for pid=9076 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 128.611707][ T9081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.784'. [ 128.891674][ T9100] netlink: 'syz.0.789': attribute type 1 has an invalid length. [ 128.893865][ T9100] netlink: 224 bytes leftover after parsing attributes in process `syz.0.789'. [ 129.090029][ T39] audit: type=1400 audit(1733782736.749:42549): avc: denied { write } for pid=9109 comm="syz.3.793" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 129.098389][ T39] audit: type=1400 audit(1733782736.749:42550): avc: denied { map } for pid=9111 comm="syz.2.794" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 129.105052][ T39] audit: type=1400 audit(1733782736.749:42551): avc: denied { execute } for pid=9111 comm="syz.2.794" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 129.133125][ T9114] i2c i2c-1: Invalid block write size 34 [ 129.192218][ T9125] netlink: 'syz.2.799': attribute type 11 has an invalid length. [ 129.194311][ T9125] netlink: 224 bytes leftover after parsing attributes in process `syz.2.799'. [ 129.202924][ T39] audit: type=1326 audit(1733782736.859:42552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9123 comm="syz.2.799" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2012b7ff19 code=0x0 [ 129.281008][ T9136] overlayfs: failed to resolve './file1': -2 [ 129.474389][ T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.656449][ T9144] unknown channel width for channel at 909000KHz? [ 130.817802][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.821384][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.824459][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.829566][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.834680][ T5954] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 130.837788][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.867485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 130.874993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 130.877604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 130.878105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 130.885267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 130.928574][ T9158] chnl_net:caif_netlink_parms(): no params data found [ 130.979628][ T9158] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.981606][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.983523][ T9158] bridge_slave_0: entered allmulticast mode [ 130.988249][ T9158] bridge_slave_0: entered promiscuous mode [ 130.991214][ T9158] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.993213][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.995395][ T9158] bridge_slave_1: entered allmulticast mode [ 130.999495][ T9158] bridge_slave_1: entered promiscuous mode [ 131.048497][ T9158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.054621][ T9158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.105730][ T9158] team0: Port device team_slave_0 added [ 131.113915][ T9158] team0: Port device team_slave_1 added [ 131.145869][ T9158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.149193][ T9158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.160306][ T9158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.165779][ T9158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.169479][ T9158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.179345][ T9158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.206283][ T9158] hsr_slave_0: entered promiscuous mode [ 131.208445][ T9158] hsr_slave_1: entered promiscuous mode [ 131.210602][ T9158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.212871][ T9158] Cannot create hsr debugfs directory [ 131.351437][ T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.400909][ T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.470546][ T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.650440][ T64] bridge_slave_1: left allmulticast mode [ 131.652926][ T64] bridge_slave_1: left promiscuous mode [ 131.655171][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.662077][ T64] bridge_slave_0: left allmulticast mode [ 131.666415][ T64] bridge_slave_0: left promiscuous mode [ 131.669792][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.897325][ T39] audit: type=1400 audit(1733782739.559:42553): avc: denied { accept } for pid=9187 comm="syz.2.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 132.194215][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.200273][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.205916][ T64] bond0 (unregistering): Released all slaves [ 132.425345][ T39] audit: type=1400 audit(1733782740.079:42554): avc: denied { setattr } for pid=9199 comm="syz.3.817" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 132.434332][ T39] audit: type=1400 audit(1733782740.089:42555): avc: denied { map } for pid=9199 comm="syz.3.817" path="socket:[33874]" dev="sockfs" ino=33874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.441473][ T39] audit: type=1400 audit(1733782740.089:42556): avc: denied { read } for pid=9199 comm="syz.3.817" path="socket:[33874]" dev="sockfs" ino=33874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.451242][ T39] audit: type=1400 audit(1733782740.099:42557): avc: denied { bind } for pid=9199 comm="syz.3.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.518535][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.859007][ T64] hsr_slave_0: left promiscuous mode [ 132.861155][ T64] hsr_slave_1: left promiscuous mode [ 132.863230][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.865219][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.868778][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.870796][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.893757][ T64] veth1_macvtap: left promiscuous mode [ 132.895262][ T64] veth0_macvtap: left promiscuous mode [ 132.896756][ T64] veth1_vlan: left promiscuous mode [ 132.898545][ T64] veth0_vlan: left promiscuous mode [ 132.937303][ T5944] Bluetooth: hci2: command tx timeout [ 133.762281][ T39] audit: type=1400 audit(1733782741.419:42558): avc: denied { ioctl } for pid=9221 comm="syz.2.824" path="socket:[33210]" dev="sockfs" ino=33210 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 133.977003][ T64] team0 (unregistering): Port device team_slave_1 removed [ 134.078290][ T64] team0 (unregistering): Port device team_slave_0 removed [ 134.997539][ T5944] Bluetooth: hci2: command tx timeout [ 135.115498][ T9158] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 135.130196][ T9158] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 135.145179][ T9158] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 135.154768][ T9158] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 135.268876][ T9158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.286381][ T9158] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.294718][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.297391][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.308276][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.311186][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.320653][ T9276] overlayfs: failed to resolve './file1': -2 [ 135.355452][ T9282] xt_hashlimit: size too large, truncated to 1048576 [ 135.413090][ T39] audit: type=1326 audit(1733782743.069:42559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.2.839" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2012b7ff19 code=0x0 [ 135.440070][ T9158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.458258][ T9158] veth0_vlan: entered promiscuous mode [ 135.462647][ T9158] veth1_vlan: entered promiscuous mode [ 135.475288][ T9158] veth0_macvtap: entered promiscuous mode [ 135.479918][ T9158] veth1_macvtap: entered promiscuous mode [ 135.488375][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.491958][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.494860][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.497834][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.501894][ T9158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.509072][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.511980][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.515097][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.518272][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.522222][ T9158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.526493][ T9158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.530974][ T9158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.533294][ T9158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.535623][ T9158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.571290][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.577084][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.591097][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.593609][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.361696][ T9305] gfs2: not a GFS2 filesystem [ 136.494695][ T9308] mkiss: ax0: crc mode is auto. [ 136.691310][ T39] audit: type=1400 audit(1733782744.349:42560): avc: denied { connect } for pid=9318 comm="syz.2.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 136.958337][ T9324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.852'. [ 137.427974][ T39] audit: type=1400 audit(1733782745.089:42561): avc: denied { ioctl } for pid=9337 comm="syz.3.857" path="socket:[35087]" dev="sockfs" ino=35087 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 137.543256][ T9349] team0: Cannot enslave team device to itself [ 137.576793][ T39] audit: type=1400 audit(1733782745.229:42562): avc: denied { connect } for pid=9346 comm="syz.2.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.609677][ T39] audit: type=1326 audit(1733782745.269:42563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9352 comm="syz.2.861" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2012b7ff19 code=0x0 [ 137.775643][ T9365] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 137.782226][ T64] Bluetooth: hci2: Frame reassembly failed (-84) [ 137.878273][ T9370] netlink: 'syz.0.866': attribute type 8 has an invalid length. [ 137.881502][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'. [ 137.901558][ T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.172412][ T39] audit: type=1400 audit(1733782746.829:42564): avc: denied { ioctl } for pid=9373 comm="syz.0.867" path="socket:[35121]" dev="sockfs" ino=35121 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.172653][ T9375] netlink: 'syz.0.867': attribute type 20 has an invalid length. [ 139.192409][ T9375] netlink: 'syz.0.867': attribute type 7 has an invalid length. [ 139.195552][ T9375] netlink: 244 bytes leftover after parsing attributes in process `syz.0.867'. [ 139.265661][ T5953] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.270961][ T5953] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.277469][ T5953] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.282955][ T5953] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.286829][ T5953] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 139.297666][ T5953] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.383948][ T39] audit: type=1400 audit(1733782747.039:42565): avc: denied { map } for pid=9374 comm="syz.2.868" path="/proc/949/task/950/loginuid" dev="proc" ino=34525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 139.423131][ T9379] chnl_net:caif_netlink_parms(): no params data found [ 139.504043][ T9379] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.506265][ T9379] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.509259][ T9379] bridge_slave_0: entered allmulticast mode [ 139.511443][ T9379] bridge_slave_0: entered promiscuous mode [ 139.514275][ T9379] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.516620][ T9379] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.519558][ T9379] bridge_slave_1: entered allmulticast mode [ 139.521844][ T9379] bridge_slave_1: entered promiscuous mode [ 139.545983][ T9379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.550331][ T9379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.589840][ T9379] team0: Port device team_slave_0 added [ 139.593562][ T9379] team0: Port device team_slave_1 added [ 139.621676][ T9379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.624233][ T9379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.631435][ T9379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.635079][ T9379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.636889][ T9379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.647234][ T9379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.678527][ T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.721882][ T9379] hsr_slave_0: entered promiscuous mode [ 139.724632][ T9379] hsr_slave_1: entered promiscuous mode [ 139.727665][ T9379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.730384][ T9379] Cannot create hsr debugfs directory [ 139.798323][ T5953] Bluetooth: hci2: command 0x1003 tx timeout [ 139.801984][ T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.802634][ T5944] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 139.938511][ T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.988279][ T39] audit: type=1400 audit(1733782747.649:42566): avc: denied { read write } for pid=9408 comm="syz.0.876" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 139.997310][ T39] audit: type=1400 audit(1733782747.649:42567): avc: denied { open } for pid=9408 comm="syz.0.876" path="/243/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 140.115018][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.880'. [ 140.121808][ T64] bridge_slave_1: left allmulticast mode [ 140.125798][ T64] bridge_slave_1: left promiscuous mode [ 140.137581][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.159147][ T64] bridge_slave_0: left allmulticast mode [ 140.160980][ T64] bridge_slave_0: left promiscuous mode [ 140.162563][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.177841][ T9430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.181341][ T9430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.270140][ T39] audit: type=1400 audit(1733782747.929:42568): avc: denied { create } for pid=9431 comm="syz.0.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 140.282976][ T39] audit: type=1400 audit(1733782747.939:42569): avc: denied { bind } for pid=9431 comm="syz.0.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 140.297555][ T39] audit: type=1400 audit(1733782747.939:42570): avc: denied { setopt } for pid=9431 comm="syz.0.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 140.417271][ T69] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 140.432709][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.885'. [ 140.484268][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.885'. [ 140.542799][ T39] audit: type=1400 audit(1733782748.199:42571): avc: denied { getopt } for pid=9439 comm="syz.0.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.570021][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.575451][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.581778][ T64] bond0 (unregistering): Released all slaves [ 140.590575][ T69] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 140.593657][ T69] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.601065][ T69] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.604662][ T69] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 140.609061][ T69] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.614016][ T69] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.617528][ T69] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.631460][ T69] usb 7-1: config 0 descriptor?? [ 140.633282][ T9429] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 140.792129][ T9461] loop5: detected capacity change from 0 to 9 [ 140.798832][ T9457] ------------[ cut here ]------------ [ 140.800671][ T9461] buffer_io_error: 62 callbacks suppressed [ 140.800687][ T9461] Buffer I/O error on dev loop5, logical block 1, async page read [ 140.801247][ T9457] WARNING: CPU: 0 PID: 9457 at drivers/net/wireless/virtual/mac80211_hwsim.c:1445 mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 140.803360][ T9461] Dev loop5: unable to read RDB block 8 [ 140.805533][ T9457] Modules linked in: [ 140.805547][ T9457] CPU: 0 UID: 0 PID: 9457 Comm: syz.3.888 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 140.812546][ T9461] loop5: unable to read partition table [ 140.812590][ T9457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.816236][ T9461] loop5: partition table beyond EOD, SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 140.819957][ T9457] RIP: 0010:mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 140.821891][ T9461] truncated [ 140.824745][ T9457] Code: 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 3f 02 00 00 0f b7 6b 04 31 ff 44 09 fd 89 ee e8 1a 9f da fa 85 ed 75 09 e8 d1 9c da fa 90 <0f> 0b 90 e8 c8 9c da fa 31 ff 44 89 f6 e8 fe 9e da fa 45 85 f6 75 [ 140.826727][ T9461] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 140.826727][ T9461] ) failed (rc=-5) [ 140.829048][ T9457] RSP: 0018:ffffc90003d8f768 EFLAGS: 00010287 [ 140.829065][ T9457] RAX: 000000000000b81e RBX: ffff88804e9dae32 RCX: ffffc90026f83000 [ 140.829074][ T9457] RDX: 0000000000080000 RSI: ffffffff86bf66af RDI: 0000000000000005 [ 140.829082][ T9457] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 140.829089][ T9457] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880466130a0 [ 140.829097][ T9457] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 140.829105][ T9457] FS: 00007ff59fb196c0(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 140.834597][ T9461] Buffer I/O error on dev loop5, logical block 1, async page read [ 140.838041][ T9457] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.838065][ T9457] CR2: 00007ff59ed65cc0 CR3: 00000000269c6000 CR4: 0000000000352ef0 [ 140.838080][ T9457] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 140.838092][ T9457] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 140.838105][ T9457] Call Trace: [ 140.838113][ T9457] [ 140.838128][ T9457] ? __warn+0xea/0x3c0 [ 140.838153][ T9457] ? mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 140.838178][ T9457] ? report_bug+0x3c0/0x580 [ 140.845303][ T9461] Buffer I/O error on dev loop5, logical block 1, async page read [ 140.845359][ T9457] ? handle_bug+0x54/0xa0 [ 140.890316][ T9457] ? exc_invalid_op+0x17/0x50 [ 140.891585][ T9457] ? asm_exc_invalid_op+0x1a/0x20 [ 140.893143][ T9457] ? mac80211_hwsim_config_mac_nl.isra.0+0xdf/0x330 [ 140.894905][ T9457] ? mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 140.897115][ T9457] ? mac80211_hwsim_config_mac_nl.isra.0+0xdf/0x330 [ 140.899871][ T9457] mac80211_hwsim_add_interface+0x2d6/0x370 [ 140.901600][ T9457] drv_add_interface+0x1b4/0x970 [ 140.902811][ T69] usbhid 7-1:0.0: can't add hid device: -71 [ 140.902974][ T9457] ? ieee80211_set_sdata_offload_flags+0x213/0x480 [ 140.904545][ T69] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 140.906910][ T9457] ieee80211_do_open+0x127f/0x1e80 [ 140.910800][ T69] usb 7-1: USB disconnect, device number 7 [ 140.911405][ T9457] ieee80211_open+0x18a/0x260 [ 140.914734][ T9457] ? __pfx_ieee80211_open+0x10/0x10 [ 140.916322][ T9457] __dev_open+0x2d4/0x4e0 [ 140.917951][ T9457] ? __pfx___dev_open+0x10/0x10 [ 140.919426][ T9457] ? __local_bh_enable_ip+0xa4/0x120 [ 140.920971][ T9457] __dev_change_flags+0x561/0x720 [ 140.922434][ T9457] ? __pfx___dev_change_flags+0x10/0x10 [ 140.924081][ T9457] dev_change_flags+0x8f/0x160 [ 140.925516][ T9457] devinet_ioctl+0x11d9/0x1f50 [ 140.926904][ T9457] ? __pfx_devinet_ioctl+0x10/0x10 [ 140.928506][ T9457] ? _copy_from_user+0x59/0xd0 [ 140.929807][ T9457] inet_ioctl+0x3aa/0x3f0 [ 140.931087][ T9457] ? __pfx_inet_ioctl+0x10/0x10 [ 140.932414][ T9457] ? __pfx_lock_release+0x10/0x10 [ 140.933777][ T9457] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.935414][ T9457] sock_do_ioctl+0x116/0x280 [ 140.936702][ T9457] ? __pfx_sock_do_ioctl+0x10/0x10 [ 140.938716][ T9457] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 140.940747][ T9457] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 140.942491][ T9457] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 140.944319][ T9457] sock_ioctl+0x228/0x6c0 [ 140.945498][ T9457] ? __pfx_sock_ioctl+0x10/0x10 [ 140.946884][ T9457] ? selinux_file_ioctl+0x180/0x270 [ 140.948426][ T9457] ? selinux_file_ioctl+0xb4/0x270 [ 140.949867][ T9457] ? __pfx_sock_ioctl+0x10/0x10 [ 140.951196][ T9457] __x64_sys_ioctl+0x190/0x200 [ 140.952551][ T9457] do_syscall_64+0xcd/0x250 [ 140.953783][ T9457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.955371][ T9457] RIP: 0033:0x7ff59ed7fb1b [ 140.956580][ T9457] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 140.962619][ T9457] RSP: 002b:00007ff59fb17e80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.964947][ T9457] RAX: ffffffffffffffda RBX: 00007ff59fb17fa0 RCX: 00007ff59ed7fb1b [ 140.968120][ T9457] RDX: 00007ff59fb17f00 RSI: 0000000000008914 RDI: 0000000000000008 [ 140.971672][ T9457] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 140.974960][ T9457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 140.977960][ T9457] R13: 0000000000000048 R14: 00007ff59fb17fc0 R15: 00007ff59fb17f00 [ 140.980885][ T9457] [ 140.982056][ T9457] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 140.984731][ T9457] CPU: 0 UID: 0 PID: 9457 Comm: syz.3.888 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 140.988741][ T9457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.992765][ T9457] Call Trace: [ 140.993887][ T9457] [ 140.994886][ T9457] dump_stack_lvl+0x3d/0x1f0 [ 140.996674][ T9457] panic+0x71d/0x800 [ 140.998383][ T9457] ? __pfx_panic+0x10/0x10 [ 140.999969][ T9457] ? show_trace_log_lvl+0x29d/0x3d0 [ 141.001849][ T9457] ? mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 141.004133][ T9457] check_panic_on_warn+0xab/0xb0 [ 141.005888][ T9457] __warn+0xf6/0x3c0 [ 141.007316][ T9457] ? mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 141.009673][ T9457] report_bug+0x3c0/0x580 [ 141.011229][ T9457] handle_bug+0x54/0xa0 [ 141.012763][ T9457] exc_invalid_op+0x17/0x50 [ 141.014405][ T9457] asm_exc_invalid_op+0x1a/0x20 [ 141.016094][ T9457] RIP: 0010:mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 141.018671][ T9457] Code: 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 3f 02 00 00 0f b7 6b 04 31 ff 44 09 fd 89 ee e8 1a 9f da fa 85 ed 75 09 e8 d1 9c da fa 90 <0f> 0b 90 e8 c8 9c da fa 31 ff 44 89 f6 e8 fe 9e da fa 45 85 f6 75 [ 141.025436][ T9457] RSP: 0018:ffffc90003d8f768 EFLAGS: 00010287 [ 141.027635][ T9457] RAX: 000000000000b81e RBX: ffff88804e9dae32 RCX: ffffc90026f83000 [ 141.030451][ T9457] RDX: 0000000000080000 RSI: ffffffff86bf66af RDI: 0000000000000005 [ 141.033258][ T9457] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 141.035976][ T9457] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880466130a0 [ 141.038714][ T9457] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 141.041428][ T9457] ? mac80211_hwsim_config_mac_nl.isra.0+0xdf/0x330 [ 141.043644][ T9457] ? mac80211_hwsim_config_mac_nl.isra.0+0xdf/0x330 [ 141.045904][ T9457] mac80211_hwsim_add_interface+0x2d6/0x370 [ 141.048001][ T9457] drv_add_interface+0x1b4/0x970 [ 141.049782][ T9457] ? ieee80211_set_sdata_offload_flags+0x213/0x480 [ 141.052067][ T9457] ieee80211_do_open+0x127f/0x1e80 [ 141.053912][ T9457] ieee80211_open+0x18a/0x260 [ 141.055599][ T9457] ? __pfx_ieee80211_open+0x10/0x10 [ 141.057476][ T9457] __dev_open+0x2d4/0x4e0 [ 141.059047][ T9457] ? __pfx___dev_open+0x10/0x10 [ 141.060782][ T9457] ? __local_bh_enable_ip+0xa4/0x120 [ 141.062566][ T9457] __dev_change_flags+0x561/0x720 [ 141.064295][ T9457] ? __pfx___dev_change_flags+0x10/0x10 [ 141.066246][ T9457] dev_change_flags+0x8f/0x160 [ 141.067980][ T9457] devinet_ioctl+0x11d9/0x1f50 [ 141.069685][ T9457] ? __pfx_devinet_ioctl+0x10/0x10 [ 141.072196][ T9457] ? _copy_from_user+0x59/0xd0 [ 141.074357][ T9457] inet_ioctl+0x3aa/0x3f0 [ 141.075958][ T9457] ? __pfx_inet_ioctl+0x10/0x10 [ 141.077923][ T9457] ? __pfx_lock_release+0x10/0x10 [ 141.080022][ T9457] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 141.082192][ T9457] sock_do_ioctl+0x116/0x280 [ 141.083923][ T9457] ? __pfx_sock_do_ioctl+0x10/0x10 [ 141.085760][ T9457] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 141.088685][ T9457] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 141.091502][ T9457] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 141.094067][ T9457] sock_ioctl+0x228/0x6c0 [ 141.095699][ T9457] ? __pfx_sock_ioctl+0x10/0x10 [ 141.097549][ T9457] ? selinux_file_ioctl+0x180/0x270 [ 141.099652][ T9457] ? selinux_file_ioctl+0xb4/0x270 [ 141.101607][ T9457] ? __pfx_sock_ioctl+0x10/0x10 [ 141.103450][ T9457] __x64_sys_ioctl+0x190/0x200 [ 141.105275][ T9457] do_syscall_64+0xcd/0x250 [ 141.106990][ T9457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.109241][ T9457] RIP: 0033:0x7ff59ed7fb1b [ 141.110996][ T9457] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 141.119089][ T9457] RSP: 002b:00007ff59fb17e80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.122211][ T9457] RAX: ffffffffffffffda RBX: 00007ff59fb17fa0 RCX: 00007ff59ed7fb1b [ 141.125180][ T9457] RDX: 00007ff59fb17f00 RSI: 0000000000008914 RDI: 0000000000000008 [ 141.128130][ T9457] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 141.131006][ T9457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 141.134214][ T9457] R13: 0000000000000048 R14: 00007ff59fb17fc0 R15: 00007ff59fb17f00 [ 141.138099][ T9457] [ 141.140233][ T9457] Kernel Offset: disabled [ 141.142005][ T9457] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:19:08 Registers: info registers vcpu 0 CPU#0 RAX=0000000000069a00 RBX=0000000000000062 RCX=ffffc90026f83000 RDX=0000000000080000 RSI=ffffffff8179b356 RDI=0000000000000001 RBP=1ffff920007b1e84 RSP=ffffc90003d8f408 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000002 R12=0000000000000001 R13=0000000000000200 R14=ffff88802fbe8000 R15=ffffc90003d8f4f8 RIP=ffffffff819a03e2 RFL=00010087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007ff59fb196c0 ffffffff 00c01300 GS =0000 ffff88806a600000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff59ed65cc0 CR3=00000000269c6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffffe0 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff59edf4c42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff59edf4c4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff59edf4c49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff59edf4c5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff59edf4ce3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff59edf4dc1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff59ef1a488 00007ff59ef1a480 00007ff59ef1a478 00007ff59ef1a450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000316e616c77 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88806a737f68 RCX=ffffffff81a1b225 RDX=0000000000000000 RSI=ffffffff8bd1d200 RDI=ffffffff8da74be8 RBP=0000000000000001 RSP=ffffc9000311f240 R8 =0000000000000000 R9 =fffffbfff20be2ba R10=ffffffff905f15d7 R11=0000000000000001 R12=ffffffff9aa112a8 R13=0000000000000fcd R14=0000000000000000 R15=ffff888055c49000 RIP=ffffffff817f8e40 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc7de677d60 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7ddb1a6a3 00007fc7ddb1a6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4cd01cf0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556ef19137 000055556ef18fd0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556ef817b4 000055556ef811c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556ef10840 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556ef108c0 000055556ef10880 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003001000148004 0100000808061380 040100000c08060a 0134940030656c69 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100000040210 000100000e080608 012a8e0100000a08 0610030681f01000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000306100003ffff ffff040100000e08 060100000e080608 0135aa0004000800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040e4fe000332f64 6601ffffffffffff fffff50800030010 0014800401000008 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0806138004010000 0c08060a01349400 30656c69662f2e01 ffffffffffffffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851b9525 RDI=ffffffff9ab0ac20 RBP=ffffffff9ab0abe0 RSP=ffffc90004777480 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000005 R12=0000000000000000 R13=0000000000000037 R14=ffffffff851b94c0 R15=0000000000000000 RIP=ffffffff851b954f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f525ba406c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020003000 CR3=000000002afb0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd97e08340 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2012bf4c42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2012bf4c4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2012bf4c49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2012bf4c5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2012bf4ce3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2012bf4dc1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001157ed RBX=0000000000000003 RCX=ffffffff8b28e679 RDX=0000000000000000 RSI=ffffffff8b6cd860 RDI=ffffffff8bd1d280 RBP=ffffed1003ad4488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6a2440 R14=ffffffff905f15d0 R15=0000000000000000 RIP=ffffffff8b28fa5f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f07911ba440 CR3=000000004b59c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcec2727f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f525abf4c42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f525abf4c4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f525abf4c49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f525abf4c5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f525abf4ce3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f525abf4dc1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ac ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000ac ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000