last executing test programs: 42.610934178s ago: executing program 0 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r3, 0x1, 0x0, 0xffffffff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\b'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x804) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000100001000cbd8000fbdbdfa500000000", @ANYRES32=r6, @ANYBLOB="002e0a001162050034001280110001006272696467655f736c617665000000001c00058005001b"], 0x54}, 0x1, 0x0, 0x0, 0x8c041}, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c000000180001002cbd700000008000802000400004000500240000200010000600000008000f0002000000080010000800000008001900", @ANYRES32, @ANYBLOB="08001e000700000008000300", @ANYRES32=r11], 0x5c}, 0x1, 0x0, 0x0, 0x80040}, 0x4008000) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="080029bd7000fbdbdf2513000000580001801400020073797a6b616c6c657230000000000000080003000300000008000100", @ANYRES32=r6, @ANYBLOB="08000100f4630f6f2f6832d1e929d160c098bc89863236423a038d5b1874c00f9cbe428fdbba2bd0002b9f0c42e57a7f8ec6de71b3b0ad6b758a310b57aa", @ANYRES32=r11, @ANYBLOB="140002006970766c616e3100000000000000000014000200000000000000000000000000000000003c00018008000100", @ANYRES32=r7, @ANYBLOB="0800030000000000080003000100000008000100", @ANYRES32=r8, @ANYBLOB="0800030002000000080003000100000008000100", @ANYRES32=r11, @ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x56}, 0x4880) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r13 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r14, &(0x7f0000000240)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r14, &(0x7f0000005240), 0x4000095, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r13, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) r17 = ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x3) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000480)={{0x83, 0x9}, 0x100, './file0\x00'}) ioctl$KVM_GET_LAPIC(r17, 0x8400ae8e, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 40.755196952s ago: executing program 0 (id=54): lsm_get_self_attr(0x68, 0x0, &(0x7f0000001200), 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) (async) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000200)=[{'PHONEIN', @val={' \'', 'Mic Capture'}}, {'TREBLE', @val={' \'', 'Master Playback'}}, {'LINE3', @void}, {'OGAIN', @val={' \'', 'Synth Capture'}}, {'DIGITAL3', @void}, {'LINE', @val={' \'', 'Synth Capture Switch'}}], 0xc4) (async) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 40.754029029s ago: executing program 0 (id=55): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x4e23, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0x0, 0x4, {"3d0300"}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) 40.753374445s ago: executing program 0 (id=56): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e0095e5028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}}, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="2800000003063d010100000000000000000700000205000100070000000900020073797a3200000000"], 0x28}}, 0x4008800) fcntl$setlease(r3, 0x400, 0x1) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000240), &(0x7f0000000600)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='ufshcd_uic_command\x00', r5, 0x0, 0x4}, 0x18) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x89901) syz_emit_vhci(0x0, 0x7) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$IOMMU_DESTROY$ioas(r6, 0x3b80, &(0x7f0000000280)={0x8}) 39.861606206s ago: executing program 0 (id=63): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x1b, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x0, 0x3, 0x0, 0x7, 0x7, 0x100, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x56b, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0x5, 0x9, 0x4, 0x6, 0x1}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3ff}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x738efa88, 0x1000, &(0x7f0000000500)=""/4096, 0x40f00, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2, 0xb, 0xbb4, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x1, 0xffffffffffffffff], &(0x7f0000000280)=[{0x1, 0x5, 0x3, 0x7}, {0x5, 0x4, 0x8, 0x2}, {0x2, 0x3, 0x4b4, 0xb}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001500)={@cgroup, 0xb, 0x1, 0x7ff, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001580)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000017c0)=@bpf_lsm={0x1d, 0xe, &(0x7f00000015c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0x46}, @ldst={0x3, 0x0, 0x2, 0x9, 0x0, 0x80, 0x4}, @jmp={0x5, 0x1, 0x4, 0x2, 0x3, 0xffffffffffffffe0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0xc, 0x4, 0xb, 0x30, 0x10}, @generic={0x3f, 0x3, 0x5, 0x3ff, 0x3}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}], &(0x7f0000001640)='GPL\x00', 0x2b, 0x8f, &(0x7f0000001680)=""/143, 0x41100, 0x40, '\x00', 0x0, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001740)={0x4, 0xe, 0x3, 0x1000}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001780)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0xd964}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001540)={@cgroup=r5, r2, 0x26, 0x8, r3, @void, @value=r6, @void, @void, r4}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100037040000000000000000000000000f16407202000000a1a8488ce0a990bb5488c17675da9d2eaa74b509775382d681eb9b6c7a299c7857e7e3365012a870133d45bf7fe12fcf23795b6c70a495c604f7e7144bfcff548638de449b7d0c87f66c0200000000000000d312d02633f09f", @ANYRES32=0x0, @ANYBLOB="a9040500000000001c0012800b00010069703667726500000c0002800800040001000100080004000e000000"], 0x44}}, 0x20008050) 38.871451893s ago: executing program 0 (id=66): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x98000004, 0x0}, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa}]}, @struct={0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) socket(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c001000000fae0090f000000000000a2bc5603ca0000327f89000000200000004a2c71083e09001778581acb6c0101ff0000000309", 0x48}], 0x1) syz_emit_ethernet(0xf6, &(0x7f0000000280)={@local, @remote, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@generic={0x6007, "05fce343ace91d5312d5ceaf1d49d007565c953cbf148549cc7b2d583f1267a01387902ff97423c4fa9b3124376b5acce78429ac0fb5a761f890e2559898ec42f3b1c16d1838f76347c39e9bc9d47321d49b319f82fac7445575b8c103d4304400da2a709edd478515320a9deb96b972451105327c81d49528bdd9f65b128c41415eaff70eb273db82c3bd3a40a9e3391920b5bf84b4b9d2aa7a860bf18fb612baaa4839f6387330e0a06a5eac04214d320102d96d2caf81ed1658933d95cf4a489e203a080d82eaa785318aee96a1a782ee7613a268934dea8734362d67402a89b6d283"}}}, 0x0) 38.871067743s ago: executing program 32 (id=66): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x98000004, 0x0}, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa}]}, @struct={0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) socket(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c001000000fae0090f000000000000a2bc5603ca0000327f89000000200000004a2c71083e09001778581acb6c0101ff0000000309", 0x48}], 0x1) syz_emit_ethernet(0xf6, &(0x7f0000000280)={@local, @remote, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@generic={0x6007, "05fce343ace91d5312d5ceaf1d49d007565c953cbf148549cc7b2d583f1267a01387902ff97423c4fa9b3124376b5acce78429ac0fb5a761f890e2559898ec42f3b1c16d1838f76347c39e9bc9d47321d49b319f82fac7445575b8c103d4304400da2a709edd478515320a9deb96b972451105327c81d49528bdd9f65b128c41415eaff70eb273db82c3bd3a40a9e3391920b5bf84b4b9d2aa7a860bf18fb612baaa4839f6387330e0a06a5eac04214d320102d96d2caf81ed1658933d95cf4a489e203a080d82eaa785318aee96a1a782ee7613a268934dea8734362d67402a89b6d283"}}}, 0x0) 5.772492835s ago: executing program 3 (id=690): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) (async) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00'}) (async) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K\x00\x00\x00\x00\x00\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) (async) r5 = socket(0x11, 0x3, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0x700}, 0x0) (async) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) (async) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) (async) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r10 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) userfaultfd(0x1) (async) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) 5.753968722s ago: executing program 3 (id=691): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)={'b', ' *:* ', 'rm\x00'}, 0x9) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) unshare(0x64000600) 3.125464334s ago: executing program 3 (id=741): prctl$PR_SVE_SET_VL(0x32, 0x1e8a8) prctl$PR_SVE_SET_VL(0x32, 0x9d22) (async) prctl$PR_SVE_SET_VL(0x32, 0x9d22) prctl$PR_SVE_SET_VL(0x32, 0x2cec7) prctl$PR_SVE_SET_VL(0x32, 0x1e07) prctl$PR_SVE_SET_VL(0x32, 0x1ce8c) prctl$PR_SVE_SET_VL(0x32, 0x99a2) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x7, 0x0, 0x4, 0x1000, 0x80, {0x0, 0x2710}, {0x5, 0xc, 0x2, 0x8, 0x29, 0x6, "53dce137"}, 0x1, 0x4, {0xffffffffffffffff}, 0xf5}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_fd={0x2, 0x1, 0x4, 0x800, 0x1, {}, {0x1, 0x8, 0x1, 0xb2, 0x3, 0x3, "d59be787"}, 0x80000000, 0x4, {&(0x7f00000000c0)=[{0x542a, 0x3, {r0}, 0x3}, {0x2, 0x200, {r1}, 0x140}]}, 0x4, 0x0, r2}) prctl$PR_SVE_SET_VL(0x32, 0x2e78b) (async) prctl$PR_SVE_SET_VL(0x32, 0x2e78b) prctl$PR_SVE_SET_VL(0x32, 0xbb7) prctl$PR_SVE_SET_VL(0x32, 0x32445) prctl$PR_SVE_SET_VL(0x32, 0x6125) write$sndseq(r0, &(0x7f0000000240)=[{0x7, 0x0, 0x8, 0x7, @tick=0x3, {0x3, 0x6}, {0x3, 0x23}, @control={0x4, 0x1, 0xfffffb79}}, {0x8, 0x7, 0x9, 0x6, @tick=0xfffffff7, {0x2, 0x3}, {0x0, 0x5}, @control={0x5, 0x6, 0xa2}}, {0x9, 0x5f, 0x8, 0x80, @time={0xfffff819, 0xfffffffe}, {0x8}, {0xc, 0x4}, @addr={0x2, 0x2}}, {0x6, 0x6, 0x3, 0x9, @time={0x1}, {0x10}, {0xff, 0x1}, @note={0xa9, 0x7, 0xb, 0x0, 0x9}}, {0x87, 0x5, 0x80, 0x7, @time={0x7fff, 0xfff}, {0x6, 0x6}, {0x3, 0x8}, @result={0x6, 0x7}}, {0x8, 0x8, 0x0, 0x9, @time={0xfc, 0xca}, {0x7, 0x8}, {0x4, 0x2}, @quote={{0xf, 0x8d}, 0x1, &(0x7f0000000200)={0x4, 0x2, 0xf2, 0x6, @time={0xfec, 0xfffffff8}, {0x6a, 0x9}, {0x7, 0x5}, @quote={{0x6, 0x73}, 0x9}}}}], 0xa8) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00'}) prctl$PR_SVE_SET_VL(0x32, 0x3285b) (async) prctl$PR_SVE_SET_VL(0x32, 0x3285b) prctl$PR_SVE_SET_VL(0x32, 0x26adc) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f00000003c0)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000004c0)={0x28, 0x4, r5, r6, 0x0, 0x0, 0x0, 0x8d, &(0x7f0000000400)="d8283e12457b90e2bef0e444fcbd32c4a0367456dc6eed987a9f3824bad1fda2d17cf8b0ab0e887bca46d8dea689648652790d97c8012cf085a5e8830b99aed828020e57ab5e358e7efc9f13889880b6c3ae00f9f1734eb6c2128ea850726880127899d3f4cfedb04b37cc519512bfc16243d214fcdec0f3c0b6a8bd527c86def3cdf9381798f873d01031a23c"}) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000004c0)={0x28, 0x4, r5, r6, 0x0, 0x0, 0x0, 0x8d, &(0x7f0000000400)="d8283e12457b90e2bef0e444fcbd32c4a0367456dc6eed987a9f3824bad1fda2d17cf8b0ab0e887bca46d8dea689648652790d97c8012cf085a5e8830b99aed828020e57ab5e358e7efc9f13889880b6c3ae00f9f1734eb6c2128ea850726880127899d3f4cfedb04b37cc519512bfc16243d214fcdec0f3c0b6a8bd527c86def3cdf9381798f873d01031a23c"}) writev(r3, &(0x7f0000000a80)=[{&(0x7f0000000500)="291e65daebf4d4f03f4bd2c9a3e3ecc00004a5ab33b267b12295f511e19ab9cb8cfb715d9a0f92da5e2019f7e96840d5e3f606b72733e657c512414055a1fb41dc8451fe078aee43d5e51a2fed8f24bc5caa8b2de5e1d5722522f280bc75ac85ed7c388dc9a6a5dbe084427115e1df9ed988159f701fe8917102cc4312dcecbd34b96885837cf2a508102ea1babb34d7fa610725cc5ef4418e2eed589eda4fb59a1545b416b3a1909ce2951934112704d78211fb9b2af9a15162333871ea7b52351a6964f6c96024bdcb9eae5d4e", 0xce}, {&(0x7f0000000600)="cbdf74eb9124742be0e42fd92a7b7fdaa61a319294ee4df389f86046e957af12be37f5b42c35dd93f3a4cfad6f43e0ab547027b0741c764f42bceb6a8067110ac2b9df0648bb068c70cd022c59f7adfaade79186b2d08a31886095e9b059835e0a00f8a44fd8a409199658fd5b88fcac9fbb3c6f41d800f1be744004434bca43748225ccad440119ee5c", 0x8a}, {&(0x7f00000006c0)="278a556ecbbf3eacca03b86c1a85a18a1883df5a5e762d48171abd2d56f7a8e36f91d1475ce2fd5007af071cca7e1d2f08df02e67ff885b217ec5a9a89ac8439d473653f3b8ce3c382ce0730a12c788a97146cdc3c5b1c60fd94fd14fbedcf654cc091afaa500ee0a58a831052177d6da7ae16d550debad3374dbc386bd7d3182022115c48d824979faceff526bc0e7fb4df052d1f28c85a961b3e792fe1e4528206873ac1454d", 0xa7}, {&(0x7f0000000780)="6c11ef43e23608c4976e027120a2e86b2d12544a94bbf3cf911d3b52b2fa17a9b6d7a89953c16bb76f5df1baa68290907df13f09533c2cdf6151d7fa30bbe8d018da2ac8fb391de517a8d0ed971233c00780f31536c01275e8a94e6d19a19d844debb8009d0c68278ffa", 0x6a}, {&(0x7f0000000800)="a65eec98ae7efc1f5b56a57e50b8f886bf23753ad7253f5fe9b95288d7ff8315e3a7ccc2495c20201871e46354e4878374f6ecd275c9773ca8f5301ef16c206db835a7f1fab15da1240f8490a56a0601c23bdd193f8611cfaf032549a64f1a6ff771168c505365f36a2bdc687f5bd45bac78", 0x72}, {&(0x7f0000000880)="d9269308f01a831981143719d92edbdc4ec4975e344ef54be236db6aeb33fed39263f20b565a8899365c6f4601dccc9f4a602e5e883dde01d3f93a80c6a636cbc1b299b82a7e9b719126e4d76e43899b0782c4cf41465d898e834f95d0841a765285f3abeb3f9e99468b2665997bc4bca9d8383e1ac83988d08062b4898302c36b5d969ed11d37a18854b5d5a72af41aeee45a94ba62d5778ba0b142318f75f94468ad78deb4af7f495c485e642c8fd02f239be8e565f143146ec5eee3998b368a61646ce2b459e67ab134c8760fdb2f2ee91e63334b9fe9b0abcd38bcee140c7f53e7baa8eedfee1b974e", 0xeb}, {&(0x7f0000000980)="0b6f362ef53e40d46da5894c6a77a7793356ce7094fc492dc3e778e1877299d3d9e8975d5f677c5659bfa565d7b9e7e05e7c08c74f2e72a12b31a6fe96d8ffe848f9c061c83ecce70a33ea453c15d084ec1fb7c7ced60c9f132fdf8dcc71ce82dea1a294cbb9db3bdae349b6be84835d38af58150278af47747db257dee5b00efd4a5737d875b1737a5fdf94ebb0d0058db3008b0e4003b2373cf9f0224b1fb695570e00188a6e633a73f43b4ecd7e5e029db442a6c54b29bfc632312341d3ae81b50397a5da584005867a7917302f7d06ba992a5db8cdfd0ec131ab80f9afeb197e4cc02176e1cb5da7539353d14cc3fb932fcbf6868ac345", 0xf9}], 0x7) (async) writev(r3, &(0x7f0000000a80)=[{&(0x7f0000000500)="291e65daebf4d4f03f4bd2c9a3e3ecc00004a5ab33b267b12295f511e19ab9cb8cfb715d9a0f92da5e2019f7e96840d5e3f606b72733e657c512414055a1fb41dc8451fe078aee43d5e51a2fed8f24bc5caa8b2de5e1d5722522f280bc75ac85ed7c388dc9a6a5dbe084427115e1df9ed988159f701fe8917102cc4312dcecbd34b96885837cf2a508102ea1babb34d7fa610725cc5ef4418e2eed589eda4fb59a1545b416b3a1909ce2951934112704d78211fb9b2af9a15162333871ea7b52351a6964f6c96024bdcb9eae5d4e", 0xce}, {&(0x7f0000000600)="cbdf74eb9124742be0e42fd92a7b7fdaa61a319294ee4df389f86046e957af12be37f5b42c35dd93f3a4cfad6f43e0ab547027b0741c764f42bceb6a8067110ac2b9df0648bb068c70cd022c59f7adfaade79186b2d08a31886095e9b059835e0a00f8a44fd8a409199658fd5b88fcac9fbb3c6f41d800f1be744004434bca43748225ccad440119ee5c", 0x8a}, {&(0x7f00000006c0)="278a556ecbbf3eacca03b86c1a85a18a1883df5a5e762d48171abd2d56f7a8e36f91d1475ce2fd5007af071cca7e1d2f08df02e67ff885b217ec5a9a89ac8439d473653f3b8ce3c382ce0730a12c788a97146cdc3c5b1c60fd94fd14fbedcf654cc091afaa500ee0a58a831052177d6da7ae16d550debad3374dbc386bd7d3182022115c48d824979faceff526bc0e7fb4df052d1f28c85a961b3e792fe1e4528206873ac1454d", 0xa7}, {&(0x7f0000000780)="6c11ef43e23608c4976e027120a2e86b2d12544a94bbf3cf911d3b52b2fa17a9b6d7a89953c16bb76f5df1baa68290907df13f09533c2cdf6151d7fa30bbe8d018da2ac8fb391de517a8d0ed971233c00780f31536c01275e8a94e6d19a19d844debb8009d0c68278ffa", 0x6a}, {&(0x7f0000000800)="a65eec98ae7efc1f5b56a57e50b8f886bf23753ad7253f5fe9b95288d7ff8315e3a7ccc2495c20201871e46354e4878374f6ecd275c9773ca8f5301ef16c206db835a7f1fab15da1240f8490a56a0601c23bdd193f8611cfaf032549a64f1a6ff771168c505365f36a2bdc687f5bd45bac78", 0x72}, {&(0x7f0000000880)="d9269308f01a831981143719d92edbdc4ec4975e344ef54be236db6aeb33fed39263f20b565a8899365c6f4601dccc9f4a602e5e883dde01d3f93a80c6a636cbc1b299b82a7e9b719126e4d76e43899b0782c4cf41465d898e834f95d0841a765285f3abeb3f9e99468b2665997bc4bca9d8383e1ac83988d08062b4898302c36b5d969ed11d37a18854b5d5a72af41aeee45a94ba62d5778ba0b142318f75f94468ad78deb4af7f495c485e642c8fd02f239be8e565f143146ec5eee3998b368a61646ce2b459e67ab134c8760fdb2f2ee91e63334b9fe9b0abcd38bcee140c7f53e7baa8eedfee1b974e", 0xeb}, {&(0x7f0000000980)="0b6f362ef53e40d46da5894c6a77a7793356ce7094fc492dc3e778e1877299d3d9e8975d5f677c5659bfa565d7b9e7e05e7c08c74f2e72a12b31a6fe96d8ffe848f9c061c83ecce70a33ea453c15d084ec1fb7c7ced60c9f132fdf8dcc71ce82dea1a294cbb9db3bdae349b6be84835d38af58150278af47747db257dee5b00efd4a5737d875b1737a5fdf94ebb0d0058db3008b0e4003b2373cf9f0224b1fb695570e00188a6e633a73f43b4ecd7e5e029db442a6c54b29bfc632312341d3ae81b50397a5da584005867a7917302f7d06ba992a5db8cdfd0ec131ab80f9afeb197e4cc02176e1cb5da7539353d14cc3fb932fcbf6868ac345", 0xf9}], 0x7) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000b00), 0x10280, 0x0) getsockopt$bt_hci(r7, 0x0, 0x2, &(0x7f0000000b40)=""/200, &(0x7f0000000c40)=0xc8) prctl$PR_SVE_SET_VL(0x32, 0x22a55) prctl$PR_SVE_SET_VL(0x32, 0x3c3fa) prctl$PR_SVE_SET_VL(0x32, 0x113b4) (async) prctl$PR_SVE_SET_VL(0x32, 0x113b4) prctl$PR_SVE_SET_VL(0x32, 0x3b82) (async) prctl$PR_SVE_SET_VL(0x32, 0x3b82) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 3.125227792s ago: executing program 3 (id=742): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='fd\x00') getdents64(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f000001f8c0)={@local, @broadcast, @void, {@ipv4={0x8864, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x21, 0x0, 0x6, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x22, &(0x7f0000000180)={@empty, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x37, 0x14, 0x67, 0x0, 0x7, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000000c0)=0xd9, &(0x7f0000000100)=0x4) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0x36) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x34, r9, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4d3}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1e}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x4) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xe8, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xd4, 0x2a, [@mic={0x8c, 0x18, {0xa57, "4d1984e2fd3d", @long="843ccacb339a203654c6b8090f82f265"}}, @perr={0x84, 0xa8, {0xe2, 0xa, [{{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x2c}, {{}, @broadcast, 0x80000000, @void, 0x37}, {{}, @device_a, 0x4, @void, 0x2b}, {{0x0, 0x1}, @broadcast, 0x1000, @value, 0x35}, {{0x0, 0x1}, @device_a, 0x6aae, @value=@device_b, 0x1e}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x15}, {{0x0, 0x1}, @broadcast, 0x871, @value=@device_b, 0x3a}, {{0x0, 0x1}, @broadcast, 0x4, @value=@broadcast, 0x2f}, {{}, @broadcast, 0x4, @void, 0xa}, {{}, @device_b, 0xc, @void, 0x20}]}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3, 0x21}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) ioctl$CDROMVOLCTRL(r0, 0x31f, &(0x7f0000000200)={0xa1, 0x6, 0x7}) 2.628691151s ago: executing program 3 (id=749): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103", @ANYRES8=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000100)) (async) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000100)) 2.57087781s ago: executing program 1 (id=751): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) (async) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x207, 0xa, 0x4}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x550}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x28c16562e159cd74}, 0x4) (async) ioctl$VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) 2.569464025s ago: executing program 1 (id=752): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x42, 0x8e, 0xd2, 0x40, 0x586, 0x102, 0x375a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0xff, 0x0, 0x0, 0x4d, 0xa5, 0xf5}}]}}]}}, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 64) r6 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) (rerun: 64) r7 = dup(r6) ioctl$SW_SYNC_IOC_INC(r7, 0x40045701, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01000000000000000000040000000800020005000000a006acc8a5d0f13416857bd0c1bdaa2e66815644a9d9891762424dff9dd87f3dccdd77afa6d1d0c4"], 0x1c}}, 0x0) (async, rerun: 32) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="ce67e87f", @ANYRES16=r9, @ANYBLOB="000128bd7000fcdbdf250100000008000700ac14143b08000c000200000006000b00270000000800020005000000"], 0x34}}, 0x10) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0xa, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2.391340775s ago: executing program 1 (id=753): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002340)=[{{&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f0000000480)=[{&(0x7f0000000100)=""/111, 0x6f}, {&(0x7f0000000180)=""/181, 0xb5}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000300)=""/199, 0xc7}, {&(0x7f0000000400)=""/112, 0x70}], 0x5, &(0x7f0000000580)=""/191, 0xbf}, 0x765}, {{&(0x7f0000000640)=@alg, 0x80, &(0x7f0000000240)=[{&(0x7f0000000740)=""/113, 0x71}, {&(0x7f00000007c0)=""/159, 0x9f}, {&(0x7f0000000880)=""/189, 0xbd}], 0x3, &(0x7f0000000940)=""/229, 0xe5}, 0x9}, {{&(0x7f0000000a40)=@nfc, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000ac0)=""/193, 0xc1}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/44, 0x2c}, {&(0x7f0000000bc0)=""/142, 0x8e}, {&(0x7f0000000c80)=""/110, 0x6e}, {&(0x7f00000006c0)=""/10, 0xa}, {&(0x7f0000001d40)=""/122, 0x7a}, {&(0x7f0000001dc0)=""/3, 0x3}], 0x8, &(0x7f0000001e80)=""/13, 0xd}, 0x8}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001ec0)=""/25, 0x19}, {&(0x7f0000001f00)=""/102, 0x66}, {&(0x7f0000001f80)=""/202, 0xca}], 0x3}, 0x1}, {{&(0x7f00000020c0)=@sco, 0x80, &(0x7f00000022c0)=[{&(0x7f0000002140)=""/31, 0x1f}, {&(0x7f0000002180)=""/55, 0x37}, {&(0x7f00000021c0)=""/227, 0xe3}], 0x3, &(0x7f0000002300)=""/43, 0x2b}, 0xf}], 0x5, 0x40000020, &(0x7f0000002480)={0x77359400}) execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000024c0)={'veth1\x00'}) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000480)=@overlay={0x4, 0x2, 0x4, 0x100000, 0x1, {0x77359400}, {0x1, 0x2, 0x2, 0x16, 0x2, 0x21, "6c7a280e"}, 0xaf1, 0x3, {}, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0) 2.379648948s ago: executing program 1 (id=755): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000240)=0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYRES64], 0xe8}, 0x1, 0x0, 0x0, 0xc001}, 0x4090) recvfrom$inet6(r1, &(0x7f00000000c0)=""/136, 0x88, 0x20, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYRESOCT], 0x7c}}, 0x80) r5 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r5, 0x0, 0x2a, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r6 = socket(0xa, 0x1, 0x84) dup3(r5, r6, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002ac1414bb0000000004"], 0x20) setsockopt$inet_group_source_req(r6, 0x0, 0x2c, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800034000000000080001400000400208000240000000060900010073797a30000000000900020073797a32"], 0x84}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="01a6b783ec72dab172aaaaaa88a8480081002600000c0600002000010000988a372b2accf44b"], 0x0) 1.536062088s ago: executing program 1 (id=767): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x0, 0x11}}, [@policy_type={0xa, 0x10, {0x521be6ad4a8be5e0}}]}, 0xc4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015) r4 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 1.471187786s ago: executing program 1 (id=768): syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xffffffffffffffff]}, 0x8, 0x0) read$FUSE(r0, &(0x7f0000001a00)={0x2020}, 0x2020) write$char_usb(r0, &(0x7f0000000480)="0dad60f122d4ebbc3889fe3df4b13751edf99cb3f348efa22024a277deaeaea5785193d6e42a622545706bb9b0c2b5f4fecfda83580f2627140bcf5c396591eb5db9e39f3c7fc0d99c6d0dd8da34be1a4b8f660747ffb6a359a22e7d817ddd4513956448521e97cfa75855277801e95ae959686c9ab93ebc59990879112648874ffea0a3d5a8a7569fedfca746816d01d7dc2e61f48e4e273d222a5780f5d77ba49d8048dff853a68e9a4d3271320b2c2ec3cc42b8672cc3276ac09844e5fc79a45a838149b3ec7d6ff476bf366e08586b019cdf5c17284018935cd709e65520cb83b7e31cdfe6857f7fb6f895fc6b7ccd650e53a1287254284c6e1b3b005e7875c04b428dc0d2154b2f5f639fe9bf5e5f330585a1e9887b8e471e959814bd801e7212c82337dfa0574042d5bebbcad6003667020ca009292b1c92d81f91a5ded3e8f56fbc2aba08f0b57a84c73a1d5d2cf545002914f542ca44428e578295943dbe53477c879b538ca219615c1a57a867e3c2c6a61d2ad29a3bd6ae5ca64418160040169c0e4abf35681e411b2099c9d1f0e55f59f5c247b65e97aed7541c441ff8f2f17a384f27e088e3d8747cabf3af9a40bdb467753ca745e8c1f634ecaa2a8570138788960415d547368a4c65efe8f84e2962f65749293eee5462271cec08705a82ad9ab05fb808a35789f556ab8ea92451e1e75c42ff82a4a7db117ac78aa25676e883052e9d29c0fb925137bb89bfdd9b3a24b30e04f702a4d198d698db802f8c6619745f6e9402120c9bdf2ce54475c5105d28e131321b3cacb2273f74f27656966dba94f0e24c1c7297fb2ebbaa3e74cf98a87f27c435a17b956e2b0a8ce668d415d12dcbc98236408fd4838eda7146906b2abc782f19f80f0bbfd0f9fbbaa6f10942704206f48670129a43e7f0839826c3355fca04c457a6ad0bf782b48f22de1ace5fb4c33772e2966e68d385003af130dba9c90f05645651c2bf8913e392db4b371d94fd6c61c2df8ed50493f20bccc545ef9e1d4e595dd2d4b5ee899b23d10a4cf63625e635d6cf29f3c936d14e11fbc1ee81e35f244d6171fa480ff2044a348eebdc4db515d9e73da88b56e40fde14472c995dc205e18fcbdb160d41274f27a123037ab73812d9f0419a785f8ba38f598df2cb6c0bf962bcabb09c2891a5f7e2a861e72ab138172ff4a58246187e09c2e3e15ffe881cd10f71ef07eccb35a1adf3af8628d58a3bf3ce5e101287525d905f75ea5e1a4bfd0ff3f5a1a2957e700c81fdbb04d7b4dae1c00761fdc747fa326e8cd4df141816f06e2cdc603fc3e0cb251545898c92c40a38ecc8b4b937d35c99a3f7518ff5782bac2627cd7cc28d84684be370617eadfa2aa34bda89af061ed1586babc90706f8a5d644aa8e1a17857a57bc5f6a79f69ba5a5d3e8f41994520255ced3be89f21448ecbc284c876022a27764bbd4a0f954209488cca66bc0703530c50eab49c691682efc6a6c9774195c02e0934c51477fb4d36436a41da670cb61f1cf19602fc6f8b2f4fa0c2654ee11959522f5014f0d4b55d4ee0a790239e22b068f06c2b2dfb996fcf92e9c83385f0da15a91d9548c9931cda227f0e8b0b2eab12bf96d61d3cf4e8e9c78a1c7bcfff477fd6bb62b29f5376a66b3f2a7513db418f7b08adb1a55b27db79435028f2351d9f051ab1445ac186a512fd86b60f2ea4ae6042201ef14c4d23189ce08012862252e911ec9fbb987986d5ee7ec4afd9765db806c3e7ef4255ef2cc92f27660d84df21cdba24adf9559ddd0515076507f1c14061885ed1e5a35f6c70fe7f307c68c41b654f85ae8ceecf71a7d6309ecb17cc9112663b9de33781ba8f2a2dd05329d26d08bd89c95fb20083731dd63b77a5039f11e26fc6d3d6e8808ae6a9da7f14826a5e989238f2f84420c08e74270f4f5b97057724a565a47d8393f08ed162fe01b69ed005b6a107a0bd743e4b0d1bcd0a63c20a52fa3a672f4f14e920cb32ca1ea3dd35da36d47ae1a4007fa54aeca6082f6cd72d7da915ffc0caad54fb325dfca2fc8b9d0bfd8f896369ef7e671824f610d22bb8535b3053687d0855e0f79121f714016cf4e25d75a84e75e687612c140798e2ebcf15a292deccef36e48b89b3d905a4efe8555232639c7c5600335b7610a32cc1176bcf599a0b01d758b9508a9a6ca22bddae70fee2d9a6b8197fe181c362e80a5810f9b68b9a701cb55cf22de48bf208d5d290e01caaf10743671de672ed7837d72daa5af224eb757bb73d9bbb3e7bacca2412563a19c006df276c506af97fdd10f4b57d0ca6c2a89b9d5b0ca5a69ac93dfdf27ed44f9b03d1edb3d8c652f7f6889677ae6a24c5c40b2b1501df883a0590308dc161198bf5d6da4fbbb4a6c9956556142bb4094f60cea44ed568446dbbd2caf8069760ee4b77ab9b5e58ce2a77366bcd12633b9d656f413dde03b62af54b702562c2670803749c1a40c8cd213e51edcc14ffb4ba35d5ced0f2cf6a5b823f45bc1dc209320312361af4cc76b74a3b0030db75b3c57e8b1dc26090c1f787829e00d25710b111060d67b0dcba7ba3782ad1999bd369c93e3bd2da93b0029392c1a7df950a6f2ff62baaba24b863e14b3bb1bda94bd25714d8463fa42d0216313ccb8760172c407d6d788dfd338d5d926d737ec73899007337fb77b5ba8f2e69ffb43714d2d76173b369ec2f0bd238ac657fad0e0e7d7b570bc020d173ecb1563a96fb1187faf14ba03eb413c1f7f0d967190e5c47c35674eb5caa1a4d38f2885d9a44ec327d76600e0fd5dadf79131187387b9a87efcfae65bd51ed38c3d1283e1c7a9691769a713c4ba1901e19152fa29f7477ab87c3364ebabe2dfea75812dcdf60257f69f5228bd7006fa697c93b55358cd87f5e2d357022bdf14813c347ca99a43565222c86a013e342cc8a5ad2b2e1694f6f76a208973f5ed4de177085c59079d801c9e13a6a4fda6386abd1a93564869c843143ab7fef73bfd9984c46ad6e155a1591e29a705e56d2d0fe1971f096658261ee8509cdf812eaaf5f6afc036c66587de0a28064b9beda9db4d74f53b64fc194ff8cbe65e14e682104b80b3d559c57ff15c0e274e2330e59bbb3eef09589200cfd76b8894be9e29f6ec214ebcd53282c5e927dd14bc7a38a2a59f74dda96fbbedb1913bb1aa58c7598a70103f61ccb358bc1bd623e73a4d52f4c779fec86af5c6571c5964e1b39ca13a945ad73f09e03a16e9d860a6f54f7941cbe36f8836964e028a971514f54dd526a84235bdcfdb6bac5d8c0ce7b7c2bcf4a2f04ecfcdfd2ca917dc48e17a96db1c5cb0825a3d04772fb3e12e7f82c060c796e41ea903e82479fb01b6d1f34bf18eb176543368fde875379c674bbfa7723d35c8788e3d91f841cf05ce0ef28da5870b782d2ed864372e492618ec4cd6642d795cdacf839b2472eee533f5d7edd2157a8e7235b4a20b4e5b859200606dc025ff3bcfafed83a462a9928a49660106ffcf0aa77f5905c4d7ae43107492d7fed012f986a848bc12cd1ca7948f18232b88449bb74ef79c3105edc8da749a16eae351c80b0f42b48b0e2cd7d931ff7919685870e9b0e1eaa5da121f45a61ed21caed106ebbc048515a1659fa3014bc9dea1c6a488be4b5e6eb4036a9472c2edde073f1ccaef654ed86692b8612abb43ffce7884b8f739e467d4bddb9662e25b282e1785a7c9d5f581ab939f8d105f6c36e2f463db2000f98877a2b972bccb5dc8844304cf22ba5de0bbcd39c7476040e4a6b9de62bce490b4c1acd144023aba3253b33a8ec224cfcf58b8bc1c05392e4e6d8ad264774f9f3a371993e3da2d41aaeca8d0d6dcfdf8b746065a7dcefdf9f2858fd61d245146a1cd0aae78f77775e39e1ed87100a678ee15738dc43f1e88ceae9048c0eb3027c73ad467438238f3709f7e80ffb4684695fceb4bdcc1f6ab616a972721d08e331099357bfb0a169b34585862c97cb0b1c11163a7dde4cf14be3dfd8ddc1d3ec96e3d7f795b1d3aee6e7e16a44ef779391000f0b414ec3a1b774e177e7e96a2be0af33cb69f9c780e38c748764d22ed003c832e22bd4afe8396bd89efc5b0aa100b6a83f445825fd8ad01c564eb11b74efc120eb7cd6709a08371c779c29efd250a3d48d9217e091c34879707ae2fb91139cb9ef5b2be9916d78e033594ccc79bfe823ae73c9ec69af5e452a87c675f74193539cf64d7261fcf5c63fd033ed9e56eeee26da63d767036274d07645ab64a8871d3d8bd6b841cfdee164c074965dea7383c8b7a101683b5470a6b184487549ab520075d1a700b08eb2df0b5b4577495f1827e4c3d2eb7d061a666d70f543395ba2cbfc4610b1d9a0462ffe2238275887054731b6fbbcee4d137843625d951968ae5130874406576b319cef34593aa3efdc8ca29af0224ffc917238ec04b2dcc37ca15e79f159276913732262e0c93db4ea273c8db1d1b3267c474abc935c0b2700a26f5914b3e7a74a64d23376f2503ff7ca32a8f54e7a7c38d916827ecd68b9df5aa04ddc209ebac0b50ffe81321e6f7a73457951ac145ef14abff6ac148469221c7f79b0afc7dea482dc97d61e8ebbcefab8b3034eea41260321fbe9cb9a03b28a9b4067d5a17f005afc349ea6a0c354218daf826b770b028a50f2c1834375ff45891b43f64f03f1a6ee268e4c18cb34903e28b5b1bf8b1bb04ccb2ad0eba9b4c004c4a36203c5f37c38b2856f5019f69a5b73cd7eebbb8dcd400899b718afcfe18b23af78a7c751af76f664da08c6af228964168b105f43319835b8c29a72a49a58b1f5a648f97f038f41df45bc702b2c61ffe3a4aeacef301afd6e0cea43ef6805798f0db5930f5a092ea92a3fd31ea6644307fbabc9118f4459c707f26f3b4919064abcc36bf410c280ae6f7c9c85395467debfbd034235972ede84fa51419657f5619b07fceded95ba97bcdb3ca86674a5773b8fd424f343f80cb5dfafa74bc1395d1b85f6b8c23d01de4a7f6e9144a28bd22b2e1aef7b4df7d5b2436aa2af4d6740efd4574e6bd71d6c817b7714630f7574f354843e896d642dcfef6c582addb08aa2b775baebf43a6971bfd9d08f23dc2ba6d4889679c1e4173de66d57826103c58d4dcd105e41d656742a9c7877929c8bdadd187e0333cf6bbe756ad724f42064c709c33e5e8cddacf211a29a895e2bad62ac635fdc74748508a16f3c277272b1bd44e4dced524324b683ff8b111ef1366d5ad90b42bc66c3c292ee245f2da8495f66dd65f0b3ad947af7deebedd409389ab964de3d0cd7338b32e93de3b345c10628c076749877f80c39e4888e2419c714b1743438aa291692d3ebdf07cf89696ee2ca390726bafa6cf5d779d9e4c687d797bedfdf44abdf36f44ec931928ebc60e5fecfff79cf29f421cdddf818af13654ed591fe528331f0faad8393ecb0254cc1f9170b113382ac8bae5700ede0ff64e3ed88dce7ee05f38572647bdf8ba1cd15d4e392be509ac8013a8ed531e37f3c98505771410369a9ea29d20192d682daeececf6c39b20b8479b9fb055da9e2145225837b29a7be889bc6729f5df18db138afdf989f09d3d522a7f9979b3ff19d68d2b21cf5ec0a3d6643d11644be79ee34bc8882492130dc894200bdb3442369beaa0efe266c702eed9c6934afd9af718428786d7edc1cfffb5e15afd396ea7fa317f091620674e250295c8e07a3178ca7c0de3d5743534675f282334ac7850527f4598d50edc2fccc312082d03f834b339bdfa25ff31b5bc389781da9714e79742824572", 0x1000) r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x8240, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(r3, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=""/4096, 0x1000}, 0x10000) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x7ffc, 0x80000001, 0x800000010000, 0x4, 0x4002004c2, 0x0, 0x654, 0x0, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000009, 0xffff, 0xfffffffffffffff7], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') readlinkat(r6, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) ioctl$KVM_GET_FPU(r6, 0x81a0ae8c, &(0x7f00000002c0)) 925.657241ms ago: executing program 3 (id=771): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x80, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800090400150000000000002d"], 0x1c}}, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0x24ebcfab, 0xfffffff8, 0x3, 0x8, 0x80, "05e29f92450fb0cc474432dc7de1f18b6e1719", 0x3043, 0x7}) ioctl$BSG_IO(r2, 0x2285, &(0x7f0000000280)={0x51, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xcd6, 0xbffff6df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x9144e6a29fca871a, 0x0, 0x304}) 821.306574ms ago: executing program 2 (id=774): pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0xf92b1ff334f0aa6) syz_emit_vhci(&(0x7f00000022c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "aeecc4f728f186c7f84026a522a7f966", 0x6}}}, 0x1a) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000000)=0x5) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000024002, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_version={{0x9}, {0x9, 0x7, 0x1, 0x5, 0x7, 0x10}}}}, 0xf) dup(r1) 820.276735ms ago: executing program 2 (id=775): r0 = io_uring_setup(0x7939, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x1, 0x215}) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000006ec0)={'nr0\x00', 0x1, 0x9}) close_range(r0, r0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) 431.458836ms ago: executing program 2 (id=777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000000010104000000000000000002000000a3cf240001801400018008000100e000000108000200e00000010c0002800500010000000000080003400000100e"], 0x40}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) r6 = socket$alg(0x26, 0x5, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0x2, @sliced={0x9, [0xfff8, 0x0, 0x4, 0x6, 0x6, 0x6, 0x7, 0x400, 0x81, 0x9, 0x9, 0x8, 0xcc6, 0x3, 0x7fff, 0x8, 0x9, 0x2, 0x8, 0x7, 0x400, 0x3, 0x2, 0x7, 0xfffc, 0x81, 0x3ff, 0x2, 0x5, 0x1, 0xffe7, 0x0, 0x0, 0xa, 0x1, 0x0, 0x2, 0x800, 0x6, 0x9, 0xd3, 0x4, 0x7, 0x8, 0x0, 0x10, 0x9], 0xffffffff}}) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb-twofish-avx)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/96, 0x60}], 0x1}, 0x40000000) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x5e}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000000010104000000000000000002000000a3cf240001801400018008000100e000000108000200e00000010c0002800500010000000000080003400000100e"], 0x40}}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) (async) socket$alg(0x26, 0x5, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0x2, @sliced={0x9, [0xfff8, 0x0, 0x4, 0x6, 0x6, 0x6, 0x7, 0x400, 0x81, 0x9, 0x9, 0x8, 0xcc6, 0x3, 0x7fff, 0x8, 0x9, 0x2, 0x8, 0x7, 0x400, 0x3, 0x2, 0x7, 0xfffc, 0x81, 0x3ff, 0x2, 0x5, 0x1, 0xffe7, 0x0, 0x0, 0xa, 0x1, 0x0, 0x2, 0x800, 0x6, 0x9, 0xd3, 0x4, 0x7, 0x8, 0x0, 0x10, 0x9], 0xffffffff}}) (async) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb-twofish-avx)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r6, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/96, 0x60}], 0x1}, 0x40000000) (async) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x5e}], 0x1, 0x4d, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) 130.140838ms ago: executing program 4 (id=782): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, r1, 0xc00, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24004851}, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84442, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x340002, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x1]}}) 70.474988ms ago: executing program 4 (id=783): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x200) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x100, 0x559}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000080)={0x7, 0x6, 0x9, 0x3, 0xc, 0x80000001}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000100)={0xa}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r2, 0x79f, &(0x7f0000000600)=0xb0000) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000680)={0x2a, 0x4, 0x0, {0x5, 0xffffffff00000000, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000ac0)={0x1cc, 0x1d, &(0x7f00000006c0)}) stat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r0, {r4, r5}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x88, r7, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x40}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x2e7}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8040040) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, r7, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x400, 0x30}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "acf104d696706f169bb960cf5b"}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000860}, 0x800) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000fc0), 0x20640, 0x0) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000001040)={'\x00', 0x5, 0x2, 0x7}) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f00000010c0)={'\x00', 0x0, 0x3, 0x9}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000001140)={{0x1, 0x1, 0x18, r9, {0x1434}}, './file0\x00'}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000001180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000012c0)={&(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0], 0x9, 0x6, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_GETENCODER(r11, 0xc01464a6, &(0x7f0000001300)={r13}) ioctl$DRM_IOCTL_MODE_GETFB2(r11, 0xc06864ce, &(0x7f0000001340)={r12, 0x1293, 0x2, 0x8, 0x0, [], [0x9, 0x800, 0x8, 0x7fffffff], [0x4, 0x2, 0x0, 0x40], [0x3a, 0x1, 0xc0, 0x100]}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r9, 0xf505, 0x0) bind$phonet(r6, &(0x7f00000013c0)={0x23, 0x4e, 0x6}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) 70.044206ms ago: executing program 4 (id=784): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x120) (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (rerun: 64) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x2, 0xf9, 0xb7, 0x7fff, 0x2, 0x3, 0xfffffeff, 0x2df, 0x40, 0x303, 0x0, 0x8, 0x38, 0x0, 0x4, 0x4, 0xd}, [], "", ['\x00']}, 0x140) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000080002000000000008000700", @ANYRES32, @ANYBLOB="080001"], 0x2c}}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x124, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x400a840) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb, 0x0, 0x0, 0x9800}]}, &(0x7f0000003ff6)='GPL\x00', 0xfffffa6a, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='pstore\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1000420, 0x0) socket(0x840000000002, 0x3, 0xff) 69.792392ms ago: executing program 2 (id=785): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x40, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331ba40dfabcc81c75"]}]}, 0x40}}, 0x0) (async, rerun: 64) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'pimreg\x00', 0x0}) (async) setitimer(0x0, &(0x7f00000000c0)={{}, {0x1}}, 0x0) getitimer(0x0, &(0x7f0000001740)) bind$packet(r1, &(0x7f0000000180)={0x11, 0xf5, r2, 0x1, 0x3}, 0x14) 69.372518ms ago: executing program 4 (id=786): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0xa, [@restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x1}, @enum={0x7, 0x8, 0x0, 0x6, 0x4, [{0x7, 0x6}, {0x6, 0x8001}, {0x2, 0x374}, {0x6, 0x4}, {0xc, 0x5}, {0x8, 0x8}, {0x4, 0x3}, {0x0, 0xfffffff5}]}, @ptr={0x4, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x0, 0x2e, 0x0, 0x5f, 0x1e, 0x993f6addc02244c2, 0x5f, 0x6f]}}, &(0x7f0000000300)=""/253, 0x92, 0xfd, 0x0, 0x1ff}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0xfee9, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x1b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x400000a, 0x54032, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0xc0, &(0x7f0000000000)=0x3, 0x0, 0x4) 67.229662ms ago: executing program 2 (id=787): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5b027c7d}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000040)=0x8) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x400, 0x61) r2 = open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x1100) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000180)={r3, 0x2, r1, 0x7, 0x80000}) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000200)={0x0, 0x9, 0xdb53, '\x00', &(0x7f00000001c0)=0x26}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000280)={0x9d0000, 0xf, 0x2, r0, 0x0, &(0x7f0000000240)={0x9c090a, 0xce, '\x00', @value=0x7}}) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000005c0)={{'\x00', 0x2}, {0x9}, 0x63, 0x0, 0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)="69bfde0a56b79dce20a6656c683ccea8dedeee75c8650bffa703e79b7f065d3e78a777a81c2f281a92b6939c2cad097374a8ebebe1b542d76d90c6df3141530d754f8a9d3fd8e0f2da2575eed5e906620d446bc65490045ece408a28c93486c45f6a9b8dfcccfac8b81116954c3dd3a55dcd28c511318b96da531c9885529864a776dfa02594ff31d0e233f1087fd3f9d9c4189e1d305c10499234f08bec9544576df5245cc51a071e780cfb", 0xac, 0x0, &(0x7f0000000400)={0x2, 0x17c, {0x1, 0xc, 0xd1, "a31cbf75ce37719e234c084481dba38778f2f0ccb6339e3932070494f08355a9efc32c4e8fc1065918a400eb98da1056933689a3ccb0a09d5af80b985f7d8285a73c84aa7bcab8b849dad43c4cb649e6db005210ee7d2df76bbe5655dfff92742bff5b14c4cd9f17d04528d078c8e1d9615c034ec810b49249cb4496779bba091d5af29b065a79c6c28131ae03129ac37a162156948cf84925d04e4a5dfa7a19c3548313cd0095bb0d257de168d3c85c40ed823883d54948b198f437f66e13ec6c738fd390e60e30ab00db2094ef768d76", 0x9e, "fbfdda32f6e396f05c6dc2f8498e6914ee161f02186eb89fc676c5e8354633cd443d5186a41dffea911fd28f05de3ccdd826545a935faeed05ef89e4eac959383d4b247504515668378fc6c6bf9e4a025e47093817582578964fac577325e5cc3ea19455a03dfae3fa99ad5b09798c5f173758063c50943f9ca82b406ee38f2e3561894ab77006b8f91469599073c9cf2b5311134d128d0e1bb20a0297ff"}}, 0x188}) ioctl$COMEDI_DEVINFO(r2, 0x80b06401, &(0x7f0000000640)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000740), r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000780)={'ip_vti0\x00', 0x0, 0x8000, 0x80, 0x9, 0x1000, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x68, 0x0, 0x2, 0x4, 0x0, @empty, @private=0xa010101, {[@noop, @end]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000800)={@rand_addr, 0x0}, &(0x7f0000000840)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f00000008c0)={'gretap0\x00', 0x0, 0x8, 0x80, 0x1, 0x2b36, {{0x10, 0x4, 0x1, 0x4, 0x40, 0x68, 0x0, 0x8, 0x0, 0x0, @multicast1, @multicast2, {[@lsrr={0x83, 0x27, 0x68, [@multicast1, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1, @broadcast, @empty, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast2]}, @ra={0x94, 0x4}]}}}}}) getsockname$packet(r2, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000009c0)=0x14) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a80)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r2, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000ac0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000b00)=[0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb9, &(0x7f0000000b80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x8f, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000e40)={'ip6_vti0\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x29, 0x4, 0xa1, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x10, 0x0, 0xd, 0x8001}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000f80)={'erspan0\x00', &(0x7f0000000f00)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x4, 0x0, {{0xe, 0x4, 0x3, 0x3, 0x38, 0x66, 0x0, 0x8, 0x2f, 0x0, @empty, @multicast2, {[@rr={0x7, 0x23, 0x53, [@broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @remote, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001040)={'syztnl1\x00', &(0x7f0000000fc0)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x0, 0x686, 0x44, @loopback, @private1, 0x1, 0x7, 0x2, 0xff}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001500)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001080)={0x410, r4, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x746}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x178, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xcd}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x410}, 0x1, 0x0, 0x0, 0x4080}, 0x200040d1) r18 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001540), 0x480040, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r18, 0xc0189378, &(0x7f0000001580)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000015c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) 67.034671ms ago: executing program 4 (id=788): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) syz_emit_ethernet(0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="9104180300f9b54fa0aaaa050004424203"], 0x0) 775.593µs ago: executing program 4 (id=789): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) unshare(0x66020280) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f00000000c0)) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000000)=0x6, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000f80)={0x58, r7, 0x801, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x20048050) (async) setsockopt$sock_int(r6, 0x1, 0x24, &(0x7f0000000040)=0x2, 0x4) (async) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) listen(r0, 0x9) 0s ago: executing program 2 (id=790): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_void(r1, 0x1, 0x48, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1d, 0x19, 0xbb12, 0xc, 0x70480, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x40305839, 0x0) kernel console output (not intermixed with test programs): 3 netdevsim3: renamed from eth3 [ 44.834986][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.839521][ T5966] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 44.843188][ T5966] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 44.846857][ T5966] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 44.850669][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.852889][ T5965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.855225][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.857425][ T5965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.864222][ T5966] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 44.868360][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.871178][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.874699][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.877436][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.880350][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.882774][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.889530][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.894963][ T5975] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.906949][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.909233][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.912159][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.914395][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.923351][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.931171][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.933434][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.942714][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.944945][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.963101][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.984928][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.989380][ T40] audit: type=1400 audit(1755407034.100:89): avc: denied { sys_module } for pid=5975 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 44.989683][ T1241] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.998396][ T1241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.004451][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.006692][ T1241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.020803][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.031074][ T5966] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.037088][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.039471][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.045531][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.048407][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.058367][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.069134][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.094830][ T5967] veth0_vlan: entered promiscuous mode [ 45.102965][ T5975] veth0_vlan: entered promiscuous mode [ 45.105344][ T5967] veth1_vlan: entered promiscuous mode [ 45.112806][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.120773][ T5975] veth1_vlan: entered promiscuous mode [ 45.136668][ T5965] veth0_vlan: entered promiscuous mode [ 45.142278][ T5965] veth1_vlan: entered promiscuous mode [ 45.146780][ T5967] veth0_macvtap: entered promiscuous mode [ 45.151926][ T5967] veth1_macvtap: entered promiscuous mode [ 45.157300][ T5975] veth0_macvtap: entered promiscuous mode [ 45.163260][ T5975] veth1_macvtap: entered promiscuous mode [ 45.167414][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.173318][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.185689][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.188881][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.191714][ T71] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.194412][ T71] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.197717][ T5965] veth0_macvtap: entered promiscuous mode [ 45.202963][ T71] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.206149][ T71] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.211831][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.214789][ T5965] veth1_macvtap: entered promiscuous mode [ 45.228011][ T71] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.230863][ T92] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.236471][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.240211][ T92] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.243992][ T92] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.250799][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.253893][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.256366][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.257742][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.261502][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.274665][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.277434][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.281603][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.284071][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.298209][ T5966] veth0_vlan: entered promiscuous mode [ 45.300646][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.303347][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.312545][ T5966] veth1_vlan: entered promiscuous mode [ 45.318379][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.319067][ T5967] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 45.321060][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.325270][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.325282][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.341629][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.344199][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.347352][ T5966] veth0_macvtap: entered promiscuous mode [ 45.351541][ T6051] Zero length message leads to an empty skb [ 45.351667][ T5966] veth1_macvtap: entered promiscuous mode [ 45.362657][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.373342][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.377879][ T92] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.382209][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 45.382872][ T92] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.388795][ T1241] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.393836][ T1241] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.411248][ T1241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.413737][ T1241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.423589][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.426081][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.455738][ T6068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6'. [ 45.535246][ T6084] syz.1.11 uses obsolete (PF_INET,SOCK_PACKET) [ 45.539574][ T6081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10'. [ 45.543506][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.548017][ T6081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10'. [ 45.549128][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 45.556754][ T6084] process 'syz.1.11' launched './file0' with NULL argv: empty string added [ 45.609983][ T6086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.612520][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.615383][ T6086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.617865][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.639849][ T6088] netlink: 'syz.1.12': attribute type 4 has an invalid length. [ 45.711361][ T6095] netlink: 'syz.1.15': attribute type 10 has an invalid length. [ 45.714815][ T6095] team0: Cannot enslave team device to itself [ 45.749325][ T5978] Bluetooth: hci0: command tx timeout [ 45.749353][ T5969] Bluetooth: hci3: command tx timeout [ 45.754626][ T6102] tipc: Started in network mode [ 45.756472][ T6102] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 45.759825][ T6102] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 45.762572][ T6102] tipc: Enabled bearer , priority 10 [ 45.786125][ T6108] team0: Device gtp0 is of different type [ 45.814774][ T6112] fuse: Unknown parameter '000000000000000000050x0000000000000004' [ 45.829388][ T5969] Bluetooth: hci1: command tx timeout [ 45.829402][ T5978] Bluetooth: hci2: command tx timeout [ 45.841553][ T6114] fuse: Bad value for 'fd' [ 45.867022][ T6117] ip6tnl1: entered promiscuous mode [ 45.868918][ T6117] ip6tnl1: entered allmulticast mode [ 45.951270][ T6130] warning: `syz.1.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 46.059688][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 46.062535][ T6136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.30'. [ 46.065735][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 46.068653][ T6136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.30'. [ 46.072360][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 46.148529][ T6139] netdevsim netdevsim1: Direct firmware load for ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 46.156036][ T6139] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 46.748838][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 46.768769][ T6039] tipc: Node number set to 1 [ 46.778486][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.780918][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.888768][ T29] usb 8-1: device descriptor read/64, error -71 [ 46.935493][ T6177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6177 comm=syz.2.42 [ 46.959608][ T6181] MINIX-fs: blocksize too small for device [ 46.964749][ T6181] MINIX-fs: blocksize too small for device [ 46.991857][ T6190] binder: 6189:6190 ioctl c0306201 0 returned -14 [ 46.998851][ T6190] binder: 6189:6190 ioctl c0306201 200000000040 returned -11 [ 47.100311][ T6204] netlink: 'syz.2.52': attribute type 3 has an invalid length. [ 47.102890][ T6204] netlink: 'syz.2.52': attribute type 1 has an invalid length. [ 47.105270][ T6204] NCSI netlink: No device for ifindex 0 [ 47.138910][ T29] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 47.140318][ T6206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.148142][ T6206] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 47.248824][ T1241] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 47.278765][ T29] usb 8-1: device descriptor read/64, error -71 [ 47.359196][ T1241] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 47.372119][ T6206] syz.1.53 (6206): drop_caches: 2 [ 47.393905][ T6218] bridge0: entered promiscuous mode [ 47.396295][ T29] usb usb8-port1: attempt power cycle [ 47.397020][ T6218] bridge0: port 3(macvlan2) entered blocking state [ 47.400652][ T6218] bridge0: port 3(macvlan2) entered disabled state [ 47.402749][ T6218] macvlan2: entered allmulticast mode [ 47.404534][ T6218] bridge0: entered allmulticast mode [ 47.406831][ T6218] macvlan2: left allmulticast mode [ 47.408468][ T6218] bridge0: left allmulticast mode [ 47.410696][ T6218] bridge0: left promiscuous mode [ 47.581385][ T6235] binder: 6234:6235 ioctl c0306201 0 returned -14 [ 47.583890][ T6235] binder: 6234:6235 ioctl c0306201 200000000040 returned -11 [ 47.738830][ T29] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 47.769250][ T29] usb 8-1: device descriptor read/8, error -71 [ 47.828825][ T5978] Bluetooth: hci0: command tx timeout [ 47.830695][ T5969] Bluetooth: hci3: command tx timeout [ 47.908794][ T5969] Bluetooth: hci2: command tx timeout [ 47.908813][ T5978] Bluetooth: hci1: command tx timeout [ 47.924423][ T6246] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 48.008881][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 48.029381][ T29] usb 8-1: device descriptor read/8, error -71 [ 48.138867][ T29] usb usb8-port1: unable to enumerate USB device [ 48.158781][ T6039] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 48.328837][ T6039] usb 6-1: Using ep0 maxpacket: 8 [ 48.332055][ T6039] usb 6-1: config 0 interface 0 has no altsetting 0 [ 48.334162][ T6039] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 48.337123][ T6039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.340428][ T6039] usb 6-1: config 0 descriptor?? [ 48.545487][ T6246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.549226][ T6246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.555116][ T6039] usbhid 6-1:0.0: can't add hid device: -71 [ 48.557497][ T6039] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 48.563567][ T6039] usb 6-1: USB disconnect, device number 2 [ 49.240339][ T1147] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.301142][ T1147] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.348568][ T5969] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 49.352187][ T5969] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 49.355369][ T5969] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 49.359288][ T5969] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 49.362719][ T5969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 49.384577][ T1147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.422768][ T6258] chnl_net:caif_netlink_parms(): no params data found [ 49.441899][ T1147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.461992][ T6258] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.464249][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.466567][ T6258] bridge_slave_0: entered allmulticast mode [ 49.469505][ T6258] bridge_slave_0: entered promiscuous mode [ 49.472147][ T6258] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.474385][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.476726][ T6258] bridge_slave_1: entered allmulticast mode [ 49.479048][ T6258] bridge_slave_1: entered promiscuous mode [ 49.495295][ T6258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.499186][ T6258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.518979][ T6258] team0: Port device team_slave_0 added [ 49.521737][ T6258] team0: Port device team_slave_1 added [ 49.528445][ T6269] binder: 6267:6269 ioctl c0306201 0 returned -14 [ 49.531237][ T6269] binder: 6267:6269 ioctl c0306201 200000000040 returned -11 [ 49.532583][ T6271] program syz.1.69 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.537232][ T6271] program syz.1.69 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.561091][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.563313][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.572114][ T6258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.579456][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.581657][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.584940][ T6274] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 49.589786][ T6258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.627702][ T6258] hsr_slave_0: entered promiscuous mode [ 49.630890][ T6258] hsr_slave_1: entered promiscuous mode [ 49.632863][ T6258] debugfs: 'hsr0' already exists in 'hsr' [ 49.634700][ T6258] Cannot create hsr debugfs directory [ 49.634750][ T6278] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.644026][ T1147] bridge_slave_1: left promiscuous mode [ 49.646011][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.651551][ T1147] bridge_slave_0: left allmulticast mode [ 49.653361][ T1147] bridge_slave_0: left promiscuous mode [ 49.655223][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.695918][ T40] kauditd_printk_skb: 152 callbacks suppressed [ 49.695932][ T40] audit: type=1400 audit(1755407038.810:242): avc: denied { write } for pid=6277 comm="syz.3.72" path="socket:[9177]" dev="sockfs" ino=9177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.708305][ T40] audit: type=1400 audit(1755407038.810:243): avc: denied { nlmsg_write } for pid=6277 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.716906][ T40] audit: type=1400 audit(1755407038.830:244): avc: denied { bind } for pid=6279 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.724976][ T40] audit: type=1400 audit(1755407038.830:245): avc: denied { name_bind } for pid=6279 comm="syz.1.73" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 49.734233][ T40] audit: type=1400 audit(1755407038.830:246): avc: denied { node_bind } for pid=6279 comm="syz.1.73" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 49.744722][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.748233][ T59] libceph: connect (1)[c::]:6789 error -101 [ 49.750652][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 49.750822][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.756025][ T1147] bond0 (unregistering): Released all slaves [ 49.812342][ T40] audit: type=1400 audit(1755407038.930:247): avc: denied { search } for pid=5681 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.827256][ T40] audit: type=1400 audit(1755407038.930:248): avc: denied { search } for pid=5681 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.831185][ T6258] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 49.836236][ T6298] binder: 6297:6298 ioctl c018620c 200000000c00 returned -1 [ 49.839242][ T40] audit: type=1400 audit(1755407038.930:249): avc: denied { search } for pid=5681 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.843122][ T6298] binder: 6297:6298 ioctl 4068aea3 200000000c40 returned -22 [ 49.852916][ T40] audit: type=1400 audit(1755407038.930:250): avc: denied { read } for pid=5681 comm="dhcpcd" name="n103" dev="tmpfs" ino=2315 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.862161][ T40] audit: type=1400 audit(1755407038.930:251): avc: denied { open } for pid=5681 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=2315 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.862801][ T6258] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 49.881644][ T6258] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 49.886614][ T6258] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 49.909528][ T5978] Bluetooth: hci0: command tx timeout [ 49.915680][ T6258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.922665][ T6258] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.928167][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.931051][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.945426][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.947865][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.988954][ T5978] Bluetooth: hci1: command tx timeout [ 49.998779][ T5978] Bluetooth: hci2: command tx timeout [ 50.004401][ T1147] hsr_slave_0: left promiscuous mode [ 50.006606][ T1147] hsr_slave_1: left promiscuous mode [ 50.009550][ T59] libceph: connect (1)[c::]:6789 error -101 [ 50.011730][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 50.012750][ T1147] veth1_macvtap: left promiscuous mode [ 50.015449][ T1147] veth0_macvtap: left promiscuous mode [ 50.017328][ T1147] veth1_vlan: left promiscuous mode [ 50.020012][ T1147] veth0_vlan: left promiscuous mode [ 50.085322][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 50.088858][ T5976] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 50.098099][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 50.135094][ T6258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.214941][ T6258] veth0_vlan: entered promiscuous mode [ 50.218564][ T6258] veth1_vlan: entered promiscuous mode [ 50.237704][ T6258] veth0_macvtap: entered promiscuous mode [ 50.242265][ T6258] veth1_macvtap: entered promiscuous mode [ 50.250173][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.253524][ T5976] usb 8-1: config 4 has an invalid interface number: 235 but max is 2 [ 50.255207][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.256307][ T5976] usb 8-1: config 4 has an invalid interface number: 137 but max is 2 [ 50.261574][ T5976] usb 8-1: config 4 has an invalid interface number: 50 but max is 2 [ 50.262626][ T71] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.264225][ T5976] usb 8-1: config 4 has no interface number 0 [ 50.267250][ T71] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.272795][ T71] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.274491][ T5976] usb 8-1: config 4 has no interface number 1 [ 50.276079][ T71] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.278563][ T5976] usb 8-1: config 4 has no interface number 2 [ 50.281487][ T71] tipc: Subscription rejected, illegal request [ 50.282818][ T5976] usb 8-1: config 4 interface 235 altsetting 69 endpoint 0x4 has an invalid bInterval 129, changing to 11 [ 50.288172][ T5976] usb 8-1: config 4 interface 137 altsetting 7 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 50.291692][ T5976] usb 8-1: config 4 interface 137 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 50.294993][ T5976] usb 8-1: config 4 interface 50 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 50.306572][ T5976] usb 8-1: config 4 interface 50 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 50.312843][ T5976] usb 8-1: config 4 interface 50 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 50.314229][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.317275][ T5976] usb 8-1: config 4 interface 50 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 50.322953][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.323355][ T5976] usb 8-1: config 4 interface 50 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 50.328951][ T5976] usb 8-1: config 4 interface 50 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 50.332646][ T5976] usb 8-1: config 4 interface 235 has no altsetting 0 [ 50.333505][ T1241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.335378][ T5976] usb 8-1: config 4 interface 137 has no altsetting 0 [ 50.338123][ T1241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.341009][ T6343] could not allocate digest TFM handle digest_null [ 50.341083][ T5976] usb 8-1: config 4 interface 50 has no altsetting 0 [ 50.351562][ T5976] usb 8-1: New USB device found, idVendor=12d1, idProduct=0873, bcdDevice=41.b4 [ 50.354422][ T5976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.357144][ T5976] usb 8-1: Product: å–“ [ 50.358463][ T5976] usb 8-1: Manufacturer: 캀헮噑⢫ꊿê¥ëš®ê¾“쇯㹖澩襤㴃滶蘨铹ê•å´¸ã‡æ¶°Ü¹å¤³ë¬‡è‘§ä¯¿æ³ï˜’ã¹ï–¢âŠ…咛옛讖릯Ơáˆáˆ²è›³íž£ç¤€á˜·å¶ì¥¤ã—±î¹¸â¸ç«è€¼å†‰ê§‰î˜¡èš¢ì’‰èœ˜á¨Ÿî¦­Ûൿ妷ì·ë³°ç¨ìž¡ì¥¼â‡£î†Žâ›ºï¸ªì²äµ¨ì©ë”© [ 50.367155][ T5976] usb 8-1: SerialNumber: syz [ 50.406908][ T6359] __nla_validate_parse: 67 callbacks suppressed [ 50.406918][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.82'. [ 50.413895][ T6359] netlink: 80 bytes leftover after parsing attributes in process `syz.4.82'. [ 50.416499][ T59] IPVS: starting estimator thread 0... [ 50.417228][ T6361] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.83'. [ 50.518838][ T6362] IPVS: using max 52 ests per chain, 124800 per kthread [ 50.519025][ T59] libceph: connect (1)[c::]:6789 error -101 [ 50.523201][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 50.538175][ T6364] netlink: 'syz.2.84': attribute type 7 has an invalid length. [ 50.540936][ T6364] netlink: 'syz.2.84': attribute type 8 has an invalid length. [ 50.556795][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'. [ 50.576959][ T6299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.578210][ T6284] ceph: No mds server is up or the cluster is laggy [ 50.579748][ T6299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.586701][ T5976] option 8-1:4.235: GSM modem (1-port) converter detected [ 50.597372][ T6372] ieee802154 phy0 wpan0: encryption failed: -22 [ 50.611343][ T5976] usb 8-1: USB disconnect, device number 6 [ 50.613655][ T5976] option 8-1:4.235: device disconnected [ 50.620326][ T6376] capability: warning: `syz.1.88' uses 32-bit capabilities (legacy support in use) [ 50.647309][ T6382] ======================================================= [ 50.647309][ T6382] WARNING: The mand mount option has been deprecated and [ 50.647309][ T6382] and is ignored by this kernel. Remove the mand [ 50.647309][ T6382] option from the mount to silence this warning. [ 50.647309][ T6382] ======================================================= [ 50.656081][ T6384] bond1: entered promiscuous mode [ 50.666110][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'. [ 50.669738][ T6388] bridge_slave_1: left allmulticast mode [ 50.671569][ T6382] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 50.675290][ T6388] bridge_slave_1: left promiscuous mode [ 50.677619][ T6388] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.682022][ T6388] bridge_slave_0: left allmulticast mode [ 50.683893][ T6388] bridge_slave_0: left promiscuous mode [ 50.685749][ T6388] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.702161][ T6397] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 50.723002][ T6402] netlink: 64 bytes leftover after parsing attributes in process `syz.2.97'. [ 50.741396][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.96'. [ 50.744295][ T6399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 50.806670][ T6411] CUSE: info not properly terminated [ 50.813378][ T6411] netlink: 'syz.2.100': attribute type 11 has an invalid length. [ 51.009451][ T6443] overlayfs: conflicting options: userxattr,metacopy=on [ 51.032562][ T6447] dlm: no local IP address has been set [ 51.034344][ T6447] dlm: cannot start dlm midcomms -107 [ 51.037244][ T6447] dlm: non-version read from control device 172 [ 51.062654][ T6449] binder_alloc: 6448: binder_alloc_buf, no vma [ 51.112609][ T6458] i2c i2c-1: Invalid block write size 34 [ 51.132271][ T6461] FAULT_INJECTION: forcing a failure. [ 51.132271][ T6461] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 51.137804][ T6461] CPU: 3 UID: 0 PID: 6461 Comm: syz.4.118 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 51.137829][ T6461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.137839][ T6461] Call Trace: [ 51.137845][ T6461] [ 51.137852][ T6461] dump_stack_lvl+0x16c/0x1f0 [ 51.137896][ T6461] should_fail_ex+0x512/0x640 [ 51.137922][ T6461] _copy_from_user+0x2e/0xd0 [ 51.137943][ T6461] ucma_write+0x128/0x330 [ 51.137962][ T6461] ? __pfx_ucma_write+0x10/0x10 [ 51.137979][ T6461] ? bpf_lsm_file_permission+0x9/0x10 [ 51.138000][ T6461] ? security_file_permission+0x71/0x210 [ 51.138026][ T6461] ? rw_verify_area+0xcf/0x6c0 [ 51.138051][ T6461] ? __pfx_ucma_write+0x10/0x10 [ 51.138067][ T6461] vfs_write+0x29d/0x11d0 [ 51.138085][ T6461] ? __pfx_vfs_write+0x10/0x10 [ 51.138101][ T6461] ? __fget_files+0x204/0x3c0 [ 51.138119][ T6461] ? rcu_is_watching+0x12/0xc0 [ 51.138140][ T6461] ? lock_release+0x201/0x2f0 [ 51.138165][ T6461] ? __fget_files+0x20e/0x3c0 [ 51.138186][ T6461] ksys_write+0x1f8/0x250 [ 51.138203][ T6461] ? __pfx_ksys_write+0x10/0x10 [ 51.138222][ T6461] do_syscall_64+0xcd/0x4c0 [ 51.138241][ T6461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.138259][ T6461] RIP: 0033:0x7efe8458ebe9 [ 51.138273][ T6461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.138289][ T6461] RSP: 002b:00007efe827f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.138311][ T6461] RAX: ffffffffffffffda RBX: 00007efe847b5fa0 RCX: 00007efe8458ebe9 [ 51.138323][ T6461] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 51.138333][ T6461] RBP: 00007efe827f6090 R08: 0000000000000000 R09: 0000000000000000 [ 51.138344][ T6461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.138354][ T6461] R13: 00007efe847b6038 R14: 00007efe847b5fa0 R15: 00007ffd8de9dfe8 [ 51.138370][ T6461] [ 51.205398][ C3] vkms_vblank_simulate: vblank timer overrun [ 51.224156][ T6466] netlink: 72 bytes leftover after parsing attributes in process `syz.4.120'. [ 51.259164][ T5976] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 51.373965][ T6487] dvmrp1: entered allmulticast mode [ 51.428843][ T5978] Bluetooth: hci3: command tx timeout [ 51.430186][ T5976] usb 6-1: config 1 interface 0 altsetting 146 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 51.434441][ T5976] usb 6-1: config 1 interface 0 altsetting 146 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 51.437928][ T5976] usb 6-1: config 1 interface 0 altsetting 146 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 51.441416][ T5976] usb 6-1: config 1 interface 0 has no altsetting 0 [ 51.445076][ T5976] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.447954][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.450728][ T5976] usb 6-1: Product: Ð [ 51.452087][ T5976] usb 6-1: Manufacturer: ⱊ [ 51.453617][ T5976] usb 6-1: SerialNumber: 倊 [ 51.456246][ T6445] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 51.458592][ T6445] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 51.461230][ T6445] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 51.866835][ T5976] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 51.871019][ T5976] usb 6-1: USB disconnect, device number 3 [ 51.961573][ T6504] FAULT_INJECTION: forcing a failure. [ 51.961573][ T6504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.966868][ T6504] CPU: 3 UID: 0 PID: 6504 Comm: syz.3.128 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 51.966885][ T6504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.966891][ T6504] Call Trace: [ 51.966895][ T6504] [ 51.966899][ T6504] dump_stack_lvl+0x16c/0x1f0 [ 51.966914][ T6504] should_fail_ex+0x512/0x640 [ 51.966929][ T6504] _copy_from_user+0x2e/0xd0 [ 51.966943][ T6504] ucma_listen+0x81/0x220 [ 51.966956][ T6504] ? __pfx_ucma_listen+0x10/0x10 [ 51.966969][ T6504] ? __pfx_ucma_listen+0x10/0x10 [ 51.966980][ T6504] ucma_write+0x1f8/0x330 [ 51.966991][ T6504] ? __pfx_ucma_write+0x10/0x10 [ 51.967002][ T6504] ? bpf_lsm_file_permission+0x9/0x10 [ 51.967016][ T6504] ? security_file_permission+0x71/0x210 [ 51.967033][ T6504] ? rw_verify_area+0xcf/0x6c0 [ 51.967050][ T6504] ? __pfx_ucma_write+0x10/0x10 [ 51.967060][ T6504] vfs_write+0x29d/0x11d0 [ 51.967072][ T6504] ? __pfx_vfs_write+0x10/0x10 [ 51.967082][ T6504] ? __fget_files+0x204/0x3c0 [ 51.967094][ T6504] ? rcu_is_watching+0x12/0xc0 [ 51.967107][ T6504] ? lock_release+0x201/0x2f0 [ 51.967125][ T6504] ? __fget_files+0x20e/0x3c0 [ 51.967137][ T6504] ksys_write+0x1f8/0x250 [ 51.967147][ T6504] ? __pfx_ksys_write+0x10/0x10 [ 51.967159][ T6504] do_syscall_64+0xcd/0x4c0 [ 51.967171][ T6504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.967182][ T6504] RIP: 0033:0x7fa3e358ebe9 [ 51.967191][ T6504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.967201][ T6504] RSP: 002b:00007fa3e443b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.967212][ T6504] RAX: ffffffffffffffda RBX: 00007fa3e37b5fa0 RCX: 00007fa3e358ebe9 [ 51.967219][ T6504] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 51.967225][ T6504] RBP: 00007fa3e443b090 R08: 0000000000000000 R09: 0000000000000000 [ 51.967235][ T6504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.967244][ T6504] R13: 00007fa3e37b6038 R14: 00007fa3e37b5fa0 R15: 00007ffe39db21a8 [ 51.967258][ T6504] [ 52.052309][ C3] vkms_vblank_simulate: vblank timer overrun [ 52.055345][ T5978] Bluetooth: hci0: command tx timeout [ 52.068961][ T5978] Bluetooth: hci1: command tx timeout [ 52.069094][ T5969] Bluetooth: hci2: command tx timeout [ 52.069466][ T6445] IPVS: set_ctl: invalid protocol: 115 100.1.1.1:20002 [ 52.099765][ T6509] netlink: 'syz.1.130': attribute type 8 has an invalid length. [ 52.104512][ T6509] ip6gretap2: entered promiscuous mode [ 52.106815][ T6509] ip6gretap2: entered allmulticast mode [ 52.114349][ T6509] batadv_slave_0: entered promiscuous mode [ 52.117680][ T6509] batadv_slave_0: left promiscuous mode [ 52.301308][ T6535] FAULT_INJECTION: forcing a failure. [ 52.301308][ T6535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.305549][ T6535] CPU: 1 UID: 0 PID: 6535 Comm: syz.1.137 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 52.305566][ T6535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.305573][ T6535] Call Trace: [ 52.305576][ T6535] [ 52.305586][ T6535] dump_stack_lvl+0x16c/0x1f0 [ 52.305601][ T6535] should_fail_ex+0x512/0x640 [ 52.305614][ T6535] _copy_from_user+0x2e/0xd0 [ 52.305628][ T6535] copy_msghdr_from_user+0x98/0x160 [ 52.305640][ T6535] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 52.305651][ T6535] ? __pfx_kstrtouint+0x10/0x10 [ 52.305661][ T6535] ? kstrtouint_from_user+0x13c/0x1d0 [ 52.305672][ T6535] ___sys_sendmsg+0xfe/0x1d0 [ 52.305682][ T6535] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.305695][ T6535] ? rcu_is_watching+0x12/0xc0 [ 52.305717][ T6535] ? __mutex_unlock_slowpath+0x100/0x800 [ 52.305740][ T6535] __sys_sendmsg+0x16d/0x220 [ 52.305751][ T6535] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.305765][ T6535] do_syscall_64+0xcd/0x4c0 [ 52.305777][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.305789][ T6535] RIP: 0033:0x7ff23eb8ebe9 [ 52.305798][ T6535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.305808][ T6535] RSP: 002b:00007ff23fae2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.305818][ T6535] RAX: ffffffffffffffda RBX: 00007ff23edb5fa0 RCX: 00007ff23eb8ebe9 [ 52.305825][ T6535] RDX: 0000000000008040 RSI: 0000200000000000 RDI: 0000000000000004 [ 52.305831][ T6535] RBP: 00007ff23fae2090 R08: 0000000000000000 R09: 0000000000000000 [ 52.305837][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.305843][ T6535] R13: 00007ff23edb6038 R14: 00007ff23edb5fa0 R15: 00007ffc00777208 [ 52.305853][ T6535] [ 52.483730][ T6547] syz.3.142: attempt to access beyond end of device [ 52.483730][ T6547] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 52.490174][ T6547] exFAT-fs (nbd3): unable to read boot sector [ 52.493117][ T6547] exFAT-fs (nbd3): failed to read boot sector [ 52.496473][ T6547] exFAT-fs (nbd3): failed to recognize exfat type [ 52.523546][ T6551] veth0: entered promiscuous mode [ 52.526090][ T6550] veth0: left promiscuous mode [ 52.548534][ T6553] loop6: detected capacity change from 0 to 7 [ 52.552048][ T6553] Dev loop6: unable to read RDB block 7 [ 52.554537][ T6553] loop6: unable to read partition table [ 52.556666][ T6553] loop6: partition table beyond EOD, truncated [ 52.559940][ T6553] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 52.581338][ T6558] sg_read: process 96 (syz.2.146) changed security contexts after opening file descriptor, this is not allowed. [ 52.585247][ T6561] FAULT_INJECTION: forcing a failure. [ 52.585247][ T6561] name failslab, interval 1, probability 0, space 0, times 1 [ 52.586233][ T6562] random: crng reseeded on system resumption [ 52.589565][ T6561] CPU: 3 UID: 0 PID: 6561 Comm: syz.4.148 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 52.589583][ T6561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.589590][ T6561] Call Trace: [ 52.589593][ T6561] [ 52.589597][ T6561] dump_stack_lvl+0x16c/0x1f0 [ 52.589613][ T6561] should_fail_ex+0x512/0x640 [ 52.589627][ T6561] should_failslab+0xc2/0x120 [ 52.589640][ T6561] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 52.589651][ T6561] ? __alloc_skb+0x2b2/0x380 [ 52.589661][ T6561] ? avc_has_perm+0x144/0x1f0 [ 52.589672][ T6561] __alloc_skb+0x2b2/0x380 [ 52.589681][ T6561] ? __pfx___alloc_skb+0x10/0x10 [ 52.589690][ T6561] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 52.589704][ T6561] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 52.589723][ T6561] netlink_alloc_large_skb+0x69/0x130 [ 52.589736][ T6561] netlink_sendmsg+0x6a1/0xdd0 [ 52.589748][ T6561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.589762][ T6561] ____sys_sendmsg+0xa95/0xc70 [ 52.589776][ T6561] ? copy_msghdr_from_user+0x10a/0x160 [ 52.589786][ T6561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.589800][ T6561] ? __pfx_kstrtouint+0x10/0x10 [ 52.589811][ T6561] ? kstrtouint_from_user+0x13c/0x1d0 [ 52.589821][ T6561] ___sys_sendmsg+0x134/0x1d0 [ 52.589831][ T6561] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.589844][ T6561] ? rcu_is_watching+0x12/0xc0 [ 52.589860][ T6561] ? __mutex_unlock_slowpath+0x100/0x800 [ 52.589874][ T6561] __sys_sendmsg+0x16d/0x220 [ 52.589884][ T6561] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.589898][ T6561] do_syscall_64+0xcd/0x4c0 [ 52.589910][ T6561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.589921][ T6561] RIP: 0033:0x7efe8458ebe9 [ 52.589930][ T6561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.589940][ T6561] RSP: 002b:00007efe827f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.589951][ T6561] RAX: ffffffffffffffda RBX: 00007efe847b5fa0 RCX: 00007efe8458ebe9 [ 52.589957][ T6561] RDX: 0000000000008040 RSI: 0000200000000000 RDI: 0000000000000004 [ 52.589964][ T6561] RBP: 00007efe827f6090 R08: 0000000000000000 R09: 0000000000000000 [ 52.589976][ T6561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.589982][ T6561] R13: 00007efe847b6038 R14: 00007efe847b5fa0 R15: 00007ffd8de9dfe8 [ 52.589991][ T6561] [ 52.854686][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.155'. [ 53.488408][ T6642] XFS (nbd3): no-recovery mounts must be read-only. [ 53.508824][ T5969] Bluetooth: hci3: command tx timeout [ 53.540902][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.162'. [ 53.774409][ T6665] 9pnet_fd: Insufficient options for proto=fd [ 53.854036][ T6678] FAULT_INJECTION: forcing a failure. [ 53.854036][ T6678] name failslab, interval 1, probability 0, space 0, times 0 [ 53.857984][ T6678] CPU: 2 UID: 0 PID: 6678 Comm: syz.3.174 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 53.858005][ T6678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.858012][ T6678] Call Trace: [ 53.858016][ T6678] [ 53.858019][ T6678] dump_stack_lvl+0x16c/0x1f0 [ 53.858034][ T6678] should_fail_ex+0x512/0x640 [ 53.858048][ T6678] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 53.858063][ T6678] should_failslab+0xc2/0x120 [ 53.858077][ T6678] __kmalloc_noprof+0xd2/0x510 [ 53.858087][ T6678] ? __pfx___mutex_lock+0x10/0x10 [ 53.858099][ T6678] ? rcu_is_watching+0x12/0xc0 [ 53.858113][ T6678] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 53.858130][ T6678] genl_start+0x18f/0x980 [ 53.858143][ T6678] __netlink_dump_start+0x60b/0x990 [ 53.858155][ T6678] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 53.858170][ T6678] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 53.858184][ T6678] ? genl_op_from_small+0x25/0x440 [ 53.858198][ T6678] ? __pfx_genl_get_cmd+0x10/0x10 [ 53.858209][ T6678] ? __pfx_genl_start+0x10/0x10 [ 53.858222][ T6678] ? __pfx_genl_dumpit+0x10/0x10 [ 53.858234][ T6678] ? __pfx_genl_done+0x10/0x10 [ 53.858247][ T6678] ? netlink_alloc_large_skb+0x69/0x130 [ 53.858259][ T6678] ? netlink_sendmsg+0x6a1/0xdd0 [ 53.858269][ T6678] ? __radix_tree_lookup+0x21f/0x2c0 [ 53.858287][ T6678] genl_rcv_msg+0x46e/0x800 [ 53.858301][ T6678] ? __pfx_genl_rcv_msg+0x10/0x10 [ 53.858314][ T6678] ? __pfx_ieee802154_llsec_dump_keys+0x10/0x10 [ 53.858327][ T6678] netlink_rcv_skb+0x155/0x420 [ 53.858338][ T6678] ? __pfx_genl_rcv_msg+0x10/0x10 [ 53.858352][ T6678] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 53.858365][ T6678] ? netlink_deliver_tap+0x1ae/0xd30 [ 53.858375][ T6678] ? selinux_netlink_send+0x578/0x830 [ 53.858389][ T6678] ? is_vmalloc_addr+0x86/0xa0 [ 53.858400][ T6678] genl_rcv+0x28/0x40 [ 53.858412][ T6678] netlink_unicast+0x5aa/0x870 [ 53.858424][ T6678] ? __pfx_netlink_unicast+0x10/0x10 [ 53.858437][ T6678] netlink_sendmsg+0x8d1/0xdd0 [ 53.858449][ T6678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.858462][ T6678] ____sys_sendmsg+0xa95/0xc70 [ 53.858493][ T6678] ? copy_msghdr_from_user+0x10a/0x160 [ 53.858504][ T6678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.858517][ T6678] ? __pfx_kstrtouint+0x10/0x10 [ 53.858528][ T6678] ? kstrtouint_from_user+0x13c/0x1d0 [ 53.858538][ T6678] ___sys_sendmsg+0x134/0x1d0 [ 53.858548][ T6678] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.858561][ T6678] ? rcu_is_watching+0x12/0xc0 [ 53.858575][ T6678] ? __mutex_unlock_slowpath+0x100/0x800 [ 53.858588][ T6678] __sys_sendmsg+0x16d/0x220 [ 53.858598][ T6678] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.858611][ T6678] do_syscall_64+0xcd/0x4c0 [ 53.858623][ T6678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.858634][ T6678] RIP: 0033:0x7fa3e358ebe9 [ 53.858643][ T6678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.858653][ T6678] RSP: 002b:00007fa3e443b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.858676][ T6678] RAX: ffffffffffffffda RBX: 00007fa3e37b5fa0 RCX: 00007fa3e358ebe9 [ 53.858683][ T6678] RDX: 0000000000008040 RSI: 0000200000000000 RDI: 0000000000000004 [ 53.858689][ T6678] RBP: 00007fa3e443b090 R08: 0000000000000000 R09: 0000000000000000 [ 53.858695][ T6678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.858701][ T6678] R13: 00007fa3e37b6038 R14: 00007fa3e37b5fa0 R15: 00007ffe39db21a8 [ 53.858710][ T6678] [ 54.228773][ T6039] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 54.358848][ T6039] usb 8-1: device descriptor read/64, error -71 [ 54.609430][ T6039] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 54.668303][ T6695] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 54.677016][ T6695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.688202][ T6695] veth3: entered promiscuous mode [ 54.691047][ T6695] bond1: (slave veth3): Enslaving as an active interface with a down link [ 54.711880][ T6698] Bluetooth: MGMT ver 1.23 [ 54.759700][ T6039] usb 8-1: device descriptor read/64, error -71 [ 54.761785][ T40] kauditd_printk_skb: 127 callbacks suppressed [ 54.761795][ T40] audit: type=1400 audit(1755407043.880:379): avc: denied { create } for pid=6703 comm="syz.2.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 54.770318][ T40] audit: type=1400 audit(1755407043.880:380): avc: denied { ioctl } for pid=6703 comm="syz.2.182" path="socket:[13730]" dev="sockfs" ino=13730 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 54.813822][ T40] audit: type=1400 audit(1755407043.930:381): avc: denied { create } for pid=6705 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 54.819875][ T40] audit: type=1400 audit(1755407043.930:382): avc: denied { bind } for pid=6705 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 54.836272][ T6708] tmpfs: Unknown parameter 'ÿÿÿÿ' [ 54.840856][ T6708] FAT-fs (sr0): bogus number of reserved sectors [ 54.843398][ T6708] FAT-fs (sr0): Can't find a valid FAT filesystem [ 54.879050][ T6039] usb usb8-port1: attempt power cycle [ 54.908814][ T6710] IPv6: sit1: Disabled Multicast RS [ 54.910820][ T6710] sit1: entered allmulticast mode [ 54.971944][ T40] audit: type=1400 audit(1755407044.090:383): avc: denied { append } for pid=6715 comm="syz.2.188" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.228776][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.228791][ T6039] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 55.254660][ T6039] usb 8-1: device descriptor read/8, error -71 [ 55.378863][ T24] usb 7-1: device descriptor read/64, error -71 [ 55.482021][ T40] audit: type=1400 audit(1755407044.600:384): avc: denied { load_policy } for pid=6725 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 55.482033][ T6726] SELinux: failed to load policy [ 55.491211][ T6726] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 55.509077][ T6039] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 55.531997][ T40] audit: type=1400 audit(1755407044.650:385): avc: denied { create } for pid=6730 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.532121][ T6039] usb 8-1: device descriptor read/8, error -71 [ 55.538017][ T40] audit: type=1400 audit(1755407044.650:386): avc: denied { connect } for pid=6730 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.570626][ T40] audit: type=1400 audit(1755407044.690:387): avc: denied { create } for pid=6734 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.576707][ T40] audit: type=1400 audit(1755407044.690:388): avc: denied { getopt } for pid=6734 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.588788][ T5969] Bluetooth: hci3: command tx timeout [ 55.609463][ T6739] ucma_write: process 188 (syz.1.195) changed security contexts after opening file descriptor, this is not allowed. [ 55.619414][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 55.646837][ T841] hid-generic 0005:0080:0003.0002: unknown main item tag 0x1 [ 55.649971][ T841] hid-generic 0005:0080:0003.0002: item fetching failed at offset 2/130 [ 55.652759][ T841] hid-generic 0005:0080:0003.0002: probe with driver hid-generic failed with error -22 [ 55.659137][ T6039] usb usb8-port1: unable to enumerate USB device [ 55.683524][ T6749] __nla_validate_parse: 2 callbacks suppressed [ 55.683536][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 55.749039][ T24] usb 7-1: device descriptor read/64, error -71 [ 55.858928][ T24] usb usb7-port1: attempt power cycle [ 56.198758][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 56.219205][ T24] usb 7-1: device descriptor read/8, error -71 [ 56.468741][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 56.499171][ T24] usb 7-1: device descriptor read/8, error -71 [ 56.609340][ T24] usb usb7-port1: unable to enumerate USB device [ 57.037129][ T6792] netlink: 11 bytes leftover after parsing attributes in process `syz.3.210'. [ 57.101828][ T6800] new mount options do not match the existing superblock, will be ignored [ 57.297935][ T6807] syz.3.214 (6807): drop_caches: 2 [ 57.302410][ T6807] IPv6: Can't replace route, no match found [ 57.359746][ T6821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65305 sclass=netlink_route_socket pid=6821 comm=syz.1.219 [ 57.677511][ T6845] netlink: 'syz.1.226': attribute type 10 has an invalid length. [ 57.680264][ T5969] Bluetooth: hci3: command tx timeout [ 57.681894][ T6845] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 57.685196][ T6845] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.226'. [ 57.688486][ T6843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 57.778864][ T841] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 57.928754][ T841] usb 8-1: Using ep0 maxpacket: 16 [ 57.931507][ T841] usb 8-1: config index 0 descriptor too short (expected 17170, got 18) [ 57.934103][ T841] usb 8-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 57.936824][ T841] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.940185][ T841] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 63 [ 57.944530][ T841] usb 8-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 57.947368][ T841] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.950013][ T841] usb 8-1: Product: syz [ 57.951389][ T841] usb 8-1: Manufacturer: syz [ 57.952903][ T841] usb 8-1: SerialNumber: syz [ 57.958895][ T841] usb 8-1: config 0 descriptor?? [ 58.155118][ T6874] lo: entered promiscuous mode [ 58.187094][ T6833] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 58.190548][ T6833] option changes via remount are deprecated (pid=6832 comm=syz.3.222) [ 58.199465][ T6833] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 58.203253][ T6833] exFAT-fs (nullb0): invalid boot record signature [ 58.205374][ T6833] exFAT-fs (nullb0): failed to read boot sector [ 58.207698][ T6833] exFAT-fs (nullb0): failed to recognize exfat type [ 58.222551][ T61] usb 8-1: USB disconnect, device number 11 [ 58.255933][ T6894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.233'. [ 58.259661][ T6894] netlink: 40 bytes leftover after parsing attributes in process `syz.2.233'. [ 58.265248][ T6894] syz.2.233 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 58.282611][ T6897] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 58.282845][ T6896] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 58.310194][ T6903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.363365][ T6913] netlink: 28 bytes leftover after parsing attributes in process `syz.4.238'. [ 58.793953][ T6930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.243'. [ 58.888810][ T61] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 58.947039][ T6943] ocfs2: Unknown parameter '—Õ:ÑZ˜¥´;À“»9b…U­hÄÎÝñ/íj?¦»^šüÚ¹(Ô»ëLÒ«gT¢Ý0m¸›é' [ 58.968405][ T6943] sp0: Synchronizing with TNC [ 59.041220][ T61] usb 9-1: config 2 has an invalid interface number: 248 but max is 2 [ 59.043835][ T61] usb 9-1: config 2 has an invalid interface association descriptor of length 5, skipping [ 59.046929][ T61] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 59.050342][ T61] usb 9-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 59.053138][ T61] usb 9-1: config 2 has no interface number 0 [ 59.055060][ T61] usb 9-1: config 2 interface 248 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 59.059302][ T61] usb 9-1: config 2 interface 248 has no altsetting 0 [ 59.063404][ T61] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=d1.44 [ 59.066183][ T61] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.068840][ T61] usb 9-1: Product: ﳿ [ 59.070151][ T61] usb 9-1: Manufacturer: â°Š [ 59.071623][ T61] usb 9-1: SerialNumber: Ъ [ 59.681029][ T61] asix 9-1:2.248 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 59.685660][ T61] asix 9-1:2.248: probe with driver asix failed with error -71 [ 59.690059][ T61] usb 9-1: USB disconnect, device number 2 [ 59.750532][ T6956] overlayfs: cannot append lower layer [ 60.007948][ T6968] overlay: filesystem on ./bus not supported as upperdir [ 60.181380][ T6972] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=50 sclass=netlink_xfrm_socket pid=6972 comm=syz.1.252 [ 60.190539][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 60.190550][ T40] audit: type=1400 audit(1755407049.310:416): avc: denied { create } for pid=6971 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 60.200167][ T40] audit: type=1400 audit(1755407049.310:417): avc: denied { ioctl } for pid=6971 comm="syz.1.252" path="socket:[15204]" dev="sockfs" ino=15204 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 60.210013][ T40] audit: type=1400 audit(1755407049.310:418): avc: denied { read } for pid=6971 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.266064][ T40] audit: type=1400 audit(1755407049.380:419): avc: denied { create } for pid=6971 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 60.274494][ T40] audit: type=1400 audit(1755407049.390:420): avc: denied { write } for pid=6971 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 60.312049][ T6978] netlink: 'syz.3.254': attribute type 1 has an invalid length. [ 60.313035][ T40] audit: type=1400 audit(1755407049.430:421): avc: denied { getopt } for pid=6977 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 60.322543][ T6978] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 60.427484][ T40] audit: type=1400 audit(1755407049.540:422): avc: denied { read } for pid=6988 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.455413][ T40] audit: type=1400 audit(1755407049.570:423): avc: denied { ioctl } for pid=6991 comm="syz.4.257" path="socket:[16517]" dev="sockfs" ino=16517 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.478546][ T6995] netlink: 'syz.3.256': attribute type 1 has an invalid length. [ 60.488026][ T6998] wireguard0: entered promiscuous mode [ 60.489977][ T6998] wireguard0: entered allmulticast mode [ 60.494787][ T6989] bond1: (slave bridge1): making interface the new active one [ 60.497295][ T6989] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 60.573190][ T7005] IPv4: Oversized IP packet from 127.202.26.0 [ 60.574742][ T40] audit: type=1400 audit(1755407049.690:424): avc: denied { accept } for pid=7004 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.604119][ T6959] ceph: No mds server is up or the cluster is laggy [ 60.690137][ T40] audit: type=1400 audit(1755407049.810:425): avc: denied { create } for pid=7025 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 60.690984][ T7026] netlink: 36 bytes leftover after parsing attributes in process `syz.4.267'. [ 60.736336][ T7029] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.268'. [ 60.756397][ T7032] 8021q: VLANs not supported on wg2 [ 60.928088][ T7037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.271'. [ 61.092784][ T7072] netlink: 80 bytes leftover after parsing attributes in process `syz.1.283'. [ 61.208617][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 61.211363][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 61.249010][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'. [ 61.270762][ T7123] smb3: Unknown parameter 'rdma/net/tun' [ 61.395482][ T7138] netlink: 'syz.4.299': attribute type 1 has an invalid length. [ 61.403015][ T7138] 8021q: adding VLAN 0 to HW filter on device bond3 [ 61.410705][ T7138] bond3: (slave wlan0): Enslaving as an active interface with a down link [ 61.414691][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'. [ 61.451297][ T7142] QAT: Device 2 not found [ 61.535929][ T7150] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 61.546514][ T7153] mac80211_hwsim hwsim3 aëÿÿt,net: renamed from wlan1 (while UP) [ 61.668265][ T7173] capability: warning: `syz.4.311' uses deprecated v2 capabilities in a way that may be insecure [ 61.868767][ T840] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 62.030141][ T840] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 62.032758][ T840] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 62.036083][ T840] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 62.040296][ T840] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 62.043841][ T840] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 62.047975][ T840] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 62.050542][ T840] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 62.054259][ T840] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 62.057895][ T840] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 62.061761][ T840] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 62.065953][ T840] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 62.068312][ T840] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 62.071906][ T840] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 62.075662][ T840] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 62.079183][ T840] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 62.079184][ T24] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 62.081301][ T840] usb 7-1: string descriptor 0 read error: -22 [ 62.087303][ T840] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 62.090224][ T840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.095432][ T840] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 62.239856][ T24] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 62.242542][ T24] usb 9-1: config 0 has no interface number 0 [ 62.244456][ T24] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 62.247786][ T24] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 62.251262][ T24] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 62.255003][ T24] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 62.258405][ T24] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 62.262388][ T24] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 62.266472][ T24] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 62.269485][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.274706][ T24] usb 9-1: config 0 descriptor?? [ 62.276856][ T7186] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 62.279298][ T7186] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 62.284187][ T24] ldusb 9-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 62.443392][ T7213] kvm: pic: non byte read [ 62.446111][ T7213] kvm: pic: non byte read [ 62.449346][ T7213] kvm: pic: non byte read [ 62.451961][ T7213] kvm: pic: non byte read [ 62.454549][ T7213] kvm: pic: non byte read [ 62.457101][ T7213] kvm: pic: non byte read [ 62.459774][ T7213] kvm: pic: non byte read [ 62.462324][ T7213] kvm: pic: non byte read [ 62.464979][ T7213] kvm: pic: non byte read [ 62.467541][ T7213] kvm: pic: non byte read [ 62.477076][ T7213] kvm: pic: level sensitive irq not supported [ 63.268767][ T5969] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 63.268946][ T5978] Bluetooth: hci4: command 0xfc11 tx timeout [ 63.272010][ T7230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.324'. [ 63.403279][ T7252] loop6: detected capacity change from 0 to 64 [ 63.407002][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.410271][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.413515][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.416297][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.419554][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.432114][ T5969] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 64.310488][ T6232] usb 9-1: USB disconnect, device number 3 [ 64.311596][ T1029] usb 7-1: USB disconnect, device number 6 [ 64.313265][ T6232] ldusb 9-1:0.55: LD USB Device #1 now disconnected [ 64.323879][ T7336] input: syz1 as /devices/virtual/input/input8 [ 64.334907][ T7338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.331'. [ 64.532063][ T7355] kvm: pic: level sensitive irq not supported [ 64.779143][ T840] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 64.829405][ T5969] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 64.943801][ T7426] tipc: Started in network mode [ 64.945469][ T7426] tipc: Node identity ac1414aa, cluster identity 4711 [ 64.947884][ T7426] tipc: Enabled bearer , priority 10 [ 64.948779][ T840] usb 8-1: Using ep0 maxpacket: 32 [ 64.952592][ T840] usb 8-1: config 0 has no interfaces? [ 64.955719][ T840] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 64.958599][ T840] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 64.962689][ T840] usb 8-1: Product: syz [ 64.964021][ T840] usb 8-1: Manufacturer: syz [ 64.965478][ T840] usb 8-1: SerialNumber: syz [ 64.971315][ T840] usb 8-1: config 0 descriptor?? [ 65.001512][ T7434] macvlan2: entered promiscuous mode [ 65.003334][ T7434] macvlan2: entered allmulticast mode [ 65.013272][ T7434] SELinux: unknown common  [ 65.014884][ T7434] SELinux: failed to load policy [ 65.172376][ T7452] 8021q: adding VLAN 0 to HW filter on device bond4 [ 65.174102][ T840] usb 8-1: USB disconnect, device number 12 [ 65.198112][ T5969] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 65.277258][ T7459] vlan2: entered promiscuous mode [ 65.280167][ T7459] vlan2: entered allmulticast mode [ 65.282873][ T7459] hsr_slave_1: entered allmulticast mode [ 65.303945][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 65.303954][ T40] audit: type=1400 audit(1755407054.420:460): avc: denied { bind } for pid=7466 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 65.305427][ T7469] syz_tun: entered allmulticast mode [ 65.316520][ T40] audit: type=1400 audit(1755407054.430:461): avc: denied { connect } for pid=7466 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 65.395687][ T40] audit: type=1400 audit(1755407054.510:462): avc: denied { write } for pid=7470 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 65.472323][ T7474] FAT-fs (sr0): bogus number of reserved sectors [ 65.474347][ T7474] FAT-fs (sr0): Can't find a valid FAT filesystem [ 65.523670][ T7478] virtio-fs: tag not found [ 65.616362][ T40] audit: type=1326 audit(1755407054.730:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7484 comm="syz.1.357" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff23eb8ebe9 code=0x0 [ 65.745923][ T7491] kvm: pic: level sensitive irq not supported [ 65.905562][ T7512] pim6reg: entered allmulticast mode [ 65.907989][ T7512] pim6reg: left allmulticast mode [ 65.911019][ T7514] kAFS: No cell specified [ 65.912922][ T40] audit: type=1400 audit(1755407055.030:464): avc: denied { getopt } for pid=7513 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.924134][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.366'. [ 65.948784][ T1022] tipc: Node number set to 2886997162 [ 65.986678][ T7518] netlink: 'syz.4.367': attribute type 64 has an invalid length. [ 65.988873][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.989475][ T7518] netlink: 'syz.4.367': attribute type 4 has an invalid length. [ 65.994148][ T7518] netlink: 152 bytes leftover after parsing attributes in process `syz.4.367'. [ 65.999659][ T7518] netlink: 'syz.4.367': attribute type 64 has an invalid length. [ 66.002283][ T7518] netlink: 'syz.4.367': attribute type 4 has an invalid length. [ 66.004773][ T7518] netlink: 152 bytes leftover after parsing attributes in process `syz.4.367'. [ 66.048798][ T24] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 66.065931][ T40] audit: type=1400 audit(1755407055.180:465): avc: denied { setopt } for pid=7532 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.072164][ T40] audit: type=1400 audit(1755407055.180:466): avc: denied { connect } for pid=7532 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.074952][ T7533] input: syz1 as /devices/virtual/input/input9 [ 66.112316][ T7535] netlink: 'syz.4.372': attribute type 3 has an invalid length. [ 66.114838][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.372'. [ 66.205036][ T7485] batman_adv: batadv0: Adding interface: gretap1 [ 66.207334][ T7485] batman_adv: batadv0: Interface activated: gretap1 [ 66.212182][ T24] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 66.215173][ T24] usb 7-1: can't read configurations, error -71 [ 66.229134][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.249879][ T840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.260388][ T7537] trusted_key: encrypted_key: keylen parameter is missing [ 66.284641][ T7539] netlink: 20 bytes leftover after parsing attributes in process `syz.3.374'. [ 66.368804][ T6039] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 66.376723][ T7547] vxfs: WRONG superblock magic 00000000 at 1 [ 66.379058][ T7547] vxfs: WRONG superblock magic 00000000 at 8 [ 66.380998][ T7547] vxfs: can't find superblock. [ 66.388830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.405423][ T40] audit: type=1400 audit(1755407055.520:467): avc: denied { connect } for pid=7549 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.413016][ T40] audit: type=1400 audit(1755407055.520:468): avc: denied { connect } for pid=7549 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.436687][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.379'. [ 66.539843][ T6039] usb 9-1: Using ep0 maxpacket: 8 [ 66.543456][ T6039] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 66.546642][ T6039] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 66.550566][ T6039] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 66.554223][ T6039] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.558462][ T6039] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 66.558975][ T840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.561407][ T6039] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.603447][ T7562] binder: 7561:7562 ioctl c0306201 0 returned -14 [ 66.605750][ T7562] binder: 7561:7562 ioctl 4018620d 0 returned -22 [ 66.729318][ T40] audit: type=1400 audit(1755407055.850:469): avc: denied { getopt } for pid=7569 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 66.749471][ T7575] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.386'. [ 66.770296][ T6039] usb 9-1: GET_CAPABILITIES returned 0 [ 66.772550][ T6039] usbtmc 9-1:16.0: can't read capabilities [ 66.777828][ T7577] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.787951][ T7577] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 66.793957][ T7577] bond_slave_0: entered promiscuous mode [ 66.795830][ T7577] bond_slave_1: entered promiscuous mode [ 66.797811][ T7577] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 66.800948][ T7577] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 66.808883][ T7577] bridge_slave_0: left allmulticast mode [ 66.810768][ T7577] bridge_slave_0: left promiscuous mode [ 66.812659][ T7577] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.815926][ T7577] bridge_slave_1: left allmulticast mode [ 66.817728][ T7577] bridge_slave_1: left promiscuous mode [ 66.819877][ T7577] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.824288][ T7577] bond0: (slave bond_slave_0): Releasing backup interface [ 66.827239][ T7577] bond_slave_0: left promiscuous mode [ 66.830414][ T7577] bond0: (slave bond_slave_1): Releasing backup interface [ 66.833567][ T7577] bond_slave_1: left promiscuous mode [ 66.837271][ T7577] team0: Port device team_slave_0 removed [ 66.841628][ T7577] team0: Port device team_slave_1 removed [ 66.844417][ T7577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.847234][ T7577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.851000][ T7577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.853368][ T7577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.860024][ T7577] bond1: (slave veth3): Releasing active interface [ 66.862992][ T7577] batman_adv: batadv0: Interface deactivated: gretap1 [ 66.865145][ T7577] batman_adv: batadv0: Removing interface: gretap1 [ 66.867919][ T7577] bond2: (slave ip6gretap1): Releasing backup interface [ 66.870632][ T7577] bond2: (slave ip6gretap1): the permanent HWaddr of slave - b6:ec:60:92:4b:d2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 66.877112][ T7577] bond2: (slave macvlan2): Releasing backup interface [ 66.879928][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.885989][ T7580] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 66.889013][ T840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.029028][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.032454][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.254512][ T7601] netlink: 'syz.2.393': attribute type 3 has an invalid length. [ 67.256965][ T7601] netlink: 'syz.2.393': attribute type 1 has an invalid length. [ 67.259520][ T7601] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.393'. [ 67.340778][ T7613] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 67.349743][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.361228][ T7615] netlink: 'syz.2.398': attribute type 2 has an invalid length. [ 67.363965][ T7615] netlink: 'syz.2.398': attribute type 1 has an invalid length. [ 67.366405][ T7615] netlink: 'syz.2.398': attribute type 1 has an invalid length. [ 67.369377][ T7615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.398'. [ 67.508873][ T5969] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 67.511682][ T5969] Bluetooth: hci1: Injecting HCI hardware error event [ 67.514023][ T5969] Bluetooth: hci1: hardware error 0x00 [ 67.576209][ T7634] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.405'. [ 67.580080][ T7634] nbd: must specify a device to reconfigure [ 67.604931][ T7637] No source specified [ 67.605448][ T7636] No source specified [ 67.714672][ T7644] random: crng reseeded on system resumption [ 67.885027][ T7650] binder: Unknown parameter '}ax' [ 68.233139][ T7661] 9pnet: Unknown protocol version 9p20\++} [ 68.279379][ T7666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=7666 comm=syz.1.415 [ 68.471638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 68.489905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #388!!! [ 68.523195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 68.892674][ T24] usb 9-1: USB disconnect, device number 4 [ 69.149812][ T5978] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 69.408467][ T7723] overlayfs: missing 'lowerdir' [ 69.500669][ T7746] ceph: Path missing in source [ 69.502373][ T7746] ceph: Path missing in source [ 69.503995][ T7746] ceph: Path missing in source [ 69.506450][ T7746] ceph: Path missing in source [ 69.508139][ T7746] ceph: Path missing in source [ 69.537753][ T5978] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 69.589062][ T5969] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 69.759268][ T7773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1558 sclass=netlink_route_socket pid=7773 comm=syz.4.446 [ 69.931786][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 69.932132][ T7780] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 70.186107][ T1155] Bluetooth: hci4: Frame reassembly failed (-84) [ 70.396538][ T7821] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.546108][ T7835] 9pnet: Could not find request transport: vi [ 70.696708][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 70.696718][ T40] audit: type=1400 audit(1755407059.810:486): avc: denied { mounton } for pid=7842 comm="syz.3.467" path="/127/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 70.727372][ T40] audit: type=1400 audit(1755407059.840:487): avc: denied { mounton } for pid=7844 comm="syz.3.468" path="/128/file0" dev="tmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 70.758479][ T7847] SELinux: ebitmap start bit (132096) is beyond the end of the bitmap (1472) [ 70.765254][ T7847] SELinux: failed to load policy [ 70.821787][ T40] audit: type=1400 audit(1755407059.940:488): avc: denied { associate } for pid=7850 comm="syz.3.471" name="cgroup.stat" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 70.947394][ T40] audit: type=1400 audit(1755407060.060:489): avc: denied { mounton } for pid=7856 comm="syz.1.475" path="/syzcgroup/unified/syz1/cgroup.procs" dev="cgroup2" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 70.969728][ T7860] kvm: user requested TSC rate below hardware speed [ 70.975358][ T7860] kvm: user requested TSC rate below hardware speed [ 71.008311][ T40] audit: type=1400 audit(1755407060.120:490): avc: denied { append } for pid=7864 comm="syz.1.476" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.009456][ T7865] comedi comedi0: Minor -1 is invalid! [ 71.090116][ T40] audit: type=1400 audit(1755407060.210:491): avc: denied { listen } for pid=7870 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.108598][ T40] audit: type=1400 audit(1755407060.220:492): avc: denied { create } for pid=7870 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 71.117239][ T40] audit: type=1400 audit(1755407060.230:493): avc: denied { getopt } for pid=7870 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 71.190140][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.190227][ T40] audit: type=1400 audit(1755407060.310:494): avc: denied { watch_mount } for pid=7878 comm="syz.3.481" path="/133" dev="tmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.192237][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.378854][ T1022] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 71.528806][ T1022] usb 6-1: Using ep0 maxpacket: 8 [ 71.532763][ T1022] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 71.535348][ T1022] usb 6-1: config 0 has no interface number 0 [ 71.537255][ T1022] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 71.541067][ T1022] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 71.543856][ T1022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.548125][ T1022] usb 6-1: config 0 descriptor?? [ 71.551490][ T1022] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 71.770025][ T841] usb 6-1: USB disconnect, device number 4 [ 72.001088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.005050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.032689][ T7889] pim6reg: entered allmulticast mode [ 72.035345][ T7889] pim6reg: left allmulticast mode [ 72.067578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.149784][ T40] audit: type=1400 audit(1755407061.270:495): avc: denied { module_request } for pid=7890 comm="syz.3.484" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.231442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.235633][ T7899] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7899 comm=syz.3.486 [ 72.238932][ T5969] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 72.242127][ T5978] Bluetooth: hci4: command 0xfc11 tx timeout [ 72.750102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.760061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 72.773537][ T7903] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 72.821349][ T7910] __nla_validate_parse: 10 callbacks suppressed [ 72.821360][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'. [ 72.827382][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'. [ 72.841198][ T7905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 72.889203][ T7919] ubi31: attaching mtd0 [ 72.891135][ T7919] ubi31: scanning is finished [ 72.892931][ T7919] ubi31: empty MTD device detected [ 72.940680][ T7928] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.493'. [ 72.945925][ T7919] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 72.948393][ T7919] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 72.951482][ T7919] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 72.953801][ T7919] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 72.956642][ T7919] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 72.958916][ T7919] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 72.961687][ T7919] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2132947983 [ 72.964874][ T7919] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 72.968031][ T7930] ubi31: background thread "ubi_bgt31d" started, PID 7930 [ 73.061472][ T7937] netlink: 182 bytes leftover after parsing attributes in process `syz.1.499'. [ 73.064562][ T7937] trusted_key: encrypted_key: hex blob is missing [ 73.367966][ T7976] netlink: 52 bytes leftover after parsing attributes in process `syz.1.510'. [ 73.373846][ T7976] usb usb8: usbfs: process 7976 (syz.1.510) did not claim interface 0 before use [ 73.474557][ T7987] mkiss: ax0: crc mode is auto. [ 73.545906][ T7999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.516'. [ 73.576253][ T8004] sp0: Synchronizing with TNC [ 73.663879][ T8011] netlink: 272 bytes leftover after parsing attributes in process `syz.1.520'. [ 73.719679][ T8017] 9pnet_virtio: no channels available for device 127.0.0.1 [ 73.780776][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'. [ 73.845175][ T8031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8031 comm=syz.2.526 [ 73.857340][ T8031] CUSE: unknown device info "" [ 73.859944][ T8031] CUSE: zero length info key specified [ 73.937157][ T8044] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 73.946005][ T8044] CIFS mount error: No usable UNC path provided in device string! [ 73.946005][ T8044] [ 73.949391][ T8044] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 74.113435][ T8057] netlink: 52 bytes leftover after parsing attributes in process `syz.3.535'. [ 74.180240][ T8064] net_ratelimit: 5 callbacks suppressed [ 74.180251][ T8064] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 74.188352][ T8064] program syz.3.538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.235480][ T8068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.540'. [ 74.240239][ T8068] validate_nla: 7 callbacks suppressed [ 74.240249][ T8068] netlink: 'syz.4.540': attribute type 10 has an invalid length. [ 74.246745][ T8068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.250448][ T8068] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 74.320676][ T59] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 74.409710][ T8099] syz.4.548: attempt to access beyond end of device [ 74.409710][ T8099] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 74.413783][ T8099] syz.4.548: attempt to access beyond end of device [ 74.413783][ T8099] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 74.417706][ T8099] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 74.421630][ T8099] syz.4.548: attempt to access beyond end of device [ 74.421630][ T8099] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 74.425663][ T8099] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 74.429034][ T8099] syz.4.548: attempt to access beyond end of device [ 74.429034][ T8099] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 74.435734][ T8099] syz.4.548: attempt to access beyond end of device [ 74.435734][ T8099] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 74.439783][ T8099] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 74.442827][ T8099] syz.4.548: attempt to access beyond end of device [ 74.442827][ T8099] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 74.446924][ T8099] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 74.451893][ T8099] syz.4.548: attempt to access beyond end of device [ 74.451893][ T8099] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 74.456035][ T8099] syz.4.548: attempt to access beyond end of device [ 74.456035][ T8099] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 74.460360][ T8099] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 74.463490][ T8099] syz.4.548: attempt to access beyond end of device [ 74.463490][ T8099] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 74.467526][ T8099] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 74.470233][ T59] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 74.470841][ T8099] syz.4.548: attempt to access beyond end of device [ 74.470841][ T8099] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 74.476514][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.477970][ T8099] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 74.485556][ T59] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 74.486320][ T8103] IPv6: sit1: Disabled Multicast RS [ 74.488459][ T59] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 74.490584][ T8099] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 74.494000][ T59] usb 7-1: Manufacturer: syz [ 74.495586][ T8099] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 74.500542][ T8103] sit1: entered allmulticast mode [ 74.505805][ T59] usb 7-1: config 0 descriptor?? [ 74.558761][ T59] rc_core: IR keymap rc-hauppauge not found [ 74.561091][ T59] Registered IR keymap rc-empty [ 74.563208][ T59] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 74.566754][ T59] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input11 [ 74.672756][ T8123] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 74.716217][ T59] usb 7-1: USB disconnect, device number 9 [ 74.775613][ T8132] fuse: Unknown parameter 'ávñJ ;íÄD€h âÀ|WŸ›D' [ 74.937355][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x16 [ 75.653999][ T8198] tmpfs: Unknown parameter 'moÒã' [ 75.875293][ T8210] /dev/sg0: Can't lookup blockdev [ 76.022884][ T8216] cdrom: dropping to single frame dma [ 76.042097][ T8221] 9pnet_virtio: no channels available for device syz [ 76.085415][ T8225] binder: 8224:8225 ioctl c0306201 0 returned -14 [ 76.097869][ T8225] binder: 8224:8225 ioctl c0306201 200000000040 returned -11 [ 76.155735][ T8229] binder: 8224:8229 ioctl c0306201 0 returned -14 [ 76.411995][ T5969] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 76.491247][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 76.491259][ T40] audit: type=1400 audit(1755407065.610:531): avc: denied { create } for pid=8253 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 76.509135][ T40] audit: type=1400 audit(1755407065.630:532): avc: denied { setattr } for pid=8247 comm="syz.3.584" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 76.660101][ T40] audit: type=1800 audit(1755407065.780:533): pid=8271 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.589" name="file0" dev="tmpfs" ino=693 res=0 errno=0 [ 76.668926][ T40] audit: type=1800 audit(1755407065.780:534): pid=8271 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.589" name="file0" dev="tmpfs" ino=693 res=0 errno=0 [ 76.676089][ T40] audit: type=1804 audit(1755407065.780:535): pid=8271 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.589" name="/newroot/128/file0" dev="tmpfs" ino=693 res=1 errno=0 [ 76.712981][ T40] audit: type=1400 audit(1755407065.830:536): avc: denied { create } for pid=8274 comm="syz.4.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 76.719687][ T40] audit: type=1400 audit(1755407065.830:537): avc: denied { sys_admin } for pid=8274 comm="syz.4.590" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 76.856856][ T40] audit: type=1400 audit(1755407065.970:538): avc: denied { getopt } for pid=8281 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.012314][ T8285] tipc: Enabled bearer , priority 10 [ 77.016461][ T8285] veth0_to_bond: entered allmulticast mode [ 77.105032][ T8294] erofs (device nbd2): cannot find valid erofs superblock [ 77.251424][ T40] audit: type=1800 audit(1755407066.370:539): pid=8300 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.598" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 77.260019][ T40] audit: type=1326 audit(1755407066.370:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8299 comm="syz.1.598" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff23eb8ebe9 code=0x0 [ 77.359266][ T8308] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 77.359287][ T8307] IPVS: stopping backup sync thread 8308 ... [ 77.368628][ T8311] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 77.419679][ T61] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 77.442021][ T8319] binder: BINDER_SET_CONTEXT_MGR already set [ 77.444242][ T8319] binder: 8317:8319 ioctl 4018620d 200000000100 returned -16 [ 77.465141][ T8323] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 77.579325][ T61] usb 7-1: Using ep0 maxpacket: 8 [ 77.591875][ T61] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 77.595405][ T61] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 77.598521][ T61] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.606233][ T61] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.611230][ T61] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.614091][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.826787][ T61] usb 7-1: GET_CAPABILITIES returned 0 [ 77.828854][ T61] usbtmc 7-1:16.0: can't read capabilities [ 78.039687][ T61] usb 7-1: USB disconnect, device number 10 [ 78.099970][ T8359] syzkaller0: entered promiscuous mode [ 78.101930][ T8359] syzkaller0: entered allmulticast mode [ 78.110043][ T8359] lo: left promiscuous mode [ 78.117830][ T8359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.586881][ T8371] 9pnet_virtio: no channels available for device 127.0.0.1 [ 78.588370][ T8373] 8021q: adding VLAN 0 to HW filter on device bond5 [ 78.601541][ T8373] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 78.607828][ T8373] bond_slave_0: entered promiscuous mode [ 78.609713][ T8373] bond_slave_1: entered promiscuous mode [ 78.611606][ T8373] batadv0: entered promiscuous mode [ 78.612259][ T8376] sock: sock_set_timeout: `syz.2.623' (pid 8376) tries to set negative timeout [ 78.613755][ T8373] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 78.619833][ T8373] bond5: (slave macvlan3): Enslaving as a backup interface with an up link [ 78.627719][ T8373] bond0: (slave batadv0): Releasing backup interface [ 78.632234][ T8373] batadv0: left promiscuous mode [ 78.636522][ T8373] bridge_slave_0: left allmulticast mode [ 78.638312][ T8373] bridge_slave_0: left promiscuous mode [ 78.640519][ T8373] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.648044][ T8373] bridge_slave_1: left allmulticast mode [ 78.650130][ T8373] bridge_slave_1: left promiscuous mode [ 78.652027][ T8373] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.652168][ T8377] sock: sock_set_timeout: `syz.2.623' (pid 8377) tries to set negative timeout [ 78.660977][ T8373] bond0: (slave bond_slave_0): Releasing backup interface [ 78.666393][ T8373] bond_slave_0: left promiscuous mode [ 78.676246][ T8373] bond0: (slave bond_slave_1): Releasing backup interface [ 78.686442][ T8373] bond_slave_1: left promiscuous mode [ 78.688969][ T1155] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 78.694269][ T8373] team0: Port device team_slave_0 removed [ 78.699265][ T8373] team0: Port device team_slave_1 removed [ 78.701388][ T8373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.703800][ T8373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.707815][ T8373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.710319][ T8373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.719631][ T8373] bond3: (slave wlan0): Releasing active interface [ 78.729896][ T8373] bond5: (slave ip6gretap1): Releasing backup interface [ 78.732105][ T8373] bond5: (slave ip6gretap1): the permanent HWaddr of slave - 06:c3:34:e8:c8:94 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 78.741756][ T8373] bond5: (slave macvlan3): Removing an active aggregator [ 78.744243][ T8373] bond5: (slave macvlan3): Releasing backup interface [ 78.822850][ T8396] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 78.894825][ T5969] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 78.914725][ T8407] trusted_key: syz.4.632 sent an empty control message without MSG_MORE. [ 79.168787][ T1022] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 79.318737][ T1022] usb 9-1: Using ep0 maxpacket: 8 [ 79.322625][ T1022] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 79.327258][ T1022] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 79.331752][ T1022] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.335924][ T1022] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.341653][ T1022] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 79.345693][ T1022] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.550580][ T8418] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 79.551916][ T1022] usb 9-1: GET_CAPABILITIES returned 0 [ 79.554962][ T1022] usbtmc 9-1:16.0: can't read capabilities [ 79.766453][ T5976] usb 9-1: USB disconnect, device number 5 [ 79.788461][ T8434] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 79.791491][ T8434] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 79.794207][ T8434] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 79.796723][ T8434] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 79.845991][ T5969] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 79.899495][ T8444] netlink: 'syz.1.643': attribute type 10 has an invalid length. [ 79.911201][ T8444] hsr_slave_0: left promiscuous mode [ 79.913916][ T8444] hsr_slave_1: left promiscuous mode [ 79.951982][ T8446] __nla_validate_parse: 12 callbacks suppressed [ 79.951993][ T8446] netlink: 76 bytes leftover after parsing attributes in process `syz.1.643'. [ 80.043656][ T8449] bio_check_eod: 2 callbacks suppressed [ 80.043668][ T8449] syz.4.644: attempt to access beyond end of device [ 80.043668][ T8449] loop4: rw=0, sector=1, nr_sectors = 1 limit=0 [ 80.050216][ T8449] qnx4: unable to read the superblock [ 80.075655][ T8459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8459 comm=syz.1.647 [ 80.132959][ T8465] netlink: 'syz.4.650': attribute type 4 has an invalid length. [ 80.191036][ T8472] sp0: Synchronizing with TNC [ 80.248399][ T8471] [U] è` [ 80.292214][ T8486] random: crng reseeded on system resumption [ 80.329439][ T8491] syz_tun: entered allmulticast mode [ 80.333094][ T8490] syz_tun: left allmulticast mode [ 80.386159][ T8493] netlink: 'syz.2.659': attribute type 1 has an invalid length. [ 80.393259][ T8493] 8021q: adding VLAN 0 to HW filter on device bond3 [ 80.415440][ T8493] bond3: (slave veth7): Enslaving as an active interface with a down link [ 80.429185][ T8493] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 80.431560][ T8493] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 80.438939][ T8497] 9pnet_fd: Insufficient options for proto=fd [ 80.466071][ T8506] loop6: detected capacity change from 0 to 63 [ 80.470273][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.472858][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.475384][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.483060][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.487378][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.491158][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.494451][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.496931][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.500240][ T5959] ldm_validate_partition_table(): Disk read failed. [ 80.502521][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.505011][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.507608][ T5959] Dev loop6: unable to read RDB block 0 [ 80.509970][ T5959] loop6: unable to read partition table [ 80.533182][ T8506] ldm_validate_partition_table(): Disk read failed. [ 80.535499][ T8506] Dev loop6: unable to read RDB block 0 [ 80.537421][ T8506] loop6: unable to read partition table [ 80.539991][ T8506] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 80.557308][ T8514] netlink: 'syz.1.667': attribute type 1 has an invalid length. [ 80.559996][ T8514] netlink: 228 bytes leftover after parsing attributes in process `syz.1.667'. [ 80.583608][ T8519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.669'. [ 80.587063][ T8519] fuse: Bad value for 'user_id' [ 80.589670][ T8519] fuse: Bad value for 'user_id' [ 80.626205][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.672'. [ 80.658642][ T8530] program syz.1.673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.694989][ T8534] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 80.736766][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'. [ 80.745913][ T8539] bridge1: entered allmulticast mode [ 80.749680][ T8540] bridge2: entered allmulticast mode [ 81.100035][ T841] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 81.248926][ T841] usb 6-1: Using ep0 maxpacket: 8 [ 81.252638][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.256311][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.260089][ T841] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 81.262998][ T841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.267098][ T841] usb 6-1: config 0 descriptor?? [ 81.312653][ T8570] netlink: 'syz.3.682': attribute type 64 has an invalid length. [ 81.315244][ T8570] netlink: 'syz.3.682': attribute type 4 has an invalid length. [ 81.317640][ T8570] netlink: 152 bytes leftover after parsing attributes in process `syz.3.682'. [ 81.429086][ T10] cfg80211: failed to load regulatory.db [ 81.477427][ T841] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 81.680690][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 81.680702][ T40] audit: type=1400 audit(1755407070.800:566): avc: denied { create } for pid=8545 comm="syz.1.679" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 81.738207][ T40] audit: type=1400 audit(1755407070.850:567): avc: denied { wake_alarm } for pid=8583 comm="syz.4.685" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 81.740607][ T8584] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.752684][ T8587] iowarrior 6-1:0.0: Error -90 while submitting URB [ 81.764743][ T40] audit: type=1400 audit(1755407070.880:568): avc: denied { bind } for pid=8583 comm="syz.4.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.997722][ T10] usb 6-1: USB disconnect, device number 5 [ 82.268775][ T1022] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 82.331550][ T40] audit: type=1400 audit(1755407071.450:569): avc: denied { read } for pid=8605 comm="syz.3.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.339675][ T8606] loop6: detected capacity change from 0 to 524287999 [ 82.409327][ T40] audit: type=1400 audit(1755407071.530:570): avc: denied { setopt } for pid=8608 comm="syz.2.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.429864][ T1022] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.433247][ T1022] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.438176][ T1022] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.442772][ T1022] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.445574][ T1022] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.453849][ T1022] usb 9-1: config 0 descriptor?? [ 82.613812][ T40] audit: type=1400 audit(1755407071.730:571): avc: denied { getopt } for pid=8631 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 82.620101][ T40] audit: type=1400 audit(1755407071.730:572): avc: denied { read } for pid=8631 comm="syz.1.696" path="socket:[25831]" dev="sockfs" ino=25831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.714923][ T8639] netlink: 344 bytes leftover after parsing attributes in process `syz.2.697'. [ 82.781511][ T8643] netlink: 'syz.2.699': attribute type 10 has an invalid length. [ 82.786008][ T8643] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 82.810603][ T1022] usbhid 9-1:0.0: can't add hid device: -71 [ 82.812713][ T1022] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 82.817468][ T1022] usb 9-1: USB disconnect, device number 6 [ 82.845614][ T8650] 8021q: VLANs not supported on ip_vti0 [ 82.869519][ T40] audit: type=1400 audit(1755407071.990:573): avc: denied { getopt } for pid=8651 comm="syz.4.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.898422][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 82.908041][ T8656] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 82.916418][ T8656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.704'. [ 83.058784][ T5969] Bluetooth: hci2: command tx timeout [ 83.225045][ T40] audit: type=1400 audit(1755407072.340:574): avc: denied { mounton } for pid=8662 comm="syz.4.708" path="/file0" dev="ramfs" ino=25924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 83.256427][ T8668] netlink: 'syz.2.706': attribute type 74 has an invalid length. [ 83.273970][ T40] audit: type=1400 audit(1755407072.390:575): avc: denied { getopt } for pid=8666 comm="syz.2.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 83.339204][ T8675] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 83.417809][ T8681] netlink: 'syz.4.714': attribute type 14 has an invalid length. [ 83.421590][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.714'. [ 83.427548][ T1155] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.430485][ T8681] netlink: 'syz.4.714': attribute type 14 has an invalid length. [ 83.435101][ T1155] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.438598][ T1155] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.443141][ T1155] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.495136][ T8684] veth0_vlan: left promiscuous mode [ 83.581470][ T8683] lo: entered allmulticast mode [ 83.583889][ T8683] tunl0: entered allmulticast mode [ 83.586192][ T8683] gre0: entered allmulticast mode [ 83.591493][ T8683] gretap0: entered allmulticast mode [ 83.599985][ T8683] erspan0: entered allmulticast mode [ 83.602733][ T8683] ip_vti0: entered allmulticast mode [ 83.605313][ T8683] ip6_vti0: entered allmulticast mode [ 83.608223][ T8683] sit0: entered allmulticast mode [ 83.613491][ T8683] ip6tnl0: entered allmulticast mode [ 83.616804][ T8683] ip6gre0: entered allmulticast mode [ 83.620610][ T8683] syz_tun: entered allmulticast mode [ 83.624436][ T8683] ip6gretap0: entered allmulticast mode [ 83.629031][ T8683] bridge0: entered allmulticast mode [ 83.631958][ T8683] vcan0: entered allmulticast mode [ 83.635821][ T8683] bond0: entered allmulticast mode [ 83.641219][ T8683] team0: entered allmulticast mode [ 83.644594][ T8683] dummy0: entered allmulticast mode [ 83.648282][ T8683] nlmon0: entered allmulticast mode [ 83.666361][ T8683] caif0: entered allmulticast mode [ 83.668524][ T8683] batadv0: entered allmulticast mode [ 83.670921][ T8683] vxcan0: entered allmulticast mode [ 83.673362][ T8683] vxcan1: entered allmulticast mode [ 83.675738][ T8683] veth0: entered allmulticast mode [ 83.678791][ T8683] veth1: entered allmulticast mode [ 83.698022][ T8683] wg0: entered allmulticast mode [ 83.713732][ T8683] wg1: entered allmulticast mode [ 83.723794][ T8683] wg2: entered allmulticast mode [ 83.726127][ T8683] veth0_to_bridge: entered allmulticast mode [ 83.730076][ T8683] bridge_slave_0: entered allmulticast mode [ 83.732669][ T8683] veth1_to_bridge: entered allmulticast mode [ 83.739912][ T8683] bridge_slave_1: entered allmulticast mode [ 83.744149][ T8683] bond_slave_0: entered allmulticast mode [ 83.749343][ T8683] veth1_to_bond: entered allmulticast mode [ 83.754028][ T8683] bond_slave_1: entered allmulticast mode [ 83.759682][ T8683] veth0_to_team: entered allmulticast mode [ 83.764180][ T8683] team_slave_0: entered allmulticast mode [ 83.767913][ T8683] veth1_to_team: entered allmulticast mode [ 83.773542][ T8683] team_slave_1: entered allmulticast mode [ 83.775636][ T8683] veth0_to_batadv: entered allmulticast mode [ 83.778421][ T8683] batadv_slave_0: entered allmulticast mode [ 83.782414][ T8683] veth1_to_batadv: entered allmulticast mode [ 83.785780][ T8683] batadv_slave_1: entered allmulticast mode [ 83.789065][ T8683] xfrm0: entered allmulticast mode [ 83.791842][ T8683] veth0_to_hsr: entered allmulticast mode [ 83.795049][ T8683] hsr_slave_0: entered allmulticast mode [ 83.800490][ T8683] veth1_to_hsr: entered allmulticast mode [ 83.804174][ T8683] hsr0: entered allmulticast mode [ 83.806934][ T8683] veth1_virt_wifi: entered allmulticast mode [ 83.810444][ T8683] veth0_virt_wifi: entered allmulticast mode [ 83.813287][ T8683] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 83.815749][ T8683] veth1_vlan: entered allmulticast mode [ 83.818355][ T8683] veth0_vlan: entered allmulticast mode [ 83.823778][ T8683] vlan0: entered allmulticast mode [ 83.825518][ T8683] vlan1: entered allmulticast mode [ 83.828443][ T8683] macvlan0: entered allmulticast mode [ 83.834173][ T8683] macvlan1: entered allmulticast mode [ 83.836787][ T8683] ipvlan0: entered allmulticast mode [ 83.838600][ T8683] ipvlan1: entered allmulticast mode [ 83.841796][ T8683] veth1_macvtap: entered allmulticast mode [ 83.844480][ T8683] veth0_macvtap: entered allmulticast mode [ 83.868464][ T8683] macvtap0: entered allmulticast mode [ 83.871457][ T8683] macsec0: entered allmulticast mode [ 83.877954][ T8683] geneve0: entered allmulticast mode [ 83.883558][ T8683] geneve1: entered allmulticast mode [ 83.887766][ T8683] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 83.894993][ T8683] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 83.900661][ T8683] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 83.906346][ T8683] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 83.909746][ T8683] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 83.917030][ T8683] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 83.920909][ T8683] bond1: left promiscuous mode [ 83.922556][ T8683] bond1: entered allmulticast mode [ 83.924752][ T8683] syztnl2: entered allmulticast mode [ 83.931117][ T8683] wireguard0: left promiscuous mode [ 83.933186][ T8683] bond2: entered allmulticast mode [ 83.936068][ T8683] bond3: entered allmulticast mode [ 83.938041][ T8683] macvlan2: left promiscuous mode [ 83.940435][ T8683] bond4: entered allmulticast mode [ 83.944461][ T8683] vlan2: left promiscuous mode [ 83.946345][ T8683] syztnl1: entered allmulticast mode [ 83.948090][ T8683] vlan1.1: entered allmulticast mode [ 83.949977][ T8683] mac80211_hwsim hwsim14 wlan2: entered allmulticast mode [ 83.952429][ T8683] batadv0.5: entered allmulticast mode [ 83.955756][ T8683] bond5: entered allmulticast mode [ 83.957743][ T8683] ip6gretap1: entered allmulticast mode [ 83.959877][ T8683] macvlan3: entered allmulticast mode [ 83.962973][ T8683] gre1: entered allmulticast mode [ 83.965417][ T8683] gre2: entered allmulticast mode [ 83.971398][ T8683] @: entered allmulticast mode [ 83.974187][ T71] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.975336][ T8703] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 83.977085][ T71] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.980181][ T8703] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 83.985046][ T71] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.988160][ T71] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.991124][ T71] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.993890][ T71] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.996646][ T71] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.999920][ T71] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.107353][ T5969] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 84.881533][ T8750] comedi comedi3: pcl818: I/O port conflict (0x7,16) [ 84.950888][ T8759] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=8759 comm=syz.4.739 [ 84.955123][ T8759] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=8759 comm=syz.4.739 [ 84.959140][ T8759] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=8759 comm=syz.4.739 [ 85.037145][ T8766] syzkaller0: entered promiscuous mode [ 85.039072][ T8766] syzkaller0: entered allmulticast mode [ 85.100512][ T8769] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 85.196559][ T8776] ksmbd: Unknown IPC event: 1, ignore. [ 85.438792][ T8780] validate_nla: 1 callbacks suppressed [ 85.438804][ T8780] netlink: 'syz.1.747': attribute type 12 has an invalid length. [ 85.448973][ T8782] geneve3: entered promiscuous mode [ 85.450668][ T8782] geneve3: entered allmulticast mode [ 85.452592][ T46] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.455523][ T46] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.458890][ T46] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.461900][ T46] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.724646][ T8804] __nla_validate_parse: 2 callbacks suppressed [ 85.724656][ T8804] netlink: 100 bytes leftover after parsing attributes in process `syz.1.753'. [ 85.740293][ T8806] netlink: 40 bytes leftover after parsing attributes in process `syz.2.754'. [ 85.748868][ T1022] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 85.785270][ T8815] netlink: 'syz.2.757': attribute type 21 has an invalid length. [ 85.788141][ T8815] netlink: 128 bytes leftover after parsing attributes in process `syz.2.757'. [ 85.791840][ T8815] netlink: 'syz.2.757': attribute type 6 has an invalid length. [ 85.794626][ T8815] netlink: 3 bytes leftover after parsing attributes in process `syz.2.757'. [ 85.818875][ T8819] syzkaller1: entered promiscuous mode [ 85.820710][ T8819] syzkaller1: entered allmulticast mode [ 85.908813][ T1022] usb 8-1: Using ep0 maxpacket: 32 [ 85.911874][ T1022] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.916438][ T1022] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.919592][ T1022] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 85.922409][ T1022] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.926687][ T1022] usb 8-1: config 0 descriptor?? [ 85.981055][ T8840] netlink: 152 bytes leftover after parsing attributes in process `syz.4.764'. [ 86.160048][ T8850] netlink: 'syz.4.765': attribute type 1 has an invalid length. [ 86.173891][ T8845] /dev/sr0: Can't open blockdev [ 86.249279][ T8850] 8021q: adding VLAN 0 to HW filter on device bond6 [ 86.265032][ T8843] veth3: entered promiscuous mode [ 86.272915][ T8843] bond6: (slave veth3): Enslaving as an active interface with a down link [ 86.289091][ T8843] vlan3: entered allmulticast mode [ 86.290759][ T8843] bond6: entered allmulticast mode [ 86.332028][ T1022] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 86.428794][ T8843] bond6: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 86.589551][ T1022] usb 8-1: USB disconnect, device number 13 [ 87.152523][ T40] kauditd_printk_skb: 140 callbacks suppressed [ 87.152536][ T40] audit: type=1400 audit(1755407076.270:716): avc: denied { create } for pid=8891 comm="syz.2.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.178913][ T40] audit: type=1400 audit(1755407076.300:717): avc: denied { write } for pid=8891 comm="syz.2.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.185569][ T40] audit: type=1400 audit(1755407076.300:718): avc: denied { setopt } for pid=8891 comm="syz.2.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.192956][ T40] audit: type=1400 audit(1755407076.310:719): avc: denied { mount } for pid=8891 comm="syz.2.772" name="/" dev="hugetlbfs" ino=28037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 87.218132][ T40] audit: type=1400 audit(1755407076.330:720): avc: denied { unmount } for pid=5967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 87.350907][ T40] audit: type=1400 audit(1755407076.470:721): avc: denied { sqpoll } for pid=8903 comm="syz.2.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 87.362639][ T40] audit: type=1400 audit(1755407076.480:722): avc: denied { ioctl } for pid=8903 comm="syz.2.775" path="socket:[28048]" dev="sockfs" ino=28048 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 87.448782][ T1022] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 87.551926][ T40] audit: type=1400 audit(1755407076.670:723): avc: denied { accept } for pid=8909 comm="syz.4.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 87.600481][ T1022] usb 8-1: Using ep0 maxpacket: 16 [ 87.603436][ T1022] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.606808][ T1022] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.610201][ T1022] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 87.614337][ T1022] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 87.617144][ T1022] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.620555][ T1022] usb 8-1: config 0 descriptor?? [ 87.629384][ T8913] netlink: 44 bytes leftover after parsing attributes in process `syz.2.777'. [ 87.630541][ T8915] tmpfs: Bad value for 'mpol' [ 87.713623][ T8918] sit0: left allmulticast mode [ 87.716073][ T8918] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 87.726499][ T40] audit: type=1400 audit(1755407076.830:724): avc: denied { read } for pid=8912 comm="syz.2.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.734198][ T40] audit: type=1400 audit(1755407076.830:725): avc: denied { mount } for pid=8917 comm="syz.4.779" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 87.788405][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.781'. [ 87.831134][ T8933] loop6: detected capacity change from 0 to 6656 [ 87.833396][ T8933] buffer_io_error: 36 callbacks suppressed [ 87.833404][ T8933] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.838031][ T8933] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.847898][ T8933] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.851542][ T8933] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.854036][ T8933] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.856557][ T8933] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.868934][ T8933] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.871726][ T8933] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.874383][ T8933] ldm_validate_partition_table(): Disk read failed. [ 87.876589][ T8933] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.879125][ T8933] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.881918][ T8933] Dev loop6: unable to read RDB block 0 [ 87.883860][ T8933] loop6: unable to read partition table [ 87.888268][ T8933] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 88.032354][ T1022] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 88.034581][ T1022] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 88.036727][ T1022] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 88.038972][ T1022] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 88.041180][ T1022] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 88.043966][ T1022] input: HID 0955:7214 Haptics as /devices/virtual/input/input15 [ 88.050376][ T1022] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 88.052932][ T1022] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 88.192378][ T8960] comedi comedi3: comedi_config --init_data is deprecated [ 88.228213][ T8964] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 88.232111][ T8890] random: crng reseeded on system resumption [ 88.238013][ T1022] usb 8-1: USB disconnect, device number 14 [ 88.241465][ T59] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 88.245545][ T59] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 88.249172][ T1022] ------------[ cut here ]------------ [ 88.250893][ T1022] workqueue: work disable count underflowed [ 88.252790][ T1022] WARNING: CPU: 2 PID: 1022 at kernel/workqueue.c:4326 enable_work+0x2f8/0x340 [ 88.255572][ T1022] Modules linked in: [ 88.256920][ T1022] CPU: 2 UID: 0 PID: 1022 Comm: kworker/2:2 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 88.262246][ T1022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.265555][ T1022] Workqueue: usb_hub_wq hub_event [ 88.267388][ T1022] RIP: 0010:enable_work+0x2f8/0x340 [ 88.269083][ T1022] Code: 89 ee e8 2b 56 38 00 45 84 ed 0f 85 29 fe ff ff e8 3d 5b 38 00 c6 05 0a 53 10 0f 01 90 48 c7 c7 c0 02 ac 8b e8 a9 f9 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 d7 b2 9e 00 e9 aa fe ff ff [ 88.275026][ T1022] RSP: 0018:ffffc90005fd73c0 EFLAGS: 00010086 [ 88.276918][ T1022] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3358 [ 88.279375][ T1022] RDX: ffff88802810c880 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 88.281823][ T1022] RBP: ffff888024de5738 R08: 0000000000000001 R09: 0000000000000000 [ 88.284298][ T1022] R10: 0000000000000000 R11: 756575716b726f77 R12: 1ffff92000bfae79 [ 88.286754][ T1022] R13: 0000000000000000 R14: ffff888024de5698 R15: ffff888024de5730 [ 88.289279][ T1022] FS: 0000000000000000(0000) GS:ffff8880d68bc000(0000) knlGS:0000000000000000 [ 88.292082][ T1022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.294183][ T1022] CR2: 000000110c2cbecc CR3: 0000000053ac6000 CR4: 0000000000352ef0 [ 88.296653][ T1022] Call Trace: [ 88.297720][ T1022] [ 88.298665][ T1022] ? __pfx_enable_work+0x10/0x10 [ 88.300221][ T1022] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 88.302075][ T1022] __cancel_work_sync+0xe7/0x130 [ 88.303636][ T1022] thermal_zone_device_unregister+0x28e/0x4d0 [ 88.305530][ T1022] ? __pfx_shield_remove+0x10/0x10 [ 88.307136][ T1022] power_supply_unregister+0x10a/0x150 [ 88.308859][ T1022] shield_remove+0x75/0x130 [ 88.310793][ T1022] ? __pfx_shield_remove+0x10/0x10 [ 88.312609][ T1022] hid_device_remove+0xce/0x260 [ 88.314172][ T1022] ? __pfx_hid_device_remove+0x10/0x10 [ 88.315957][ T1022] device_remove+0xcb/0x170 [ 88.317380][ T1022] device_release_driver_internal+0x44b/0x620 [ 88.319301][ T1022] bus_remove_device+0x22f/0x420 [ 88.320819][ T1022] device_del+0x396/0x9f0 [ 88.322234][ T1022] ? __pfx_device_del+0x10/0x10 [ 88.323852][ T1022] ? do_raw_spin_lock+0x12c/0x2b0 [ 88.325426][ T1022] ? usbhid_disconnect+0x98/0xe0 [ 88.326975][ T1022] ? rcu_is_watching+0x12/0xc0 [ 88.328479][ T1022] hid_destroy_device+0x19c/0x240 [ 88.330084][ T1022] usbhid_disconnect+0xa0/0xe0 [ 88.331621][ T1022] usb_unbind_interface+0x1dd/0x9e0 [ 88.333266][ T1022] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 88.335044][ T1022] ? __pfx_usb_unbind_interface+0x10/0x10 [ 88.336843][ T1022] device_remove+0x122/0x170 [ 88.338326][ T1022] device_release_driver_internal+0x44b/0x620 [ 88.340227][ T1022] bus_remove_device+0x22f/0x420 [ 88.341940][ T1022] device_del+0x396/0x9f0 [ 88.343338][ T1022] ? __pfx_device_del+0x10/0x10 [ 88.344877][ T1022] ? kobject_put+0x210/0x5a0 [ 88.346351][ T1022] usb_disable_device+0x355/0x7d0 [ 88.347950][ T1022] usb_disconnect+0x2e1/0x9c0 [ 88.349436][ T1022] hub_event+0x1c81/0x4fe0 [ 88.350861][ T1022] ? lock_release+0x201/0x2f0 [ 88.352357][ T1022] ? do_raw_spin_unlock+0x172/0x230 [ 88.353997][ T1022] ? __pfx_hub_event+0x10/0x10 [ 88.355514][ T1022] ? __pfx_interval_tree_span_iter_next_gap+0x10/0x10 [ 88.357596][ T1022] ? __pfx_debug_object_deactivate+0x10/0x10 [ 88.359463][ T1022] ? trace_sched_exit_tp+0xd1/0x120 [ 88.361088][ T1022] ? rcu_is_watching+0x12/0xc0 [ 88.362624][ T1022] ? lock_acquire+0x2cd/0x350 [ 88.364116][ T1022] ? rcu_is_watching+0x12/0xc0 [ 88.365631][ T1022] ? rcu_is_watching+0x12/0xc0 [ 88.367162][ T1022] process_one_work+0x9cc/0x1b70 [ 88.368735][ T1022] ? __pfx_delayed_vfree_work+0x10/0x10 [ 88.370479][ T1022] ? __pfx_process_one_work+0x10/0x10 [ 88.372202][ T1022] ? assign_work+0x1a0/0x250 [ 88.373655][ T1022] worker_thread+0x6c8/0xf10 [ 88.375125][ T1022] ? __pfx_worker_thread+0x10/0x10 [ 88.376733][ T1022] kthread+0x3c5/0x780 [ 88.378023][ T1022] ? __pfx_kthread+0x10/0x10 [ 88.379484][ T1022] ? ret_from_fork+0x25/0x6f0 [ 88.380974][ T1022] ? rcu_is_watching+0x12/0xc0 [ 88.382524][ T1022] ? rcu_is_watching+0x12/0xc0 [ 88.384123][ T1022] ? __pfx_kthread+0x10/0x10 [ 88.385989][ T1022] ret_from_fork+0x5d7/0x6f0 [ 88.387792][ T1022] ? __pfx_kthread+0x10/0x10 [ 88.389661][ T1022] ret_from_fork_asm+0x1a/0x30 [ 88.391643][ T1022] [ 88.392996][ T1022] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.395892][ T1022] CPU: 2 UID: 0 PID: 1022 Comm: kworker/2:2 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 88.399638][ T1022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.402987][ T1022] Workqueue: usb_hub_wq hub_event [ 88.404565][ T1022] Call Trace: [ 88.405621][ T1022] [ 88.406566][ T1022] dump_stack_lvl+0x3d/0x1f0 [ 88.408040][ T1022] vpanic+0x6e8/0x7a0 [ 88.409306][ T1022] ? __pfx_vpanic+0x10/0x10 [ 88.410751][ T1022] ? enable_work+0x2f8/0x340 [ 88.412226][ T1022] panic+0xca/0xd0 [ 88.413417][ T1022] ? __pfx_panic+0x10/0x10 [ 88.414838][ T1022] ? check_panic_on_warn+0x1f/0xb0 [ 88.416456][ T1022] check_panic_on_warn+0xab/0xb0 [ 88.418014][ T1022] __warn+0xf6/0x3c0 [ 88.419280][ T1022] ? __pfx_vprintk_emit+0x10/0x10 [ 88.420867][ T1022] ? enable_work+0x2f8/0x340 [ 88.422372][ T1022] report_bug+0x3c3/0x580 [ 88.423739][ T1022] ? enable_work+0x2f8/0x340 [ 88.425171][ T1022] handle_bug+0x184/0x210 [ 88.426579][ T1022] exc_invalid_op+0x17/0x50 [ 88.427993][ T1022] asm_exc_invalid_op+0x1a/0x20 [ 88.429531][ T1022] RIP: 0010:enable_work+0x2f8/0x340 [ 88.431174][ T1022] Code: 89 ee e8 2b 56 38 00 45 84 ed 0f 85 29 fe ff ff e8 3d 5b 38 00 c6 05 0a 53 10 0f 01 90 48 c7 c7 c0 02 ac 8b e8 a9 f9 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 d7 b2 9e 00 e9 aa fe ff ff [ 88.437119][ T1022] RSP: 0018:ffffc90005fd73c0 EFLAGS: 00010086 [ 88.439030][ T1022] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3358 [ 88.441496][ T1022] RDX: ffff88802810c880 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 88.443977][ T1022] RBP: ffff888024de5738 R08: 0000000000000001 R09: 0000000000000000 [ 88.446441][ T1022] R10: 0000000000000000 R11: 756575716b726f77 R12: 1ffff92000bfae79 [ 88.448910][ T1022] R13: 0000000000000000 R14: ffff888024de5698 R15: ffff888024de5730 [ 88.451385][ T1022] ? __warn_printk+0x198/0x350 [ 88.452936][ T1022] ? __warn_printk+0x1a5/0x350 [ 88.454446][ T1022] ? __pfx_enable_work+0x10/0x10 [ 88.456008][ T1022] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 88.457712][ T1022] __cancel_work_sync+0xe7/0x130 [ 88.459306][ T1022] thermal_zone_device_unregister+0x28e/0x4d0 [ 88.461216][ T1022] ? __pfx_shield_remove+0x10/0x10 [ 88.462867][ T1022] power_supply_unregister+0x10a/0x150 [ 88.464583][ T1022] shield_remove+0x75/0x130 [ 88.466026][ T1022] ? __pfx_shield_remove+0x10/0x10 [ 88.467656][ T1022] hid_device_remove+0xce/0x260 [ 88.469196][ T1022] ? __pfx_hid_device_remove+0x10/0x10 [ 88.470921][ T1022] device_remove+0xcb/0x170 [ 88.472389][ T1022] device_release_driver_internal+0x44b/0x620 [ 88.474303][ T1022] bus_remove_device+0x22f/0x420 [ 88.475865][ T1022] device_del+0x396/0x9f0 [ 88.477220][ T1022] ? __pfx_device_del+0x10/0x10 [ 88.478763][ T1022] ? do_raw_spin_lock+0x12c/0x2b0 [ 88.480347][ T1022] ? usbhid_disconnect+0x98/0xe0 [ 88.481909][ T1022] ? rcu_is_watching+0x12/0xc0 [ 88.483471][ T1022] hid_destroy_device+0x19c/0x240 [ 88.485064][ T1022] usbhid_disconnect+0xa0/0xe0 [ 88.486583][ T1022] usb_unbind_interface+0x1dd/0x9e0 [ 88.488233][ T1022] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 88.489984][ T1022] ? __pfx_usb_unbind_interface+0x10/0x10 [ 88.491774][ T1022] device_remove+0x122/0x170 [ 88.493259][ T1022] device_release_driver_internal+0x44b/0x620 [ 88.495165][ T1022] bus_remove_device+0x22f/0x420 [ 88.496716][ T1022] device_del+0x396/0x9f0 [ 88.498078][ T1022] ? __pfx_device_del+0x10/0x10 [ 88.499611][ T1022] ? kobject_put+0x210/0x5a0 [ 88.501074][ T1022] usb_disable_device+0x355/0x7d0 [ 88.502678][ T1022] usb_disconnect+0x2e1/0x9c0 [ 88.504286][ T1022] hub_event+0x1c81/0x4fe0 [ 88.505733][ T1022] ? lock_release+0x201/0x2f0 [ 88.507401][ T1022] ? do_raw_spin_unlock+0x172/0x230 [ 88.509050][ T1022] ? __pfx_hub_event+0x10/0x10 [ 88.510594][ T1022] ? __pfx_interval_tree_span_iter_next_gap+0x10/0x10 [ 88.512705][ T1022] ? __pfx_debug_object_deactivate+0x10/0x10 [ 88.514581][ T1022] ? trace_sched_exit_tp+0xd1/0x120 [ 88.516227][ T1022] ? rcu_is_watching+0x12/0xc0 [ 88.517750][ T1022] ? lock_acquire+0x2cd/0x350 [ 88.519338][ T1022] ? rcu_is_watching+0x12/0xc0 [ 88.520885][ T1022] ? rcu_is_watching+0x12/0xc0 [ 88.522444][ T1022] process_one_work+0x9cc/0x1b70 [ 88.523999][ T1022] ? __pfx_delayed_vfree_work+0x10/0x10 [ 88.525740][ T1022] ? __pfx_process_one_work+0x10/0x10 [ 88.527440][ T1022] ? assign_work+0x1a0/0x250 [ 88.528903][ T1022] worker_thread+0x6c8/0xf10 [ 88.530378][ T1022] ? __pfx_worker_thread+0x10/0x10 [ 88.531974][ T1022] kthread+0x3c5/0x780 [ 88.533263][ T1022] ? __pfx_kthread+0x10/0x10 [ 88.534644][ T1022] ? ret_from_fork+0x25/0x6f0 [ 88.536119][ T1022] ? rcu_is_watching+0x12/0xc0 [ 88.537627][ T1022] ? rcu_is_watching+0x12/0xc0 [ 88.539148][ T1022] ? __pfx_kthread+0x10/0x10 [ 88.540606][ T1022] ret_from_fork+0x5d7/0x6f0 [ 88.542096][ T1022] ? __pfx_kthread+0x10/0x10 [ 88.543562][ T1022] ret_from_fork_asm+0x1a/0x30 [ 88.545187][ T1022] [ 88.546731][ T1022] Kernel Offset: disabled [ 88.548105][ T1022] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:04:37 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff8880280483a8 RCX=ffffffff81c378ef RDX=0000000000000000 RSI=ffffffff8c162680 RDI=0000000000000001 RBP=ffff8880280483a0 RSP=ffffc9000d0ff3c8 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff90ab3b97 R11=0000000000000000 R12=ffff8880280483a8 R13=ffff8880280483a0 R14=ffffc9000d0ff730 R15=000000000000001e RIP=ffffffff810014b0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055556bddc808 CR3=000000004e83b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe39db2530 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe39db26b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe39db26b6 00007ffe39db26bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3e3612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3e3612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3e3612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3e3612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3e3612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3e3612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffc90003dd7b30 RCX=ffffc90003dd8001 RDX=ffffc90003dd7b38 RSI=ffffffff816ae8a4 RDI=ffffffff8e5c11e0 RBP=0000000000000001 RSP=ffffc900006a00c0 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc900006a0138 R11=00000000000900d5 R12=ffffc900006a0188 R13=ffffc900006a0138 R14=ffffc90003dd7b30 R15=ffffc900006a016c RIP=ffffffff8197c230 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f51031a8300 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1516b90b00 CR3=00000000328f4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000000100008 0000000000000004 000c001a00100000 0014010000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c000000080004 0020000e00000000 0000000000000000 0300000000200000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00d5000000005c26 1680000000180000 00200000000e0014 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000cfffffed20000 0000010000000000 00260000000cffff febe000003e60000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000400000008 00080000003c0000 00540000006c0000 0034000000840000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0098000000ac0000 00c0000000d40000 00e8000000fc0000 0110000001240000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01380000015c0000 0050000001840000 01a40000015c0000 0013000000000000 ZMM24=41abec2d41abec2d 41abec2d41abec2d 41abec2d41abec2d 41abec2d41abec2d 41abec2d41abec2d 41abec2d41abec2d 41abec2d41abec2d 41abec2d41abec2d ZMM25=ed608d07ed608d07 ed608d07ed608d07 ed608d07ed608d07 ed608d07ed608d07 ed608d07ed608d07 ed608d07ed608d07 ed608d07ed608d07 ed608d07ed608d07 ZMM26=54d566de54d566de 54d566de54d566de 54d566de54d566de 54d566de54d566de 54d566de54d566de 54d566de54d566de 54d566de54d566de 54d566de54d566de ZMM27=84c7e63784c7e637 84c7e63784c7e637 84c7e63784c7e637 84c7e63784c7e637 84c7e63784c7e637 84c7e63784c7e637 84c7e63784c7e637 84c7e63784c7e637 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7306000073060000 7306000073060000 7306000073060000 7306000073060000 7306000073060000 7306000073060000 7306000073060000 7306000073060000 info registers vcpu 2 CPU#2 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85641805 RDI=ffffffff9b10e020 RBP=ffffffff9b10dfe0 RSP=ffffc90005fd6d30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=0000000000000065 R14=ffffffff9b10dfe0 R15=ffffffff856417a0 RIP=ffffffff8564182f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2cbecc CR3=0000000053ac6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b25d0a7cb416a705 0337b42800718993 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1ed91546953b4e80 1b87e8c29ebea5ab ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01b75c02840f8bd6 fe31f5c36976c8ff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f50f92564d8980ea 6374b200faf833ce ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 69ac430a79fb634b 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 853c8a9800000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 38f59231117cca12 007054d8f3208fae ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000008363554d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856b08c647 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000332e63 64755f796d6d7564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff8880395f7702 RCX=ffffffff8b91998a RDX=1ffff110072beee0 RSI=0000000000000006 RDI=0000000000000000 RBP=ffffc9000642f350 RSP=ffffc9000642f230 R8 =0000000000000007 R9 =0000000000001000 R10=ffff8880395f7702 R11=0000000000000000 R12=0000000000000000 R13=ffff8880395f7700 R14=0000000000000006 R15=0000000000000000 RIP=ffffffff81bb8d68 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000000c0 CR3=0000000053ac6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3e4438f70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe39db26b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe39db26b6 00007ffe39db26bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3e3612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3e3612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3e3612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3e3612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3e3612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3e3612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000332e63 64755f796d6d7564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000