last executing test programs: 50.771257282s ago: executing program 0 (id=185): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001f80), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000002000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000002100)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x44}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x60, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000580)={0x0, 0x9, 0x0, [0x8, 0x3, 0x1ca44443, 0x1, 0xfffffffffffff325], [0x5, 0x103, 0x8a7, 0x7, 0x6, 0x4, 0x6, 0x9, 0x6, 0x7ad4, 0x7ff, 0x0, 0x7c, 0x5, 0x6, 0xffffffffffff8000, 0x1, 0x925f, 0x6, 0x2, 0x3, 0x7f, 0x0, 0x80000000, 0x6, 0x1a0000000000000, 0x3ff, 0x3ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x39cc, 0x9, 0x80000001, 0x100000001, 0x10001, 0x7fff, 0x2e1, 0x7, 0x6, 0x3, 0x7f, 0x3, 0x5, 0xfff, 0xae00000000000000, 0xd06, 0x4, 0x2, 0xffffffff, 0x8, 0x7, 0x4, 0x8001, 0x5, 0xb0, 0x8000000000000000, 0x7fffffffffffffff, 0x401, 0x7, 0x4, 0x0, 0x3, 0x800, 0x9, 0x8, 0x8, 0x8, 0x0, 0xe469, 0x1, 0x401, 0x7, 0x6, 0x8, 0x2, 0xd9b, 0x9, 0x8000, 0x8, 0xffff, 0xfb31, 0x0, 0x4, 0x6, 0x4, 0x9, 0x6, 0x8, 0x1, 0x10, 0x8000000000000001, 0x4, 0x6, 0x401, 0x3, 0x74a, 0x6, 0x5, 0x3625, 0x3, 0xe, 0x0, 0xe, 0x4, 0x8, 0x8000000000000001, 0x6, 0x1, 0x73, 0x9, 0x2, 0x5, 0x7, 0x757f, 0x2, 0x8, 0x7fff, 0x5]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000009c0)={r7, "526e08dc4dec7af7a3c1dd6a4da3db6d"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r6], 0x44}, 0x1, 0x10000000}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 50.711243877s ago: executing program 0 (id=186): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x1e5041, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket(0x2b, 0x1, 0x1) listen(r3, 0x0) listen(r4, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="3f000000010000", 0x7) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) listen(r6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x98, 0x260, 0x98, 0x98, 0x260, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @rand_addr=0x64410101, 0xffffff00, 0xffffffff, 'vlan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x6c, 0x3, 0x2d}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@rand_addr=0x64010101, @loopback, 0x0, 0xff000000, 'macvtap0\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x0, 0x0, 0xb}, 0x0, 0x70, 0x98}, @unspec}, {{@ip={@empty, @private=0xa010102, 0xff000000, 0xff, 'ip6gretap0\x00', 'veth0_vlan\x00', {}, {0x75816b9d8404136c}, 0x0, 0x1, 0x3}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0xfffffffc, @random="fc80c6751853", 0x6, 0x0, [0x7, 0x31, 0x16, 0x3f, 0x14, 0x32, 0x12, 0x23, 0x36, 0x17, 0x1a, 0x36, 0xa, 0x13, 0x9, 0x22], 0x0, 0x1, 0x4000000000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x22) fcntl$setlease(r2, 0x400, 0x2) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000003100016310"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20008080) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') preadv(r8, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001a00100425bd7000ffdbdf2502180480800eff02c82400110000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4841) 50.649840847s ago: executing program 0 (id=188): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="070000000000000000000800000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 50.388937165s ago: executing program 0 (id=190): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x40}}, 0x8010) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r4) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000c) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r6, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000) sendmsg$AUDIT_TTY_GET(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f8, 0x100, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x8011) (async) write(r4, &(0x7f0000000580)="8d4a1c4afd5608192e27cb7c57b80c9fa0a58e676ee97e51c982c1a70578a045535c764c5d5e3e83ad472f6fb48f21e0507cf390e5100aaa993a6c749220acb8e2f4b3a0abe725ec8f3e4935ae09e1237322336724137c7c8f4029b6685bd4fc1a2a77401604a01f4e8b9cb5def794142a1f3fb14988d7688c490806f897766178874559f7131ad2d4cd9a531a2e22fd2cc8fadd5b701d7494e7b9199e04a6f79c3dcf819ced52a8db2295396048f414c4784a5d255e291ebc9ca8ecfaead93a6d0517e7fef8de0273b814aedc9d70b113697566c57cc8b5b70754cb18ff8da19ac3335211", 0xe5) (async) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r6) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1d}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xd}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xc}, @IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xd}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000000800)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc, &(0x7f0000001b00)=[{&(0x7f0000000840)={0x20c, 0x23, 0x110, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x8, 0x6b, 0x0, 0x1, [@nested={0x4, 0xf0}]}, @typed={0xf2, 0x151, 0x0, 0x0, @binary="ce604e6e75d4f6de309c45c7a721d808cc2a7fa545c9bcb2f789af0c573617fd6a9e9dc6c8936737d55f6ddf3139f995dfec823b51ee81013833179c3178cbfe510dfdcc8677a469448f909f0fc8a1e95c991497522bad5a00ddc13b466934c9703b271d97b5e3c3dff57448081f9d4d6ee3c9db9e6b3bc46d0f8384a14a70db7fb54e5baddf9f71ae20cd06485ee5588bf7d7b2adcb8396c2e568aec0f59639c65b5352c7b22a84c269d87fb6b791d94946f6540ec8cf19b005a1b18a26dce8aa79ed3959d90ecc0a355ec5f4d2a6ac4d6a3977a1ef9c92bfebd0181ec08e3341d6c40dbec4e48d113dd42694a6"}, @typed={0x14, 0xc4, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="0fde0ba198e2e225c7b8d3f955074e58e26f931bc3e2069785bc2dc8b490f9fc68200612b46d1cb2063c2f59e4ff8b177533fd51f8238087456fa4ffc3d3b863d6cb9a3918e885b0369b2c0720651b4c28075077fa84734d3b56ba9c59110a00f92ea43b00e4d34ac4931bb19ba3edad1c8e6190be066d50eecae8b7512389a2d800042d787ca766cf7832a77c04377ec63c39719592c52403ef1564089e95fb39c018e1ecd49ad6be37348907cae3a57ac54b1ad5028055fa21e9b88ed3b2e5441cec054ce2a9b0807b6c49abedc94f4df6be3bbd328324751527a7d761323f511d37da30a49eead5"]}, 0x20c}, {&(0x7f0000000a80)={0x30, 0x3b, 0x200, 0x70bd2d, 0x25dfdbff, "", [@typed={0x4, 0x11}, @generic="5f900f687f0172352433b4e9", @typed={0x4, 0x61}, @typed={0xc, 0x8f, 0x0, 0x0, @u64=0x8}]}, 0x30}, {&(0x7f0000000ac0)={0x1018, 0x1b, 0x100, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0x20, 0x0, 0x0, @u32=0x76c}, @generic="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"]}, 0x1018}], 0x3, &(0x7f0000001b40), 0x0, 0x24000010}, 0x20000014) (async) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000001bc0), &(0x7f0000001c00)=0x4) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000001c40), r2) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001cc0), r6) sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x38, r8, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'devlink\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8001) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r9, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x4008000) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x50, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_FAMILY={0x5, 0xd, 0x1e}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040880}, 0x80) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002040), r9) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000002100)={&(0x7f0000002000), 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x28, r10, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000844}, 0x4000) (async) io_uring_enter(r4, 0xa7, 0x99ad, 0x52, &(0x7f0000002140)={[0x6]}, 0x8) bind$alg(r4, &(0x7f0000002180)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc7539esp(cts(kw(cast5)),sha1-avx))\x00'}, 0x58) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002240), r6) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000002380)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x4c, r11, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1a}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1c}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x14}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x1) 50.388468577s ago: executing program 0 (id=192): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) (async) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x4800) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x400001, 0x0) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r7, &(0x7f0000001440)=""/126, 0x7e, 0x41) (async, rerun: 64) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x9) (async, rerun: 64) close_range(r5, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r6) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80004008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x20, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000140)=0x1, 0x4) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @local, 0xd}, 0x6c) (async, rerun: 64) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip_vti0\x00', 0x10) (rerun: 64) write$binfmt_aout(r2, &(0x7f0000000480)=ANY=[], 0x9cf) 50.310613331s ago: executing program 0 (id=194): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0x826e, 0x10000, 0x3, 0x6}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) sendmsg$can_j1939(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)="4905d6a348eb34d2c2", 0x9}}, 0x40) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0x826e, 0x10000, 0x3, 0x6}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1) (async) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) (async) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) (async) sendmsg$can_j1939(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)="4905d6a348eb34d2c2", 0x9}}, 0x40) (async) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 44.490831257s ago: executing program 2 (id=189): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000021a000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\'[[^\x00') mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) madvise(&(0x7f00005f0000/0x4000)=nil, 0x4000, 0x64) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') rmdir(&(0x7f00000000c0)='./file0/file0/..\x00') ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000040)={0x8}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 43.748597924s ago: executing program 1 (id=23): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) write(r2, 0x0, 0x0) 38.139952281s ago: executing program 2 (id=189): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000021a000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\'[[^\x00') mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) madvise(&(0x7f00005f0000/0x4000)=nil, 0x4000, 0x64) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') rmdir(&(0x7f00000000c0)='./file0/file0/..\x00') ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000040)={0x8}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 36.908619522s ago: executing program 1 (id=23): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) write(r2, 0x0, 0x0) 34.855603697s ago: executing program 32 (id=194): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0x826e, 0x10000, 0x3, 0x6}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) sendmsg$can_j1939(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)="4905d6a348eb34d2c2", 0x9}}, 0x40) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0x826e, 0x10000, 0x3, 0x6}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1) (async) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) (async) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) (async) sendmsg$can_j1939(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)="4905d6a348eb34d2c2", 0x9}}, 0x40) (async) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 30.267027445s ago: executing program 1 (id=23): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) write(r2, 0x0, 0x0) 30.014785221s ago: executing program 2 (id=189): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000021a000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\'[[^\x00') mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) madvise(&(0x7f00005f0000/0x4000)=nil, 0x4000, 0x64) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') rmdir(&(0x7f00000000c0)='./file0/file0/..\x00') ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000040)={0x8}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 23.107378349s ago: executing program 1 (id=23): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) write(r2, 0x0, 0x0) 22.196803412s ago: executing program 2 (id=189): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000021a000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\'[[^\x00') mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) madvise(&(0x7f00005f0000/0x4000)=nil, 0x4000, 0x64) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') rmdir(&(0x7f00000000c0)='./file0/file0/..\x00') ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000040)={0x8}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 16.436353304s ago: executing program 1 (id=23): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) write(r2, 0x0, 0x0) 15.437766909s ago: executing program 2 (id=189): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000021a000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\'[[^\x00') mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) madvise(&(0x7f00005f0000/0x4000)=nil, 0x4000, 0x64) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') rmdir(&(0x7f00000000c0)='./file0/file0/..\x00') ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000040)={0x8}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.228256218s ago: executing program 1 (id=23): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) write(r2, 0x0, 0x0) 8.378528771s ago: executing program 2 (id=189): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000021a000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\'[[^\x00') mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) madvise(&(0x7f00005f0000/0x4000)=nil, 0x4000, 0x64) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') rmdir(&(0x7f00000000c0)='./file0/file0/..\x00') ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000040)={0x8}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.43105223s ago: executing program 4 (id=380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000080)=0x100, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@delchain={0x24, 0x64, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044048}, 0x20004804) 3.251154405s ago: executing program 4 (id=382): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110012b95d908e2041214101900bf62000905090100020408f800000000000000bd8546b4020292c31aa3aa9a6fc4e55447cb92932420e7393317c9f1358f9a99efd114b88dfea184d6f1cb5ba881031ae1a2c5e663d9836793cf7da6e1b1cc0778a93b1343123e1deafbb1bddb55fe522a3da51e82194ed48146742c0ac0b51cd9b8e5a9ffab19862f1f8903dd435676b59dfc40392d0f3a04231105391734505e5b00"/175], 0x0) 1.648475025s ago: executing program 3 (id=389): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010004000000000000000700000a20000000000a03090000000000000000070000000904010073797a30000000001c000000090a010400000000000000000a0000000800034000000010140000001000010000000000000000000a84000a"], 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) r0 = socket$nl_route(0x10, 0x3, 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x300, 0x70bd2d, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0x5}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000044}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1.391184347s ago: executing program 3 (id=390): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x14, 0x110, 0xd, {[@timestamp_addr={0x44, 0x4}]}}}], 0x18}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000890000000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.390139009s ago: executing program 3 (id=391): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r1 = dup(r0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000025c0)={0x1000, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x73}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x4b}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xfd0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0xfc4, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x54, 0x84, 0x0, 0x1, [{}, {}, {}, {}, {}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0xf6c, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x51, 0x0, "9cad89780c7d9a6ad72d0e7df5776d668a90ebdc68cf30f4296fb6714ff122fd0924a506fcf3c3196103654ba49f0b4944105d57f4ea085259607e56d2e82a4c02a8f26416e9455bd4052bb1f8"}, @NL80211_BAND_6GHZ={0x61, 0x3, "4f857594ecb023092fa6308071dcc6b5c091ded81365b57ffaf13b316827d637a9f4f7d8ac0caf75af6259d20bafb9386421211c426a859f0745b74b7affec5909d555c2ee12a183e9996c40d02e03781112b1fb9638529be85d8f962c"}, @NL80211_BAND_2GHZ={0xb1, 0x0, "5fb108fbfeebd7e5e2d9511227a0dd9982e9794a362e14655060513b4bf789fdd064b6182af7b552379cce6c800a9691733d50dc2729915f5ea5b6510fcd5f24da085bb27aacbc6f3cecc52e4d1810d422a131d14dd3483cc43831963a4ec49cce7bea21a2906b792fa885ae7c1568dc8a6d64fda477ce8df7feca9a19b7aaa07f3f387e9e674bb1f54ac265596ea8434970bf59cf4d0538f128f961a61d73e27ca25e15c64c8c670549bfbdd6"}, @NL80211_BAND_6GHZ={0xd9, 0x3, "3b69f6c65226ce81b202f3f7cee795d74bf5a995e101178b81a78f0fc70c4f2a8b1ad09d8c234108660618bb1939c260465ec631284c313f4cb99d4f0be1ac79b4ad27bf06a91ebc2797c1fd1e96bf5d6f8687791a2c2f8f5fde1c785595bc5afe1a6014795c22c906d902a16d0f0c9ebbae98e9b06e4a0324760740a074a47d6e2f212ca7c59eb0973dda31495dedae3b205fc7748b6b9a51a16d0579984b4b2143df7e63578eefb46d91ab499f3f1c025c1b3690f3dc286d886e0edfa959874375ba3ebbe2fb2835874e4ae2fd6e216e38763ec4"}, @NL80211_BAND_6GHZ={0x35, 0x3, "4114cbc9441c8d55f509e1f131f1beba019e740de10c129f9ba2e67ba006de41884a108b1f538d34b216f8f026288d07b2"}, @NL80211_BAND_5GHZ={0xce5, 0x1, "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"}]}]}]}]}, 0x1000}, 0x1, 0x0, 0x0, 0x4040000}, 0x41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) dup(r0) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) (async) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000025c0)={0x1000, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x73}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x4b}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xfd0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0xfc4, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x54, 0x84, 0x0, 0x1, [{}, {}, {}, {}, {}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0xf6c, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x51, 0x0, "9cad89780c7d9a6ad72d0e7df5776d668a90ebdc68cf30f4296fb6714ff122fd0924a506fcf3c3196103654ba49f0b4944105d57f4ea085259607e56d2e82a4c02a8f26416e9455bd4052bb1f8"}, @NL80211_BAND_6GHZ={0x61, 0x3, "4f857594ecb023092fa6308071dcc6b5c091ded81365b57ffaf13b316827d637a9f4f7d8ac0caf75af6259d20bafb9386421211c426a859f0745b74b7affec5909d555c2ee12a183e9996c40d02e03781112b1fb9638529be85d8f962c"}, @NL80211_BAND_2GHZ={0xb1, 0x0, "5fb108fbfeebd7e5e2d9511227a0dd9982e9794a362e14655060513b4bf789fdd064b6182af7b552379cce6c800a9691733d50dc2729915f5ea5b6510fcd5f24da085bb27aacbc6f3cecc52e4d1810d422a131d14dd3483cc43831963a4ec49cce7bea21a2906b792fa885ae7c1568dc8a6d64fda477ce8df7feca9a19b7aaa07f3f387e9e674bb1f54ac265596ea8434970bf59cf4d0538f128f961a61d73e27ca25e15c64c8c670549bfbdd6"}, @NL80211_BAND_6GHZ={0xd9, 0x3, "3b69f6c65226ce81b202f3f7cee795d74bf5a995e101178b81a78f0fc70c4f2a8b1ad09d8c234108660618bb1939c260465ec631284c313f4cb99d4f0be1ac79b4ad27bf06a91ebc2797c1fd1e96bf5d6f8687791a2c2f8f5fde1c785595bc5afe1a6014795c22c906d902a16d0f0c9ebbae98e9b06e4a0324760740a074a47d6e2f212ca7c59eb0973dda31495dedae3b205fc7748b6b9a51a16d0579984b4b2143df7e63578eefb46d91ab499f3f1c025c1b3690f3dc286d886e0edfa959874375ba3ebbe2fb2835874e4ae2fd6e216e38763ec4"}, @NL80211_BAND_6GHZ={0x35, 0x3, "4114cbc9441c8d55f509e1f131f1beba019e740de10c129f9ba2e67ba006de41884a108b1f538d34b216f8f026288d07b2"}, @NL80211_BAND_5GHZ={0xce5, 0x1, "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"}]}]}]}]}, 0x1000}, 0x1, 0x0, 0x0, 0x4040000}, 0x41) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) (async) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) (async) 301.152171ms ago: executing program 3 (id=392): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000"], 0x58}, 0x1, 0x0, 0x0, 0x2000005}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x48050) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=virtio,mmap,cache=none,cache=loose,posixacl']) 209.766806ms ago: executing program 4 (id=393): open(&(0x7f0000000100)='.\x00', 0x5d5481, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) setuid(0xee01) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 207.498375ms ago: executing program 4 (id=394): r0 = syz_socket_connect_nvme_tcp() r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r3, 0x9}, 0x8) close(r0) 130.840569ms ago: executing program 3 (id=395): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') (rerun: 64) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x4000) syz_emit_ethernet(0x66, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800303afffe8000000000000000000000000000aaff0200000000000000000000000000018700907800000000fe80b600000000000000000000000000aa0000000000000000000000000000000101012025b07f3c58"], 0x0) pread64(r0, &(0x7f0000000080)=""/237, 0xed, 0x0) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x1}, 0x8) 130.467687ms ago: executing program 4 (id=396): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = io_uring_setup(0x7fdb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff, 0x8}) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x400c6313, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r6, &(0x7f0000000080)={{0xcc, 0xe3, 0xc, 0x2bd, 0x2bb, 0xc47c, 0x219, 0x9}, "f3c3af9401b4105c03926858b33dd5c7ab5b7258d13be71e7dca9f3f36c1695162699dbcbc7c7b7ed7e3ce8d75550cae1b1ae41fa39a0a7476b14a745980da5f351a14ba4c12ed5972de2116d837722b88630f50757f1633f16a47687171492b3895f6af9d81002b748b821305913bb2ebb5125a18dce9dc05c33992e7e64a176d11297f6b86a8aeadf419d168e35e22c87a99211690c04d93eaa468f7756d01c66665b7a01ecf0e76b93402858fa822b4ac2b46654f28f076bbd4aa835b0bebd260a9f55f5848"}, 0xe7) 70.829897ms ago: executing program 4 (id=397): syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0xa, 0xfffffff7) close_range(r0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x148) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0', [{0x20, '\x86\n#]\xcb\x1a<\xf8\x02-3U\x8f\xd70)\xed\xab\x0e\f\xd7NxE\x8a*\x90\x8e\xdc\xb3\x96\x8cp\xc1,xj\xdf\xa8zRA\x11o\n\x0f\xfb5N\x03\xcc\xbd\xc3\x85\xbeZ\xcbR\\\xb2\x87\xf8d\xd7|\xc9W\xe4;gYK\xde\x00\xcaW1^3(\xe4\x80\xc5\r\xc1[p#\xc1\xf7\xcaqce\xb8\xd0\x81MX\xffv\x04\xed\nu\xb0\xcbp\x89\x8a\xf8\xbf\x04\x86\x14\xd3X\xc2\x035f=>G\xc9\x85\xd9\x84'}]}, 0x8c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_128={{0x303}, "218c1173344e4509", "7d49488dba62d3ba00", "821722e2", "c4450c4f4a3f045b"}, 0x28) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chmod(&(0x7f0000000340)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000180)='./file0\x00', 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r6, 0x57) sendfile(r5, r6, 0x0, 0x7ffff000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001900), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40186f40, &(0x7f0000000440)=0x1f) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 0s ago: executing program 3 (id=398): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xde2, &(0x7f0000000200)={0x0, 0x5b3c, 0x0, 0x40000000, 0x54}, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, r3, 0x25, 0x8, @val=@iter={0x0}}, 0x20) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r5, 0xff, 0x1, 0x0, &(0x7f0000000000)) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x18, 0x140c, 0x335, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004081}, 0xc810) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1405, 0x100, 0x70bd27, 0x25dfdbfb, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x4040) r7 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x7374, 0x0, 0x8000, 0x315}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) io_uring_enter(r7, 0x68c0, 0x4646, 0x4, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x98}}, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) kernel console output (not intermixed with test programs): netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.358333][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.360643][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.367426][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.370012][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.414179][ T6980] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.506075][ T6876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.517132][ T6980] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.546851][ T6876] veth0_vlan: entered promiscuous mode [ 80.552414][ T6876] veth1_vlan: entered promiscuous mode [ 80.574825][ T6876] veth0_macvtap: entered promiscuous mode [ 80.579436][ T6876] veth1_macvtap: entered promiscuous mode [ 80.582690][ T46] bridge_slave_1: left allmulticast mode [ 80.584492][ T46] bridge_slave_1: left promiscuous mode [ 80.586330][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.590963][ T46] bridge_slave_0: left allmulticast mode [ 80.593279][ T46] bridge_slave_0: left promiscuous mode [ 80.596402][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.859816][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.864178][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.868562][ T46] bond0 (unregistering): Released all slaves [ 80.906028][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.919977][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.935881][ T6876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.939391][ T6876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.943243][ T6876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.946743][ T6876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.962697][ T6980] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.975812][ T6980] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.986700][ T6980] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.996815][ T6980] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.055883][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.059166][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.096004][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.099320][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.129715][ T6980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.208997][ T6980] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.214462][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.214550][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.224355][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.224439][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.245270][ T46] hsr_slave_0: left promiscuous mode [ 81.246014][ T46] hsr_slave_1: left promiscuous mode [ 81.247066][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.247096][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.247881][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.247899][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.280954][ T46] veth1_macvtap: left promiscuous mode [ 81.282104][ T46] veth0_macvtap: left promiscuous mode [ 81.282210][ T46] veth1_vlan: left promiscuous mode [ 81.282260][ T46] veth0_vlan: left promiscuous mode [ 81.341903][ T5946] Bluetooth: hci3: command tx timeout [ 81.442667][ T24] cfg80211: failed to load regulatory.db [ 81.857148][ T7052] netlink: 36 bytes leftover after parsing attributes in process `syz.3.220'. [ 81.860446][ T7052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.220'. [ 81.863883][ T7052] netlink: 36 bytes leftover after parsing attributes in process `syz.3.220'. [ 81.867388][ T7052] netlink: 36 bytes leftover after parsing attributes in process `syz.3.220'. [ 81.966816][ T46] team0 (unregistering): Port device team_slave_1 removed [ 82.022140][ T46] team0 (unregistering): Port device team_slave_0 removed [ 82.527135][ T6980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.555090][ T6980] veth0_vlan: entered promiscuous mode [ 82.563775][ T6980] veth1_vlan: entered promiscuous mode [ 82.589455][ T6980] veth0_macvtap: entered promiscuous mode [ 82.593462][ T6980] veth1_macvtap: entered promiscuous mode [ 82.601899][ T6980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.609297][ T6980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.617524][ T6980] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.620271][ T6980] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.623486][ T6980] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.626910][ T6980] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.660834][ T7060] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 82.666117][ T7060] x_tables: ip6_tables: TCPOPTSTRIP.0 target: invalid size 32 (kernel) != (user) 22 [ 82.679783][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.683323][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.687102][ T40] audit: type=1400 audit(1748089590.152:372): avc: denied { write } for pid=7059 comm="syz.3.222" name="/" dev="9p" ino=35913823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.693878][ T40] audit: type=1400 audit(1748089590.152:373): avc: denied { remove_name } for pid=7059 comm="syz.3.222" name="file2" dev="9p" ino=35913956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.700469][ T40] audit: type=1400 audit(1748089590.152:374): avc: denied { rmdir } for pid=7059 comm="syz.3.222" name="file2" dev="9p" ino=35913956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.701673][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.712164][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.863843][ T40] audit: type=1400 audit(1748089590.322:375): avc: denied { mounton } for pid=7063 comm="syz.3.224" path="/98/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 82.894350][ T40] audit: type=1400 audit(1748089590.352:376): avc: denied { ioctl } for pid=7067 comm="syz.3.225" path="socket:[17718]" dev="sockfs" ino=17718 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.894390][ T7068] ÿ: renamed from bridge_slave_1 (while UP) [ 83.030522][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.049865][ T40] audit: type=1400 audit(1748089590.502:377): avc: denied { setopt } for pid=7072 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.056999][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.227'. [ 83.174528][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.178956][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.183250][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.187742][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.191113][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.337749][ T7074] chnl_net:caif_netlink_parms(): no params data found [ 83.469951][ T7074] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.473071][ T7074] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.476005][ T7074] bridge_slave_0: entered allmulticast mode [ 83.480103][ T7074] bridge_slave_0: entered promiscuous mode [ 83.485187][ T7074] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.488135][ T7074] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.491099][ T7074] bridge_slave_1: entered allmulticast mode [ 83.497538][ T7074] bridge_slave_1: entered promiscuous mode [ 83.552575][ T7074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.558175][ T7074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.605593][ T7074] team0: Port device team_slave_0 added [ 83.610938][ T7074] team0: Port device team_slave_1 added [ 83.646592][ T7074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.649065][ T7074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.659778][ T7074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.667768][ T7074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.670352][ T7074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.678911][ T7074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.699354][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.747820][ T7074] hsr_slave_0: entered promiscuous mode [ 83.750052][ T7074] hsr_slave_1: entered promiscuous mode [ 83.752113][ T7074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.754342][ T7074] Cannot create hsr debugfs directory [ 83.894127][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.283649][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.295025][ T7084] xt_hashlimit: size too large, truncated to 1048576 [ 84.386685][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 84.406706][ T46] bridge_slave_1: left allmulticast mode [ 84.408436][ T46] bridge_slave_1: left promiscuous mode [ 84.410327][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.415522][ T46] bridge_slave_0: left allmulticast mode [ 84.417766][ T46] bridge_slave_0: left promiscuous mode [ 84.419553][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.454524][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.457787][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.468291][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.475292][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.481799][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.518581][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 84.518596][ T40] audit: type=1400 audit(1748089591.972:380): avc: denied { mount } for pid=7088 comm="syz.3.229" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 84.526554][ T7093] netlink: 36 bytes leftover after parsing attributes in process `syz.3.229'. [ 84.703111][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.707290][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.710940][ T46] bond0 (unregistering): Released all slaves [ 84.768855][ T40] audit: type=1400 audit(1748089592.222:381): avc: denied { sqpoll } for pid=7097 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 84.991713][ T7090] chnl_net:caif_netlink_parms(): no params data found [ 85.064742][ T46] hsr_slave_0: left promiscuous mode [ 85.067187][ T46] hsr_slave_1: left promiscuous mode [ 85.069482][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.073836][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.076480][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.078998][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.096667][ T46] veth1_macvtap: left promiscuous mode [ 85.098391][ T46] veth0_macvtap: left promiscuous mode [ 85.100110][ T46] veth1_vlan: left promiscuous mode [ 85.102419][ T46] veth0_vlan: left promiscuous mode [ 85.273031][ T5946] Bluetooth: hci2: command tx timeout [ 85.657313][ T46] team0 (unregistering): Port device team_slave_1 removed [ 85.723639][ T46] team0 (unregistering): Port device team_slave_0 removed [ 85.885277][ T40] audit: type=1400 audit(1748089593.342:382): avc: denied { write } for pid=7118 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.266785][ T7090] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.269885][ T7090] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.273607][ T7090] bridge_slave_0: entered allmulticast mode [ 86.276179][ T7090] bridge_slave_0: entered promiscuous mode [ 86.279283][ T7090] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.281974][ T7090] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.284466][ T7090] bridge_slave_1: entered allmulticast mode [ 86.287243][ T7090] bridge_slave_1: entered promiscuous mode [ 86.328390][ T7090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.334023][ T7090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.373696][ T7090] team0: Port device team_slave_0 added [ 86.378667][ T7090] team0: Port device team_slave_1 added [ 86.429162][ T7090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.431504][ T7090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.440044][ T7090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.448249][ T7090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.450942][ T7090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.459417][ T7090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.491536][ T34] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 86.518344][ T7074] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.524896][ T7090] hsr_slave_0: entered promiscuous mode [ 86.527308][ T7090] hsr_slave_1: entered promiscuous mode [ 86.529376][ T7090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.531854][ T7090] Cannot create hsr debugfs directory [ 86.534419][ T7074] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.544438][ T5946] Bluetooth: hci3: command tx timeout [ 86.545221][ T7074] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.551153][ T7074] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.653067][ T34] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 86.657449][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.661962][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.664884][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 86.670168][ T34] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 86.673292][ T34] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 86.675829][ T34] usb 8-1: Manufacturer: syz [ 86.679907][ T34] usb 8-1: config 0 descriptor?? [ 86.720623][ T7090] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.749006][ T7074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.767320][ T7074] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.772941][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.775110][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.780991][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.783245][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.822872][ T7090] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.947103][ T7090] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.965130][ T7074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.987679][ T7074] veth0_vlan: entered promiscuous mode [ 86.994107][ T7074] veth1_vlan: entered promiscuous mode [ 87.010140][ T7074] veth0_macvtap: entered promiscuous mode [ 87.022326][ T7090] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.030819][ T7074] veth1_macvtap: entered promiscuous mode [ 87.040943][ T7074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.050643][ T7074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.057760][ T7074] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.061174][ T7074] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.064815][ T7074] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.067875][ T7074] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.088876][ T34] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 87.092033][ T34] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 87.097245][ T34] appleir 0003:05AC:8243.0004: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 87.113688][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.116857][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.138665][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.142881][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.147568][ T46] bridge_slave_1: left allmulticast mode [ 87.149346][ T46] bridge_slave_1: left promiscuous mode [ 87.151098][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.155956][ T46] bridge_slave_0: left allmulticast mode [ 87.157731][ T46] bridge_slave_0: left promiscuous mode [ 87.159540][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.341649][ T5946] Bluetooth: hci2: command tx timeout [ 87.418391][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.424491][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.429140][ T46] bond0 (unregistering): Released all slaves [ 87.444802][ T40] audit: type=1400 audit(1748089594.902:383): avc: denied { execute } for pid=7125 comm="syz.3.232" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=18039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 87.508053][ T7090] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.514075][ T7090] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.519398][ T7090] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.539219][ T7090] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.584386][ T7090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.595332][ T7090] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.600704][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.603319][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.610169][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.612795][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.731559][ T46] hsr_slave_0: left promiscuous mode [ 87.733766][ T46] hsr_slave_1: left promiscuous mode [ 87.736116][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.738533][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.742027][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.744832][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.763153][ T46] veth1_macvtap: left promiscuous mode [ 87.765164][ T46] veth0_macvtap: left promiscuous mode [ 87.767064][ T46] veth1_vlan: left promiscuous mode [ 87.769023][ T46] veth0_vlan: left promiscuous mode [ 88.298104][ T46] team0 (unregistering): Port device team_slave_1 removed [ 88.373641][ T46] team0 (unregistering): Port device team_slave_0 removed [ 88.621562][ T5946] Bluetooth: hci3: command tx timeout [ 88.810848][ T7090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.840810][ T7090] veth0_vlan: entered promiscuous mode [ 88.848789][ T7090] veth1_vlan: entered promiscuous mode [ 88.883398][ T7090] veth0_macvtap: entered promiscuous mode [ 88.889012][ T7090] veth1_macvtap: entered promiscuous mode [ 88.902402][ T7090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.910388][ T7090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.916493][ T7090] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.919087][ T7090] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.922817][ T7090] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.925416][ T7090] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.957000][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.959794][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.979140][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.981844][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.124229][ T9] usb 8-1: USB disconnect, device number 3 [ 89.441112][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.496819][ T7167] netlink: 40 bytes leftover after parsing attributes in process `syz.3.236'. [ 89.500968][ T7167] net_ratelimit: 98 callbacks suppressed [ 89.500983][ T7167] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 89.511873][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.514725][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.517429][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.523151][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.528617][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.553034][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 89.558235][ T7171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.561292][ T7171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.566606][ T7171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.569770][ T7171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.687055][ T7168] chnl_net:caif_netlink_parms(): no params data found [ 89.783028][ T7168] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.785504][ T7168] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.787855][ T7168] bridge_slave_0: entered allmulticast mode [ 89.791052][ T7168] bridge_slave_0: entered promiscuous mode [ 89.795320][ T7168] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.797793][ T7168] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.800772][ T7168] bridge_slave_1: entered allmulticast mode [ 89.805211][ T7168] bridge_slave_1: entered promiscuous mode [ 89.812745][ T40] audit: type=1326 audit(1748089597.272:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.3.239" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9f658e969 code=0x0 [ 89.844820][ T7168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.852844][ T7168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.909443][ T7168] team0: Port device team_slave_0 added [ 89.919349][ T7168] team0: Port device team_slave_1 added [ 89.958326][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.960642][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.968483][ T7168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.974144][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.981533][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.989369][ T7168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.037419][ T7190] ptrace attach of "/syz-executor exec"[5940] was attempted by "/syz-executor exec"[7190] [ 90.040959][ T7168] hsr_slave_0: entered promiscuous mode [ 90.043869][ T7189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.048821][ T7168] hsr_slave_1: entered promiscuous mode [ 90.051860][ T7168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.055068][ T7168] Cannot create hsr debugfs directory [ 90.515135][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.910720][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.993462][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.119245][ T46] bridge_slave_1: left allmulticast mode [ 91.121602][ T46] bridge_slave_1: left promiscuous mode [ 91.124082][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.129722][ T46] bridge_slave_0: left allmulticast mode [ 91.132171][ T46] bridge_slave_0: left promiscuous mode [ 91.134461][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.399207][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.413506][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.419925][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.425686][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.428804][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.433146][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.448226][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.452618][ T46] bond0 (unregistering): Released all slaves [ 91.453666][ T7203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.245'. [ 91.474531][ T7203] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 91.582673][ T5946] Bluetooth: hci2: command tx timeout [ 91.608996][ T40] audit: type=1400 audit(1748089599.062:385): avc: denied { append } for pid=7207 comm="syz.3.247" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 91.609056][ T7214] random: crng reseeded on system resumption [ 91.630643][ T7198] chnl_net:caif_netlink_parms(): no params data found [ 91.722081][ T40] audit: type=1400 audit(1748089599.182:386): avc: denied { ioctl } for pid=7207 comm="syz.3.247" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 91.730778][ T7214] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 91.737851][ T7214] binder: 7207:7214 ioctl 8400ae8e 200000000140 returned -22 [ 91.751608][ T7198] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.754640][ T7198] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.757760][ T7198] bridge_slave_0: entered allmulticast mode [ 91.763308][ T7198] bridge_slave_0: entered promiscuous mode [ 91.767947][ T7198] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.770950][ T7198] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.774280][ T7198] bridge_slave_1: entered allmulticast mode [ 91.778185][ T7198] bridge_slave_1: entered promiscuous mode [ 91.837746][ T7198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.842680][ T7198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.908827][ T46] hsr_slave_0: left promiscuous mode [ 91.910996][ T46] hsr_slave_1: left promiscuous mode [ 91.913776][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.916475][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.919088][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.921341][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.938725][ T46] veth1_macvtap: left promiscuous mode [ 91.940589][ T46] veth0_macvtap: left promiscuous mode [ 91.943153][ T46] veth1_vlan: left promiscuous mode [ 91.944828][ T46] veth0_vlan: left promiscuous mode [ 92.515634][ T46] team0 (unregistering): Port device team_slave_1 removed [ 92.577664][ T46] team0 (unregistering): Port device team_slave_0 removed [ 92.699762][ T5944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.705145][ T5944] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.712511][ T5944] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.716415][ T5944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.720148][ T5944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.998094][ T7198] team0: Port device team_slave_0 added [ 93.003238][ T7198] team0: Port device team_slave_1 added [ 93.074114][ T7198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.076297][ T7198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.084483][ T7198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.110810][ T7198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.113196][ T7198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.121251][ T7198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.152396][ T7168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.161729][ T7168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.186792][ T7168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.192902][ T7168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.231930][ T7198] hsr_slave_0: entered promiscuous mode [ 93.234804][ T7198] hsr_slave_1: entered promiscuous mode [ 93.236846][ T7198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.239190][ T7198] Cannot create hsr debugfs directory [ 93.394396][ T7228] chnl_net:caif_netlink_parms(): no params data found [ 93.435313][ T7198] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.501755][ T5946] Bluetooth: hci3: command tx timeout [ 93.515886][ T7228] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.518371][ T7228] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.520634][ T7228] bridge_slave_0: entered allmulticast mode [ 93.523832][ T7228] bridge_slave_0: entered promiscuous mode [ 93.529033][ T7228] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.532272][ T7228] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.534567][ T7228] bridge_slave_1: entered allmulticast mode [ 93.537188][ T7228] bridge_slave_1: entered promiscuous mode [ 93.597451][ T7198] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.610450][ T7228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.617877][ T7228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.662329][ T5946] Bluetooth: hci2: command tx timeout [ 93.671571][ T7198] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.680253][ T7228] team0: Port device team_slave_0 added [ 93.686979][ T7168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.692890][ T7228] team0: Port device team_slave_1 added [ 93.768793][ T7198] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.778545][ T7228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.781942][ T7228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.789948][ T7228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.795100][ T7228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.797252][ T7228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.805377][ T7228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.812354][ T7168] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.851692][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.854794][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.879069][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.882166][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.889818][ T7228] hsr_slave_0: entered promiscuous mode [ 93.892258][ T7228] hsr_slave_1: entered promiscuous mode [ 93.894687][ T7228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.897930][ T7228] Cannot create hsr debugfs directory [ 93.947015][ T46] bridge_slave_1: left allmulticast mode [ 93.949466][ T46] bridge_slave_1: left promiscuous mode [ 93.952780][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.958702][ T46] bridge_slave_0: left allmulticast mode [ 93.961093][ T46] bridge_slave_0: left promiscuous mode [ 93.963526][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.182140][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.186411][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.190018][ T46] bond0 (unregistering): Released all slaves [ 94.308954][ T7198] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.313410][ T7198] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.318534][ T7198] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.352455][ T7198] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.457386][ T7228] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.465682][ T7228] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.475369][ T7228] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.480561][ T7228] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.513932][ T7198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.533589][ T46] hsr_slave_0: left promiscuous mode [ 94.536468][ T46] hsr_slave_1: left promiscuous mode [ 94.539256][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.543184][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.547099][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.550187][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.588522][ T46] veth1_macvtap: left promiscuous mode [ 94.590978][ T46] veth0_macvtap: left promiscuous mode [ 94.593306][ T46] veth1_vlan: left promiscuous mode [ 94.595694][ T46] veth0_vlan: left promiscuous mode [ 94.736382][ T7242] trusted_key: syz.3.249 sent an empty control message without MSG_MORE. [ 94.782307][ T5946] Bluetooth: hci4: command tx timeout [ 95.195384][ T46] team0 (unregistering): Port device team_slave_1 removed [ 95.246762][ T46] team0 (unregistering): Port device team_slave_0 removed [ 95.583481][ T5946] Bluetooth: hci3: command tx timeout [ 95.652725][ T7242] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 95.677927][ T7198] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.688892][ T7228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.695450][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.698495][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.710829][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.713961][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.724231][ T7228] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.727971][ T7168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.743456][ T5946] Bluetooth: hci2: command tx timeout [ 95.757113][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.759501][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.778127][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.781553][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.873372][ T40] audit: type=1400 audit(1748089603.332:387): avc: denied { write } for pid=7255 comm="syz.3.251" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.876722][ T7168] veth0_vlan: entered promiscuous mode [ 95.903122][ T7168] veth1_vlan: entered promiscuous mode [ 95.957662][ T7168] veth0_macvtap: entered promiscuous mode [ 95.964830][ T7168] veth1_macvtap: entered promiscuous mode [ 95.991233][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.998641][ T7198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.005051][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.012366][ T7168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.015251][ T7168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.018049][ T7168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.020897][ T7168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.087075][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.091799][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.102384][ T7228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.126730][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.126750][ T7198] veth0_vlan: entered promiscuous mode [ 96.132997][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.134561][ T7198] veth1_vlan: entered promiscuous mode [ 96.160840][ T7198] veth0_macvtap: entered promiscuous mode [ 96.167079][ T7198] veth1_macvtap: entered promiscuous mode [ 96.181206][ T7198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.189932][ T7198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.195247][ T7198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.198014][ T7198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.200798][ T7198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.204149][ T7198] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.276473][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.279752][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.314060][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.316538][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.346515][ T7228] veth0_vlan: entered promiscuous mode [ 96.356923][ T7228] veth1_vlan: entered promiscuous mode [ 96.406037][ T7228] veth0_macvtap: entered promiscuous mode [ 96.410217][ T7228] veth1_macvtap: entered promiscuous mode [ 96.419206][ T7228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.426877][ T7228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.434948][ T7228] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.438574][ T7228] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.443947][ T7228] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.447577][ T7228] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.500735][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.504156][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.535809][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.539144][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.603486][ T7275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.664601][ T7280] GUP no longer grows the stack in syz.4.252 (7280): 200000007000-20000000a000 (200000004000) [ 96.669046][ T7280] CPU: 2 UID: 0 PID: 7280 Comm: syz.4.252 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 96.669070][ T7280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.669082][ T7280] Call Trace: [ 96.669088][ T7280] [ 96.669095][ T7280] dump_stack_lvl+0x16c/0x1f0 [ 96.669149][ T7280] gup_vma_lookup+0x1d2/0x220 [ 96.669175][ T7280] __get_user_pages+0x234/0x36f0 [ 96.669207][ T7280] ? kasan_save_stack+0x33/0x60 [ 96.669222][ T7280] ? kasan_save_track+0x14/0x30 [ 96.669237][ T7280] ? __kasan_kmalloc+0xaa/0xb0 [ 96.669286][ T7280] ? __kvmalloc_node_noprof+0x279/0x600 [ 96.669310][ T7280] ? xdp_umem_create+0x652/0x1270 [ 96.669333][ T7280] ? __pfx___get_user_pages+0x10/0x10 [ 96.669355][ T7280] ? __x64_sys_setsockopt+0xbd/0x160 [ 96.669375][ T7280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.669403][ T7280] __gup_longterm_locked+0x5e7/0x1850 [ 96.669438][ T7280] ? __pfx___gup_longterm_locked+0x10/0x10 [ 96.669479][ T7280] pin_user_pages+0x13c/0x160 [ 96.669511][ T7280] ? __pfx_pin_user_pages+0x10/0x10 [ 96.669534][ T7280] ? trace_kmalloc+0x2b/0xd0 [ 96.669556][ T7280] ? xdp_umem_create+0x652/0x1270 [ 96.669585][ T7280] xdp_umem_create+0x73c/0x1270 [ 96.669616][ T7280] xsk_setsockopt+0x5b2/0x840 [ 96.669638][ T7280] ? __pfx_xsk_setsockopt+0x10/0x10 [ 96.669666][ T7280] ? selinux_socket_setsockopt+0x6a/0x80 [ 96.669699][ T7280] ? __pfx_xsk_setsockopt+0x10/0x10 [ 96.669720][ T7280] do_sock_setsockopt+0x221/0x470 [ 96.669744][ T7280] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 96.669790][ T7280] __sys_setsockopt+0x1a0/0x230 [ 96.669816][ T7280] __x64_sys_setsockopt+0xbd/0x160 [ 96.669834][ T7280] ? do_syscall_64+0x91/0x260 [ 96.669859][ T7280] ? lockdep_hardirqs_on+0x7c/0x110 [ 96.669883][ T7280] do_syscall_64+0xcd/0x260 [ 96.669911][ T7280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.669929][ T7280] RIP: 0033:0x7ff70878e969 [ 96.669945][ T7280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.669962][ T7280] RSP: 002b:00007ff7096b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 96.669980][ T7280] RAX: ffffffffffffffda RBX: 00007ff7089b5fa0 RCX: 00007ff70878e969 [ 96.669991][ T7280] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 96.670001][ T7280] RBP: 00007ff708810ab1 R08: 0000000000000020 R09: 0000000000000000 [ 96.670012][ T7280] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 96.670022][ T7280] R13: 0000000000000000 R14: 00007ff7089b5fa0 R15: 00007ffdb951ab48 [ 96.670048][ T7280] [ 96.842870][ T40] audit: type=1404 audit(1748089604.302:388): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 96.849125][ T40] audit: type=1400 audit(1748089604.302:389): avc: denied { create } for pid=7283 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 96.857405][ T40] audit: type=1400 audit(1748089604.302:390): avc: denied { mounton } for pid=7283 comm="syz.3.253" path="/125/file0" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 96.866803][ T5946] Bluetooth: hci4: command tx timeout [ 96.866875][ T40] audit: type=1400 audit(1748089604.312:391): avc: denied { create } for pid=7283 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 96.877278][ T40] audit: type=1400 audit(1748089604.312:392): avc: denied { create } for pid=7283 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 96.886745][ T40] audit: type=1404 audit(1748089604.322:393): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 96.901460][ T40] audit: type=1400 audit(1748089604.352:394): avc: denied { read write } for pid=7228 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.910856][ T40] audit: type=1400 audit(1748089604.352:395): avc: denied { open } for pid=7228 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.920379][ T40] audit: type=1400 audit(1748089604.352:396): avc: denied { ioctl } for pid=7228 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.961740][ T7293] netlink: 'syz.4.256': attribute type 1 has an invalid length. [ 97.172256][ T1239] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.570671][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.574515][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.577294][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.580836][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.586211][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.603779][ T1239] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.759441][ T7313] chnl_net:caif_netlink_parms(): no params data found [ 97.811310][ T7322] binder: 7320:7322 ioctl c0306201 200000000640 returned -22 [ 97.882144][ T7328] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.915110][ T7313] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.919162][ T7330] netlink: 'syz.4.264': attribute type 23 has an invalid length. [ 97.922002][ T7313] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.925855][ T7313] bridge_slave_0: entered allmulticast mode [ 97.928517][ T7313] bridge_slave_0: entered promiscuous mode [ 97.933319][ T7313] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.935593][ T7313] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.938748][ T7313] bridge_slave_1: entered allmulticast mode [ 97.941671][ T7313] bridge_slave_1: entered promiscuous mode [ 97.953700][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.959178][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.964011][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.969395][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.972729][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.995150][ T7340] netlink: 'syz.4.267': attribute type 5 has an invalid length. [ 98.038365][ T7313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.043494][ T7313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.091605][ T7313] team0: Port device team_slave_0 added [ 98.092565][ T7338] QAT: failed to copy from user. [ 98.105574][ T7313] team0: Port device team_slave_1 added [ 98.152342][ T7313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.154555][ T7313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.162956][ T7313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.170942][ T7313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.173338][ T7313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.181822][ T7313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.205518][ T7351] TC_ACT_REPEAT abuse ? [ 98.253337][ T7313] hsr_slave_0: entered promiscuous mode [ 98.255754][ T7313] hsr_slave_1: entered promiscuous mode [ 98.258041][ T7313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.261075][ T7313] Cannot create hsr debugfs directory [ 98.360700][ T1239] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.485907][ T7335] chnl_net:caif_netlink_parms(): no params data found [ 98.585068][ T7335] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.587474][ T7335] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.589794][ T7335] bridge_slave_0: entered allmulticast mode [ 98.593064][ T7335] bridge_slave_0: entered promiscuous mode [ 98.597248][ T7335] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.599480][ T7335] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.602083][ T7335] bridge_slave_1: entered allmulticast mode [ 98.604731][ T7335] bridge_slave_1: entered promiscuous mode [ 98.640848][ T7335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.646287][ T7335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.692032][ T7335] team0: Port device team_slave_0 added [ 98.695822][ T7335] team0: Port device team_slave_1 added [ 98.742555][ T7335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.745353][ T7335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.755864][ T7335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.761711][ T7335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.764468][ T7335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.774872][ T7335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.842784][ T7335] hsr_slave_0: entered promiscuous mode [ 98.846338][ T7335] hsr_slave_1: entered promiscuous mode [ 98.849379][ T7335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.852703][ T7335] Cannot create hsr debugfs directory [ 98.941607][ T5946] Bluetooth: hci4: command tx timeout [ 99.114663][ T1239] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.228256][ T1239] bridge_slave_1: left allmulticast mode [ 99.230686][ T1239] bridge_slave_1: left promiscuous mode [ 99.234502][ T1239] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.244272][ T1239] bridge_slave_0: left allmulticast mode [ 99.246651][ T1239] bridge_slave_0: left promiscuous mode [ 99.249116][ T1239] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.342893][ T1144] TC_ACT_REPEAT abuse ? [ 99.564026][ T1239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.569342][ T1239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.574626][ T1239] bond0 (unregistering): Released all slaves [ 99.661531][ T5946] Bluetooth: hci2: command tx timeout [ 99.992456][ T1140] TC_ACT_REPEAT abuse ? [ 100.009151][ T1239] hsr_slave_0: left promiscuous mode [ 100.012021][ T1239] hsr_slave_1: left promiscuous mode [ 100.015730][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.018188][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.021076][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.023337][ T7412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4112 sclass=netlink_route_socket pid=7412 comm=syz.3.279 [ 100.028915][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.055511][ T1239] veth1_macvtap: left promiscuous mode [ 100.057293][ T1239] veth0_macvtap: left promiscuous mode [ 100.059064][ T1239] veth1_vlan: left promiscuous mode [ 100.061898][ T5946] Bluetooth: hci3: command tx timeout [ 100.063571][ T1239] veth0_vlan: left promiscuous mode [ 100.755855][ T1239] team0 (unregistering): Port device team_slave_1 removed [ 100.834677][ T1239] team0 (unregistering): Port device team_slave_0 removed [ 101.021747][ T5946] Bluetooth: hci4: command tx timeout [ 101.175033][ T40] kauditd_printk_skb: 96 callbacks suppressed [ 101.175046][ T40] audit: type=1400 audit(1748089608.632:493): avc: denied { mounton } for pid=7422 comm="syz.4.282" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 101.193857][ T7423] ntfs3(sr0): try to read out of volume at offset 0x0 [ 101.213969][ T40] audit: type=1400 audit(1748089608.672:494): avc: denied { write } for pid=7422 comm="syz.4.282" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 101.380523][ T40] audit: type=1400 audit(1748089608.832:495): avc: denied { create } for pid=7422 comm="syz.4.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.452592][ T7335] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.459631][ T7313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.465886][ T7313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.470205][ T7313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.474336][ T7313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.528649][ T7313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.539909][ T7313] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.546289][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.548550][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.571064][ T7335] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.579144][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.581470][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.649795][ T7335] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.664214][ T40] audit: type=1400 audit(1748089609.122:496): avc: denied { sys_module } for pid=7313 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 101.738898][ T7313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.751600][ T5946] Bluetooth: hci2: command tx timeout [ 101.759335][ T7313] veth0_vlan: entered promiscuous mode [ 101.770742][ T7313] veth1_vlan: entered promiscuous mode [ 101.779917][ T40] audit: type=1400 audit(1748089609.232:497): avc: denied { write } for pid=7444 comm="syz.4.283" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.799036][ T7335] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.820721][ T40] audit: type=1400 audit(1748089609.272:498): avc: denied { create } for pid=7450 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.831052][ T7313] veth0_macvtap: entered promiscuous mode [ 101.836979][ T7313] veth1_macvtap: entered promiscuous mode [ 101.839838][ T40] audit: type=1400 audit(1748089609.292:499): avc: denied { write } for pid=7450 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.852062][ T7451] netlink: 'syz.4.285': attribute type 1 has an invalid length. [ 101.855218][ T7451] netlink: 'syz.4.285': attribute type 2 has an invalid length. [ 101.857070][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.286'. [ 101.865809][ T7313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.870200][ T7313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.891224][ T40] audit: type=1400 audit(1748089609.342:500): avc: denied { write } for pid=7455 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.902183][ T7313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.904941][ T7313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.907972][ T7313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.911057][ T7313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.916164][ T40] audit: type=1400 audit(1748089609.342:501): avc: denied { nlmsg_write } for pid=7455 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.922919][ T40] audit: type=1400 audit(1748089609.352:502): avc: denied { read } for pid=7458 comm="syz.4.287" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.963832][ T1239] bridge_slave_1: left allmulticast mode [ 101.965660][ T1239] bridge_slave_1: left promiscuous mode [ 101.967492][ T1239] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.975299][ T1239] bridge_slave_0: left allmulticast mode [ 101.977125][ T1239] bridge_slave_0: left promiscuous mode [ 101.980837][ T1239] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.035676][ T7466] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.104282][ T7466] ======================================================= [ 102.104282][ T7466] WARNING: The mand mount option has been deprecated and [ 102.104282][ T7466] and is ignored by this kernel. Remove the mand [ 102.104282][ T7466] option from the mount to silence this warning. [ 102.104282][ T7466] ======================================================= [ 102.151621][ T5946] Bluetooth: hci3: command tx timeout [ 102.274564][ T1239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.281321][ T1239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.287735][ T1239] bond0 (unregistering): Released all slaves [ 102.335815][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.339151][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.386318][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.387653][ T7335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.388795][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.395690][ T7335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.400587][ T7335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.427889][ T7492] netlink: 'syz.3.293': attribute type 11 has an invalid length. [ 102.430536][ T7492] netlink: 132 bytes leftover after parsing attributes in process `syz.3.293'. [ 102.441095][ T7335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.582228][ T7335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.597115][ T7335] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.612619][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.614878][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.621246][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.623667][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.693742][ T7503] netlink: 'syz.3.297': attribute type 1 has an invalid length. [ 102.696561][ T7503] netlink: 'syz.3.297': attribute type 2 has an invalid length. [ 102.699591][ T1239] hsr_slave_0: left promiscuous mode [ 102.706371][ T1239] hsr_slave_1: left promiscuous mode [ 102.709223][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.717429][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.727993][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.730322][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.757395][ T1239] veth1_macvtap: left promiscuous mode [ 102.759756][ T1239] veth0_macvtap: left promiscuous mode [ 102.762799][ T1239] veth1_vlan: left promiscuous mode [ 102.765075][ T1239] veth0_vlan: left promiscuous mode [ 103.386270][ T1239] team0 (unregistering): Port device team_slave_1 removed [ 103.447173][ T1239] team0 (unregistering): Port device team_slave_0 removed [ 103.890060][ T7517] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.892982][ T7517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.009419][ T7335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.047814][ T7335] veth0_vlan: entered promiscuous mode [ 104.062812][ T7335] veth1_vlan: entered promiscuous mode [ 104.082773][ T7335] veth0_macvtap: entered promiscuous mode [ 104.094033][ T7335] veth1_macvtap: entered promiscuous mode [ 104.104752][ T7335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.116478][ T7539] netlink: 48 bytes leftover after parsing attributes in process `syz.4.309'. [ 104.118145][ T7335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.125677][ T7335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.128511][ T7335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.131259][ T7335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.135062][ T7335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.151943][ T7542] TC_ACT_REPEAT abuse ? [ 104.154479][ T7544] TC_ACT_REPEAT abuse ? [ 104.166339][ T7542] x_tables: duplicate underflow at hook 1 [ 104.188223][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.191578][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.204223][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.207726][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.221494][ T5946] Bluetooth: hci3: command tx timeout [ 104.235819][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.313'. [ 104.239315][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.313'. [ 104.291367][ T7554] netlink: 'syz.4.314': attribute type 3 has an invalid length. [ 104.297159][ T7554] netlink: 224 bytes leftover after parsing attributes in process `syz.4.314'. [ 104.354309][ T1239] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.112065][ T1137] TC_ACT_REPEAT abuse ? [ 105.338527][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.341721][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.344525][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.347604][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.350241][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.461526][ T6020] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 105.490796][ T7591] chnl_net:caif_netlink_parms(): no params data found [ 105.599411][ T7591] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.602237][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.604522][ T7591] bridge_slave_0: entered allmulticast mode [ 105.607300][ T7591] bridge_slave_0: entered promiscuous mode [ 105.611717][ T7591] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.614037][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.614398][ T6020] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.616260][ T7591] bridge_slave_1: entered allmulticast mode [ 105.619473][ T6020] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 105.622289][ T7591] bridge_slave_1: entered promiscuous mode [ 105.624312][ T6020] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 105.629955][ T6020] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.633618][ T6020] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 105.636482][ T6020] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.643246][ T6020] hub 9-1:1.0: bad descriptor, ignoring hub [ 105.645209][ T6020] hub 9-1:1.0: probe with driver hub failed with error -5 [ 105.647756][ T6020] cdc_wdm 9-1:1.0: skipping garbage [ 105.649789][ T6020] cdc_wdm 9-1:1.0: skipping garbage [ 105.656772][ T6020] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 105.658820][ T6020] cdc_wdm 9-1:1.0: Unknown control protocol [ 105.665006][ T7591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.669657][ T7591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.722917][ T7591] team0: Port device team_slave_0 added [ 105.728326][ T7591] team0: Port device team_slave_1 added [ 105.737000][ T7601] netlink: 40 bytes leftover after parsing attributes in process `syz.3.316'. [ 105.742251][ T65] TC_ACT_REPEAT abuse ? [ 105.773025][ T7591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.775509][ T7591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.784466][ T7591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.795077][ T7591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.797256][ T7591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.805440][ T7591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.874522][ T7591] hsr_slave_0: entered promiscuous mode [ 105.878234][ T7591] hsr_slave_1: entered promiscuous mode [ 105.881270][ T7591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.885092][ T7591] Cannot create hsr debugfs directory [ 105.895673][ T7607] ipt_REJECT: ECHOREPLY no longer supported. [ 105.904353][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.907916][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.910713][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.914852][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.917584][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.963713][ T1239] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.982433][ T7615] bridge2: entered promiscuous mode [ 105.984699][ T7615] bridge2: entered allmulticast mode [ 106.072588][ T1239] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.147770][ T1239] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.185223][ T7608] chnl_net:caif_netlink_parms(): no params data found [ 106.273526][ T7608] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.275900][ T7608] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.278173][ T7608] bridge_slave_0: entered allmulticast mode [ 106.280821][ T7608] bridge_slave_0: entered promiscuous mode [ 106.284601][ T7608] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.286842][ T7608] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.289210][ T7608] bridge_slave_1: entered allmulticast mode [ 106.291965][ T7608] bridge_slave_1: entered promiscuous mode [ 106.325461][ T7608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.329857][ T7608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.369675][ T7608] team0: Port device team_slave_0 added [ 106.374666][ T7608] team0: Port device team_slave_1 added [ 106.396367][ T7590] usb 9-1: reset low-speed USB device number 2 using dummy_hcd [ 106.416132][ T7608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.418153][ T7608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.425879][ T7608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.442094][ T7608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.444701][ T7608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.455979][ T7608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.490780][ T1239] bridge_slave_1: left allmulticast mode [ 106.492794][ T1239] bridge_slave_1: left promiscuous mode [ 106.494638][ T1239] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.498160][ T1239] bridge_slave_0: left allmulticast mode [ 106.499954][ T1239] bridge_slave_0: left promiscuous mode [ 106.502499][ T1239] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.671808][ T7590] usb 9-1: device descriptor read/64, error -71 [ 106.725673][ T1239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.729735][ T1239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.734130][ T1239] bond0 (unregistering): Released all slaves [ 106.779020][ T7608] hsr_slave_0: entered promiscuous mode [ 106.781297][ T7608] hsr_slave_1: entered promiscuous mode [ 106.783992][ T7608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.786362][ T7608] Cannot create hsr debugfs directory [ 107.014712][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 107.014727][ T40] audit: type=1400 audit(1748089614.472:563): avc: denied { ioctl } for pid=7662 comm="syz.3.324" path="socket:[25641]" dev="sockfs" ino=25641 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.026226][ T7665] netdevsim netdevsim3 ªªªªªª: renamed from netdevsim0 [ 107.051828][ T7590] usb 9-1: reset low-speed USB device number 2 using dummy_hcd [ 107.069320][ T40] audit: type=1400 audit(1748089614.522:564): avc: denied { ioctl } for pid=7668 comm="syz.3.325" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.144736][ T1239] hsr_slave_0: left promiscuous mode [ 107.146909][ T1239] hsr_slave_1: left promiscuous mode [ 107.149378][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.155412][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.159148][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.162480][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.181883][ C2] TC_ACT_REPEAT abuse ? [ 107.183637][ C2] TC_ACT_REPEAT abuse ? [ 107.185277][ T1239] veth1_macvtap: left promiscuous mode [ 107.187071][ T1239] veth0_macvtap: left promiscuous mode [ 107.188893][ T1239] veth1_vlan: left promiscuous mode [ 107.190604][ T1239] veth0_vlan: left promiscuous mode [ 107.204885][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.326'. [ 107.207723][ T7673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.326'. [ 107.331466][ T7590] usb 9-1: device descriptor read/64, error -71 [ 107.431791][ T5944] Bluetooth: hci2: command tx timeout [ 107.688040][ T1239] team0 (unregistering): Port device team_slave_1 removed [ 107.721556][ T7590] usb 9-1: reset low-speed USB device number 2 using dummy_hcd [ 107.745831][ T7590] usb 9-1: device descriptor read/8, error -71 [ 107.757435][ T1239] team0 (unregistering): Port device team_slave_0 removed [ 107.991654][ T5944] Bluetooth: hci3: command tx timeout [ 108.121755][ T7590] usb 9-1: reset low-speed USB device number 2 using dummy_hcd [ 108.156566][ T7590] usb 9-1: device descriptor read/8, error -71 [ 108.238431][ T7680] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 108.244797][ T7591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.262707][ T7590] cdc_wdm 9-1:1.0: Error autopm - -16 [ 108.265930][ T7608] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.272276][ T5984] usb 9-1: USB disconnect, device number 2 [ 108.282675][ T7591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.293297][ T7591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.298660][ T7591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.334652][ T40] audit: type=1400 audit(1748089615.792:565): avc: denied { create } for pid=7682 comm="syz.4.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 108.344305][ T40] audit: type=1400 audit(1748089615.792:566): avc: denied { setopt } for pid=7682 comm="syz.4.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 108.362228][ T7608] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.380112][ T7591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.383481][ T40] audit: type=1400 audit(1748089615.842:567): avc: denied { connect } for pid=7679 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.390438][ T7591] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.394844][ T40] audit: type=1400 audit(1748089615.842:568): avc: denied { write } for pid=7679 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.397475][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.402669][ T40] audit: type=1400 audit(1748089615.862:569): avc: denied { read } for pid=7679 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.404463][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.420237][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.423134][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.457935][ T7608] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.556323][ T7608] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.598884][ T7591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.627158][ T7591] veth0_vlan: entered promiscuous mode [ 108.634055][ T7591] veth1_vlan: entered promiscuous mode [ 108.653811][ T7591] veth0_macvtap: entered promiscuous mode [ 108.657712][ T7591] veth1_macvtap: entered promiscuous mode [ 108.678415][ T7591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.686626][ T7591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.692647][ T7591] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.695410][ T7591] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.698086][ T7591] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.700790][ T7591] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.708767][ T7697] netlink: 24 bytes leftover after parsing attributes in process `syz.3.331'. [ 108.740912][ T1239] bridge_slave_1: left allmulticast mode [ 108.742883][ T1239] bridge_slave_1: left promiscuous mode [ 108.744768][ T1239] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.748230][ T1239] bridge_slave_0: left allmulticast mode [ 108.750020][ T1239] bridge_slave_0: left promiscuous mode [ 108.752883][ T1239] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.026356][ T1239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.030985][ T1239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.035079][ T1239] bond0 (unregistering): Released all slaves [ 109.104461][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.107077][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.137287][ T40] audit: type=1400 audit(1748089616.592:570): avc: denied { read } for pid=7712 comm="syz.3.335" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 109.144963][ T7608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.151761][ T40] audit: type=1400 audit(1748089616.592:571): avc: denied { open } for pid=7712 comm="syz.3.335" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 109.154280][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.154863][ T7608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.165941][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.187127][ T7608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.192255][ T7608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.228591][ T7608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.239695][ T7608] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.247118][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.249413][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.269756][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.272193][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.284881][ T7713] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 109.287503][ T7713] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.290426][ T7713] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 109.293638][ T7713] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 109.296633][ T7713] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 109.300611][ T7713] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.302599][ T7713] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 109.305641][ T7713] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 109.379182][ T1239] hsr_slave_0: left promiscuous mode [ 109.382304][ T1239] hsr_slave_1: left promiscuous mode [ 109.385054][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.388105][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.392140][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.395263][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.428958][ T1239] veth1_macvtap: left promiscuous mode [ 109.431462][ T1239] veth0_macvtap: left promiscuous mode [ 109.433859][ T1239] veth1_vlan: left promiscuous mode [ 109.436132][ T1239] veth0_vlan: left promiscuous mode [ 109.582439][ T40] audit: type=1400 audit(1748089617.042:572): avc: denied { write } for pid=7722 comm="syz.4.336" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 109.587180][ T7724] usb 2-1: USB disconnect, device number 2 [ 110.016166][ T1239] team0 (unregistering): Port device team_slave_1 removed [ 110.081006][ T1239] team0 (unregistering): Port device team_slave_0 removed [ 110.224026][ T1137] TC_ACT_REPEAT abuse ? [ 110.522739][ T7727] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 110.529375][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 110.533631][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 110.536387][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 110.540247][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 110.549236][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 110.552176][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 110.555228][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 110.581698][ T7608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.625857][ T7608] veth0_vlan: entered promiscuous mode [ 110.630822][ T7608] veth1_vlan: entered promiscuous mode [ 110.649105][ T7608] veth0_macvtap: entered promiscuous mode [ 110.657750][ T7608] veth1_macvtap: entered promiscuous mode [ 110.665951][ T7608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.672268][ T7608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.678471][ T7608] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.681207][ T7608] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.684460][ T7608] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.687160][ T7608] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.723972][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.726485][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.742476][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.744926][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.995444][ T7757] vlan2: entered allmulticast mode [ 111.090911][ T1239] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.271616][ T5944] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.351569][ T5944] Bluetooth: hci4: command 0x0c1a tx timeout [ 111.351594][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.003435][ T7761] Bluetooth: (null): Invalid header checksum [ 112.096702][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.100241][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.103529][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.106599][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.109343][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.207698][ T7762] chnl_net:caif_netlink_parms(): no params data found [ 112.306233][ T7762] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.309336][ T7762] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.312657][ T7762] bridge_slave_0: entered allmulticast mode [ 112.316619][ T7762] bridge_slave_0: entered promiscuous mode [ 112.321858][ T7762] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.324124][ T7762] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.326371][ T7762] bridge_slave_1: entered allmulticast mode [ 112.328946][ T7762] bridge_slave_1: entered promiscuous mode [ 112.376606][ T7762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.383161][ T7762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.419998][ T7762] team0: Port device team_slave_0 added [ 112.423701][ T7762] team0: Port device team_slave_1 added [ 112.454295][ T7762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.456479][ T7762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.464882][ T7762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.469033][ T7762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.471210][ T7762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.479335][ T7762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.518901][ T7762] hsr_slave_0: entered promiscuous mode [ 112.521193][ T7762] hsr_slave_1: entered promiscuous mode [ 112.523468][ T7762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.525874][ T7762] Cannot create hsr debugfs directory [ 112.602093][ T1239] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.722517][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 112.726178][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.735003][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.737074][ T1239] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.738584][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.746690][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.863027][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 112.863038][ T40] audit: type=1400 audit(1748089620.322:584): avc: denied { write } for pid=7790 comm="syz.4.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 112.882700][ T1239] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.897203][ T7784] chnl_net:caif_netlink_parms(): no params data found [ 113.000907][ T7798] __nla_validate_parse: 47 callbacks suppressed [ 113.000924][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 113.025788][ T7784] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.027994][ T7784] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.030142][ T7784] bridge_slave_0: entered allmulticast mode [ 113.035152][ T7784] bridge_slave_0: entered promiscuous mode [ 113.038257][ T7798] IPVS: Error joining to the multicast group [ 113.051624][ T7784] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.053865][ T7784] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.056212][ T7784] bridge_slave_1: entered allmulticast mode [ 113.060514][ T7784] bridge_slave_1: entered promiscuous mode [ 113.106297][ T40] audit: type=1400 audit(1748089620.562:585): avc: denied { read write } for pid=7804 comm="syz.4.354" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 113.116045][ T40] audit: type=1400 audit(1748089620.562:586): avc: denied { open } for pid=7804 comm="syz.4.354" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 113.141698][ T7784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.144666][ T1239] bridge_slave_1: left allmulticast mode [ 113.146477][ T1239] bridge_slave_1: left promiscuous mode [ 113.148302][ T1239] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.152446][ T1239] bridge_slave_0: left allmulticast mode [ 113.154867][ T1239] bridge_slave_0: left promiscuous mode [ 113.157442][ T1239] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.258850][ T7808] netlink: 'syz.3.355': attribute type 13 has an invalid length. [ 113.311630][ T40] audit: type=1400 audit(1748089620.762:587): avc: denied { append } for pid=7806 comm="syz.3.355" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.351528][ T29] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 113.412775][ T1239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.416882][ T1239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.421323][ T1239] bond0 (unregistering): Released all slaves [ 113.421685][ T5944] Bluetooth: hci4: command 0x0c1a tx timeout [ 113.429178][ T7784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.462652][ T7784] team0: Port device team_slave_0 added [ 113.501552][ T7808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.515830][ T29] usb 9-1: not running at top speed; connect to a high speed hub [ 113.521674][ T29] usb 9-1: config 122 has an invalid interface number: 140 but max is 2 [ 113.525544][ T29] usb 9-1: config 122 has an invalid interface number: 187 but max is 2 [ 113.528720][ T29] usb 9-1: config 122 has an invalid interface number: 193 but max is 2 [ 113.530543][ T7784] team0: Port device team_slave_1 added [ 113.532169][ T29] usb 9-1: config 122 has no interface number 0 [ 113.532189][ T29] usb 9-1: config 122 has no interface number 1 [ 113.532206][ T29] usb 9-1: config 122 has no interface number 2 [ 113.541849][ T29] usb 9-1: config 122 interface 140 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 113.546241][ T29] usb 9-1: config 122 interface 140 altsetting 4 has an endpoint descriptor with address 0x12, changing to 0x2 [ 113.550963][ T29] usb 9-1: config 122 interface 140 altsetting 4 endpoint 0x2 has invalid maxpacket 59423, setting to 64 [ 113.555620][ T29] usb 9-1: config 122 interface 140 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 113.560092][ T29] usb 9-1: config 122 interface 140 altsetting 4 endpoint 0x4 has invalid wMaxPacketSize 0 [ 113.564475][ T29] usb 9-1: config 122 interface 140 altsetting 4 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 113.568993][ T29] usb 9-1: config 122 interface 140 altsetting 4 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 113.573947][ T29] usb 9-1: config 122 interface 140 altsetting 4 endpoint 0x8A has invalid maxpacket 5489, setting to 64 [ 113.578073][ T29] usb 9-1: config 122 interface 140 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 113.583000][ T29] usb 9-1: config 122 interface 140 altsetting 4 has 11 endpoint descriptors, different from the interface descriptor's value: 9 [ 113.588144][ T29] usb 9-1: config 122 interface 187 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 113.592942][ T29] usb 9-1: config 122 interface 187 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 113.597202][ T29] usb 9-1: config 122 interface 187 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 113.601552][ T29] usb 9-1: config 122 interface 187 altsetting 11 endpoint 0xF has invalid maxpacket 36973, setting to 64 [ 113.605993][ T29] usb 9-1: config 122 interface 187 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 113.609501][ T29] usb 9-1: config 122 interface 187 altsetting 11 has a duplicate endpoint with address 0xD, skipping [ 113.613956][ T29] usb 9-1: config 122 interface 187 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 113.618283][ T29] usb 9-1: config 122 interface 187 altsetting 11 has a duplicate endpoint with address 0xD, skipping [ 113.622845][ T29] usb 9-1: config 122 interface 187 altsetting 11 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.627567][ T29] usb 9-1: config 122 interface 187 altsetting 11 has a duplicate endpoint with address 0x8F, skipping [ 113.632145][ T29] usb 9-1: config 122 interface 193 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 113.636655][ T29] usb 9-1: config 122 interface 193 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 113.641079][ T29] usb 9-1: config 122 interface 193 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 113.645641][ T29] usb 9-1: config 122 interface 193 altsetting 2 endpoint 0x3 has invalid maxpacket 552, setting to 64 [ 113.650103][ T29] usb 9-1: config 122 interface 193 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 113.655033][ T29] usb 9-1: config 122 interface 193 altsetting 2 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 113.659828][ T29] usb 9-1: config 122 interface 193 altsetting 2 has a duplicate endpoint with address 0x84, skipping [ 113.663531][ T29] usb 9-1: config 122 interface 193 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 113.666856][ T7784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.667178][ T29] usb 9-1: config 122 interface 193 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 113.670028][ T7784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.673921][ T29] usb 9-1: config 122 interface 193 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 113.673944][ T29] usb 9-1: config 122 interface 193 altsetting 2 has an endpoint descriptor with address 0x71, changing to 0x1 [ 113.682473][ T7784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.685747][ T29] usb 9-1: config 122 interface 193 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 113.690365][ T7784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.692589][ T29] usb 9-1: config 122 interface 193 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 113.695938][ T7784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.698035][ T29] usb 9-1: config 122 interface 193 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 113.701457][ T7784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.709274][ T29] usb 9-1: config 122 interface 193 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 113.709289][ T29] usb 9-1: config 122 interface 193 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 113.709305][ T29] usb 9-1: config 122 interface 193 altsetting 2 has 15 endpoint descriptors, different from the interface descriptor's value: 13 [ 113.728696][ T29] usb 9-1: config 122 interface 140 has no altsetting 0 [ 113.731021][ T29] usb 9-1: config 122 interface 187 has no altsetting 0 [ 113.733995][ T29] usb 9-1: config 122 interface 193 has no altsetting 0 [ 113.737781][ T29] usb 9-1: Dual-Role OTG device on HNP port [ 113.739872][ T29] usb 9-1: New USB device found, idVendor=04cb, idProduct=0129, bcdDevice=64.99 [ 113.743576][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.746693][ T29] usb 9-1: Product: syz [ 113.748354][ T29] usb 9-1: Manufacturer: syz [ 113.750197][ T29] usb 9-1: SerialNumber: syz [ 113.764488][ T7805] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 113.800359][ T7784] hsr_slave_0: entered promiscuous mode [ 113.802885][ T7784] hsr_slave_1: entered promiscuous mode [ 113.805069][ T7784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.807532][ T7784] Cannot create hsr debugfs directory [ 113.853391][ T40] audit: type=1400 audit(1748089621.312:588): avc: denied { read write } for pid=7817 comm="syz.3.356" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 113.860714][ T40] audit: type=1400 audit(1748089621.312:589): avc: denied { open } for pid=7817 comm="syz.3.356" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 113.868232][ T40] audit: type=1400 audit(1748089621.312:590): avc: denied { ioctl } for pid=7817 comm="syz.3.356" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 113.876188][ T40] audit: type=1400 audit(1748089621.312:591): avc: denied { connect } for pid=7817 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.884867][ T40] audit: type=1400 audit(1748089621.312:592): avc: denied { name_connect } for pid=7817 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 113.906937][ T1239] hsr_slave_0: left promiscuous mode [ 113.909805][ T1239] hsr_slave_1: left promiscuous mode [ 113.913070][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.915663][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.918328][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.920622][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.939297][ T1239] veth1_macvtap: left promiscuous mode [ 113.941101][ T1239] veth0_macvtap: left promiscuous mode [ 113.942978][ T1239] veth1_vlan: left promiscuous mode [ 113.944650][ T1239] veth0_vlan: left promiscuous mode [ 114.084812][ T40] audit: type=1400 audit(1748089621.542:593): avc: denied { unmount } for pid=7804 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 114.153970][ T5944] Bluetooth: hci2: command tx timeout [ 114.176860][ T29] usb 9-1: USB disconnect, device number 4 [ 114.506505][ T1239] team0 (unregistering): Port device team_slave_1 removed [ 114.577651][ T1239] team0 (unregistering): Port device team_slave_0 removed [ 114.727871][ T7825] binder: 7824:7825 ioctl ae41 0 returned -22 [ 114.791952][ T5944] Bluetooth: hci3: command tx timeout [ 115.169508][ T7762] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.174117][ T7762] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 115.176329][ T7762] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.178239][ T7762] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.208770][ T7784] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.295260][ T7762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.305611][ T7762] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.324749][ T7784] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.329493][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.329564][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.337282][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.337330][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.403668][ T7784] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.498094][ T7784] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.501679][ T5944] Bluetooth: hci4: command 0x0c1a tx timeout [ 115.510522][ T7762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.533390][ T7762] veth0_vlan: entered promiscuous mode [ 115.536375][ T7762] veth1_vlan: entered promiscuous mode [ 115.548393][ T7762] veth0_macvtap: entered promiscuous mode [ 115.554379][ T7762] veth1_macvtap: entered promiscuous mode [ 115.564333][ T7762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.571938][ T7762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.577506][ T7762] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.580214][ T7762] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.587390][ T7762] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.590108][ T7762] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.673806][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.676653][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.708428][ T7784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 115.708687][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.715314][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.722187][ T1239] bridge_slave_1: left allmulticast mode [ 115.724585][ T1239] bridge_slave_1: left promiscuous mode [ 115.727037][ T1239] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.733697][ T1239] bridge_slave_0: left allmulticast mode [ 115.735741][ T1239] bridge_slave_0: left promiscuous mode [ 115.737587][ T1239] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.767061][ T7857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=223 sclass=netlink_route_socket pid=7857 comm=syz.3.364 [ 116.086662][ T1239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.094751][ T1239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.100000][ T1239] bond0 (unregistering): Released all slaves [ 116.111702][ T7784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 116.124167][ T7784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 116.129945][ T7784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 116.242145][ T7784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.250758][ T7784] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.258183][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.260512][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.266786][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.269103][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.286259][ T7872] netlink: 'syz.3.367': attribute type 1 has an invalid length. [ 116.317979][ T7872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.334093][ T7872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.336398][ T7872] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 116.340251][ T7872] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 116.388648][ T7875] erspan0: entered allmulticast mode [ 116.520356][ T1239] hsr_slave_0: left promiscuous mode [ 116.523040][ T1239] hsr_slave_1: left promiscuous mode [ 116.525054][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.527397][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.530437][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.535012][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.554884][ T1239] veth1_macvtap: left promiscuous mode [ 116.556692][ T1239] veth0_macvtap: left promiscuous mode [ 116.558839][ T1239] veth1_vlan: left promiscuous mode [ 116.561079][ T1239] veth0_vlan: left promiscuous mode [ 116.861566][ T5944] Bluetooth: hci3: command tx timeout [ 117.144427][ T1239] team0 (unregistering): Port device team_slave_1 removed [ 117.203862][ T1239] team0 (unregistering): Port device team_slave_0 removed [ 117.694901][ T7885] netlink: 40 bytes leftover after parsing attributes in process `syz.4.370'. [ 117.735577][ T7784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.767226][ T7784] veth0_vlan: entered promiscuous mode [ 117.777526][ T7784] veth1_vlan: entered promiscuous mode [ 117.800264][ T7896] netlink: 52 bytes leftover after parsing attributes in process `syz.4.372'. [ 117.804145][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.372'. [ 117.807832][ T7896] tipc: MTU too low for tipc bearer [ 117.810696][ T7896] netlink: 80 bytes leftover after parsing attributes in process `syz.4.372'. [ 117.815533][ T7784] veth0_macvtap: entered promiscuous mode [ 117.819433][ T7784] veth1_macvtap: entered promiscuous mode [ 117.829383][ T7784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.836137][ T7784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.844250][ T7784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.847253][ T7784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.849149][ T7901] random: crng reseeded on system resumption [ 117.850123][ T7784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.855928][ T7784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.923642][ T7904] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.019365][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 118.019378][ T40] audit: type=1400 audit(1748089625.472:615): avc: denied { mount } for pid=7906 comm="syz.3.376" name="/" dev="overlay" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 118.019467][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.035593][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.054831][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.057275][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.068915][ T40] audit: type=1400 audit(1748089625.522:616): avc: denied { write } for pid=7911 comm="syz.3.377" name="file0" dev="tmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 118.079180][ T40] audit: type=1400 audit(1748089625.532:617): avc: denied { open } for pid=7911 comm="syz.3.377" path="/189/file0" dev="tmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 118.206029][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.241591][ T29] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 118.371568][ T29] usb 9-1: device descriptor read/64, error -71 [ 118.381684][ T833] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 118.531620][ T833] usb 8-1: Using ep0 maxpacket: 8 [ 118.536257][ T833] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.541040][ T833] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 118.546052][ T833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.552301][ T833] usb 8-1: config 0 descriptor?? [ 118.611543][ T29] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 118.741612][ T29] usb 9-1: device descriptor read/64, error -71 [ 118.763682][ T833] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 118.852229][ T29] usb usb9-port1: attempt power cycle [ 119.015653][ T34] usb 8-1: USB disconnect, device number 4 [ 119.015710][ C1] iowarrior 8-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 119.150081][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.154413][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.159650][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.164670][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.168156][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.211893][ T29] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 119.242071][ T29] usb 9-1: device descriptor read/8, error -71 [ 119.286687][ T7918] chnl_net:caif_netlink_parms(): no params data found [ 119.397827][ T7918] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.400161][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.404015][ T7918] bridge_slave_0: entered allmulticast mode [ 119.406729][ T7918] bridge_slave_0: entered promiscuous mode [ 119.411071][ T7918] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.414327][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.416510][ T7918] bridge_slave_1: entered allmulticast mode [ 119.419075][ T7918] bridge_slave_1: entered promiscuous mode [ 119.455202][ T7918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.459965][ T7918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.491556][ T29] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 119.499973][ T7918] team0: Port device team_slave_0 added [ 119.505663][ T7918] team0: Port device team_slave_1 added [ 119.512118][ T29] usb 9-1: device descriptor read/8, error -71 [ 119.538886][ T7918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.541969][ T7918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.550741][ T7918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.555184][ T7918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.557395][ T7918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.565476][ T7918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.604941][ T7918] hsr_slave_0: entered promiscuous mode [ 119.607169][ T7918] hsr_slave_1: entered promiscuous mode [ 119.609536][ T7918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.612309][ T7918] Cannot create hsr debugfs directory [ 119.632680][ T29] usb usb9-port1: unable to enumerate USB device [ 119.885839][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.889803][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.894037][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.897607][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.900466][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.968624][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.030941][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.041245][ T7927] chnl_net:caif_netlink_parms(): no params data found [ 120.102194][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.143049][ T7927] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.145355][ T7927] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.147598][ T7927] bridge_slave_0: entered allmulticast mode [ 120.150237][ T7927] bridge_slave_0: entered promiscuous mode [ 120.153495][ T7927] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.155724][ T7927] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.158017][ T7927] bridge_slave_1: entered allmulticast mode [ 120.160657][ T7927] bridge_slave_1: entered promiscuous mode [ 120.206731][ T7927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.213802][ T7927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.260132][ T7927] team0: Port device team_slave_0 added [ 120.279278][ T7927] team0: Port device team_slave_1 added [ 120.334707][ T7927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.337287][ T7927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.346652][ T7927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.354181][ T7927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.357003][ T7927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.368638][ T7927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.385328][ T12] bridge_slave_1: left allmulticast mode [ 120.387171][ T12] bridge_slave_1: left promiscuous mode [ 120.389024][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.402018][ T12] bridge_slave_0: left allmulticast mode [ 120.403833][ T12] bridge_slave_0: left promiscuous mode [ 120.405701][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.671173][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.677161][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.682250][ T12] bond0 (unregistering): Released all slaves [ 120.783500][ T7927] hsr_slave_0: entered promiscuous mode [ 120.785788][ T7927] hsr_slave_1: entered promiscuous mode [ 120.787856][ T7927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.790280][ T7927] Cannot create hsr debugfs directory [ 120.991872][ T40] audit: type=1400 audit(1748089628.452:618): avc: denied { create } for pid=7941 comm="syz.4.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 120.997151][ T7945] syz.4.379: attempt to access beyond end of device [ 120.997151][ T7945] loop4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 121.009531][ T7945] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32 [ 121.181696][ T5946] Bluetooth: hci2: command tx timeout [ 121.991712][ T5946] Bluetooth: hci3: command tx timeout [ 123.271495][ T5946] Bluetooth: hci2: command tx timeout [ 123.989595][ T12] hsr_slave_0: left promiscuous mode [ 123.993214][ T12] hsr_slave_1: left promiscuous mode [ 123.995974][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.999009][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.003804][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.006842][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.042182][ T12] veth1_macvtap: left promiscuous mode [ 124.044170][ T12] veth0_macvtap: left promiscuous mode [ 124.045973][ T12] veth1_vlan: left promiscuous mode [ 124.047628][ T12] veth0_vlan: left promiscuous mode [ 124.051852][ T7953] netlink: 40 bytes leftover after parsing attributes in process `syz.3.381'. [ 124.071496][ T5946] Bluetooth: hci3: command tx timeout [ 124.103494][ T40] audit: type=1400 audit(1748089631.562:619): avc: denied { ioctl } for pid=7952 comm="syz.3.381" path="socket:[26592]" dev="sockfs" ino=26592 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.112898][ T40] audit: type=1400 audit(1748089631.562:620): avc: denied { read write } for pid=7952 comm="syz.3.381" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 124.119991][ T40] audit: type=1400 audit(1748089631.562:621): avc: denied { open } for pid=7952 comm="syz.3.381" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 124.129441][ T40] audit: type=1400 audit(1748089631.572:622): avc: denied { ioctl } for pid=7952 comm="syz.3.381" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 124.371510][ T64] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 124.531535][ T64] usb 9-1: Using ep0 maxpacket: 8 [ 124.533618][ T64] usb 9-1: no configurations [ 124.535159][ T64] usb 9-1: can't read configurations, error -22 [ 124.588952][ T12] team0 (unregistering): Port device team_slave_1 removed [ 124.650797][ T12] team0 (unregistering): Port device team_slave_0 removed [ 124.671540][ T64] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 124.821479][ T64] usb 9-1: Using ep0 maxpacket: 8 [ 124.824448][ T64] usb 9-1: no configurations [ 124.826516][ T64] usb 9-1: can't read configurations, error -22 [ 124.829589][ T64] usb usb9-port1: attempt power cycle [ 125.127870][ T7927] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.167266][ T40] audit: type=1400 audit(1748089632.622:623): avc: denied { read write } for pid=7961 comm="syz.3.384" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 125.176132][ T40] audit: type=1400 audit(1748089632.622:624): avc: denied { open } for pid=7961 comm="syz.3.384" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 125.188670][ T64] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 125.211968][ T64] usb 9-1: Using ep0 maxpacket: 8 [ 125.214445][ T64] usb 9-1: no configurations [ 125.215938][ T64] usb 9-1: can't read configurations, error -22 [ 125.216569][ T7927] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.295311][ T7927] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.351517][ T5946] Bluetooth: hci2: command tx timeout [ 125.351550][ T64] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 125.371879][ T64] usb 9-1: Using ep0 maxpacket: 8 [ 125.374003][ T64] usb 9-1: no configurations [ 125.375543][ T64] usb 9-1: can't read configurations, error -22 [ 125.377941][ T64] usb usb9-port1: unable to enumerate USB device [ 125.421911][ T7927] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.455124][ T7971] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.457249][ T7971] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.459358][ T7971] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 125.461492][ T7971] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.463401][ T7971] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.466635][ T7971] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.470357][ T7971] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.475345][ T7971] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 125.479719][ T7971] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 125.513067][ T7983] program syz.3.386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.566376][ T7918] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 125.573008][ T7918] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 125.578545][ T7918] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 125.583787][ T7918] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 125.632140][ T7927] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 125.638593][ T7927] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 125.648567][ T7927] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 125.649545][ T7987] tmpfs: Unknown parameter 'inod¡' [ 125.654187][ T7927] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 125.670809][ T12] bridge_slave_1: left allmulticast mode [ 125.673046][ T12] bridge_slave_1: left promiscuous mode [ 125.674869][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.680212][ T12] bridge_slave_0: left allmulticast mode [ 125.691583][ T12] bridge_slave_0: left promiscuous mode [ 125.693458][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.797375][ T7989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.389'. [ 125.800218][ T7989] netlink: 'syz.3.389': attribute type 12 has an invalid length. [ 125.923016][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.928047][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.932670][ T12] bond0 (unregistering): Released all slaves [ 125.954440][ T7918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.975584][ T7918] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.989519][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.991870][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.995701][ T40] audit: type=1400 audit(1748089633.452:625): avc: denied { create } for pid=7990 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.001813][ T40] audit: type=1400 audit(1748089633.452:626): avc: denied { write } for pid=7990 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.009527][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.012651][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.029003][ T40] audit: type=1400 audit(1748089633.482:627): avc: denied { write } for pid=7993 comm="syz.3.391" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 126.037197][ T40] audit: type=1400 audit(1748089633.492:628): avc: denied { ioctl } for pid=7993 comm="syz.3.391" path="socket:[27628]" dev="sockfs" ino=27628 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.095760][ T7927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.107482][ T7927] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.116196][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.118458][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.133792][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.136034][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.179182][ T7918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.204091][ T7918] veth0_vlan: entered promiscuous mode [ 126.208961][ T7918] veth1_vlan: entered promiscuous mode [ 126.228705][ T7918] veth0_macvtap: entered promiscuous mode [ 126.243646][ T7918] veth1_macvtap: entered promiscuous mode [ 126.255233][ T12] hsr_slave_0: left promiscuous mode [ 126.257538][ T12] hsr_slave_1: left promiscuous mode [ 126.259626][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.264947][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.267695][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.270049][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.288315][ T12] veth1_macvtap: left promiscuous mode [ 126.290129][ T12] veth0_macvtap: left promiscuous mode [ 126.292637][ T12] veth1_vlan: left promiscuous mode [ 126.294329][ T12] veth0_vlan: left promiscuous mode [ 126.830497][ T12] team0 (unregistering): Port device team_slave_1 removed [ 126.887228][ T12] team0 (unregistering): Port device team_slave_0 removed [ 127.134914][ T8007] kvm: pic: non byte write [ 127.268074][ T8014] binder: 8013:8014 ioctl c0306201 2000000001c0 returned -22 [ 127.380007][ T8021] netlink: 'syz.3.398': attribute type 2 has an invalid length. [ 127.382986][ T8021] netlink: 32 bytes leftover after parsing attributes in process `syz.3.398'. [ 127.426061][ T5946] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.449036][ T8022] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI [ 127.452854][ T8022] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 127.455633][ T8022] CPU: 1 UID: 0 PID: 8022 Comm: syz.4.397 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 127.460479][ T8022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.463793][ T8022] RIP: 0010:iter_file_splice_write+0xa4e/0x1150 [ 127.465724][ T8022] Code: 00 48 89 fa 48 c1 ea 03 80 3c 1a 00 0f 85 1a 05 00 00 4d 8b 65 10 49 c7 45 10 00 00 00 00 49 8d 7c 24 08 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 ee 04 00 00 49 8b 54 24 08 4c 89 ee 4c 89 f7 83 [ 127.471791][ T8022] RSP: 0018:ffffc90003c8f918 EFLAGS: 00010202 [ 127.473708][ T8022] RAX: 0000000000000bb0 RBX: dffffc0000000000 RCX: ffffc90035bf9000 [ 127.476163][ T8022] RDX: 0000000000000001 RSI: ffffffff82434266 RDI: 0000000000000008 [ 127.478641][ T8022] RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000000000 [ 127.481108][ T8022] R10: 7fffffffffffffa8 R11: 0000000000000000 R12: 0000000000000000 [ 127.483579][ T8022] R13: ffff888012f29828 R14: ffff888041481400 R15: 7fffffffffffffa8 [ 127.486041][ T8022] FS: 00007ff7096976c0(0000) GS:ffff8880d6ada000(0000) knlGS:0000000000000000 [ 127.488848][ T8022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.490998][ T8022] CR2: 000000110c416d06 CR3: 000000005cd6d000 CR4: 0000000000352ef0 [ 127.493511][ T8022] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.496005][ T8022] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.498528][ T8022] Call Trace: [ 127.499597][ T8022] [ 127.500553][ T8022] ? __pfx_iter_file_splice_write+0x10/0x10 [ 127.502146][ T5946] Bluetooth: hci4: command 0x0c1a tx timeout [ 127.502187][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.502472][ T8022] ? __pfx_iter_file_splice_write+0x10/0x10 [ 127.508815][ T8022] direct_splice_actor+0x192/0x6c0 [ 127.510539][ T8022] splice_direct_to_actor+0x345/0xa30 [ 127.512241][ T8022] ? __pfx_direct_splice_actor+0x10/0x10 [ 127.512618][ T5946] Bluetooth: hci3: command 0x0419 tx timeout [ 127.513173][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.514016][ T8022] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 127.520289][ T8022] ? __pfx___might_resched+0x10/0x10 [ 127.521969][ T8022] do_splice_direct+0x174/0x240 [ 127.523523][ T8022] ? __pfx_do_splice_direct+0x10/0x10 [ 127.525213][ T8022] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 127.527073][ T8022] ? rw_verify_area+0xcf/0x680 [ 127.528602][ T8022] do_sendfile+0xafd/0xe50 [ 127.530105][ T8022] ? __pfx_do_sendfile+0x10/0x10 [ 127.531681][ T8022] ? __x64_sys_futex+0x1e0/0x4c0 [ 127.533301][ T8022] ? __x64_sys_futex+0x1e9/0x4c0 [ 127.534884][ T8022] __x64_sys_sendfile64+0x1d8/0x220 [ 127.536524][ T8022] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 127.538417][ T8022] ? rcu_is_watching+0x12/0xc0 [ 127.539972][ T8022] do_syscall_64+0xcd/0x260 [ 127.541456][ T8022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.543316][ T8022] RIP: 0033:0x7ff70878e969 [ 127.544788][ T8022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.550962][ T8022] RSP: 002b:00007ff709697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 127.553589][ T8022] RAX: ffffffffffffffda RBX: 00007ff7089b6080 RCX: 00007ff70878e969 [ 127.556047][ T8022] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 127.558570][ T8022] RBP: 00007ff708810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 127.560988][ T8022] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 127.563401][ T8022] R13: 0000000000000000 R14: 00007ff7089b6080 R15: 00007ffdb951ab48 [ 127.565969][ T8022] [ 127.566958][ T8022] Modules linked in: [ 127.568324][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.570914][ T8022] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 127.580041][ T8022] RIP: 0010:iter_file_splice_write+0xa4e/0x1150 [ 127.584618][ T8022] Code: 00 48 89 fa 48 c1 ea 03 80 3c 1a 00 0f 85 1a 05 00 00 4d 8b 65 10 49 c7 45 10 00 00 00 00 49 8d 7c 24 08 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 ee 04 00 00 49 8b 54 24 08 4c 89 ee 4c 89 f7 83 [ 127.592381][ T8022] RSP: 0018:ffffc90003c8f918 EFLAGS: 00010202 [ 127.595092][ T8022] RAX: 0000000000000bb0 RBX: dffffc0000000000 RCX: ffffc90035bf9000 [ 127.598546][ T8022] RDX: 0000000000000001 RSI: ffffffff82434266 RDI: 0000000000000008 [ 127.621446][ T8022] RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000000000 [ 127.624732][ T8022] R10: 7fffffffffffffa8 R11: 0000000000000000 R12: 0000000000000000 [ 127.628032][ T8022] R13: ffff888012f29828 R14: ffff888041481400 R15: 7fffffffffffffa8 [ 127.636189][ T8022] FS: 00007ff7096976c0(0000) GS:ffff8880d6bda000(0000) knlGS:0000000000000000 [ 127.639078][ T8022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.641567][ T8022] CR2: 00007ff709676d58 CR3: 000000005cd6d000 CR4: 0000000000352ef0 [ 127.644902][ T8022] DR0: 0000000000000008 DR1: 00000000000000ff DR2: fffffffffffffffb [ 127.648174][ T8022] DR3: 3e00000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.653471][ T8022] Kernel panic - not syncing: Fatal exception [ 127.656712][ T8022] Kernel Offset: disabled [ 127.658604][ T8022] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:27:14 Registers: info registers vcpu 0 CPU#0 RAX=00000000000b4cd4 RBX=0000000000000000 RCX=ffffffff8b6d4419 RDX=ffffed100d4865be RSI=ffffffff8bf4a460 RDI=ffffffff8191adf1 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90853010 R15=0000000000000000 RIP=ffffffff8b6d2caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f15866b1e9c CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000002 Opmask01=0000000000000001 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1586a218f0 00007f1586a21310 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15869e2050 00007f15869e10c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15869e2580 00007f15869e1b20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15866e40c0 00007f15869e2ab0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1586a20da0 00007f15869e15f0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15866e46b0 00007f15866e40c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15869e2ab0 00007f15869e2580 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15869e1b20 00007f15869e2050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e75006465696669 63657073206e6f69 74706f20676e6f6c 207974706d65000a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3939646265363538 34672d3234313030 2d72656c6c616b7a 79732d3763722d30 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2735313739396462 6536353834672d32 343130302d72656c 6c616b7a79732d37 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63722d302e35312e 3627206f74207972 6f74636572696420 65676e6168632074 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854faab5 RDI=ffffffff9adfe5a0 RBP=ffffffff9adfe560 RSP=ffffc90003c8f280 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552031203a555043 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9adfe560 R15=ffffffff854faa50 RIP=ffffffff854faadf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007ff7096976c0 ffffffff 00c00000 GS =0000 ffff8880d6ada000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c416d06 CR3=000000005cd6d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeeb60e730 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9f6611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9f6611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9f6611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9f6611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9f6611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9f6611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000058 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000058 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000a5e5c RBX=0000000000000002 RCX=ffffffff8b6d4419 RDX=ffffed100d4c65be RSI=ffffffff8bf4a460 RDI=ffffffff8191adf1 RBP=ffffed1003b5c910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c65bd R10=ffff88806a632deb R11=0000000000000000 R12=0000000000000002 R13=ffff88801dae4880 R14=ffffffff90853010 R15=0000000000000000 RIP=ffffffff8b6d2caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb9f748dd58 CR3=0000000029c32000 CR4=00352ef0 DR0=0000000000000008 DR1=00000000000000ff DR2=fffffffffffffffb DR3=3e00000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9f6611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9f6611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9f6611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9f6611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9f6611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9f6611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9f6783488 00007fb9f6783480 00007fb9f6783478 00007fb9f6783450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9f72ed100 00007fb9f6783440 00007fb9f6783458 00007fb9f67834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9f6783498 00007fb9f6783490 00007fb9f6783488 00007fb9f6783480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000058 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=00007f660e1cefff RCX=ffffffff8b66851e RDX=ffff88802af12440 RSI=ffffffff8b66852c RDI=0000000000000006 RBP=0000000000000002 RSP=ffffc90003edf970 R8 =0000000000000006 R9 =000055802d65efff R10=00007f660e1cefff R11=0000000000000001 R12=000055802d65efff R13=000055802d65d000 R14=0000000000000000 R15=ffff88802541ee40 RIP=ffffffff81bb4600 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fffc66acff8 CR3=000000004e873000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f62797375626269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002f10 00000000000be0f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000