last executing test programs: 1m16.120438488s ago: executing program 0 (id=77): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x2, 0x0, 0x0, 0x10}, 0x400) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000110000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000110000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/175, 0xaf, 0x0, &(0x7f0000002700)=""/4096, 0x1000}, &(0x7f0000000340)=0x40) r2 = io_uring_setup(0x2dfe, &(0x7f0000000380)={0x0, 0x547e, 0x10, 0xffffffdf, 0x43}) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad", 0x27}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000100000004000480080002000100000008000b"], 0x28}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x3}}) 1m16.011201749s ago: executing program 0 (id=79): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) gettid() (async) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x2fd]}, 0x4) close(r1) (async) fcntl$setstatus(r1, 0x4, 0x2c00) (async) r2 = gettid() fcntl$setown(r1, 0x8, r2) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010100}, 0x10) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) 1m16.010756146s ago: executing program 0 (id=81): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r2 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r3 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x624102, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ecb(compress_null-generic),blake2s-224-arm)\x00'}, 0x58) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, &(0x7f0000000080)={{0xc, @multicast2, 0x0, 0x0, 'ovf\x00'}}, 0x44) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r8, 0x80044943, &(0x7f0000000240)) getsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfa5, 0x7f, &(0x7f00000000c0)) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000280)=0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYBLOB="85c41531df6e2f6e98bcf8fe2bce856f756c9410021918ca0ad68550bf5c3a4441cc19f351b46ff77838ccc012842394c223e29f9c4500f5605ee83df3944fb15c7de33097d25a2cdfb60490e098e35d7ae34548fb9fe52ab346f4af7921b29d44b6c5a541e52459d4fcdacc9b70c6179ee274a4f40b64cdd415e8d942a53b2552d87dabdff1d15471213f26d3e3b076eec520e5629257504dd35063afee98b6671f448272d7e907ea7afb125e4213c14ad46384deecbf70e70d885ef3505038f3c5a8b024612b8ebe07f2180bb4bcdd9de44e75be4ba65c0d806521e183d7e558c01ed5996c6c1f109a48d7af9139dcbf10eac7bc31ed3cad4f26323b5d2cd05e253ef5acea5fed626ad77ac70d10db4908bbe5620c5a2582d8e66f2ac4b4dd52118bebd5bee3673264840df0cbfa10e974ddfe44251ab89552d3e3b58e2fc3f5230d8e2b30bfaad1a5e67ee39801e3ff7082c5dbe27682ccda9d694e45a96dbe8d76b4ab83c29118cb3c5ff03418cb53f417c7941a0b3001c2c6a848b13191c33bd73244a75894d52b5e244d4b35bbf884c6366f137ca5bdd7e602052ef6303e5c05ec85def7188d8096c2c8160a8a44dcb145eddb2b9664a555e61c0b18d1aa5a1984874c196889b9b4659a417b38c86f5ba12bd16624166e9677dfc675d62cb410765369a7036f6bf6d938a9b6fb37c2298cca3e15f7828652af03846c007549c09b9a06421925725d376b30651e51ecd16c01b1f93f50eb6099c4a60a41466e94d8e0ea9709c5de5a324c994a10b7b95b2e58d3c7748626099505e76ec59c5b7e695c85ae4624982485a8fbc1e320134ec581cdb44483c4e48d6141e8ad76592a93d300af0a343ba8728923c21e564c8fe13d755e1337fed65fcc1247a491e846b84fe6c76d0a058e9d0773a20abff7764acf5230b2190ad1e1aa180fecbf5b968f2b58234454c913eed2f4b1a5c35a37a0cf", @ANYBLOB="200001"], 0x38}}, 0x4004801) r9 = socket$netlink(0x10, 0x3, 0x4) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04083920"], 0x7) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b000900d3fd27dfdc224b7a020000ff09000000ffffffffffffffffffffffe7e6000000000000000002000000000000", 0x58}], 0x1) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000100)) 1m15.846512961s ago: executing program 0 (id=83): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r1], 0x24}], 0x1}, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m15.84617335s ago: executing program 0 (id=84): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_cache\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) open_tree(r1, &(0x7f0000000140)='./file0\x00', 0x8000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080)={0xd}, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) signalfd(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x10000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) creat(0x0, 0x8) truncate(0x0, 0x1) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYRES16=r0]) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="440100002d00010000000000fedbdf253401f2809a53883789afe41275701f4fdd3b45826a819751db9a132b850b78157d5e43e00556878659f8d1c7016ffdd42b0c048d1dc20a0de090b25bd7ded97414000100fc01000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1ea45321cd6989c327951074b44f860c87d75c4673e6255269473c3b3d984b388f64c32a57d228494cf89b203a7392914c8853ce4"], 0x144}], 0x1, 0x0, 0x0, 0x1}, 0x0) splice(r3, &(0x7f00000000c0)=0x2000020, r0, &(0x7f0000000100)=0x8000000000000001, 0x204, 0x2) 1m15.662194432s ago: executing program 0 (id=85): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10}}], 0x10}, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x1, 0x18f840) 1m15.202259039s ago: executing program 1 (id=95): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000000240)) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) (async) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='befs\x00', 0x204000, 0x0) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x77359400}, &(0x7f00000001c0)) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) (async) r5 = socket(0x2, 0x80805, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @dev}, 0x80, 0x0}}], 0x1, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x76, &(0x7f0000000140)=@assoc_value={r7}, 0x8) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1m15.020990475s ago: executing program 1 (id=97): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x15e16}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010100}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="45001000", @ANYRES16=r6, @ANYBLOB="59cf000000000000000008000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1m14.140372331s ago: executing program 1 (id=101): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000002c0), 0x101180, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fstatfs(r1, &(0x7f0000000040)=""/45) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x301) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000008000002000000400004803c0001800b0001006e756d67656e00002c000280080004400000000708000340000000000800014000000001080001400000000c08000240000000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000080)={0x8, 0x0}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002a40), 0x0, 0x0) lseek(r5, 0xfffffffffffffffa, 0x1) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000140), 0x4) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000680)={0x8, 0x120, 0xfa00, {0x1, {0x7, 0x3, "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", 0xad, 0x3, 0x0, 0x4, 0x8, 0x8, 0x3, 0x1}}}, 0x128) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000300)) 1m14.138639599s ago: executing program 1 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x14, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000149934394d43aac276f43cec2e988763d134546e374846100a3254a05fa52144a487ecf6d63b391c602af32e1282317613589aa7f176c2a47be765370aa230d24498f73c01c8f39c0230869871774e04bb45659f28efa33753c18b2437e1c53cf8b86a082f190e3d08bc23810545a7dcbd979d56b500ae2e31675d36ec934dc7dc7a230ad20e6dd5382ee00a402e5d462a326511acef902a3d65d469c5ec63ad", @ANYRES32=0x0, @ANYBLOB="00040000000000001100240090c8c5d5b91d039a87acad4d6600000008000a00", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x5, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80700a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = getpid() r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000450300"]) syz_pidfd_open(r4, 0x0) 1m13.093917224s ago: executing program 1 (id=109): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'geneve0\x00'}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x240040, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x3, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)) r1 = dup(r0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x7f}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={r3, 0xc8, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x2, @remote, 0x9}, @in6={0xa, 0x4e24, 0x9, @mcast2, 0xffffffff}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x7ff, @remote, 0x7}, @in6={0xa, 0x4e24, 0x9, @mcast2, 0x4}, @in6={0xa, 0x4e21, 0xa2e, @local, 0x1}, @in6={0xa, 0x4e21, 0x6, @loopback, 0x2}, @in={0x2, 0x0, @remote}]}, &(0x7f0000000300)=0x10) r4 = accept4$tipc(r1, &(0x7f0000000340)=@id, &(0x7f0000000380)=0x10, 0x0) sendmsg$tipc(r4, &(0x7f0000000580)={&(0x7f00000003c0)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000400)="71090bfbf29dcc0ec60003e9930a2d854c304e80eca8fa32ebfa2e857d8b9440d774f7d37af563f8364bf007e342db04fd475e8cd758504e4fb8a665df1f53b7c929992e56ba6e475474a900d9c3fd96b1618dbc297f5fac69083e42f30a29b0fd2f85850d4470ed65893171839c6ae2d497ec559db85a32fdaad443c15d713c5959e8033fb8e7fb6651785e5d312cbea619174c21da06cf569cf71890da9b12d2787d5fc3b6e092d2", 0xa9}], 0x1, &(0x7f0000000500)="f2df1541086fb9cbb14a84b21a68315cf3656aa0ede82abc510442e072db1f616035c9393c4301a35f24a5f1e5ca213545b8ceecc4a4d35ae2bbedee47bcc1838444944e77160f163cd1ed2490ebbe36b8a4552aeaff656c655e", 0x5a, 0x4814}, 0x20000000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000780)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000a40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f00000007c0)={0x21c, 0x2b, 0x400, 0x70bd2d, 0x25dfdbfb, {0x4}, [@nested={0x1c7, 0x111, 0x0, 0x1, [@typed={0xc9, 0xb8, 0x0, 0x0, @binary="acf4a2476ab250651ab54cf3c530af8a23a65c4c370a2110f432fadcde006649e55f927a79d4ab83913f0e2a4571bb2b0995047cf85c530299015b80bd6a6d042843e4824ceb502c7ce754e443ff34a5af8e8f0f66864322eaec8c7ff9ccf243ec2c8ec8b796558fed19b08fa0251196df729fefb63d5f7cbc398134a60ecd74ec24aaa936dd288a634ade18da0156975d07f2bc9ee803239aa3d7127260af6839423d706e16fa1dd367f637211c87ea9c0340b59f530f45f4a634c77f874017c457e17fb0"}, @nested={0x4, 0x98}, @nested={0x4, 0x12e}, @nested={0x4, 0x31}, @generic="8cc713d52ff2654459e0f2759eeb07e9e5dab7d885734a419318660a5d969e3d71f798efd0cde73ee5a5f12a44c74025128259f14c531a4dfd14f2795968b658b798351739e059f4ff3b5b69a7599b2b29725e0aad7dd21f51994b62e93ce7e9cdb1924b23c440f579dc7a17d96a5043a4931518c181ea23ae04bf8379d497844c76ead6630c79f4c7cc46729892e0ddf99145c3174e146e8b3a62529981c7e9d34343c0a1c1c6b8c39d36c25b779eb737292f7ad36ff8dae339dcac47cb3e11faedeb5da6a2cb095f887454df62de6e8b2d7c751bd500b3450f2ee277c823e664bcb63caca1e55f9c763a"]}, @nested={0x2f, 0x142, 0x0, 0x1, [@nested={0x4, 0x1a}, @typed={0x8, 0x11d, 0x0, 0x0, @u32=0x3}, @generic="87c9e7ee34de9f19ab8688", @typed={0x8, 0xd6, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x8d, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x56}]}, @typed={0xe, 0x138, 0x0, 0x0, @str='/dev/zero\x00'}]}, 0x21c}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) r7 = semget$private(0x0, 0x4, 0x82) semctl$GETVAL(r7, 0x1, 0xc, &(0x7f0000000a80)=""/197) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000b80)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000bc0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000d80)={&(0x7f0000000c80)=[0x0, 0x0], &(0x7f0000000cc0)=[0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x8, 0x6}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r9, 0xfbfbfbfb}) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e40), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10088020}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r10, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80d0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000f40)=0x473, 0x4) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000f80)={{0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}, {0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}, 0xe}, 0x1, {[0x2, 0x4, 0x8000, 0xd, 0x4dc5, 0x426, 0x64, 0x6]}}, 0x5c) connect$pppoe(r0, &(0x7f0000001000)={0x18, 0x0, {0x4, @empty, 'virt_wifi0\x00'}}, 0x1e) quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000702, r6, &(0x7f0000001040)) read$FUSE(r1, &(0x7f00000010c0)={0x2020}, 0x2020) sendmsg$tipc(r1, &(0x7f00000046c0)={&(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x1}}, 0x10, &(0x7f00000045c0)=[{&(0x7f0000003140)="4df20d567609e6f78f613ba022052cee753cbb5279712c5c2824f3ce1e58b403fdd2a4847fd27d19219ff293b9f91d9fd59e31059cc6df2d4863c493411e20b5b86b1f03b7014d4e18788ab6c502aea3dbe4e1cafd9c567d585c56cf4c4db6e22ed21c7f8003dc5595332c7639", 0x6d}, {&(0x7f00000031c0)="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", 0x1000}, {&(0x7f00000041c0)="8107a00ce89cde6535c789cac6d406c51998b98da80edc0e6e725f4250e34e9a88167a672502308cef9796a240a505d6e6d24940697fcd7b309d1f6afa2dca3fb0bed4ee01814dc0617efe54a500fa9c2dbd75e45ddd0eb8333732519bfeb18426931611cf1a2e1f929db6f97b84ac53ff9053117ae307f5937e4a1f3602a88802250b15bc0bb192a3422f43525b14c3f2253c256f545b28e593ad0454bb0b5f9ee8497b505ad9e2080be76ebfbda15166151777b091bf8af78dd9", 0xbb}, {&(0x7f0000004280)="8bd897765a778fca01296643d3bb53cdaccbe209dbf3d906fd4c0849788f94f45a117db98a1a929063511fcefcd3fff90709a1b85b91beae7b84def3301144c524a5c880ee9e32b1778640b3ac9c0945e136063549f7a5c6d0e4931c67600d67771dcc041e11fe3c5da7737cd1c0645828caa1d726366f81dc4980731c3ace113948d54d52e6eb8e06d0e265c6cdf173a5200542c1825226626b39f9fa5ee366a673262819dbff0e088b1bb68fda053118adb81cf2d8831e676651f615bb745b", 0xc0}, {&(0x7f0000004340)="89941d1f48836f321e4aa3b95a9c5c3f672d2620a49372c4b67c294f7497e8a8a289a410cf85758a0c5064dec6e0b320f01a1ac0f63033372cf9fd2ee0da01e4ec3d4d9682ca015e2bea9544be0149f5d27a86bc73ca6fecdc64acf8fd35ec92391acd93cb75e0854ca19103c394d78480d013ee9f017f62969971ce6026ab139737bde26a", 0x85}, {&(0x7f0000004400)="7e0eb1dd93c05f9f8ddca0d74726d4cc0ad77f7c0fe811f7108073b6124e42c9cfb2bbd8d591d5c16c83b80098be85c75350127f604b71d4e71889bec5b395d138a6f30d65b5f57e29af721c69fbb165a83b185bd82e2727a64faa1f318b9832c2c3c032e92cc00cdfb6c1e9dc1d76fd7bf8dfbd53cca1c3338318dbb4aa56fee79956617932c07acfcafe9cedc4b30c518945d183994c1a14562fa76d65f5f1c20a222a4910c4a51e87e7821e88b8acbc5eec63904a07473702ea35ee15c2d0ed267582db33da9138feb7319e775e80a84a2198ed", 0xd5}, {&(0x7f0000004500)="01e837926d066db21c20b6070dc02711ce5f8921eff35b743250f64c0e2232bfcdfb216ec781098b4904582e70b28dc12b0fe84ea1f4acbbaea6c471686c57d5f9046c6ad8718c18a0c62a4c29dbcb1ad3045a7ab35e568b415f47af32e60e8e4c87154963e9dd54c426500b876a", 0x6e}, {&(0x7f0000004580)="79d7373a4a92880249ebb8320a7d766cc7e22394ef3b651244455d3d0f345c719df471ef151fb59a23d028a906f9c52a", 0x30}], 0x8, &(0x7f0000004640)="8390f3cf3b5d38e51d6d78ea6af399b7fe2ac91b2267679bc1080ecdb6b58da3bea718d31f7bb876a49f8fdc96a9550ad99eeeec20ee89d1bd36edbef986f58aa9a36f3c9763", 0x46}, 0x4801) chdir(&(0x7f0000004700)='./file0\x00') ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000004780)={0x1, 0x17, 0x8, 0x1000, 0x36, 0x40000000, &(0x7f0000004740)="844733390971977afe78a66b19a353d7a644eb8273b2612a5080c0e035485e697c4cbf2881156d0435a09725f094e4a22dd3620b4409"}) 1m12.799315727s ago: executing program 1 (id=110): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) socket$qrtr(0x2a, 0x2, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m12.756200411s ago: executing program 32 (id=110): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) socket$qrtr(0x2a, 0x2, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m0.680747537s ago: executing program 33 (id=85): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10}}], 0x10}, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x1, 0x18f840) 38.14060095s ago: executing program 3 (id=68): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='adfs\x00', 0x208000, 0x0) r0 = getuid() setreuid(0xee00, r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000802, r0, &(0x7f0000000200)={0x8, 0x8001, 0xfffffffffffffff9, 0x8000000000000001, 0x9, 0x9, 0x9, 0x76529b22, 0x3}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4000, 0x80) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x8000, &(0x7f0000000140)={[{@usrquota}, {@nr_inodes={'nr_inodes', 0x3d, [0x65, 0x39, 0x65, 0x74, 0x25]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x65, 0x39, 0x32]}}, {@mpol={'mpol', 0x3d, {'local', '', @val={0x3a, [0x32]}}}}, {@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x30, 0x31, 0x2d]}}}}], [{@obj_type}, {@uid_eq={'uid', 0x3d, r0}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f00000002c0)) 31.498481962s ago: executing program 3 (id=68): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='adfs\x00', 0x208000, 0x0) r0 = getuid() setreuid(0xee00, r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000802, r0, &(0x7f0000000200)={0x8, 0x8001, 0xfffffffffffffff9, 0x8000000000000001, 0x9, 0x9, 0x9, 0x76529b22, 0x3}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4000, 0x80) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x8000, &(0x7f0000000140)={[{@usrquota}, {@nr_inodes={'nr_inodes', 0x3d, [0x65, 0x39, 0x65, 0x74, 0x25]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x65, 0x39, 0x32]}}, {@mpol={'mpol', 0x3d, {'local', '', @val={0x3a, [0x32]}}}}, {@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x30, 0x31, 0x2d]}}}}], [{@obj_type}, {@uid_eq={'uid', 0x3d, r0}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f00000002c0)) 24.736937973s ago: executing program 3 (id=68): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='adfs\x00', 0x208000, 0x0) r0 = getuid() setreuid(0xee00, r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000802, r0, &(0x7f0000000200)={0x8, 0x8001, 0xfffffffffffffff9, 0x8000000000000001, 0x9, 0x9, 0x9, 0x76529b22, 0x3}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4000, 0x80) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x8000, &(0x7f0000000140)={[{@usrquota}, {@nr_inodes={'nr_inodes', 0x3d, [0x65, 0x39, 0x65, 0x74, 0x25]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x65, 0x39, 0x32]}}, {@mpol={'mpol', 0x3d, {'local', '', @val={0x3a, [0x32]}}}}, {@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x30, 0x31, 0x2d]}}}}], [{@obj_type}, {@uid_eq={'uid', 0x3d, r0}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f00000002c0)) 17.836500219s ago: executing program 3 (id=68): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='adfs\x00', 0x208000, 0x0) r0 = getuid() setreuid(0xee00, r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000802, r0, &(0x7f0000000200)={0x8, 0x8001, 0xfffffffffffffff9, 0x8000000000000001, 0x9, 0x9, 0x9, 0x76529b22, 0x3}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4000, 0x80) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x8000, &(0x7f0000000140)={[{@usrquota}, {@nr_inodes={'nr_inodes', 0x3d, [0x65, 0x39, 0x65, 0x74, 0x25]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x65, 0x39, 0x32]}}, {@mpol={'mpol', 0x3d, {'local', '', @val={0x3a, [0x32]}}}}, {@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x30, 0x31, 0x2d]}}}}], [{@obj_type}, {@uid_eq={'uid', 0x3d, r0}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f00000002c0)) 11.298224847s ago: executing program 3 (id=68): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='adfs\x00', 0x208000, 0x0) r0 = getuid() setreuid(0xee00, r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000802, r0, &(0x7f0000000200)={0x8, 0x8001, 0xfffffffffffffff9, 0x8000000000000001, 0x9, 0x9, 0x9, 0x76529b22, 0x3}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4000, 0x80) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x8000, &(0x7f0000000140)={[{@usrquota}, {@nr_inodes={'nr_inodes', 0x3d, [0x65, 0x39, 0x65, 0x74, 0x25]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x65, 0x39, 0x32]}}, {@mpol={'mpol', 0x3d, {'local', '', @val={0x3a, [0x32]}}}}, {@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x30, 0x31, 0x2d]}}}}], [{@obj_type}, {@uid_eq={'uid', 0x3d, r0}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f00000002c0)) 4.676862332s ago: executing program 3 (id=68): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='adfs\x00', 0x208000, 0x0) r0 = getuid() setreuid(0xee00, r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000802, r0, &(0x7f0000000200)={0x8, 0x8001, 0xfffffffffffffff9, 0x8000000000000001, 0x9, 0x9, 0x9, 0x76529b22, 0x3}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4000, 0x80) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x8000, &(0x7f0000000140)={[{@usrquota}, {@nr_inodes={'nr_inodes', 0x3d, [0x65, 0x39, 0x65, 0x74, 0x25]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x65, 0x39, 0x32]}}, {@mpol={'mpol', 0x3d, {'local', '', @val={0x3a, [0x32]}}}}, {@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x30, 0x31, 0x2d]}}}}], [{@obj_type}, {@uid_eq={'uid', 0x3d, r0}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f00000002c0)) 2.580047623s ago: executing program 4 (id=787): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) open(&(0x7f0000000040)='./bus\x00', 0x10957e, 0x95) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000000)='ocfs2\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 2.28381356s ago: executing program 4 (id=789): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r2) socket(0x1e, 0x1, 0x0) (async) r4 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xc5, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xc5, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)={0x540, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r1}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r6}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r6}, {0x218, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xdd}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x583}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}, {{0x8, 0x1, r6}, {0xcc, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x81, 0x78, 0xb2, 0xfff}, {0xa, 0x0, 0x7, 0x1}, {0x6, 0x55, 0xa, 0x90000000}, {0xff, 0x1}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9c7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x4008021}, 0x44040) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001c00070c000000000000000002000000", @ANYRES32=r1, @ANYBLOB="400000000a0001"], 0x40}}, 0x0) 2.061501554s ago: executing program 4 (id=790): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x4, r1, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) (async) bind$packet(r0, &(0x7f0000000080)={0x11, 0x4, r1, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x74, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0x2, 0x8}, {0x10}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xc26f}, {0x8}, {0x8, 0xb, 0xec9e}, {0x8, 0xb, 0x7}, {0x8}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8000}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.878644775s ago: executing program 4 (id=792): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) (async) msgrcv(0x0, 0x0, 0x8, 0x0, 0x4800) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e50107000000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010080000a8100000000000000000000000000bb86"], 0x38}, 0x1, 0x0, 0x0, 0x48c0}, 0x40004c0) (async) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000300)='qnx6\x00', 0x100088f, 0x0) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe8, r4, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x3, 0x2}, {0x81, 0x7}, {0x1, 0x4}, {0xc, 0x5}, {0x4, 0x7}, {0x3, 0x6}, {0x6, 0x6}], "10d1077b20731162"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x8, 0x7}, {0xa, 0x3}, {0xfb, 0x3}, {0x3}, {0x9}, {0xcb, 0x7}], "c50fc14bb9b70767"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{}, {0x0, 0x4}, {0x26, 0x6}, {0x0, 0x3}, {0x3, 0x1}, {0x1, 0x2}, {0x5}], "21bb442bcf4b5a2a"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x3}, {0x7, 0x5}, {0x8, 0x6}, {0x0, 0x3}], "2c79988554606671"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x4, 0x1}, {0x8, 0x2}, {0x10, 0x6}, {0x3}, {0x3, 0x5}, {0x94, 0x1}, {0x4}, {0x8, 0x5}, {0x6, 0x5}], "acb89e352200b455"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x3, 0x1}, {0x1, 0x5}, {0x5, 0x6}, {0x2, 0x1}, {0xda, 0x5}, {0x80, 0x5}, {0x80, 0x2}, {0x5, 0x1}, {0x6, 0x7}, {0x5, 0x6}, {0x9, 0x4}, {0x6, 0x4}, {0x5, 0x1}], "dc75b8b3ab9966d5"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "c1a680522541d4de"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "8085e5f2846e6027"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x1, 0x4}, {0xc, 0x3}], "efdc6470120b2f3a"}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) (async) r7 = socket$inet6(0xa, 0x6, 0x0) setsockopt(r7, 0x10d, 0x1, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl(r1, 0xb6073f4, &(0x7f0000000240)="9302a66712cfbed51b0c9b067fe0") 1.749621805s ago: executing program 4 (id=793): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000980)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$P9_RREAD(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x100b) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)="790c834075258177a5b17f43f5efa8245526e5c7130f45d3d7e479c1129932880bc00275c48167a0c36393eef6175ade0d2dfb4424aed26638d4a6efdd96827cbde582", 0x43) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xb0, 0x3ff, 0x34325241, 0x0, [], [0x2b8, 0x200000], [0x0, 0x9, 0x0, 0x3]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0x1) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x5, 0x101}, &(0x7f00000002c0)=0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0x7f, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) 1.545236045s ago: executing program 2 (id=794): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xf, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="61124c000000000061135000000e0020bf2000000000000007001000080000003d0301e5ffffff0095000000000000006926000000000013bf67ffff000000001507391882089e242ccca69efee2aec952bd00c923e2c31770816b2e6a82532d8c3bfded724ef0c669798c151aa5d5f7f6c79103be3c42b340d7aabbbef4eb6c6e34e58b6cec5b7a315e2f850340b9112592ae1bc11c5ab4ff144a86b93e0e360f4c4b9f4ae5d25dc8dc6ec022f76a15e1e45c210b4c588c5744cffb4f6e519d5acc28d17d28f32ad762954a5c07be6dc7a00c7f2ba4f2f3815af12812edc400000915ed156b2d6f830ad9514c9bf8c32d2c1ccd6a0dcd60b930e0afd4aa3056254db1f2a903f7aa14127bd7419b022cd7990105fc2a30b72f227d4d437e3b000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) (rerun: 64) r1 = fanotify_init(0x81, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28011, r2, 0x0) (async) read$FUSE(r2, &(0x7f0000000b40)={0x2020}, 0x2020) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x200, @void, @value}, 0x94) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) (async, rerun: 32) r5 = socket$inet6(0xa, 0x80002, 0x88) (rerun: 32) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d"], 0x0) (async, rerun: 64) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40002ff, 0x2, 0x0) (async, rerun: 64) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4001) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$inet6(0xa, 0x80002, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r9, &(0x7f0000000100)={0x0, 0xec0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c20400000000067bf3da1dc87a8454aff5196b030890eacc004257851cde8ef159", @ANYRES16=r10, @ANYBLOB="01032abd7000fedbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) (async) sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="cc000000", @ANYBLOB="cdd0333b6983e9331174874656b2ac8bbfbe29d3c5a5e6960ee9237be9a1d2277972031277b150c7d2009d2e12a2f1d86b0b61e78be29f16c319affc7847267eaf6020fe4947a3b5c35e55bcf769079e7868adbf160c4875ab14f2b2f86dc40bda3d271814220ea5d3e5822347fedee1c773c2df7ae1e8acb40632f15ba9cf51bf6f15726200fad79da63be3441ecad62b7b25d5e6461fd375edcd60a099b5c0e2da0e9c55", @ANYBLOB="040000007000fedbdf25060080acdc278784cd0803006401010200000000000000000000000008000800040000000c000700000000001c0000001400030064010101000000000000000000000000060002003a00000008000800a1000000090006006c626c630000000006000200670000005400028014000100ff01000000000000000000000000000106000f000800000006000f00289500000800050084040000080004000500000008000900ea0a000014000100fe880000000000000000000000000101"], 0xcc}, 0x1, 0x0, 0x0, 0x8c1}, 0x20008000) (async) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) 1.451018958s ago: executing program 2 (id=795): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='update ecryptfs\x00'], 0x1a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000180001000000329b3af99530101800000000fe00000000000c000900646d0103", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x78, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f00000002c0)='cache=none') 1.448122151s ago: executing program 2 (id=798): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc2282, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @remote}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, 0xc, 0x0, 0x0, 0x0, 0xd2c4, &(0x7f0000000040)='veth0_to_team\x00', 0x8, 0xc, 0x7}) close(r1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000600)={0x393000, 0x392000, 0x8}) 1.200793086s ago: executing program 2 (id=799): r0 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) ftruncate(r0, 0xb) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x1, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000002c0)={0x1d, r3}, 0x10) (async) bind$can_raw(r2, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0xe00}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @generic={0x7, 0x5, 0x9, 0xab, 0x24}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @alu={0x4, 0x1, 0x2, 0xb, 0x3, 0xffffffffffffffc0, 0xffffffffffffffff}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x28, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xb, 0x8, 0x10000}, 0x10, 0xffffffffffffffff, r1, 0xa, &(0x7f0000000180)=[r1, 0xffffffffffffffff, r1, r1, r1, r1, r1, r1, r1, r1], &(0x7f0000000300)=[{0x5, 0x3, 0x4, 0x4}, {0x5, 0x1, 0x7, 0x1}, {0x4, 0x3, 0xb, 0x4}, {0x0, 0x4, 0xb, 0xb}, {0x1, 0x3, 0x3, 0x6}, {0x1, 0x5, 0x6}, {0x1, 0x2, 0x1, 0x2}, {0x3, 0x1, 0xe, 0x3}, {0x4, 0x4, 0x0, 0xa}, {0x5, 0x5, 0x6, 0x8}], 0x10, 0x9, @void, @value}, 0x94) (async) fchdir(r0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) 790.876832ms ago: executing program 4 (id=800): r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x100) (async) prctl$PR_SET_MM_MAP(0x17, 0x3, 0x0, 0xfffffffffffffdd7) epoll_create(0x4) (async) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000011116e47bb772e0fa0000000011b7ba824bb9aab63f46bf7b9066e8dd07fa"], 0x0) (async, rerun: 64) r2 = semget$private(0x0, 0x4000000009, 0x228) (rerun: 64) semop(r2, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)=[0x5fc, 0x0, 0xfffe, 0x8, 0x2, 0x1, 0x45, 0x5]) semop(r2, &(0x7f0000000000)=[{0x0, 0xfffb}, {0x1, 0x0, 0x800}], 0x2) (async) semtimedop(r2, &(0x7f0000000200)=[{0x0, 0x7, 0x1000}], 0x1, 0x0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000080)=[0x2c7, 0x2, 0x7, 0xd3, 0x79, 0x2, 0x7, 0x1ff]) 300.316371ms ago: executing program 2 (id=801): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) gettid() sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000005400e501040000000400000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="21000300fb"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000030000000000001"], 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f0000000240)={'vlan1\x00', 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x24, r6, 0x1, 0x70bd27, 0x25dfdc00, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}]}, 0x24}}, 0x40080) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x2) 297.898341ms ago: executing program 2 (id=803): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x6, 0x2ffffffff}, 0xc) r1 = socket$caif_stream(0x25, 0x1, 0x4) r2 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000200)={@random="e90ca200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x0, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x18, 0x0, @wg=@data={0x4, 0xeab, 0x3}}}}}}, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000340)=0x4) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="600c1b0000001b0315da5bacb90e0000d772bca584ef95bfca6de15850"], &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x7}}, &(0x7f0000000140)={0x0, 0x22, 0x19, {[@main=@item_4={0x3, 0x0, 0x0, "bda50b1f"}, @global=@item_012={0x1, 0x1, 0x5, "b2"}, @main=@item_4={0x3, 0x0, 0xa, "2804bf99"}, @local=@item_012={0x1, 0x2, 0x0, 'C'}, @global=@item_4={0x3, 0x1, 0x3, '>?b~'}, @main=@item_4={0x3, 0x0, 0x9, "5e79f8bd"}, @global=@item_012={0x0, 0x1, 0x8}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0xec5}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x20, 0xf, 0x24, "b9f17c0552ad0cee7831c76859b6fc579c48bc9c38c6c426a2f41fb5950216b3d08ea566"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xa3}, &(0x7f0000000500)=ANY=[@ANYRES8=r0], &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x5}}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='8\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006119a400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delneigh={0x1c, 0x1a, 0x1, 0x9, 0x25dfdb7c, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) mknod(&(0x7f0000000400)='./file0\x00', 0x1, 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x7, 0x7, 0x8, @loopback, @private1, 0x0, 0x7800, 0x6, 0x3db5}}) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)=@updpolicy={0xc4, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {{@in=@remote, @in=@loopback, 0x6e24, 0x0, 0x4e23, 0xd93, 0xa, 0x20, 0x0, 0x5c, r9, r6}, {0x800, 0x8000000000000000, 0x5, 0x5, 0x7fff, 0x5, 0x8, 0x1}, {0xfc4, 0x400, 0xa3, 0x8}, 0x8, 0x0, 0x1, 0x1, 0x1, 0x2}, [@offload={0xc, 0x1c, {r10, 0x1}}]}, 0xc4}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x10, &(0x7f0000000000)={[{@gid={'gid', 0x3d, r7}}], [{@smackfstransmute={'smackfstransmute', 0x3d, ',:%\x82/)\xd8{%[}^+*,'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@euid_gt={'euid>', r6}}]}) 140.596328ms ago: executing program 5 (id=804): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) lsm_get_self_attr(0x65, &(0x7f0000000000)={0x0, 0x0, 0xd6, 0xb6, ""/182}, &(0x7f0000000680)=0xd6, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a0908000000000000000002000000090002"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000d40)=ANY=[@ANYBLOB="2d000000e89b05bc2ad9aa0b3531de03df5286841728d92d39a6ea0522e1819d5de3f5ffa55ed66f125c41c69d104587781af3924f4af12b10ac894e1c5dad03b5a4dee22ffe0e2553c0d322e9eabb2b4659571e1a9c2435d1b20e46cbdd2091c29cb8dd5d06e22ae4096346e1b2f494d8d9f8be6bac77140e4b8488f91536ec262a9b393fa6e8afa597e8e9bc71503807c556b3df9762d7ecb43da26c", @ANYRES16=r5, @ANYBLOB="000225bd7000ffdbdf25680000002c00c700030110050800000309040202070004070204040105060001010700040a01c101414b1e625e8100b52400c7007f060d045006860304020200090252070905540555060103114ac67cac451faf2a00c7000500fb012004ff070901d00600020f01d70200020307db05090508007f07c3987334fce84aa30000"], 0x90}, 0x1, 0x0, 0x0, 0x44080}, 0x80) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0xc01, 0x3, 0x12a0, 0x1100, 0x5002004a, 0x0, 0x1100, 0x0, 0x1208, 0x3c8, 0x3c8, 0x1208, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x4, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x3}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1300) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001c00070c000000000000000002000000", @ANYRES32=r2, @ANYBLOB="400000000a0001"], 0x40}}, 0x0) (async) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)) (async) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000002c0)=[@uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x8}, @code={0x1, 0x54, {"672e450f01c8260f32f3470fc7350001c0feb94a0a00000f32b9ae0100000f3243ddeac4213a5dd2c441f9d62ac744240002000000c744240200000100ff1c240f01c9"}}, @uexit={0x0, 0x18, 0x1}, @code={0x1, 0x66, {"b9400900000f3264410f3acc4a1d0366b871000f00d026660f59144966b82e008ec066b808000f00d026673e440fc71ac461f9e63bc7442400f6ffffffc74424023d770000c7442406000000000f01142466650f35"}}, @uexit={0x0, 0x18, 0x1}, @code={0x1, 0x5b, {"0fc79900300000c744240040000000c744240220440000ff1c24f236400f0017460f2000660f3881b30c0000000fc72d0e000000c402fd210f66420f090f326766410f380abb00800000"}}, @code={0x1, 0x63, {"66420f3882086664f30f1eff66b8c7000f00d02ef30f013b450f001d07000000b9e0080000b809000000ba000000000f300f01cf2e0f303e0f0948b8fd659f111672425d0f23d80f21f835800000f00f23f8"}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x4567}, @uexit={0x0, 0x18, 0x7fffffff}, @code={0x1, 0x6c, {"66baf80cb87ccddc8fef66bafc0c66b8040066ef6467650f01df6567f30f30c744240000900000c744240200800000c7442406000000000f0114240f01d1c4a3f17f02b2d9f8c482f930ded9f5b9800000c00f3235008000000f30"}}, @code={0x1, 0x6e, {"660ffd860060000066baf80cb8b025878bef66bafc0cb802000000ef660f070f20c00fc72ac744240002000000c7442402fb645f40c7442406000000000f0114243665450fc7ba000000002e0f01ba2a7a0000b9670a00000f320f01c2"}}, @uexit={0x0, 0x18, 0x7fffffffffffffff}, @uexit={0x0, 0x18}, @code={0x1, 0x6e, {"660f0666bad00466ed670f0966430fc7702466baf80cb88c8fc187ef66bafc0cedb9800000c00f3235000800000f30c7442400c9000000c744240200000000c7442406000000000f011424c402ed90940c2f770000410f35f2f3260f06"}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x813}, @code={0x1, 0x95, {"460f3266baf80cb814ccba8eef66bafc0cedb9800000c00f3235000400000f3066baf80cb82c33c386ef66bafc0cb80f000000ef400f785a00c74424007c6c208cc744240271e90000c7442406000000000f011c2448b83e000000000000000f23c00f21f83503000b000f23f8c4835d4b72b9570f20d835080000000f22d8660f71e100"}}, @code={0x1, 0x66, {"c402552f9f00780000c4e1f828c20f01d164640f01c5c744240025000000c7442402f817bfd3c7442406000000000f0114240fab6330676767260f01cf26410f01bb6d000000c403790b0cae00400ffe9b04000000"}}, @uexit={0x0, 0x18, 0x3}, @code={0x1, 0x5d, {"f30fbdff0f005b9bf20f01990018000066baf80cb8a01f948fef66bafc0c66b8008066efc4c17e6f40e6460f001966b801000f00d0abc4a27d47d0b9590b0000b825000000ba000000000f30"}}, @uexit={0x0, 0x18, 0x7}, @code={0x1, 0x3f, {"42f1660f3882053e241f700f01c40fc72f0f38090cb6420f229e0f01b603000000c4a11d73d7d2400f01ee0f01c2"}}, @uexit={0x0, 0x18, 0x490}, @code={0x1, 0x75, {"b9800000c00f3235004000000f30c481fbf000430f01c9260f15601b2502000000b9b00a0000b807000080baffffffff0f30360fc7afc41a0000c4816d611767360fc7980d6902b9c74424003534a87cc74424025c1c0000c7442406000000000f011c24"}}, @uexit={0x0, 0x18, 0x80000000}, @code={0x1, 0x59, {"c4e221b86b7fc401516c7e82420f79fd6436f3450f09b9700900000f322ef2470f019ecb000000260f79b50d830000c4e3a55e4fad0036400fd407b805000000b90e0800000f01c1"}}, @code={0x1, 0x70, {"c483d97f880e000000fd66baf80cb880432483ef66bafc0cb800800000ef660fc7b006000000660f01df40711048b88c000000000000000f23c80f21f835040080000f23f8f30fc7b439f48d0000b805000000b9eb3100000f01c1f26f0f30"}}, @code={0x1, 0x49, {"f244abc441fc297ab40f01f826420f01c4450f2047457c5b66bad104ed0f0766326c820e66baf80cb85c73a58aef66bafc0cb8ed000000ef"}}], 0x75e}) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x7, 0x0, 0x0, @void, @value}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r8, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0) (async) ioctl$KVM_NMI(r7, 0xae9a) 81.312192ms ago: executing program 5 (id=805): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x7, @none, 0x73, 0x1}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b0007"], 0xc4}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x40, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) 80.938292ms ago: executing program 5 (id=806): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) 1.639872ms ago: executing program 5 (id=807): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1.298366ms ago: executing program 5 (id=808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) socket$alg(0x26, 0x5, 0x0) r1 = syz_io_uring_setup(0x72d1, &(0x7f0000000500)={0x0, 0xd2a7, 0x10100, 0x0, 0x181}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="0000090000980500000000000800", 0x0, 0x80000002, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 5 (id=809): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x63eb, 0x20000) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) (async, rerun: 64) write$binfmt_elf64(r1, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x17, 0xc, 0x3, 0x1, 0x2, 0x2, 0x6, 0x400, 0x2bc, 0x40, 0x1dd, 0x6, 0x10, 0x38, 0x3, 0x1, 0x7, 0x6}, [{0x5, 0x3, 0x3, 0x40, 0x7, 0x7, 0x7, 0x10000}, {0x5, 0x1ff, 0x800, 0x200, 0xfffffffffffffffc, 0x1, 0x3, 0xd}, {0x4, 0xffff, 0xfffffffffffff001, 0x3, 0x200, 0x3, 0x1, 0x80}], "2dd11e4c50d5c4a5cfdedd007e98b705cdd16d841a7809f1f873357a5a0f939afce965fb296557ccc349c08d612c803b9feccb", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x71b) (async, rerun: 64) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0xf, &(0x7f0000ffd000/0x1000)=nil) (async) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000007c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@func={0xb, 0x0, 0x0, 0xc, 0x3}, @restrict={0x10}, @var={0x1, 0x0, 0x0, 0xe, 0x3, 0x1}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x6}, @var={0x2, 0x0, 0x0, 0xe, 0x3, 0x2}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0]}}, &(0x7f0000000880)=""/33, 0x6f, 0x21, 0x1, 0x3, 0x0, @void, @value}, 0x28) (async, rerun: 32) r2 = creat(&(0x7f0000000900)='./file0\x00', 0x10) (rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x160, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1c0000, 0x12}}}}, [@NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x3, 0x8}, {0x7, 0x5}, {0x1, 0x2}, {0x0, 0x5}, {0x6, 0x8}, {0x4, 0x1}, {0x6}, {0x5, 0x1}, {0x6, 0x5}, {0x7, 0x9}, {0x7}, {0x2, 0x6}, {0x0, 0x8}, {0x1, 0x5}, {0x3, 0x4}, {0x6, 0x8}, {0x0, 0x4}, {0x4, 0x8}, {0x7, 0x6}, {0x3, 0x1}, {0x0, 0x9}, {0x7, 0x6}, {0x3, 0x4}, {0x3}, {}, {0x5, 0x1}, {0x0, 0xa}, {}, {0x0, 0x2}, {0x7, 0x8}, {0x7, 0x8}, {0x0, 0x4}, {0x2, 0x2}, {0x4, 0x3}, {0x6, 0x1}, {0x4, 0x5}, {0x5}, {0x0, 0x7}, {0x4, 0x9}, {0x6, 0xa}, {0x2, 0x6}, {0x2}, {0x3, 0x7}, {0x3, 0x4}, {0x0, 0x3}, {0x6}, {0x0, 0x9}, {0x2, 0x6}, {0x3, 0x8}, {0x6, 0x18}, {0x1}, {0x7, 0x8}, {0x1, 0x4}, {0x3, 0x6}, {0x2}, {0x2, 0x1}, {0x5, 0x2}, {0x0, 0x2}, {0x3}, {0x4, 0x1}, {0x7, 0x4}, {0x4, 0x8}, {0x7, 0x5}, {0x0, 0x6}, {0x6, 0xa}, {0x0, 0x2}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfe00, 0xb7e, 0x72, 0x4, 0x9, 0x6, 0x800]}}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x8, 0x6, 0x0, 0x6, 0x4, 0x401]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0xa}, {0x5, 0x1}, {0x3, 0x4}, {0x1, 0x8}, {0x3, 0x8}, {0x0, 0x6}, {0x2, 0x4}, {0x5, 0x7}, {0x3, 0x8}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x5, 0x5, 0x46, 0x0, 0x821]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x8}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xa}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x76}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xc729}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffea}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x9}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x21}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x6}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x40000}, 0x2000000) (async) syz_emit_ethernet(0x26, &(0x7f0000000b80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@val={0x88a8, 0x5, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@can={0xc, {{0x2, 0x1, 0x0, 0x1}, 0x7, 0x4, 0x0, 0x0, "389cda30ef01566e"}}}}, &(0x7f0000000bc0)={0x1, 0x1, [0x122, 0xfbc, 0x6c4, 0xdbb]}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x91) (async) pwritev(r1, &(0x7f0000000f00)=[{&(0x7f0000000d40)="b8eaca2bfdcec21d96b6aabbabf22752f16723c5b486c1426e53e1a9f5aac760e8b9", 0x22}, {&(0x7f0000000d80)="90b24f2a41037d1ef90839a8bd3936b797294bfc2971d5fb3dec0747276deaeba78d50c94f994215eb5096598048d3addb4b8550aa32e9b62f7f7420df1f68ae54362bdc2e0f96cd5e96d3c121a30d2956201fce60d1daac5bbda1ad1d5d314490cc22415603b70fd2910ab50c66f569a054993361f0d4facd2e3d26c356374c87155aff12cd6779556bbe1b32061000ae1227358607887f8c8e0f1a996231a35523debf206c8c1c38cfe487a3d1ef771867f2a25d3ae8bb004e381986df69bf", 0xc0}, {&(0x7f0000000e40)="55b0ae086b999e8a5ea225a7d759ef39af7503095dae0140aefce6ce54b63323af66c52f2d72acf933f4df0256409b0b24397b2a9e70e2998c52a39064194a09ef8c135f866a9ac8ff7b01be6d8d9162e40acbce644b62141623b7962ce1edca23670cb7da040f5ce7b0c694", 0x6c}, {&(0x7f0000000ec0)="4dfbb2203c8c206feebec905", 0xc}], 0x4, 0x8, 0xa) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000010c0)={'syztnl0\x00', &(0x7f0000000f80)={'gre0\x00', 0x0, 0x8, 0x20, 0x0, 0x8000, {{0x3f, 0x4, 0x1, 0x1d, 0xfc, 0x68, 0x0, 0xe, 0x2f, 0x0, @multicast1, @multicast2, {[@cipso={0x86, 0x2c, 0x3, [{0x6, 0x2}, {0x1, 0x7, "fa34414be8"}, {0x7, 0x9, "aab94f87c31f72"}, {0x1, 0xf, "818f86b8c3a680dc44ba7fc376"}, {0x5, 0x5, "198dfb"}]}, @timestamp_prespec={0x44, 0x34, 0xf5, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@rand_addr=0x64010102, 0x3b9}, {@private=0xa010102}, {@rand_addr=0x64010102, 0xfffffff7}, {@empty}, {@empty, 0xa8}]}, @cipso={0x86, 0x12, 0x3, [{0x5, 0xc, "5780a4a42f69cda9fedd"}]}, @timestamp_addr={0x44, 0x14, 0xe, 0x1, 0x1, [{@empty, 0xa3b2}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x8}]}, @ssrr={0x89, 0x1b, 0x11, [@multicast1, @multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast2]}, @rr={0x7, 0x17, 0x9d, [@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x3e}, @broadcast, @remote]}, @noop, @rr={0x7, 0x2b, 0x10, [@dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, @loopback, @rand_addr=0x64010100, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2, @empty]}, @generic={0x83, 0x3, "d1"}]}}}}}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001100)={@initdev, @remote, 0x0}, &(0x7f0000001140)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r2, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcf, &(0x7f0000001240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0x68, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001640)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001600)={&(0x7f00000014c0)={0x114, 0x0, 0xf0b, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff4ae3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x22}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000001680)={{0xb, 0xfc}, 'port1\x00', 0x81, 0xc30, 0xf, 0x7fff, 0x1b9fcade, 0xe53f, 0x0, 0x0, 0x6, 0xb}) (async) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001740), 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001780), 0x2, 0x0) recvfrom$x25(r7, &(0x7f00000017c0)=""/249, 0xf9, 0x40, 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000018c0)=@reiserfs_6={0x18, 0x6, {0x4, 0x8, 0x8, 0x796ed06e, 0xfffffff4}}, 0x40401) (async, rerun: 32) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001940), r2) (rerun: 32) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r8, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}}, 0x40) r9 = syz_open_dev$dmmidi(&(0x7f0000001a40), 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000001a80)={{0x1, 0x1, 0x18, r9, {0x9}}, './file0\x00'}) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000001ac0)={0x7, "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"}) timer_create(0x3, &(0x7f0000001c00)={0x0, 0x39}, &(0x7f0000001c40)=0x0) timer_gettime(r10, &(0x7f0000001c80)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r7, 0x80045700, &(0x7f0000001cc0)) kernel console output (not intermixed with test programs): 79.442886][ T7203] vlan2: entered allmulticast mode [ 79.444620][ T7203] bond0: entered allmulticast mode [ 79.446251][ T7203] bond_slave_0: entered allmulticast mode [ 79.448038][ T7203] bond_slave_1: entered allmulticast mode [ 79.456623][ T7200] chnl_net:caif_netlink_parms(): no params data found [ 79.555551][ T7211] netlink: 64 bytes leftover after parsing attributes in process `syz.2.294'. [ 79.580143][ T7200] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.583099][ T7200] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.585565][ T7200] bridge_slave_0: entered allmulticast mode [ 79.588364][ T7200] bridge_slave_0: entered promiscuous mode [ 79.594227][ T7200] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.596442][ T7200] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.598898][ T7200] bridge_slave_1: entered allmulticast mode [ 79.602271][ T7200] bridge_slave_1: entered promiscuous mode [ 79.635960][ T7200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.641585][ T7200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.684209][ T7200] team0: Port device team_slave_0 added [ 79.689302][ T7200] team0: Port device team_slave_1 added [ 79.740265][ T7200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.744934][ T7200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.753001][ T7200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.754065][ T7226] 9pnet: Limiting 'msize' to 512000 as this is the maximum supported by transport virtio [ 79.761332][ T7228] sp0: Synchronizing with TNC [ 79.761902][ T7200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.765346][ T7200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.774417][ T7200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.781058][ T7230] [U] è [ 79.842138][ T7200] hsr_slave_0: entered promiscuous mode [ 79.844396][ T7200] hsr_slave_1: entered promiscuous mode [ 80.173406][ T7258] xt_hashlimit: size too large, truncated to 1048576 [ 80.215703][ T7246] netlink: 'syz.2.301': attribute type 2 has an invalid length. [ 80.218999][ T7246] netlink: 119 bytes leftover after parsing attributes in process `syz.2.301'. [ 80.236473][ T7258] xt_hashlimit: size too large, truncated to 1048576 [ 80.298400][ T7258] xt_hashlimit: size too large, truncated to 1048576 [ 80.361622][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.369113][ T7258] xt_hashlimit: size too large, truncated to 1048576 [ 80.420106][ T7258] xt_hashlimit: size too large, truncated to 1048576 [ 80.428629][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.481575][ T7258] xt_hashlimit: size too large, truncated to 1048576 [ 80.519349][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.534586][ T7258] xt_hashlimit: size too large, truncated to 1048576 [ 80.592326][ T7258] xt_hashlimit: size too large, truncated to 1048576 [ 80.616268][ T46] bridge_slave_1: left allmulticast mode [ 80.618112][ T46] bridge_slave_1: left promiscuous mode [ 80.620033][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.624877][ T46] bridge_slave_0: left allmulticast mode [ 80.627136][ T46] bridge_slave_0: left promiscuous mode [ 80.628984][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.646163][ T7258] xt_hashlimit: size too large, truncated to 1048576 [ 80.709794][ T7258] xt_hashlimit: size too large, truncated to 1048576 [ 80.848423][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.855339][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.859299][ T46] bond0 (unregistering): Released all slaves [ 80.926011][ T7287] netlink: 'syz.2.309': attribute type 1 has an invalid length. [ 80.961494][ T7287] 8021q: adding VLAN 0 to HW filter on device bond4 [ 80.968888][ T7287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.309'. [ 80.986945][ T7287] bond4: (slave veth0_to_bond): making interface the new active one [ 80.994949][ T7287] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 81.030411][ T6011] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 81.038076][ T7297] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.159314][ T7302] mac80211_hwsim hwsim2 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 81.197511][ T6011] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 81.201717][ T6011] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.204521][ T6011] usb 9-1: Product: syz [ 81.206051][ T6011] usb 9-1: Manufacturer: syz [ 81.207794][ T6011] usb 9-1: SerialNumber: syz [ 81.214165][ T6011] usb 9-1: config 0 descriptor?? [ 81.288207][ T46] hsr_slave_0: left promiscuous mode [ 81.290622][ T46] hsr_slave_1: left promiscuous mode [ 81.292675][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.295025][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.299390][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.303501][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.332311][ T834] cfg80211: failed to load regulatory.db [ 81.336357][ T46] veth1_macvtap: left promiscuous mode [ 81.338247][ T46] veth0_macvtap: left promiscuous mode [ 81.340203][ T46] veth1_vlan: left promiscuous mode [ 81.343170][ T46] veth0_vlan: left promiscuous mode [ 81.401920][ T5299] Bluetooth: hci2: command tx timeout [ 81.419513][ T7275] ubi: mtd0 is already attached to ubi31 [ 81.425999][ T63] usb 9-1: USB disconnect, device number 7 [ 81.827300][ T46] team0 (unregistering): Port device team_slave_1 removed [ 81.883915][ T46] team0 (unregistering): Port device team_slave_0 removed [ 82.082691][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 82.082702][ T40] audit: type=1400 audit(1745497852.241:484): avc: denied { create } for pid=7317 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 82.090834][ T40] audit: type=1400 audit(1745497852.251:485): avc: denied { write } for pid=7317 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 82.096864][ T40] audit: type=1400 audit(1745497852.251:486): avc: denied { execute } for pid=7317 comm="syz.4.316" path="/blkio.bfq.io_service_time_recursive" dev="ramfs" ino=20599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 82.152381][ T40] audit: type=1400 audit(1745497852.321:487): avc: denied { getopt } for pid=7321 comm="syz.2.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.384771][ T7200] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.395539][ T7200] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.402978][ T7200] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.411150][ T7200] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.461366][ T7200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.487117][ T7200] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.492444][ T7340] netlink: 'syz.2.320': attribute type 2 has an invalid length. [ 82.495538][ T40] audit: type=1400 audit(1745497852.661:488): avc: denied { connect } for pid=7339 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.496386][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.504219][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.511136][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.513543][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.597034][ T7354] tipc: Trying to set illegal importance in message [ 82.599832][ T40] audit: type=1400 audit(1745497852.761:489): avc: denied { bind } for pid=7353 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 82.608471][ T40] audit: type=1400 audit(1745497852.761:490): avc: denied { name_bind } for pid=7353 comm="syz.2.323" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 82.615914][ T40] audit: type=1400 audit(1745497852.761:491): avc: denied { node_bind } for pid=7353 comm="syz.2.323" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 82.622912][ T40] audit: type=1400 audit(1745497852.771:492): avc: denied { listen } for pid=7353 comm="syz.2.323" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 82.623943][ T7200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.629223][ T40] audit: type=1400 audit(1745497852.771:493): avc: denied { connect } for pid=7353 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 82.652713][ T7200] veth0_vlan: entered promiscuous mode [ 82.657819][ T7355] syzkaller1: entered promiscuous mode [ 82.659585][ T7355] syzkaller1: entered allmulticast mode [ 82.664365][ T7200] veth1_vlan: entered promiscuous mode [ 82.678435][ T7200] veth0_macvtap: entered promiscuous mode [ 82.682219][ T7200] veth1_macvtap: entered promiscuous mode [ 82.689851][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.693281][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.696362][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.699709][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.704007][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.707297][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.710629][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.714561][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.720086][ T7200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.728860][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.733138][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.736451][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.739701][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.742996][ T7200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.746201][ T7200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.750108][ T7200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.755425][ T7200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.758174][ T7200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.761026][ T7200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.764218][ T7200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.796065][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.798626][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.811709][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.814200][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.060381][ T5950] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 83.214282][ T5950] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 83.217288][ T5950] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.219764][ T5950] usb 9-1: Product: syz [ 83.221391][ T5950] usb 9-1: Manufacturer: syz [ 83.223191][ T5950] usb 9-1: SerialNumber: syz [ 83.226332][ T5950] usb 9-1: config 0 descriptor?? [ 83.430887][ T7358] ubi: mtd0 is already attached to ubi31 [ 83.433555][ T6013] usb 9-1: USB disconnect, device number 8 [ 83.481704][ T77] wlan0: Trigger new scan to find an IBSS to join [ 83.669114][ T7373] bond5: entered promiscuous mode [ 83.670990][ T7373] bond5: entered allmulticast mode [ 83.674036][ T7373] 8021q: adding VLAN 0 to HW filter on device bond5 [ 83.727393][ T7373] bond5 (unregistering): Released all slaves [ 83.832951][ T7378] fuse: Unknown parameter 'rootmod' [ 83.902864][ T7385] netlink: 'syz.2.331': attribute type 10 has an invalid length. [ 84.088268][ T7398] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.365632][ T7435] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7435 comm=syz.2.337 [ 84.369908][ T7435] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7435 comm=syz.2.337 [ 84.387819][ T7444] futex_wake_op: syz.5.339 tries to shift op by -1; fix this program [ 84.469094][ T7458] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 84.473265][ T7458] overlayfs: missing 'lowerdir' [ 84.482227][ T7458] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 84.516791][ T7464] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 84.829534][ T7478] FAT-fs (sr0): bogus number of reserved sectors [ 84.833418][ T7478] FAT-fs (sr0): Can't find a valid FAT filesystem [ 85.173445][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.959540][ T67] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.968731][ T67] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.972214][ T67] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.975208][ T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.977995][ T67] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.013846][ T7543] pim6reg1: entered promiscuous mode [ 86.015591][ T7543] pim6reg1: entered allmulticast mode [ 86.099495][ T7539] chnl_net:caif_netlink_parms(): no params data found [ 86.129512][ T7556] xt_TPROXY: Can be used only with -p tcp or -p udp [ 86.197787][ T7563] "syz.4.362" (7563) uses obsolete ecb(arc4) skcipher [ 86.209989][ T7539] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.212874][ T7539] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.215736][ T7539] bridge_slave_0: entered allmulticast mode [ 86.219029][ T7539] bridge_slave_0: entered promiscuous mode [ 86.226289][ T7539] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.229444][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.232353][ T7539] bridge_slave_1: entered allmulticast mode [ 86.235756][ T7539] bridge_slave_1: entered promiscuous mode [ 86.278763][ T7539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.283709][ T7578] bridge0: port 3(syz_tun) entered blocking state [ 86.285935][ T7578] bridge0: port 3(syz_tun) entered disabled state [ 86.288120][ T7578] syz_tun: entered allmulticast mode [ 86.293913][ T7578] syz_tun: entered promiscuous mode [ 86.295964][ T7578] bridge0: port 3(syz_tun) entered blocking state [ 86.298229][ T7578] bridge0: port 3(syz_tun) entered forwarding state [ 86.304109][ T7539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.328704][ T7578] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 86.339427][ T7575] program syz.4.362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.376312][ T7539] team0: Port device team_slave_0 added [ 86.382007][ T7539] team0: Port device team_slave_1 added [ 86.416078][ T7590] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 86.471594][ T7539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.474454][ T7539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.485748][ T7539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.490655][ T7539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.493426][ T7539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.504699][ T7539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.543018][ T7598] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.545993][ T7598] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.548756][ T7598] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.551971][ T7598] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.554985][ T7598] geneve2: entered promiscuous mode [ 86.556640][ T7598] geneve2: entered allmulticast mode [ 86.596197][ T7539] hsr_slave_0: entered promiscuous mode [ 86.598464][ T7539] hsr_slave_1: entered promiscuous mode [ 86.604302][ T7539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.607295][ T7539] Cannot create hsr debugfs directory [ 86.610452][ T1139] wlan0: Trigger new scan to find an IBSS to join [ 86.612748][ T7605] netlink: 'syz.5.370': attribute type 1 has an invalid length. [ 86.615302][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.370'. [ 86.850416][ T5950] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 86.892191][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.943028][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.005169][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.023604][ T5950] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 87.026491][ T5950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.028971][ T5950] usb 7-1: Product: syz [ 87.030258][ T5950] usb 7-1: Manufacturer: syz [ 87.032026][ T5950] usb 7-1: SerialNumber: syz [ 87.035310][ T5950] usb 7-1: config 0 descriptor?? [ 87.183856][ T46] bridge_slave_1: left allmulticast mode [ 87.183872][ T46] bridge_slave_1: left promiscuous mode [ 87.183976][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.189379][ T46] bridge_slave_0: left allmulticast mode [ 87.189393][ T46] bridge_slave_0: left promiscuous mode [ 87.189487][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.192656][ T7631] netlink: 100 bytes leftover after parsing attributes in process `syz.5.378'. [ 87.245280][ T7607] ubi: mtd0 is already attached to ubi31 [ 87.252859][ T34] usb 7-1: USB disconnect, device number 10 [ 87.430781][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 87.430792][ T40] audit: type=1400 audit(1745497857.591:514): avc: denied { setopt } for pid=7638 comm="syz.5.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.496457][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.501565][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.506450][ T46] bond0 (unregistering): Released all slaves [ 87.867233][ T46] hsr_slave_0: left promiscuous mode [ 87.869490][ T46] hsr_slave_1: left promiscuous mode [ 87.874172][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.876568][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.882354][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.884960][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.926584][ T46] veth1_macvtap: left promiscuous mode [ 87.928874][ T46] veth0_macvtap: left promiscuous mode [ 87.931303][ T46] veth1_vlan: left promiscuous mode [ 87.933016][ T46] veth0_vlan: left promiscuous mode [ 87.962824][ T5299] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 87.965546][ T5299] Bluetooth: hci3: Injecting HCI hardware error event [ 87.968306][ T5299] Bluetooth: hci3: hardware error 0x00 [ 88.052160][ T5953] Bluetooth: hci2: command tx timeout [ 88.524306][ T46] team0 (unregistering): Port device team_slave_1 removed [ 88.584531][ T46] team0 (unregistering): Port device team_slave_0 removed [ 89.012137][ T7685] syz_tun: left allmulticast mode [ 89.013787][ T7685] syz_tun: left promiscuous mode [ 89.020546][ T7685] bridge0: port 3(syz_tun) entered disabled state [ 89.027513][ T7685] bridge_slave_0: left allmulticast mode [ 89.029343][ T7685] bridge_slave_0: left promiscuous mode [ 89.031937][ T7685] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.036470][ T7685] bridge_slave_1: left allmulticast mode [ 89.038825][ T7685] bridge_slave_1: left promiscuous mode [ 89.041473][ T7685] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.046117][ T7688] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 89.052026][ T7685] bond0: (slave bond_slave_0): Releasing backup interface [ 89.058986][ T7685] bond0: (slave bond_slave_1): Releasing backup interface [ 89.074415][ T7685] team0: Port device team_slave_0 removed [ 89.083592][ T7685] team0: Port device team_slave_1 removed [ 89.085960][ T7685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.088290][ T7685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.092496][ T7685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.094817][ T7685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.097355][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 89.138535][ T7689] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 89.143152][ T7689] bond5: (slave batadv3): Enslaving as a backup interface with an up link [ 89.173576][ T7539] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.182557][ T7539] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.203700][ T7539] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.216859][ T7539] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.256388][ T67] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 89.271363][ T7622] sp0: Synchronizing with TNC [ 89.337219][ T7539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.346416][ T7539] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.368918][ T40] audit: type=1400 audit(1745497859.531:515): avc: denied { execute } for pid=7704 comm="syz.2.391" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 89.402724][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.404998][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.414769][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.417037][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.491057][ T13] wlan0: Creating new IBSS network, BSSID ce:08:82:91:14:61 [ 89.514806][ T7539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.543383][ T7539] veth0_vlan: entered promiscuous mode [ 89.548168][ T7539] veth1_vlan: entered promiscuous mode [ 89.562981][ T7539] veth0_macvtap: entered promiscuous mode [ 89.571198][ T7539] veth1_macvtap: entered promiscuous mode [ 89.579203][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.582547][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.585598][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.588861][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.591856][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.595100][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.598953][ T7539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.602712][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.606029][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.609009][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.612269][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.616029][ T7539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.625145][ T7539] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.628160][ T7539] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.634535][ T7539] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.637609][ T7539] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.706593][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.708984][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.732426][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.734902][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.969428][ T40] audit: type=1400 audit(1745497860.131:516): avc: denied { unmount } for pid=6430 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 90.013033][ T40] audit: type=1400 audit(1745497860.181:517): avc: denied { create } for pid=7730 comm="syz.5.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.019042][ T40] audit: type=1400 audit(1745497860.181:518): avc: denied { getopt } for pid=7730 comm="syz.5.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.023969][ T7735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.396'. [ 90.040448][ T5299] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 90.082343][ T7740] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 90.084746][ T7740] UDF-fs: Scanning with blocksize 2048 failed [ 90.086232][ T7740] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 90.089425][ T7740] UDF-fs: Scanning with blocksize 4096 failed [ 90.116786][ T40] audit: type=1800 audit(1745497860.281:519): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.398" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 90.168117][ T40] audit: type=1400 audit(1745497860.331:520): avc: denied { setopt } for pid=7746 comm="syz.5.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.261023][ T7756] misc userio: Can't change port type on an already running userio instance [ 90.379110][ T40] audit: type=1400 audit(1745497860.541:521): avc: denied { mounton } for pid=7761 comm="syz.5.404" path="/84/file0" dev="hugetlbfs" ino=23547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 90.379428][ T7762] overlayfs: maximum fs stacking depth exceeded [ 90.417732][ T40] audit: type=1400 audit(1745497860.581:522): avc: denied { getopt } for pid=7763 comm="syz.5.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.459104][ T7768] bridge: RTM_NEWNEIGH with invalid ether address [ 90.462397][ T7770] input: syz1 as /devices/virtual/input/input8 [ 90.468446][ T40] audit: type=1400 audit(1745497860.631:523): avc: denied { read } for pid=5343 comm="acpid" name="event4" dev="devtmpfs" ino=2978 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.617497][ T7791] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 90.629702][ T7791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7791 comm=syz.2.414 [ 90.629715][ T7790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7790 comm=syz.2.414 [ 90.737956][ T7798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.417'. [ 90.764084][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803660e000: rx timeout, send abort [ 90.776477][ T7803] sock: sock_set_timeout: `syz.5.419' (pid 7803) tries to set negative timeout [ 90.890228][ T1249] Bluetooth: hci2: Frame reassembly failed (-84) [ 90.893273][ T1249] Bluetooth: hci2: Frame reassembly failed (-84) [ 91.264647][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803660e800: rx timeout, send abort [ 91.268606][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803660e000: abort rx timeout. Force session deactivation [ 91.723222][ T7820] netlink: 16 bytes leftover after parsing attributes in process `syz.5.424'. [ 91.750624][ T6013] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 91.767298][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803660e800: abort rx timeout. Force session deactivation [ 91.830299][ T7823] netlink: 'syz.5.425': attribute type 1 has an invalid length. [ 91.830721][ T7824] netlink: 'syz.5.425': attribute type 1 has an invalid length. [ 91.911999][ T6013] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 91.914979][ T6013] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.918542][ T6013] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 91.922848][ T6013] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.928715][ T6013] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 91.932822][ T6013] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 91.935436][ T6013] usb 9-1: Product: syz [ 91.936820][ T6013] usb 9-1: Manufacturer: syz [ 91.941957][ T6013] cdc_wdm 9-1:1.0: skipping garbage [ 91.943917][ T6013] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 91.966368][ T7833] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7833 comm=syz.5.429 [ 91.974068][ T7834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7834 comm=syz.5.429 [ 92.048715][ T1141] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.141901][ T7817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.145586][ T7817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.148553][ T7817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.152278][ T7817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.155701][ T7817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.159036][ T7817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.163204][ T7817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.166006][ T7817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.250517][ T6013] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 92.405105][ T6013] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 92.408064][ T6013] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.410795][ T6013] usb 10-1: Product: syz [ 92.412153][ T6013] usb 10-1: Manufacturer: syz [ 92.413902][ T6013] usb 10-1: SerialNumber: syz [ 92.417225][ T6013] usb 10-1: config 0 descriptor?? [ 92.623220][ T7838] ubi: mtd0 is already attached to ubi31 [ 92.626859][ T63] usb 10-1: USB disconnect, device number 2 [ 92.682150][ T6720] usb 9-1: USB disconnect, device number 9 [ 92.920643][ T5299] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 92.929479][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 92.929494][ T40] audit: type=1400 audit(1745497863.091:532): avc: denied { connect } for pid=7844 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.951853][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.956326][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.960019][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.964570][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.968774][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.065685][ T7847] chnl_net:caif_netlink_parms(): no params data found [ 93.143558][ T7847] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.145984][ T7847] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.148273][ T7847] bridge_slave_0: entered allmulticast mode [ 93.151095][ T7847] bridge_slave_0: entered promiscuous mode [ 93.154483][ T7847] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.156869][ T7847] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.159193][ T7847] bridge_slave_1: entered allmulticast mode [ 93.162816][ T7847] bridge_slave_1: entered promiscuous mode [ 93.197931][ T7847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.202650][ T7847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.237373][ T7847] team0: Port device team_slave_0 added [ 93.241014][ T7847] team0: Port device team_slave_1 added [ 93.270671][ T7847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.273559][ T7847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.282757][ T7847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.287434][ T7847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.289591][ T7847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.299539][ T7847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.348322][ T7847] hsr_slave_0: entered promiscuous mode [ 93.351679][ T7847] hsr_slave_1: entered promiscuous mode [ 93.526171][ T7860] netlink: 36 bytes leftover after parsing attributes in process `syz.2.434'. [ 93.659417][ T40] audit: type=1400 audit(1745497863.821:533): avc: denied { lock } for pid=7869 comm="syz.2.437" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 93.724959][ T1141] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.768963][ T40] audit: type=1400 audit(1745497863.931:534): avc: denied { module_load } for pid=7877 comm="syz.2.439" path="/sys/kernel/address_bits" dev="sysfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 93.806905][ T1141] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.921022][ T1141] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.056276][ T1141] bridge_slave_1: left allmulticast mode [ 94.058588][ T1141] bridge_slave_1: left promiscuous mode [ 94.061094][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.065178][ T1141] bridge_slave_0: left allmulticast mode [ 94.067005][ T1141] bridge_slave_0: left promiscuous mode [ 94.069693][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.264140][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.268244][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.273273][ T1141] bond0 (unregistering): Released all slaves [ 94.603413][ T1141] hsr_slave_0: left promiscuous mode [ 94.605551][ T1141] hsr_slave_1: left promiscuous mode [ 94.607519][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.609890][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.613029][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.615561][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.639061][ T1141] veth1_macvtap: left promiscuous mode [ 94.640979][ T1141] veth0_macvtap: left promiscuous mode [ 94.642785][ T1141] veth1_vlan: left promiscuous mode [ 94.644630][ T1141] veth0_vlan: left promiscuous mode [ 95.001660][ T5299] Bluetooth: hci2: command tx timeout [ 95.190230][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 95.248826][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 95.269995][ T7894] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 95.442653][ T40] audit: type=1400 audit(1745497865.611:535): avc: denied { bind } for pid=7907 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 95.500982][ T7910] netlink: 'syz.2.444': attribute type 10 has an invalid length. [ 95.744253][ T7910] veth0_vlan: left promiscuous mode [ 95.748416][ T7910] veth0_vlan: entered promiscuous mode [ 95.753697][ T7910] team0: Device veth0_vlan failed to register rx_handler [ 95.843049][ T7847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.847586][ T7847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.851591][ T7847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.856898][ T7847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.860083][ T7918] netlink: 16 bytes leftover after parsing attributes in process `syz.4.445'. [ 95.913832][ T7847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.929539][ T7847] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.937115][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.939422][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.948315][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.950504][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.044102][ T7847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.066548][ T7847] veth0_vlan: entered promiscuous mode [ 96.077805][ T7847] veth1_vlan: entered promiscuous mode [ 96.093654][ T7847] veth0_macvtap: entered promiscuous mode [ 96.094639][ T40] audit: type=1400 audit(1745497866.261:536): avc: denied { lock } for pid=7932 comm="syz.4.447" path="socket:[21481]" dev="sockfs" ino=21481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 96.096886][ T7933] syz.4.447: vmalloc error: size 4294934528, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 96.097272][ T7847] veth1_macvtap: entered promiscuous mode [ 96.103046][ T7847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.103059][ T7847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.103064][ T7847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.103072][ T7847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.103078][ T7847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.103085][ T7847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.103755][ T7847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.107272][ T7847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.109016][ T7933] ,cpuset= [ 96.110129][ T7847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.110137][ T7847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.110145][ T7847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.111212][ T7847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.114650][ T7933] / [ 96.118813][ T7847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.119919][ T7933] ,mems_allowed=0-1 [ 96.123959][ T7847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.126653][ T7933] [ 96.129671][ T7847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.132175][ T7933] CPU: 0 UID: 0 PID: 7933 Comm: syz.4.447 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 96.132201][ T7933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.132211][ T7933] Call Trace: [ 96.132217][ T7933] [ 96.132223][ T7933] dump_stack_lvl+0x16c/0x1f0 [ 96.132258][ T7933] warn_alloc+0x248/0x3a0 [ 96.132270][ T7933] ? __pfx_warn_alloc+0x10/0x10 [ 96.132280][ T7933] ? stack_depot_save_flags+0x3e6/0xa50 [ 96.132301][ T7933] ? kasan_save_stack+0x42/0x60 [ 96.132311][ T7933] ? kasan_save_stack+0x33/0x60 [ 96.132319][ T7933] ? kasan_save_track+0x14/0x30 [ 96.132328][ T7933] ? __kasan_kmalloc+0xaa/0xb0 [ 96.132337][ T7933] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 96.132350][ T7933] ? vb2_core_create_bufs+0x559/0xab0 [ 96.132361][ T7933] ? vb2_create_bufs+0x5e8/0x840 [ 96.132370][ T7933] ? vb2_ioctl_create_bufs+0x244/0x3e0 [ 96.132383][ T7933] __vmalloc_node_range_noprof+0x10ea/0x1540 [ 96.132405][ T7933] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 96.132421][ T7933] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 96.132441][ T7933] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 96.132454][ T7933] vmalloc_user_noprof+0x6b/0x90 [ 96.132470][ T7933] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 96.132482][ T7933] vb2_vmalloc_alloc+0x135/0x3f0 [ 96.132495][ T7933] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 96.132508][ T7933] __vb2_queue_alloc+0x8c6/0x1280 [ 96.132527][ T7933] vb2_core_create_bufs+0x559/0xab0 [ 96.132541][ T7933] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 96.132560][ T7933] vb2_create_bufs+0x5e8/0x840 [ 96.132572][ T7933] ? __pfx_vb2_create_bufs+0x10/0x10 [ 96.132585][ T7933] ? __video_do_ioctl+0x4a4/0xfc0 [ 96.132603][ T7933] vb2_ioctl_create_bufs+0x244/0x3e0 [ 96.132613][ T7933] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 96.132627][ T7933] vidioc_create_bufs+0x7d/0xf0 [ 96.132648][ T7933] v4l_create_bufs+0x156/0x270 [ 96.132671][ T7933] __video_do_ioctl+0xb3d/0xfc0 [ 96.132690][ T7933] ? __might_fault+0xe3/0x190 [ 96.132702][ T7933] ? __pfx___video_do_ioctl+0x10/0x10 [ 96.132723][ T7933] video_usercopy+0x4cd/0x1720 [ 96.132740][ T7933] ? __pfx___video_do_ioctl+0x10/0x10 [ 96.132755][ T7933] ? selinux_bprm_creds_for_exec+0xc40/0xc60 [ 96.132778][ T7933] ? __pfx_video_usercopy+0x10/0x10 [ 96.132803][ T7933] v4l2_ioctl+0x1ba/0x250 [ 96.132817][ T7933] ? __pfx_v4l2_ioctl+0x10/0x10 [ 96.132833][ T7933] __x64_sys_ioctl+0x190/0x200 [ 96.132850][ T7933] do_syscall_64+0xcd/0x260 [ 96.132866][ T7933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.132877][ T7933] RIP: 0033:0x7f228498e969 [ 96.132887][ T7933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.132897][ T7933] RSP: 002b:00007f22857a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.132908][ T7933] RAX: ffffffffffffffda RBX: 00007f2284bb5fa0 RCX: 00007f228498e969 [ 96.132915][ T7933] RDX: 00002000000013c0 RSI: 00000000c100565c RDI: 0000000000000006 [ 96.132921][ T7933] RBP: 00007f2284a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 96.132927][ T7933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.132933][ T7933] R13: 0000000000000000 R14: 00007f2284bb5fa0 R15: 00007fff15ab53e8 [ 96.132946][ T7933] [ 96.132950][ T7933] Mem-Info: [ 96.138210][ T7847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.139311][ T7933] active_anon:7827 inactive_anon:0 isolated_anon:0 [ 96.139311][ T7933] active_file:2634 inactive_file:48731 isolated_file:0 [ 96.139311][ T7933] unevictable:1768 dirty:96 writeback:0 [ 96.139311][ T7933] slab_reclaimable:11702 slab_unreclaimable:76094 [ 96.139311][ T7933] mapped:25064 shmem:2488 pagetables:993 [ 96.139311][ T7933] sec_pagetables:302 bounce:0 [ 96.139311][ T7933] kernel_misc_reclaimable:0 [ 96.139311][ T7933] free:457009 free_pcp:6067 free_cma:0 [ 96.281389][ T7933] Node 0 active_anon:31184kB inactive_anon:0kB active_file:10500kB inactive_file:194848kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:96164kB dirty:376kB writeback:0kB shmem:6416kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:12656kB pagetables:4220kB sec_pagetables:1208kB all_unreclaimable? no Balloon:0kB [ 96.292361][ T7933] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:76kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 96.302571][ T7933] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 96.311258][ T7933] lowmem_reserve[]: 0 1236 1236 1236 1236 [ 96.313185][ T7933] Node 0 DMA32 free:220664kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB active_anon:31184kB inactive_anon:0kB active_file:10500kB inactive_file:194848kB unevictable:3536kB writepending:376kB present:2080628kB managed:1265884kB mlocked:0kB bounce:0kB free_pcp:10788kB local_pcp:1424kB free_cma:0kB [ 96.326015][ T7933] lowmem_reserve[]: 0 0 0 0 0 [ 96.328976][ T7933] Node 1 Normal free:1567560kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:76kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781964kB mlocked:0kB bounce:0kB free_pcp:19496kB local_pcp:5412kB free_cma:0kB [ 96.339099][ T7933] lowmem_reserve[]: 0 0 0 0 0 [ 96.342331][ T7933] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 96.348777][ T7933] Node 0 DMA32: 6*4kB (E) 28*8kB (UME) 55*16kB (ME) 101*32kB (UME) 104*64kB (UME) 36*128kB (ME) 41*256kB (ME) 36*512kB (UM) 35*1024kB (UM) 12*2048kB (UM) 28*4096kB (M) = 219656kB [ 96.355401][ T7933] Node 1 Normal: 70*4kB (UM) 10*8kB (UME) 6*16kB (UME) 12*32kB (UME) 12*64kB (UME) 8*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 380*4096kB (UM) = 1567560kB [ 96.355591][ T7933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.355601][ T7933] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 96.355643][ T7933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.355654][ T7933] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 96.355662][ T7933] 53855 total pagecache pages [ 96.355666][ T7933] 0 pages in swap cache [ 96.355670][ T7933] Free swap = 124996kB [ 96.355699][ T7933] Total swap = 124996kB [ 96.355708][ T7933] 1048443 pages RAM [ 96.355712][ T7933] 0 pages HighMem/MovableOnly [ 96.355716][ T7933] 282641 pages reserved [ 96.355720][ T7933] 0 pages cma reserved [ 96.365417][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.365430][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.383987][ T40] audit: type=1400 audit(1745497866.541:537): avc: denied { connect } for pid=7932 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.384037][ T40] audit: type=1400 audit(1745497866.541:538): avc: denied { read } for pid=7932 comm="syz.4.447" path="socket:[24901]" dev="sockfs" ino=24901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.393492][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.393504][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.432732][ T40] audit: type=1400 audit(1745497866.601:539): avc: denied { bind } for pid=7932 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.432760][ T40] audit: type=1400 audit(1745497866.601:540): avc: denied { write } for pid=7932 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.447732][ T5299] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.468727][ T7941] Illegal XDP return value 4294967274 on prog (id 56) dev syz_tun, expect packet loss! [ 96.620130][ T40] audit: type=1400 audit(1745497866.781:541): avc: denied { setopt } for pid=7947 comm="syz.2.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.627019][ T7948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.451'. [ 96.759138][ T7960] loop2: detected capacity change from 0 to 7 [ 96.765076][ T7960] Dev loop2: unable to read RDB block 7 [ 96.766911][ T7960] loop2: unable to read partition table [ 96.768759][ T7960] loop2: partition table beyond EOD, truncated [ 96.770970][ T7960] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 96.813177][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 97.716687][ T7980] netlink: 276 bytes leftover after parsing attributes in process `syz.5.462'. [ 98.153882][ T5994] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 98.324242][ T5994] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 98.327912][ T5994] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.331348][ T5994] usb 7-1: Product: syz [ 98.333068][ T5994] usb 7-1: Manufacturer: syz [ 98.334966][ T5994] usb 7-1: SerialNumber: syz [ 98.338660][ T5994] usb 7-1: config 0 descriptor?? [ 98.548363][ T7996] ubi: mtd0 is already attached to ubi31 [ 98.551132][ T6012] usb 7-1: USB disconnect, device number 11 [ 98.700207][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.592117][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 99.595996][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.598905][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.603164][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.605557][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.607555][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.609543][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.611734][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.613736][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.615718][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.617683][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.619690][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.624334][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.626384][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.628381][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.635559][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 99.635567][ T40] audit: type=1400 audit(1745497869.801:551): avc: denied { bind } for pid=8009 comm="syz.2.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.639634][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.644955][ T8010] tipc: Can't bind to reserved service type 2 [ 99.648599][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.650814][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.652917][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.654953][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.659891][ T8008] overlay: Bad value for 'workdir' [ 99.685033][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.687838][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.691500][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.694532][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'. [ 99.694986][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.699742][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.795146][ T8017] chnl_net:caif_netlink_parms(): no params data found [ 99.866602][ T8017] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.869050][ T8017] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.871497][ T8017] bridge_slave_0: entered allmulticast mode [ 99.874275][ T8017] bridge_slave_0: entered promiscuous mode [ 99.875872][ T40] audit: type=1400 audit(1745497870.041:552): avc: denied { mount } for pid=8040 comm="syz.5.477" name="/" dev="pstore" ino=3193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 99.877654][ T8017] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.888061][ T40] audit: type=1400 audit(1745497870.041:553): avc: denied { remount } for pid=8040 comm="syz.5.477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 99.888118][ T8017] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.895994][ T40] audit: type=1400 audit(1745497870.051:554): avc: denied { unmount } for pid=6767 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 99.897335][ T8017] bridge_slave_1: entered allmulticast mode [ 99.909179][ T8017] bridge_slave_1: entered promiscuous mode [ 99.923287][ T8043] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 99.990012][ T8017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.990575][ T8053] netlink: 20 bytes leftover after parsing attributes in process `syz.4.480'. [ 99.996752][ T8017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.036863][ T8017] team0: Port device team_slave_0 added [ 100.042465][ T8017] team0: Port device team_slave_1 added [ 100.054414][ T8057] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 100.056652][ T8057] PKCS7: Only support pkcs7_signedData type [ 100.075403][ T8017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.077619][ T8017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.086955][ T8017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.091220][ T8017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.093372][ T8017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.101540][ T8017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.118541][ T40] audit: type=1400 audit(1745497870.281:555): avc: denied { accept } for pid=8062 comm="syz.5.485" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 100.119501][ T8063] netlink: 32 bytes leftover after parsing attributes in process `syz.5.485'. [ 100.125205][ T40] audit: type=1400 audit(1745497870.281:556): avc: denied { write } for pid=8062 comm="syz.5.485" laddr=::1 lport=20000 faddr=::1 fport=35618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 100.125230][ T40] audit: type=1400 audit(1745497870.281:557): avc: denied { read } for pid=8062 comm="syz.5.485" laddr=::1 lport=20000 faddr=::1 fport=35618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 100.165613][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.484'. [ 100.168456][ T8059] netlink: 2 bytes leftover after parsing attributes in process `syz.4.484'. [ 100.174061][ T8017] hsr_slave_0: entered promiscuous mode [ 100.176321][ T8017] hsr_slave_1: entered promiscuous mode [ 100.178419][ T8017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.181625][ T8017] Cannot create hsr debugfs directory [ 100.349928][ T40] audit: type=1400 audit(1745497870.511:558): avc: denied { read } for pid=8072 comm="syz.4.488" path="socket:[24465]" dev="sockfs" ino=24465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 100.350617][ T8073] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 100.383976][ T8075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8075 comm=syz.2.490 [ 100.400733][ T34] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 100.502751][ T8095] netlink: 'syz.4.495': attribute type 3 has an invalid length. [ 100.548152][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'. [ 100.552878][ T8105] ubi: mtd0 is already attached to ubi31 [ 100.565789][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.581592][ T34] usb 10-1: Using ep0 maxpacket: 32 [ 100.584887][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.589175][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.593420][ T34] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 100.598510][ T34] usb 10-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice=10.00 [ 100.602374][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.606729][ T34] usb 10-1: config 0 descriptor?? [ 100.671904][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.742863][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.805703][ T8117] tmpfs: Bad value for 'mpol' [ 100.838016][ T46] bridge_slave_1: left allmulticast mode [ 100.839855][ T46] bridge_slave_1: left promiscuous mode [ 100.842193][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.845714][ T46] bridge_slave_0: left allmulticast mode [ 100.847504][ T46] bridge_slave_0: left promiscuous mode [ 100.849318][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.109981][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.114541][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.118175][ T46] bond0 (unregistering): Released all slaves [ 101.135679][ T40] audit: type=1400 audit(1745497871.301:559): avc: denied { getopt } for pid=8125 comm="syz.2.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 101.213038][ T34] usbhid 10-1:0.0: can't add hid device: -71 [ 101.214581][ T8062] dccp_close: ABORT with 5564 bytes unread [ 101.216299][ T34] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 101.221358][ T34] usb 10-1: USB disconnect, device number 3 [ 101.347509][ T40] audit: type=1400 audit(1745497871.511:560): avc: denied { load_policy } for pid=8125 comm="syz.2.502" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 101.347562][ T8139] SELinux: policydb string length 0 does not match expected length 8 [ 101.358039][ T8139] SELinux: failed to load policy [ 101.445146][ T8142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.503'. [ 101.451770][ T8142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=8142 comm=syz.4.503 [ 101.486429][ T46] hsr_slave_0: left promiscuous mode [ 101.488520][ T46] hsr_slave_1: left promiscuous mode [ 101.492411][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.494938][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.502082][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.504510][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.527764][ T46] veth1_macvtap: left promiscuous mode [ 101.529647][ T46] veth0_macvtap: left promiscuous mode [ 101.531622][ T46] veth1_vlan: left promiscuous mode [ 101.533323][ T46] veth0_vlan: left promiscuous mode [ 101.731944][ T5953] Bluetooth: hci2: command tx timeout [ 101.765840][ T8152] exFAT-fs (nullb0): invalid boot record signature [ 101.777241][ T8152] exFAT-fs (nullb0): failed to read boot sector [ 101.779648][ T8152] exFAT-fs (nullb0): failed to recognize exfat type [ 102.133926][ T46] team0 (unregistering): Port device team_slave_1 removed [ 102.198486][ T46] team0 (unregistering): Port device team_slave_0 removed [ 102.708933][ T8163] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.769350][ T8017] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.791792][ T8017] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.798405][ T8017] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.807907][ T8017] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.886085][ T8017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.896897][ T8017] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.905027][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.907312][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.911256][ T8190] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 102.915876][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.918110][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.945615][ T8017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.033820][ T8017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.052728][ T8017] veth0_vlan: entered promiscuous mode [ 103.062899][ T8017] veth1_vlan: entered promiscuous mode [ 103.081431][ T8017] veth0_macvtap: entered promiscuous mode [ 103.085633][ T8017] veth1_macvtap: entered promiscuous mode [ 103.097121][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.102678][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.105725][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.108976][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.119979][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.124643][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.128528][ T8017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.136652][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.139952][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.146247][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.149469][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.156382][ T8017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.161418][ T8017] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.164152][ T8017] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.166898][ T8017] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.169544][ T8017] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.210177][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.214110][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.228482][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.231664][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.394375][ T46] Bluetooth: hci2: Frame reassembly failed (-84) [ 104.200584][ T6011] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 104.226156][ T8245] (syz.2.527,8245,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 104.228858][ T8245] (syz.2.527,8245,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 104.361133][ T6011] usb 10-1: Using ep0 maxpacket: 8 [ 104.365141][ T6011] usb 10-1: config 1 interface 0 has no altsetting 0 [ 104.368870][ T6011] usb 10-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.40 [ 104.372082][ T6011] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.374682][ T6011] usb 10-1: Product: Ђ [ 104.376016][ T6011] usb 10-1: Manufacturer: 眇ï˜æº¯ç—›î¾èŠ¸è²¢í…¼å¢‡îƒ…å䇲짷橛ä¥ä¬” [ 104.378700][ T6011] usb 10-1: SerialNumber: О [ 104.597251][ T6011] usbhid 10-1:1.0: can't add hid device: -71 [ 104.599178][ T6011] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 104.603048][ T6011] usb 10-1: USB disconnect, device number 4 [ 105.062926][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 105.062943][ T40] audit: type=1400 audit(1745497875.231:576): avc: denied { unmount } for pid=5957 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 105.116571][ T8248] could not allocate digest TFM handle sha384-ce [ 105.400507][ T5299] Bluetooth: hci2: command 0x1003 tx timeout [ 105.401639][ T5953] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 105.423701][ T57] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 105.444981][ T5953] Bluetooth: hci0: unexpected event for opcode 0x2039 [ 105.463728][ T1249] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.488423][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.535'. [ 105.573826][ T57] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 105.577427][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.579965][ T57] usb 7-1: Product: syz [ 105.581729][ T57] usb 7-1: Manufacturer: syz [ 105.583262][ T57] usb 7-1: SerialNumber: syz [ 105.585898][ T57] usb 7-1: config 0 descriptor?? [ 105.789940][ T8257] ubi: mtd0 is already attached to ubi31 [ 105.792532][ T57] usb 7-1: USB disconnect, device number 12 [ 106.438928][ T40] audit: type=1326 audit(1745497876.601:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8281 comm="syz.5.537" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadfc78e969 code=0x0 [ 106.453459][ T8285] netlink: 32 bytes leftover after parsing attributes in process `syz.2.539'. [ 106.543113][ T5299] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.546636][ T5299] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.549568][ T5299] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.552888][ T5299] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.555508][ T5299] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.682819][ T8294] chnl_net:caif_netlink_parms(): no params data found [ 106.777264][ T8294] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.779637][ T8294] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.791867][ T8294] bridge_slave_0: entered allmulticast mode [ 106.794584][ T8294] bridge_slave_0: entered promiscuous mode [ 106.797642][ T8294] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.800038][ T8294] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.802585][ T8294] bridge_slave_1: entered allmulticast mode [ 106.805223][ T8294] bridge_slave_1: entered promiscuous mode [ 106.833946][ T40] audit: type=1400 audit(1745500436.998:578): avc: denied { ioctl } for pid=8319 comm="syz.4.546" path="socket:[27390]" dev="sockfs" ino=27390 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.850908][ T8294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.855361][ T8294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.882981][ T8325] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 106.885121][ T8325] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 106.887907][ T8325] vhci_hcd vhci_hcd.0: Device attached [ 106.890197][ T8326] vhci_hcd: connection closed [ 106.890814][ T13] vhci_hcd: stop threads [ 106.893749][ T13] vhci_hcd: release socket [ 106.895159][ T13] vhci_hcd: disconnect device [ 106.905185][ T8294] team0: Port device team_slave_0 added [ 106.909689][ T8294] team0: Port device team_slave_1 added [ 106.944187][ T8294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.946421][ T8294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.956760][ T8294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.961708][ T8294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.964152][ T8294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.974427][ T8294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.009246][ T8294] hsr_slave_0: entered promiscuous mode [ 107.011882][ T8294] hsr_slave_1: entered promiscuous mode [ 107.110420][ T6013] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 107.263547][ T6013] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 107.267161][ T6013] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.269666][ T6013] usb 7-1: Product: syz [ 107.271243][ T6013] usb 7-1: Manufacturer: syz [ 107.272736][ T6013] usb 7-1: SerialNumber: syz [ 107.275452][ T6013] usb 7-1: config 0 descriptor?? [ 107.313594][ T40] audit: type=1400 audit(1745500437.478:579): avc: denied { map } for pid=8328 comm="syz.5.549" path="/dev/net/tun" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 107.469392][ T1249] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.481619][ T8324] ubi: mtd0 is already attached to ubi31 [ 107.484915][ T63] usb 7-1: USB disconnect, device number 13 [ 107.528614][ T1249] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.533365][ T8339] nbd: couldn't find device at index 228 [ 107.632061][ T1249] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.731441][ T1249] bridge_slave_1: left allmulticast mode [ 107.733495][ T1249] bridge_slave_1: left promiscuous mode [ 107.736031][ T1249] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.742256][ T1249] bridge_slave_0: left allmulticast mode [ 107.744056][ T1249] bridge_slave_0: left promiscuous mode [ 107.745883][ T1249] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.966794][ T1249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.972821][ T1249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.977916][ T1249] bond0 (unregistering): Released all slaves [ 108.012037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.031573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.103915][ T8359] netlink: 48 bytes leftover after parsing attributes in process `syz.2.556'. [ 108.246487][ T40] audit: type=1400 audit(1745500438.408:580): avc: denied { map } for pid=8370 comm="syz.2.558" path="socket:[27467]" dev="sockfs" ino=27467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.256590][ T40] audit: type=1400 audit(1745500438.408:581): avc: denied { read } for pid=8370 comm="syz.2.558" path="socket:[27467]" dev="sockfs" ino=27467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.261113][ T8371] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.318497][ T8376] vti0: entered promiscuous mode [ 108.363497][ T1249] hsr_slave_0: left promiscuous mode [ 108.366004][ T1249] hsr_slave_1: left promiscuous mode [ 108.367854][ T1249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.370250][ T1249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.373436][ T1249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.375795][ T1249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.399926][ T40] audit: type=1400 audit(1745500438.558:582): avc: denied { accept } for pid=8381 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 108.403149][ T1249] veth1_macvtap: left promiscuous mode [ 108.407768][ T1249] veth0_macvtap: left promiscuous mode [ 108.409607][ T1249] veth1_vlan: left promiscuous mode [ 108.411606][ T1249] veth0_vlan: left promiscuous mode [ 108.485640][ T8387] fuse: Bad value for 'user_id' [ 108.487267][ T8387] fuse: Bad value for 'user_id' [ 108.528665][ T8394] netlink: 'syz.5.564': attribute type 64 has an invalid length. [ 108.534808][ T8394] netlink: 'syz.5.564': attribute type 4 has an invalid length. [ 108.537891][ T8394] netlink: 152 bytes leftover after parsing attributes in process `syz.5.564'. [ 108.602204][ T5299] Bluetooth: hci2: command tx timeout [ 108.953365][ T1249] team0 (unregistering): Port device team_slave_1 removed [ 109.023602][ T1249] team0 (unregistering): Port device team_slave_0 removed [ 109.549655][ T8294] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.573058][ T8294] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.574664][ T40] audit: type=1400 audit(1745500439.748:583): avc: denied { map } for pid=8410 comm="syz.4.569" path="/proc/492/task/494" dev="proc" ino=29212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 109.606886][ T8294] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.616493][ T8413] SELinux: failed to load policy [ 109.617109][ T8294] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 109.624175][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 109.639341][ T8415] netlink: 16 bytes leftover after parsing attributes in process `syz.5.570'. [ 109.673313][ T8294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.692128][ T8294] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.696911][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.699901][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.707310][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.709605][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.863653][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.573'. [ 109.875831][ T8294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.900153][ T8294] veth0_vlan: entered promiscuous mode [ 109.905009][ T8294] veth1_vlan: entered promiscuous mode [ 109.919292][ T8294] veth0_macvtap: entered promiscuous mode [ 109.925163][ T8294] veth1_macvtap: entered promiscuous mode [ 109.933887][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.937139][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.940179][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.944403][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.947487][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.951780][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.955715][ T8294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.963796][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.967064][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.970076][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.973493][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.975094][ T40] audit: type=1400 audit(1745500440.148:584): avc: denied { view } for pid=8434 comm="syz.5.574" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 109.977291][ T8294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.987928][ T8294] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.991047][ T8294] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.993792][ T8294] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.996521][ T8294] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.035255][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.047772][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.056060][ T8463] tmpfs: Unknown parameter 'mpod' [ 110.071343][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.073805][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.089367][ T40] audit: type=1400 audit(1745500440.248:585): avc: denied { connect } for pid=8466 comm="syz.2.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 110.142516][ T40] audit: type=1400 audit(1745500440.308:586): avc: denied { write } for pid=8466 comm="syz.2.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 110.166105][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.581'. [ 110.224293][ T8472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.233754][ T8472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.638308][ T40] audit: type=1400 audit(1745500440.798:587): avc: denied { setattr } for pid=8473 comm="syz.5.582" name="NETLINK" dev="sockfs" ino=29355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.809856][ T8485] ubi: mtd0 is already attached to ubi31 [ 111.185897][ T8510] netlink: 'syz.2.594': attribute type 21 has an invalid length. [ 111.188375][ T8510] netlink: 156 bytes leftover after parsing attributes in process `syz.2.594'. [ 111.236052][ T40] audit: type=1400 audit(1745500441.398:588): avc: denied { watch watch_reads } for pid=8515 comm="syz.4.596" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 111.296565][ T40] audit: type=1400 audit(1745500441.458:589): avc: denied { module_request } for pid=8515 comm="syz.4.596" kmod="net-pf-10-proto-2-type-10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 111.357024][ T40] audit: type=1400 audit(1745500441.518:590): avc: denied { write } for pid=8522 comm="syz.5.598" path="socket:[30208]" dev="sockfs" ino=30208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 111.397584][ T8527] mkiss: ax0: crc mode is auto. [ 111.406700][ T8527] use of bytesused == 0 is deprecated and will be removed in the future, [ 111.409814][ T8527] use the actual size instead. [ 111.524565][ T8530] netlink: 'syz.2.600': attribute type 1 has an invalid length. [ 111.549754][ T8530] 8021q: adding VLAN 0 to HW filter on device bond7 [ 111.554296][ T8530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=8530 comm=syz.2.600 [ 111.686698][ T40] audit: type=1400 audit(1745500441.848:591): avc: denied { setopt } for pid=8542 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 111.704652][ T40] audit: type=1400 audit(1745500441.868:592): avc: denied { ioctl } for pid=8542 comm="syz.2.604" path="socket:[28477]" dev="sockfs" ino=28477 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 111.870433][ T2300] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 111.886432][ T8548] x_tables: duplicate underflow at hook 2 [ 111.914841][ T40] audit: type=1400 audit(1745500442.078:593): avc: denied { connect } for pid=8549 comm="syz.2.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 111.955027][ T40] audit: type=1400 audit(1745500442.118:594): avc: denied { setopt } for pid=8551 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 112.037325][ T2300] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 112.040916][ T2300] usb 10-1: config 0 interface 0 has no altsetting 0 [ 112.049152][ T2300] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 112.052301][ T2300] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 112.054946][ T2300] usb 10-1: Product: syz [ 112.056321][ T2300] usb 10-1: Manufacturer: syz [ 112.057801][ T2300] usb 10-1: SerialNumber: syz [ 112.069232][ T2300] usb 10-1: config 0 descriptor?? [ 112.074482][ T2300] usb 10-1: selecting invalid altsetting 0 [ 112.105976][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 112.107432][ T8565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.612'. [ 112.276060][ T5991] usb 10-1: USB disconnect, device number 5 [ 112.308579][ T8581] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 112.313566][ T8581] macsec1: entered allmulticast mode [ 112.315337][ T8581] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 112.319774][ T8581] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 112.322325][ T8581] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 112.351536][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.380456][ T5950] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 112.533676][ T5950] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 112.537221][ T5950] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.540502][ T5950] usb 9-1: Product: syz [ 112.542133][ T5950] usb 9-1: Manufacturer: syz [ 112.543996][ T5950] usb 9-1: SerialNumber: syz [ 112.547894][ T5950] usb 9-1: config 0 descriptor?? [ 112.754231][ T8568] ubi: mtd0 is already attached to ubi31 [ 112.757485][ T2300] usb 9-1: USB disconnect, device number 10 [ 113.539161][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.542761][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.545529][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.548729][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.552579][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.670538][ T2300] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 113.675448][ T8602] chnl_net:caif_netlink_parms(): no params data found [ 113.703611][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 113.707078][ T8616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.626'. [ 113.722175][ T8621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.725420][ T8621] netlink: 16 bytes leftover after parsing attributes in process `syz.5.627'. [ 113.761113][ T8602] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.763439][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.765768][ T8602] bridge_slave_0: entered allmulticast mode [ 113.768405][ T8602] bridge_slave_0: entered promiscuous mode [ 113.772755][ T8602] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.775293][ T8602] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.777569][ T8602] bridge_slave_1: entered allmulticast mode [ 113.781092][ T8602] bridge_slave_1: entered promiscuous mode [ 113.813953][ T8602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.818424][ T8602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.820390][ T2300] usb 9-1: Using ep0 maxpacket: 8 [ 113.825029][ T2300] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 113.827943][ T2300] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 113.832448][ T2300] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.836630][ T2300] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 113.840386][ T2300] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 113.844832][ T2300] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 113.847357][ T2300] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 113.850937][ T2300] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.854531][ T2300] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 113.857892][ T2300] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 113.859551][ T8602] team0: Port device team_slave_0 added [ 113.862247][ T2300] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 113.862268][ T2300] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 113.862280][ T2300] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.862292][ T2300] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 113.862305][ T2300] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 113.864459][ T2300] usb 9-1: string descriptor 0 read error: -22 [ 113.868600][ T8602] team0: Port device team_slave_1 added [ 113.870048][ T2300] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 113.890400][ T2300] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.900573][ T2300] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 113.915630][ T8602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.918607][ T8602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.930635][ T8602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.936200][ T8602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.938937][ T8602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.949098][ T8602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.005928][ T8602] hsr_slave_0: entered promiscuous mode [ 114.008620][ T8602] hsr_slave_1: entered promiscuous mode [ 114.013549][ T8602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.016568][ T8602] Cannot create hsr debugfs directory [ 114.099646][ T34] usb 9-1: USB disconnect, device number 11 [ 114.127740][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.176192][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.273785][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.408050][ T12] bridge_slave_1: left allmulticast mode [ 114.409914][ T12] bridge_slave_1: left promiscuous mode [ 114.411897][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.415564][ T12] bridge_slave_0: left allmulticast mode [ 114.417963][ T12] bridge_slave_0: left promiscuous mode [ 114.419811][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.533935][ T8642] ubi: mtd0 is already attached to ubi31 [ 114.685651][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.689583][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.694765][ T12] bond0 (unregistering): Released all slaves [ 115.051427][ T8657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4037 sclass=netlink_route_socket pid=8657 comm=syz.4.635 [ 115.103461][ T12] hsr_slave_0: left promiscuous mode [ 115.106450][ T12] hsr_slave_1: left promiscuous mode [ 115.109235][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.113935][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.119564][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.122504][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.131727][ T8661] netlink: 40 bytes leftover after parsing attributes in process `syz.4.635'. [ 115.147125][ T12] veth1_macvtap: left promiscuous mode [ 115.148923][ T12] veth0_macvtap: left promiscuous mode [ 115.153526][ T12] veth1_vlan: left promiscuous mode [ 115.155244][ T12] veth0_vlan: left promiscuous mode [ 115.167635][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 115.167645][ T40] audit: type=1400 audit(1745500445.328:596): avc: denied { setopt } for pid=8663 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 115.224205][ T40] audit: type=1400 audit(1745500445.388:597): avc: denied { connect } for pid=8672 comm="syz.4.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.276526][ T40] audit: type=1400 audit(1745500445.438:598): avc: denied { read } for pid=8672 comm="syz.4.638" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.642772][ T5953] Bluetooth: hci2: command tx timeout [ 115.750712][ T12] team0 (unregistering): Port device team_slave_1 removed [ 115.813650][ T12] team0 (unregistering): Port device team_slave_0 removed [ 116.275518][ T40] audit: type=1400 audit(1745500446.438:599): avc: denied { ioctl } for pid=8682 comm="syz.5.640" path="socket:[31410]" dev="sockfs" ino=31410 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.350148][ T8602] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 116.389071][ T8602] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 116.396473][ T8602] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 116.429519][ T8602] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 116.465502][ T8711] ubi: mtd0 is already attached to ubi31 [ 116.502010][ T8602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.513883][ T8602] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.525871][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.528320][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.537409][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.539777][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.652932][ T8602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.673649][ T8602] veth0_vlan: entered promiscuous mode [ 116.680142][ T8602] veth1_vlan: entered promiscuous mode [ 116.695757][ T8602] veth0_macvtap: entered promiscuous mode [ 116.699574][ T8602] veth1_macvtap: entered promiscuous mode [ 116.707364][ T8602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.712432][ T8602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.716012][ T8602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.719208][ T8602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.722292][ T8602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.725520][ T8602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.729401][ T8602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.736651][ T8602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.741030][ T8602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.744106][ T8602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.747353][ T8602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.751659][ T8602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.757370][ T8602] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.760431][ T8602] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.763125][ T8602] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.765879][ T8602] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.808094][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.812983][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.829512][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.830705][ T5994] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 116.832720][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.990649][ T5994] usb 9-1: Using ep0 maxpacket: 8 [ 116.994224][ T5994] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.998360][ T5994] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.002147][ T5994] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.005468][ T5994] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.009754][ T5994] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.009943][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.651'. [ 117.013177][ T5994] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.152527][ T40] audit: type=1400 audit(1745500447.318:600): avc: denied { unmount } for pid=6767 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 117.223854][ T5994] usb 9-1: GET_CAPABILITIES returned 0 [ 117.226283][ T5994] usbtmc 9-1:16.0: can't read capabilities [ 117.242316][ T5994] usb 9-1: USB disconnect, device number 12 [ 117.304596][ T8753] netlink: 45 bytes leftover after parsing attributes in process `syz.4.656'. [ 117.359812][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'. [ 117.364036][ T8758] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 117.367248][ T8758] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 117.407006][ T8761] 9pnet_fd: Insufficient options for proto=fd [ 117.417141][ T8748] netlink: 'syz.5.655': attribute type 2 has an invalid length. [ 117.423013][ T8756] ptrace attach of "/syz-executor exec"[6430] was attempted by ""[8756] [ 117.458950][ T8765] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.660'. [ 117.474440][ T8765] netlink: zone id is out of range [ 117.476113][ T8765] netlink: get zone limit has 8 unknown bytes [ 117.579313][ T40] audit: type=1400 audit(1745500447.738:601): avc: denied { accept } for pid=8771 comm="syz.5.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.658860][ T8770] openvswitch: netlink: Actions may not be safe on all matching packets [ 117.702746][ T40] audit: type=1400 audit(1745500447.868:602): avc: denied { map } for pid=8792 comm="syz.2.667" path="socket:[31971]" dev="sockfs" ino=31971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.881152][ T8811] sch_tbf: burst 0 is lower than device geneve0 mtu (1464) ! [ 118.073196][ T8825] fuse: Bad value for 'user_id' [ 118.074818][ T8825] fuse: Bad value for 'user_id' [ 118.569101][ T40] audit: type=1400 audit(1745500448.728:603): avc: denied { create } for pid=8845 comm="syz.5.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 118.577936][ T40] audit: type=1400 audit(1745500448.748:604): avc: denied { connect } for pid=8845 comm="syz.5.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 118.629122][ T40] audit: type=1400 audit(1745500448.788:605): avc: denied { write } for pid=8845 comm="syz.5.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 118.913052][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.099043][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.684'. [ 120.210970][ T5299] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 120.215499][ T5299] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 120.219310][ T5299] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 120.224092][ T5299] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 120.226773][ T5299] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 120.227133][ T8882] syzkaller1: entered promiscuous mode [ 120.232105][ T8882] syzkaller1: entered allmulticast mode [ 120.244869][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.689'. [ 120.248417][ T8882] netlink: 12 bytes leftover after parsing attributes in process `syz.5.689'. [ 120.253837][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.689'. [ 120.258045][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.689'. [ 120.385295][ T8878] chnl_net:caif_netlink_parms(): no params data found [ 120.492711][ T8878] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.494839][ T8878] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.497006][ T8878] bridge_slave_0: entered allmulticast mode [ 120.499470][ T8878] bridge_slave_0: entered promiscuous mode [ 120.509535][ T8878] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.513034][ T8878] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.515292][ T8878] bridge_slave_1: entered allmulticast mode [ 120.517925][ T8878] bridge_slave_1: entered promiscuous mode [ 120.553000][ T8878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.558684][ T8878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.576700][ T8905] netlink: 161716 bytes leftover after parsing attributes in process `syz.5.696'. [ 120.579725][ T8905] netlink: zone id is out of range [ 120.581887][ T8905] netlink: zone id is out of range [ 120.583539][ T8905] netlink: zone id is out of range [ 120.586412][ T8905] netlink: zone id is out of range [ 120.588674][ T8905] netlink: zone id is out of range [ 120.590591][ T8905] netlink: zone id is out of range [ 120.592930][ T8905] netlink: zone id is out of range [ 120.600380][ T40] audit: type=1400 audit(1745500450.758:606): avc: denied { create } for pid=8902 comm="syz.5.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 120.623928][ T8878] team0: Port device team_slave_0 added [ 120.627451][ T8878] team0: Port device team_slave_1 added [ 120.650404][ T8903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8903 comm=syz.4.695 [ 120.661827][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.685057][ T8878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.687243][ T8878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.695109][ T8878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.707654][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.715636][ T8878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.717861][ T8878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.725855][ T8878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.736933][ T8919] netlink: 'syz.4.698': attribute type 17 has an invalid length. [ 120.745832][ T40] audit: type=1400 audit(1745500450.908:607): avc: denied { watch watch_reads } for pid=8916 comm="syz.5.699" path="/175/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 120.770401][ T8878] hsr_slave_0: entered promiscuous mode [ 120.772887][ T8878] hsr_slave_1: entered promiscuous mode [ 120.779402][ T40] audit: type=1400 audit(1745500450.938:608): avc: denied { unmount } for pid=6767 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 120.792317][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.019083][ T46] bridge_slave_1: left allmulticast mode [ 121.021841][ T46] bridge_slave_1: left promiscuous mode [ 121.024471][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.030087][ T46] bridge_slave_0: left allmulticast mode [ 121.032907][ T46] bridge_slave_0: left promiscuous mode [ 121.035365][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.142839][ T8939] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8939 comm=syz.5.704 [ 121.282866][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.287338][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.291704][ T46] bond0 (unregistering): Released all slaves [ 121.301028][ T8934] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.437114][ T8948] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.706' sets config #0 [ 121.444112][ T8948] mkiss: ax0: crc mode is auto. [ 121.513386][ T8914] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 121.515641][ T8915] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 121.552670][ T40] audit: type=1400 audit(1745500451.718:609): avc: denied { setopt } for pid=8956 comm="syz.4.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.562097][ T40] audit: type=1400 audit(1745500451.718:610): avc: denied { ioctl } for pid=8956 comm="syz.4.707" path="socket:[32263]" dev="sockfs" ino=32263 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 121.586466][ T8960] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 121.590121][ T8960] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 121.639321][ T40] audit: type=1400 audit(1745500451.798:611): avc: denied { write } for pid=8964 comm="syz.4.710" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 121.657203][ T46] hsr_slave_0: left promiscuous mode [ 121.659574][ T46] hsr_slave_1: left promiscuous mode [ 121.662186][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.664916][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.668233][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.672187][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.704323][ T46] veth1_macvtap: left promiscuous mode [ 121.706249][ T46] veth0_macvtap: left promiscuous mode [ 121.708181][ T46] veth1_vlan: left promiscuous mode [ 121.711390][ T46] veth0_vlan: left promiscuous mode [ 122.032726][ T8985] __nla_validate_parse: 8 callbacks suppressed [ 122.032736][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 122.074139][ T8978] netlink: 56 bytes leftover after parsing attributes in process `syz.4.712'. [ 122.092475][ T8986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.280583][ T5299] Bluetooth: hci2: command tx timeout [ 122.370433][ T46] team0 (unregistering): Port device team_slave_1 removed [ 122.435222][ T46] team0 (unregistering): Port device team_slave_0 removed [ 122.770383][ T5299] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.943686][ T8878] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 122.949378][ T8878] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 122.954357][ T8878] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 122.958875][ T8878] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 123.025339][ T8878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.033706][ T8878] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.038328][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.040542][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.046449][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.048679][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.050586][ T40] audit: type=1400 audit(1745500453.208:612): avc: denied { shutdown } for pid=8991 comm="syz.2.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.110793][ T8995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.717'. [ 123.120425][ T8995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.717'. [ 123.277108][ T8878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.306410][ T8878] veth0_vlan: entered promiscuous mode [ 123.312946][ T8878] veth1_vlan: entered promiscuous mode [ 123.316398][ T9010] xt_SECMARK: invalid mode: 0 [ 123.344651][ T8878] veth0_macvtap: entered promiscuous mode [ 123.348090][ T8878] veth1_macvtap: entered promiscuous mode [ 123.360989][ T8878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.364219][ T8878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.365560][ T40] audit: type=1400 audit(1745500453.528:613): avc: denied { write } for pid=9014 comm="syz.4.724" name="btrfs-control" dev="devtmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 123.367166][ T8878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.380877][ T8878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.383918][ T8878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.387176][ T8878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.393843][ T8878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.398676][ T8878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.403797][ T8878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.407191][ T8878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.412204][ T8878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.416267][ T8878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.421585][ T8878] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.424325][ T8878] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.427181][ T8878] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.429875][ T8878] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.471974][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.474382][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.493727][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.499053][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.575124][ T9031] netlink: 'syz.4.729': attribute type 11 has an invalid length. [ 123.577535][ T9031] netlink: 'syz.4.729': attribute type 11 has an invalid length. [ 123.579821][ T9031] netlink: 224 bytes leftover after parsing attributes in process `syz.4.729'. [ 123.584895][ T9033] netlink: 'syz.4.729': attribute type 11 has an invalid length. [ 123.588633][ T9033] netlink: 'syz.4.729': attribute type 11 has an invalid length. [ 123.593405][ T9033] netlink: 224 bytes leftover after parsing attributes in process `syz.4.729'. [ 123.699436][ T40] audit: type=1400 audit(1745500453.858:614): avc: denied { remount } for pid=9041 comm="syz.2.732" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 123.931666][ T40] audit: type=1400 audit(1745500454.098:615): avc: denied { read } for pid=9052 comm="syz.2.736" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 123.979642][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.737'. [ 124.042123][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.740'. [ 124.059129][ T9061] 9pnet: Could not find request transport: xen [ 124.123387][ T9071] net_ratelimit: 46 callbacks suppressed [ 124.123397][ T9071] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 124.137232][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'. [ 124.140230][ T9066] ceph: No mds server is up or the cluster is laggy [ 124.480685][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.535900][ T9098] netlink: 36 bytes leftover after parsing attributes in process `syz.2.752'. [ 124.840692][ T5299] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.051394][ T9119] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 125.162101][ T24] kernel write not supported for file /snd/midiC2D0 (pid: 24 comm: kworker/2:0) [ 125.241386][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.244891][ T9132] netlink: 'syz.5.761': attribute type 21 has an invalid length. [ 125.250617][ T9132] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 125.252730][ T9132] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 125.255805][ T9132] vhci_hcd vhci_hcd.0: Device attached [ 125.258755][ T9132] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(10) [ 125.260848][ T9132] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 125.263572][ T9132] vhci_hcd vhci_hcd.0: Device attached [ 125.269641][ T9135] vhci_hcd: connection closed [ 125.269768][ T9133] vhci_hcd: connection closed [ 125.272421][ T1068] vhci_hcd: stop threads [ 125.275852][ T1068] vhci_hcd: release socket [ 125.277363][ T1068] vhci_hcd: disconnect device [ 125.279084][ T1068] vhci_hcd: stop threads [ 125.280588][ T1068] vhci_hcd: release socket [ 125.282259][ T1068] vhci_hcd: disconnect device [ 125.316361][ T9138] block device autoloading is deprecated and will be removed. [ 125.536467][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.918774][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 126.918783][ T40] audit: type=1400 audit(1745500457.078:625): avc: denied { map } for pid=9154 comm="syz.5.767" path="socket:[32587]" dev="sockfs" ino=32587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.920203][ T9155] rose0: entered allmulticast mode [ 126.922326][ T40] audit: type=1400 audit(1745500457.078:626): avc: denied { read } for pid=9154 comm="syz.5.767" path="socket:[32587]" dev="sockfs" ino=32587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.939849][ T40] audit: type=1400 audit(1745500457.078:627): avc: denied { ioctl } for pid=9154 comm="syz.5.767" path="socket:[32587]" dev="sockfs" ino=32587 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.993894][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 126.997885][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.001466][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.004121][ T9161] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 127.004214][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.012665][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.129177][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.175652][ T9160] chnl_net:caif_netlink_parms(): no params data found [ 127.238480][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.283879][ T40] audit: type=1400 audit(1745500457.448:628): avc: denied { ioctl } for pid=9194 comm="syz.2.779" path="socket:[36157]" dev="sockfs" ino=36157 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 127.297502][ T9160] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.299906][ T9160] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.303863][ T9160] bridge_slave_0: entered allmulticast mode [ 127.306495][ T9160] bridge_slave_0: entered promiscuous mode [ 127.309639][ T9160] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.312082][ T9160] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.314490][ T9160] bridge_slave_1: entered allmulticast mode [ 127.317063][ T9160] bridge_slave_1: entered promiscuous mode [ 127.327690][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.330597][ T9200] nbd: must specify at least one socket [ 127.362091][ T9160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.366564][ T9160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.391391][ T40] audit: type=1400 audit(1745500457.558:629): avc: denied { ioctl } for pid=9203 comm="syz.5.781" path="socket:[35331]" dev="sockfs" ino=35331 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 127.422475][ T9160] team0: Port device team_slave_0 added [ 127.427439][ T9160] team0: Port device team_slave_1 added [ 127.474438][ T9160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.477037][ T9160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.488870][ T9160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.493325][ T9160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.495556][ T9160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.504612][ T9160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.569232][ T9160] hsr_slave_0: entered promiscuous mode [ 127.572632][ T9160] hsr_slave_1: entered promiscuous mode [ 127.574766][ T9160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.577213][ T9160] Cannot create hsr debugfs directory [ 127.601223][ T40] audit: type=1800 audit(1745500457.768:630): pid=9223 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.5.786" name="/newroot/199/file0" dev="tmpfs" ino=1079 res=0 errno=0 [ 127.616859][ T9229] netlink: 'syz.4.787': attribute type 1 has an invalid length. [ 127.617238][ T9230] netlink: 'syz.4.787': attribute type 1 has an invalid length. [ 127.663768][ T9232] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 127.667042][ T9232] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 127.674082][ T9232] bond2: (slave wireguard0): making interface the new active one [ 127.676744][ T9232] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 127.680048][ T9232] netlink: 'syz.4.787': attribute type 39 has an invalid length. [ 127.686638][ T9230] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 127.694484][ T9230] bond2: (slave wireguard1): Enslaving as a backup interface with an up link [ 127.720115][ T9232] veth0_macvtap: left promiscuous mode [ 127.747820][ T13] bridge_slave_1: left allmulticast mode [ 127.749654][ T13] bridge_slave_1: left promiscuous mode [ 127.751591][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.755163][ T13] bridge_slave_0: left allmulticast mode [ 127.756960][ T13] bridge_slave_0: left promiscuous mode [ 127.758793][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.903401][ T9239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9239 comm=syz.4.789 [ 128.021665][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.026130][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.029670][ T13] bond0 (unregistering): Released all slaves [ 128.054036][ T9239] __nla_validate_parse: 1 callbacks suppressed [ 128.054048][ T9239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.789'. [ 128.092655][ T9242] netlink: 60 bytes leftover after parsing attributes in process `syz.4.790'. [ 128.194346][ T9242] bond0: (slave bond_slave_0): Releasing backup interface [ 128.309989][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.792'. [ 128.406666][ T40] audit: type=1400 audit(1745500458.568:631): avc: denied { accept } for pid=9261 comm="syz.4.793" lport=40891 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.414650][ T40] audit: type=1400 audit(1745500458.568:632): avc: denied { getopt } for pid=9261 comm="syz.4.793" lport=40891 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 128.433146][ T9262] kvm: kvm [9261]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 128.437319][ T13] hsr_slave_0: left promiscuous mode [ 128.441685][ T13] hsr_slave_1: left promiscuous mode [ 128.444288][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.446902][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.449749][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.453827][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.461032][ T9262] kvm: kvm [9261]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 128.464105][ T9262] kvm: kvm [9261]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 128.485452][ T13] veth1_macvtap: left promiscuous mode [ 128.487250][ T13] veth0_macvtap: left promiscuous mode [ 128.489035][ T13] veth1_vlan: left promiscuous mode [ 128.494070][ T13] veth0_vlan: left promiscuous mode [ 128.515515][ T9265] XFS (nullb0): Invalid superblock magic number [ 128.616782][ T40] audit: type=1400 audit(1745500458.778:633): avc: denied { watch_sb watch_reads } for pid=9271 comm="syz.2.794" path="/276/file0" dev="tmpfs" ino=1511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 128.697689][ T9277] trusted_key: encrypted_key: master key parameter is missing [ 128.710829][ T9277] rpc_pipefs: Unknown parameter 'cache' [ 128.733140][ T9281] netlink: 'syz.5.797': attribute type 1 has an invalid length. [ 129.094129][ T5953] Bluetooth: hci2: command tx timeout [ 129.206609][ T13] team0 (unregistering): Port device team_slave_1 removed [ 129.278946][ T13] team0 (unregistering): Port device team_slave_0 removed [ 129.786738][ T9281] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 129.791300][ T9284] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 129.898771][ T40] audit: type=1400 audit(1745500460.058:634): avc: denied { bind } for pid=9310 comm="syz.2.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.917053][ T9160] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 129.930420][ T9311] tmpfs: Invalid gid '0x00000000ffffffff' [ 129.937631][ T9160] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 129.944875][ T9160] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 129.949115][ T9160] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 129.997742][ T9160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.008506][ T9160] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.014855][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.017113][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.027112][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.029369][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.034302][ T9319] xt_cgroup: invalid path, errno=-2 [ 130.133813][ T9160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.152602][ T9160] veth0_vlan: entered promiscuous mode [ 130.162100][ T9160] veth1_vlan: entered promiscuous mode [ 130.175590][ T9160] veth0_macvtap: entered promiscuous mode [ 130.179387][ T9160] veth1_macvtap: entered promiscuous mode [ 130.190650][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.194121][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.196002][ T9338] loop9: detected capacity change from 0 to 522 [ 130.197154][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.197164][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.197174][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.209224][ T1249] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 130.209518][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.211767][ T1249] #PF: supervisor instruction fetch in kernel mode [ 130.211776][ T1249] #PF: error_code(0x0010) - not-present page [ 130.211781][ T1249] PGD 134ac067 P4D 134ac067 PUD 0 [ 130.211794][ T1249] Oops: Oops: 0010 [#1] SMP KASAN NOPTI [ 130.211805][ T1249] CPU: 2 UID: 0 PID: 1249 Comm: kworker/u32:11 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 130.220870][ T9160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.222244][ T1249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.224795][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.227693][ T1249] Workqueue: loop9 loop_rootcg_workfn [ 130.229970][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.233248][ T1249] [ 130.233254][ T1249] RIP: 0010:0x0 [ 130.233268][ T1249] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 130.233273][ T1249] RSP: 0018:ffffc90006bdfa38 EFLAGS: 00010246 [ 130.233282][ T1249] RAX: 0000000000000000 RBX: ffffffff8becf040 RCX: ffffffff86085915 [ 130.233288][ T1249] RDX: 1ffffffff17d9e0d RSI: ffffc90006bdfb28 RDI: ffff8880267c6128 [ 130.233294][ T1249] RBP: ffff8880267c6128 R08: 0000000000000005 R09: 0000000000000001 [ 130.233300][ T1249] R10: 0000000000000000 R11: 0000000000002be0 R12: ffffc90006bdfb28 [ 130.233307][ T1249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.233313][ T1249] FS: 0000000000000000(0000) GS:ffff8880d6bb2000(0000) knlGS:0000000000000000 [ 130.233334][ T1249] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.233343][ T1249] CR2: ffffffffffffffd6 CR3: 0000000025f10000 CR4: 0000000000352ef0 [ 130.233350][ T1249] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 130.233356][ T1249] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 130.233362][ T1249] Call Trace: [ 130.233365][ T1249] [ 130.233369][ T1249] lo_rw_aio.isra.0+0x9c2/0xd90 [ 130.233384][ T1249] ? __pfx_lo_rw_aio.isra.0+0x10/0x10 [ 130.236827][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.238305][ T1249] ? add_lock_to_list+0x9d/0x130 [ 130.241426][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.242112][ T1249] ? mark_held_locks+0x49/0x80 [ 130.243688][ T9160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.245484][ T1249] ? kthread_associate_blkcg+0x218/0x7b0 [ 130.248376][ T9160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.249826][ T1249] loop_process_work+0x8a4/0x10d0 [ 130.249841][ T1249] process_one_work+0x9cc/0x1b70 [ 130.249855][ T1249] ? __pfx_process_one_work+0x10/0x10 [ 130.252431][ T9160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.254774][ T1249] ? assign_work+0x1a0/0x250 [ 130.257256][ T9160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.259667][ T1249] worker_thread+0x6c8/0xf10 [ 130.262537][ T9160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.264476][ T1249] ? __kthread_parkme+0x19e/0x250 [ 130.309901][ T1249] ? __pfx_worker_thread+0x10/0x10 [ 130.311502][ T1249] kthread+0x3c2/0x780 [ 130.312774][ T1249] ? __pfx_kthread+0x10/0x10 [ 130.314223][ T1249] ? __pfx_kthread+0x10/0x10 [ 130.315662][ T1249] ? __pfx_kthread+0x10/0x10 [ 130.317096][ T1249] ? __pfx_kthread+0x10/0x10 [ 130.318549][ T1249] ? rcu_is_watching+0x12/0xc0 [ 130.320036][ T1249] ? __pfx_kthread+0x10/0x10 [ 130.321487][ T1249] ret_from_fork+0x45/0x80 [ 130.322888][ T1249] ? __pfx_kthread+0x10/0x10 [ 130.324331][ T1249] ret_from_fork_asm+0x1a/0x30 [ 130.325876][ T1249] [ 130.326859][ T1249] Modules linked in: [ 130.328081][ T1249] CR2: 0000000000000000 [ 130.329372][ T1249] ---[ end trace 0000000000000000 ]--- [ 130.331055][ T1249] RIP: 0010:0x0 [ 130.332160][ T1249] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 130.334422][ T1249] RSP: 0018:ffffc90006bdfa38 EFLAGS: 00010246 [ 130.336311][ T1249] RAX: 0000000000000000 RBX: ffffffff8becf040 RCX: ffffffff86085915 [ 130.338769][ T1249] RDX: 1ffffffff17d9e0d RSI: ffffc90006bdfb28 RDI: ffff8880267c6128 [ 130.341199][ T1249] RBP: ffff8880267c6128 R08: 0000000000000005 R09: 0000000000000001 [ 130.343654][ T1249] R10: 0000000000000000 R11: 0000000000002be0 R12: ffffc90006bdfb28 [ 130.346091][ T1249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.348516][ T1249] FS: 0000000000000000(0000) GS:ffff8880d6bb2000(0000) knlGS:0000000000000000 [ 130.351243][ T1249] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.353271][ T1249] CR2: ffffffffffffffd6 CR3: 0000000025f10000 CR4: 0000000000352ef0 [ 130.355722][ T1249] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 130.358150][ T1249] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 130.360584][ T1249] Kernel panic - not syncing: Fatal exception [ 130.362951][ T1249] Kernel Offset: disabled [ 130.364296][ T1249] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:31:40 Registers: info registers vcpu 0 CPU#0 RAX=ffffffffffffffff RBX=00007fadfc9b5fa0 RCX=ffffffffffffffa8 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=00007fadfc810ab1 RSP=00007fadfd61bff0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000246 R12=0000000000000000 R13=0000000000000000 R14=00007fadfc9b5fa0 R15=00007ffe4722cc18 RIP=00007fadfc654766 RFL=00000286 [--S--P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fadfd61c6c0 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fadfd5d9f98 CR3=000000004ff7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fadfc811a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fadfc811a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fadfc811a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fadfc811aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fadfc811b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fadfc811c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fadfc983488 00007fadfc983480 00007fadfc983478 00007fadfc983450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fadfd4ed100 00007fadfc983440 00007fadfc983458 00007fadfc9834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fadfc983498 00007fadfc983490 00007fadfc983488 00007fadfc983480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a6415c0 RCX=ffffc90007611000 RDX=0000000000080000 RSI=ffffffff81af3893 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900048477f8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100d4c82b9 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88806a53b040 RIP=ffffffff81af389f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f22857a66c0 ffffffff 00c00000 GS =0000 ffff8880d6ab2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fadfc97d2d8 CR3=0000000025f10000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4722cfa0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fadfc811a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fadfc811a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fadfc811a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fadfc811aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fadfc811b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fadfc811c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000073 RCX=ffffffff819b30f2 RDX=ffff888028782440 RSI=ffffffff819b30e0 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90006bdf560 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=72656b203a475542 R12=1ffff92000d7beae R13=0000000000000000 R14=ffff888043bcc880 R15=ffffc90006bdf628 RIP=ffffffff819b30e9 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bb2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000025f10000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2284a11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2284a11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2284a11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2284a11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2284a11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2284a11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2284b83488 00007f2284b83480 00007f2284b83478 00007f2284b83450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22856ed100 00007f2284b83440 00007f2284b80004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2284b83498 00007f2284b83490 00007f2284b83488 00007f2284b83480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000062 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854e4b05 RDI=ffffffff9ae264a0 RBP=ffffffff9ae26460 RSP=ffffc90004226c48 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=615f6e616d746162 R12=0000000000000000 R13=0000000000000062 R14=ffffffff9ae26460 R15=ffffffff854e4aa0 RIP=ffffffff854e4b2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555ef0c500 ffffffff 00c00000 GS =0000 ffff8880d6cb2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fadfc84db25 CR3=0000000023bb2000 CR4=00352ef0 DR0=0000840000000000 DR1=000000000000064f DR2=0000000000000006 DR3=0000000200000006 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020004000 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000001 0000002900000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c72211a5f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c72211a57 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c72211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c72211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c72211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c72211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c72211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c72211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 745f306874657600 305f6576616c735f 732500316576656e 656700306576656e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656700315f657661 6c735f7664617461 6200305f6576616c 735f766461746162 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000