last executing test programs: 2m20.989309209s ago: executing program 0 (id=294): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073"], 0x5c}}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000096000a00"], 0x30}}, 0x0) 2m20.869567929s ago: executing program 0 (id=296): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file2\x00', 0x240080, 0x1) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x103100, 0x0) ioctl$CDROM_CHANGER_NSLOTS(r1, 0x5328) mknodat(r0, &(0x7f00000000c0)='./file2\x00', 0x100, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000002100), 0x10000, 0x0) 2m20.794777138s ago: executing program 0 (id=298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000004c0)={r2, 0x1, 0x6, @broadcast}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x2, 0x1, 0x2de}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES32=r5], 0x7c}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r10, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffca}]}}]}, 0x3c}}, 0x44040) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r11, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x8082) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) r12 = io_uring_setup(0x3cae, &(0x7f00000000c0)={0x0, 0xc63b, 0x200, 0x0, 0x3}) io_uring_enter(r12, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000001400200000000000000000000000ffffe000fd6e08000a0000000004060002000100000014001f"], 0x5c}, 0x1, 0x620b}, 0x0) syz_io_uring_setup(0x4dc8, &(0x7f0000000040)={0x0, 0x391d, 0x10, 0x1, 0x26c}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x118, &(0x7f0000000280)=0x4, 0x0, 0x4) 2m20.47798807s ago: executing program 0 (id=304): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) write$vga_arbiter(r0, &(0x7f00000005c0), 0xf) r1 = socket(0x27, 0x6, 0x8) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a000000000000000000000014000500000000000b"], 0x30}, 0x1, 0x11}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x752f) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) sendmmsg(r1, &(0x7f0000000340)=[{{&(0x7f0000000040)=@nfc={0x27, r3, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="d33c1683d042b4e8f60f25043835f3f6b22afb6a0551f852b12bfa3d471b0347a1e32fe99eb1b07689cf51169f52a9ca3749877bca1585e4518e137874a2b6c710305c4e7442e72173bf1081f4ef9f3655e92eae201177167425f4e658e3ad5444f308e7da8c8c2574d9aa20bb1a620cfc6c2c86f358d0341e46a05fb6a0", 0x7e}, {&(0x7f0000000180)="3780c503398ce7dec9887e91c3a76df710737fb55c5d15ce499c035e30e8134550ef07568096565c497506573f10c2bfd147918a22858a0e155dfa37e95f7b24f132a7892aa3b940fcde1c32c03febcc3a1ce76dad8a623941aedd8bd7bf79953aa32ceecace360b336234254f37bec1fd2dff8b87f228", 0x77}, {&(0x7f0000000200)="ee8cebccb9756f2cfaa7b152419ecd9b5a12d0091b2aaf707ada2c565e53c2961cc9c7be813439980e5d3364522dd1083b6cbb3c2fc2a270465953a58bed890c3249b39ebabd27d823b81568af0b68e66202ffe120ebea525f11e3a26711f4210b6579670eb055dc4eb2f285e7c1", 0x6e}, {&(0x7f0000000280)="e2231fbfbd1a4199ec1808ca7f4373763d8245a380f5f836cc56802be53494b0966a6dc96a98ef36ebacf49bf05494279a626deb1468a3f9278654111494f8c82f2e215be8c53888c89647298eaca03f48c20fd9", 0x54}], 0x4}}], 0x1, 0x810) recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 2m20.308297493s ago: executing program 0 (id=308): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), 0xffffffffffffffff) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}}, 0x4810) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x8, 0x1, 0x1, 0x4, 0x8, 0x9}, 0x20) 2m20.187596562s ago: executing program 0 (id=310): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000080)=0x5, 0x4) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x200080, 0x108) mmap$IORING_OFF_SQ_RING(&(0x7f00005dc000/0x4000)=nil, 0x4000, 0x4, 0x40010, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x20, &(0x7f00000006c0)={[{@nfs_export_off, 0x3a}], [], 0x2f}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000d91486779c010fc03d7c173753"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x62) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x62) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r3, &(0x7f00000010c0)={0x1d, r4, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfff6, 0xffeb}, {0xa, 0x1}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r8 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20000, 0x4c) getdents(r8, &(0x7f00000001c0)=""/169, 0xa9) r9 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r11, 0x4004556a, 0x7) 2m11.599761293s ago: executing program 1 (id=423): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001200)=ANY=[@ANYBLOB="280000001d0007"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x8000) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r5, &(0x7f0000000640)='\x00', 0x89901) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) dup(r1) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001200)=ANY=[@ANYBLOB="280000001d0007"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x8000) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) (async) open_tree(r5, &(0x7f0000000640)='\x00', 0x89901) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) (async) 2m11.066999162s ago: executing program 1 (id=426): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)=@newqdisc={0x94, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x0, 0x0, 0x0, 0x1, 0x5, 0xf}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xda, 0x7, 0x7, 0xf7680, 0xffffffff}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x5, 0x0, 0x4e71, 0x2b7, 0x5}}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x700, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffc604}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0xc0) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0x1ffe, 0x80, 0x3231564e, 0x3, [0x2], [0x1, 0xffffffff, 0x4ec], [0x0, 0x0, 0x0, 0xfffffffc], [0xa1d6]}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r5, 0x6, 0x24, 0x0, &(0x7f00000000c0)=0x3) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x50, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbce2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x0) 2m10.68861695s ago: executing program 1 (id=429): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = io_uring_setup(0x7276, &(0x7f00000000c0)={0x0, 0x2c8e, 0x10, 0x3, 0x2e0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000000)) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r5 = dup3(r4, r2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x10000000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000800)={0x54, 0x0, &(0x7f0000000700)=[@decrefs={0x40046307, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x2, 0x2, 0x1b}, @fda={0x66646185, 0x1, 0x1, 0x4}, @fd}, &(0x7f0000000300)={0x0, 0x20, 0x40}}, 0x1040}], 0x0, 0x0, 0x0}) io_uring_enter(r1, 0x3a1a, 0x253f, 0x2, 0x0, 0x0) dup2(r0, r1) (async) syz_usb_disconnect(0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000061113000000000004600feff000000009500000000000000649ff70dfe878ebb75378a8885ba0afbb60755973d2a599a09eb827ab37fb507457c17af452c4f4a5cfcc75dc28bbf69211cfab6431b17d7d8394e3d3b0c58d3c36742182da809bd836017d47b07421aa00020b16ea2eb9aba371f2904f542207c"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m10.556767756s ago: executing program 1 (id=430): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x585c01, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000005c0), 0x1000000, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) syz_clone(0x14000, &(0x7f0000000640)="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", 0x1000, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000480)="177177c36046ad3c8d4f97d8d0ec22d0f9631538798015a43535b1d1fffb0ab927c012d6d9a6a9755f0172038af7180ac37f940cc74e5a6aabe91df214e50934d2a60c24c4c0c830cc4d6f529dfdbb1eaa8402722ba0cc8f10c1e954d65fdf8b5de642b6fd3c96c451397da1ad4586102d35db31bcad38dc62b03514d8d165fb0194175ba4f339ebbb81f0b9a26b2cdc45dcb2faac6c1ce3b54624624ad34a68616db9ce068ca064ba847ebd1a4ef8645639ccf6e3d3b4ef7d5a042cefb2a1f79446b37e69e81c5c2142dfb36fb6bbaa4e0de5534a3163e82da8fec8") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x20000000, 0x0, 0x5}, 0x2}) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) lseek(r2, 0x0, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000998000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000004680)}, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) r4 = syz_open_dev$evdev(&(0x7f0000001e00), 0x1, 0x80) ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f0000001e40)=""/161) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) close$binfmt(r2) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) poll(&(0x7f0000000200)=[{r0, 0x1}, {r1, 0x4090}, {r0, 0x5000}, {r3, 0x24}, {r5}], 0x5, 0x9) 2m10.38973186s ago: executing program 1 (id=432): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000180)) bind$alg(r1, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) r4 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000050}], 0x1, 0x40000) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/2, 0x20}], 0xb}}], 0x2, 0x42, 0x0) r5 = semget$private(0x0, 0x4000000009, 0x208) semop(r5, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) semctl$SETALL(r5, 0x0, 0x11, 0x0) semctl$IPC_RMID(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r11 = dup2(r9, r10) r12 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r7}, 0x8) splice(r0, &(0x7f0000000100)=0x1, r12, &(0x7f0000000240)=0x2e599bb9, 0x42, 0xc) ioctl$KVM_CAP_SPLIT_IRQCHIP(r11, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0xb96}) sendmmsg$inet(r9, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x2000c000) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000300)) 2m10.169537821s ago: executing program 1 (id=435): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x18, 0x140c, 0x335, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004081}, 0xc810) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 2m10.086548217s ago: executing program 32 (id=435): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x18, 0x140c, 0x335, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004081}, 0xc810) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 1m52.39170387s ago: executing program 33 (id=310): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000080)=0x5, 0x4) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x200080, 0x108) mmap$IORING_OFF_SQ_RING(&(0x7f00005dc000/0x4000)=nil, 0x4000, 0x4, 0x40010, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x20, &(0x7f00000006c0)={[{@nfs_export_off, 0x3a}], [], 0x2f}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000d91486779c010fc03d7c173753"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x62) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x62) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r3, &(0x7f00000010c0)={0x1d, r4, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfff6, 0xffeb}, {0xa, 0x1}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r8 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20000, 0x4c) getdents(r8, &(0x7f00000001c0)=""/169, 0xa9) r9 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r11, 0x4004556a, 0x7) 1m51.979713184s ago: executing program 3 (id=472): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(seed-generic)\x00'}, 0x58) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/189, 0xbd}, {&(0x7f0000000340)=""/152, 0x98}], 0x2, &(0x7f0000000100)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0x1, 0x20, &(0x7f0000000400)) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0xfffffffd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4d79b1dd"}, 0x0, 0x1, {0x0}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14}}, 0x54}}, 0x0) (async, rerun: 64) sendmmsg$inet(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)="1d2f", 0x2}], 0x1}}], 0x1, 0x400c5) (rerun: 64) 1m51.448630907s ago: executing program 3 (id=476): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getstat={0xe0, 0x15, 0x2, 0x70bd29, 0x0, {{'digest_null-generic\x00'}, '\x00', '\x00', 0x0, 0x2400}}, 0xe0}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00fa40", @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000c00a600000000000000000008000100"], 0x3c}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xf0}}, 0x20000800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x183780, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_io_uring_complete(0x0) read$qrtrtun(r3, &(0x7f0000000c80)=""/4096, 0x1000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x3) r6 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000200)={0xb6, 0x0, 0x8}) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m51.07728225s ago: executing program 3 (id=478): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x2, 0x4018831, 0xffffffffffffffff, 0x0) userfaultfd(0x1) (async) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) (async) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="306597ae63bd678b8e3c17a09ca13e8081d5e68135bdc0a8", 0x0, 0x18) r2 = syz_io_uring_setup(0xe41, &(0x7f0000000140)={0x0, 0x2119, 0x1000}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x40102, 0x0, 0x3d}, &(0x7f0000000040)='./file0/file0\x00', 0xff52}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000140)="b74a974f8561495f90b9f7918c1c1b1aed923cd1f49d66083ee602e099d7201ff9f67cc5ae9e78ab5280c86fb29d57ec411d65a58cd9d5126ab595e5842b5813b171dc4618467d28", 0x0, 0x48) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000140)="b74a974f8561495f90b9f7918c1c1b1aed923cd1f49d66083ee602e099d7201ff9f67cc5ae9e78ab5280c86fb29d57ec411d65a58cd9d5126ab595e5842b5813b171dc4618467d28", 0x0, 0x48) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) stat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)) (async) stat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) statx(0xffffffffffffffff, &(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x100, &(0x7f0000001480)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000001640)={{0x1, 0x1, 0x18, r6, {r7, r8}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r9, &(0x7f0000000080), 0x8) (async) read$eventfd(r9, &(0x7f0000000080), 0x8) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) 1m50.828385179s ago: executing program 3 (id=481): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000001c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x9, 0x6, 0x80000000, 0x7, 0x1, 0x20000000000000, 0x200000000000, 0x6, 0x7fffffff}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000400)='syscall\x00') fcntl$lock(r0, 0x26, &(0x7f0000000140)={0x0, 0x1, 0x71f, 0x7, r1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) 1m50.603330852s ago: executing program 3 (id=482): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000030c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[@authinfo={0x12, 0x84, 0x6, {0x6}}], 0x18, 0x5}], 0x1, 0x20040014) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) 1m50.379645838s ago: executing program 3 (id=485): mkdir(&(0x7f0000000100)='./file0\x00', 0x1bd) (async) r0 = dup(0xffffffffffffffff) (async) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000b88ae4ef00000001000000080005"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket(0x1, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) (async) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)}, 0x0) r4 = accept4$unix(r3, &(0x7f00000000c0), &(0x7f0000000040)=0x6e, 0x800) sendmmsg$unix(r4, 0x0, 0x0, 0x0) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='xfs\x00', 0x200013, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r5}, 0x10) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x40}, '.\x00'}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="757bd16804c42c6e6f3d", @ANYRESOCT=r6, @ANYBLOB=',p=', @ANYRESDEC]) 1m50.307336939s ago: executing program 34 (id=485): mkdir(&(0x7f0000000100)='./file0\x00', 0x1bd) (async) r0 = dup(0xffffffffffffffff) (async) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000b88ae4ef00000001000000080005"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket(0x1, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) (async) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)}, 0x0) r4 = accept4$unix(r3, &(0x7f00000000c0), &(0x7f0000000040)=0x6e, 0x800) sendmmsg$unix(r4, 0x0, 0x0, 0x0) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='xfs\x00', 0x200013, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r5}, 0x10) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x40}, '.\x00'}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="757bd16804c42c6e6f3d", @ANYRESOCT=r6, @ANYBLOB=',p=', @ANYRESDEC]) 41.147121501s ago: executing program 6 (id=633): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@alg={0xe0, 0x10, 0x1, 0x0, 0x3, {{'aegis128\x00'}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008004) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x800488, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8c200}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@del={0x100, 0x11, 0x401, 0x70bd25, 0x25dfdbfe, {{'cbc(blowfish)\x00'}, '\x00', '\x00', 0x2400, 0xc00}, [{0x8, 0x1, 0x4}, {0x8}, {0x8, 0x1, 0x200}, {0x8, 0x1, 0xfff}]}, 0x100}, 0x1, 0x0, 0x0, 0x24000004}, 0x4c000) 19.175168694s ago: executing program 6 (id=633): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@alg={0xe0, 0x10, 0x1, 0x0, 0x3, {{'aegis128\x00'}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008004) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x800488, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8c200}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@del={0x100, 0x11, 0x401, 0x70bd25, 0x25dfdbfe, {{'cbc(blowfish)\x00'}, '\x00', '\x00', 0x2400, 0xc00}, [{0x8, 0x1, 0x4}, {0x8}, {0x8, 0x1, 0x200}, {0x8, 0x1, 0xfff}]}, 0x100}, 0x1, 0x0, 0x0, 0x24000004}, 0x4c000) 19.175107437s ago: executing program 6 (id=633): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@alg={0xe0, 0x10, 0x1, 0x0, 0x3, {{'aegis128\x00'}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008004) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x800488, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8c200}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@del={0x100, 0x11, 0x401, 0x70bd25, 0x25dfdbfe, {{'cbc(blowfish)\x00'}, '\x00', '\x00', 0x2400, 0xc00}, [{0x8, 0x1, 0x4}, {0x8}, {0x8, 0x1, 0x200}, {0x8, 0x1, 0xfff}]}, 0x100}, 0x1, 0x0, 0x0, 0x24000004}, 0x4c000) 18.992011078s ago: executing program 6 (id=633): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@alg={0xe0, 0x10, 0x1, 0x0, 0x3, {{'aegis128\x00'}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008004) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x800488, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8c200}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@del={0x100, 0x11, 0x401, 0x70bd25, 0x25dfdbfe, {{'cbc(blowfish)\x00'}, '\x00', '\x00', 0x2400, 0xc00}, [{0x8, 0x1, 0x4}, {0x8}, {0x8, 0x1, 0x200}, {0x8, 0x1, 0xfff}]}, 0x100}, 0x1, 0x0, 0x0, 0x24000004}, 0x4c000) 10.21379701s ago: executing program 6 (id=633): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@alg={0xe0, 0x10, 0x1, 0x0, 0x3, {{'aegis128\x00'}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008004) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x800488, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8c200}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@del={0x100, 0x11, 0x401, 0x70bd25, 0x25dfdbfe, {{'cbc(blowfish)\x00'}, '\x00', '\x00', 0x2400, 0xc00}, [{0x8, 0x1, 0x4}, {0x8}, {0x8, 0x1, 0x200}, {0x8, 0x1, 0xfff}]}, 0x100}, 0x1, 0x0, 0x0, 0x24000004}, 0x4c000) 2.220468851s ago: executing program 6 (id=633): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@alg={0xe0, 0x10, 0x1, 0x0, 0x3, {{'aegis128\x00'}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008004) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x800488, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8c200}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@del={0x100, 0x11, 0x401, 0x70bd25, 0x25dfdbfe, {{'cbc(blowfish)\x00'}, '\x00', '\x00', 0x2400, 0xc00}, [{0x8, 0x1, 0x4}, {0x8}, {0x8, 0x1, 0x200}, {0x8, 0x1, 0xfff}]}, 0x100}, 0x1, 0x0, 0x0, 0x24000004}, 0x4c000) 773.967505ms ago: executing program 5 (id=1291): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x2) mount$overlay(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000280), 0x0, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_require}, {@nfs_export_on}]}) 773.233527ms ago: executing program 4 (id=1292): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0xf4, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x8, 0xffff}, {0x6, 0x3}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x4, 0x8001, 0xfffffffd, 0x0, 0x2, 0x6, 0x2}}, {0x8, 0x2, [0x9, 0x800]}}, {{0x1c, 0x1, {0x5, 0x9, 0x8, 0x0, 0x1, 0x8595, 0x9, 0xa}}, {0x18, 0x2, [0x6, 0x4, 0x8001, 0xe3, 0xfff7, 0x5c87, 0x7ff, 0x0, 0x8003, 0x1c]}}, {{0x1c, 0x1, {0x2, 0xff, 0x8, 0x3, 0x2, 0x7, 0xfffffff7}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x4, 0x40, 0x3, 0x2, 0xffffff3d, 0x4, 0x3}}, {0xa, 0x2, [0xa5, 0x8, 0xc]}}, {{0x1c, 0x1, {0xd, 0x4, 0xe, 0x7, 0x1, 0x400, 0x5, 0x2}}, {0x8, 0x2, [0x0, 0x9]}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 769.854345ms ago: executing program 2 (id=1293): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x40, 0x20, 0x5, 0x0, {{0xa, 0x4, 0x1, 0x7, 0x28, 0x66, 0x0, 0x6, 0x4, 0x0, @empty, @private=0xa010100, {[@timestamp={0x44, 0x4, 0x96, 0x0, 0x5}, @lsrr={0x83, 0xf, 0x25, [@local, @multicast2, @private=0xa010101]}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xfff1, 0xffff}, {0x1b6dd91e85e94ce1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff3, 0xffff}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000280)=0x5d, 0x4) setsockopt$sock_attach_bpf(r11, 0x1, 0x34, &(0x7f0000009000)=r10, 0x4) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x18, r12, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x4028050) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000000d14100028bd7000fbdb042508000001000000080003000100000008000300020000000800010002000000080001000200000008000300020000000800010002000000080001000000000008003e000100000051bc0c7a4375287adc01c4e02481903aa81bf20ab6e55fffb9fd0e4adf8e734a6a5b3870705f4878f3b1a016ba53ea600a0f46783a5c7c9fdeb8e4a4f60eddee6dd3d71687b08852b1000000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x8081}, 0x8e0) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r12, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x4001) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x80060, &(0x7f0000000080)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x32]}}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@gettfilter={0x44, 0x2e, 0x4, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xf, 0xfff3}, {0x3, 0x3}, {0x0, 0xc}}, [{0x8}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xf98}, {0x8, 0xb, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r13 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mreq(r13, 0x29, 0x1e, 0x0, &(0x7f00000004c0)) socket$can_j1939(0x1d, 0x2, 0x7) 674.122167ms ago: executing program 5 (id=1294): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002ac0)={{&(0x7f0000002000/0x3000)=nil, 0x3000}, 0x5}) madvise(&(0x7f000022d000/0x2000)=nil, 0x2000, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000002b00)={0x2020}, 0x2020) 510.976768ms ago: executing program 2 (id=1295): r0 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x24}}, 0x1c) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x24}}, 0x1c) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r1 = io_uring_setup(0x67bb, &(0x7f0000000300)={0x0, 0x4, 0x0, 0xfffffffd}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) io_uring_enter(r1, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='gfs2meta\x00', 0x200013, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020) syz_open_dev$vim2m(&(0x7f00000000c0), 0x380000000000004, 0x2) (async) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x380000000000004, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x1, "110100005c000000463300", 0x49433553}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x1, "110100005c000000463300", 0x49433553}) 510.606593ms ago: executing program 4 (id=1296): r0 = socket(0x40000000015, 0xa, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getpeername$inet(r0, 0x0, &(0x7f0000000040)) 402.68767ms ago: executing program 4 (id=1297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) keyctl$session_to_parent(0x12) (async) keyctl$session_to_parent(0x12) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_USERDATA={0x22, 0x7, 0x1, 0x0, "6a294ea4c83909551ac458a8b2a44ab571777c661b427450a8f4e10d6ac7"}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x40}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0x47, 0x7, 0x1, 0x0, "4a286cf125713c7e5864e6ca39c2ac12a75f9d17707fd522b785abb57cb24d902835b6300ce2feb21449f21a01873feb77ee5e055d3047fb2fa665407124b181a976fa"}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x9c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x800}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8000}]}, @NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x398}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x936}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x1bc}}, 0x20008090) 402.329705ms ago: executing program 2 (id=1298): pipe2(&(0x7f0000000840)={0xffffffffffffffff}, 0x0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) (async) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x130, r2, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x62}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x108, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf5, 0x3, "82599451367471a7f6e47c4a4c4f8f70dc86b593875331605aadd5f57a0c1df6aeaacfa8885fbd8879e7144a6ec848a36552cc06c39ee8e8d5cb2176d0f10f79e1ccc0db08dd784340dc79c33727ff1f0cd629079216c55cbb73e281d7a05edbf1c993922eb962290851724c1ec67d2e506e93a0345b467f9b9e061ae3d3869130e7aa255850013c4b3ca1d9cab44e9733060ec9692f58fb7cd61a0f92335ee6c7e1a42f7efe97a3d860fc640700ccf9fc8f7bb6209d7639d9f4b15dfaa4322f839c060d684811225d9a78c34bc2a9fbf3c837a243279f7f4c58600273cedc47f6ea7d37058587e31b10dad4a91cc8a65a"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000600)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = syz_io_uring_setup(0x121e, &(0x7f0000000500)={0x0, 0x7d10, 0x400, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) socket(0x15, 0x2, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x40) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r8, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_TSC_KHZ(r7, 0xaea2, 0x80000001) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x30, r2, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@void, @val={0xc, 0x99, {0x9, 0x67}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) listen(r1, 0x50) (async) r11 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r11, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) listen(r11, 0x50) (async) r12 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r12, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) 401.782654ms ago: executing program 5 (id=1299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x705b43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000000000000ffff0000feffffff4fa6100200"/45]) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000035000000560000022500000019000a00100000ad07fd17e5ffff080c38000000000000000a", 0x39}], 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) ioctl$KVM_HAS_DEVICE_ATTR_vm(r2, 0x4018aee3, &(0x7f0000000100)=@attr_other={0x0, 0x5000, 0x5, &(0x7f00000000c0)=0x800}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0], &(0x7f0000000200), 0x1, r9, 0xcccccccc}) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x18, 0x3a, 0xff, @private2, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r9], &(0x7f0000000200), &(0x7f00000000c0)=[r10], &(0x7f0000000040), 0x0, 0x9}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r5, 0xc01064c1, &(0x7f0000000040)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 283.758796ms ago: executing program 4 (id=1300): r0 = socket$kcm(0x2d, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)) close(0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r3, 0x29, 0xcf, 0x0, &(0x7f0000000100)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r10 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r10, r10, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 283.310894ms ago: executing program 2 (id=1301): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0xe, 0x8}}}, 0x24}}, 0x40004) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0x0, 0x0, 0x400d1}, 0x84) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f00009cc000/0x3000)=nil) 193.095068ms ago: executing program 5 (id=1302): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000011c0), 0x2000, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000000)) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000000)='\\@$\x00', 0x4) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x18}, @local, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af297baebb0efa284da1403011a00", 0x0, 0x4, 0x81, 0x6}, 0x3c) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_disconnect={0x80}) ioctl$SNDCTL_MIDI_INFO(r4, 0xc074510c, &(0x7f0000000140)={"23b2d10eefb250e060d6fa601f6736121369b266d7dbd72a89d61aae5d74", 0x8, 0x800, 0x4, [0x80000000, 0x0, 0x0, 0x5, 0x9, 0xce, 0x5, 0xffffff9c, 0x2, 0x2, 0x1, 0x2, 0x3, 0x800, 0x2, 0x5, 0x8, 0x2]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$CDROMPLAYTRKIND(r2, 0x5304, &(0x7f0000000040)={0x4d, 0x8, 0x5, 0x8}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000080)) 192.649626ms ago: executing program 2 (id=1303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58c04"]) r4 = syz_open_dev$video(&(0x7f0000000040), 0x6, 0x101000) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000140)={0x0, "cc8f07e27bfd847bae3821b60174201abce2dfcb1d7cb7d7072316ffeacec185", 0x3, 0x0, 0x1, 0xc00000, 0x20002, 0x8}) 93.395223ms ago: executing program 5 (id=1304): r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x8001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000190095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) (async) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8d6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) 93.121168ms ago: executing program 4 (id=1305): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) 1.077484ms ago: executing program 5 (id=1306): r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, 0x0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1d1142, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r5, &(0x7f0000000540), 0xfffffdd8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 375.134µs ago: executing program 2 (id=1307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000013c0)="b9ff03316844268cb89e14f00800", 0x0, 0x51, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="03", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="000200000000000007"], 0x20) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r8], 0x398}}, 0x0) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000001100)=""/240) (async, rerun: 32) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000005"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x24000074) (rerun: 32) 0s ago: executing program 4 (id=1308): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000003840)=[{{&(0x7f00000006c0)={0xa, 0x4e24, 0x0, @empty, 0xa}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)="8000102ebf77d401", 0x8}], 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x18}}], 0x1, 0x240080c4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f0000000080)={0x8, r5}) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, 0x0, 0x0) (async) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x83) (async) ioctl$sock_netdev_private(r8, 0x8924, &(0x7f0000000000)) (async) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0xb, 0xffffffffffffffff, 0x0, r5}) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="c50f2abd703eebd982080003559ad4ffb74a25fee3638bf0ea092b8b16703906aacaef04136ce0f7208d37ecb7691f5663242aef72244544603070ab828811ba2d0135bd3671acefb96b58618027387941f5edf992cddfd3b1279c5a2d49012104000000000000009458815dd00104d935bfe00d9479daf47e69490c77833a9103eb54198d9040fcb2a1b9a717f8d142a1b4f796a44c91be4867431d083bb6a4d8a58a73f30e7959195c24ae3765a7d32d368a034ab647f2b4c8084cb7cd1db8b84ac820", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb080045000038521a98a1"], 0x0) (async) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r9, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r9, 0x8949, &(0x7f0000000000)) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r10, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) kernel console output (not intermixed with test programs): tor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.026753][ T40] audit: type=1400 audit(1747723154.701:20777): avc: denied { ioctl } for pid=7519 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.040124][ T40] audit: type=1400 audit(1747723154.711:20778): avc: denied { create } for pid=9374 comm="syz.5.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.070012][ T9304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.076214][ T9304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.125735][ T9381] binder: 9378:9381 ioctl 5000940f 200000000dc0 returned -22 [ 158.138670][ T9381] binder_alloc: binder_alloc_mmap_handler: 9378 200000ffc000-200000ffd000 already mapped failed -16 [ 158.142772][ T9304] team0: Port device team_slave_0 added [ 158.157763][ T9304] team0: Port device team_slave_1 added [ 158.237421][ T9304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.239785][ T9304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.250086][ T9304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.252659][ T9304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.252668][ T9304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.252690][ T9304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.320103][ T9304] hsr_slave_0: entered promiscuous mode [ 158.322469][ T9304] hsr_slave_1: entered promiscuous mode [ 158.325793][ T9304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.328310][ T9304] Cannot create hsr debugfs directory [ 158.559915][ T57] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 158.720099][ T57] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.724279][ T57] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.728077][ T57] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 158.731492][ T57] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.736699][ T57] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.740637][ T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.747364][ T57] usb 9-1: config 0 descriptor?? [ 158.905548][ T9304] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 158.914183][ T9304] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 158.923808][ T9304] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 158.929891][ T9304] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 159.025594][ T9304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.045256][ T9304] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.054946][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.057396][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.066260][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.068673][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.168867][ T9396] netlink: 'syz.4.926': attribute type 1 has an invalid length. [ 159.188387][ T9396] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.198208][ T9396] erspan0: entered allmulticast mode [ 159.494024][ T5942] Bluetooth: hci1: command tx timeout [ 159.504190][ T837] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 159.508079][ T9304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.656854][ T837] usb 10-1: too many configurations: 151, using maximum allowed: 8 [ 159.720270][ T837] usb 10-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 159.724363][ T837] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 159.727953][ T837] usb 10-1: Product: syz [ 159.729952][ T837] usb 10-1: Manufacturer: syz [ 159.732154][ T837] usb 10-1: SerialNumber: syz [ 159.738285][ T837] usb 10-1: config 0 descriptor?? [ 159.805798][ T9430] netlink: 'syz.2.934': attribute type 10 has an invalid length. [ 159.979515][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.5.932'. [ 159.983972][ T2297] usb 10-1: USB disconnect, device number 2 [ 160.222557][ T9304] veth0_vlan: entered promiscuous mode [ 160.236531][ T9304] veth1_vlan: entered promiscuous mode [ 160.273139][ T9304] veth0_macvtap: entered promiscuous mode [ 160.280283][ T9304] veth1_macvtap: entered promiscuous mode [ 160.300408][ T9304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.309095][ T9304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.317394][ T9304] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.320269][ T9304] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.323090][ T9304] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.326070][ T9304] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.401890][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.404615][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.433588][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.436563][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.603250][ T9437] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 160.607259][ T9437] SELinux: failed to load policy [ 160.648676][ T9439] netlink: 20 bytes leftover after parsing attributes in process `syz.2.936'. [ 160.709154][ T9443] netlink: 'syz.2.938': attribute type 12 has an invalid length. [ 160.772641][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.939'. [ 160.778635][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.939'. [ 160.866757][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.5.940'. [ 161.225871][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.943'. [ 161.328632][ T57] usbhid 9-1:0.0: can't add hid device: -71 [ 161.330715][ T57] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 161.334201][ T57] usb 9-1: USB disconnect, device number 4 [ 161.353389][ T9463] netlink: 60 bytes leftover after parsing attributes in process `syz.5.944'. [ 161.356770][ T9463] unsupported nlmsg_type 40 [ 161.456662][ T9467] syz.5.946: attempt to access beyond end of device [ 161.456662][ T9467] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 161.461125][ T9467] EXT4-fs (loop5): unable to read superblock [ 161.592506][ T9472] sp0: Synchronizing with TNC [ 161.917854][ T1150] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.939792][ T9488] netlink: 28 bytes leftover after parsing attributes in process `syz.5.951'. [ 161.943177][ T9488] netlink: 28 bytes leftover after parsing attributes in process `syz.5.951'. [ 162.584805][ T1150] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.803798][ T5940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.809207][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.813582][ T5940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.820881][ T5940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 162.826886][ T5940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.905178][ T1150] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.908861][ T40] kauditd_printk_skb: 793 callbacks suppressed [ 162.908877][ T40] audit: type=1400 audit(1747723159.619:21572): avc: denied { bpf } for pid=9514 comm="syz.4.957" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.921448][ T40] audit: type=1400 audit(1747723159.619:21573): avc: denied { perfmon } for pid=9514 comm="syz.4.957" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.931552][ T40] audit: type=1400 audit(1747723159.619:21574): avc: denied { bpf } for pid=9514 comm="syz.4.957" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.932303][ T9517] trusted_key: encrypted_key: insufficient parameters specified [ 162.940438][ T40] audit: type=1400 audit(1747723159.619:21575): avc: denied { perfmon } for pid=9514 comm="syz.4.957" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.940494][ T40] audit: type=1400 audit(1747723159.619:21576): avc: denied { bpf } for pid=9514 comm="syz.4.957" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.940534][ T40] audit: type=1400 audit(1747723159.619:21577): avc: denied { perfmon } for pid=9514 comm="syz.4.957" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.940571][ T40] audit: type=1400 audit(1747723159.619:21578): avc: denied { bpf } for pid=9514 comm="syz.4.957" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.940609][ T40] audit: type=1400 audit(1747723159.619:21579): avc: denied { perfmon } for pid=9514 comm="syz.4.957" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.940647][ T40] audit: type=1400 audit(1747723159.619:21580): avc: denied { bpf } for pid=9514 comm="syz.4.957" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.940685][ T40] audit: type=1400 audit(1747723159.629:21581): avc: denied { perfmon } for pid=9514 comm="syz.4.957" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.943290][ T9503] vxcan1 speed is unknown, defaulting to 1000 [ 162.959514][ T9518] trusted_key: encrypted_key: insufficient parameters specified [ 163.066209][ T1150] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.107249][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.959'. [ 163.111080][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.959'. [ 163.114033][ T9521] netlink: 'syz.4.959': attribute type 18 has an invalid length. [ 163.220121][ T1150] bridge_slave_1: left allmulticast mode [ 163.222004][ T1150] bridge_slave_1: left promiscuous mode [ 163.224918][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.232040][ T1150] bridge_slave_0: left allmulticast mode [ 163.233935][ T1150] bridge_slave_0: left promiscuous mode [ 163.236696][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.263823][ T9533] tipc: Failed to remove unknown binding: 66,1,1/0:644816327/644816329 [ 163.268216][ T9533] tipc: Failed to remove unknown binding: 66,1,1/0:644816327/644816329 [ 163.593014][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.601778][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.609395][ T1150] bond0 (unregistering): Released all slaves [ 163.864242][ T9503] chnl_net:caif_netlink_parms(): no params data found [ 163.924512][ T9558] vxcan1 speed is unknown, defaulting to 1000 [ 163.942155][ T9564] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 163.945608][ T9560] lo: entered promiscuous mode [ 163.948762][ T9560] tunl0: entered promiscuous mode [ 163.951602][ T9560] gre0: entered promiscuous mode [ 163.954161][ T9560] gretap0: entered promiscuous mode [ 163.957843][ T9560] ip_vti0: entered promiscuous mode [ 163.961517][ T9560] ip6_vti0: entered promiscuous mode [ 163.964682][ T9560] sit0: entered promiscuous mode [ 163.971248][ T9560] ip6tnl0: entered promiscuous mode [ 163.974257][ T9560] ip6gre0: entered promiscuous mode [ 163.978163][ T9560] syz_tun: entered promiscuous mode [ 163.981182][ T9560] ip6gretap0: entered promiscuous mode [ 163.984160][ T9560] bridge0: entered promiscuous mode [ 163.992267][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.972'. [ 163.998641][ T9560] vcan0: entered promiscuous mode [ 164.005068][ T9560] bond0: entered promiscuous mode [ 164.009246][ T9560] bond_slave_0: entered promiscuous mode [ 164.011924][ T9560] bond_slave_1: entered promiscuous mode [ 164.018638][ T9560] team0: entered promiscuous mode [ 164.020649][ T9560] team_slave_0: entered promiscuous mode [ 164.022680][ T9560] team_slave_1: entered promiscuous mode [ 164.025132][ T9560] dummy0: entered promiscuous mode [ 164.028826][ T9560] nlmon0: entered promiscuous mode [ 164.031446][ T9560] caif0: entered promiscuous mode [ 164.033075][ T9560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.066067][ T9569] netlink: 48 bytes leftover after parsing attributes in process `syz.4.973'. [ 164.096323][ T9569] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 164.117125][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.974'. [ 164.225299][ T9577] netlink: 'syz.2.975': attribute type 1 has an invalid length. [ 164.268929][ T9577] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.273498][ T9503] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.275870][ T9503] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.284744][ T9503] bridge_slave_0: entered allmulticast mode [ 164.288724][ T9503] bridge_slave_0: entered promiscuous mode [ 164.293283][ T9503] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.295649][ T9503] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.301921][ T9503] bridge_slave_1: entered allmulticast mode [ 164.304766][ T9503] bridge_slave_1: entered promiscuous mode [ 164.321542][ T9579] veth3: entered promiscuous mode [ 164.325191][ T9579] bond3: (slave veth3): Enslaving as an active interface with a down link [ 164.334642][ T1150] hsr_slave_0: left promiscuous mode [ 164.338767][ T1150] hsr_slave_1: left promiscuous mode [ 164.340958][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.343555][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.349990][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.352466][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.383536][ T1150] veth1_macvtap: left promiscuous mode [ 164.385384][ T1150] veth0_macvtap: left promiscuous mode [ 164.387327][ T1150] veth1_vlan: left promiscuous mode [ 164.389578][ T1150] veth0_vlan: left promiscuous mode [ 164.704082][ T9593] netlink: 'syz.5.978': attribute type 1 has an invalid length. [ 164.864431][ T5940] Bluetooth: hci1: command tx timeout [ 165.004316][ T9597] netlink: 20 bytes leftover after parsing attributes in process `syz.4.979'. [ 165.018069][ T9597] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 165.035375][ T9597] xt_bpf: check failed: parse error [ 165.147373][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 165.211862][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 165.758536][ T9593] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 165.792244][ T9503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.832816][ T9503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.892158][ T9503] team0: Port device team_slave_0 added [ 165.899968][ T9503] team0: Port device team_slave_1 added [ 165.961890][ T9503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.964214][ T9503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.972751][ T9503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.981479][ T9503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.983895][ T9503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.992953][ T9503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.069252][ T9503] hsr_slave_0: entered promiscuous mode [ 166.072200][ T9503] hsr_slave_1: entered promiscuous mode [ 166.075338][ T9503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.080603][ T9503] Cannot create hsr debugfs directory [ 166.138438][ T9612] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 166.144864][ T9612] netlink: 28 bytes leftover after parsing attributes in process `syz.4.984'. [ 166.166317][ T836] vxcan1 speed is unknown, defaulting to 1000 [ 166.229871][ T9617] lo: entered allmulticast mode [ 166.395242][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'. [ 166.699368][ T9503] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 166.705070][ T9503] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 166.720453][ T9503] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 166.723461][ T9604] [U]  [ 166.732187][ T9503] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 166.752393][ T9644] xt_cluster: node mask cannot exceed total number of nodes [ 166.867826][ T9503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.891746][ T9503] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.905832][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.908395][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.920781][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.923221][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.938031][ T5940] Bluetooth: hci1: command tx timeout [ 166.952981][ T9658] __nla_validate_parse: 2 callbacks suppressed [ 166.952992][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.999'. [ 166.959756][ T9658] binder: 9656:9658 ioctl c0306201 200000000640 returned -22 [ 167.282421][ T9672] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.285187][ T9672] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.288034][ T9672] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.290763][ T9672] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.426096][ T9503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.750781][ T9692] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1007'. [ 167.778969][ T9692] SELinux: policydb version 1195955721 does not match my version range 15-34 [ 167.783232][ T9692] SELinux: failed to load policy [ 167.786687][ T9692] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1007'. [ 167.924509][ T40] kauditd_printk_skb: 531 callbacks suppressed [ 167.924522][ T40] audit: type=1400 audit(1747723164.626:22113): avc: denied { read } for pid=9695 comm="syz.5.1009" dev="nsfs" ino=4026533053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 167.935026][ T40] audit: type=1400 audit(1747723164.626:22114): avc: denied { read open } for pid=9695 comm="syz.5.1009" path="net:[4026533053]" dev="nsfs" ino=4026533053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 167.942868][ T40] audit: type=1400 audit(1747723164.626:22115): avc: denied { create } for pid=9695 comm="syz.5.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.944942][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1009'. [ 167.949533][ T40] audit: type=1400 audit(1747723164.646:22116): avc: denied { create } for pid=9695 comm="syz.5.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 167.958762][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1009'. [ 167.962990][ T9696] ip6_vti0: Master is either lo or non-ether device [ 167.965092][ T40] audit: type=1400 audit(1747723164.666:22117): avc: denied { sys_module } for pid=9503 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 167.973633][ T40] audit: type=1400 audit(1747723164.676:22118): avc: denied { ioctl } for pid=9695 comm="syz.5.1009" path="socket:[33500]" dev="sockfs" ino=33500 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.983488][ T40] audit: type=1400 audit(1747723164.676:22119): avc: denied { module_request } for pid=9503 comm="syz-executor" kmod="netdevsim6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 167.993731][ T40] audit: type=1400 audit(1747723164.676:22120): avc: denied { module_request } for pid=9695 comm="syz.5.1009" kmod="netdev-D" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 168.026985][ T40] audit: type=1400 audit(1747723164.726:22121): avc: denied { read } for pid=9695 comm="syz.5.1009" dev="nsfs" ino=4026533053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 168.034948][ T40] audit: type=1400 audit(1747723164.726:22122): avc: denied { read open } for pid=9695 comm="syz.5.1009" path="net:[4026533053]" dev="nsfs" ino=4026533053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 168.122116][ T9503] veth0_vlan: entered promiscuous mode [ 168.143446][ T9503] veth1_vlan: entered promiscuous mode [ 168.180710][ T9503] veth0_macvtap: entered promiscuous mode [ 168.187705][ T9503] veth1_macvtap: entered promiscuous mode [ 168.206845][ T9503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.219728][ T9503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.231008][ T9503] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.234010][ T9503] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.236897][ T9503] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.241865][ T9503] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.308773][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.311971][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.340974][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.344401][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.470729][ T9706] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1011'. [ 168.475464][ T9706] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1011'. [ 169.031633][ T9713] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1013'. [ 169.056004][ T9713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=9713 comm=syz.5.1013 [ 169.065548][ T9713] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 169.069099][ T9713] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 169.072214][ T9713] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 169.075122][ T9713] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 169.078211][ T9713] geneve2: entered promiscuous mode [ 169.080344][ T9713] geneve2: entered allmulticast mode [ 169.615331][ T9728] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 169.878773][ T1142] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.773131][ T9752] netlink: 'syz.2.1020': attribute type 39 has an invalid length. [ 170.845852][ T1142] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.893504][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.895910][ T9754] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 170.899529][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.903501][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.907909][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.916975][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.966903][ T9755] vxcan1 speed is unknown, defaulting to 1000 [ 170.974099][ T9758] syz.4.1022: attempt to access beyond end of device [ 170.974099][ T9758] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 170.979854][ T9758] EXT4-fs (nbd4): unable to read superblock [ 170.998301][ T9758] IPv4: Oversized IP packet from 127.202.26.0 [ 171.041257][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 171.045820][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 171.103992][ T1142] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.196019][ T1142] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.297020][ T9755] chnl_net:caif_netlink_parms(): no params data found [ 171.318725][ T1142] bridge_slave_1: left allmulticast mode [ 171.321294][ T1142] bridge_slave_1: left promiscuous mode [ 171.323271][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.327675][ T1142] bridge_slave_0: left allmulticast mode [ 171.329601][ T1142] bridge_slave_0: left promiscuous mode [ 171.333295][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.581928][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.587131][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.591572][ T1142] bond0 (unregistering): Released all slaves [ 171.711926][ T9755] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.714383][ T9755] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.716801][ T9755] bridge_slave_0: entered allmulticast mode [ 171.722009][ T9755] bridge_slave_0: entered promiscuous mode [ 171.748866][ T9755] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.752774][ T9755] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.755194][ T9755] bridge_slave_1: entered allmulticast mode [ 171.758587][ T9755] bridge_slave_1: entered promiscuous mode [ 171.798273][ T9755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.816516][ T9755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.881510][ T9755] team0: Port device team_slave_0 added [ 171.887399][ T9755] team0: Port device team_slave_1 added [ 171.922683][ T9755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.925644][ T9755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.936563][ T9755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.942549][ T9755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.944775][ T9755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.954827][ T9755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.007267][ T9788] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 172.048816][ T9790] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 172.056791][ T9790] program syz.2.1032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.065917][ T9755] hsr_slave_0: entered promiscuous mode [ 172.068477][ T9755] hsr_slave_1: entered promiscuous mode [ 172.071548][ T9755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.074108][ T9755] Cannot create hsr debugfs directory [ 172.087239][ T1142] hsr_slave_0: left promiscuous mode [ 172.091530][ T1142] hsr_slave_1: left promiscuous mode [ 172.094493][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.097539][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.106196][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.108697][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.146317][ T1142] veth1_macvtap: left promiscuous mode [ 172.148304][ T1142] veth0_macvtap: left promiscuous mode [ 172.152481][ T1142] veth1_vlan: left promiscuous mode [ 172.154193][ T1142] veth0_vlan: left promiscuous mode [ 172.509891][ T9801] __nla_validate_parse: 1 callbacks suppressed [ 172.509902][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'. [ 172.914025][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 172.954241][ T5942] Bluetooth: hci1: command tx timeout [ 172.992706][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 173.026366][ T40] kauditd_printk_skb: 678 callbacks suppressed [ 173.026384][ T40] audit: type=1400 audit(1747723169.724:22801): avc: denied { read write } for pid=7519 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.042506][ T40] audit: type=1400 audit(1747723169.724:22802): avc: denied { read write open } for pid=7519 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.051385][ T40] audit: type=1400 audit(1747723169.724:22803): avc: denied { ioctl } for pid=7519 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.077866][ T40] audit: type=1400 audit(1747723169.774:22804): avc: denied { read } for pid=9808 comm="syz.4.1038" dev="nsfs" ino=4026533622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 173.087469][ T40] audit: type=1400 audit(1747723169.774:22805): avc: denied { read open } for pid=9808 comm="syz.4.1038" path="net:[4026533622]" dev="nsfs" ino=4026533622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 173.097698][ T40] audit: type=1400 audit(1747723169.774:22806): avc: denied { create } for pid=9808 comm="syz.4.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 173.105097][ T40] audit: type=1400 audit(1747723169.784:22807): avc: denied { getopt } for pid=9808 comm="syz.4.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 173.111585][ T40] audit: type=1400 audit(1747723169.794:22808): avc: denied { create } for pid=9808 comm="syz.4.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.118034][ T40] audit: type=1400 audit(1747723169.794:22809): avc: denied { read } for pid=9808 comm="syz.4.1038" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 173.125425][ T40] audit: type=1400 audit(1747723169.794:22810): avc: denied { read open } for pid=9808 comm="syz.4.1038" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 173.125872][ T9809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.565029][ T9819] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 174.402430][ T9755] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 174.409030][ T9755] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 174.419000][ T9755] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 174.428220][ T9755] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 174.624822][ T9755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.659598][ T9755] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.678850][ T1230] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.682091][ T1230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.700141][ T9854] binder_alloc: 9848: binder_alloc_buf, no vma [ 174.704307][ T1230] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.707353][ T1230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.797757][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1051'. [ 175.022179][ T5942] Bluetooth: hci1: command tx timeout [ 175.030593][ T9864] overlayfs: missing 'lowerdir' [ 175.149189][ T9867] binder: 9863:9867 ioctl 40046109 200000000140 returned -22 [ 175.176322][ T9867] netlink: 'syz.4.1052': attribute type 11 has an invalid length. [ 175.181037][ T9867] netlink: 'syz.4.1052': attribute type 11 has an invalid length. [ 175.190157][ T9867] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1052'. [ 175.397137][ T9755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.537035][ T9886] tmpfs: Unknown parameter 'oi#tK;| ?62!%x6ěp1G' [ 175.759835][ T9899] x_tables: duplicate underflow at hook 1 [ 176.011248][ T9917] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1064'. [ 176.015146][ T9755] veth0_vlan: entered promiscuous mode [ 176.032606][ T9755] veth1_vlan: entered promiscuous mode [ 176.106927][ T9755] veth0_macvtap: entered promiscuous mode [ 176.116234][ T9755] veth1_macvtap: entered promiscuous mode [ 176.165380][ T9921] binder: 9920:9921 ioctl c0306201 200000000180 returned -14 [ 176.168709][ T9755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.174097][ T9921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=736 sclass=netlink_route_socket pid=9921 comm=syz.2.1066 [ 176.179946][ T9755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.192769][ T9755] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.196538][ T9755] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.200644][ T9755] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.205085][ T9755] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.295091][ T9928] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1068'. [ 176.309756][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.312249][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.340244][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.342469][ T2297] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 176.346006][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.424695][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1069'. [ 176.488432][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1071'. [ 176.502521][ T2297] usb 10-1: Using ep0 maxpacket: 8 [ 176.511211][ T2297] usb 10-1: config 2 interface 0 has no altsetting 0 [ 176.523025][ T2297] usb 10-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 176.527545][ T2297] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.530316][ T2297] usb 10-1: Product: syz [ 176.531813][ T2297] usb 10-1: Manufacturer: syz [ 176.533581][ T2297] usb 10-1: SerialNumber: syz [ 176.751985][ T2297] usb 10-1: USB disconnect, device number 3 [ 177.223377][ T9951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1075'. [ 177.263316][ C2] ata1: illegal qc_active transition (00000000->00200000) [ 177.459596][ T9961] evm: overlay not supported [ 177.583945][ T1111] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 177.586961][ T1111] ata1.00: configured for UDMA/100 [ 177.636255][ T9973] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.1083'. [ 177.746589][ T1142] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.374741][ T1142] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.630302][ T40] kauditd_printk_skb: 763 callbacks suppressed [ 178.630320][ T40] audit: type=1400 audit(1747723175.331:23574): avc: denied { execute } for pid=9987 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 178.644357][ T40] audit: type=1400 audit(1747723175.331:23575): avc: denied { execute_no_trans } for pid=9987 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 178.652176][ T40] audit: type=1400 audit(1747723175.331:23576): avc: denied { execute } for pid=9987 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 178.661854][ T40] audit: type=1400 audit(1747723175.361:23577): avc: denied { execmem } for pid=9987 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 178.671591][ T40] audit: type=1400 audit(1747723175.361:23578): avc: denied { create } for pid=9989 comm="syz.5.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 178.679701][ T40] audit: type=1400 audit(1747723175.361:23579): avc: denied { map_create } for pid=9989 comm="syz.5.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 178.688048][ T40] audit: type=1400 audit(1747723175.361:23580): avc: denied { map_read map_write } for pid=9989 comm="syz.5.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 178.698326][ T40] audit: type=1400 audit(1747723175.381:23581): avc: denied { prog_load } for pid=9989 comm="syz.5.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 178.706677][ T40] audit: type=1400 audit(1747723175.381:23582): avc: denied { bpf } for pid=9989 comm="syz.5.1087" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 178.715887][ T40] audit: type=1400 audit(1747723175.381:23583): avc: denied { perfmon } for pid=9989 comm="syz.5.1087" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 178.725020][ T9994] openvswitch: netlink: Multiple metadata blocks provided [ 178.743040][ T9992] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1088'. [ 178.762581][ T9994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1089'. [ 178.799809][ T1142] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.802027][ T5940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.810355][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.816096][ T5940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.822310][ T5940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.827031][ T5940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.847281][ T9992] netlink: 'syz.4.1088': attribute type 1 has an invalid length. [ 178.849858][ T9992] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1088'. [ 178.852817][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1088'. [ 178.875595][ T1142] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.896434][ T9997] vxcan1 speed is unknown, defaulting to 1000 [ 179.067695][T10011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1093'. [ 179.071647][ T1142] bridge_slave_1: left allmulticast mode [ 179.073521][ T1142] bridge_slave_1: left promiscuous mode [ 179.077044][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.082164][ T1142] bridge_slave_0: left allmulticast mode [ 179.086115][ T1142] bridge_slave_0: left promiscuous mode [ 179.088054][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.397039][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.403546][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.409679][ T1142] bond0 (unregistering): Released all slaves [ 179.520258][T10024] xt_hashlimit: size too large, truncated to 1048576 [ 179.562493][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'. [ 179.581499][ T9997] chnl_net:caif_netlink_parms(): no params data found [ 179.582472][T10027] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1097'. [ 179.777369][ T9997] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.780269][ T9997] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.788420][ T9997] bridge_slave_0: entered allmulticast mode [ 179.792260][ T9997] bridge_slave_0: entered promiscuous mode [ 179.814608][ T9997] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.818613][ T9997] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.821890][ T9997] bridge_slave_1: entered allmulticast mode [ 179.827638][T10033] binder: 10030:10033 ioctl 4010942a 200000000dc0 returned -22 [ 179.845843][ T9997] bridge_slave_1: entered promiscuous mode [ 179.878013][T10035] nftables ruleset with unbound set [ 179.966908][ T9997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.992820][ T1142] hsr_slave_0: left promiscuous mode [ 180.000765][ T1142] hsr_slave_1: left promiscuous mode [ 180.003243][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.006939][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.015062][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.018274][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.067877][ T1142] veth1_macvtap: left promiscuous mode [ 180.070397][ T1142] veth0_macvtap: left promiscuous mode [ 180.072311][ T1142] veth1_vlan: left promiscuous mode [ 180.075520][ T1142] veth0_vlan: left promiscuous mode [ 180.741848][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 180.815585][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 180.867803][ T5942] Bluetooth: hci1: command tx timeout [ 181.200728][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1106'. [ 181.280562][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1107'. [ 181.283533][T10063] netlink: 'syz.5.1107': attribute type 30 has an invalid length. [ 181.442546][ T9997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.474685][T10053] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 181.523033][ T9997] team0: Port device team_slave_0 added [ 181.529101][ T9997] team0: Port device team_slave_1 added [ 181.621199][T10068] mkiss: ax0: crc mode is auto. [ 181.621647][ T9997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.631405][ T9997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.644860][ T9997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.652983][ T9997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.656868][ T9997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.666283][ T9997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.734203][ T9997] hsr_slave_0: entered promiscuous mode [ 181.737580][ T9997] hsr_slave_1: entered promiscuous mode [ 181.740043][ T9997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.742518][ T9997] Cannot create hsr debugfs directory [ 182.258016][ T9997] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 182.267168][ T9997] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 182.272555][ T9997] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 182.279773][ T9997] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 182.383900][ T9997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.415119][ T9997] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.431648][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.434088][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.445289][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.447856][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.851120][T10124] __nla_validate_parse: 3 callbacks suppressed [ 182.851132][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1128'. [ 182.856342][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1128'. [ 182.859763][T10124] netlink: 'syz.4.1128': attribute type 20 has an invalid length. [ 182.890673][T10126] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1129'. [ 182.924237][T10128] ipt_REJECT: ECHOREPLY no longer supported. [ 182.928372][T10128] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1130'. [ 182.946214][ T5942] Bluetooth: hci1: command tx timeout [ 182.974488][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 183.014648][T10133] netlink: 'syz.2.1132': attribute type 1 has an invalid length. [ 183.023027][T10133] x_tables: duplicate underflow at hook 1 [ 183.037459][ T9997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.204151][T10143] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 183.210119][T10143] netlink: 'syz.5.1137': attribute type 3 has an invalid length. [ 183.212882][T10143] netlink: 169900 bytes leftover after parsing attributes in process `syz.5.1137'. [ 183.245407][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 183.250985][T10145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.253473][T10145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.262046][T10145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.265476][T10145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.308276][T10155] netlink: 292 bytes leftover after parsing attributes in process `syz.5.1139'. [ 183.654258][ T40] kauditd_printk_skb: 743 callbacks suppressed [ 183.654275][ T40] audit: type=1400 audit(1747723180.348:24327): avc: denied { create } for pid=10169 comm="syz.4.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.656125][ T34] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 183.659051][ T40] audit: type=1400 audit(1747723180.348:24328): avc: denied { ioctl } for pid=10169 comm="syz.4.1142" path="socket:[40259]" dev="sockfs" ino=40259 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.677764][ T40] audit: type=1400 audit(1747723180.358:24329): avc: denied { module_request } for pid=10169 comm="syz.4.1142" kmod="netdev-netdevsim0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 183.684997][ T40] audit: type=1400 audit(1747723180.368:24330): avc: denied { ioctl } for pid=10159 comm="syz.5.1140" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 183.688034][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'. [ 183.695269][ T40] audit: type=1400 audit(1747723180.368:24331): avc: denied { ioctl } for pid=10159 comm="syz.5.1140" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 183.705610][ T40] audit: type=1400 audit(1747723180.368:24332): avc: denied { ioctl } for pid=10159 comm="syz.5.1140" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 183.716358][ T40] audit: type=1400 audit(1747723180.378:24333): avc: denied { watch watch_reads } for pid=10170 comm="syz.2.1143" path="/266" dev="tmpfs" ino=1453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 183.724091][ T40] audit: type=1400 audit(1747723180.398:24334): avc: denied { sys_module } for pid=9997 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 183.727973][T10175] tmpfs: Unknown parameter 'quota' [ 183.735514][ T40] audit: type=1400 audit(1747723180.398:24335): avc: denied { module_request } for pid=9997 comm="syz-executor" kmod="netdevsim6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 183.750305][ T40] audit: type=1400 audit(1747723180.428:24336): avc: denied { mounton } for pid=10169 comm="syz.4.1142" path="/228/file1" dev="tmpfs" ino=1239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 183.843799][ T34] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 183.852983][ T34] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.856013][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 183.860385][ T34] usb 10-1: SerialNumber: syz [ 183.884516][ T9997] veth0_vlan: entered promiscuous mode [ 183.910431][ T9997] veth1_vlan: entered promiscuous mode [ 183.920555][T10179] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 183.927984][T10179] syzkaller0: entered promiscuous mode [ 183.929803][T10179] syzkaller0: entered allmulticast mode [ 184.124163][ T34] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 184.137865][ T34] usb 10-1: USB disconnect, device number 4 [ 184.716470][T10187] usb usb8: usbfs: process 10187 (syz.5.1146) did not claim interface 0 before use [ 185.036793][ T5942] Bluetooth: hci1: command tx timeout [ 185.202359][ T9997] veth0_macvtap: entered promiscuous mode [ 185.214747][ T9997] veth1_macvtap: entered promiscuous mode [ 185.236749][ T9997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.250624][ T9997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.265057][ T9997] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.269670][ T9997] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.273524][ T9997] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.277448][ T9997] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.352996][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1148'. [ 185.360311][T10202] bridge_slave_0: left allmulticast mode [ 185.362390][T10202] bridge_slave_0: left promiscuous mode [ 185.364328][T10202] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.368748][T10202] bridge_slave_1: left allmulticast mode [ 185.370700][T10202] bridge_slave_1: left promiscuous mode [ 185.374701][T10202] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.385562][T10202] bond0: (slave bond_slave_0): Releasing backup interface [ 185.393191][T10202] bond0: (slave bond_slave_1): Releasing backup interface [ 185.507462][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.513884][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.557609][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.560237][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.293498][ T1150] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.512055][ T1150] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.613619][ T1150] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.727872][ T1150] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.890773][ T1150] bridge_slave_1: left allmulticast mode [ 186.893144][ T1150] bridge_slave_1: left promiscuous mode [ 186.895745][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.901150][ T1150] bridge_slave_0: left allmulticast mode [ 186.903064][ T1150] bridge_slave_0: left promiscuous mode [ 186.905035][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.203052][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.207301][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.213138][ T1150] bond0 (unregistering): Released all slaves [ 187.492314][ T5940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.495461][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.499754][ T5940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.503479][ T5940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.506274][ T5940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.559896][T10217] vxcan1 speed is unknown, defaulting to 1000 [ 187.720167][ T1150] hsr_slave_0: left promiscuous mode [ 187.722408][ T1150] hsr_slave_1: left promiscuous mode [ 187.724497][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.726945][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.730598][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.733040][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.766392][ T1150] veth1_macvtap: left promiscuous mode [ 187.768374][ T1150] veth0_macvtap: left promiscuous mode [ 187.770289][ T1150] veth1_vlan: left promiscuous mode [ 187.772040][ T1150] veth0_vlan: left promiscuous mode [ 188.432675][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 188.517247][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 189.107630][ T40] kauditd_printk_skb: 347 callbacks suppressed [ 189.107643][ T40] audit: type=1400 audit(1747723185.796:24684): avc: denied { module_request } for pid=10217 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 189.242509][T10217] chnl_net:caif_netlink_parms(): no params data found [ 189.323098][T10217] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.325507][T10217] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.327872][T10217] bridge_slave_0: entered allmulticast mode [ 189.331666][T10217] bridge_slave_0: entered promiscuous mode [ 189.340798][T10217] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.343925][T10217] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.346690][T10217] bridge_slave_1: entered allmulticast mode [ 189.350862][T10217] bridge_slave_1: entered promiscuous mode [ 189.394523][T10217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.401608][T10217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.453870][T10217] team0: Port device team_slave_0 added [ 189.461049][T10217] team0: Port device team_slave_1 added [ 189.495200][T10217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.497487][T10217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.505845][T10217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.514008][T10217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.516289][T10217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.526157][T10217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.572893][T10217] hsr_slave_0: entered promiscuous mode [ 189.575234][T10217] hsr_slave_1: entered promiscuous mode [ 189.577653][T10217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.580280][T10217] Cannot create hsr debugfs directory [ 189.599125][ T5942] Bluetooth: hci1: command tx timeout [ 189.964737][ T40] audit: type=1400 audit(1747723186.655:24685): avc: denied { create } for pid=10217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.969490][T10217] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 189.973766][ T40] audit: type=1400 audit(1747723186.655:24686): avc: denied { write } for pid=10217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.985098][ T40] audit: type=1400 audit(1747723186.655:24687): avc: denied { read } for pid=10217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.989920][T10217] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 189.993813][ T40] audit: type=1400 audit(1747723186.655:24688): avc: denied { read } for pid=10217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.004720][ T40] audit: type=1400 audit(1747723186.655:24689): avc: denied { write } for pid=10217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.007605][T10217] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 190.012267][ T40] audit: type=1400 audit(1747723186.655:24690): avc: denied { read } for pid=10217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.026298][T10217] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 190.031599][ T40] audit: type=1400 audit(1747723186.725:24691): avc: denied { create } for pid=10217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.047364][ T40] audit: type=1400 audit(1747723186.735:24692): avc: denied { write } for pid=10217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.054483][ T40] audit: type=1400 audit(1747723186.735:24693): avc: denied { read } for pid=10217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.072500][T10217] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.074964][T10217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.077582][T10217] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.080456][T10217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.087243][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.092731][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.175847][T10217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.196448][T10217] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.207187][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.210537][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.224772][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.227911][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.681977][T10217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.308741][T10217] veth0_vlan: entered promiscuous mode [ 191.320659][T10217] veth1_vlan: entered promiscuous mode [ 191.358415][T10217] veth0_macvtap: entered promiscuous mode [ 191.372858][T10217] veth1_macvtap: entered promiscuous mode [ 191.402962][T10217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.411239][T10217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.418232][T10217] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.421159][T10217] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.423979][T10217] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.426796][T10217] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.479794][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.486210][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.506100][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.508681][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.747136][ T64] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.862005][ T64] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.913253][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.915521][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.960341][ T5940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.965396][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.969330][ T5940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.975227][ T5940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.979381][ T5940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.023895][T10236] vxcan1 speed is unknown, defaulting to 1000 [ 194.226908][ T64] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.238021][ T40] kauditd_printk_skb: 72 callbacks suppressed [ 194.238030][ T40] audit: type=1400 audit(1747723190.923:24766): avc: denied { module_request } for pid=10236 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 194.313614][T10236] chnl_net:caif_netlink_parms(): no params data found [ 194.332052][ T64] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.402845][T10236] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.405386][T10236] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.408324][T10236] bridge_slave_0: entered allmulticast mode [ 194.411320][T10236] bridge_slave_0: entered promiscuous mode [ 194.415914][T10236] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.418371][T10236] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.420883][T10236] bridge_slave_1: entered allmulticast mode [ 194.426108][T10236] bridge_slave_1: entered promiscuous mode [ 194.494796][T10236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.501800][T10236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.564657][T10236] team0: Port device team_slave_0 added [ 194.575659][T10236] team0: Port device team_slave_1 added [ 194.597469][ T64] bridge_slave_1: left allmulticast mode [ 194.599415][ T64] bridge_slave_1: left promiscuous mode [ 194.601344][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.605444][ T64] bridge_slave_0: left allmulticast mode [ 194.607329][ T64] bridge_slave_0: left promiscuous mode [ 194.609235][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.863256][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.867671][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.871777][ T64] bond0 (unregistering): Released all slaves [ 194.903260][T10236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.906033][T10236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.915820][T10236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.921428][T10236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.925608][T10236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.936607][T10236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.993799][T10236] hsr_slave_0: entered promiscuous mode [ 194.996190][T10236] hsr_slave_1: entered promiscuous mode [ 194.998686][T10236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.001260][T10236] Cannot create hsr debugfs directory [ 195.271675][ T64] hsr_slave_0: left promiscuous mode [ 195.274913][ T64] hsr_slave_1: left promiscuous mode [ 195.277648][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.280495][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.291202][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.294407][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.331712][ T64] veth1_macvtap: left promiscuous mode [ 195.333764][ T64] veth0_macvtap: left promiscuous mode [ 195.335652][ T64] veth1_vlan: left promiscuous mode [ 195.337439][ T64] veth0_vlan: left promiscuous mode [ 195.992404][ T5942] Bluetooth: hci1: command tx timeout [ 196.060695][ T64] team0 (unregistering): Port device team_slave_1 removed [ 196.129688][ T64] team0 (unregistering): Port device team_slave_0 removed [ 196.873735][ T40] audit: type=1400 audit(1747723193.562:24767): avc: denied { create } for pid=10236 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.878352][T10236] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 196.882782][ T40] audit: type=1400 audit(1747723193.562:24768): avc: denied { write } for pid=10236 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.894158][ T40] audit: type=1400 audit(1747723193.562:24769): avc: denied { read } for pid=10236 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.903139][ T40] audit: type=1400 audit(1747723193.562:24770): avc: denied { read } for pid=10236 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.903239][T10236] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 196.911966][ T40] audit: type=1400 audit(1747723193.562:24771): avc: denied { write } for pid=10236 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.923701][ T40] audit: type=1400 audit(1747723193.562:24772): avc: denied { read } for pid=10236 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.940422][T10236] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 196.955973][T10236] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 196.964090][ T40] audit: type=1400 audit(1747723193.652:24773): avc: denied { create } for pid=10236 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.970815][ T40] audit: type=1400 audit(1747723193.652:24774): avc: denied { write } for pid=10236 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.978305][ T40] audit: type=1400 audit(1747723193.652:24775): avc: denied { read } for pid=10236 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 197.079100][T10236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.097418][T10236] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.106375][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.109101][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.118186][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.120595][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.600627][T10236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.073764][ T5942] Bluetooth: hci1: command tx timeout [ 198.197152][T10236] veth0_vlan: entered promiscuous mode [ 198.219151][T10236] veth1_vlan: entered promiscuous mode [ 198.274326][T10236] veth0_macvtap: entered promiscuous mode [ 198.288155][T10236] veth1_macvtap: entered promiscuous mode [ 198.321652][T10236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.336761][T10236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.350299][T10236] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.354056][T10236] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.357752][T10236] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.361582][T10236] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.460045][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.462701][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.491661][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.494383][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.765981][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 199.765992][ T40] audit: type=1400 audit(1747723196.460:24836): avc: denied { module_request } for pid=10254 comm="syz.5.1155" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 199.775282][ T40] audit: type=1400 audit(1747723196.460:24837): avc: denied { read } for pid=10255 comm="syz.4.1156" dev="nsfs" ino=4026533622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 199.782097][ T40] audit: type=1400 audit(1747723196.460:24838): avc: denied { read open } for pid=10255 comm="syz.4.1156" path="net:[4026533622]" dev="nsfs" ino=4026533622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 199.790934][ T40] audit: type=1400 audit(1747723196.460:24839): avc: denied { create } for pid=10255 comm="syz.4.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.812673][ T40] audit: type=1400 audit(1747723196.500:24840): avc: denied { read write } for pid=7519 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.830293][ T40] audit: type=1400 audit(1747723196.510:24841): avc: denied { create } for pid=10254 comm="syz.5.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 199.839856][ T40] audit: type=1400 audit(1747723196.510:24842): avc: denied { getopt } for pid=10254 comm="syz.5.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 199.850338][ T40] audit: type=1400 audit(1747723196.510:24843): avc: denied { ioctl } for pid=10254 comm="syz.5.1155" path="socket:[42269]" dev="sockfs" ino=42269 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 199.859466][ T40] audit: type=1400 audit(1747723196.510:24844): avc: denied { ioctl } for pid=10254 comm="syz.5.1155" path="socket:[42269]" dev="sockfs" ino=42269 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 199.869489][ T40] audit: type=1400 audit(1747723196.510:24845): avc: denied { ioctl } for pid=10254 comm="syz.5.1155" path="socket:[42269]" dev="sockfs" ino=42269 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 199.883586][ T92] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.955526][T10265] ALSA: seq fatal error: cannot create timer (-22) [ 200.164431][ T63] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 200.321556][ T63] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.326686][ T63] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 200.331381][ T63] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 200.336444][ T63] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.340593][ T63] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.343484][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.349377][ T63] usb 7-1: config 0 descriptor?? [ 200.776317][ T63] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 200.789863][ T63] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 200.818370][ T92] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.061269][ T92] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.085313][T10273] netlink: 'syz.5.1159': attribute type 10 has an invalid length. [ 201.090459][T10273] team0: left promiscuous mode [ 201.092080][T10273] team_slave_0: left promiscuous mode [ 201.093980][T10273] team_slave_1: left promiscuous mode [ 201.098614][T10273] batman_adv: batadv0: Adding interface: team0 [ 201.100670][T10273] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.108909][T10273] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 201.116769][T10273] netlink: 'syz.5.1159': attribute type 10 has an invalid length. [ 201.119414][T10273] __nla_validate_parse: 1 callbacks suppressed [ 201.119424][T10273] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1159'. [ 201.124646][T10273] team0: entered promiscuous mode [ 201.126382][T10273] team_slave_0: entered promiscuous mode [ 201.128333][T10273] team_slave_1: entered promiscuous mode [ 201.132340][T10273] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.136066][T10273] batman_adv: batadv0: Interface activated: team0 [ 201.139075][T10273] batman_adv: batadv0: Interface deactivated: team0 [ 201.142052][T10273] batman_adv: batadv0: Removing interface: team0 [ 201.148084][T10273] bridge0: port 3(team0) entered blocking state [ 201.150963][T10273] bridge0: port 3(team0) entered disabled state [ 201.157303][T10273] team0: entered allmulticast mode [ 201.159779][T10273] team_slave_0: entered allmulticast mode [ 201.162267][T10273] team_slave_1: entered allmulticast mode [ 201.167567][T10273] bridge0: port 3(team0) entered blocking state [ 201.170460][T10273] bridge0: port 3(team0) entered forwarding state [ 201.191606][ T92] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.232667][ T5940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.237264][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.241119][ T5940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.250226][ T5940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.254051][ T5940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.345104][ T92] bridge_slave_1: left allmulticast mode [ 201.347472][ T92] bridge_slave_1: left promiscuous mode [ 201.350200][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.354121][ T92] bridge_slave_0: left allmulticast mode [ 201.356821][ T92] bridge_slave_0: left promiscuous mode [ 201.359737][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.713083][ T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.720478][ T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.726688][ T92] bond0 (unregistering): Released all slaves [ 201.757237][T10274] vxcan1 speed is unknown, defaulting to 1000 [ 201.997473][T10302] macsec1: entered promiscuous mode [ 201.999970][T10302] macsec1: entered allmulticast mode [ 202.079144][ C1] plantronics 0003:047F:FFFF.0004: usb_submit_urb(ctrl) failed: -1 [ 202.133287][ T92] hsr_slave_0: left promiscuous mode [ 202.137966][ T92] hsr_slave_1: left promiscuous mode [ 202.140156][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.142646][ T92] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.145883][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.148390][ T92] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.200920][ T92] veth1_macvtap: left promiscuous mode [ 202.202958][ T92] veth0_macvtap: left promiscuous mode [ 202.204806][ T92] veth1_vlan: left promiscuous mode [ 202.206674][ T92] veth0_vlan: left promiscuous mode [ 202.215892][ T29] usb 7-1: reset high-speed USB device number 14 using dummy_hcd [ 202.345463][ T29] usb 7-1: device descriptor read/64, error -32 [ 202.585604][ T29] usb 7-1: reset high-speed USB device number 14 using dummy_hcd [ 202.725812][ T29] usb 7-1: device descriptor read/64, error -32 [ 202.987458][ T29] usb 7-1: reset high-speed USB device number 14 using dummy_hcd [ 203.012966][ T92] team0 (unregistering): Port device team_slave_1 removed [ 203.016042][ T29] usb 7-1: device descriptor read/8, error -32 [ 203.087388][ T92] team0 (unregistering): Port device team_slave_0 removed [ 203.276127][ T5942] Bluetooth: hci1: command tx timeout [ 203.813714][T10274] chnl_net:caif_netlink_parms(): no params data found [ 203.900227][ T63] usb 7-1: USB disconnect, device number 14 [ 203.925879][T10329] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 203.977224][T10274] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.980448][T10274] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.983640][T10274] bridge_slave_0: entered allmulticast mode [ 203.989961][T10274] bridge_slave_0: entered promiscuous mode [ 203.995049][T10274] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.000780][T10274] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.005186][T10274] bridge_slave_1: entered allmulticast mode [ 204.011295][T10274] bridge_slave_1: entered promiscuous mode [ 204.084555][T10274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.091660][T10274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.141439][T10274] team0: Port device team_slave_0 added [ 204.151454][T10274] team0: Port device team_slave_1 added [ 204.155625][T10341] program syz.2.1177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.221975][T10274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.224246][T10274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.234603][T10274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.252591][T10274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.254942][T10274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.265194][T10274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.328423][T10274] hsr_slave_0: entered promiscuous mode [ 204.331659][T10274] hsr_slave_1: entered promiscuous mode [ 204.335209][T10274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.338802][T10274] Cannot create hsr debugfs directory [ 204.352560][T10352] Invalid source name [ 204.353985][T10352] UBIFS error (pid: 10352): cannot open "./file0", error -22 [ 204.503390][T10365] input: syz0 as /devices/virtual/input/input14 [ 204.550255][T10365] 8021q: adding VLAN 0 to HW filter on device bond4 [ 204.555830][T10365] bond0: (slave bond4): Enslaving as an active interface with an up link [ 204.737220][T10376] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1188'. [ 204.809416][ T40] kauditd_printk_skb: 612 callbacks suppressed [ 204.809426][ T40] audit: type=1400 audit(1747723202.496:25458): avc: denied { read write } for pid=6426 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.823154][ T40] audit: type=1400 audit(1747723202.496:25459): avc: denied { read write } for pid=7740 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.832041][ T40] audit: type=1400 audit(1747723202.496:25460): avc: denied { read write open } for pid=7740 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.842911][ T40] audit: type=1400 audit(1747723202.496:25461): avc: denied { ioctl } for pid=7740 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.853027][ T40] audit: type=1400 audit(1747723202.496:25462): avc: denied { read write open } for pid=6426 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.862752][ T40] audit: type=1400 audit(1747723202.496:25463): avc: denied { ioctl } for pid=6426 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.873820][ T40] audit: type=1400 audit(1747723202.546:25464): avc: denied { read } for pid=10379 comm="syz.2.1191" name="v4l-subdev0" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 204.886412][ T40] audit: type=1400 audit(1747723202.546:25465): avc: denied { prog_load } for pid=10379 comm="syz.2.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 204.893892][ T40] audit: type=1400 audit(1747723202.546:25466): avc: denied { read open } for pid=10379 comm="syz.2.1191" path="/dev/v4l-subdev0" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 204.903261][ T40] audit: type=1400 audit(1747723202.546:25467): avc: denied { bpf } for pid=10379 comm="syz.2.1191" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 204.916275][T10383] netlink: 'syz.5.1190': attribute type 1 has an invalid length. [ 204.919348][T10383] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1190'. [ 204.957181][T10383] bridge0: port 3(team0) entered disabled state [ 204.959763][T10383] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.962578][T10383] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.965903][T10383] bridge0: left promiscuous mode [ 204.967941][T10383] bridge0: entered allmulticast mode [ 204.987801][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1190'. [ 205.001779][T10383] team0: left allmulticast mode [ 205.004106][T10383] team_slave_0: left allmulticast mode [ 205.006929][T10383] team_slave_1: left allmulticast mode [ 205.010961][T10383] bridge0: port 3(team0) entered disabled state [ 205.018827][T10383] bridge_slave_1: left allmulticast mode [ 205.021336][T10383] bridge_slave_1: left promiscuous mode [ 205.024625][T10383] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.030115][T10383] bridge_slave_0: left allmulticast mode [ 205.032650][T10383] bridge_slave_0: left promiscuous mode [ 205.035357][T10383] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.174867][T10274] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 205.188873][T10274] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 205.198788][T10274] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 205.208649][T10274] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 205.304305][T10395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10395 comm=syz.2.1195 [ 205.310236][T10397] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 205.357120][ T5942] Bluetooth: hci1: command tx timeout [ 205.389322][T10274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.426471][T10274] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.442062][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.445148][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.457880][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.461051][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.516518][T10405] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.1198'. [ 205.579150][T10407] fuse: blksize only supported for fuseblk [ 205.969475][T10274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.077410][ T5942] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 206.080639][ T5942] Bluetooth: hci2: Injecting HCI hardware error event [ 206.085092][ T5942] Bluetooth: hci2: hardware error 0x00 [ 206.779130][T10445] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1207'. [ 206.783922][T10445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10445 comm=syz.5.1207 [ 206.808456][T10274] veth0_vlan: entered promiscuous mode [ 206.836249][T10274] veth1_vlan: entered promiscuous mode [ 206.847135][T10449] bond0: entered allmulticast mode [ 206.849532][T10449] bond_slave_0: entered allmulticast mode [ 206.851520][T10449] bond_slave_1: entered allmulticast mode [ 206.853486][T10449] bond4: entered allmulticast mode [ 206.919503][T10274] veth0_macvtap: entered promiscuous mode [ 206.933900][T10274] veth1_macvtap: entered promiscuous mode [ 206.973980][T10274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.991507][T10274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.006950][T10274] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.010960][T10274] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.014687][T10274] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.019446][T10274] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.027622][T10451] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 207.140827][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.144295][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.185284][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.190248][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.562075][T10472] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1216'. [ 207.942540][T10489] /dev/sr0: Can't open blockdev [ 208.158447][ T5942] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 208.407997][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1227'. [ 208.515117][T10515] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 208.634532][T10517] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1229'. [ 208.674518][ T64] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.298340][ T64] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.571178][ T64] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.643244][ T64] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.737131][ T64] bridge_slave_1: left allmulticast mode [ 209.739116][ T64] bridge_slave_1: left promiscuous mode [ 209.741068][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.744787][ T64] bridge_slave_0: left allmulticast mode [ 209.746698][ T64] bridge_slave_0: left promiscuous mode [ 209.748631][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.951393][ T40] kauditd_printk_skb: 690 callbacks suppressed [ 209.951413][ T40] audit: type=1400 audit(1747723207.634:26158): avc: denied { execute } for pid=10520 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 209.965911][ T40] audit: type=1400 audit(1747723207.634:26159): avc: denied { execute_no_trans } for pid=10520 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 209.976929][ T40] audit: type=1400 audit(1747723207.634:26160): avc: denied { execute } for pid=10520 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 209.988880][ T40] audit: type=1400 audit(1747723207.654:26161): avc: denied { execmem } for pid=10520 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 210.002917][ T40] audit: type=1400 audit(1747723207.684:26162): avc: denied { read } for pid=10521 comm="syz.4.1231" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 210.016499][ T40] audit: type=1400 audit(1747723207.684:26163): avc: denied { read open } for pid=10521 comm="syz.4.1231" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 210.034422][ T40] audit: type=1400 audit(1747723207.694:26164): avc: denied { ioctl } for pid=10521 comm="syz.4.1231" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 210.046010][ T40] audit: type=1400 audit(1747723207.714:26165): avc: denied { read } for pid=10524 comm="syz.2.1232" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 210.055486][ T40] audit: type=1400 audit(1747723207.724:26166): avc: denied { read open } for pid=10524 comm="syz.2.1232" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 210.064727][ T40] audit: type=1400 audit(1747723207.724:26167): avc: denied { ioctl } for pid=10524 comm="syz.2.1232" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 210.093471][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1230'. [ 210.094914][T10526] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 210.101800][T10526] overlayfs: failed to set xattr on upper [ 210.103800][T10526] overlayfs: ...falling back to redirect_dir=nofollow. [ 210.106143][T10526] overlayfs: ...falling back to metacopy=off. [ 210.108161][T10526] overlayfs: ...falling back to index=off. [ 210.110189][T10526] overlayfs: ...falling back to uuid=null. [ 210.119287][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.124476][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.128590][ T64] bond0 (unregistering): Released all slaves [ 210.143789][T10525] vlan0: entered promiscuous mode [ 210.157182][T10525] team0: Port device vlan0 added [ 210.213970][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.218341][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.228270][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.232324][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.235212][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.243492][T10533] xt_l2tp: v2 sid > 0xffff: 150994944 [ 210.309851][T10530] vxcan1 speed is unknown, defaulting to 1000 [ 210.402879][T10545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10545 comm=syz.4.1237 [ 210.512463][T10553] omfs: Invalid superblock (0) [ 210.565168][T10554] program syz.5.1241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.588693][ T64] hsr_slave_0: left promiscuous mode [ 210.594057][ T64] hsr_slave_1: left promiscuous mode [ 210.596165][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.598569][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.607126][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.609622][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.641711][ T64] veth1_macvtap: left promiscuous mode [ 210.643579][ T64] veth0_macvtap: left promiscuous mode [ 210.645426][ T64] veth1_vlan: left promiscuous mode [ 210.647197][ T64] veth0_vlan: left promiscuous mode [ 210.685725][ T34] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 210.698973][T10563] fuse: Bad value for 'group_id' [ 210.701408][T10563] fuse: Bad value for 'group_id' [ 210.765630][T10569] binder: binder_mmap: 10562 200000ffd000-200001000000 bad vm_flags failed -1 [ 210.830177][T10574] x_tables: duplicate underflow at hook 1 [ 210.843729][T10574] netlink: 'syz.4.1243': attribute type 10 has an invalid length. [ 210.846451][T10574] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1243'. [ 210.849849][ T34] usb 7-1: Using ep0 maxpacket: 16 [ 210.858793][ T34] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 210.868164][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 210.875782][T10576] max out of range [ 210.881920][ T34] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 210.885566][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.888917][ T34] usb 7-1: Product: syz [ 210.890559][ T34] usb 7-1: Manufacturer: syz [ 210.892160][ T34] usb 7-1: SerialNumber: syz [ 210.900696][ T34] usb 7-1: config 0 descriptor?? [ 211.180366][T10547] dlm: no locking on control device [ 211.185360][ T34] appledisplay 7-1:0.0: Error while getting initial brightness: -110 [ 211.196666][T10547] fuse: Bad value for 'fd' [ 211.199996][ T34] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -110 [ 211.204511][T10547] tmpfs: Cannot enable quota on remount [ 211.217326][ T34] usb 7-1: USB disconnect, device number 15 [ 211.374229][ T5945] Bluetooth: hci3: command 0x0406 tx timeout [ 211.529430][ T64] team0 (unregistering): Port device team_slave_1 removed [ 211.625285][ T64] team0 (unregistering): Port device team_slave_0 removed [ 212.232903][T10574] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 212.244531][T10589] pimreg: entered allmulticast mode [ 212.246886][T10590] bond0: left allmulticast mode [ 212.251265][T10590] bond_slave_0: left allmulticast mode [ 212.253156][T10590] bond_slave_1: left allmulticast mode [ 212.255042][T10590] bond4: left allmulticast mode [ 212.256790][T10590] lo: left allmulticast mode [ 212.258457][T10590] pimreg: left allmulticast mode [ 212.331216][ T5942] Bluetooth: hci1: command tx timeout [ 212.347118][T10530] chnl_net:caif_netlink_parms(): no params data found [ 212.459882][T10530] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.463378][T10530] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.466494][T10530] bridge_slave_0: entered allmulticast mode [ 212.470917][T10530] bridge_slave_0: entered promiscuous mode [ 212.478756][T10530] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.484012][T10530] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.486432][T10530] bridge_slave_1: entered allmulticast mode [ 212.489167][T10530] bridge_slave_1: entered promiscuous mode [ 212.546807][T10530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.561448][T10530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.611785][T10530] team0: Port device team_slave_0 added [ 212.626331][T10530] team0: Port device team_slave_1 added [ 212.712558][T10530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.716453][T10530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.728115][T10530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.738079][T10530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.741173][T10530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.750230][T10530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.766331][T10617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.834871][T10617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.942452][T10530] hsr_slave_0: entered promiscuous mode [ 212.944994][T10530] hsr_slave_1: entered promiscuous mode [ 212.947762][T10530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.954601][T10530] Cannot create hsr debugfs directory [ 213.436570][T10642] netlink: 'syz.2.1264': attribute type 10 has an invalid length. [ 213.466266][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1265'. [ 213.470332][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1265'. [ 213.474435][T10644] netlink: 'syz.5.1265': attribute type 12 has an invalid length. [ 213.559947][T10649] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10649 comm=syz.5.1267 [ 213.641549][T10530] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 213.650824][T10530] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 213.658658][T10530] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 213.667510][T10530] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 213.757396][T10655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1269'. [ 213.805946][T10530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.832076][T10659] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.834842][T10659] IPv6: NLM_F_CREATE should be set when creating new route [ 213.837226][T10659] IPv6: NLM_F_CREATE should be set when creating new route [ 213.839610][T10659] IPv6: NLM_F_CREATE should be set when creating new route [ 213.851678][T10530] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.865025][T10662] tipc: Enabled bearer , priority 0 [ 213.875602][T10662] syzkaller0: entered promiscuous mode [ 213.877611][T10662] syzkaller0: entered allmulticast mode [ 213.888720][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.891161][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.896460][T10662] tipc: Resetting bearer [ 213.904094][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.907259][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.908521][T10662] netlink: 'syz.4.1271': attribute type 5 has an invalid length. [ 213.916629][T10660] tipc: Resetting bearer [ 213.929736][T10660] tipc: Disabling bearer [ 213.947338][T10655] bridge_slave_1: entered allmulticast mode [ 214.240851][T10673] netlink: 'syz.4.1273': attribute type 2 has an invalid length. [ 214.335372][T10530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.353668][T10677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1274'. [ 214.361676][T10677] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1274'. [ 214.377077][T10677] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 214.405211][ T5942] Bluetooth: hci1: command tx timeout [ 214.469223][T10680] netlink: 'syz.4.1275': attribute type 11 has an invalid length. [ 214.472988][T10680] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1275'. [ 214.919611][T10530] veth0_vlan: entered promiscuous mode [ 214.932787][T10530] veth1_vlan: entered promiscuous mode [ 214.969924][T10530] veth0_macvtap: entered promiscuous mode [ 214.978980][T10530] veth1_macvtap: entered promiscuous mode [ 214.981960][ T40] kauditd_printk_skb: 791 callbacks suppressed [ 214.981970][ T40] audit: type=1400 audit(1747723212.641:26959): avc: denied { read write } for pid=7740 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.000310][T10530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.001782][ T40] audit: type=1400 audit(1747723212.671:26960): avc: denied { read write open } for pid=7740 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.013028][ T40] audit: type=1400 audit(1747723212.671:26961): avc: denied { ioctl } for pid=7740 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.017091][T10530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.035977][T10530] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.038912][T10530] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.041899][ T40] audit: type=1400 audit(1747723212.701:26962): avc: denied { create } for pid=10699 comm="syz.5.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.050347][T10530] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.052236][ T40] audit: type=1400 audit(1747723212.731:26963): avc: denied { read write } for pid=7519 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.053838][T10530] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.067973][ T40] audit: type=1400 audit(1747723212.741:26964): avc: denied { read write open } for pid=7519 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.091863][ T40] audit: type=1400 audit(1747723212.741:26965): avc: denied { ioctl } for pid=7519 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.100546][ T40] audit: type=1400 audit(1747723212.771:26966): avc: denied { read write } for pid=6426 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.120738][ T40] audit: type=1400 audit(1747723212.771:26967): avc: denied { read write open } for pid=6426 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.134274][ T40] audit: type=1400 audit(1747723212.771:26968): avc: denied { ioctl } for pid=6426 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.178956][T10706] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1279'. [ 215.186145][T10706] 0: renamed from hsr0 (while UP) [ 215.190387][T10706] 0: entered allmulticast mode [ 215.192877][T10706] hsr_slave_0: entered allmulticast mode [ 215.194712][T10706] hsr_slave_1: entered allmulticast mode [ 215.196804][T10706] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 215.205272][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.207921][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.242545][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.245122][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.398173][T10708] omfs: Invalid superblock (0) [ 215.482087][ T7233] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 215.632301][ T7233] usb 10-1: Using ep0 maxpacket: 8 [ 215.648123][ T7233] usb 10-1: config 0 has an invalid interface number: 114 but max is 2 [ 215.650918][ T7233] usb 10-1: config 0 has an invalid interface descriptor of length 4, skipping [ 215.655512][ T7233] usb 10-1: config 0 has an invalid interface number: 185 but max is 2 [ 215.658233][ T7233] usb 10-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 215.661178][ T7233] usb 10-1: config 0 has an invalid interface number: 18 but max is 2 [ 215.664122][ T7233] usb 10-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 215.666986][ T7233] usb 10-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 215.669880][ T7233] usb 10-1: config 0 has an invalid descriptor of length 186, skipping remainder of the config [ 215.673375][ T7233] usb 10-1: config 0 has no interface number 0 [ 215.675398][ T7233] usb 10-1: config 0 has no interface number 1 [ 215.677601][ T7233] usb 10-1: config 0 has no interface number 2 [ 215.679602][ T7233] usb 10-1: config 0 interface 114 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 32 [ 215.683004][ T7233] usb 10-1: config 0 interface 114 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 215.686515][ T7233] usb 10-1: config 0 interface 114 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 215.689984][ T7233] usb 10-1: config 0 interface 114 altsetting 6 bulk endpoint 0xF has invalid maxpacket 32 [ 215.693381][ T7233] usb 10-1: config 0 interface 114 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 215.696973][ T7233] usb 10-1: config 0 interface 114 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 215.700446][ T7233] usb 10-1: config 0 interface 114 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 215.704160][ T7233] usb 10-1: config 0 interface 114 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 215.707744][ T7233] usb 10-1: config 0 interface 114 altsetting 6 has 14 endpoint descriptors, different from the interface descriptor's value: 15 [ 215.712122][ T7233] usb 10-1: config 0 interface 185 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 215.715995][ T7233] usb 10-1: config 0 interface 185 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 215.719562][ T7233] usb 10-1: config 0 interface 185 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 215.723226][ T7233] usb 10-1: config 0 interface 185 altsetting 2 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 215.727397][ T7233] usb 10-1: config 0 interface 185 altsetting 2 endpoint 0x85 has an invalid bInterval 67, changing to 7 [ 215.731488][ T7233] usb 10-1: config 0 interface 185 altsetting 2 endpoint 0x85 has invalid maxpacket 33836, setting to 1024 [ 215.735310][ T7233] usb 10-1: config 0 interface 185 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 215.738749][ T7233] usb 10-1: config 0 interface 185 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 215.742391][ T7233] usb 10-1: config 0 interface 185 altsetting 2 has a duplicate endpoint with address 0x84, skipping [ 215.745919][ T7233] usb 10-1: config 0 interface 185 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 215.749401][ T7233] usb 10-1: config 0 interface 185 altsetting 2 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 215.753755][ T7233] usb 10-1: config 0 interface 18 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.758177][ T7233] usb 10-1: config 0 interface 114 has no altsetting 0 [ 215.760432][ T7233] usb 10-1: config 0 interface 185 has no altsetting 0 [ 215.762779][ T7233] usb 10-1: config 0 interface 18 has no altsetting 0 [ 215.772332][ T7233] usb 10-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=4a.60 [ 215.775784][ T7233] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.778414][ T7233] usb 10-1: Product: ఇ [ 215.780023][ T7233] usb 10-1: Manufacturer: х [ 215.781580][ T7233] usb 10-1: SerialNumber: ᶦ桏渰䭦横◈ɯ✴ꫛ곉ベ䔘꽁￠綑ꋽ뮋紪췵퉇⸘㶋迌᪲e鑅в뾯ᚚ⡲匵婧ʘ䥬揩鯈洋ὣ树ꯔ㚜촉肠㹢旂꾓ϯꬆ䑒Ṭ擌셃窿廼炇砪쥊ᡡ簉㶊ꮽ㆓离屇想뷃᪙ꭴꀑ൦芕ᔍṙ竈扥㜅帢빊毡ல쬗挡躘빾鐁 [ 215.804465][ T7233] usb 10-1: config 0 descriptor?? [ 215.813524][T10700] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 215.821143][T10700] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 215.966158][T10718] xt_hashlimit: size too large, truncated to 1048576 [ 216.159242][T10723] xt_socket: unknown flags 0xc [ 216.253084][T10726] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 216.255302][T10726] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 216.488666][T10700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.492714][T10700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.510478][ T7233] dvb-usb: found a 'TeVii S662' in warm state. [ 216.513406][ T7233] dw2102: su3000_power_ctrl: 1, initialized 0 [ 216.517971][ T7233] dvb-usb: bulk message failed: -71 (2/0) [ 216.525637][ T7233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 216.529339][ T7233] dvbdev: DVB: registering new adapter (TeVii S662) [ 216.532189][ T7233] usb 10-1: media controller created [ 216.535963][ T7233] dvb-usb: bulk message failed: -71 (6/0) [ 216.538161][ T7233] dw2102: i2c transfer failed. [ 216.540948][ T7233] dvb-usb: bulk message failed: -71 (6/0) [ 216.543042][ T7233] dw2102: i2c transfer failed. [ 216.545760][ T7233] dvb-usb: bulk message failed: -71 (6/0) [ 216.547643][ T7233] dw2102: i2c transfer failed. [ 216.549573][ T7233] dvb-usb: bulk message failed: -71 (6/0) [ 216.551513][ T7233] dw2102: i2c transfer failed. [ 216.553621][ T7233] dvb-usb: bulk message failed: -71 (6/0) [ 216.555558][ T7233] dw2102: i2c transfer failed. [ 216.557435][ T7233] dvb-usb: bulk message failed: -71 (6/0) [ 216.559465][ T7233] dw2102: i2c transfer failed. [ 216.561121][ T7233] dvb-usb: MAC address: 02:02:02:02:02:02 [ 216.573927][ T7233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.603622][ T7233] dvb-usb: bulk message failed: -71 (3/0) [ 216.606109][ T7233] dw2102: command 0x0e transfer failed. [ 216.610458][ T7233] dvb-usb: bulk message failed: -71 (3/0) [ 216.612412][ T7233] dw2102: command 0x0e transfer failed. [ 216.661165][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.923298][ T7233] dvb-usb: bulk message failed: -71 (3/0) [ 216.925209][ T7233] dw2102: command 0x0e transfer failed. [ 216.927300][ T7233] dvb-usb: bulk message failed: -71 (3/0) [ 216.929169][ T7233] dw2102: command 0x0e transfer failed. [ 216.931340][ T7233] dvb-usb: bulk message failed: -71 (1/0) [ 216.933476][ T7233] dw2102: command 0x51 transfer failed. [ 216.935528][ T7233] dvb-usb: bulk message failed: -71 (5/0) [ 216.937429][ T7233] dw2102: i2c probe for address 0x68 failed. [ 216.939662][ T7233] dvb-usb: bulk message failed: -71 (5/0) [ 216.941640][ T7233] dw2102: i2c probe for address 0x69 failed. [ 216.943971][ T7233] dvb-usb: bulk message failed: -71 (5/0) [ 216.945847][ T7233] dw2102: i2c probe for address 0x6a failed. [ 216.947829][ T7233] dw2102: probing for demodulator failed. Is the external power switched on? [ 216.950687][ T7233] dvb-usb: no frontend was attached by 'TeVii S662' [ 217.052924][ T7233] rc_core: IR keymap rc-tt-1500 not found [ 217.054903][ T7233] Registered IR keymap rc-empty [ 217.057394][ T7233] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 217.060941][ T7233] input: TeVii S662 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input16 [ 217.071098][ T7233] dvb-usb: schedule remote query interval to 250 msecs. [ 217.073584][ T7233] dw2102: su3000_power_ctrl: 0, initialized 1 [ 217.075560][ T7233] dvb-usb: TeVii S662 successfully initialized and connected. [ 217.081759][ T7233] dvb-usb: found a 'TeVii S662' in warm state. [ 217.084243][ T7233] dw2102: su3000_power_ctrl: 1, initialized 0 [ 217.087258][ T7233] dvb-usb: bulk message failed: -71 (2/0) [ 217.096956][ T7233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 217.100618][ T7233] dvbdev: DVB: registering new adapter (TeVii S662) [ 217.105425][ T7233] usb 10-1: media controller created [ 217.108545][ T7233] dvb-usb: bulk message failed: -71 (6/0) [ 217.110467][ T7233] dw2102: i2c transfer failed. [ 217.112475][ T7233] dvb-usb: bulk message failed: -71 (6/0) [ 217.114483][ T7233] dw2102: i2c transfer failed. [ 217.116282][ T7233] dvb-usb: bulk message failed: -71 (6/0) [ 217.118142][ T7233] dw2102: i2c transfer failed. [ 217.119973][ T7233] dvb-usb: bulk message failed: -71 (6/0) [ 217.122347][ T7233] dw2102: i2c transfer failed. [ 217.124733][ T7233] dvb-usb: bulk message failed: -71 (6/0) [ 217.125045][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.126689][ T7233] dw2102: i2c transfer failed. [ 217.133252][ T7233] dvb-usb: bulk message failed: -71 (6/0) [ 217.135693][ T7233] dw2102: i2c transfer failed. [ 217.137351][ T7233] dvb-usb: MAC address: 02:02:02:02:02:02 [ 217.148818][ T7233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.161920][ T7233] dvb-usb: bulk message failed: -71 (3/0) [ 217.164281][ T7233] dw2102: command 0x0e transfer failed. [ 217.166672][ T7233] dvb-usb: bulk message failed: -71 (3/0) [ 217.168526][ T7233] dw2102: command 0x0e transfer failed. [ 217.229028][T10734] 9pnet_fd: p9_fd_create_tcp (10734): problem connecting socket to 127.0.0.1 [ 217.336515][ T10] dvb-usb: bulk message failed: -71 (1/0) [ 217.339381][ T10] dw2102: i2c transfer failed. [ 217.429051][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.473488][ T7233] dvb-usb: bulk message failed: -71 (3/0) [ 217.475352][ T7233] dw2102: command 0x0e transfer failed. [ 217.477353][ T7233] dvb-usb: bulk message failed: -71 (3/0) [ 217.479529][ T7233] dw2102: command 0x0e transfer failed. [ 217.482154][ T7233] dvb-usb: bulk message failed: -71 (1/0) [ 217.484725][ T7233] dw2102: command 0x51 transfer failed. [ 217.487416][ T7233] dvb-usb: bulk message failed: -71 (5/0) [ 217.489936][ T7233] dw2102: i2c probe for address 0x68 failed. [ 217.494514][ T7233] dvb-usb: bulk message failed: -71 (5/0) [ 217.497026][ T7233] dw2102: i2c probe for address 0x69 failed. [ 217.499960][ T7233] dvb-usb: bulk message failed: -71 (5/0) [ 217.502452][ T7233] dw2102: i2c probe for address 0x6a failed. [ 217.505180][ T7233] dw2102: probing for demodulator failed. Is the external power switched on? [ 217.508963][ T7233] dvb-usb: no frontend was attached by 'TeVii S662' [ 217.536924][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.604848][ T10] dvb-usb: bulk message failed: -71 (1/0) [ 217.607408][ T10] dw2102: i2c transfer failed. [ 217.663752][ T7233] rc_core: IR keymap rc-tt-1500 not found [ 217.665700][ T7233] Registered IR keymap rc-empty [ 217.672504][ T7233] rc rc1: TeVii S662 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc1 [ 217.675782][ T12] bridge_slave_1: left allmulticast mode [ 217.677686][ T12] bridge_slave_1: left promiscuous mode [ 217.679633][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.684529][ T7233] input: TeVii S662 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc1/input17 [ 217.692373][ T12] bridge_slave_0: left allmulticast mode [ 217.692648][ T7233] dvb-usb: schedule remote query interval to 250 msecs. [ 217.694940][ T12] bridge_slave_0: left promiscuous mode [ 217.697058][ T7233] dw2102: su3000_power_ctrl: 0, initialized 1 [ 217.699702][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.703305][ T7233] dvb-usb: TeVii S662 successfully initialized and connected. [ 217.716862][ T7233] dvb-usb: found a 'TeVii S662' in warm state. [ 217.719066][ T7233] dw2102: su3000_power_ctrl: 1, initialized 0 [ 217.721510][ T7233] dvb-usb: bulk message failed: -71 (2/0) [ 217.729779][ T7233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 217.734500][ T7233] dvbdev: DVB: registering new adapter (TeVii S662) [ 217.737216][ T7233] usb 10-1: media controller created [ 217.739768][ T7233] dvb-usb: bulk message failed: -71 (6/0) [ 217.742368][ T7233] dw2102: i2c transfer failed. [ 217.745182][ T7233] dvb-usb: bulk message failed: -71 (6/0) [ 217.747658][ T7233] dw2102: i2c transfer failed. [ 217.749939][ T7233] dvb-usb: bulk message failed: -71 (6/0) [ 217.752196][ T7233] dw2102: i2c transfer failed. [ 217.754780][ T7233] dvb-usb: bulk message failed: -71 (6/0) [ 217.757112][ T7233] dw2102: i2c transfer failed. [ 217.759760][ T7233] dvb-usb: bulk message failed: -71 (6/0) [ 217.762077][ T7233] dw2102: i2c transfer failed. [ 217.764775][ T7233] dvb-usb: bulk message failed: -71 (6/0) [ 217.767577][ T7233] dw2102: i2c transfer failed. [ 217.770375][ T7233] dvb-usb: MAC address: 02:02:02:02:02:02 [ 217.784693][ T7233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.809009][ T7233] dvb-usb: bulk message failed: -71 (3/0) [ 217.810902][ T7233] dw2102: command 0x0e transfer failed. [ 217.813336][ T7233] dvb-usb: bulk message failed: -71 (3/0) [ 217.815547][ T7233] dw2102: command 0x0e transfer failed. [ 217.879880][ T835] dvb-usb: bulk message failed: -71 (1/0) [ 217.881844][ T835] dw2102: i2c transfer failed. [ 217.965363][ T835] dvb-usb: bulk message failed: -71 (1/0) [ 217.967779][ T835] dw2102: i2c transfer failed. [ 218.069271][T10749] overlayfs: disabling nfs_export due to verity=require [ 218.080110][T10751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1293'. [ 218.118631][ T7233] dvb-usb: bulk message failed: -71 (3/0) [ 218.121207][ T7233] dw2102: command 0x0e transfer failed. [ 218.127058][ T7233] dvb-usb: bulk message failed: -71 (3/0) [ 218.129570][ T7233] dw2102: command 0x0e transfer failed. [ 218.146692][ T7233] dvb-usb: bulk message failed: -71 (1/0) [ 218.149046][ T7233] dw2102: command 0x51 transfer failed. [ 218.151096][ T835] dvb-usb: bulk message failed: -71 (1/0) [ 218.152946][ T835] dw2102: i2c transfer failed. [ 218.155947][ T7233] dvb-usb: bulk message failed: -71 (5/0) [ 218.159065][ T7233] dw2102: i2c probe for address 0x68 failed. [ 218.161718][ T7233] dvb-usb: bulk message failed: -71 (5/0) [ 218.163922][ T7233] dw2102: i2c probe for address 0x69 failed. [ 218.166370][ T7233] dvb-usb: bulk message failed: -71 (5/0) [ 218.168472][ T7233] dw2102: i2c probe for address 0x6a failed. [ 218.170445][ T7233] dw2102: probing for demodulator failed. Is the external power switched on? [ 218.170908][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.174189][ T7233] dvb-usb: no frontend was attached by 'TeVii S662' [ 218.190407][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.207420][ T12] bond0 (unregistering): Released all slaves [ 218.224361][ T9] dvb-usb: bulk message failed: -71 (1/0) [ 218.226429][ T9] dw2102: i2c transfer failed. [ 218.235270][T10756] devtmpfs: Cannot change global quota limit on remount [ 218.250388][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.255622][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.259003][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.262377][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.280843][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.327470][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.334742][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.338318][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.350803][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.353653][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.383482][ T7233] rc_core: IR keymap rc-tt-1500 not found [ 218.385430][ T7233] Registered IR keymap rc-empty [ 218.387717][ T7233] rc rc2: TeVii S662 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc2 [ 218.391399][ T7233] input: TeVii S662 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc2/input18 [ 218.400406][T10765] gfs2: gfs2 mount does not exist [ 218.412255][ T7233] dvb-usb: schedule remote query interval to 250 msecs. [ 218.414998][ T7233] dw2102: su3000_power_ctrl: 0, initialized 1 [ 218.417300][ T835] dvb-usb: bulk message failed: -71 (1/0) [ 218.419263][ T835] dw2102: i2c transfer failed. [ 218.423423][ T7233] dvb-usb: TeVii S662 successfully initialized and connected. [ 218.435160][ T7233] usb 10-1: USB disconnect, device number 5 [ 218.442031][T10757] vxcan1 speed is unknown, defaulting to 1000 [ 218.497358][ T835] dvb-usb: bulk message failed: -19 (1/0) [ 218.500149][ T835] dw2102: i2c transfer failed. [ 218.528706][ T7233] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 218.572049][T10778] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 218.584375][ T7233] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 218.604330][T10782] openvswitch: netlink: Geneve opt len 10 is not a multiple of 4. [ 218.626371][ T7233] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 218.784308][ T12] hsr_slave_0: left promiscuous mode [ 218.788368][ T12] hsr_slave_1: left promiscuous mode [ 218.791298][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.796223][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.799658][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.802914][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.845081][ T12] veth1_macvtap: left promiscuous mode [ 218.847227][ T12] veth0_macvtap: left promiscuous mode [ 218.849135][ T12] veth1_vlan: left promiscuous mode [ 218.850923][ T12] veth0_vlan: left promiscuous mode [ 218.914102][ T7099] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 219.773210][ T12] team0 (unregistering): Port device team_slave_1 removed [ 219.868083][ T12] team0 (unregistering): Port device team_slave_0 removed [ 220.414690][ T5942] Bluetooth: hci1: command tx timeout [ 221.039646][ T12] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.043071][ T12] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 221.130669][ T12] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.136608][ T12] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 221.219465][ T12] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.222660][ T12] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 221.308757][ T12] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.311983][ T12] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 221.453266][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.517040][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.586442][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.658282][ T12] netdevsim netdevsim4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.777101][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.780918][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.861096][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.864319][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.940204][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.944471][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.010369][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.013563][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.462652][ T12] erspan0 (unregistering): left allmulticast mode [ 223.385764][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.390132][ T12] bond_slave_0: left promiscuous mode [ 223.394973][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.399409][ T12] bond_slave_1: left promiscuous mode [ 223.403202][ T12] bond0 (unregistering): Released all slaves [ 223.413763][ T12] bond0 (unregistering): Released all slaves [ 223.518480][ T12] bond0 (unregistering): Released all slaves [ 223.529591][ T12] bond1 (unregistering): Released all slaves [ 223.635106][ T12] bond2 (unregistering): Released all slaves [ 223.646841][ T12] bond3 (unregistering): Released all slaves [ 223.736107][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.740580][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.744902][ T12] bond0 (unregistering): (slave bond4): Releasing backup interface [ 223.748128][ T12] bond0 (unregistering): Released all slaves [ 223.757644][ T12] bond1 (unregistering): Released all slaves [ 223.840796][ T12] bond2 (unregistering): Released all slaves [ 223.914484][ T12] bond3 (unregistering): (slave veth3): Releasing active interface [ 223.918315][ T12] bond3 (unregistering): Released all slaves [ 223.991151][ T12] bond4 (unregistering): Released all slaves [ 224.167153][ T12] tipc: Left network mode [ 224.849048][ T12] hsr_slave_0: left promiscuous mode [ 224.852127][ T12] hsr_slave_1: left promiscuous mode [ 224.854953][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.858340][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.871514][ T12] hsr_slave_0: left promiscuous mode [ 224.874817][ T12] hsr_slave_1: left promiscuous mode [ 224.888528][ T12] hsr_slave_0: left promiscuous mode [ 224.892577][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.895852][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.900903][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.904172][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.981380][ T12] veth1_macvtap: left promiscuous mode [ 224.983348][ T12] veth0_macvtap: left promiscuous mode [ 224.985278][ T12] veth1_vlan: left promiscuous mode [ 224.988829][ T12] veth1_macvtap: left promiscuous mode [ 224.990798][ T12] veth0_macvtap: left promiscuous mode [ 224.992728][ T12] veth1_vlan: left promiscuous mode [ 224.994527][ T12] veth0_vlan: left promiscuous mode [ 225.001525][ T12] veth1_macvtap: left promiscuous mode [ 225.003355][ T12] veth0_macvtap: left promiscuous mode [ 225.246627][ T12] team0 (unregistering): Port device vlan0 removed [ 225.692756][ T12] team_slave_1 (unregistering): left promiscuous mode [ 225.702687][ T12] team0 (unregistering): Port device team_slave_1 removed [ 225.781956][ T12] team_slave_0 (unregistering): left promiscuous mode [ 225.786418][ T12] team0 (unregistering): Port device team_slave_0 removed [ 227.494557][T10812] smc: removing ib device syz0 [ 228.213250][ T12] team0 (unregistering): Port device team_slave_1 removed [ 228.306081][ T12] team0 (unregistering): Port device team_slave_0 removed [ 228.888446][ T34] vxcan1 speed is unknown, defaulting to 1000 [ 228.890743][ T34] syz0: Port: 1 Link DOWN VM DIAGNOSIS: 06:40:14 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff88802989f140 RCX=ffffffff84892365 RDX=ffff888028808000 RSI=00000000000004da RDI=0000000000000002 RBP=00000000000001df RSP=ffffc9000402f6e8 R8 =0000000000000002 R9 =00000000000004da R10=00000000000001df R11=0000000000000000 R12=00000000000004da R13=dffffc0000000000 R14=0000000000000344 R15=000000000000000d RIP=ffffffff81bb3f81 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555724c8500 ffffffff 00c00000 GS =0000 ffff8880d69da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fffdd498c10 CR3=000000002973c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000080000400 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000044402 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb9b3836a3 00007fcb9b3836a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffdd49ae10 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557250824e 0000555572507c80 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555724db490 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555724df258 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555724db678 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616e676973206e77 6f6e6b6e75000a29 7325203a6425206f 6e7272652820000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444b424c56054b52 4a4b4e4b50000a0c 5600051f4100054a 4b5757400d05000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0808000280030288 0800021000041000 06146fd0000404a5 9208000100001208 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0102800401800418 0800028808000100 001408060a010cce 0808000280030288 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800021000041000 06146fd0000404a5 9208000100001208 0606013c90000404 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4a0080001000012 080606013ba20e08 0020030000000000 006e616c765f3068 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74657601ffffffff ffffffffdf080003 0410000a10003e10 00061272d60fffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff81c3097f RDX=fffffbfff210a5c3 RSI=0000000000000008 RDI=ffffffff90852e10 RBP=0000000000000206 RSP=ffffc9000441f7d8 R8 =0000000000000000 R9 =fffffbfff210a5c2 R10=ffffffff90852e17 R11=0000000000000000 R12=0000000000000001 R13=ffffffff9aca4448 R14=00000000000001ed R15=0000000000000001 RIP=ffffffff81c30a1f RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe3f59f66c0 ffffffff 00c00000 GS =0000 ffff8880d6ada000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe3f59f5f98 CR3=0000000024454000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000080000400 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3f7c11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3f7c11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3f7c11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3f7c11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3f7c11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3f7c11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3f7d83488 00007fe3f7d83480 00007fe3f7d83478 00007fe3f7d83450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3f88ed100 00007fe3f7d83440 00007fe3f7d83458 00007fe3f7d834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3f7d83498 00007fe3f7d83490 00007fe3f7d83488 00007fe3f7d83480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffc900000f6ef8 RCX=ffffc900000f8000 RDX=1ffff9200001eddf RSI=ffffc900000f75a0 RDI=ffffc900000f6ef8 RBP=ffffc900000f75a0 RSP=ffffc900000f6e48 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000005 R11=0000000000091904 R12=0000000000000008 R13=ffffc900000f6f08 R14=ffffc900000f6f00 R15=ffffc900000f0000 RIP=ffffffff8169d7be RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f79d5d4fd58 CR3=0000000059b47000 CR4=00352ef0 DR0=0000000000000001 DR1=0000000000000004 DR2=0000000000040c81 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006c6f72746e6f63 5f65657274627573 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc8211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc8211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc8211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc8211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc8211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc8211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc8383488 00007fefc8383480 00007fefc8383478 00007fefc8383450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc8eed100 00007fefc8383440 00007fefc8380004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fefc8383498 00007fefc8383490 00007fefc8383488 00007fefc8383480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=dffffc0000000000 RCX=ffffffff8484c4c9 RDX=ffff88802ad14880 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc90004a77788 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=00000000000000f3 R13=ffffffff9aca7ec8 R14=00000000000000e6 R15=0000000000000001 RIP=ffffffff81bb3f81 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555564866500 ffffffff 00c00000 GS =0000 ffff8880d6cda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fefc8ee56c0 CR3=000000004bed1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000522 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0610002010000602 6fee280800061000 20100006006fe618 0000070600000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a79730001000900 00000200000000ff e6000003010a0300 00002c0300000040 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200080000000030 7a79730001000900 000002d5ff1a5e00 00000001010a0000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000280a00000000 0000000000000000 0100100000001401 de08038003038004 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 088003088004068b a003000800068b90 030fffffffffffff 04068b8003180800 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6ca88cc576157b73 e7494db2c8d6104c 5172d8ac6685af92 e07b59ee0d40dbde ZMM25=5e0253d15e0253d1 5e0253d15e0253d1 5e0253d15e0253d1 5e0253d15e0253d1 5e0253d15e0253d1 5e0253d15e0253d1 5e0253d15e0253d1 5e0253d15e0253d1 ZMM26=e10ffc4fe10ffc4f e10ffc4fe10ffc4f e10ffc4fe10ffc4f e10ffc4fe10ffc4f e10ffc4fe10ffc4f e10ffc4fe10ffc4f e10ffc4fe10ffc4f e10ffc4fe10ffc4f ZMM27=a48ba96ba48ba96b a48ba96ba48ba96b a48ba96ba48ba96b a48ba96ba48ba96b a48ba96ba48ba96b a48ba96ba48ba96b a48ba96ba48ba96b a48ba96ba48ba96b ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7906000079060000 7906000079060000 7906000079060000 7906000079060000 7906000079060000 7906000079060000 7906000079060000 7906000079060000