last executing test programs: 42.169881724s ago: executing program 0 (id=173): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) ioctl$LOOP_CONFIGURE(r0, 0x80081270, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 42.089720528s ago: executing program 0 (id=174): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x28, r2, 0x1, 0x80000000, 0x25df5bfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4002040) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000ff0f00000300000000000000", @ANYRES32, @ANYBLOB="99000035710000000000c0d95af181bf002a55ce00000040fb0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r8 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000180)={0x7, 0x35, 0x1, 'queue0\x00', 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x4, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4d, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_META_SREG={0x0, 0x3, 0x1, 0x0, 0x11}, @NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x0, 0x2, 0x1, 0x0, 0x13}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20044004}, 0x4000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) 41.958513136s ago: executing program 0 (id=176): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x7, 0x7, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000240)=@newqdisc={0x64, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x0, 0x0, 0x1, 0x5, 0xf}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x7fffffff, 0xca10, 0x3}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) 41.957814399s ago: executing program 0 (id=178): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2204880, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x100, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0xfffffffd, 0x2000, 0x0, 0x0, 0x1, 0x3cd}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000340)) landlock_restrict_self(r3, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8001) r4 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r4}) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x20000000) epoll_create1(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3e, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708bfa200000000f65b0dd68a98597451dd51ca05a6de000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2204880, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x100, 0x0) (async) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0xfffffffd, 0x2000, 0x0, 0x0, 0x1, 0x3cd}) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) (async) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000340)) (async) landlock_restrict_self(r3, 0x0) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8001) (async) getpgid(0x0) (async) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r4}) (async) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x20000000) (async) epoll_create1(0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3e, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708bfa200000000f65b0dd68a98597451dd51ca05a6de000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94) (async) 41.900146047s ago: executing program 0 (id=181): r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\r\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8e\x82\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '( \b\xd1\x00\x9b5\x15\xda\x02\xaa\x96\xef\xb8 '}]}, 0x1b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000bbff00000900000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) r2 = userfaultfd(0x80001) (async) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) (async) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000001000007911b8000000000000000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f00000001c0)={0x0, "619312468f4f1f866fb87f8616c98745b8136ca88de9308cf7b879abab928ebe92e7a7995037b3bdf19d3e2f50b615e873464b38b7a5030a416d2362dbde71ab28c0a8e2d65bb97341d58a7fdaa0b837429d61ab06b1299756ffede5967f029fae3c2af8a3836a9a9123d69daa47cc23df0454b85455e8c5027a04263e63dc4142c39cbfdff11929ec570d22393861fb3ec154100ff13f5c576f2b65906da4410048f42a7d159391dd591c4c02f7eca2e05eb1b86bc54a08835e6c55bc6d71c8fa3ecd2e3e6147abe22bf1876943d1b8f5661cefb96a8d0781b7de3aa2e6926d6ed378d8d0edf4d1fe6556654c7704e5ae4885235aa328d78602664401b0263520259357e539b6fef703232141290fc0ef13f8d72b34507c5a292244a707e0cfe1a850da22bcfd3696b5c670979e376015fb87d33280eb1e8933bbde05164a1711b3fa7672c464691fc43ec3057ae287122e00e2f3c5ef44e01a735ede75ec0cc8e6c2d7aa1e5863ff6f8cf62749b8b520b7d7a15064d9b35bd6031ea4e3ae49365c8df3ea6e311f1a493987d5e13f192b763421ca7f709fa0a352d2c94c44c1eecef31558cb452e6cae1137ff91e80f0beda7e3184db09e725e02b1a81577ee7fc118044466f10a45b84192be4abbc129d917429a290629050821270fad9cb660514060474fe51590870c6ec84a67bc8ec13b806576c71d37cd15a62add665d"}) 41.608038236s ago: executing program 0 (id=192): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000cc0)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x250, 0x0, 0x250, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x27}, 0x1000000, 0xff, 'wg1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0x158, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x3, 0xf4, 'kmp\x00', "377da29a98a85027440fb1647c5950ecfd45c615dfd84bacf537ed92ac620b95fe75775bfa0c1f3636674f1bc9affc23d45f6e27b674720897315a51a5338ca0ac2dd6b5b2d96bd558dc767e923d15aba2f74dff1149e15f5ba483d804234a06e4bc7d462efc9092f876f845199bb88c0f39fec8f07125d04e8375b370fdb68d", 0x5d, 0x2, {0x6}}}, @common=@unspec=@cpu={{0x28}, {0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x0, 0x3, 0x0, 0x4, 0x4], 0x1, 0x3}, {0x4, [0x6, 0x5, 0x6, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffefd) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001100)=[@in={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000010c0)={r3, 0x5, 0x1, 0x9, 0x800, 0x7}, &(0x7f0000001140)=0x14) r4 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) pselect6(0x40, &(0x7f0000000040)={0x3, 0x10000, 0x3, 0x7, 0x4, 0x7ff, 0x400000000001, 0xe11d}, 0x0, &(0x7f00000001c0)={0x8, 0x0, 0x1, 0x100000001, 0x5, 0x14c, 0x5, 0x262}, 0x0, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0xe, 0x11, &(0x7f0000000200)={0x11, 0x0, r6}, 0x14) r7 = socket$packet(0x11, 0x2, 0x300) getsockopt$MRT(r1, 0x0, 0xcf, 0x0, &(0x7f0000000100)) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file0\x00'}) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f00000000c0)) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$cont(0x20, r9, 0x3, 0x3) ptrace$setregs(0xf, r9, 0x7fff, &(0x7f0000000280)="3f14cab321eb3f2dac4ff9cb757738c509fe27646d995f9ee9c664b7ae80e62558d06cd33ab7740b7beb3c788bdbbc3baca2cd0a2afa816765aacf3739683f71b409b82f5bf80e67efd36f950c1317d861dd31ea18da596bbd5c62221331ec98a499a7f0239e47d2b6e0c4d00465639a3fc73230d6511143e975de9a17bbc39938564e98132f36d68f") getsockopt$packet_int(r7, 0x107, 0x12, &(0x7f0000000380), &(0x7f00000006c0)=0x4) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000000480)={0xb73, 0x7, {0x0}, {}, 0x8000000000000000, 0xfffffffffffff365}) r11 = syz_clone(0x40004000, &(0x7f00000004c0)="cb21ad2511ff466fb27357aafc44bd2b486b809ca928e7ce604edf930c7c3a81758bad32f8b98c43b415a43937fee5fc8d522f36cc7c44a3a65b8b3173", 0x3d, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="d38652f0bf63381d02c9f9107a828afeac2b584c600e9f738bb47a42450116f20f") ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f00000005c0)=0x0) syz_clone3(&(0x7f0000000640)={0x80800000, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), {0x3b}, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=""/137, &(0x7f0000000600)=[r9, r10, r11, r12], 0x4, {r8}}, 0x58) ioctl$MEDIA_IOC_DEVICE_INFO(r8, 0xc1007c00, &(0x7f0000000200)) 41.572100161s ago: executing program 32 (id=192): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000cc0)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x250, 0x0, 0x250, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x27}, 0x1000000, 0xff, 'wg1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0x158, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x3, 0xf4, 'kmp\x00', "377da29a98a85027440fb1647c5950ecfd45c615dfd84bacf537ed92ac620b95fe75775bfa0c1f3636674f1bc9affc23d45f6e27b674720897315a51a5338ca0ac2dd6b5b2d96bd558dc767e923d15aba2f74dff1149e15f5ba483d804234a06e4bc7d462efc9092f876f845199bb88c0f39fec8f07125d04e8375b370fdb68d", 0x5d, 0x2, {0x6}}}, @common=@unspec=@cpu={{0x28}, {0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x0, 0x3, 0x0, 0x4, 0x4], 0x1, 0x3}, {0x4, [0x6, 0x5, 0x6, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffefd) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001100)=[@in={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000010c0)={r3, 0x5, 0x1, 0x9, 0x800, 0x7}, &(0x7f0000001140)=0x14) r4 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) pselect6(0x40, &(0x7f0000000040)={0x3, 0x10000, 0x3, 0x7, 0x4, 0x7ff, 0x400000000001, 0xe11d}, 0x0, &(0x7f00000001c0)={0x8, 0x0, 0x1, 0x100000001, 0x5, 0x14c, 0x5, 0x262}, 0x0, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0xe, 0x11, &(0x7f0000000200)={0x11, 0x0, r6}, 0x14) r7 = socket$packet(0x11, 0x2, 0x300) getsockopt$MRT(r1, 0x0, 0xcf, 0x0, &(0x7f0000000100)) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xa6}}, './file0\x00'}) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f00000000c0)) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$cont(0x20, r9, 0x3, 0x3) ptrace$setregs(0xf, r9, 0x7fff, &(0x7f0000000280)="3f14cab321eb3f2dac4ff9cb757738c509fe27646d995f9ee9c664b7ae80e62558d06cd33ab7740b7beb3c788bdbbc3baca2cd0a2afa816765aacf3739683f71b409b82f5bf80e67efd36f950c1317d861dd31ea18da596bbd5c62221331ec98a499a7f0239e47d2b6e0c4d00465639a3fc73230d6511143e975de9a17bbc39938564e98132f36d68f") getsockopt$packet_int(r7, 0x107, 0x12, &(0x7f0000000380), &(0x7f00000006c0)=0x4) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000000480)={0xb73, 0x7, {0x0}, {}, 0x8000000000000000, 0xfffffffffffff365}) r11 = syz_clone(0x40004000, &(0x7f00000004c0)="cb21ad2511ff466fb27357aafc44bd2b486b809ca928e7ce604edf930c7c3a81758bad32f8b98c43b415a43937fee5fc8d522f36cc7c44a3a65b8b3173", 0x3d, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="d38652f0bf63381d02c9f9107a828afeac2b584c600e9f738bb47a42450116f20f") ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f00000005c0)=0x0) syz_clone3(&(0x7f0000000640)={0x80800000, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), {0x3b}, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=""/137, &(0x7f0000000600)=[r9, r10, r11, r12], 0x4, {r8}}, 0x58) ioctl$MEDIA_IOC_DEVICE_INFO(r8, 0xc1007c00, &(0x7f0000000200)) 21.478823758s ago: executing program 1 (id=427): r0 = socket$can_bcm(0x1d, 0x2, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) (async) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 21.339910631s ago: executing program 1 (id=433): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {}, {0x10}}, [@filter_kind_options=@f_matchall={{0x6}, {0xfffffea5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) listxattr(&(0x7f0000002240)='./file0\x00', &(0x7f00000022c0)=""/10, 0xa) 21.047319153s ago: executing program 1 (id=440): socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x8000000, 0x0, {{}, {@val={0x7}, @void}}}, 0x1c}}, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x2) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) 20.809354629s ago: executing program 1 (id=446): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)={0x79, 0x0, 0xd86}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000002240)) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c044) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14.704642895s ago: executing program 1 (id=446): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)={0x79, 0x0, 0xd86}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000002240)) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c044) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.767378999s ago: executing program 1 (id=446): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)={0x79, 0x0, 0xd86}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000002240)) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c044) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.628755696s ago: executing program 4 (id=587): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x8, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0xc2, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x1, 0x800003, 0x200, 0x80, 0x8, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x0, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x7, 0x1c, 0x120000, 0x3, 0x7, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x7fff, 0x4, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xa, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) msgget$private(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x3c}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2001) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.569466738s ago: executing program 4 (id=589): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x28, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0xa, 0xc2, 0x100, 0x0, 0x0, {[@nop, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x9, 0x7}]}}}}}}}}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES64]) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000004f80)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) mount$nfs4(&(0x7f00000001c0)='\x00', &(0x7f0000000240)='.\x00', &(0x7f00000003c0), 0x200000, 0x0) 6.428801751s ago: executing program 4 (id=594): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) (async) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_emit_ethernet(0x46, 0x0, 0x0) (async) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x13, 0x0, &(0x7f0000000000)) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000100)=0x14) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f00000002c0)={0x9, {"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", 0x1000}}, 0x1006) (async) r8 = syz_open_dev$hiddev(&(0x7f0000000080), 0x9, 0x480) ioctl$HIDIOCAPPLICATION(r8, 0x4802, 0xd180) (async) read(r2, &(0x7f00000019c0)=""/4093, 0xffd) (async) r9 = dup(r0) ioctl$SNDCTL_DSP_GETTRIGGER(r9, 0x80045010, &(0x7f0000000040)) (async) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f0000000000)=0x400) (async) ioctl$SNDCTL_DSP_GETODELAY(r10, 0x80045017, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, 0x0, r11, 0x0, 0x71, 0x80000003, 0x0, 0x1, 0x5, 0xbdc00, 0x1, 0x80031e}) 6.428440609s ago: executing program 4 (id=595): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142408000700e000030a08000a00", @ANYRES32], 0x48}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000100)={0x5d, 0x0, 0x20a, 0x4, 0x5, 0x6, 0x10, 0x9, 0x0}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000500)={r5, @in6={{0xa, 0x4e22, 0x5, @mcast2, 0x4}}, 0x1000, 0xfb3}, 0x90) r6 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)={0x0, 0x0, @c}, 0x29, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000440)={@desc={0x1, 0x0, @desc1}, 0x40, r6, '\x00', @b}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x60, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x64008814}, 0x4000060) 6.309102644s ago: executing program 4 (id=598): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) munlock(&(0x7f0000953000/0x4000)=nil, 0x4000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000580)={0x8, 0x120, 0xfa00, {0x0, {0x1, 0x3, "f0afdbdb863cf6ec74e189590c8ddbb8470661b54dee3d3fc7963a01e448ec122ac3b3fefc0e849a9300a91e090409e2a8987b2511d925688b9759da404404ff80778b3aaef0d1c0d03deb8e94f4e5ea0f1709a3896639afda9bab7e95acb43cb0e4e1da5328d2a29b29d38a6a4069ff68449734d3398fd3d9b8c394939a5ec01cb5db83021cf2c10ad15a6f2e5a731c62ef3e1326deb421989b3ec6032e4c050a0ae73d022ef1da0ab6e0152cf30177ac6355782aacd69b342d0b9af2abb4ee1e738ea148cae9bffd2696fb3ddbe3eaad1a69f1806deead7141e287fbd8a7d2b0748ab496996eafd5aa1e0c4417c315cc53b4c6cb0fe92ff37e62ea6e5c3613", 0xd, 0x1, 0x8, 0x9, 0x6, 0x8, 0x4}, r4}}, 0x128) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000005c0)=r1, 0x4) 6.025726726s ago: executing program 4 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) r1 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r1, &(0x7f00000009c0), 0xd4ba0ff) (async) unlink(&(0x7f00000001c0)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000140)) sendmsg$nl_generic(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000380001002cbd7000fff3dbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="e81a8427d7359342a5d3ad78d2ae5db4a81b537d"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.730088665s ago: executing program 3 (id=613): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_POWER(r1, 0x112, 0x4, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x800) ioctl$NBD_DISCONNECT(r2, 0xab08) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'pim6reg0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x10, 0x8000, "8539bcc3dec7"}}) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = creat(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x7, 0x1, 0x17, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4.599026507s ago: executing program 3 (id=616): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x1400, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e000000000002a1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x1400, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e000000000002a1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async) 2.269189301s ago: executing program 2 (id=623): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x4001) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0) 2.199726218s ago: executing program 2 (id=624): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x9, &(0x7f0000003380)=[&(0x7f0000239000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000345000/0x800000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00002c2000/0x2000)=nil, &(0x7f0000a76000/0x2000)=nil, &(0x7f0000109000/0x2000)=nil, &(0x7f00000ec000/0x1000)=nil], &(0x7f0000003340)=[0x1, 0x9e, 0x3], 0x0, 0x0) 2.199302877s ago: executing program 2 (id=625): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000200)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000300), 0x2, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000040)=[0x2], &(0x7f0000000240)=[r5, r6], &(0x7f0000000340)}) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pread64(r2, &(0x7f0000000340)=""/65, 0x41, 0x1) 1.579951146s ago: executing program 3 (id=626): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000c200000009000000543d000004020000", @ANYRES32, @ANYBLOB="0600030000100000000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000300"/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f0000000440)="f68afa218863206b6adff04d8837d53e45678ddab6c4659b1c047be6e6ed0dae2d3eb4c41da0a42ed2840c3b3e5050dce943966a5066b06ee1cb143533a97b641d325a83"}, 0x20) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000047c0)=r3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000007e00)=@newtaction={0x14, 0x32, 0x12f}, 0x14}}, 0x0) getsockname$netrom(r2, &(0x7f0000000000)={{0x3, @default}, [@netrom, @null, @default, @netrom, @null, @remote, @bcast, @netrom]}, &(0x7f0000000080)=0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) pipe2(0x0, 0x4800) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) 1.4673153s ago: executing program 3 (id=627): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=@ipv4_delrule={0x24, 0x21, 0xb12becd5a2b54ddf, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) stat(&(0x7f0000000240)='./bus\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000180)='./bus\x00', r1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000001c0)='./bus\x00') setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000040)=0x1000, 0x4) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) 1.298257201s ago: executing program 2 (id=628): r0 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) (async, rerun: 32) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r5 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x798, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x76c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'team0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'macvlan0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0x7}}, @TCA_FW_MASK={0x8}, @TCA_FW_POLICE={0x4}, @TCA_FW_CLASSID={0x8, 0x1, {0x3, 0xfff3}}, @TCA_FW_ACT={0x724, 0x4, [@m_mirred={0xdc, 0x11, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0xc8e3, 0xffffffffffffffff, 0x9, 0x3}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff8, 0x3ff, 0x6, 0x9, 0x1}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x761, 0x9, 0x10000000, 0x6, 0xfffffffd}, 0x2}}]}, {0x4d, 0x6, "94b7e63591160fb284cd0f4f25d47b3471168db1f08fb8f9773fe9b5daa3535e96676b583b90f84bc075685b459c6e67d9f5b166e80f7a39602a6dfea0f8273766e101c74474235ea4"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0xb8, 0x1e, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x5, 0x0, 0x2, 0x8}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}]}, {0x56, 0x6, "e2258d37dae4d597574ad34a7f10a13b9ee115c008f86081fc1cb5124d14d3be3cbd2fe47acfb201e0136dff2f2a8c0b51df663ddd13726ba0d7a0c6829c13493883113b2372755c39f3e17841ac0996d0a8"}, {0xc, 0x7, {0xd8f100dee54b3d72}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xd4, 0x4, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9688, 0x4, 0x20000000, 0x7, 0x6}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x79, 0x6, "725d35af67dbb836eb16d448a699661b8319eaaf12db02d894aad746ffeaf2ea97bab49e351d2d45fd2f629dbfcf491ea61c821e61990038d742113f8beb12855f52839bbd7a5593af67b881eeb022419aa07f5c0d1f96871bd000ee9e55fc5092c431626966cd89260f6d5596225c083afc22ad33"}, {0xc}, {0xc, 0x8, {0x0, 0x4}}}}, @m_gact={0x138, 0x17, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xe, 0x5, 0x4, 0x7, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x800, 0x6, 0x7, 0x2, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x4aa, 0xfffffffffffffff3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4a89, 0xfffffffd, 0x20000000, 0x7, 0x1ff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x114, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d71, 0x4}}]}, {0x9e, 0x6, "e928b438d6bf89eff8f6298380f7c70a71f182e10f32a44d34888f0e5ed62ce62c67bba3389525bdb950548611e1eb2108cd7f2f9214b9d0d887dd83341b31fc70bc1c7fa139a1fe662107077e9147ee9e9cd4d6d0c7fac476500dea2fc85a7b8297af2e73c2db1c68cb9554a14774f17619f27b31bce050784a24a673eff6151b432e5faf85402cd0ea8ef8170d4e01892951ca9212ab131ac3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x14c, 0x4, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x705}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x0, 0x4, 0x4, 0x81}, 0x3}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0xdb, 0x6, "e269d1264d31856edf243b6d2dcb52b0c17fe44fb891770e5c84209f6357046f9201b080a5534b7028954dfa2bcd10ccde0c9f8833cdc831e616d5b73f20f4eb7a1b17d99f9d03d2a2373d631946097d5a74fdef57718e41505726b8c56c1d797dbd1c372e8a81e271a3839c9542409c714109dd23dd9a22aeda9f5992fc0a11531e5640500de217bdca9ce3701a6fdc39df7b58cbad992aee17b2114ac6ca6a076fad14fdff1d6df4ceb589369cc9677042be1ee89d14f3a5179a0a56ecbbdf4b5f96072c6fa78c3cb20444ef2015e7405000886345ee"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x94, 0x16, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x101, 0x2, 0x20000000, 0x7fffffff, 0x6}}]}, {0x4d, 0x6, "5ca9b8dfc622f4c6b3da0b33661cd592b639c42d2c3426182572b48f0d404e2163994011fb9d324ab6e08ed4a3d04faf5e27f2cb9960c1e4110d14ee4cf7dfff8a15dc76d8e635169c"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x128, 0xf, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x0, 0x10000000, 0x9, 0x5}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x8, 0xffffffffffffffff, 0x80000000, 0xfffffffe}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x9, 0x7, 0x7ff, 0x7}, 0x4, r6}}]}, {0x99, 0x6, "0b0e2a9642af58493c7b680eeb68956cecdc850268358236723fe3ec775b5d24fe75eae01c4cac79cc8dc3f7a5c91e8034cd061707078d8c37c1cf94d29caf707698726096784a8c1a0c2b0656661e13bb34d8d3e9bc23d7bd440c6e44c7f40638697d81d0eef7448398a72299e8da73e45c5219bb43ebe96b7fbcd278c60cc3b7d4f7b6c7f7ea095f8c9e040ad64e670aa24cdd5a"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x78, 0x10, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff, 0xb}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x321, 0x1, 0x7, 0x9}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb7c0000, 0x2, 0x6, 0x6, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x798}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000000040)=""/88, 0x0, 0x3000}) (async, rerun: 64) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)) (async, rerun: 64) eventfd2(0x1, 0x1) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000003700)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/163, 0x0, 0x4000}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) (rerun: 64) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f0000000680)=[{0x2, 0x5, 0xb}, {0x5, 0xff, 0x7}], 0x2, 0x1ff}) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, 0x0) (rerun: 64) 216.270781ms ago: executing program 3 (id=629): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x94}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x71, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="185b0000060536624d45e36de7f00000"], &(0x7f00000006c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x13b03, r0, 0x3, &(0x7f0000000740)=[0xffffffffffffffff, 0x1], &(0x7f0000000780)=[{0x3, 0x5, 0xf, 0x4}, {0x2, 0x3, 0x9, 0xb}, {0x5, 0x2, 0x0, 0x3}], 0x10, 0x80000001, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x800, 0x5, 0x1ff, 0x0, r0, 0x9646, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x2, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xf, &(0x7f0000000140)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @cgroup_sysctl=0x12, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0xe, 0xff, 0x1cf}, 0x10, r3, r4, 0x1, &(0x7f0000000900)=[r5], &(0x7f0000000940)=[{0x4, 0x2, 0x0, 0x4}], 0x10, 0x6, @void, @value}, 0x94) 215.601167ms ago: executing program 3 (id=630): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r1, 0xfffffffffffffc01, 0x0) tee(r0, r1, 0x60000000000, 0x0) mkdirat(r1, &(0x7f0000000240)='./file0/../file0\x00', 0x5) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) syz_emit_ethernet(0x76, &(0x7f00000005c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x40, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "bdd7c3", 0x0, 0x0, 0x0, @loopback, @empty, [@routing={0x6}], "df7d270b77aa81ed"}}}}}}}, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700e, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x2) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='ext2\x00', 0x8080, &(0x7f00000001c0)='discard') syz_emit_ethernet(0x2a, &(0x7f00000019c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 119.940682ms ago: executing program 2 (id=631): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xff, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x20, @loopback}, 0x10) close(r1) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xff, 0x2, 0x0, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00'}) 0s ago: executing program 2 (id=632): mkdir(&(0x7f0000000400)='./file0\x00', 0x99) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x85, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r2, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) kernel console output (not intermixed with test programs): s mode [ 52.375254][ T5939] hsr_slave_0: entered promiscuous mode [ 52.377449][ T5939] hsr_slave_1: entered promiscuous mode [ 52.379589][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.382072][ T5939] Cannot create hsr debugfs directory [ 52.386022][ T5947] team0: Port device team_slave_0 added [ 52.420729][ T5947] team0: Port device team_slave_1 added [ 52.425620][ T5942] hsr_slave_0: entered promiscuous mode [ 52.427819][ T5942] hsr_slave_1: entered promiscuous mode [ 52.429895][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.432301][ T5942] Cannot create hsr debugfs directory [ 52.536204][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.538680][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.549462][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.596146][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.598343][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.607124][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.760692][ T5947] hsr_slave_0: entered promiscuous mode [ 52.763919][ T5947] hsr_slave_1: entered promiscuous mode [ 52.765960][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.768283][ T5947] Cannot create hsr debugfs directory [ 52.886413][ T5935] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.897726][ T5935] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.911976][ T5935] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.925916][ T5935] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.950604][ T5942] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.956289][ T5942] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.962258][ T5942] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.971269][ T5942] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.013667][ T5944] Bluetooth: hci0: command tx timeout [ 53.013953][ T5949] Bluetooth: hci1: command tx timeout [ 53.019412][ T5939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.024940][ T5939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.029648][ T5939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.034370][ T5939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.083653][ T5949] Bluetooth: hci3: command tx timeout [ 53.093142][ T5949] Bluetooth: hci2: command tx timeout [ 53.104886][ T5947] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.108884][ T5947] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.114557][ T5947] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.123217][ T5947] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.161770][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.170178][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.195028][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.207252][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.211420][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.218415][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.220861][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.228763][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.230993][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.234862][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.237035][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.254600][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.256896][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.268195][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.288021][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.290319][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.300228][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.308493][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.311116][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.327642][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.349397][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.352067][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.357094][ T40] audit: type=1400 audit(1749231550.210:89): avc: denied { sys_module } for pid=5942 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.363734][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.366144][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.392661][ T5947] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.397791][ T5947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.436270][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.461683][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.475200][ T5942] veth0_vlan: entered promiscuous mode [ 53.490102][ T5942] veth1_vlan: entered promiscuous mode [ 53.497146][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.500777][ T5935] veth0_vlan: entered promiscuous mode [ 53.514878][ T5935] veth1_vlan: entered promiscuous mode [ 53.524299][ T5942] veth0_macvtap: entered promiscuous mode [ 53.533382][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.536025][ T5942] veth1_macvtap: entered promiscuous mode [ 53.550656][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.556800][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.568799][ T5939] veth0_vlan: entered promiscuous mode [ 53.575303][ T5942] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.578146][ T5942] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.580894][ T5942] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.584199][ T5942] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.592133][ T5939] veth1_vlan: entered promiscuous mode [ 53.604900][ T5935] veth0_macvtap: entered promiscuous mode [ 53.610496][ T5935] veth1_macvtap: entered promiscuous mode [ 53.634790][ T5947] veth0_vlan: entered promiscuous mode [ 53.642289][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.650470][ T5939] veth0_macvtap: entered promiscuous mode [ 53.655480][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.658058][ T5947] veth1_vlan: entered promiscuous mode [ 53.672118][ T5939] veth1_macvtap: entered promiscuous mode [ 53.689837][ T5935] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.694116][ T5935] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.696877][ T5935] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.699617][ T5935] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.717058][ T1242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.719599][ T1242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.725474][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.743534][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.746557][ T5947] veth0_macvtap: entered promiscuous mode [ 53.760434][ T5947] veth1_macvtap: entered promiscuous mode [ 53.763718][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.763906][ T5939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.766177][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.768873][ T5939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.774014][ T5939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.777083][ T5939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.798750][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.803821][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.809740][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.812276][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.817334][ T5947] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.820338][ T5947] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.825485][ T5947] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.829054][ T5947] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.844290][ T5942] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 53.864132][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.867031][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.900841][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.905178][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.920690][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.925167][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.939380][ T1242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.941970][ T1242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.961048][ T1242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.966269][ T1242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.033910][ T6051] warning: `syz.1.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 54.121672][ T6065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=6065 comm=syz.3.10 [ 54.144623][ T6068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11'. [ 54.147407][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 54.461442][ T6095] Zero length message leads to an empty skb [ 54.466654][ T6095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6095 comm=syz.1.18 [ 54.615821][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 54.655158][ T6119] tty tty3: ldisc open failed (-12), clearing slot 2 [ 55.084357][ T5949] Bluetooth: hci1: command tx timeout [ 55.099728][ T6144] fuse: Bad value for 'fd' [ 55.102091][ T6144] fuseblk: Bad value for 'fd' [ 55.173205][ T5949] Bluetooth: hci2: command tx timeout [ 55.173235][ T5944] Bluetooth: hci3: command tx timeout [ 55.414506][ T6107] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 55.416610][ T6107] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 55.422307][ T6107] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 55.426034][ T6107] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 55.428096][ T6107] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 55.431763][ T6107] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 55.435916][ T6107] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 55.438029][ T6107] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 55.442075][ T6107] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 55.445473][ T6107] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 55.447801][ T6107] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 55.450702][ T6107] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 55.514529][ T6151] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode broadcast(3) [ 55.558430][ T6153] block device autoloading is deprecated and will be removed. [ 55.571576][ T5349] udevd[5349]: worker [6126] terminated by signal 33 (Unknown signal 33) [ 55.576043][ T5349] udevd[5349]: worker [6126] failed while handling '/devices/virtual/block/md2' [ 55.579776][ T6152] binder: 6148:6152 ioctl c0306201 200000000100 returned -22 [ 55.664435][ T40] kauditd_printk_skb: 102 callbacks suppressed [ 55.664446][ T40] audit: type=1400 audit(1749231552.520:192): avc: denied { ioctl } for pid=6147 comm="syz.1.31" path="socket:[9018]" dev="sockfs" ino=9018 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.677559][ T40] audit: type=1400 audit(1749231552.530:193): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 55.684715][ T40] audit: type=1400 audit(1749231552.540:194): avc: denied { mounton } for pid=6162 comm="syz.3.35" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 55.685717][ T6166] syz.3.35: attempt to access beyond end of device [ 55.685717][ T6166] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 55.697145][ T6166] qnx4: unable to read the superblock [ 55.701187][ T40] audit: type=1400 audit(1749231552.560:195): avc: denied { open } for pid=6167 comm="syz.0.36" path="/dev/ptyq4" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 55.706060][ T5944] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 55.708528][ T40] audit: type=1400 audit(1749231552.560:196): avc: denied { create } for pid=6167 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.717347][ T40] audit: type=1400 audit(1749231552.560:197): avc: denied { bind } for pid=6167 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.717369][ T40] audit: type=1400 audit(1749231552.560:198): avc: denied { listen } for pid=6167 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.717388][ T40] audit: type=1400 audit(1749231552.560:199): avc: denied { ioctl } for pid=6167 comm="syz.0.36" path="/dev/ptyq4" dev="devtmpfs" ino=131 ioctlcmd=0x5438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 55.770377][ T40] audit: type=1400 audit(1749231552.620:200): avc: denied { read write } for pid=6171 comm="syz.0.37" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.779065][ T40] audit: type=1400 audit(1749231552.620:201): avc: denied { open } for pid=6171 comm="syz.0.37" path="/dev/uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.078364][ T6192] syz.0.43 uses obsolete (PF_INET,SOCK_PACKET) [ 56.197104][ T6205] IPv6: sit1: Disabled Multicast RS [ 56.484802][ T6043] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 56.598101][ T6215] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 56.604965][ T6215] ======================================================= [ 56.604965][ T6215] WARNING: The mand mount option has been deprecated and [ 56.604965][ T6215] and is ignored by this kernel. Remove the mand [ 56.604965][ T6215] option from the mount to silence this warning. [ 56.604965][ T6215] ======================================================= [ 56.619076][ T6214] input: syz1 as /devices/virtual/input/input6 [ 56.685491][ T5944] Bluetooth: hci0: command 0x040f tx timeout [ 57.183220][ T6021] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 57.308266][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'. [ 57.311057][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 57.313996][ T6244] netlink: 'syz.2.56': attribute type 12 has an invalid length. [ 57.333092][ T6021] usb 8-1: Invalid ep0 maxpacket: 16 [ 57.373082][ T6245] wg2: entered promiscuous mode [ 57.374670][ T6245] wg2: entered allmulticast mode [ 57.463355][ T6021] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 57.483839][ T5944] Bluetooth: hci3: command 0x0419 tx timeout [ 57.484626][ T5949] Bluetooth: hci2: command 0x0419 tx timeout [ 57.613461][ T6021] usb 8-1: Invalid ep0 maxpacket: 16 [ 57.616321][ T6021] usb usb8-port1: attempt power cycle [ 57.712730][ T6247] netlink: 'syz.0.57': attribute type 10 has an invalid length. [ 57.718676][ T6247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.723307][ T6247] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 57.754060][ T6251] netlink: 9 bytes leftover after parsing attributes in process `syz.0.58'. [ 57.757492][ T6251] gretap0: entered promiscuous mode [ 57.761669][ T6251] netlink: 5 bytes leftover after parsing attributes in process `syz.0.58'. [ 57.764614][ T6251] 0XD: renamed from gretap0 [ 57.767419][ T6251] 0XD: left promiscuous mode [ 57.768988][ T6251] 0XD: entered allmulticast mode [ 57.771708][ T6251] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 57.777541][ T6251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.58'. [ 57.780362][ T6251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.58'. [ 57.786202][ T6251] 0XD: entered promiscuous mode [ 57.788387][ T6251] batadv_slave_1: entered promiscuous mode [ 57.830021][ T5949] Bluetooth: hci1: SCO packet too small [ 57.860095][ T6255] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.60'. [ 57.953170][ T6021] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 57.974134][ T6021] usb 8-1: Invalid ep0 maxpacket: 16 [ 58.103236][ T6021] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 58.124397][ T6021] usb 8-1: Invalid ep0 maxpacket: 16 [ 58.126312][ T6021] usb usb8-port1: unable to enumerate USB device [ 58.579404][ T6270] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 58.763232][ T5949] Bluetooth: hci0: command 0x040f tx timeout [ 59.563613][ T5949] Bluetooth: hci3: command 0x0419 tx timeout [ 59.563649][ T5944] Bluetooth: hci2: SCO packet too small [ 59.573215][ T5944] Bluetooth: hci2: command 0x0419 tx timeout [ 59.618931][ T6285] __nla_validate_parse: 3 callbacks suppressed [ 59.618941][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.70'. [ 59.636360][ T6285] KVM: debugfs: duplicate directory 6285-8 [ 59.844012][ T6299] netlink: 'syz.0.73': attribute type 2 has an invalid length. [ 59.847334][ T6299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 59.866401][ T6299] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 59.869419][ T6299] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 59.873501][ T6299] vhci_hcd vhci_hcd.0: Device attached [ 59.998349][ T6309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.76'. [ 60.025845][ T5944] Bluetooth: hci0: SCO packet too small [ 60.103181][ T5984] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.113301][ T29] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 60.123158][ T6021] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.218351][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 60.253114][ T5984] usb 6-1: Using ep0 maxpacket: 16 [ 60.257548][ T5984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 60.265160][ T5984] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 60.268019][ T5984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.268032][ T5984] usb 6-1: Product: syz [ 60.273261][ T5984] usb 6-1: Manufacturer: syz [ 60.274793][ T5984] usb 6-1: SerialNumber: syz [ 60.278785][ T5984] usb 6-1: config 0 descriptor?? [ 60.283194][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 60.285431][ T6021] usb 5-1: config 0 has no interfaces? [ 60.286093][ T5984] hub 6-1:0.0: bad descriptor, ignoring hub [ 60.286133][ T6321] process 'syz.3.82' launched './file1' with NULL argv: empty string added [ 60.287770][ T6021] usb 5-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 60.289698][ T5984] hub 6-1:0.0: probe with driver hub failed with error -5 [ 60.293156][ T6021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.298120][ T5984] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input8 [ 60.300955][ T6021] usb 5-1: config 0 descriptor?? [ 60.364655][ T6324] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 60.409815][ T6328] netlink: 'syz.2.84': attribute type 5 has an invalid length. [ 60.419232][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 60.425745][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 60.512835][ T6302] usb 37-1: recv xbuf, 0 [ 60.516278][ T1150] vhci_hcd: stop threads [ 60.518023][ T5984] usb 5-1: USB disconnect, device number 2 [ 60.518399][ T1150] vhci_hcd: release socket [ 60.522753][ T1150] vhci_hcd: disconnect device [ 60.573324][ T5944] Bluetooth: hci3: SCO packet too small [ 60.583481][ T29] vhci_hcd: vhci_device speed not set [ 60.732487][ T6339] netlink: 32 bytes leftover after parsing attributes in process `syz.2.88'. [ 60.853200][ T5944] Bluetooth: hci0: command 0x040f tx timeout [ 60.868923][ T40] kauditd_printk_skb: 65 callbacks suppressed [ 60.868934][ T40] audit: type=1400 audit(1749231557.720:267): avc: denied { setopt } for pid=6345 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.899104][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.91'. [ 60.902640][ T40] audit: type=1400 audit(1749231557.750:268): avc: denied { nlmsg_read } for pid=6347 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.907470][ T6350] netlink: 'syz.2.92': attribute type 1 has an invalid length. [ 60.930630][ T40] audit: type=1400 audit(1749231557.780:269): avc: denied { append } for pid=6351 comm="syz.3.93" name="video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 61.143777][ T6366] capability: warning: `syz.0.98' uses 32-bit capabilities (legacy support in use) [ 61.156028][ T40] audit: type=1400 audit(1749231558.010:270): avc: denied { watch watch_reads } for pid=6365 comm="syz.0.98" path="/32/bus" dev="9p" ino=35913848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.164936][ T40] audit: type=1400 audit(1749231558.010:271): avc: denied { add_name } for pid=6365 comm="syz.0.98" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.171097][ T40] audit: type=1400 audit(1749231558.010:272): avc: denied { create } for pid=6365 comm="syz.0.98" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.178323][ T40] audit: type=1400 audit(1749231558.010:273): avc: denied { associate } for pid=6365 comm="syz.0.98" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 61.187293][ T40] audit: type=1400 audit(1749231558.010:274): avc: denied { read write } for pid=6365 comm="syz.0.98" name="file1" dev="9p" ino=35913955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.194661][ T40] audit: type=1400 audit(1749231558.010:275): avc: denied { open } for pid=6365 comm="syz.0.98" path="/32/bus/file1" dev="9p" ino=35913955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.201612][ T40] audit: type=1400 audit(1749231558.030:276): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 61.222444][ T6368] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 61.225641][ T6368] overlayfs: missing 'lowerdir' [ 61.292067][ T6377] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 61.296622][ T6377] overlayfs: missing 'lowerdir' [ 61.405001][ T6390] geneve2: entered promiscuous mode [ 61.456128][ T6388] sctp: failed to load transform for md5: -2 [ 61.525113][ T6397] netlink: 72 bytes leftover after parsing attributes in process `syz.1.109'. [ 61.581181][ T6408] netlink: 36 bytes leftover after parsing attributes in process `syz.2.112'. [ 61.590271][ T6408] Bluetooth: MGMT ver 1.23 [ 61.592417][ T6408] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 61.643391][ T5944] Bluetooth: hci2: command 0x0419 tx timeout [ 61.643482][ T5949] Bluetooth: hci3: command 0x0419 tx timeout [ 62.008631][ T6434] program syz.0.118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.510956][ T6452] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 62.590158][ T6464] tmpfs: Bad value for 'mpol' [ 62.767380][ T6467] pim6reg: entered allmulticast mode [ 62.769949][ T6467] pim6reg: left allmulticast mode [ 62.881695][ T6485] mmap: syz.1.133 (6485) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.923385][ T5949] Bluetooth: hci0: command 0x040f tx timeout [ 63.034265][ T6495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.137'. [ 63.040059][ T6495] ip6gretap0: entered promiscuous mode [ 63.043679][ T6495] ip6gretap0: left promiscuous mode [ 63.112122][ T6494] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 63.236471][ T6502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.246377][ T6506] program syz.0.140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.252035][ T6506] IPv6: NLM_F_CREATE should be specified when creating new route [ 63.375641][ T6512] random: crng reseeded on system resumption [ 63.723505][ T5949] Bluetooth: hci3: command 0x0419 tx timeout [ 63.733352][ T5949] Bluetooth: hci2: command 0x0419 tx timeout [ 63.805679][ T6552] batadv0: entered promiscuous mode [ 63.808596][ T6552] batadv0: entered allmulticast mode [ 63.905649][ T6574] block nbd2: NBD_DISCONNECT [ 63.907779][ T6573] block nbd2: Disconnected due to user request. [ 63.912484][ T6573] block nbd2: shutting down sockets [ 63.943554][ T5984] usb 6-1: USB disconnect, device number 2 [ 64.060836][ T6043] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 64.165409][ T5949] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 64.178745][ T6603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 64.414307][ T6645] 9pnet_virtio: no channels available for device ./file0/file0 [ 64.589077][ T6667] 9pnet_virtio: no channels available for device syz [ 64.649842][ T6669] openvswitch: netlink: Key type 229 is out of range max 32 [ 64.676284][ T1143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.794362][ T1143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.903314][ T1143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.935620][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.939824][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.942502][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.946191][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.949606][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.970556][ T1143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.003235][ T5944] Bluetooth: hci0: command 0x040f tx timeout [ 65.141379][ T1143] bridge_slave_1: left allmulticast mode [ 65.147468][ T1143] bridge_slave_1: left promiscuous mode [ 65.153907][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.175446][ T1143] bridge_slave_0: left allmulticast mode [ 65.177271][ T1143] bridge_slave_0: left promiscuous mode [ 65.181142][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.288406][ T1143] 0XD (unregistering): left promiscuous mode [ 65.433833][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.443740][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.448059][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.452083][ T1143] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 65.458843][ T1143] bond0 (unregistering): Released all slaves [ 65.465041][ T6701] netlink: 'syz.1.199': attribute type 1 has an invalid length. [ 65.486361][ T6690] chnl_net:caif_netlink_parms(): no params data found [ 65.570218][ T6690] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.572599][ T6690] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.575222][ T6690] bridge_slave_0: entered allmulticast mode [ 65.578140][ T6690] bridge_slave_0: entered promiscuous mode [ 65.581646][ T6690] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.585979][ T6690] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.588436][ T6690] bridge_slave_1: entered allmulticast mode [ 65.591177][ T6690] bridge_slave_1: entered promiscuous mode [ 65.593851][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 65.597603][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.600820][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.604000][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.607152][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.611252][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 65.614496][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.698170][ T6690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.705979][ T6690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.772488][ T6690] team0: Port device team_slave_0 added [ 65.776275][ T6690] team0: Port device team_slave_1 added [ 65.809786][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.812653][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.822794][ T6690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.823630][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 65.828084][ T10] usbtmc 6-1:16.0: can't read capabilities [ 65.831848][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.834995][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.844808][ T6690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.855403][ T1143] batadv_slave_1: left promiscuous mode [ 65.861998][ T1143] hsr_slave_0: left promiscuous mode [ 65.864250][ T1143] hsr_slave_1: left promiscuous mode [ 65.866491][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.868794][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.872172][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.875413][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.900741][ T1143] veth1_macvtap: left promiscuous mode [ 65.902654][ T1143] veth0_macvtap: left promiscuous mode [ 65.904982][ T1143] veth1_vlan: left promiscuous mode [ 65.906836][ T1143] veth0_vlan: left promiscuous mode [ 66.079877][ T29] usb 6-1: USB disconnect, device number 3 [ 66.371719][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 66.422361][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 66.556602][ T40] kauditd_printk_skb: 90 callbacks suppressed [ 66.556613][ T40] audit: type=1400 audit(1749231563.410:367): avc: denied { create } for pid=6732 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 66.565080][ T40] audit: type=1400 audit(1749231563.410:368): avc: denied { write } for pid=6732 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 66.571593][ T40] audit: type=1400 audit(1749231563.410:369): avc: denied { bind } for pid=6732 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 66.598706][ T40] audit: type=1400 audit(1749231563.450:370): avc: denied { ioctl } for pid=6735 comm="syz.2.204" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 66.767895][ T6742] netlink: 'syz.2.206': attribute type 21 has an invalid length. [ 66.767921][ T6743] netlink: 'syz.2.206': attribute type 21 has an invalid length. [ 66.770426][ T6742] __nla_validate_parse: 13 callbacks suppressed [ 66.770434][ T6742] netlink: 156 bytes leftover after parsing attributes in process `syz.2.206'. [ 66.772667][ T6743] netlink: 156 bytes leftover after parsing attributes in process `syz.2.206'. [ 66.811198][ T6745] netlink: 256 bytes leftover after parsing attributes in process `syz.2.207'. [ 66.982291][ T40] audit: type=1400 audit(1749231563.830:371): avc: denied { read } for pid=6748 comm="syz.2.209" name="usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.990024][ T40] audit: type=1400 audit(1749231563.830:372): avc: denied { open } for pid=6748 comm="syz.2.209" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 67.004401][ T5949] Bluetooth: hci1: command tx timeout [ 67.036271][ T6690] hsr_slave_0: entered promiscuous mode [ 67.038559][ T6690] hsr_slave_1: entered promiscuous mode [ 67.040660][ T6690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.043166][ T6690] Cannot create hsr debugfs directory [ 67.217656][ T6690] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.225153][ T6690] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.237501][ T40] audit: type=1400 audit(1749231564.090:373): avc: denied { create } for pid=6765 comm="syz.2.213" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 67.245788][ T40] audit: type=1400 audit(1749231564.090:374): avc: denied { read } for pid=6765 comm="syz.2.213" name="file0" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 67.247649][ T6690] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.252398][ T40] audit: type=1400 audit(1749231564.090:375): avc: denied { open } for pid=6765 comm="syz.2.213" path="/60/file0" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 67.264254][ T40] audit: type=1400 audit(1749231564.090:376): avc: denied { ioctl } for pid=6765 comm="syz.2.213" path="/60/file0" dev="tmpfs" ino=338 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 67.272574][ T6690] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.322004][ T6690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.334775][ T6690] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.342213][ T6043] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.344477][ T6043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.350745][ T6043] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.353096][ T6043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.515980][ T6690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.589220][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 67.664060][ T6690] veth0_vlan: entered promiscuous mode [ 67.670388][ T6690] veth1_vlan: entered promiscuous mode [ 67.687096][ T6690] veth0_macvtap: entered promiscuous mode [ 67.693895][ T6690] veth1_macvtap: entered promiscuous mode [ 67.711592][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.721977][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.731475][ T6690] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.735847][ T6690] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.739486][ T6690] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.743217][ T6690] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.782345][ T6043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.785139][ T6043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.811379][ T6046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.815978][ T6046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.823655][ T837] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 67.883139][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 67.993677][ T837] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 67.997597][ T837] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.000530][ T837] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.004251][ T837] usb 6-1: config 0 interface 0 has no altsetting 0 [ 68.007952][ T837] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.010857][ T837] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.014377][ T837] usb 6-1: config 0 interface 0 has no altsetting 0 [ 68.017272][ T837] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.023121][ T837] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.026480][ T837] usb 6-1: config 0 interface 0 has no altsetting 0 [ 68.029383][ T837] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.032165][ T837] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.037030][ T837] usb 6-1: config 0 interface 0 has no altsetting 0 [ 68.040031][ T837] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.042788][ T837] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.047833][ T837] usb 6-1: config 0 interface 0 has no altsetting 0 [ 68.050665][ T837] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.056442][ T837] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.059812][ T837] usb 6-1: config 0 interface 0 has no altsetting 0 [ 68.065877][ T837] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.068800][ T837] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.072169][ T837] usb 6-1: config 0 interface 0 has no altsetting 0 [ 68.075082][ T837] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.077844][ T837] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.123193][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 68.131047][ T837] usb 6-1: config 0 interface 0 has no altsetting 0 [ 68.139290][ T837] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 68.142223][ T837] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 68.144892][ T837] usb 6-1: Product: syz [ 68.146166][ T837] usb 6-1: Manufacturer: syz [ 68.147589][ T837] usb 6-1: SerialNumber: syz [ 68.153737][ T837] usb 6-1: config 0 descriptor?? [ 68.355993][ T5949] Bluetooth: hci0: ISO packet too small [ 68.379323][ T837] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 68.390520][ T837] usb 6-1: USB disconnect, device number 4 [ 68.395762][ T837] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 68.872626][ T6931] batadv_slave_1: entered promiscuous mode [ 68.875183][ T6931] virtio-fs: tag not found [ 68.878983][ T6935] netlink: 'syz.3.235': attribute type 4 has an invalid length. [ 68.884850][ T6931] batadv_slave_1: left promiscuous mode [ 68.885688][ T6935] netlink: 'syz.3.235': attribute type 4 has an invalid length. [ 68.895441][ T6935] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !fIZE,=$)%ĂL [ 68.912969][ T6939] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.964957][ T6948] netlink: 'syz.2.239': attribute type 3 has an invalid length. [ 68.967420][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 68.989547][ T6937] netem: change failed [ 69.089705][ T6963] openvswitch: netlink: Flow actions attr not present in new flow. [ 69.098171][ T5949] Bluetooth: hci1: command 0x041b tx timeout [ 69.192838][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.246'. [ 69.193263][ T5949] Bluetooth: hci2: SCO packet too small [ 69.261551][ T6992] misc userio: Begin command sent, but we're already running [ 69.310654][ T7000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.250'. [ 69.370536][ T7009] netlink: 830 bytes leftover after parsing attributes in process `syz.2.255'. [ 69.377066][ T7009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.255'. [ 69.608672][ T5949] Bluetooth: hci3: Malformed HCI Event [ 69.758671][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'. [ 69.819154][ T7056] overlay: Unknown parameter 'default_permissions:/' [ 69.821147][ T7058] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 69.924770][ T7073] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 69.928418][ T5949] Bluetooth: hci0: SCO packet too small [ 69.930275][ T7073] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 69.969230][ T7080] vxcan0: tx address claim with dest, not broadcast [ 70.101916][ T7097] jfs: Unknown parameter ']:@{(/' [ 70.243541][ T838] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 70.268654][ T7120] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 70.397850][ T838] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 70.406135][ T838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.411401][ T838] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 70.415694][ T838] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 70.418943][ T838] usb 9-1: Manufacturer: syz [ 70.423235][ T838] usb 9-1: config 0 descriptor?? [ 70.493437][ T838] rc_core: IR keymap rc-hauppauge not found [ 70.497683][ T838] Registered IR keymap rc-empty [ 70.501553][ T838] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 70.511326][ T838] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input11 [ 70.515787][ T7139] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 70.515817][ T7139] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 70.516588][ T7139] vhci_hcd vhci_hcd.0: Device attached [ 70.526966][ T7139] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 70.529150][ T7139] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 70.532627][ T7139] vhci_hcd vhci_hcd.0: Device attached [ 70.544663][ T7143] vhci_hcd: connection closed [ 70.545165][ T6044] vhci_hcd: stop threads [ 70.548167][ T7140] vhci_hcd: connection closed [ 70.548528][ T6044] vhci_hcd: release socket [ 70.551623][ T6044] vhci_hcd: disconnect device [ 70.554299][ T6044] vhci_hcd: stop threads [ 70.556000][ T6044] vhci_hcd: release socket [ 70.557530][ T6044] vhci_hcd: disconnect device [ 70.628098][ T7089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.631244][ T7089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.637371][ T838] usb 9-1: USB disconnect, device number 2 [ 71.087721][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.090010][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.165071][ T5949] Bluetooth: hci1: command 0x041b tx timeout [ 71.227176][ T7179] netlink: 'syz.1.298': attribute type 21 has an invalid length. [ 71.250431][ T5949] Bluetooth: hci3: SCO packet too small [ 71.336141][ T7187] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.396912][ T7193] ip6tnl1: entered promiscuous mode [ 71.398608][ T7193] ip6tnl1: entered allmulticast mode [ 71.401112][ T7193] team0: Device ip6tnl1 is of different type [ 71.433946][ T7195] tc_dump_action: action bad kind [ 71.621409][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 71.621419][ T40] audit: type=1400 audit(71.533:441): avc: denied { map } for pid=7210 comm="syz.2.306" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 71.652246][ T7206] /dev/sr0: Can't open blockdev [ 71.742830][ T7222] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.785255][ T7234] __nla_validate_parse: 6 callbacks suppressed [ 71.785266][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 71.815954][ T40] audit: type=1400 audit(71.733:442): avc: denied { getopt } for pid=7235 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 71.816176][ T7236] binder: binder_mmap: 7235 200000ffd000-200001000000 bad vm_flags failed -1 [ 71.838488][ T7236] capability: warning: `syz.2.312' uses deprecated v2 capabilities in a way that may be insecure [ 71.882570][ T40] audit: type=1400 audit(71.793:443): avc: denied { mount } for pid=7240 comm="syz.2.314" name="/" dev="rpc_pipefs" ino=16574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 71.890937][ T40] audit: type=1400 audit(71.793:444): avc: denied { mounton } for pid=7240 comm="syz.2.314" path="/104/file0" dev="rpc_pipefs" ino=16574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 71.898073][ T40] audit: type=1400 audit(71.793:445): avc: denied { audit_write } for pid=7240 comm="syz.2.314" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 71.905411][ T40] audit: type=1400 audit(71.793:446): avc: denied { watch watch_reads } for pid=7240 comm="syz.2.314" path="pipe:[16589]" dev="pipefs" ino=16589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 71.906678][ T7239] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 71.917586][ T7239] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 72.036109][ T40] audit: type=1400 audit(71.953:447): avc: denied { map } for pid=7247 comm="syz.3.316" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 72.361457][ T40] audit: type=1400 audit(72.273:448): avc: denied { read write } for pid=7272 comm="syz.3.323" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 72.368251][ T40] audit: type=1400 audit(72.273:449): avc: denied { open } for pid=7272 comm="syz.3.323" path="/72/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 0=Ҡk"0cC;.E@wԅHi=Rv[s;ݧ8[ UxR@]u+',]u g(0weͅz$aṒub9yYE)&O)6b;ygU4>rɓt_ƏʘG00HVpẑE=N Oeݢ2"yJIzF<@MS0QupQʃl~7MؤZGkφwW_Fc1׍`L챈*]kjFU)B6=x}[4OwO_;Õa,ax0 2a0s1=**$S8 +W1E$ƏmCK-X_^yb19Qs'C9wBx(ћ"uϛBI.XOWZtp0\PւXΐlfw;hB? e #`!dܱ o7Zlǂ` :[!vHDV.Mg` hZ qC>ԖE8ĵq%SS*vi#yIWgΙr#->6lc~cנ.k 7a#J#'NN&G]BV3^"7I+ |Ɛn^F/8'U"h7&1x}O Չ܌sQ":oLfz}on=LFl>=OIЅ9g6v8DQHwYǺԒ_f|q͙'0Y^}W_{Sq*{WUJ+-TZ7c.%,l6PX6? |9eJ5<)\8VY%v59C%wYz2˾~i5gR(\?ņ;1!Jq+t+5ԍbNuaY=H *93Z\PW'_n\I2OWEGR^Y ^2n Iڤ˭o+ӅJ\0{cT,g bJM%K{;. uiT-[+x:%y1zsY<$]cpqo4@D\a)#Gȭ@Ӑ '걜Œz!'?C 1yY (f1GWZϑKs~eqgOﴂ3mmЎzAX˭e`]߳Axv+F0?O}.<{GNJkҿ2YÌ;Tc.c&͐&jzRΉcȧ- zjz/w$(>T |h3 7`(*xk"޺GzRAoOź:m@dc~້]F#wj&/oci!iP_yQ23@SvyAe]Q3L.p9^:l~Xz~M& H~h !cN'оZ8í aπLR%(ޅ]ZGӅԖj3D C9R8 M2xZb%#R|f䷓l_I\G_bhVi?NfgVBpI+h9? Mvs>'pMXsQ.`lqxIz4Rg[Ҫa_^AHzz/f2=aheRW5: &6k,c#VIVHF` WVo&WlIirdc 2-edD*.=8󗴦; ?w1)n߱[uyS Wq5'Zbʌ0ym:}kk |Vג;%+l;H#oFJ; !Yge4<;ύ#~OpL}q(Q;gj< N%Q=@~NHN߄04 gūG,S0l,Ðwm";o涠`H7vIj϶U(cޗYmO[AYɜ0π`;Wd!xX~# ; `VHdU+*us^[6;מ9[<*I41=E0AϝPn]-Y͌@z=8ސɝ[w+ؿbMUle*4x 8Xp|&d_ ʚֵ->Ek]Pת _pvS.R^fx,^}mV5p/ӯYNǐS9i`P!(m[,|"F w]e4w~h29bڬ@ׯ?TR>KyZ+btڞW-bQՊ ~fihv^|/x$,Y 㣖AɴVGHLSMK*SuLݭ8*1m&QpϿ5=X :==B>];oF j+XsmogIOP瀎p=w姩!z[ȭׂG$[niUJ\B԰ǯJz䐲GYE]Apaxe&1]/hKDRkZ*Ek7ܪc , k*u?'rϓkV}'reSJަkpᄔR $H$.ā`{^DY ۆIdmy/kQmң9tFVܐ|A\`KGJ%.R Dh)T"/0KhB&ƈJ+a z9Y2z dX[E EJiVAoUm4T[->`g-;3e-4$녋6#<[ 72.722720][ T40] audit: type=1400 audit(72.633:450): avc: denied { unmount } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 72.785629][ T7284] tmpfs: User quota inode hardlimit too large. [ 72.903173][ T5984] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 73.063243][ T5984] usb 8-1: Using ep0 maxpacket: 8 [ 73.066784][ T5984] usb 8-1: config 0 has no interfaces? [ 73.070211][ T5984] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 73.073253][ T5984] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.075745][ T5984] usb 8-1: Product: syz [ 73.077078][ T5984] usb 8-1: Manufacturer: syz [ 73.078544][ T5984] usb 8-1: SerialNumber: syz [ 73.081437][ T5984] usb 8-1: config 0 descriptor?? [ 73.243164][ T5949] Bluetooth: hci1: command 0x041b tx timeout [ 73.289990][ T6706] usb 8-1: USB disconnect, device number 6 [ 73.914822][ T7299] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.005446][ T7299] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.056828][ T7299] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.112056][ T7299] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.204439][ T7299] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.212542][ T7299] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.220889][ T7299] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.228243][ T7299] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.262564][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 74.271419][ T7307] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.331810][ T7307] bridge_slave_1 (unregistering): left allmulticast mode [ 74.335148][ T7307] bridge_slave_1 (unregistering): left promiscuous mode [ 74.338077][ T7307] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.511130][ T7314] netlink: 'syz.2.332': attribute type 1 has an invalid length. [ 74.523924][ T7314] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.534202][ T7314] bond1: (slave ip6gretap1): making interface the new active one [ 74.537359][ T7314] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 74.634662][ T7325] tipc: Enabling of bearer rejected, failed to enable media [ 74.953416][ T6706] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 75.103251][ T6706] usb 7-1: Using ep0 maxpacket: 16 [ 75.107158][ T6706] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.110603][ T6706] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.114274][ T6706] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 75.118342][ T6706] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 75.121113][ T6706] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.126196][ T6706] usb 7-1: config 0 descriptor?? [ 75.323241][ T5949] Bluetooth: hci1: command 0x041b tx timeout [ 75.463334][ T1350] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 75.536327][ T6706] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 75.539189][ T6706] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 75.541417][ T6706] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 75.543882][ T6706] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 75.546077][ T6706] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 75.550769][ T6706] input: HID 0955:7214 Haptics as /devices/virtual/input/input13 [ 75.573553][ T6706] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 75.576319][ T6706] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 75.617268][ T1350] usb 9-1: too many endpoints for config 26 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 75.620740][ T1350] usb 9-1: config 26 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.624473][ T1350] usb 9-1: config 26 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.627502][ T1350] usb 9-1: config 26 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 75.633722][ T1350] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 75.636558][ T1350] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 75.639169][ T1350] usb 9-1: Manufacturer: syz [ 75.731035][ T24] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 75.735227][ T24] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 75.741076][ T7349] usb 7-1: USB disconnect, device number 2 [ 75.743323][ T24] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 75.746820][ T24] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 76.046747][ T1350] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 76.049628][ T1350] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 76.057941][ T1350] appleir 0003:05AC:8243.0003: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 76.203209][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 76.307028][ T54] usb 9-1: USB disconnect, device number 3 [ 76.361190][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.343'. [ 76.365504][ T7354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.343'. [ 76.430117][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 76.447970][ T7362] cgroup2: Unknown parameter '' [ 76.976208][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 76.976224][ T40] audit: type=1400 audit(76.893:458): avc: denied { map } for pid=7387 comm="syz.1.353" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.989214][ T40] audit: type=1400 audit(76.893:459): avc: denied { execute } for pid=7387 comm="syz.1.353" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 77.275509][ T40] audit: type=1400 audit(77.193:460): avc: denied { getopt } for pid=7398 comm="syz.4.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.276433][ T7399] netlink: 696 bytes leftover after parsing attributes in process `syz.4.357'. [ 77.299732][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.357'. [ 77.299824][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.357'. [ 77.355906][ T7403] netlink: 'syz.2.359': attribute type 5 has an invalid length. [ 77.359134][ T7404] netlink: 'syz.2.359': attribute type 5 has an invalid length. [ 77.368224][ T40] audit: type=1400 audit(77.283:461): avc: denied { ioctl } for pid=7405 comm="syz.4.358" path="socket:[18520]" dev="sockfs" ino=18520 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.517191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.533892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.537866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.539493][ T7419] kvm: MWAIT instruction emulated as NOP! [ 77.546868][ T40] audit: type=1400 audit(77.463:462): avc: denied { append } for pid=7418 comm="syz.2.361" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.556091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.556298][ T40] audit: type=1400 audit(77.473:463): avc: denied { module_request } for pid=7418 comm="syz.2.361" kmod="crypto-cts(cbc(serpent))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 77.575483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.643494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.908658][ T40] audit: type=1400 audit(77.823:464): avc: denied { create } for pid=7446 comm="syz.4.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 77.959762][ T40] audit: type=1400 audit(77.873:465): avc: denied { call } for pid=7448 comm="syz.4.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 77.967481][ T7449] binder_alloc: 7448: binder_alloc_buf, no vma [ 77.968435][ T40] audit: type=1400 audit(77.873:466): avc: denied { transfer } for pid=7448 comm="syz.4.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 77.979430][ T40] audit: type=1400 audit(77.893:467): avc: denied { write } for pid=7448 comm="syz.4.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.055477][ T7456] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 78.069473][ T7456] ptrace attach of "/syz-executor exec"[5947] was attempted by "/syz-executor exec"[7456] [ 78.075545][ T7456] netlink: 108 bytes leftover after parsing attributes in process `syz.2.373'. [ 78.206030][ T5949] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 78.209559][ T5949] CPU: 1 UID: 0 PID: 5949 Comm: kworker/u33:7 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 78.209586][ T5949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.209599][ T5949] Workqueue: hci1 hci_rx_work [ 78.209652][ T5949] Call Trace: [ 78.209659][ T5949] [ 78.209665][ T5949] dump_stack_lvl+0x16c/0x1f0 [ 78.209693][ T5949] sysfs_warn_dup+0x7f/0xa0 [ 78.209729][ T5949] sysfs_create_dir_ns+0x24b/0x2b0 [ 78.209754][ T5949] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 78.209777][ T5949] ? find_held_lock+0x2b/0x80 [ 78.209804][ T5949] ? do_raw_spin_unlock+0x172/0x230 [ 78.209825][ T5949] kobject_add_internal+0x2c4/0x9b0 [ 78.209854][ T5949] kobject_add+0x16e/0x240 [ 78.209874][ T5949] ? __pfx_kobject_add+0x10/0x10 [ 78.209891][ T5949] ? do_raw_spin_unlock+0x172/0x230 [ 78.209902][ T5949] ? kobject_put+0xab/0x5a0 [ 78.209920][ T5949] device_add+0x288/0x1a70 [ 78.209932][ T5949] ? __pfx_dev_set_name+0x10/0x10 [ 78.209944][ T5949] ? __pfx_device_add+0x10/0x10 [ 78.209954][ T5949] ? mgmt_send_event_skb+0x2fb/0x460 [ 78.209973][ T5949] hci_conn_add_sysfs+0x17e/0x230 [ 78.209989][ T5949] le_conn_complete_evt+0x1075/0x1d70 [ 78.210007][ T5949] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 78.210020][ T5949] ? hci_event_packet+0x459/0x11c0 [ 78.210038][ T5949] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 78.210052][ T5949] ? skb_pull_data+0x166/0x210 [ 78.210067][ T5949] hci_le_meta_evt+0x354/0x5e0 [ 78.210081][ T5949] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 78.210097][ T5949] hci_event_packet+0x685/0x11c0 [ 78.210111][ T5949] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 78.210126][ T5949] ? __pfx_hci_event_packet+0x10/0x10 [ 78.210141][ T5949] ? kcov_remote_start+0x3c9/0x6d0 [ 78.210153][ T5949] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.210170][ T5949] hci_rx_work+0x2c5/0x16b0 [ 78.210186][ T5949] ? rcu_is_watching+0x12/0xc0 [ 78.210201][ T5949] process_one_work+0x9cf/0x1b70 [ 78.210218][ T5949] ? __pfx_process_one_work+0x10/0x10 [ 78.210233][ T5949] ? assign_work+0x1a0/0x250 [ 78.210244][ T5949] worker_thread+0x6c8/0xf10 [ 78.210259][ T5949] ? __kthread_parkme+0x19e/0x250 [ 78.210274][ T5949] ? __pfx_worker_thread+0x10/0x10 [ 78.210285][ T5949] kthread+0x3c5/0x780 [ 78.210295][ T5949] ? __pfx_kthread+0x10/0x10 [ 78.210306][ T5949] ? rcu_is_watching+0x12/0xc0 [ 78.210318][ T5949] ? __pfx_kthread+0x10/0x10 [ 78.210328][ T5949] ret_from_fork+0x5d4/0x6f0 [ 78.210343][ T5949] ? __pfx_kthread+0x10/0x10 [ 78.210353][ T5949] ret_from_fork_asm+0x1a/0x30 [ 78.210371][ T5949] [ 78.210389][ T5949] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 78.279060][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 78.279896][ T5949] Bluetooth: hci1: failed to register connection device [ 78.645323][ T7502] xt_socket: unknown flags 0xc [ 78.769578][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'. [ 78.836771][ T5949] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 79.071741][ T7551] xt_l2tp: missing protocol rule (udp|l2tpip) [ 79.103111][ T7349] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 79.243231][ T7349] usb 6-1: device descriptor read/64, error -71 [ 79.493686][ T7349] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 79.633375][ T7349] usb 6-1: device descriptor read/64, error -71 [ 79.747816][ T7349] usb usb6-port1: attempt power cycle [ 80.084840][ T7349] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 80.087817][ T7612] xt_hashlimit: size too large, truncated to 1048576 [ 80.105415][ T7614] netlink: 'syz.2.405': attribute type 1 has an invalid length. [ 80.105460][ T7349] usb 6-1: device descriptor read/8, error -71 [ 80.117242][ T7614] gretap1: entered promiscuous mode [ 80.145701][ T7618] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 80.149006][ T7618] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 80.160811][ T7612] No buffer was provided with the request [ 80.248964][ T5949] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 80.373389][ T7349] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 80.393747][ T7349] usb 6-1: device descriptor read/8, error -71 [ 80.503770][ T7349] usb usb6-port1: unable to enumerate USB device [ 81.344097][ T1333] cfg80211: failed to load regulatory.db [ 82.027037][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 82.027048][ T40] audit: type=1400 audit(81.943:480): avc: denied { name_bind } for pid=7637 comm="syz.1.411" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 82.165352][ T7644] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 82.171020][ T40] audit: type=1400 audit(82.083:481): avc: denied { read write } for pid=7643 comm="syz.1.413" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 82.178310][ T40] audit: type=1400 audit(82.083:482): avc: denied { open } for pid=7643 comm="syz.1.413" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.243218][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 83.963207][ T5949] Bluetooth: hci0: command 0x040f tx timeout [ 84.084272][ T5949] Bluetooth: hci2: Malformed HCI Event [ 84.160760][ T40] audit: type=1400 audit(84.073:483): avc: denied { shutdown } for pid=7663 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.207353][ T7666] SELinux: syz.1.420 (7666) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 84.217611][ T7666] bridge1: entered allmulticast mode [ 84.294708][ T5949] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 84.297475][ T5949] Bluetooth: hci1: Injecting HCI hardware error event [ 84.300660][ T5944] Bluetooth: hci1: hardware error 0x00 [ 84.781919][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 84.786420][ T40] audit: type=1400 audit(84.703:484): avc: denied { setopt } for pid=7675 comm="syz.2.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.881653][ T40] audit: type=1400 audit(84.793:485): avc: denied { setopt } for pid=7683 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 84.889449][ T40] audit: type=1400 audit(84.793:486): avc: denied { wake_alarm } for pid=7687 comm="syz.2.425" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.924215][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 84.943121][ T40] audit: type=1800 audit(84.853:487): pid=7699 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.428" name="file1" dev="tmpfs" ino=728 res=0 errno=0 [ 85.049429][ T40] audit: type=1400 audit(84.963:488): avc: denied { execmem } for pid=7709 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 85.161121][ T7719] netlink: 32 bytes leftover after parsing attributes in process `syz.3.436'. [ 85.166236][ T7719] netlink: 32 bytes leftover after parsing attributes in process `syz.3.436'. [ 85.172541][ T40] audit: type=1400 audit(85.083:489): avc: denied { ioctl } for pid=7718 comm="syz.3.436" path="socket:[17843]" dev="sockfs" ino=17843 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 85.352332][ T7743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.441'. [ 85.587368][ T1150] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.596612][ T7759] netlink: 'syz.2.445': attribute type 13 has an invalid length. [ 85.677509][ T1150] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.764591][ T5300] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.767512][ T5300] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.771347][ T5300] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.777894][ T5300] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.780571][ T5300] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.795827][ T1150] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.868934][ T7780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.451'. [ 85.909633][ T1150] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.942881][ T7772] chnl_net:caif_netlink_parms(): no params data found [ 86.056289][ T7772] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.059338][ T7772] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.062676][ T7772] bridge_slave_0: entered allmulticast mode [ 86.071351][ T7772] bridge_slave_0: entered promiscuous mode [ 86.097992][ T7772] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.100961][ T7772] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.104971][ T7772] bridge_slave_1: entered allmulticast mode [ 86.108096][ T7772] bridge_slave_1: entered promiscuous mode [ 86.136749][ T1150] bridge_slave_1: left allmulticast mode [ 86.138747][ T1150] bridge_slave_1: left promiscuous mode [ 86.140937][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.146157][ T1150] bridge_slave_0: left allmulticast mode [ 86.148011][ T1150] bridge_slave_0: left promiscuous mode [ 86.149935][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.183093][ T6002] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 86.356146][ T6002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.359616][ T6002] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 86.362402][ T6002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.363304][ T5944] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 86.367672][ T6002] usb 7-1: config 0 descriptor?? [ 86.382292][ T7815] syz.3.458: attempt to access beyond end of device [ 86.382292][ T7815] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 86.386653][ T7815] qnx4: unable to read the superblock [ 86.402068][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.407819][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.412042][ T1150] bond0 (unregistering): Released all slaves [ 86.440835][ T7772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.455515][ T7772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.538166][ T7772] team0: Port device team_slave_0 added [ 86.581905][ T6002] usbhid 7-1:0.0: can't add hid device: -71 [ 86.585236][ T6002] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 86.596483][ T6002] usb 7-1: USB disconnect, device number 3 [ 86.604613][ T7772] team0: Port device team_slave_1 added [ 86.609352][ T7832] sg_read: process 310 (syz.3.463) changed security contexts after opening file descriptor, this is not allowed. [ 86.680370][ T7772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.682542][ T7772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.695448][ T7843] xt_recent: Unsupported userspace flags (000000c7) [ 86.697487][ T7772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.716253][ T7772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.718491][ T7772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.727469][ T7772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.767706][ T7840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.849900][ T7772] hsr_slave_0: entered promiscuous mode [ 86.852255][ T7772] hsr_slave_1: entered promiscuous mode [ 86.854930][ T7772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.857298][ T7772] Cannot create hsr debugfs directory [ 86.864238][ T1150] hsr_slave_0: left promiscuous mode [ 86.867246][ T1150] hsr_slave_1: left promiscuous mode [ 86.870027][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.873187][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.876929][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.880357][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.909870][ T1150] veth1_macvtap: left promiscuous mode [ 86.912352][ T1150] veth0_macvtap: left promiscuous mode [ 86.915132][ T1150] veth1_vlan: left promiscuous mode [ 86.917357][ T1150] veth0_vlan: left promiscuous mode [ 86.984661][ T7853] mmap: syz.4.466 (7853): VmData 37466112 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 87.027364][ T7855] netlink: 56 bytes leftover after parsing attributes in process `syz.4.467'. [ 87.084631][ T6002] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 87.243236][ T6002] usb 7-1: Using ep0 maxpacket: 32 [ 87.246693][ T6002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.250077][ T6002] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 87.252959][ T6002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.259860][ T6002] usb 7-1: config 0 descriptor?? [ 87.266628][ T6002] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 87.277653][ T6002] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 87.416398][ T5944] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 87.497650][ C3] ldusb 7-1:0.0: Ring buffer overflow, 8 bytes dropped [ 87.638622][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 87.694940][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 87.803150][ T5944] Bluetooth: hci2: command tx timeout [ 87.825735][ T7866] ldusb 7-1:0.0: Read buffer overflow, 3 bytes dropped [ 87.836099][ C1] ldusb 7-1:0.0: Ring buffer overflow, 8 bytes dropped [ 88.565000][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 88.565015][ T40] audit: type=1400 audit(88.483:497): avc: denied { accept } for pid=7884 comm="syz.3.474" path="socket:[20798]" dev="sockfs" ino=20798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.644407][ T40] audit: type=1400 audit(88.563:498): avc: denied { ioctl } for pid=7891 comm="syz.3.476" path="socket:[19968]" dev="sockfs" ino=19968 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.657295][ T7890] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 88.796471][ T7903] program syz.4.478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.800436][ T7903] netlink: 36 bytes leftover after parsing attributes in process `syz.4.478'. [ 88.926113][ T7909] batadv_s0: renamed from bridge0 (while UP) [ 88.982109][ T7772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.987160][ T7772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.991518][ T7772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.998565][ T7772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.004000][ T7915] xt_hashlimit: invalid interval [ 89.018393][ T7915] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 89.087462][ T7772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.117991][ T7772] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.125918][ T195] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.128257][ T195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.144053][ T7934] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 89.149710][ T7935] tmpfs: Unknown parameter 'quotakhardlimit' [ 89.155930][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.158213][ T6041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.226877][ T6002] usb 7-1: USB disconnect, device number 4 [ 89.230303][ T6002] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 89.315002][ T7772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.340232][ T7772] veth0_vlan: entered promiscuous mode [ 89.347145][ T7772] veth1_vlan: entered promiscuous mode [ 89.386260][ T7772] veth0_macvtap: entered promiscuous mode [ 89.391857][ T7772] veth1_macvtap: entered promiscuous mode [ 89.407482][ T7772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.414239][ T7772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.418937][ T7772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.421792][ T7772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.426956][ T7772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.429701][ T7772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.500329][ T6041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.508946][ T6041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.531791][ T7972] devpts: Unknown parameter 'max+}10000000000' [ 89.534283][ T40] audit: type=1400 audit(89.443:499): avc: denied { mount } for pid=7971 comm="syz.2.491" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 89.545738][ T6046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.545826][ T40] audit: type=1400 audit(89.443:500): avc: denied { remount } for pid=7971 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 89.548591][ T6046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.575816][ T40] audit: type=1400 audit(89.493:501): avc: denied { mounton } for pid=7772 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 89.645971][ T40] audit: type=1400 audit(89.563:502): avc: denied { unmount } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 89.745592][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.494'. [ 89.802530][ T7985] binder: BINDER_SET_CONTEXT_MGR already set [ 89.806939][ T7985] binder: 7983:7985 ioctl 4018620d 2000000000c0 returned -16 [ 89.859633][ T40] audit: type=1400 audit(89.773:503): avc: denied { create } for pid=7988 comm="syz.2.496" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 89.876023][ T40] audit: type=1400 audit(89.773:504): avc: denied { link } for pid=7988 comm="syz.2.496" name="#9" dev="tmpfs" ino=830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 89.882715][ T40] audit: type=1400 audit(89.773:505): avc: denied { rename } for pid=7988 comm="syz.2.496" name="#a" dev="tmpfs" ino=830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 89.950245][ T8004] syz.2.500: attempt to access beyond end of device [ 89.950245][ T8004] loop2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 89.955354][ T8004] gfs2: error -5 reading superblock [ 90.105156][ T40] audit: type=1400 audit(90.023:506): avc: denied { associate } for pid=8018 comm="syz.4.507" name="cgroup.controllers" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 90.255422][ T6019] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 90.265078][ T8035] binder: 8034:8035 ioctl c0306201 200000000640 returned -22 [ 90.326571][ T8044] netlink: 'syz.4.512': attribute type 1 has an invalid length. [ 90.337915][ T8044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=8044 comm=syz.4.512 [ 90.344288][ T8044] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.376615][ T8044] veth3: entered promiscuous mode [ 90.425760][ T6019] usb 7-1: config index 0 descriptor too short (expected 46, got 36) [ 90.428990][ T6019] usb 7-1: config 0 interface 0 altsetting 130 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.433559][ T6019] usb 7-1: config 0 interface 0 altsetting 130 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.436972][ T6019] usb 7-1: config 0 interface 0 has no altsetting 0 [ 90.439032][ T6019] usb 7-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 90.441760][ T6019] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.446204][ T6019] usb 7-1: config 0 descriptor?? [ 90.449571][ T6019] usbhid 7-1:0.0: can't add hid device: -22 [ 90.451701][ T6019] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 90.487805][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'. [ 90.490522][ T8055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.516'. [ 90.672467][ T8013] kvm: pic: single mode not supported [ 90.793335][ T6002] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 90.896339][ T1333] usb 7-1: USB disconnect, device number 5 [ 90.944581][ T6002] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 90.947729][ T6002] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 90.951166][ T6002] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 90.955130][ T6002] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 90.958482][ T6002] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 90.962495][ T6002] usb 9-1: config 0 interface 0 has no altsetting 0 [ 90.966381][ T6002] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 90.969183][ T6002] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 90.971805][ T6002] usb 9-1: Product: syz [ 90.973566][ T6002] usb 9-1: Manufacturer: syz [ 90.975037][ T6002] usb 9-1: SerialNumber: syz [ 90.979212][ T6002] usb 9-1: config 0 descriptor?? [ 90.981291][ T8060] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 90.985335][ T6002] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 90.989173][ T6002] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 91.546987][ T8084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.524'. [ 91.551054][ T8084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=8084 comm=syz.3.524 [ 91.683462][ T1333] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 91.701047][ T195] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.723316][ T8090] netlink: 'syz.3.526': attribute type 1 has an invalid length. [ 91.837698][ T1333] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 91.841291][ T1333] usb 7-1: config 0 interface 0 has no altsetting 0 [ 91.846813][ T1333] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 91.849712][ T1333] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.852223][ T1333] usb 7-1: Product: syz [ 91.857648][ T1333] usb 7-1: Manufacturer: syz [ 91.859142][ T1333] usb 7-1: SerialNumber: syz [ 91.862158][ T1333] usb 7-1: config 0 descriptor?? [ 91.868012][ T1333] usb 7-1: selecting invalid altsetting 0 [ 91.947934][ T5300] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.951350][ T5300] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.954837][ T5300] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.957804][ T5300] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.960978][ T5300] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.066811][ T1333] usb 7-1: USB disconnect, device number 6 [ 92.144301][ T8093] chnl_net:caif_netlink_parms(): no params data found [ 92.157332][ T8105] netlink: 40 bytes leftover after parsing attributes in process `syz.3.527'. [ 92.228167][ T8093] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.230523][ T8093] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.232892][ T8093] bridge_slave_0: entered allmulticast mode [ 92.235932][ T8093] bridge_slave_0: entered promiscuous mode [ 92.240013][ T8093] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.242224][ T8093] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.244630][ T8093] bridge_slave_1: entered allmulticast mode [ 92.247214][ T8093] bridge_slave_1: entered promiscuous mode [ 92.281683][ T8093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.288453][ T8093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.336456][ T8093] team0: Port device team_slave_0 added [ 92.341125][ T8093] team0: Port device team_slave_1 added [ 92.371586][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.374561][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.382466][ T8093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.386608][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.388800][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.396963][ T8093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.436515][ T8093] hsr_slave_0: entered promiscuous mode [ 92.438726][ T8093] hsr_slave_1: entered promiscuous mode [ 92.440831][ T8093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.444389][ T8093] Cannot create hsr debugfs directory [ 92.878921][ T8122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.883437][ T8122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.891792][ T8122] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 93.113529][ T6019] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 93.515996][ T195] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.554052][ C3] ldusb 9-1:0.0: usb_submit_urb failed (-1) [ 93.556679][ T1333] usb 9-1: USB disconnect, device number 4 [ 93.568228][ T1333] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 93.590782][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 93.590795][ T40] audit: type=1400 audit(93.503:519): avc: denied { map } for pid=8136 comm="syz.4.534" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.604250][ T40] audit: type=1400 audit(93.503:520): avc: denied { execute } for pid=8136 comm="syz.4.534" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.611655][ T40] audit: type=1400 audit(93.503:521): avc: denied { ioctl } for pid=8136 comm="syz.4.534" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.616166][ T195] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.631331][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 93.636156][ T6046] bond0: (slave bond_slave_0): interface is now down [ 93.638634][ T6046] bond0: (slave bond_slave_1): interface is now down [ 93.674262][ T40] audit: type=1400 audit(93.593:522): avc: denied { getopt } for pid=8142 comm="syz.2.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.709988][ T195] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.743779][ T8146] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.817225][ T8145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.830418][ T195] bridge_slave_1: left allmulticast mode [ 93.832287][ T195] bridge_slave_1: left promiscuous mode [ 93.834642][ T195] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.838240][ T195] bridge_slave_0: left allmulticast mode [ 93.840045][ T195] bridge_slave_0: left promiscuous mode [ 93.841909][ T195] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.043217][ T5944] Bluetooth: hci2: command tx timeout [ 94.093889][ T8155] netlink: 20 bytes leftover after parsing attributes in process `syz.4.540'. [ 94.102505][ T8155] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 94.108143][ T195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.116055][ T195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.120744][ T195] bond0 (unregistering): Released all slaves [ 94.353976][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'. [ 94.404050][ T40] audit: type=1400 audit(94.323:523): avc: denied { write } for pid=8177 comm="syz.2.545" name="ptp0" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 94.429631][ T195] hsr_slave_0: left promiscuous mode [ 94.432126][ T195] hsr_slave_1: left promiscuous mode [ 94.434606][ T195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.436944][ T195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.442349][ T195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.444964][ T195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.463809][ T195] veth1_macvtap: left promiscuous mode [ 94.465554][ T195] veth0_macvtap: left promiscuous mode [ 94.467333][ T195] veth1_vlan: left promiscuous mode [ 94.469014][ T195] veth0_vlan: left promiscuous mode [ 94.573986][ T10] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 94.738232][ T10] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 94.740937][ T10] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 94.744614][ T10] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 94.748089][ T10] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 94.751682][ T10] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 94.758329][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 94.762064][ T10] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 94.768278][ T10] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 94.770856][ T10] usb 8-1: Product: syz [ 94.772174][ T10] usb 8-1: Manufacturer: syz [ 94.773894][ T10] usb 8-1: SerialNumber: syz [ 94.777560][ T10] usb 8-1: config 0 descriptor?? [ 94.779857][ T8171] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 94.793820][ T10] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 94.798353][ T10] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 94.866016][ T8192] netlink: 27 bytes leftover after parsing attributes in process `syz.2.548'. [ 95.077064][ T195] team0 (unregistering): Port device team_slave_1 removed [ 95.161656][ T195] team0 (unregistering): Port device team_slave_0 removed [ 95.577183][ T1143] bond0: (slave bond_slave_0): interface is now down [ 95.579986][ T1143] bond0: (slave bond_slave_1): interface is now down [ 95.916237][ T8093] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.934670][ T8093] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.940879][ T8093] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.948236][ T8093] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.998867][ T8234] [U]  [ 96.006008][ T6043] Bluetooth: (null): Invalid header checksum [ 96.008491][ T6043] Bluetooth: (null): Invalid header checksum [ 96.022974][ T8093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.038540][ T8093] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.045775][ T6043] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.048129][ T6043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.061229][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.063710][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.089450][ T40] audit: type=1400 audit(96.003:524): avc: denied { lock } for pid=8238 comm="syz.4.556" path="socket:[22154]" dev="sockfs" ino=22154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 96.113876][ T6044] Bluetooth: (null): Invalid header checksum [ 96.124401][ T5944] Bluetooth: hci2: command tx timeout [ 96.133675][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 96.149772][ T8250] hfsplus: unable to find HFS+ superblock [ 96.153574][ T40] audit: type=1400 audit(96.073:525): avc: denied { read append } for pid=8249 comm="syz.4.558" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 96.191805][ T8254] netlink: 'syz.4.559': attribute type 9 has an invalid length. [ 96.223247][ T6046] Bluetooth: (null): Invalid header checksum [ 96.231048][ T8093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.254389][ T8261] netlink: 52 bytes leftover after parsing attributes in process `syz.4.561'. [ 96.256602][ T8093] veth0_vlan: entered promiscuous mode [ 96.262387][ T8093] veth1_vlan: entered promiscuous mode [ 96.283057][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 96.285448][ T8093] veth0_macvtap: entered promiscuous mode [ 96.290062][ T8093] veth1_macvtap: entered promiscuous mode [ 96.294690][ T8214] Bluetooth: (null): Too short H5 packet [ 96.301311][ T8093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.309649][ T8093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.314646][ T8093] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.317345][ T8093] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.320125][ T8093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.322806][ T8093] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.334718][ T6044] Bluetooth: (null): Invalid header checksum [ 96.362790][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.368936][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.386556][ T6044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.389037][ T6044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.443230][ T6041] Bluetooth: (null): Invalid header checksum [ 96.553481][ T6046] Bluetooth: (null): Invalid header checksum [ 96.663269][ T6041] Bluetooth: (null): Invalid header checksum [ 96.774748][ T6044] Bluetooth: (null): Invalid header checksum [ 96.884462][ T6041] Bluetooth: (null): Invalid header checksum [ 96.926709][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 96.930325][ T10] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 96.932519][ T10] usb 7-1: can't read configurations, error -71 [ 97.328875][ T6002] usb 8-1: USB disconnect, device number 8 [ 97.332509][ T6002] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 97.483249][ T6043] bond0: (slave bond_slave_0): interface is now down [ 97.485839][ T6043] bond0: (slave bond_slave_1): interface is now down [ 97.489941][ T6043] bond0: now running without any active interface! [ 97.723259][ T8282] syz.2.567 (8282): attempted to duplicate a private mapping with mremap. This is not supported. [ 97.727541][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.730121][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.732530][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.732894][ T40] audit: type=1400 audit(97.643:526): avc: denied { map } for pid=8281 comm="syz.2.567" path="socket:[22229]" dev="sockfs" ino=22229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 97.735405][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.735431][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.735443][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.735455][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.735467][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.735478][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.735490][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.735508][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.743457][ T6002] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 97.753364][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753380][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753392][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753403][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753415][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753427][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753439][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753450][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753462][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753474][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753485][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753497][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753513][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753525][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753536][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753548][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753560][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753571][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753583][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753594][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753606][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753618][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.753629][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.826842][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.829384][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.831783][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.834268][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.836865][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.839398][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.841821][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.844270][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.846687][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 97.855601][ T6021] hid-generic 0000:007F:FFFFFFFE.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 97.892155][ T8283] fido_id[8283]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 97.898813][ T8286] Malformed UNC in devname [ 97.898813][ T8286] [ 97.901643][ T8286] CIFS: VFS: Malformed UNC in devname [ 97.913549][ T6002] usb 8-1: Using ep0 maxpacket: 8 [ 97.923828][ T6002] usb 8-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 97.927034][ T6002] usb 8-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 97.929931][ T6002] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 97.932721][ T6002] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.982050][ T8290] tun0: tun_chr_ioctl cmd 1074025676 [ 97.984406][ T8290] tun0: owner set to 0 [ 98.140382][ T8274] netlink: 14 bytes leftover after parsing attributes in process `syz.3.564'. [ 98.199957][ T8274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.207147][ T8274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.212141][ T8274] bond0 (unregistering): Released all slaves [ 98.223141][ T7349] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 98.357514][ T8293] netlink: 'syz.4.571': attribute type 4 has an invalid length. [ 98.358521][ T5984] usb 8-1: USB disconnect, device number 9 [ 98.373317][ T7349] usb 7-1: Using ep0 maxpacket: 16 [ 98.377202][ T7349] usb 7-1: config 4 has an invalid interface number: 48 but max is 0 [ 98.379807][ T7349] usb 7-1: config 4 has no interface number 0 [ 98.381841][ T7349] usb 7-1: config 4 interface 48 altsetting 7 endpoint 0x6 has invalid maxpacket 2476, setting to 1024 [ 98.385949][ T7349] usb 7-1: config 4 interface 48 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 1024 [ 98.389133][ T7349] usb 7-1: config 4 interface 48 altsetting 7 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 98.392680][ T7349] usb 7-1: config 4 interface 48 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1024 [ 98.393310][ T40] audit: type=1400 audit(98.303:527): avc: denied { mount } for pid=8295 comm="syz.4.572" name="/" dev="ramfs" ino=24685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 98.395966][ T7349] usb 7-1: config 4 interface 48 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 98.406103][ T40] audit: type=1400 audit(98.313:528): avc: denied { unmount } for pid=6690 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 98.407020][ T7349] usb 7-1: config 4 interface 48 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 98.415806][ T7349] usb 7-1: config 4 interface 48 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 98.419200][ T7349] usb 7-1: config 4 interface 48 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 98.423201][ T7349] usb 7-1: config 4 interface 48 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 98.427118][ T7349] usb 7-1: config 4 interface 48 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 98.431396][ T7349] usb 7-1: config 4 interface 48 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 98.435816][ T7349] usb 7-1: config 4 interface 48 has no altsetting 0 [ 98.440718][ T7349] usb 7-1: New USB device found, idVendor=12d1, idProduct=415b, bcdDevice=9b.93 [ 98.444971][ T7349] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.448227][ T7349] usb 7-1: Product: 왌☽ǸⳲ棉ᑼ閂ꄇຽ᪁⩏❃냚棶驐龡⣕䄢⨉荙䲂Ӳ曓䤬圲笣邘㽾큯虱茒┷脒翌쮌璧䘃뜷䪉涱猲欎⡰箊극ꕞ磍ꔒ뎉縢㳟탢섃㠠胀덀遴슗䢱ퟔ꼼᫜艇酺ᭋ뺩墔䢸닃淏␺Ꜥ䷬觲̌＼壜᪾鏓錾얷揝ᤂ䮢覮ꜫ [ 98.457381][ T7349] usb 7-1: Manufacturer: ᣿锾ِꮡ怆䴑鮳詸널ᨼ굏ᨣ侾栵麭艷⪢ꀫﵦ癬ᴓ㖵➀櫢䃅假轉斐᫾駨䒈됴羝ᒒ㧬굌鿻䙀틛댻訉치峴瘊㔏荈즕醈⌘욚㔹렵℥ྜྷ꼌騳Ⴋ쟃∟裮欱悢叏闵晅᥿棿勤쫳㎙甿魬᡼꽇轾쯖ꚸ䧏릴괦ᵨটꜸ﹐軳즥싻 [ 98.466798][ T7349] usb 7-1: SerialNumber: 㰁 [ 98.475725][ T8290] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 98.478895][ T8290] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 98.639699][ T195] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.712642][ T7349] option 7-1:4.48: GSM modem (1-port) converter detected [ 98.725243][ T7349] usb 7-1: USB disconnect, device number 9 [ 98.737371][ T7349] option 7-1:4.48: device disconnected [ 98.849678][ T5300] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.854815][ T5300] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.858454][ T5300] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.862580][ T5300] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.873676][ T5300] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.908788][ T40] audit: type=1400 audit(98.823:529): avc: denied { write } for pid=8320 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.928854][ T8326] random: crng reseeded on system resumption [ 98.930276][ T40] audit: type=1400 audit(98.843:530): avc: denied { create } for pid=8325 comm="syz.4.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 99.045294][ T8316] chnl_net:caif_netlink_parms(): no params data found [ 99.117465][ T8316] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.119919][ T8316] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.122284][ T8316] bridge_slave_0: entered allmulticast mode [ 99.125095][ T8316] bridge_slave_0: entered promiscuous mode [ 99.128818][ T8316] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.131579][ T8316] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.134973][ T8316] bridge_slave_1: entered allmulticast mode [ 99.138667][ T8316] bridge_slave_1: entered promiscuous mode [ 99.172582][ T8316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.179439][ T8316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.219646][ T8316] team0: Port device team_slave_0 added [ 99.225705][ T8316] team0: Port device team_slave_1 added [ 99.262059][ T8316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.265678][ T8316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.275745][ T8316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.280791][ T8316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.283481][ T8316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.292025][ T8316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.352924][ T8316] hsr_slave_0: entered promiscuous mode [ 99.356214][ T8316] hsr_slave_1: entered promiscuous mode [ 99.358279][ T8316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.361367][ T8316] Cannot create hsr debugfs directory [ 99.674750][ T8352] /dev/sr0: Can't open blockdev [ 99.796088][ T8366] nfs4: Bad value for 'source' [ 99.924669][ T40] audit: type=1400 audit(99.843:531): avc: denied { read write } for pid=8374 comm="syz.3.592" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 99.925115][ T8375] [ 99.931789][ T40] audit: type=1400 audit(99.843:532): avc: denied { open } for pid=8374 comm="syz.3.592" path="/140/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 99.945644][ T40] audit: type=1400 audit(99.863:533): avc: denied { ioctl } for pid=8374 comm="syz.3.592" path="/dev/usbmon2" dev="devtmpfs" ino=744 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 100.158799][ T8395] netlink: 'syz.3.599': attribute type 30 has an invalid length. [ 100.256554][ T8400] cdrom: dropping to single frame dma [ 100.265677][ T40] audit: type=1400 audit(100.183:534): avc: denied { map } for pid=8399 comm="syz.2.601" path="/dev/sr0" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 100.273942][ T8398] delete_channel: no stack [ 100.337692][ T40] audit: type=1400 audit(100.253:535): avc: denied { execstack } for pid=8402 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 100.357159][ T40] audit: type=1400 audit(100.273:536): avc: denied { map } for pid=8408 comm="syz.2.603" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 100.459757][ T6021] hid-generic 0005:10CF:0009.0005: unknown main item tag 0x0 [ 100.479849][ T6021] hid-generic 0005:10CF:0009.0005: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 100.563372][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.567286][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.571355][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.575821][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.578548][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.588246][ T195] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.622977][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 100.628552][ T8419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.923539][ T5300] Bluetooth: hci2: command tx timeout [ 101.606984][ T195] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.633595][ T8441] block nbd3: NBD_DISCONNECT [ 101.687665][ T40] audit: type=1400 audit(101.603:537): avc: denied { bind } for pid=8447 comm="syz.2.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.696356][ T40] audit: type=1400 audit(101.603:538): avc: denied { watch } for pid=8440 comm="syz.3.613" path="/151/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 101.698134][ T8423] chnl_net:caif_netlink_parms(): no params data found [ 101.732124][ T195] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.768519][ T8453] netlink: 132 bytes leftover after parsing attributes in process `syz.3.616'. [ 101.780816][ T8459] netlink: 132 bytes leftover after parsing attributes in process `syz.3.616'. [ 101.821940][ T8423] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.824529][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.826760][ T8423] bridge_slave_0: entered allmulticast mode [ 101.829400][ T8423] bridge_slave_0: entered promiscuous mode [ 101.833811][ T8423] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.836498][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.838770][ T8423] bridge_slave_1: entered allmulticast mode [ 101.841325][ T8423] bridge_slave_1: entered promiscuous mode [ 101.904199][ T8423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.917172][ T8423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.958183][ T195] bridge_slave_1: left allmulticast mode [ 101.960049][ T195] bridge_slave_1: left promiscuous mode [ 101.961920][ T195] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.967716][ T195] bridge_slave_0: left allmulticast mode [ 101.969591][ T195] bridge_slave_0: left promiscuous mode [ 101.971488][ T195] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.180971][ T195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.185985][ T195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.189839][ T195] bond0 (unregistering): Released all slaves [ 102.215629][ T8423] team0: Port device team_slave_0 added [ 102.219339][ T8423] team0: Port device team_slave_1 added [ 102.271340][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.275232][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.286045][ T8423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.312181][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.323430][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.331698][ T8423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.411803][ T8423] hsr_slave_0: entered promiscuous mode [ 102.414320][ T8423] hsr_slave_1: entered promiscuous mode [ 102.417077][ T8423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.420470][ T8423] Cannot create hsr debugfs directory [ 102.491415][ T195] hsr_slave_0: left promiscuous mode [ 102.493687][ T195] hsr_slave_1: left promiscuous mode [ 102.495687][ T195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.498063][ T195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.500867][ T195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.503585][ T195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.521898][ T195] veth1_macvtap: left promiscuous mode [ 102.525172][ T195] veth0_macvtap: left promiscuous mode [ 102.526989][ T195] veth1_vlan: left promiscuous mode [ 102.528701][ T195] veth0_vlan: left promiscuous mode [ 102.613272][ T5300] Bluetooth: hci1: command tx timeout [ 103.005536][ T5300] Bluetooth: hci2: command tx timeout [ 103.079901][ T195] team0 (unregistering): Port device team_slave_1 removed [ 103.145279][ T195] team0 (unregistering): Port device team_slave_0 removed [ 103.743793][ T8423] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.828416][ T8423] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.943464][ T8423] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.944930][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 103.944940][ T40] audit: type=1400 audit(103.863:542): avc: denied { listen } for pid=8494 comm="syz.2.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 103.956902][ T40] audit: type=1400 audit(103.863:543): avc: denied { read } for pid=8494 comm="syz.2.621" path="socket:[23058]" dev="sockfs" ino=23058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.053605][ T8423] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.194440][ T195] bridge_slave_1: left allmulticast mode [ 104.196239][ T195] bridge_slave_1: left promiscuous mode [ 104.198521][ T195] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.202728][ T195] bridge_slave_0: left allmulticast mode [ 104.204950][ T195] bridge_slave_0: left promiscuous mode [ 104.206801][ T195] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.488078][ T195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.494099][ T195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.498865][ T195] bond0 (unregistering): Released all slaves [ 104.505581][ T195] bond1 (unregistering): Released all slaves [ 104.564219][ T195] bond2 (unregistering): Released all slaves [ 104.570165][ T8316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.582292][ T8316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.586648][ T8316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.613319][ T8316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.648928][ T8423] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.659568][ T8423] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.665003][ T8423] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.678073][ T8423] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.685332][ T5300] Bluetooth: hci1: command tx timeout [ 104.757026][ T8316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.766524][ T8316] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.781550][ T6043] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.784303][ T6043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.788300][ T6043] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.790581][ T6043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.806204][ T8518] tc_dump_action: action bad kind [ 104.836029][ T8423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.846311][ T8423] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.854148][ T6043] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.856430][ T6043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.877654][ T6044] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.880154][ T6044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.912570][ T195] hsr_slave_0: left promiscuous mode [ 104.916407][ T195] hsr_slave_1: left promiscuous mode [ 104.918485][ T195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.920808][ T195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.923826][ T195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.926129][ T195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.952186][ T195] veth1_macvtap: left promiscuous mode [ 104.954506][ T195] veth0_macvtap: left promiscuous mode [ 104.956474][ T195] veth1_vlan: left promiscuous mode [ 104.958205][ T195] veth0_vlan: left promiscuous mode [ 105.085336][ T5300] Bluetooth: hci2: command tx timeout [ 105.564313][ T195] team0 (unregistering): Port device team_slave_1 removed [ 105.601406][ T195] team0 (unregistering): Port device team_slave_0 removed [ 106.177286][ T8316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.203892][ T8316] veth0_vlan: entered promiscuous mode [ 106.209129][ T8316] veth1_vlan: entered promiscuous mode [ 106.227808][ T40] audit: type=1400 audit(106.143:544): avc: denied { connect } for pid=8540 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 106.234864][ T8316] veth0_macvtap: entered promiscuous mode [ 106.241881][ T8316] veth1_macvtap: entered promiscuous mode [ 106.326733][ T8316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.336303][ T8316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.340733][ T8423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.344761][ T8316] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.347559][ T8316] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.350277][ T8316] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.352965][ T8316] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.356741][ T8543] syz.3.630: attempt to access beyond end of device [ 106.356741][ T8543] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 106.362694][ T8543] EXT4-fs (nbd3): unable to read superblock [ 106.368638][ T8547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.632'. [ 106.407223][ T6034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.410824][ T6034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.431150][ T6034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.433685][ T6041] ------------[ cut here ]------------ [ 106.436409][ T6041] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 106.440072][ T6034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.440325][ T6041] WARNING: CPU: 1 PID: 6041 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 106.446485][ T6041] Modules linked in: [ 106.448193][ T6041] CPU: 1 UID: 0 PID: 6041 Comm: kworker/u32:17 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 106.453329][ T6041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.457207][ T6041] Workqueue: bond0 bond_mii_monitor [ 106.458851][ T6041] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 106.460751][ T6041] Code: 05 ff ff ff e8 64 63 5a f8 c6 05 b4 b7 2e 07 01 90 ba 48 00 00 00 48 c7 c6 00 4c e3 8c 48 c7 c7 a0 4b e3 8c e8 c4 2e 19 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 32 a8 90 e8 ee 1a c1 f8 e9 [ 106.467251][ T6041] RSP: 0018:ffffc90004a6f9f0 EFLAGS: 00010286 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 106.470406][ T6041] RAX: 0000000000000000 RBX: ffff88802bd70000 RCX: ffffffff817ae368 [ 106.473274][ T6041] RDX: ffff88802954a440 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 106.475728][ T6041] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 106.478202][ T6041] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff9200094df48 [ 106.480673][ T6041] R13: ffff88802bd70cc5 R14: ffffffff8c58df80 R15: ffffffff899af0f0 [ 106.483681][ T6041] FS: 0000000000000000(0000) GS:ffff8880d685a000(0000) knlGS:0000000000000000 [ 106.487211][ T6041] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.489286][ T6041] CR2: 00007fca5b729e9c CR3: 000000003a62b000 CR4: 0000000000352ef0 [ 106.491748][ T6041] DR0: 0000000000000007 DR1: 0000000000004e6a DR2: 0000000000000007 [ 106.494460][ T6041] DR3: 00000000000002d5 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 106.496909][ T6041] Call Trace: [ 106.497966][ T6041] [ 106.498906][ T6041] ethtool_op_get_link+0x1d/0x70 [ 106.500495][ T6041] bond_check_dev_link+0x3fc/0x710 [ 106.502717][ T6041] ? __pfx_bond_check_dev_link+0x10/0x10 [ 106.504893][ T6041] bond_mii_monitor+0x3c0/0x2dc0 [ 106.506447][ T6041] ? __pfx_bond_mii_monitor+0x10/0x10 [ 106.508149][ T6041] ? rcu_is_watching+0x12/0xc0 [ 106.509661][ T6041] process_one_work+0x9cf/0x1b70 [ 106.511215][ T6041] ? __pfx_process_one_work+0x10/0x10 [ 106.512909][ T6041] ? assign_work+0x1a0/0x250 [ 106.514876][ T6041] worker_thread+0x6c8/0xf10 [ 106.516268][ T6041] ? __pfx_worker_thread+0x10/0x10 [ 106.518324][ T6041] kthread+0x3c5/0x780 [ 106.520167][ T6041] ? __pfx_kthread+0x10/0x10 [ 106.521656][ T6041] ? rcu_is_watching+0x12/0xc0 [ 106.523275][ T6041] ? __pfx_kthread+0x10/0x10 [ 106.524750][ T6041] ret_from_fork+0x5d4/0x6f0 [ 106.526199][ T6041] ? __pfx_kthread+0x10/0x10 [ 106.527649][ T6041] ret_from_fork_asm+0x1a/0x30 [ 106.529161][ T6041] [ 106.530133][ T6041] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.532369][ T6041] CPU: 1 UID: 0 PID: 6041 Comm: kworker/u32:17 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 106.536001][ T6041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.539201][ T6041] Workqueue: bond0 bond_mii_monitor [ 106.540817][ T6041] Call Trace: [ 106.541863][ T6041] [ 106.542768][ T6041] dump_stack_lvl+0x3d/0x1f0 [ 106.544212][ T6041] panic+0x71c/0x800 [ 106.545455][ T6041] ? __pfx_panic+0x10/0x10 [ 106.546856][ T6041] ? show_trace_log_lvl+0x29b/0x3e0 [ 106.548490][ T6041] ? check_panic_on_warn+0x1f/0xb0 [ 106.550150][ T6041] ? __linkwatch_sync_dev+0x1ed/0x230 [ 106.551839][ T6041] check_panic_on_warn+0xab/0xb0 [ 106.553479][ T6041] __warn+0xf6/0x3c0 [ 106.554719][ T6041] ? preempt_schedule_notrace+0x62/0xe0 [ 106.556454][ T6041] ? __linkwatch_sync_dev+0x1ed/0x230 [ 106.558117][ T6041] report_bug+0x3c3/0x580 [ 106.559497][ T6041] ? __linkwatch_sync_dev+0x1ed/0x230 [ 106.561175][ T6041] handle_bug+0x184/0x210 [ 106.562493][ T6041] exc_invalid_op+0x17/0x50 [ 106.563878][ T6041] asm_exc_invalid_op+0x1a/0x20 [ 106.565356][ T6041] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 106.567168][ T6041] Code: 05 ff ff ff e8 64 63 5a f8 c6 05 b4 b7 2e 07 01 90 ba 48 00 00 00 48 c7 c6 00 4c e3 8c 48 c7 c7 a0 4b e3 8c e8 c4 2e 19 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 32 a8 90 e8 ee 1a c1 f8 e9 [ 106.573109][ T6041] RSP: 0018:ffffc90004a6f9f0 EFLAGS: 00010286 [ 106.574998][ T6041] RAX: 0000000000000000 RBX: ffff88802bd70000 RCX: ffffffff817ae368 [ 106.577447][ T6041] RDX: ffff88802954a440 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 106.579919][ T6041] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 106.582357][ T6041] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff9200094df48 [ 106.584795][ T6041] R13: ffff88802bd70cc5 R14: ffffffff8c58df80 R15: ffffffff899af0f0 [ 106.587288][ T6041] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 106.589051][ T6041] ? __warn_printk+0x198/0x350 [ 106.590553][ T6041] ? __warn_printk+0x1a5/0x350 [ 106.592056][ T6041] ethtool_op_get_link+0x1d/0x70 [ 106.593597][ T6041] bond_check_dev_link+0x3fc/0x710 [ 106.595177][ T6041] ? __pfx_bond_check_dev_link+0x10/0x10 [ 106.596926][ T6041] bond_mii_monitor+0x3c0/0x2dc0 [ 106.598472][ T6041] ? __pfx_bond_mii_monitor+0x10/0x10 [ 106.600165][ T6041] ? rcu_is_watching+0x12/0xc0 [ 106.601666][ T6041] process_one_work+0x9cf/0x1b70 [ 106.603214][ T6041] ? __pfx_process_one_work+0x10/0x10 [ 106.604896][ T6041] ? assign_work+0x1a0/0x250 [ 106.606343][ T6041] worker_thread+0x6c8/0xf10 [ 106.607822][ T6041] ? __pfx_worker_thread+0x10/0x10 [ 106.609458][ T6041] kthread+0x3c5/0x780 [ 106.610741][ T6041] ? __pfx_kthread+0x10/0x10 [ 106.612201][ T6041] ? rcu_is_watching+0x12/0xc0 [ 106.613701][ T6041] ? __pfx_kthread+0x10/0x10 [ 106.615146][ T6041] ret_from_fork+0x5d4/0x6f0 [ 106.616606][ T6041] ? __pfx_kthread+0x10/0x10 [ 106.618051][ T6041] ret_from_fork_asm+0x1a/0x30 [ 106.619585][ T6041] [ 106.621135][ T6041] Kernel Offset: disabled [ 106.622494][ T6041] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:40:03 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff81a77e1e RBX=0000000000000001 RCX=ffffc90006378000 RDX=ffffc90006377701 RSI=ffffc900063777d0 RDI=ffffc900063777d0 RBP=ffffc90006377780 RSP=ffffc90006377678 R8 =ffffffff913b9836 R9 =0000000000000000 R10=0000000000000000 R11=00000000000061e4 R12=ffffc90006377788 R13=ffffc90006377738 R14=ffffc900063777d8 R15=ffffc9000637776c RIP=ffffffff816ad37f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555a229500 ffffffff 00c00000 GS =0000 ffff8880d675a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4487f44e9c CR3=000000004a8ec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000004144 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c0c0c0 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbb9c41c0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbb9c4176 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbb9c4176 00007ffdbb9c417c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42f2811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42f2811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42f2811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42f2811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42f2811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42f2811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2029706d742d7a79 73287269646b6d00 706d742d7a79732f 2e00303030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 050c554851085f5c 560d574c414e4800 554851085f5c560a 0b00151515151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b2985 RDI=ffffffff9b082320 RBP=ffffffff9b0822e0 RSP=ffffc90004a6f360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0822e0 R15=ffffffff855b2920 RIP=ffffffff855b29af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d685a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fca5b729e9c CR3=000000003a62b000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000004e6a DR2=0000000000000007 DR3=00000000000002d5 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030656c69662f30 656c69662f30656c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feacb811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feacb811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feacb811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feacb811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feacb811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feacb811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feacb984488 00007feacb984480 00007feacb984478 00007feacb984450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feacc4ed100 00007feacb984440 00007feacb980004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feacb984498 00007feacb984490 00007feacb984488 00007feacb984480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a63cec0 RCX=ffffffff81b011a3 RDX=ffff88801e2dc880 RSI=ffffffff81b0117d RDI=0000000000000005 RBP=ffffc90000157d08 RSP=ffffc90000157bc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1cb9f6e R12=1ffff9200002af80 R13=0000000000000003 R14=0000000000000001 R15=ffffed100d4c79d9 RIP=ffffffff81b01189 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d695a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f66661d4f98 CR3=0000000046652000 CR4=00352ef0 DR0=0000000000000007 DR1=000000000000000b DR2=0000000000000090 DR3=0000000000000009 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdee8485c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feacb811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feacb811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feacb811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feacb811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feacb811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feacb811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000007 RBX=0000000000000001 RCX=0000000000000002 RDX=0000000000000007 RSI=ffff88802c0d8af0 RDI=0000000000000007 RBP=ffff88802c0d8000 RSP=ffffc9000373f218 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000028 R11=0000000000000001 R12=ffff88802c0d8af0 R13=ffff88802c0d8b18 R14=0000000000000000 R15=ffffffff8e5c4cc0 RIP=ffffffff819859ee RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a5a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1383fcf440 CR3=000000003a607000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 766c6f7365726269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000c10 000000000000d3f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000