last executing test programs: 1m2.595401745s ago: executing program 3 (id=3020): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = inotify_init1(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000380)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_io_uring_setup(0x218e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) io_uring_enter(r2, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r2, 0x52e, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x2c, 0x24, 0xe0b, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 31.305775417s ago: executing program 3 (id=3037): socket$inet6(0xa, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e047f2d20"], 0x7) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr, @multicast2}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) gettid() r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) readv(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/171, 0xab}], 0x1) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) fcntl$setsig(r3, 0xa, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x6, &(0x7f00000002c0)=@framed={{}, [@jmp={0x5, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='\"\x00\x00\x00\a'], 0xd) 30.02636646s ago: executing program 3 (id=3064): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() r1 = openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000003c0)={0x2, 'ipvlan1\x00', {0x4}, 0x61}) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000040)=0xfffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}}) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, 0x0}, 0x20) ftruncate(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) getpeername$l2tp(r7, 0x0, &(0x7f00000002c0)) 28.763787884s ago: executing program 3 (id=3066): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x9e) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000100000007010000f8ffffffb702000008000000b703000000000000850000007000303015f6973b00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r3}, 0x10) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaabdaa00000000000086dd60fca33f0000730900000000000000000000000000000000fe80a5836bf1e629fa561436000000000000003cb512409bc586801d7f064c1914e05b10f2cc171b09f6a8ae07431c6a0a9c4e0a80226be0d46b0366e4fa1658a3e8c88ff5914e550aac7c35645a6c8c1b329c4048f4e5e99e290369964af5f0a1104fba2c89b6b1d4926fb598326902d91877910955343d7b358174bde2146b9c06766e5a9c302a69e32604df0050bc6bd2e07a1a6957b480491e6a22ffb7bfc1d25ea5b05c0dbc44544cf762213cf137063dbe905bb739923d6d5d4d4cf636073d1b6618b2c910e7fb5f692cf9e73e"], 0x0) sendmmsg(r4, 0x0, 0x0, 0x80fe) sendmsg$nl_xfrm(r1, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000000c0)=0xbf) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) clock_getres(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$media(&(0x7f00000000c0), 0x1fc, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r6, 0x7c81, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 27.343183334s ago: executing program 3 (id=3069): r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x100000, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000021000100000000000000000002000000faff000000000000080018004e284e2205001600000000000800"], 0x34}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}}}, 0xb8}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x40044160, 0x3) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000040)={0x20, 0xa}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/223, 0xdf}], 0x1, 0xfffff62d, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x1c, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x62040200) 24.193290611s ago: executing program 3 (id=3075): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc114}, 0x20014000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000e0ffffff7b8af0ff00000000bfa1000000000000070100", @ANYRESHEX=r0, @ANYRES8=0x0], 0x0, 0x91bb, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x0, 0x7, 0x8, 0xfffffffe}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0xfffffdef, 0x0) 16.084751826s ago: executing program 0 (id=3091): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd364158a4591c559f76c0130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce74c4dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f00c484d339c480f70006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08ef74c48785f895b4ec8d1141d5e8744d7f09ab4df602"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000005a"], 0x1c}}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.103145981s ago: executing program 0 (id=3094): r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x100000, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000021000100000000000000000002000000faff000000000000080018004e284e2205001600000000000800"], 0x34}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}}}, 0xb8}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x40044160, 0x3) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000040)={0x20, 0xa}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000000)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x8, 0x0, "82ffe9a7ca8d338e0978c80c568a9d94969744223a3bf7b1ce1f566ac0b5502df67a3a54817e92bda7e02337b5186bf1532b41dc173f2ef38ea641dbf4bea193", "2c8d978bbbaf836770b6bc05c7d33d4ba1eeb28b81365fd5b98b898cd82f59b99d77af213e51d53d7e04d4e85e1d41ee121ea3aad63b499c7a25e1b181ac9ebf", "9fef7affaecac6ed08f4c36330801327cabc8491b2a7e8063de5ae1f02b8cb3a", [0x0, 0x3]}}) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/223, 0xdf}], 0x1, 0xfffff62d, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x1c, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x62040200) 14.236592092s ago: executing program 1 (id=3096): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af25, 0x0) creat(0x0, 0x27) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x12) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffc71) socket$caif_stream(0x25, 0x1, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x2, 0x7, 0xffffff54}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000040)="a94c3a3225c3c233ee759a9a1fb1930e492fb3961e73ce") 12.307875517s ago: executing program 1 (id=3098): r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x100000, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000021000100000000000000000002000000faff000000000000080018004e284e2205001600000000000800"], 0x34}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}}}, 0xb8}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x40044160, 0x3) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000040)={0x20, 0xa}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000000)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x8, 0x0, "82ffe9a7ca8d338e0978c80c568a9d94969744223a3bf7b1ce1f566ac0b5502df67a3a54817e92bda7e02337b5186bf1532b41dc173f2ef38ea641dbf4bea193", "2c8d978bbbaf836770b6bc05c7d33d4ba1eeb28b81365fd5b98b898cd82f59b99d77af213e51d53d7e04d4e85e1d41ee121ea3aad63b499c7a25e1b181ac9ebf", "9fef7affaecac6ed08f4c36330801327cabc8491b2a7e8063de5ae1f02b8cb3a", [0x0, 0x3]}}) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f00000001c0)='efs\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/223, 0xdf}], 0x1, 0xfffff62d, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x1c, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x62040200) 12.252228915s ago: executing program 2 (id=3099): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x300f000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)={0x0, 0x18001, 0xc, 0xc}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_io_uring_setup(0x4175, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x569, 0x0, 0x0, 0x0, 0x57) ioctl$TCSETSW2(r1, 0x5425, 0x0) ioctl$TIOCGPGRP(r3, 0x5437, 0x0) 10.566364776s ago: executing program 2 (id=3100): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x9e) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000100000007010000f8ffffffb702000008000000b703000000000000850000007000303015f6973b00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r3}, 0x10) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaabdaa00000000000086dd60fca33f0000730900000000000000000000000000000000fe80a5836bf1e629fa561436000000000000003cb512409bc586801d7f064c1914e05b10f2cc171b09f6a8ae07431c6a0a9c4e0a80226be0d46b0366e4fa1658a3e8c88ff5914e550aac7c35645a6c8c1b329c4048f4e5e99e290369964af5f0a1104fba2c89b6b1d4926fb598326902d91877910955343d7b358174bde2146b9c06766e5a9c302a69e32604df0050bc6bd2e07a1a6957b480491e6a22ffb7bfc1d25ea5b05c0dbc44544cf762213cf137063dbe905bb739923d6d5d4d4cf636073d1b6618b2c910e7fb5f692cf9e73e3da2fc46"], 0x0) sendmmsg(r4, 0x0, 0x0, 0x80fe) sendmsg$nl_xfrm(r1, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000000c0)=0xbf) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) clock_getres(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$media(&(0x7f00000000c0), 0x1fc, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r6, 0x7c81, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 9.983239033s ago: executing program 0 (id=3101): socket$pppl2tp(0x18, 0x1, 0x1) read$char_usb(0xffffffffffffffff, &(0x7f0000001840)=""/4090, 0xffa) add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3d, 0x0, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000300)='1\x00', 0xffffff4a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18200000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000863162dae80974d8145fbce9b1b1a7e94bc84c8e5d00ad375686fac586b7aa99ae6faf6190543a1556521ed539149de0c73e898753242de858e9ee6e43b1fddcf856183596d9d50238174cf86ec657a27903b0cd57c0366627d42487899ebb8d95e38d491cd1e1498740c993691ac305792f0b5442a1fe0d54e8472b4a06bb5e4f"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x100008b}, 0x0) add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000300)=""/128, 0x80}], 0x1, 0x0, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40044591, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001100)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2fc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7e7, 0x6]}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) 8.627337398s ago: executing program 0 (id=3102): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd2(0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) sendmsg$nl_xfrm(r2, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0xff, 0x0) inotify_init1(0x80800) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x7, 0x4) bind$inet(r3, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e", 0xce, 0x4040004, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 8.547451999s ago: executing program 2 (id=3103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r4, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/233, 0xe9}], 0x1, &(0x7f00000004c0)=""/75, 0x4b}}], 0x1, 0x4000, 0x0) sendmsg$tipc(r4, &(0x7f0000000200)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000040)=0xb, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 7.342433713s ago: executing program 0 (id=3104): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) accept4(r2, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 6.854227736s ago: executing program 2 (id=3105): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}], 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(r2, 0x0, 0xc, 0x0, 0x0) getsockopt$inet_opts(r2, 0x0, 0x9, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.301846502s ago: executing program 2 (id=3106): syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0xfdc, 0x8000, {0x0}, {}, 0x1, 0x6bd4}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000500)=0x19) sendfile(r5, r6, 0x0, 0x20000023896) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x8, 0x2, 0x1f) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 5.068814169s ago: executing program 1 (id=3107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000780), 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_netdev_private(r6, 0x541b, &(0x7f0000000540)) 3.333948599s ago: executing program 2 (id=3108): r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x100000, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000021000100000000000000000002000000faff000000000000080018004e284e2205001600000000000800"], 0x34}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}}}, 0xb8}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x40044160, 0x3) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000040)={0x20, 0xa}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000000)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x8, 0x0, "82ffe9a7ca8d338e0978c80c568a9d94969744223a3bf7b1ce1f566ac0b5502df67a3a54817e92bda7e02337b5186bf1532b41dc173f2ef38ea641dbf4bea193", "2c8d978bbbaf836770b6bc05c7d33d4ba1eeb28b81365fd5b98b898cd82f59b99d77af213e51d53d7e04d4e85e1d41ee121ea3aad63b499c7a25e1b181ac9ebf", "9fef7affaecac6ed08f4c36330801327cabc8491b2a7e8063de5ae1f02b8cb3a", [0x0, 0x3]}}) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/223, 0xdf}], 0x1, 0xfffff62d, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x1c, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x62040200) 1.99278666s ago: executing program 1 (id=3109): bpf$MAP_CREATE(0x0, 0x0, 0xfffffee4) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x7, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x20040040) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x800) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000800)={'\x00', 0x11, 0x8, 0x9ff2, 0x2000000, 0x805}) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x121040) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000280)={'\x00', 0x1011, 0x8, 0x0, 0x5}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 933.510103ms ago: executing program 1 (id=3110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff030370", 0x7}], 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={0x0}, 0x18) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 522.058638ms ago: executing program 1 (id=3111): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x9e) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000100000007010000f8ffffffb702000008000000b703000000000000850000007000303015f6973b00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r3}, 0x10) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) sendmmsg(r4, 0x0, 0x0, 0x80fe) sendmsg$nl_xfrm(r1, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000000c0)=0xbf) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) clock_getres(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$media(&(0x7f00000000c0), 0x1fc, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r6, 0x7c81, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 0s ago: executing program 0 (id=3112): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000200), 0x308000, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000600)={0x0, 0x0, '\x00', {0x0, @reserved}}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x4}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) r3 = socket$can_bcm(0x1d, 0x2, 0x2) write(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = dup(r5) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) kernel console output (not intermixed with test programs): 0926:3333 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0926:3333.0008/input/input36 [ 643.980327][T10558] keytouch 0003:0926:3333.0008: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 644.142716][T14703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.183095][T14703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.210695][ T57] usb 5-1: USB disconnect, device number 15 [ 644.935209][ T39] audit: type=1400 audit(1726005326.030:2679): avc: denied { setopt } for pid=14734 comm="syz.3.2366" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 645.598443][ T5358] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 645.605760][ T5358] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 645.612351][ T5358] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 645.617393][ T5358] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 645.624743][ T5358] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 645.628468][ T5358] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 645.823826][T14751] chnl_net:caif_netlink_parms(): no params data found [ 645.964566][T12247] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.042010][T14768] tipc: Started in network mode [ 646.044310][T14768] tipc: Node identity 72d6a02abf4c, cluster identity 4711 [ 646.049485][T14768] tipc: Enabled bearer , priority 0 [ 646.165246][T12247] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.235465][T14768] syzkaller0: entered promiscuous mode [ 646.238126][T14768] syzkaller0: entered allmulticast mode [ 646.241874][T14768] tipc: Resetting bearer [ 646.247191][T14751] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.257735][T14751] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.262624][T14751] bridge_slave_0: entered allmulticast mode [ 646.267479][T14751] bridge_slave_0: entered promiscuous mode [ 646.275160][T14751] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.278578][T14751] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.281990][T14751] bridge_slave_1: entered allmulticast mode [ 646.284891][T14751] bridge_slave_1: entered promiscuous mode [ 646.316011][T12247] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.326599][T14767] tipc: Resetting bearer [ 647.169031][ T1422] tipc: Node number set to 3449462826 [ 647.706348][ T5357] Bluetooth: hci0: command tx timeout [ 648.931124][T14767] tipc: Disabling bearer [ 648.982870][T12247] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.098262][T14751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.171751][T14751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.287717][T14751] team0: Port device team_slave_0 added [ 649.296956][T14751] team0: Port device team_slave_1 added [ 649.439158][T14751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.442236][T14751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.454981][T14751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.491299][T14751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.494337][T14751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.529005][T14751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.619170][T12247] bridge_slave_1: left allmulticast mode [ 649.621691][T12247] bridge_slave_1: left promiscuous mode [ 649.625760][T12247] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.643026][T12247] bridge_slave_0: left allmulticast mode [ 649.645818][T12247] bridge_slave_0: left promiscuous mode [ 649.650630][T12247] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.768610][T14803] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 649.779061][ T5357] Bluetooth: hci0: command tx timeout [ 649.869191][ T39] audit: type=1400 audit(1726005330.940:2680): avc: denied { mount } for pid=14807 comm="syz.0.2385" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 650.355243][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f929000: rx timeout, send abort [ 650.359444][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f929000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 650.423447][T12247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.427631][ T5357] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 650.438684][T12247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.448910][T12247] bond0 (unregistering): Released all slaves [ 650.511169][T14815] Cannot find add_set index 0 as target [ 650.554391][T14751] hsr_slave_0: entered promiscuous mode [ 650.583978][T14751] hsr_slave_1: entered promiscuous mode [ 650.589653][T14751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 650.594063][T14751] Cannot create hsr debugfs directory [ 650.716982][ T39] audit: type=1400 audit(1726005331.810:2681): avc: denied { unmount } for pid=12517 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 651.422419][T12247] hsr_slave_0: left promiscuous mode [ 651.431821][T12247] hsr_slave_1: left promiscuous mode [ 651.496619][T12247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.525027][T12247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.539906][T12247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.569066][T12247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.729420][T12247] veth1_macvtap: left promiscuous mode [ 651.732032][T12247] veth0_macvtap: left promiscuous mode [ 651.734636][T12247] veth1_vlan: left promiscuous mode [ 651.738331][T12247] veth0_vlan: left promiscuous mode [ 651.859297][ T5357] Bluetooth: hci0: command tx timeout [ 653.939026][ T5357] Bluetooth: hci0: command tx timeout [ 654.084359][T14870] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 654.202930][T14866] kvm: pic: non byte read [ 654.362005][T12247] team0 (unregistering): Port device team_slave_1 removed [ 654.428988][ T39] audit: type=1400 audit(1726005335.520:2682): avc: denied { write } for pid=14871 comm="syz.0.2401" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 654.567291][T12247] team0 (unregistering): Port device team_slave_0 removed [ 655.900427][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.160353][ T5357] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 656.422259][T14905] Cannot find del_set index 2 as target [ 657.328963][T11165] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 657.404536][T14751] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 657.412262][T14751] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 657.420315][T14751] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 657.441309][T14751] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 657.512059][T11165] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.516587][T11165] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.529135][T11165] usb 8-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 657.532816][T11165] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.544305][T11165] usb 8-1: config 0 descriptor?? [ 657.573162][T14751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.594444][T14751] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.606612][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.609977][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.627725][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.632000][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.769207][ T832] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 657.946221][T14751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.962771][ T832] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 657.969725][ T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 657.974196][ T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 657.979439][ T832] usb 6-1: config 0 interface 0 has no altsetting 0 [ 657.986422][ T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 657.991436][ T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 657.991729][T14751] veth0_vlan: entered promiscuous mode [ 657.996904][ T832] usb 6-1: config 0 interface 0 has no altsetting 0 [ 658.003676][ T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 658.006694][T14910] pim6reg: entered allmulticast mode [ 658.007497][ T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 658.014675][ T832] usb 6-1: config 0 interface 0 has no altsetting 0 [ 658.018807][ T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 658.022353][T14751] veth1_vlan: entered promiscuous mode [ 658.022766][ T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 658.032926][ T832] usb 6-1: config 0 interface 0 has no altsetting 0 [ 658.034291][T14910] batadv_slave_0: entered allmulticast mode [ 658.036812][ T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 658.041364][ T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 658.045803][ T832] usb 6-1: config 0 interface 0 has no altsetting 0 [ 658.050351][ T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 658.053918][ T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 658.057908][ T832] usb 6-1: config 0 interface 0 has no altsetting 0 [ 658.060366][T14751] veth0_macvtap: entered promiscuous mode [ 658.061492][T11165] magicmouse 0003:05AC:0269.0009: unbalanced delimiter at end of report description [ 658.061790][ T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 658.061852][ T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 658.061875][ T832] usb 6-1: config 0 interface 0 has no altsetting 0 [ 658.062812][ T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 658.062847][ T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 658.062867][ T832] usb 6-1: config 0 interface 0 has no altsetting 0 [ 658.064930][ T832] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 658.068495][T11165] magicmouse 0003:05AC:0269.0009: magicmouse hid parse failed [ 658.069752][T14751] veth1_macvtap: entered promiscuous mode [ 658.072401][ T832] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 658.077165][T11165] magicmouse 0003:05AC:0269.0009: probe with driver magicmouse failed with error -22 [ 658.081050][ T832] usb 6-1: Product: syz [ 658.081382][T14751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.081400][T14751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.081410][T14751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.081422][T14751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.081432][T14751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.081444][T14751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.082766][T14751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.087623][T14751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.090486][ T832] usb 6-1: Manufacturer: syz [ 658.103470][T14751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.105306][ T832] usb 6-1: SerialNumber: syz [ 658.110705][T14751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.120151][ T832] usb 6-1: config 0 descriptor?? [ 658.121266][T14751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.136225][ T832] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 658.140145][T14751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.187328][T14751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.192052][T14751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.196872][T14751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.205269][T14751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.216417][T14751] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.221492][T14751] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.224626][T14751] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.228224][T14751] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.258242][ T25] usb 8-1: USB disconnect, device number 16 [ 658.316546][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.323664][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.368722][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.371855][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.569991][ C1] usb 6-1: yurex_control_callback - control failed: -71 [ 658.575171][T11165] usb 6-1: USB disconnect, device number 11 [ 658.590982][T14941] yurex 6-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 658.602598][T11165] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 658.749713][ T832] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 658.929496][ T832] usb 7-1: Using ep0 maxpacket: 8 [ 658.935563][ T832] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 658.942918][ T832] usb 7-1: config 179 has no interface number 0 [ 658.945656][ T832] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 658.950653][ T832] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 658.955568][ T832] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 658.959943][ T832] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 658.965180][ T832] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 658.971440][ T832] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 658.975631][ T832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.983672][T14940] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 659.266097][T11165] kernel write not supported for file bpf-prog (pid: 11165 comm: kworker/3:7) [ 659.352186][ T5357] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 659.417028][T14965] Cannot find add_set index 0 as target [ 659.504788][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 659.509741][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 659.514180][ T832] usb 7-1: USB disconnect, device number 13 [ 659.669033][T11165] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 659.851271][T11165] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 659.855258][T11165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.861264][T11165] usb 5-1: config 0 descriptor?? [ 660.609196][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 660.900339][T11165] ath6kl: Failed to submit usb control message: -110 [ 660.903649][T11165] ath6kl: unable to send the bmi data to the device: -110 [ 660.907314][T11165] ath6kl: Unable to send get target info: -110 [ 660.912282][T11165] ath6kl: Failed to init ath6kl core: -110 [ 660.924046][T11165] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 661.557248][T14986] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2424'. [ 662.287185][ T833] usb 5-1: USB disconnect, device number 16 [ 662.358695][ T832] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 662.712453][T15012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2430'. [ 662.956038][ T832] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.087297][ T5357] Bluetooth: hci1: command 0x0406 tx timeout [ 663.189029][ T832] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 663.229573][ T832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.261217][ T832] usb 8-1: config 0 descriptor?? [ 663.738096][ T832] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 663.789785][ T832] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0926:3333.000A/input/input37 [ 664.087764][ T832] keytouch 0003:0926:3333.000A: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 664.150571][T15001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.157885][T15001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.179079][ T833] usb 8-1: USB disconnect, device number 17 [ 664.481193][T15043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2436'. [ 664.632454][ T39] audit: type=1400 audit(1726005345.730:2683): avc: denied { read } for pid=15045 comm="syz.0.2440" dev="sockfs" ino=91753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 664.635960][T15046] 9pnet_fd: Insufficient options for proto=fd [ 664.656106][ T39] audit: type=1400 audit(1726005345.750:2684): avc: denied { getopt } for pid=15045 comm="syz.0.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 666.019699][T15073] pim6reg1: entered promiscuous mode [ 666.023753][T15073] pim6reg1: entered allmulticast mode [ 666.027397][ T39] audit: type=1400 audit(1726005347.120:2685): avc: denied { setopt } for pid=15074 comm="syz.0.2449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 666.409683][ T832] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 666.642926][ T832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.661892][ T832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.665803][ T832] usb 5-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 666.679026][ T832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.714632][ T832] usb 5-1: config 0 descriptor?? [ 667.203710][ T832] usbhid 5-1:0.0: can't add hid device: -71 [ 667.208344][ T832] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 667.214511][ T832] usb 5-1: USB disconnect, device number 17 [ 670.497790][ T5358] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 670.602559][T15129] Cannot find add_set index 0 as target [ 671.871710][ T39] audit: type=1400 audit(1726005352.840:2686): avc: denied { write } for pid=15136 comm="syz.1.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 671.940174][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2468'. [ 672.053816][ T39] audit: type=1400 audit(1726005353.150:2687): avc: denied { connect } for pid=15139 comm="syz.1.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 672.098946][ T39] audit: type=1400 audit(1726005353.190:2688): avc: denied { listen } for pid=15139 comm="syz.1.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 673.125832][T15166] Cannot find del_set index 2 as target [ 673.466435][ T39] audit: type=1400 audit(1726005354.550:2689): avc: denied { getopt } for pid=15169 comm="syz.1.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 673.486450][ T39] audit: type=1400 audit(1726005354.580:2690): avc: denied { connect } for pid=15169 comm="syz.1.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 673.914194][ T39] audit: type=1400 audit(1726005355.010:2691): avc: denied { create } for pid=15172 comm="syz.0.2475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 674.659915][T15199] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15199 comm=syz.2.2482 [ 674.667074][ T39] audit: type=1400 audit(1726005355.760:2692): avc: denied { read } for pid=15198 comm="syz.2.2482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 677.435693][T15255] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 677.451484][ T39] audit: type=1400 audit(1726005358.550:2693): avc: denied { append } for pid=15254 comm="syz.3.2495" name="ptp1" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 678.546810][T15278] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 678.562261][ T39] audit: type=1400 audit(1726005359.660:2694): avc: denied { getattr } for pid=15276 comm="syz.2.2502" name="/" dev="9p" ino=39583816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 678.569853][T15278] input: syz0 as /devices/virtual/input/input38 [ 678.576698][T15279] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 678.640602][ T39] audit: type=1400 audit(1726005359.740:2695): avc: denied { link } for pid=15276 comm="syz.2.2502" name="file1" dev="9p" ino=39583825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 678.699451][ T39] audit: type=1400 audit(1726005359.800:2696): avc: denied { write } for pid=15276 comm="syz.2.2502" name="file0" dev="overlay" ino=39583825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 678.719241][ T39] audit: type=1400 audit(1726005359.810:2697): avc: denied { setattr } for pid=15276 comm="syz.2.2502" name="file0" dev="overlay" ino=39583825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 679.465226][ T25] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 679.599213][ T833] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 679.651949][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.657085][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.660874][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 679.667699][ T25] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 679.672297][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.678276][ T25] usb 7-1: config 0 descriptor?? [ 679.793153][ T833] usb 5-1: config 0 interface 0 has no altsetting 0 [ 679.805049][ T833] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.92 [ 679.810580][ T833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.814061][ T833] usb 5-1: Product: syz [ 679.815860][ T833] usb 5-1: Manufacturer: syz [ 679.818055][ T833] usb 5-1: SerialNumber: syz [ 679.835676][ T833] usb 5-1: config 0 descriptor?? [ 679.844850][ T833] usbtest 5-1:0.0: couldn't get endpoints, -22 [ 679.848592][ T833] usbtest 5-1:0.0: probe with driver usbtest failed with error -22 [ 680.161065][ T25] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max [ 680.185024][ T25] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 680.215354][ T25] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 680.217427][ T833] usb 5-1: USB disconnect, device number 18 [ 680.495366][T15316] vivid-002: disconnect [ 680.524821][T15313] vivid-002: reconnect [ 680.559315][ T5358] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 680.639982][T15322] Cannot find add_set index 0 as target [ 681.005305][T15328] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 681.082664][ T39] audit: type=1400 audit(1726005362.180:2698): avc: denied { ioctl } for pid=15326 comm="syz.0.2520" path="socket:[93351]" dev="sockfs" ino=93351 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 681.454885][T15341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2522'. [ 681.458722][T15341] netlink: 'syz.1.2522': attribute type 7 has an invalid length. [ 681.466764][T15341] netlink: 'syz.1.2522': attribute type 8 has an invalid length. [ 681.470677][T15341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2522'. [ 682.088179][ T5358] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 682.124227][T15358] Cannot find add_set index 0 as target [ 682.493041][ T1422] usb 7-1: USB disconnect, device number 14 [ 682.685954][ T39] audit: type=1400 audit(1726005363.770:2699): avc: denied { accept } for pid=15364 comm="syz.0.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 682.799952][ T39] audit: type=1400 audit(1726005363.900:2700): avc: denied { read write } for pid=15368 comm="syz.3.2531" name="uhid" dev="devtmpfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 682.810768][ T39] audit: type=1400 audit(1726005363.910:2701): avc: denied { open } for pid=15368 comm="syz.3.2531" path="/dev/uhid" dev="devtmpfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 683.100715][ T5358] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 683.123137][T15379] Cannot find add_set index 0 as target [ 683.307402][T15390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2535'. [ 685.709191][ T831] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 685.909915][ T831] usb 8-1: Using ep0 maxpacket: 8 [ 685.914490][ T831] usb 8-1: config 0 has no interfaces? [ 685.928945][ T831] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 685.932459][ T831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.937414][ T831] usb 8-1: config 0 descriptor?? [ 686.007196][ T5358] Bluetooth: hci1: unexpected event for opcode 0x204e [ 686.298456][T12702] usb 8-1: USB disconnect, device number 18 [ 687.189118][T15476] syzkaller0: entered allmulticast mode [ 687.226014][T15481] ubi: mtd0 is already attached to ubi0 [ 688.659537][ T5357] Bluetooth: hci3: command 0x0406 tx timeout [ 690.125817][T15491] raw_sendmsg: syz.3.2567 forgot to set AF_INET. Fix it! [ 690.181957][T15491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2567'. [ 690.342971][ T39] audit: type=1400 audit(1726005371.440:2702): avc: denied { ioctl } for pid=15495 comm="syz.3.2569" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 690.345992][T15496] Bluetooth: MGMT ver 1.23 [ 690.605996][T15508] x_tables: duplicate underflow at hook 1 [ 690.612298][T15508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.099812][ T5358] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 691.218679][T15523] Cannot find del_set index 2 as target [ 692.055619][T15548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2584'. [ 693.671351][T15597] Cannot find del_set index 2 as target [ 693.932870][T15603] netlink: 'syz.0.2597': attribute type 4 has an invalid length. [ 693.936844][T15603] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2597'. [ 694.093930][T15605] Bluetooth: MGMT ver 1.23 [ 694.150101][T15607] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 694.177705][T15607] kvm: pic: non byte read [ 694.718047][ T5358] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 694.765526][ T39] audit: type=1400 audit(1726005375.860:2703): avc: denied { bind } for pid=15629 comm="syz.0.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 694.825853][ T39] audit: type=1400 audit(1726005375.920:2704): avc: denied { getopt } for pid=15631 comm="syz.0.2607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 695.535175][T15642] Cannot find del_set index 2 as target [ 696.185607][ T39] audit: type=1400 audit(1726005377.280:2705): avc: denied { read } for pid=15646 comm="syz.1.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 697.753239][T15663] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 697.894119][ T39] audit: type=1400 audit(1726005378.990:2706): avc: denied { create } for pid=15674 comm="syz.0.2620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 697.916991][ T39] audit: type=1400 audit(1726005379.010:2707): avc: denied { write } for pid=15674 comm="syz.0.2620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 697.988418][ T5358] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 698.084169][T15682] Cannot find del_set index 2 as target [ 698.429370][ T39] audit: type=1400 audit(1726005379.520:2708): avc: denied { map } for pid=15688 comm="syz.3.2625" path="socket:[94103]" dev="sockfs" ino=94103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 698.742771][ T5358] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 698.747339][ T5358] Bluetooth: hci1: Injecting HCI hardware error event [ 698.755267][ T5358] Bluetooth: hci1: hardware error 0x00 [ 699.044239][T15703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57222 sclass=netlink_route_socket pid=15703 comm=syz.0.2629 [ 699.076960][T15703] geneve2: entered promiscuous mode [ 699.079399][T15703] geneve2: entered allmulticast mode [ 700.021801][ T39] audit: type=1400 audit(1726005381.120:2709): avc: denied { map } for pid=15728 comm="syz.0.2636" path="socket:[97490]" dev="sockfs" ino=97490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 700.139828][T15732] Cannot find del_set index 2 as target [ 700.737547][T15740] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 700.829184][ T5358] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 701.991843][T15763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2644'. [ 702.937576][T15780] overlayfs: failed to get inode (-116) [ 702.940442][T15780] overlayfs: failed to get inode (-116) [ 704.588404][T15803] kvm: kvm [15802]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 705.628346][T15833] input: syz1 as /devices/virtual/input/input39 [ 706.568666][T15852] binder_alloc: 15851: binder_alloc_buf size 12312 failed, no address space [ 706.574294][T15852] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 707.501478][T15869] usb 2-1: USB disconnect, device number 2 [ 707.660816][T15876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2679'. [ 707.798185][T15876] hub 2-0:1.0: USB hub found [ 707.833891][T15876] hub 2-0:1.0: 6 ports detected [ 708.159216][ T58] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 708.303301][ T5358] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 708.325503][T15884] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2682'. [ 708.330787][ T39] audit: type=1400 audit(1726005389.420:2710): avc: denied { read } for pid=15883 comm="syz.2.2682" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 708.355061][ T39] audit: type=1400 audit(1726005389.440:2711): avc: denied { open } for pid=15883 comm="syz.2.2682" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 708.412250][ T58] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 708.416566][ T58] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 708.432754][ T58] usb 2-1: Product: QEMU USB Tablet [ 708.437015][ T58] usb 2-1: Manufacturer: QEMU [ 708.441455][T15887] Cannot find add_set index 0 as target [ 708.445625][ T58] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 708.503647][ T58] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.000C/input/input40 [ 708.593980][ T58] hid-generic 0003:0627:0001.000C: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 710.009194][ T39] audit: type=1800 audit(1726005391.100:2712): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2685" name="blkio.bfq.io_wait_time" dev="9p" ino=39583922 res=0 errno=0 [ 710.105318][T15911] ªªªªªª: renamed from vlan0 (while UP) [ 710.230429][T15894] syz.3.2685 (15894) used greatest stack depth: 19600 bytes left [ 711.716440][T15948] Cannot find del_set index 2 as target [ 711.765382][ T39] audit: type=1400 audit(1726005392.860:2713): avc: denied { ioctl } for pid=15949 comm="syz.1.2702" path="socket:[99153]" dev="sockfs" ino=99153 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 712.216804][T15957] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 712.875311][T15975] netlink: 'syz.3.2709': attribute type 27 has an invalid length. [ 713.169573][T15983] IPv6: NLM_F_REPLACE set, but no existing node found! [ 713.469120][T15985] netlink: 'syz.3.2714': attribute type 10 has an invalid length. [ 713.830661][T15997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2716'. [ 713.839811][T15997] bridge_slave_1: left allmulticast mode [ 713.843127][T15997] bridge_slave_1: left promiscuous mode [ 713.846716][T15997] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.868749][T15997] bridge_slave_0: left allmulticast mode [ 713.877848][T15997] bridge_slave_0: left promiscuous mode [ 713.884539][T15997] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.015379][ T39] audit: type=1400 audit(1726005395.110:2714): avc: denied { bind } for pid=15999 comm="syz.2.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 714.257916][T16002] overlayfs: failed to create directory ./file1/work (errno: 1); mounting read-only [ 714.265525][T16002] overlayfs: conflicting lowerdir path [ 714.280186][T16002] overlayfs: failed to set uuid (216/file1, err=-1); falling back to uuid=null. [ 714.284534][T16002] overlayfs: failed to verify upper root origin [ 714.416909][T16007] team0: Cannot enslave team device to itself [ 714.697694][T16004] kvm: kvm [16003]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x24df00000080 [ 714.763126][T16004] kvm: kvm [16003]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4d0000000000 [ 714.767911][T16004] kvm: kvm [16003]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4d4500000080 [ 714.817542][T16004] kvm: kvm [16003]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x640000000000 [ 714.872599][T16004] kvm: kvm [16003]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x7d4500000080 [ 714.885660][ T39] audit: type=1400 audit(1726005395.980:2715): avc: denied { listen } for pid=16018 comm="syz.2.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 715.216502][ T5358] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 715.702952][ T5358] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 715.713177][T16042] Cannot find add_set index 0 as target [ 716.821624][ T39] audit: type=1400 audit(1726005397.910:2716): avc: denied { setopt } for pid=16063 comm="syz.2.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 717.563383][ T39] audit: type=1400 audit(1726005398.660:2717): avc: denied { getopt } for pid=16080 comm="syz.0.2742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 717.769023][ T39] audit: type=1400 audit(1726005398.720:2718): avc: denied { watch } for pid=16074 comm="syz.1.2740" path="/223/net_prio.prioidx" dev="tmpfs" ino=1235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 717.848352][ T39] audit: type=1400 audit(1726005398.720:2719): avc: denied { watch_sb watch_reads } for pid=16074 comm="syz.1.2740" path="/223/net_prio.prioidx" dev="tmpfs" ino=1235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 718.054940][T16083] netlink: 3084 bytes leftover after parsing attributes in process `syz.0.2742'. [ 718.070567][T16083] netlink: 'syz.0.2742': attribute type 1 has an invalid length. [ 718.074644][T16083] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2742'. [ 718.307982][ T5358] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 718.347272][T16089] Cannot find add_set index 0 as target [ 718.476254][T16092] usb 2-1: USB disconnect, device number 3 [ 718.616609][T16098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2746'. [ 718.632594][T16098] hub 2-0:1.0: USB hub found [ 718.635401][T16098] hub 2-0:1.0: 6 ports detected [ 718.839200][ T833] usb 2-1: new high-speed USB device number 4 using ehci-pci [ 719.115237][ T833] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 719.119216][ T833] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 719.122538][ T833] usb 2-1: Product: QEMU USB Tablet [ 719.124752][ T833] usb 2-1: Manufacturer: QEMU [ 719.127551][ T833] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 719.186305][ T833] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.000D/input/input42 [ 719.324612][ T833] hid-generic 0003:0627:0001.000D: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 719.469831][ T5358] Bluetooth: hci0: command tx timeout [ 720.151101][ T39] audit: type=1400 audit(1726005401.250:2720): avc: denied { ioctl } for pid=16119 comm="syz.3.2753" path="socket:[100198]" dev="sockfs" ino=100198 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 720.627488][T16128] Cannot find add_set index 0 as target [ 720.628960][ T5358] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 720.672817][ T5358] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 720.678165][ T5358] Bluetooth: hci0: Injecting HCI hardware error event [ 720.683998][ T5358] Bluetooth: hci0: hardware error 0x00 [ 720.792096][ T39] audit: type=1400 audit(1726005401.890:2721): avc: denied { execute } for pid=16132 comm="syz.1.2757" path="/dev/nullb0" dev="devtmpfs" ino=2940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 721.112732][T16140] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 721.130088][T16140] kvm: pic: level sensitive irq not supported [ 721.130521][T16140] kvm: pic: non byte read [ 721.137764][T16140] kvm: pic: level sensitive irq not supported [ 721.141374][T16140] kvm: pic: non byte read [ 721.149430][T16140] kvm: pic: level sensitive irq not supported [ 721.149901][T16140] kvm: pic: non byte read [ 721.158389][T16140] kvm: pic: level sensitive irq not supported [ 721.159111][T16140] kvm: pic: non byte read [ 721.935484][T16157] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2763'. [ 722.739939][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2768'. [ 722.837248][T16179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2768'. [ 722.909111][ T5358] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 723.335735][T16188] kvm: kvm [16187]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x0 [ 723.415825][ T39] audit: type=1400 audit(1726005404.510:2722): avc: denied { search } for pid=16192 comm="syz.3.2772" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 724.630924][ T39] audit: type=1400 audit(1726005405.730:2723): avc: denied { bind } for pid=16229 comm="syz.1.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 724.639541][ T39] audit: type=1400 audit(1726005405.730:2724): avc: denied { name_bind } for pid=16229 comm="syz.1.2781" src=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 724.655206][ T39] audit: type=1400 audit(1726005405.730:2725): avc: denied { node_bind } for pid=16229 comm="syz.1.2781" src=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 724.673609][ T39] audit: type=1400 audit(1726005405.750:2726): avc: denied { sqpoll } for pid=16229 comm="syz.1.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 724.745423][ T39] audit: type=1400 audit(1726005405.840:2727): avc: denied { read } for pid=16239 comm="syz.1.2783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 724.808942][T16238] Cannot find del_set index 2 as target [ 724.898311][T16227] kvm: kvm [16226]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3c00 [ 724.948956][T16233] kvm: kvm [16232]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x410000000000 [ 724.954098][T16233] kvm: kvm [16232]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x414500000800 [ 724.990305][ T39] audit: type=1400 audit(1726005406.090:2728): avc: denied { listen } for pid=16244 comm="syz.3.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 725.011864][ T39] audit: type=1400 audit(1726005406.110:2729): avc: denied { accept } for pid=16244 comm="syz.3.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 726.153941][T16268] syzkaller0: entered promiscuous mode [ 726.157544][T16268] syzkaller0: entered allmulticast mode [ 726.263358][T13115] syz_tun (unregistering): left allmulticast mode [ 726.267165][T13115] syz_tun (unregistering): left promiscuous mode [ 726.271301][T13115] bridge0: port 3(syz_tun) entered disabled state [ 727.099387][T16279] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16279 comm=syz.1.2796 [ 727.172590][T14753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 727.217320][T14753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 727.236930][T14753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 727.241261][T14753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 727.251616][T14753] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 727.258327][T14753] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 727.836734][T14753] Bluetooth: Unexpected continuation frame (len 18) [ 729.397574][T14753] Bluetooth: hci2: command tx timeout [ 729.977652][ T39] audit: type=1400 audit(1726005411.070:2730): avc: denied { read } for pid=16292 comm="syz.0.2800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 730.149611][T16278] chnl_net:caif_netlink_parms(): no params data found [ 730.374157][T16278] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.378019][T16278] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.383048][T16278] bridge_slave_0: entered allmulticast mode [ 730.387069][T16278] bridge_slave_0: entered promiscuous mode [ 730.397420][T16278] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.401120][T16278] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.404851][T16278] bridge_slave_1: entered allmulticast mode [ 730.419675][T16278] bridge_slave_1: entered promiscuous mode [ 730.507276][T16278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.517794][T16278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.611542][T16278] team0: Port device team_slave_0 added [ 730.641389][T16278] team0: Port device team_slave_1 added [ 730.720681][T16278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.723533][T16278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 730.735597][T16278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.741698][ T58] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 730.742444][T16278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.747908][T16278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 730.759663][T16278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.845319][T16278] hsr_slave_0: entered promiscuous mode [ 730.862108][T16278] hsr_slave_1: entered promiscuous mode [ 730.867452][T16278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 730.871018][T16278] Cannot create hsr debugfs directory [ 730.928948][ T58] usb 6-1: Using ep0 maxpacket: 8 [ 730.933676][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.939052][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.943702][ T58] usb 6-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 730.947721][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.953217][ T58] usb 6-1: config 0 descriptor?? [ 731.166244][T16278] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.206778][ T58] usbhid 6-1:0.0: can't add hid device: -71 [ 731.210082][ T58] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 731.215722][ T58] usb 6-1: USB disconnect, device number 12 [ 731.282252][T16278] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.361142][T16317] Cannot find add_set index 0 as target [ 731.377799][T16278] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.453580][T16278] bond0: (slave netdevsim0): Releasing backup interface [ 731.458004][T16278] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 731.462011][T14753] Bluetooth: hci2: command tx timeout [ 731.469908][T16278] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 731.476994][T16278] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.740898][T16278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 731.762813][T16278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 731.786703][T16278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 731.801108][T16278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 731.968586][T16278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.052262][T16278] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.067671][ T1199] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.070936][ T1199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.104055][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.107479][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.382630][T16278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.425585][T16278] veth0_vlan: entered promiscuous mode [ 732.433949][T16278] veth1_vlan: entered promiscuous mode [ 732.463607][T16278] veth0_macvtap: entered promiscuous mode [ 732.471329][T16278] veth1_macvtap: entered promiscuous mode [ 732.488667][T16278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.506949][T16278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.518902][T16278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.523402][T16278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.527828][T16278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.542521][T16278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.548401][T16278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.555036][T16278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.561266][T16278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.623408][T16278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.633545][T16278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.637777][T16278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.646819][T16278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.655632][T16278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.660219][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 732.666520][T16278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.676163][T16278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.680820][T16278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.691743][T16278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.699443][T16278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.704879][T16278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.710284][T16341] tipc: Started in network mode [ 732.712223][T16341] tipc: Node identity fffffff9, cluster identity 4711 [ 732.714830][T16341] tipc: Node number set to 4294967289 [ 732.726249][T16278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.748908][T16278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.756179][T16278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.762611][T16278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.040522][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.048997][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.118968][T12246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.123329][T12246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.318316][ T39] audit: type=1400 audit(1726005414.410:2731): avc: denied { setattr } for pid=16352 comm="syz.1.2811" name="bus" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 733.367618][T14753] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 733.376883][T16358] Cannot find add_set index 0 as target [ 733.540732][T14753] Bluetooth: hci2: command tx timeout [ 733.669594][T11163] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 733.767545][T16370] efs: device does not support 512 byte blocks [ 733.880963][T11163] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 733.899288][T11163] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 733.903531][T11163] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 733.908135][T11163] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.916653][T16351] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 733.937612][T11163] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 734.196032][ T1422] usb 8-1: USB disconnect, device number 19 [ 734.801099][T16383] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.2820'. [ 735.072254][T16383] infiniband syz1: set active [ 735.077312][T16383] infiniband syz1: added bond_slave_1 [ 735.148097][T16383] RDS/IB: syz1: added [ 735.153782][T16383] smc: adding ib device syz1 with port count 1 [ 735.156294][T16383] smc: ib device syz1 port 1 has pnetid [ 735.474333][T14753] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 735.551448][T16393] Cannot find add_set index 0 as target [ 735.619601][T14753] Bluetooth: hci2: command tx timeout [ 736.350807][ T39] audit: type=1400 audit(1726005417.440:2732): avc: denied { read } for pid=16406 comm="syz.1.2826" name="fb1" dev="devtmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 736.362492][ T39] audit: type=1400 audit(1726005417.440:2733): avc: denied { open } for pid=16406 comm="syz.1.2826" path="/dev/fb1" dev="devtmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 736.373950][ T39] audit: type=1400 audit(1726005417.440:2734): avc: denied { ioctl } for pid=16406 comm="syz.1.2826" path="/dev/fb1" dev="devtmpfs" ino=642 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 736.475313][T16412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2826'. [ 736.479720][T16412] netlink: 'syz.1.2826': attribute type 18 has an invalid length. [ 736.497484][T16412] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.502410][T16412] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.506275][T16412] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.510021][T16412] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.518983][T16412] vxlan0: entered promiscuous mode [ 736.657677][ T833] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 736.868110][ T833] usb 8-1: Using ep0 maxpacket: 32 [ 736.873273][ T833] usb 8-1: config 136 has too many interfaces: 254, using maximum allowed: 32 [ 736.878397][ T833] usb 8-1: config 136 has 0 interfaces, different from the descriptor's value: 254 [ 736.882985][ T833] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 736.887739][ T833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.971157][T10558] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 737.108264][ T10] usb 8-1: USB disconnect, device number 20 [ 737.152369][T10558] usb 7-1: config 1 interface 0 has no altsetting 0 [ 737.156982][T10558] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 737.162183][T10558] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.165713][T10558] usb 7-1: Product: syz [ 737.167591][T10558] usb 7-1: Manufacturer: syz [ 737.169785][T10558] usb 7-1: SerialNumber: syz [ 737.314768][ T39] audit: type=1400 audit(1726005418.410:2735): avc: denied { map } for pid=16423 comm="syz.1.2831" path="/dev/hpet" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 737.416307][ T39] audit: type=1400 audit(1726005418.510:2736): avc: denied { execute } for pid=16423 comm="syz.1.2831" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=104388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 737.420839][T16424] netlink: 212872 bytes leftover after parsing attributes in process `syz.1.2831'. [ 737.435460][T16424] openvswitch: netlink: ufid size 60 bytes exceeds the range (1, 16) [ 737.439690][T16424] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 737.457457][ T39] audit: type=1400 audit(1726005418.550:2737): avc: denied { setopt } for pid=16423 comm="syz.1.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 737.470248][ T39] audit: type=1400 audit(1726005418.570:2738): avc: denied { connect } for pid=16423 comm="syz.1.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 737.712742][T16428] ptrace attach of "/syz-executor exec"[16431] was attempted by ""[16428] [ 737.824697][T10558] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 738.066361][T14753] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 738.084776][T14753] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 738.132472][T16439] Cannot find add_set index 0 as target [ 738.144463][T16440] Cannot find add_set index 0 as target [ 738.385151][ T5390] usb 7-1: USB disconnect, device number 15 [ 738.759132][ T5390] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 738.961543][ T5390] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 739.018120][ T5390] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 739.022440][ T5390] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.026654][ T5390] usb 7-1: Product: syz [ 739.037812][ T5390] usb 7-1: Manufacturer: syz [ 739.040248][ T5390] usb 7-1: SerialNumber: syz [ 739.104934][T16443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2836'. [ 739.116565][T16443] team_slave_0: entered promiscuous mode [ 739.120402][T16443] team_slave_1: entered promiscuous mode [ 739.129360][T16443] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 739.163770][T16443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2836'. [ 739.185198][T16443] team_slave_0: left promiscuous mode [ 739.188210][T16443] team_slave_1: left promiscuous mode [ 739.300498][T16416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.307184][T16416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.309261][ T39] audit: type=1400 audit(1726005420.390:2739): avc: denied { ioctl } for pid=16415 comm="syz.2.2829" path=2F6465762F7573622F6C7030202864656C6574656429 dev="devtmpfs" ino=2981 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 739.320424][T16416] usblp0: removed [ 739.535017][ T5390] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 739.543738][ T5390] usb 7-1: USB disconnect, device number 16 [ 739.791503][ T39] audit: type=1400 audit(1726005420.890:2740): avc: denied { read } for pid=16460 comm="syz.3.2841" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 740.019901][ T39] audit: type=1400 audit(1726005421.110:2741): avc: denied { write } for pid=16465 comm="syz.0.2843" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 740.030419][T16466] trusted_key: encrypted_key: insufficient parameters specified [ 740.069180][ T5390] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 740.271297][ T5390] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 740.275024][ T5390] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 740.279320][ T5390] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 740.284029][ T5390] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 740.288996][ T5390] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 740.295845][ T5390] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 740.300126][ T5390] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 740.303463][ T5390] usb 8-1: Product: syz [ 740.305428][ T5390] usb 8-1: Manufacturer: syz [ 740.314967][ T5390] cdc_wdm 8-1:1.0: skipping garbage [ 740.317274][ T5390] cdc_wdm 8-1:1.0: skipping garbage [ 740.322042][ T5390] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 740.324591][ T5390] cdc_wdm 8-1:1.0: Unknown control protocol [ 740.609589][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 740.614208][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 740.618572][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 740.621759][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 740.624634][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 740.627079][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 740.630001][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 740.632830][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 740.635688][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 740.638641][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 740.641645][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 740.644761][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 740.647642][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 740.650644][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 740.653443][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 740.656254][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 740.659146][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 740.662005][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 740.664840][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 740.667786][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 740.682174][ T5390] usb 8-1: USB disconnect, device number 21 [ 740.684552][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 742.057394][ T39] audit: type=1400 audit(1726005423.150:2742): avc: denied { module_load } for pid=16502 comm="syz.0.2852" path="/sys/power/wakeup_count" dev="sysfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 742.108317][T16505] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2853'. [ 742.326051][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2856'. [ 742.686635][ T39] audit: type=1400 audit(1726005423.780:2743): avc: denied { read } for pid=16518 comm="syz.3.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 743.316487][T16531] ptrace attach of "/syz-executor exec"[16536] was attempted by ""[16531] [ 743.732190][ T57] kernel write not supported for file /amidi2 (pid: 57 comm: kworker/1:1) [ 744.056039][T14753] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 744.103800][ T39] audit: type=1400 audit(1726005425.200:2744): avc: denied { read } for pid=16543 comm="syz.0.2865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 745.130783][T16564] efs: device does not support 512 byte blocks [ 746.635381][T16569] orangefs_mount: mount request failed with -4 [ 746.800739][T16584] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2874'. [ 746.916973][T16589] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2877'. [ 747.758062][T16606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2883'. [ 748.440156][ T39] audit: type=1400 audit(1726005429.520:2745): avc: denied { setopt } for pid=16614 comm="syz.3.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 750.852274][ T39] audit: type=1400 audit(1726005431.940:2746): avc: denied { checkpoint_restore } for pid=16662 comm="syz.3.2899" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 751.547631][ T39] audit: type=1400 audit(1726005432.640:2747): avc: denied { getopt } for pid=16677 comm="syz.3.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 752.913399][ T1291] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 752.918988][T12702] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 753.138756][T12702] usb 8-1: Using ep0 maxpacket: 8 [ 753.145465][ T1291] usb 6-1: config 0 has no interfaces? [ 753.147161][T12702] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.147970][ T1291] usb 6-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 753.158246][T12702] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.158290][ T1291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.164628][T12702] usb 8-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 753.171411][ T1291] usb 6-1: config 0 descriptor?? [ 753.171558][T12702] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.206447][T12702] usb 8-1: config 0 descriptor?? [ 753.409697][T16702] efs: device does not support 512 byte blocks [ 753.455829][ T1291] usb 6-1: USB disconnect, device number 13 [ 753.503947][T16698] kvm: pic: level sensitive irq not supported [ 753.504478][T16698] kvm: pic: single mode not supported [ 753.507116][T16698] kvm: pic: level sensitive irq not supported [ 753.516496][T16698] kvm: pic: level sensitive irq not supported [ 753.519842][T16698] kvm: pic: level sensitive irq not supported [ 753.523013][T16698] kvm: pic: single mode not supported [ 753.525953][T16698] kvm: pic: single mode not supported [ 753.530676][T16698] kvm: pic: single mode not supported [ 753.533141][T16698] kvm: pic: level sensitive irq not supported [ 753.535905][T16698] kvm: pic: single mode not supported [ 753.538213][T16698] kvm: pic: level sensitive irq not supported [ 753.545564][T12702] usbhid 8-1:0.0: can't add hid device: -71 [ 753.547205][T16698] kvm: pic: single mode not supported [ 753.549677][T12702] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 753.555473][T16698] kvm: pic: single mode not supported [ 753.557470][T16698] kvm: pic: single mode not supported [ 753.560621][T16698] kvm: pic: level sensitive irq not supported [ 753.567336][T16698] kvm: pic: level sensitive irq not supported [ 753.571228][T16698] kvm: pic: single mode not supported [ 753.575141][T16698] kvm: pic: single mode not supported [ 753.577641][T16698] kvm: pic: level sensitive irq not supported [ 753.584783][T12702] usb 8-1: USB disconnect, device number 22 [ 754.172645][T14753] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 757.006237][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2927'. [ 757.047244][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2927'. [ 757.880375][T16770] efs: device does not support 512 byte blocks [ 758.051563][T16776] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00106019, b_size=4096, device sda1 blocksize: 4096 [ 758.065567][T16776] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 758.069751][T16776] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 758.177469][ T39] audit: type=1400 audit(1726005439.270:2748): avc: denied { read } for pid=16777 comm="syz.3.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 758.388536][T16781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16781 comm=syz.2.2936 [ 758.416939][T16781] ebtables: ebtables: counters copy to user failed while replacing table [ 758.473444][T16789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2937'. [ 758.710103][ T39] audit: type=1400 audit(1726005439.810:2749): avc: denied { setopt } for pid=16794 comm="syz.1.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 758.883267][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2941'. [ 760.908075][T16823] binder: 16822:16823 ioctl 4018620d 0 returned -22 [ 761.129916][T16832] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 762.533675][T16846] efs: device does not support 512 byte blocks [ 763.182828][ T39] audit: type=1400 audit(1726005444.280:2750): avc: denied { setopt } for pid=16851 comm="syz.2.2955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 763.352976][ T39] audit: type=1400 audit(1726005444.450:2751): avc: denied { shutdown } for pid=16857 comm="syz.1.2958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 763.506382][T14753] Bluetooth: hci3: Unknown advertising packet type: 0x20 [ 763.506414][T14753] Bluetooth: hci3: Malformed LE Event: 0x0d [ 763.540232][ T39] audit: type=1400 audit(1726005444.640:2752): avc: denied { getopt } for pid=16863 comm="syz.1.2960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 765.019027][T10558] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 765.212964][T10558] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.217590][T10558] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.228911][T10558] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 765.259677][T10558] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 765.264186][T10558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.274740][T10558] usb 5-1: config 0 descriptor?? [ 765.711862][T10558] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x4 [ 765.722156][T10558] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 765.725542][T10558] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 765.748231][T10558] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 765.759032][T10558] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 765.783902][T10558] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 766.154479][T11163] usb 5-1: USB disconnect, device number 19 [ 766.171315][T16890] usb 5-1: string descriptor 0 read error: -19 [ 767.600370][T16914] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2973'. [ 767.698924][T16918] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 767.774695][T16918] ptrace attach of "/syz-executor exec"[12517] was attempted by "/syz-executor exec"[16918] [ 767.817646][T16918] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 769.358720][T16938] efs: device does not support 512 byte blocks [ 769.942604][ T39] audit: type=1400 audit(1726005451.040:2753): avc: denied { mount } for pid=16940 comm="syz.3.2983" name="/" dev="configfs" ino=1116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 771.558545][T16952] efs: device does not support 512 byte blocks [ 771.628983][T14753] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 771.633522][T14753] Bluetooth: hci3: Injecting HCI hardware error event [ 771.646425][T14753] Bluetooth: hci3: hardware error 0x00 [ 773.004252][T16960] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16960 comm=syz.3.2988 [ 773.015028][T16960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2988'. [ 773.508074][T16964] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2990'. [ 773.512684][T16964] netlink: 133 bytes leftover after parsing attributes in process `syz.3.2990'. [ 773.516713][T16964] netlink: 133 bytes leftover after parsing attributes in process `syz.3.2990'. [ 773.632464][T16966] delete_channel: no stack [ 773.699039][T14753] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 773.745932][T16970] efs: device does not support 512 byte blocks [ 774.575893][ T39] audit: type=1400 audit(1726005455.670:2754): avc: denied { write } for pid=16974 comm="syz.0.2994" name="usbmon0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 778.530792][ T5357] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 778.549244][ T5357] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 778.579721][ T5357] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 778.585031][ T5357] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 778.598332][ T5357] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 778.602251][ T5357] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 778.920145][T14753] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 778.928154][T14753] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 778.934618][T14753] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 778.943496][T14753] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 778.948238][T14753] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 778.952071][T14753] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 779.613601][T16992] chnl_net:caif_netlink_parms(): no params data found [ 780.061510][T16992] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.064361][T16992] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.068119][T16992] bridge_slave_0: entered allmulticast mode [ 780.077691][T16992] bridge_slave_0: entered promiscuous mode [ 780.121006][T16992] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.124279][T16992] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.131877][T16992] bridge_slave_1: entered allmulticast mode [ 780.137503][T16992] bridge_slave_1: entered promiscuous mode [ 780.151184][T17011] efs: device does not support 512 byte blocks [ 780.521958][T16992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.538627][T16992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.631217][T16998] chnl_net:caif_netlink_parms(): no params data found [ 780.740284][ T5357] Bluetooth: hci5: command tx timeout [ 780.757884][T16992] team0: Port device team_slave_0 added [ 780.951889][T16992] team0: Port device team_slave_1 added [ 780.984867][ T5357] Bluetooth: hci6: command tx timeout [ 781.391097][T16992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.395777][T16992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.411270][T16992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.454832][T16998] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.458209][T16998] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.462192][T16998] bridge_slave_0: entered allmulticast mode [ 781.465609][T16998] bridge_slave_0: entered promiscuous mode [ 781.470737][T16992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.475040][T16992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.489668][T16992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.513674][T16998] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.517394][T16998] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.520891][T16998] bridge_slave_1: entered allmulticast mode [ 781.527255][T16998] bridge_slave_1: entered promiscuous mode [ 782.199868][T16992] hsr_slave_0: entered promiscuous mode [ 782.206958][T16992] hsr_slave_1: entered promiscuous mode [ 782.229668][T16992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 782.235550][T16992] Cannot create hsr debugfs directory [ 782.355509][T16998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.386863][T16998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.819398][ T5357] Bluetooth: hci5: command tx timeout [ 782.825292][T16998] team0: Port device team_slave_0 added [ 782.957927][T16998] team0: Port device team_slave_1 added [ 783.058983][ T5357] Bluetooth: hci6: command tx timeout [ 783.200800][T16998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.203700][T16998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.223132][T16998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.447479][T16992] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 783.453754][T16992] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.942132][T16998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.946128][T16998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.960001][T16998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.039196][T16992] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.044088][T16992] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.433118][T16998] hsr_slave_0: entered promiscuous mode [ 784.451201][T16998] hsr_slave_1: entered promiscuous mode [ 784.492552][T16998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 784.495913][T16998] Cannot create hsr debugfs directory [ 784.674717][T16992] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.679358][T16992] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.909132][ T5357] Bluetooth: hci5: command tx timeout [ 785.149329][ T5357] Bluetooth: hci6: command tx timeout [ 785.287682][T16992] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.294978][T16992] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.358408][ T1199] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.604351][ T1199] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.802828][T17021] Cannot find del_set index 2 as target [ 785.965081][ T1199] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.265010][ T1199] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.697411][T16992] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 786.706439][T16992] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 786.743092][T16992] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 786.775588][ T1199] bridge_slave_1: left allmulticast mode [ 786.780992][ T1199] bridge_slave_1: left promiscuous mode [ 786.784064][ T1199] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.790305][ T1199] bridge_slave_0: left allmulticast mode [ 786.792557][ T1199] bridge_slave_0: left promiscuous mode [ 786.794881][ T1199] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.980238][ T5357] Bluetooth: hci5: command tx timeout [ 787.219247][ T5357] Bluetooth: hci6: command tx timeout [ 787.500113][ T1199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.523396][ T1199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.580862][ T1199] bond0 (unregistering): Released all slaves [ 787.661855][T16992] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 787.805465][ T1199] tipc: Left network mode [ 788.154530][T16992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.283380][T17034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3006'. [ 788.541090][T16992] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.561249][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.564403][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.607744][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.610946][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.851774][ T1199] hsr_slave_0: left promiscuous mode [ 788.856603][ T1199] hsr_slave_1: left promiscuous mode [ 788.865849][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.870499][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.875632][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.885532][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.942500][ T1199] veth1_macvtap: left promiscuous mode [ 788.945620][ T1199] veth0_macvtap: left promiscuous mode [ 788.948487][ T1199] veth1_vlan: left promiscuous mode [ 788.951384][ T1199] veth0_vlan: left promiscuous mode [ 789.938887][T11163] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 790.128945][T11163] usb 8-1: Using ep0 maxpacket: 16 [ 790.158221][T11163] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 790.175122][T11163] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 790.180804][T11163] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 790.185282][T11163] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.199528][T11163] usb 8-1: config 0 descriptor?? [ 790.207193][T11163] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 790.557994][T11163] usb 8-1: USB disconnect, device number 23 [ 791.486285][T17047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=17047 comm=syz.3.3009 [ 792.566651][ T1199] team0 (unregistering): Port device team_slave_1 removed [ 792.871416][ T1199] team0 (unregistering): Port device team_slave_0 removed [ 794.605616][T17047] : renamed from bond0 (while UP) [ 794.628910][T17055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3012'. [ 794.642386][T17055] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 794.646375][T17057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3012'. [ 794.661208][T16998] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 794.668288][T16998] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 794.758322][T16998] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 794.806450][T16998] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 794.910522][T17068] netlink: 'syz.0.3014': attribute type 2 has an invalid length. [ 794.914080][T17068] netlink: 'syz.0.3014': attribute type 1 has an invalid length. [ 794.917968][T17068] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.3014'. [ 795.758026][T16998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.824705][T16998] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.887493][T12246] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.891090][T12246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.918000][T12246] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.921631][T12246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.955336][ T1199] bond0: left allmulticast mode [ 795.990826][ T1199] bond_slave_0: left allmulticast mode [ 796.012020][ T1199] bond_slave_1: left allmulticast mode [ 796.015563][ T1199] bridge0: port 4(bond0) entered disabled state [ 796.049973][ T1199] team0: left allmulticast mode [ 796.052606][ T1199] team_slave_0: left allmulticast mode [ 796.056219][ T1199] team_slave_1: left allmulticast mode [ 796.073604][ T1199] bridge0: port 3(team0) entered disabled state [ 796.089962][ T1199] bridge_slave_1: left allmulticast mode [ 796.092995][ T1199] bridge_slave_1: left promiscuous mode [ 796.111436][ T1199] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.130597][ T1199] bridge_slave_0: left allmulticast mode [ 796.134615][ T1199] bridge_slave_0: left promiscuous mode [ 796.136903][ T1199] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.873321][ T1199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.879226][ T1199] bond_slave_0: left promiscuous mode [ 796.887697][ T1199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.893323][ T1199] bond_slave_1: left promiscuous mode [ 796.898239][ T1199] bond0 (unregistering): Released all slaves [ 796.909514][ T1199] bond1 (unregistering): Released all slaves [ 797.107413][T16992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.574347][T16992] veth0_vlan: entered promiscuous mode [ 797.584911][T16992] veth1_vlan: entered promiscuous mode [ 797.739389][T16992] veth0_macvtap: entered promiscuous mode [ 797.746622][T16992] veth1_macvtap: entered promiscuous mode [ 797.822878][T16992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.836076][T16992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.844352][T16992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.851300][T16992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.856121][T16992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.861175][T16992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.865071][T16992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.877424][T16992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.884722][T16992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.904058][T16992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.908277][T16992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.915085][T16992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.922421][T16992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.927844][T16992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.933875][T16992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.938792][T16992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.944399][T16992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.948451][T16992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.953042][T16992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.959955][T16992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 797.983361][T16992] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.987098][T16992] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.991133][T16992] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.013034][T16992] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.102953][ T1199] hsr_slave_0: left promiscuous mode [ 798.108649][ T1199] hsr_slave_1: left promiscuous mode [ 798.125500][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.129329][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.145627][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.152255][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.158372][ T1199] batman_adv: batadv0: Removing interface: ipvlan1 [ 798.208682][ T1199] veth1_macvtap: left promiscuous mode [ 798.211657][ T1199] veth0_macvtap: left promiscuous mode [ 798.215146][ T1199] veth1_vlan: left promiscuous mode [ 798.218269][ T1199] veth0_vlan: left promiscuous mode [ 800.115535][ T1199] team_slave_1 (unregistering): left promiscuous mode [ 800.135330][ T1199] team0 (unregistering): Port device team_slave_1 removed [ 800.465728][ T1199] team_slave_0 (unregistering): left promiscuous mode [ 800.515697][ T1199] team0 (unregistering): Port device team_slave_0 removed [ 802.489108][T16998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.557634][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.647933][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.691233][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.694595][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.790287][T16998] veth0_vlan: entered promiscuous mode [ 802.846868][T16998] veth1_vlan: entered promiscuous mode [ 802.934664][T16998] veth0_macvtap: entered promiscuous mode [ 803.089166][T16998] veth1_macvtap: entered promiscuous mode [ 803.149697][T16998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.155617][T16998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.162079][T16998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.166733][T16998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.177885][T16998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.184285][T16998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.188889][T16998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.193711][T16998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.201034][T16998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.207325][T16998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.212311][T16998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.216525][T16998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.220910][T16998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.231144][T16998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.235575][T16998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.240090][T16998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.244504][T16998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.248201][T16998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.252874][T16998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.258610][T16998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.258936][ T6649] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 803.287934][T16998] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.295697][T16998] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.304489][T16998] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.314322][T16998] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.443365][ T6649] usb 6-1: config 0 has no interfaces? [ 803.446719][ T6649] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 803.451130][ T6649] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.457616][ T6649] usb 6-1: config 0 descriptor?? [ 803.542359][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.559804][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.666461][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.670413][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.718701][ T5357] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 803.790979][T17108] Cannot find add_set index 0 as target [ 804.969290][ T1291] usb 6-1: USB disconnect, device number 14 [ 808.446411][T14753] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 808.486925][T14753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 808.510658][T14753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 808.544662][T17149] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 808.548395][T14753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 808.592862][T14753] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 808.637851][T14753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 808.919626][T17153] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 808.951512][T11164] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 809.154954][T11164] usb 7-1: Using ep0 maxpacket: 16 [ 809.166333][T11164] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.171406][T11164] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 809.241262][T11164] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 809.258898][T11164] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.298692][T11164] usb 7-1: config 0 descriptor?? [ 809.340976][T11164] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 809.478597][T17157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.645943][T17157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.966969][T11164] usb 7-1: USB disconnect, device number 17 [ 810.302558][T17144] chnl_net:caif_netlink_parms(): no params data found [ 810.782319][T17144] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.787172][T17144] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.790631][T17144] bridge_slave_0: entered allmulticast mode [ 810.806498][T17144] bridge_slave_0: entered promiscuous mode [ 810.822129][T14753] Bluetooth: hci0: command tx timeout [ 810.827726][T17144] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.830965][T17144] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.834621][T17144] bridge_slave_1: entered allmulticast mode [ 810.839477][T17144] bridge_slave_1: entered promiscuous mode [ 810.942097][T17144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.950011][T17144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.201814][T17144] team0: Port device team_slave_0 added [ 811.210489][T17144] team0: Port device team_slave_1 added [ 811.409018][ T39] audit: type=1400 audit(1726005492.500:2755): avc: denied { unmount } for pid=16992 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 811.452199][T17144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.455511][T17144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.492659][T17144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.499288][T17144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.514679][T17144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.526578][T17144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.731185][T17144] hsr_slave_0: entered promiscuous mode [ 811.774266][T17144] hsr_slave_1: entered promiscuous mode [ 811.790881][T17144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 811.809016][T17144] Cannot create hsr debugfs directory [ 812.647627][T17144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.924289][T14753] Bluetooth: hci0: command tx timeout [ 812.939925][T17144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.187213][T17144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.288566][T17144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.681871][T17144] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 813.725719][T17144] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 813.726850][T17188] xt_connbytes: Forcing CT accounting to be enabled [ 813.743738][T17188] No such timeout policy "syz0" [ 813.888296][T17144] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 813.960590][T17144] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 814.286261][T17144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.394662][T17144] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.415289][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.418379][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.501564][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.505202][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.984355][T14753] Bluetooth: hci0: command tx timeout [ 815.427878][ T5357] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 815.440618][ T5357] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 815.445848][ T5357] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 815.457178][ T5357] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 815.480221][ T5357] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 815.485238][ T5357] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 815.553396][T17144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.061941][T14753] Bluetooth: hci0: command tx timeout [ 817.550403][T14753] Bluetooth: hci4: command tx timeout [ 817.923620][T17144] veth0_vlan: entered promiscuous mode [ 818.002437][T17144] veth1_vlan: entered promiscuous mode [ 818.120219][T17144] veth0_macvtap: entered promiscuous mode [ 818.133764][T17144] veth1_macvtap: entered promiscuous mode [ 818.212565][T17144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.216809][T17144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.231317][T17144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.242041][T17144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.268289][T17144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.284806][T17144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.299427][T17144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.305077][T17144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.315971][T17144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.379081][T17144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.394548][T17144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.435798][T17144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.460562][T17144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.499004][T17144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.505038][T17144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.538796][T17144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.543734][T17144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.548182][T17144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.605228][T17144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.628471][T17144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.679118][T17144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.738891][T17144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.765240][T17144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.790518][T17144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.853543][T17144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.857689][T17144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.889401][T17144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.893128][T17144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.633661][T14753] Bluetooth: hci4: command tx timeout [ 819.877821][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.898988][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.915097][T17203] chnl_net:caif_netlink_parms(): no params data found [ 820.286067][T12247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.317675][T12247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.589293][ T39] audit: type=1326 audit(1726005501.660:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.0.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7557def9 code=0x7ffc0000 [ 820.618965][ T39] audit: type=1326 audit(1726005501.660:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.0.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7557def9 code=0x7ffc0000 [ 820.659242][ T39] audit: type=1326 audit(1726005501.660:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.0.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee7557def9 code=0x7ffc0000 [ 820.679033][ T39] audit: type=1326 audit(1726005501.660:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.0.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7557def9 code=0x7ffc0000 [ 820.732349][ T39] audit: type=1326 audit(1726005501.670:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.0.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee7557def9 code=0x7ffc0000 [ 820.773442][ T39] audit: type=1326 audit(1726005501.670:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.0.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7557def9 code=0x7ffc0000 [ 820.800362][ T39] audit: type=1326 audit(1726005501.670:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.0.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7557def9 code=0x7ffc0000 [ 820.813154][ T39] audit: type=1326 audit(1726005501.670:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.0.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee7557def9 code=0x7ffc0000 [ 820.815936][T17203] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.826273][ T39] audit: type=1326 audit(1726005501.670:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.0.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7557def9 code=0x7ffc0000 [ 820.860382][ T39] audit: type=1326 audit(1726005501.670:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.0.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7557def9 code=0x7ffc0000 [ 820.884429][T17203] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.888374][T17203] bridge_slave_0: entered allmulticast mode [ 820.907475][T17203] bridge_slave_0: entered promiscuous mode [ 820.921317][T17232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 820.924623][T17232] IPv6: NLM_F_CREATE should be set when creating new route [ 820.936666][T17203] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.940813][T17203] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.944674][T17203] bridge_slave_1: entered allmulticast mode [ 820.977745][T17203] bridge_slave_1: entered promiscuous mode [ 821.294561][T17236] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 821.507443][T17203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.580224][T17203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.700522][T14753] Bluetooth: hci4: command tx timeout [ 822.126762][T17203] team0: Port device team_slave_0 added [ 822.291888][T17203] team0: Port device team_slave_1 added [ 822.939463][T17203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.942509][T17203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.039026][T17203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.083006][T17203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.090397][T17203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.104793][T17203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.528082][T17203] hsr_slave_0: entered promiscuous mode [ 823.547234][T17203] hsr_slave_1: entered promiscuous mode [ 823.551617][T17203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 823.554843][T17203] Cannot create hsr debugfs directory [ 823.779927][T14753] Bluetooth: hci4: command tx timeout [ 824.640065][T17203] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.920630][T17203] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.019687][T17252] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3049'. [ 825.078945][T17252] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 825.155270][T17203] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.521367][T17203] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.055214][T17203] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 826.069928][T17203] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 826.097346][T17203] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 826.170325][T17203] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 826.500077][T17203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.565169][T17203] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.707150][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.710273][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.857488][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.860797][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.220072][T17203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 828.715516][T17203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.757028][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 828.757044][ T39] audit: type=1400 audit(1726005509.850:2774): avc: denied { audit_write } for pid=17278 comm="syz.0.3056" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 828.852630][ T39] audit: type=1107 audit(1726005509.890:2775): pid=17278 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='›–H«=†ÙÐÇ+äó,œk¬c¸´e*M›½M;_ÝûÒê)Jñ~$±ìCß¾ ¸ÆÄfXêHuAg’,î8XÙ¯‹mHåzü|/…?ÕŸSZk²¦¯QÓK(~ù´åµIAÏ(#•ZðŠRb' [ 828.916801][T17203] veth0_vlan: entered promiscuous mode [ 828.926685][T17203] veth1_vlan: entered promiscuous mode [ 828.990374][T17203] veth0_macvtap: entered promiscuous mode [ 829.064879][T17203] veth1_macvtap: entered promiscuous mode [ 829.356904][T17203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.068969][ T39] audit: type=1400 audit(1726005510.900:2776): avc: denied { map } for pid=17289 comm="syz.1.3058" path="/dev/video3" dev="devtmpfs" ino=882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 830.156904][T17203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.160984][T17203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.167575][T17203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.172674][T17203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.177328][T17203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.182054][T17203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.186857][T17203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.191199][T17203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.195438][T17203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.202296][T17203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.206183][T17203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.211675][T17203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.235045][T17203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.239486][T17203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.243502][T17203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.247793][T17203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.252890][T17203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.257500][T17203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.261882][T17203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.267601][T17203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.271548][T17203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.275434][T17203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.279420][T17203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.283810][T17203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.288665][T17203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.293937][T17203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.299357][T17203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.331787][T17203] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.335490][T17203] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.340046][T17203] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.344289][T17203] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.551499][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.555194][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.649132][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.652992][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.067807][T17303] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3060'. [ 836.086947][T17300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=17300 comm=syz.0.3060 [ 836.457030][T17311] Bluetooth: MGMT ver 1.23 [ 836.954895][ T39] audit: type=1326 audit(1726005518.020:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.2.3062" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f981077def9 code=0x0 [ 837.279197][T11164] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 837.481108][T11164] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 837.488075][T11164] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 837.492414][T11164] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 837.497214][T11164] usb 5-1: config 0 interface 0 has no altsetting 0 [ 837.502209][T11164] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 837.506531][T11164] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 837.527511][T11164] usb 5-1: config 0 interface 0 has no altsetting 0 [ 837.531816][T11164] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 837.536561][T11164] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 837.553288][T11164] usb 5-1: config 0 interface 0 has no altsetting 0 [ 837.580665][T11164] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 837.584452][T11164] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 837.592265][T11164] usb 5-1: config 0 interface 0 has no altsetting 0 [ 837.607507][T11164] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 837.614194][T11164] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 837.623618][T11164] usb 5-1: config 0 interface 0 has no altsetting 0 [ 837.641080][T11164] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 837.645351][T11164] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 837.653611][T11164] usb 5-1: config 0 interface 0 has no altsetting 0 [ 837.669375][T11164] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 837.673328][T11164] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 837.682277][T11164] usb 5-1: config 0 interface 0 has no altsetting 0 [ 837.688096][T11164] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 837.692451][T11164] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 837.696703][T11164] usb 5-1: config 0 interface 0 has no altsetting 0 [ 837.701531][T11164] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 837.708139][T11164] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 837.711784][T11164] usb 5-1: Product: syz [ 837.714553][T11164] usb 5-1: Manufacturer: syz [ 837.716977][T11164] usb 5-1: SerialNumber: syz [ 837.734202][T11164] usb 5-1: config 0 descriptor?? [ 837.759039][T11164] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 838.258969][T11164] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 838.469958][T11164] usb 6-1: Using ep0 maxpacket: 8 [ 838.476814][T11164] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 838.482816][T11164] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 838.487657][T11164] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 838.494380][T11164] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 838.519039][T11164] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 838.533397][T11164] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.837145][T11164] usb 6-1: GET_CAPABILITIES returned 0 [ 838.840119][T11164] usbtmc 6-1:16.0: can't read capabilities [ 839.044906][T11164] usb 6-1: USB disconnect, device number 15 [ 840.003492][ T1291] usb 5-1: USB disconnect, device number 20 [ 840.017701][ T1291] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 840.441249][T17339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3067'. [ 842.356361][T17355] input: syz0 as /devices/virtual/input/input43 [ 843.340196][T17370] input: syz1 as /devices/virtual/input/input44 [ 844.479995][T17376] ip6t_REJECT: ECHOREPLY is not supported [ 846.509557][T17390] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3082'. [ 847.427572][T17397] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3084'. [ 849.597129][ T39] audit: type=1800 audit(1726005530.756:2778): pid=17412 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3088" name="/" dev="fuse" ino=1 res=0 errno=0 [ 849.648992][ T39] audit: type=1800 audit(1726005530.796:2779): pid=17413 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3088" name="/" dev="fuse" ino=1 res=0 errno=0 [ 850.086802][T17407] Cannot find del_set index 0 as target [ 851.520798][T17426] tmpfs: Bad value for 'mpol' [ 852.270219][T17432] ptrace attach of "/syz-executor exec"[17435] was attempted by ""[17432] [ 852.498975][ T5357] Bluetooth: hci2: command 0x0406 tx timeout [ 853.951497][ T5357] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 853.961850][ T5357] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 853.967067][ T5357] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 853.972653][ T5357] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 853.976630][ T5357] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 853.980194][ T5357] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 856.029355][T14753] Bluetooth: hci7: command tx timeout [ 856.206897][T17445] chnl_net:caif_netlink_parms(): no params data found [ 858.108633][T14753] Bluetooth: hci7: command tx timeout [ 858.335732][T17445] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.349005][T17445] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.369141][T17445] bridge_slave_0: entered allmulticast mode [ 858.391013][T17445] bridge_slave_0: entered promiscuous mode [ 858.538232][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.710566][T17445] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.713948][T17445] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.717916][T17445] bridge_slave_1: entered allmulticast mode [ 858.760296][T17445] bridge_slave_1: entered promiscuous mode [ 858.932657][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.579230][T17445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 859.584729][T17475] netlink: 'syz.0.3102': attribute type 4 has an invalid length. [ 859.886947][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.042126][T17445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.190427][T14753] Bluetooth: hci7: command tx timeout [ 860.606842][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.810304][T17445] team0: Port device team_slave_0 added [ 860.850907][T17445] team0: Port device team_slave_1 added [ 861.130823][T17445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.134203][T17445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.178958][T17445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.395102][T17445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.399497][T17445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.413184][T17445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.751336][T17445] hsr_slave_0: entered promiscuous mode [ 861.759469][T17445] hsr_slave_1: entered promiscuous mode [ 861.774331][T17445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 861.777842][T17445] Cannot create hsr debugfs directory [ 862.259037][T14753] Bluetooth: hci7: command tx timeout [ 863.051931][ T39] audit: type=1400 audit(1726005544.216:2780): avc: denied { create } for pid=17493 comm="syz.2.3106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 863.261667][ T13] bridge_slave_1: left allmulticast mode [ 863.264645][ T13] bridge_slave_1: left promiscuous mode [ 863.270632][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.340347][ T13] bridge_slave_0: left allmulticast mode [ 863.342829][ T13] bridge_slave_0: left promiscuous mode [ 863.345137][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.849797][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.882698][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.894048][ T13] bond0 (unregistering): Released all slaves [ 867.332218][T17525] input: syz0 as /devices/virtual/input/input45 [ 867.558964][ C2] [ 867.560012][ C2] ======================================================== [ 867.563386][ C2] WARNING: possible irq lock inversion dependency detected [ 867.566353][ C2] 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 Not tainted [ 867.570688][ C2] -------------------------------------------------------- [ 867.573827][ C2] dhcpcd-run-hook/17527 just changed the state of lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 867.576678][ C2] ffff88804305b230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xa4/0x370 [ 867.579360][ T39] audit: type=1400 audit(1726005548.726:2781): avc: denied { write } for pid=5327 comm="syz-executor" path="pipe:[1997]" dev="pipefs" ino=1997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 867.581368][ C2] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 867.593141][ C2] (tasklist_lock){.+.+}-{2:2} [ 867.593156][ C2] [ 867.593156][ C2] [ 867.593156][ C2] and interrupts could create inverse lock ordering between them. [ 867.593156][ C2] [ 867.600156][ C2] [ 867.600156][ C2] other info that might help us debug this: [ 867.603070][ C2] Chain exists of: [ 867.603070][ C2] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 867.603070][ C2] [ 867.608087][ C2] Possible interrupt unsafe locking scenario: [ 867.608087][ C2] [ 867.611151][ C2] CPU0 CPU1 [ 867.612962][ C2] ---- ---- [ 867.614695][ C2] lock(tasklist_lock); [ 867.616195][ C2] local_irq_disable(); [ 867.618745][ C2] lock(&dev->event_lock#2); [ 867.621502][ C2] lock(&client->buffer_lock); [ 867.624230][ C2] [ 867.625408][ C2] lock(&dev->event_lock#2); [ 867.627018][ C2] [ 867.627018][ C2] *** DEADLOCK *** [ 867.627018][ C2] [ 867.629850][ C2] 2 locks held by dhcpcd-run-hook/17527: [ 867.631513][ C2] #0: ffffc90000858cb0 (drivers/tty/vt/keyboard.c:274){+.-.}-{0:0}, at: call_timer_fn+0x11a/0x610 [ 867.635119][ C2] #1: ffffffff8ddb9fe0 (rcu_read_lock){....}-{1:2}, at: input_handler_for_each_handle+0x3e/0x250 [ 867.638623][ C2] [ 867.638623][ C2] the shortest dependencies between 2nd lock and 1st lock: [ 867.641830][ C2] -> (tasklist_lock){.+.+}-{2:2} { [ 867.643663][ C2] HARDIRQ-ON-R at: [ 867.645087][ C2] lock_acquire+0x1b1/0x560 [ 867.647328][ C2] _raw_read_lock+0x5f/0x70 [ 867.649948][ C2] __do_wait+0x105/0x890 [ 867.652319][ C2] do_wait+0x219/0x570 [ 867.654566][ C2] kernel_wait+0xa0/0x160 [ 867.657085][ C2] call_usermodehelper_exec_work+0xf1/0x170 [ 867.660159][ C2] process_one_work+0x9c5/0x1b40 [ 867.662887][ C2] worker_thread+0x6c8/0xed0 [ 867.665457][ C2] kthread+0x2c1/0x3a0 [ 867.667653][ C2] ret_from_fork+0x45/0x80 [ 867.669831][ C2] ret_from_fork_asm+0x1a/0x30 [ 867.672117][ C2] SOFTIRQ-ON-R at: [ 867.673524][ C2] lock_acquire+0x1b1/0x560 [ 867.675649][ C2] _raw_read_lock+0x5f/0x70 [ 867.677580][ C2] __do_wait+0x105/0x890 [ 867.679743][ C2] do_wait+0x219/0x570 [ 867.681861][ C2] kernel_wait+0xa0/0x160 [ 867.684121][ C2] call_usermodehelper_exec_work+0xf1/0x170 [ 867.686870][ C2] process_one_work+0x9c5/0x1b40 [ 867.689486][ C2] worker_thread+0x6c8/0xed0 [ 867.692052][ C2] kthread+0x2c1/0x3a0 [ 867.694536][ C2] ret_from_fork+0x45/0x80 [ 867.697223][ C2] ret_from_fork_asm+0x1a/0x30 [ 867.699969][ C2] INITIAL USE at: [ 867.701459][ C2] lock_acquire+0x1b1/0x560 [ 867.703881][ C2] _raw_write_lock_irq+0x36/0x50 [ 867.706313][ C2] copy_process+0x4420/0x8de0 [ 867.708442][ C2] kernel_clone+0xfd/0x960 [ 867.710234][ C2] user_mode_thread+0xb4/0xf0 [ 867.712366][ C2] rest_init+0x23/0x2b0 [ 867.714715][ C2] start_kernel+0x3df/0x4c0 [ 867.717597][ C2] x86_64_start_reservations+0x18/0x30 [ 867.720478][ C2] x86_64_start_kernel+0xb2/0xc0 [ 867.723229][ C2] common_startup_64+0x13e/0x148 [ 867.726207][ C2] INITIAL READ USE at: [ 867.728294][ C2] lock_acquire+0x1b1/0x560 [ 867.731908][ C2] _raw_read_lock+0x5f/0x70 [ 867.734783][ C2] __do_wait+0x105/0x890 [ 867.737517][ C2] do_wait+0x219/0x570 [ 867.740154][ C2] kernel_wait+0xa0/0x160 [ 867.743142][ C2] call_usermodehelper_exec_work+0xf1/0x170 [ 867.746535][ C2] process_one_work+0x9c5/0x1b40 [ 867.749914][ C2] worker_thread+0x6c8/0xed0 [ 867.753009][ C2] kthread+0x2c1/0x3a0 [ 867.755700][ C2] ret_from_fork+0x45/0x80 [ 867.758485][ C2] ret_from_fork_asm+0x1a/0x30 [ 867.761526][ C2] } [ 867.762639][ C2] ... key at: [] tasklist_lock+0x18/0x40 [ 867.765921][ C2] ... acquired at: [ 867.767617][ C2] _raw_read_lock+0x5f/0x70 [ 867.769260][ C2] send_sigio+0xb4/0x3c0 [ 867.770792][ C2] kill_fasync+0x1f6/0x4f0 [ 867.772382][ C2] lease_break_callback+0x23/0x30 [ 867.774120][ C2] __break_lease+0x67c/0x17d0 [ 867.775772][ C2] do_dentry_open+0x6ba/0x15f0 [ 867.777459][ C2] vfs_open+0x82/0x3f0 [ 867.778920][ C2] path_openat+0x2141/0x2d20 [ 867.780828][ C2] do_filp_open+0x1dc/0x430 [ 867.783047][ C2] do_sys_openat2+0x17a/0x1e0 [ 867.785023][ C2] __x64_sys_openat+0x175/0x210 [ 867.787054][ C2] do_syscall_64+0xcd/0x250 [ 867.788943][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.791099][ C2] [ 867.791927][ C2] -> (&f->f_owner.lock){...-}-{2:2} { [ 867.793817][ C2] IN-SOFTIRQ-R at: [ 867.795243][ C2] lock_acquire+0x1b1/0x560 [ 867.797484][ C2] _raw_read_lock_irqsave+0x46/0x90 [ 867.800122][ C2] send_sigurg+0x22/0xc30 [ 867.802679][ C2] sk_send_sigurg+0x7a/0x370 [ 867.805291][ C2] tcp_urg+0x343/0xb80 [ 867.807730][ C2] tcp_rcv_established+0x8a6/0x21c0 [ 867.810343][ C2] tcp_v4_do_rcv+0x5ca/0xa90 [ 867.813158][ C2] tcp_v4_rcv+0x33a8/0x4390 [ 867.815821][ C2] ip_protocol_deliver_rcu+0xba/0x4c0 [ 867.818776][ C2] ip_local_deliver_finish+0x316/0x570 [ 867.821798][ C2] ip_local_deliver+0x18e/0x1f0 [ 867.824554][ C2] ip_rcv+0x2c5/0x5d0 [ 867.827074][ C2] __netif_receive_skb_one_core+0x199/0x1e0 [ 867.829994][ C2] __netif_receive_skb+0x1d/0x160 [ 867.832548][ C2] process_backlog+0x443/0x15f0 [ 867.834923][ C2] __napi_poll.constprop.0+0xb7/0x550 [ 867.837609][ C2] net_rx_action+0xa92/0x1010 [ 867.839896][ C2] handle_softirqs+0x216/0x8f0 [ 867.842218][ C2] do_softirq+0xb2/0xf0 [ 867.844345][ C2] __local_bh_enable_ip+0x100/0x120 [ 867.846819][ C2] fpu_clone+0x398/0xbc0 [ 867.849320][ C2] copy_thread+0x451/0xb80 [ 867.851853][ C2] copy_process+0x3c79/0x8de0 [ 867.854513][ C2] kernel_clone+0xfd/0x960 [ 867.857082][ C2] __do_sys_clone3+0x1f5/0x270 [ 867.859798][ C2] do_syscall_64+0xcd/0x250 [ 867.862083][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.864777][ C2] INITIAL USE at: [ 867.866172][ C2] lock_acquire+0x1b1/0x560 [ 867.868380][ C2] _raw_write_lock_irq+0x36/0x50 [ 867.870709][ C2] f_modown+0x2a/0x380 [ 867.872796][ C2] f_setown+0xd4/0x2a0 [ 867.874861][ C2] do_fcntl+0x11f7/0x1380 [ 867.877224][ C2] __x64_sys_fcntl+0x174/0x200 [ 867.879892][ C2] do_syscall_64+0xcd/0x250 [ 867.882199][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.885186][ C2] INITIAL READ USE at: [ 867.887043][ C2] lock_acquire+0x1b1/0x560 [ 867.889796][ C2] _raw_read_lock_irqsave+0x74/0x90 [ 867.892699][ C2] send_sigurg+0x22/0xc30 [ 867.894841][ C2] sk_send_sigurg+0x7a/0x370 [ 867.896941][ C2] unix_stream_sendmsg+0xe37/0x10f0 [ 867.899145][ C2] ____sys_sendmsg+0xab5/0xc90 [ 867.901593][ C2] ___sys_sendmsg+0x135/0x1e0 [ 867.904013][ C2] __sys_sendmsg+0x117/0x1f0 [ 867.906373][ C2] do_syscall_64+0xcd/0x250 [ 867.908708][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.911521][ C2] } [ 867.912509][ C2] ... key at: [] __key.2+0x0/0x40 [ 867.914991][ C2] ... acquired at: [ 867.923043][ C2] _raw_read_lock_irqsave+0x74/0x90 [ 867.925220][ C2] send_sigio+0x28/0x3c0 [ 867.926991][ C2] kill_fasync+0x1f6/0x4f0 [ 867.928830][ C2] sock_wake_async+0x132/0x160 [ 867.930728][ C2] sock_def_error_report+0x352/0x400 [ 867.932745][ C2] sk_error_report+0x3e/0x2a0 [ 867.934737][ C2] tcp_disconnect+0x1410/0x1e00 [ 867.936759][ C2] inet_shutdown+0x26c/0x440 [ 867.938674][ C2] __sys_shutdown+0xff/0x1c0 [ 867.940591][ C2] __x64_sys_shutdown+0x53/0x80 [ 867.942455][ C2] do_syscall_64+0xcd/0x250 [ 867.943919][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.946147][ C2] [ 867.947035][ C2] -> (&new->fa_lock){....}-{2:2} { [ 867.949030][ C2] INITIAL USE at: [ 867.950472][ C2] lock_acquire+0x1b1/0x560 [ 867.952889][ C2] _raw_write_lock_irq+0x36/0x50 [ 867.955420][ C2] fasync_remove_entry+0xb9/0x1f0 [ 867.957971][ C2] fasync_helper+0xaf/0xd0 [ 867.960308][ C2] sock_fasync+0x98/0x140 [ 867.962262][ C2] __fput+0x94a/0xbb0 [ 867.964459][ C2] task_work_run+0x14e/0x250 [ 867.966585][ C2] syscall_exit_to_user_mode+0x27b/0x2a0 [ 867.969188][ C2] do_syscall_64+0xda/0x250 [ 867.970802][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.973596][ C2] INITIAL READ USE at: [ 867.975203][ C2] lock_acquire+0x1b1/0x560 [ 867.977125][ C2] _raw_read_lock_irqsave+0x74/0x90 [ 867.979049][ C2] kill_fasync+0x138/0x4f0 [ 867.981522][ C2] sock_wake_async+0x132/0x160 [ 867.984186][ C2] sock_def_error_report+0x352/0x400 [ 867.987025][ C2] sk_error_report+0x3e/0x2a0 [ 867.989412][ C2] tcp_disconnect+0x1410/0x1e00 [ 867.991742][ C2] inet_shutdown+0x26c/0x440 [ 867.993820][ C2] __sys_shutdown+0xff/0x1c0 [ 867.995574][ C2] __x64_sys_shutdown+0x53/0x80 [ 867.997902][ C2] do_syscall_64+0xcd/0x250 [ 868.000411][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.003139][ C2] } [ 868.004184][ C2] ... key at: [] __key.0+0x0/0x40 [ 868.006858][ C2] ... acquired at: [ 868.008369][ C2] _raw_read_lock_irqsave+0x74/0x90 [ 868.010414][ C2] kill_fasync+0x138/0x4f0 [ 868.012364][ C2] evdev_pass_values+0x619/0x9b0 [ 868.014958][ C2] evdev_events+0x1bb/0x390 [ 868.016829][ C2] input_pass_values+0x777/0x8e0 [ 868.018834][ C2] input_handle_event+0xf0b/0x14d0 [ 868.021399][ C2] input_inject_event+0x1bb/0x370 [ 868.023636][ C2] evdev_write+0x450/0x750 [ 868.025443][ C2] vfs_write+0x29a/0x1140 [ 868.027241][ C2] ksys_write+0x1f8/0x260 [ 868.029001][ C2] do_syscall_64+0xcd/0x250 [ 868.030860][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.033209][ C2] [ 868.034103][ C2] -> (&client->buffer_lock){....}-{2:2} { [ 868.036237][ C2] INITIAL USE at: [ 868.037596][ C2] lock_acquire+0x1b1/0x560 [ 868.039678][ C2] _raw_spin_lock+0x2e/0x40 [ 868.041792][ C2] evdev_handle_get_val+0x66/0x600 [ 868.044098][ C2] evdev_do_ioctl+0xfb4/0x1ae0 [ 868.046294][ C2] evdev_ioctl+0x170/0x1a0 [ 868.048456][ C2] __x64_sys_ioctl+0x193/0x220 [ 868.051095][ C2] do_syscall_64+0xcd/0x250 [ 868.053572][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.056497][ C2] } [ 868.057522][ C2] ... key at: [] __key.1+0x0/0x40 [ 868.060319][ C2] ... acquired at: [ 868.061962][ C2] _raw_spin_lock+0x2e/0x40 [ 868.063826][ C2] evdev_handle_get_val+0x66/0x600 [ 868.065893][ C2] evdev_do_ioctl+0xfb4/0x1ae0 [ 868.067844][ C2] evdev_ioctl+0x170/0x1a0 [ 868.069773][ C2] __x64_sys_ioctl+0x193/0x220 [ 868.071766][ C2] do_syscall_64+0xcd/0x250 [ 868.073656][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.075990][ C2] [ 868.076976][ C2] -> (&dev->event_lock#2){..-.}-{2:2} { [ 868.078875][ C2] IN-SOFTIRQ-W at: [ 868.080260][ C2] lock_acquire+0x1b1/0x560 [ 868.082401][ C2] _raw_spin_lock_irqsave+0x3a/0x60 [ 868.084771][ C2] input_inject_event+0xa4/0x370 [ 868.087326][ C2] kd_sound_helper+0x20f/0x280 [ 868.089841][ C2] input_handler_for_each_handle+0xd4/0x250 [ 868.092937][ C2] call_timer_fn+0x1a0/0x610 [ 868.095384][ C2] __run_timers+0x74b/0xaf0 [ 868.098197][ C2] run_timer_base+0x111/0x190 [ 868.100576][ C2] run_timer_softirq+0x1a/0x40 [ 868.103012][ C2] handle_softirqs+0x216/0x8f0 [ 868.105310][ C2] irq_exit_rcu+0xbb/0x120 [ 868.107351][ C2] sysvec_apic_timer_interrupt+0x95/0xb0 [ 868.110104][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 868.112992][ C2] __might_sleep+0x9a/0x170 [ 868.115050][ C2] __might_fault+0x83/0x190 [ 868.117131][ C2] elf_load+0x695/0x880 [ 868.119142][ C2] load_elf_binary+0x339e/0x4d90 [ 868.121433][ C2] bprm_execve+0x703/0x1960 [ 868.123225][ C2] do_execveat_common.isra.0+0x4f1/0x630 [ 868.125332][ C2] __x64_sys_execve+0x8c/0xb0 [ 868.127158][ C2] do_syscall_64+0xcd/0x250 [ 868.129204][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.131914][ C2] INITIAL USE at: [ 868.133339][ C2] lock_acquire+0x1b1/0x560 [ 868.135379][ C2] _raw_spin_lock_irqsave+0x3a/0x60 [ 868.137663][ C2] input_inject_event+0xa4/0x370 [ 868.139862][ C2] led_set_brightness+0x211/0x290 [ 868.142295][ C2] kbd_led_trigger_activate+0xcb/0x110 [ 868.145139][ C2] led_trigger_set+0x59a/0xc60 [ 868.147492][ C2] led_trigger_set_default+0x1bd/0x2a0 [ 868.150078][ C2] led_classdev_register_ext+0x78c/0x9e0 [ 868.152744][ C2] input_leds_connect+0x54a/0x8e0 [ 868.155111][ C2] input_attach_handler.isra.0+0x181/0x260 [ 868.157802][ C2] input_register_device+0xa8e/0x1140 [ 868.160056][ C2] atkbd_connect+0x5e2/0xa20 [ 868.162096][ C2] serio_driver_probe+0x74/0xa0 [ 868.164178][ C2] really_probe+0x23e/0xa90 [ 868.165885][ C2] __driver_probe_device+0x1de/0x440 [ 868.168271][ C2] driver_probe_device+0x4c/0x1b0 [ 868.170974][ C2] __driver_attach+0x283/0x580 [ 868.173589][ C2] bus_for_each_dev+0x13c/0x1d0 [ 868.176269][ C2] serio_handle_event+0x2bb/0xa90 [ 868.178922][ C2] process_one_work+0x9c5/0x1b40 [ 868.181717][ C2] worker_thread+0x6c8/0xed0 [ 868.184232][ C2] kthread+0x2c1/0x3a0 [ 868.186469][ C2] ret_from_fork+0x45/0x80 [ 868.189020][ C2] ret_from_fork_asm+0x1a/0x30 [ 868.191611][ C2] } [ 868.192650][ C2] ... key at: [] __key.7+0x0/0x40 [ 868.195589][ C2] ... acquired at: [ 868.197117][ C2] __lock_acquire+0x11d7/0x3cb0 [ 868.199090][ C2] lock_acquire+0x1b1/0x560 [ 868.200964][ C2] _raw_spin_lock_irqsave+0x3a/0x60 [ 868.202993][ C2] input_inject_event+0xa4/0x370 [ 868.204980][ C2] kd_sound_helper+0x20f/0x280 [ 868.206796][ C2] input_handler_for_each_handle+0xd4/0x250 [ 868.208830][ C2] call_timer_fn+0x1a0/0x610 [ 868.210470][ C2] __run_timers+0x74b/0xaf0 [ 868.212156][ C2] run_timer_base+0x111/0x190 [ 868.213889][ C2] run_timer_softirq+0x1a/0x40 [ 868.215709][ C2] handle_softirqs+0x216/0x8f0 [ 868.217695][ C2] irq_exit_rcu+0xbb/0x120 [ 868.219421][ C2] sysvec_apic_timer_interrupt+0x95/0xb0 [ 868.221260][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 868.223087][ C2] __might_sleep+0x9a/0x170 [ 868.224609][ C2] __might_fault+0x83/0x190 [ 868.226107][ C2] elf_load+0x695/0x880 [ 868.227485][ C2] load_elf_binary+0x339e/0x4d90 [ 868.229204][ C2] bprm_execve+0x703/0x1960 [ 868.230971][ C2] do_execveat_common.isra.0+0x4f1/0x630 [ 868.233167][ C2] __x64_sys_execve+0x8c/0xb0 [ 868.234647][ C2] do_syscall_64+0xcd/0x250 [ 868.235997][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.237601][ C2] [ 868.238220][ C2] [ 868.238220][ C2] stack backtrace: [ 868.239782][ C2] CPU: 2 UID: 0 PID: 17527 Comm: dhcpcd-run-hook Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 868.242912][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 868.246665][ C2] Call Trace: [ 868.247902][ C2] [ 868.248853][ C2] dump_stack_lvl+0x116/0x1f0 [ 868.250418][ C2] print_irq_inversion_bug.part.0+0x3e9/0x5a0 [ 868.252449][ C2] ? __pfx_print_irq_inversion_bug.part.0+0x10/0x10 [ 868.254684][ C2] ? __pfx_usage_skip+0x10/0x10 [ 868.256682][ C2] ? __pfx_usage_match+0x10/0x10 [ 868.258516][ C2] mark_lock+0x574/0xc60 [ 868.260055][ C2] ? __pfx_mark_lock+0x10/0x10 [ 868.262211][ C2] ? hlock_class+0x4e/0x130 [ 868.263974][ C2] ? hlock_class+0x4e/0x130 [ 868.265721][ C2] ? mark_lock+0xb5/0xc60 [ 868.267399][ C2] ? __pfx_mark_lock+0x10/0x10 [ 868.269236][ C2] ? __pfx_mark_lock+0x10/0x10 [ 868.271079][ C2] __lock_acquire+0x11d7/0x3cb0 [ 868.272983][ C2] ? hlock_class+0x4e/0x130 [ 868.274742][ C2] ? __pfx___lock_acquire+0x10/0x10 [ 868.276768][ C2] lock_acquire+0x1b1/0x560 [ 868.278566][ C2] ? input_inject_event+0xa4/0x370 [ 868.280601][ C2] ? __pfx_lock_acquire+0x10/0x10 [ 868.282093][ C2] ? lock_acquire+0x1b1/0x560 [ 868.283334][ C2] _raw_spin_lock_irqsave+0x3a/0x60 [ 868.285195][ C2] ? input_inject_event+0xa4/0x370 [ 868.286818][ C2] input_inject_event+0xa4/0x370 [ 868.288682][ C2] kd_sound_helper+0x20f/0x280 [ 868.290098][ C2] ? __pfx_kd_sound_helper+0x10/0x10 [ 868.291581][ C2] input_handler_for_each_handle+0xd4/0x250 [ 868.293629][ C2] call_timer_fn+0x1a0/0x610 [ 868.295239][ C2] ? __pfx_kd_nosound+0x10/0x10 [ 868.297201][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 868.299240][ C2] ? __pfx_lock_release+0x10/0x10 [ 868.301240][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 868.303329][ C2] ? __pfx_kd_nosound+0x10/0x10 [ 868.305051][ C2] ? __pfx_kd_nosound+0x10/0x10 [ 868.306704][ C2] __run_timers+0x74b/0xaf0 [ 868.308278][ C2] ? __pfx___run_timers+0x10/0x10 [ 868.309944][ C2] ? __pfx_lock_acquire+0x10/0x10 [ 868.311744][ C2] run_timer_base+0x111/0x190 [ 868.313564][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 868.315705][ C2] run_timer_softirq+0x1a/0x40 [ 868.317622][ C2] handle_softirqs+0x216/0x8f0 [ 868.319545][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 868.321681][ C2] irq_exit_rcu+0xbb/0x120 [ 868.323083][ C2] sysvec_apic_timer_interrupt+0x95/0xb0 [ 868.324943][ C2] [ 868.325820][ C2] [ 868.326699][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 868.328755][ C2] RIP: 0010:__might_sleep+0x9a/0x170 [ 868.330826][ C2] Code: ea 03 80 3c 02 00 0f 85 ae 00 00 00 49 83 bc 24 68 17 00 00 00 74 09 80 3d 98 5c a1 0e 00 74 14 48 83 c4 10 89 ee 48 89 df 5b <31> d2 5d 41 5c e9 6c f9 ff ff c6 05 7b 5c a1 0e 01 90 65 4c 8b 25 [ 868.337972][ C2] RSP: 0018:ffffc9000739fb70 EFLAGS: 00000282 [ 868.339920][ C2] RAX: 0000000000000003 RBX: ffffffff8b5fdde0 RCX: ffffffff81d1f2b2 [ 868.342639][ C2] RDX: 0000000000000000 RSI: 00000000000000a5 RDI: ffffffff8b5fdde0 [ 868.345612][ C2] RBP: 00000000000000a5 R08: 0000000000000005 R09: 0000000000000000 [ 868.348727][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888027e64880 [ 868.351792][ C2] R13: 00007ff5c77b5000 R14: ffff8880382d88c8 R15: ffff8880382d88b8 [ 868.354642][ C2] ? __might_fault+0x62/0x190 [ 868.355872][ C2] __might_fault+0x83/0x190 [ 868.357072][ C2] elf_load+0x695/0x880 [ 868.358309][ C2] load_elf_binary+0x339e/0x4d90 [ 868.359772][ C2] ? __pfx_load_elf_binary+0x10/0x10 [ 868.361537][ C2] ? _raw_read_unlock+0x28/0x50 [ 868.363360][ C2] ? load_misc_binary+0x730/0xd40 [ 868.365276][ C2] bprm_execve+0x703/0x1960 [ 868.367208][ C2] ? __pfx_bprm_execve+0x10/0x10 [ 868.369155][ C2] ? copy_strings.isra.0+0x3c0/0x450 [ 868.371212][ C2] do_execveat_common.isra.0+0x4f1/0x630 [ 868.373217][ C2] __x64_sys_execve+0x8c/0xb0 [ 868.374815][ C2] do_syscall_64+0xcd/0x250 [ 868.376520][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.379052][ C2] RIP: 0033:0x7ff255f3cef7 [ 868.380919][ C2] Code: Unable to access opcode bytes at 0x7ff255f3cecd. [ 868.383650][ C2] RSP: 002b:00007ff255de6e78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 868.386895][ C2] RAX: ffffffffffffffda RBX: 00007fff400a6c90 RCX: 00007ff255f3cef7 [ 868.389969][ C2] RDX: 000055c8e1fb60e0 RSI: 00007fff400a7180 RDI: 000055c8cd4cfdf6 [ 868.392886][ C2] RBP: 00007ff255de6ff0 R08: 0000000000000000 R09: 0000000000000000 [ 868.395822][ C2] R10: 0000000000000008 R11: 0000000000000246 R12: 00007fff400a6fa8 [ 868.398727][ C2] R13: 00007ff255de6f28 R14: 0000000000000000 R15: 0000000000000041 [ 868.401366][ C2] [ 869.529232][ T13] hsr_slave_0: left promiscuous mode [ 869.612949][ T13] hsr_slave_1: left promiscuous mode [ 869.639582][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.644087][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.652844][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.656338][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.700318][ T13] veth1_macvtap: left promiscuous mode [ 869.703115][ T13] veth0_macvtap: left promiscuous mode [ 869.706050][ T13] veth1_vlan: left promiscuous mode [ 869.708759][ T13] veth0_vlan: left promiscuous mode [ 871.640132][ T13] team0 (unregistering): Port device team_slave_1 removed [ 871.959920][ T13] team0 (unregistering): Port device team_slave_0 removed [ 875.713690][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.845423][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.948120][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.095684][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.283355][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.552230][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.900241][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.033058][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 VM DIAGNOSIS: 21:51:29 Registers: info registers vcpu 0 CPU#0 RAX=0000000001122df4 RBX=0000000000000000 RCX=ffffffff8b16fab9 RDX=ffffed100d4c6fda RSI=ffffffff8bb0fb80 RDI=ffffffff8163bbbc RBP=fffffbfff1b52af8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed100d4c6fd9 R10=ffff88806a637ecb R11=ffff888042702000 R12=0000000000000000 R13=ffffffff8da957c0 R14=ffffffff90144d18 R15=0000000000000000 RIP=ffffffff8b170eaf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c32b022 CR3=0000000057424000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000a07 DR3=0000000000008e26 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b1df181a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b1df1827 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b1df1821 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b1df1835 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b1df18bb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b1df1999 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b1f0a488 00007f50b1f0a480 00007f50b1f0a478 00007f50b1f0a450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b2a6d100 00007f50b1f0a440 00007f50b1f0a458 00007f50b1f0a4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b1f0a498 00007f50b1f0a490 00007f50b1f0a488 00007f50b1f0a480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f007361645f 5f006d6963746567 5f6f7364765f5f00 656d69745f65675f ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f004900414e 41005f444c005242 494c444449005f00 4c00574f4e5f444e ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90006060000 RBX=0000000000000000 RCX=ffff888028810fb0 RDX=000000000000009d RSI=ffffffff8640ebc6 RDI=ffff888028811188 RBP=0000000000000001 RSP=ffffc900008b0b78 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000001 R13=0000000000004e20 R14=ffff888028810fb0 R15=0000000000000001 RIP=ffffffff8640ec03 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0d37c4a6c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020528000 CR3=0000000061e56000 CR4=00350ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff93cf3ce0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee755f181a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee755f1827 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee755f1821 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee755f1835 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee755f18bb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee755f1999 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000320 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a 0000000000000000 0000000000000000 0000000000000320 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f007361645f 5f006d6963746567 5f6f7364765f5f00 656d69745f65675f ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f004900414e 41005f444c005242 494c444449005f00 4c00574f4e5f444e ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85030e45 RDI=ffffffff9a5b4fa0 RBP=ffffffff9a5b4f60 RSP=ffffc900008582a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3038383866666666 R12=0000000000000000 R13=000000000000002b R14=ffffffff85030de0 R15=0000000000000000 RIP=ffffffff85030e6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000563497017008 CR3=0000000031be6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000aaae4000 Opmask01=0000000001100000 Opmask02=000000000fffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ffffffff00 ff00ff00ff00ff00 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2e2e2e2e2e2e2e2e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2e2e2e2e2e2e2e2e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff00ffffff00 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ffffffff00 ff00ff00ff00ff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff00ffffff00 00ff000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 25002f74656e2f73 73616c632f737973 2f002f74656e2f73 79732f636f72702f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c800000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c8dcc6c5cd 000055c8dcc40000 000a000d004e5850 5c535b5413495853 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0bdf70cec6ba290 000055cdbd7549e5 0000000000000181 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000111 0000000000000000 00316e6170772f74 656e2f317968702f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f3654070f0c190e 174011484a6e0614 0c0b3b5c17104e06 12564b6511485f53 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f7f565f7f5f7f5f 1f5f7f5f5f7f5f5f 7f5f7f5d7f5d7f17 1f7f5f775f5b5f57 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7325203a73250036 657361656c2e7325 73252f6463706368 642f62642f726176 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7264646136656920 3220203120366566 656400640a697361 63696e6620690065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2036316136206920 32202031200a2064 656200640a656161 6320646520610020 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85030f00 RDI=ffffffff9a5b4fa0 RBP=ffffffff9a5b4f60 RSP=ffffc90000977958 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=74203a7469647561 R12=0000000000000000 R13=ffffffff9a5b4f60 R14=ffffffff9a5b4fb0 R15=0000000000000107 RIP=ffffffff85030f27 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fffa4d5dea8 CR3=00000000294d0000 CR4=00350ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=358bcb64358bcb64 358bcb64358bcb64 358bcb64358bcb64 358bcb64358bcb64 358bcb64358bcb64 358bcb64358bcb64 358bcb64358bcb64 358bcb64358bcb64 ZMM22=cafd243ecafd243e cafd243ecafd243e cafd243ecafd243e cafd243ecafd243e cafd243ecafd243e cafd243ecafd243e cafd243ecafd243e cafd243ecafd243e ZMM23=464f0ec7464f0ec7 464f0ec7464f0ec7 464f0ec7464f0ec7 464f0ec7464f0ec7 464f0ec7464f0ec7 464f0ec7464f0ec7 464f0ec7464f0ec7 464f0ec7464f0ec7 ZMM24=b018e548b018e548 b018e548b018e548 b018e548b018e548 b018e548b018e548 b018e548b018e548 b018e548b018e548 b018e548b018e548 b018e548b018e548 ZMM25=ed917e8eed917e8e ed917e8eed917e8e ed917e8eed917e8e ed917e8eed917e8e ed917e8eed917e8e ed917e8eed917e8e ed917e8eed917e8e ed917e8eed917e8e ZMM26=2d3148722d314872 2d3148722d314872 2d3148722d314872 2d3148722d314872 2d3148722d314872 2d3148722d314872 2d3148722d314872 2d3148722d314872 ZMM27=ca9850a9ca9850a9 ca9850a9ca9850a9 ca9850a9ca9850a9 ca9850a9ca9850a9 ca9850a9ca9850a9 ca9850a9ca9850a9 ca9850a9ca9850a9 ca9850a9ca9850a9 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=b41a0000b41a0000 b41a0000b41a0000 b41a0000b41a0000 b41a0000b41a0000 b41a0000b41a0000 b41a0000b41a0000 b41a0000b41a0000 b41a0000b41a0000