last executing test programs: 1m1.320180391s ago: executing program 0 (id=192): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003000000020fc0290780000001ce00003000306907800fa000945f4fff600650005010400030a010102ac1414aa011313f4acad4b5b506582c73c6fabcc3b714809433cc009ccb76e1cdaf6459f807be930da0a503afffd42c09b937acbf93da90c4029b6f02b739b761874ee474fc54e9584c1"], 0x0) setfsgid(0xee00) setresgid(0xffffffffffffffff, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2508004500df2700000020fc02907864010105e00003000d00800000000000"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(0xffffffffffffffff, 0x28, 0x2, 0x0, &(0x7f0000000080)) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_opts(r4, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/9, 0x9}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0xfffffffe, @local, 0x3}, 0x1c) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r9 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r9, &(0x7f0000000000)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @link_local}, 0x14) preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/218, 0xda}], 0x1, 0x33, 0x0) setsockopt$inet6_udp_int(r10, 0x11, 0x1, &(0x7f0000000180), 0x4) 1m0.440477066s ago: executing program 0 (id=211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)="42f2d226dfbf55c6ebc9d4ba14698c2ec0416b3cb15f0b947b9e046bd3c42dcc8b", 0x21, r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000640)={0x0, 0xffffffe6, &(0x7f0000000000)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) socket$nl_generic(0x10, 0x3, 0x10) (async) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)="42f2d226dfbf55c6ebc9d4ba14698c2ec0416b3cb15f0b947b9e046bd3c42dcc8b", 0x21, r1) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000640)={0x0, 0xffffffe6, &(0x7f0000000000)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) (async) 1m0.438381417s ago: executing program 0 (id=216): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r1 = accept$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) getsockname$packet(r1, &(0x7f0000000600), &(0x7f0000000640)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000040)={'veth0_to_bridge\x00'}) chdir(&(0x7f00000000c0)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r3, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0x10) syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) write(r3, &(0x7f0000000240)="aa6944b9", 0x4) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/194, 0xc2}], 0x1}, 0x2}], 0x1, 0x0, 0x0) write$char_usb(r3, &(0x7f0000000540)="0fa898caba2f98bcb9c73187dfcc506e45c060257e95c5aedaf38a713c585da54693132af314389fc525a3a66f3397c44889de8d5c2fd8f7f30661de693dd9a6b822f3875a74ef75afc2018cb46048eab40b96aa961490f45c6323f8d1286b0eec176b36dbd39f6a188e8b2e80902ed87e52e47c0060e29b439536b3c82373874930", 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mlock(&(0x7f0000004000/0x1000)=nil, 0x1000) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0xd, 0x0) symlink(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='./file0/file0\x00') r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m0.190725065s ago: executing program 0 (id=219): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x818098, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') futimesat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x818098, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) chdir(&(0x7f00000000c0)='./file0\x00') (async) futimesat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) (async) 1m0.079582236s ago: executing program 0 (id=221): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa}]}, @struct={0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x3d, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x1c, 0x80800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000240)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 59.590524204s ago: executing program 0 (id=223): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000000)=0x599, 0x4) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xf000, 0x100, 0x1ff, 0x6, 0x0, [{0x4, 0xbd, 0x5, '\x00', 0x81}, {0x3, 0x71, 0x5, '\x00', 0xc7}, {0x95, 0xc4, 0x6, '\x00', 0x68}, {0x9, 0xf9, 0x4, '\x00', 0x72}, {0x9, 0xfc, 0x10, '\x00', 0x81}, {0xd, 0x8, 0x3, '\x00', 0x8}, {0x9, 0x20, 0x10, '\x00', 0xed}, {0x0, 0x4, 0x5, '\x00', 0xa1}, {0x3, 0x2, 0x7, '\x00', 0x8}, {0x8, 0xe1, 0x7f, '\x00', 0x8}, {0x1, 0xff, 0x2, '\x00', 0x2}, {0xfa, 0x6, 0x10, '\x00', 0xca}, {0x6, 0xe, 0xc, '\x00', 0x7}, {0x3, 0x5, 0x1, '\x00', 0xf2}, {0x7, 0x7, 0xfa, '\x00', 0x9}, {0xff, 0x8, 0x5, '\x00', 0x8f}, {0x80, 0x9, 0x2, '\x00', 0x8}, {0x6, 0x7, 0x8, '\x00', 0x1}, {0x8, 0x3, 0x9, '\x00', 0x7}, {0x5, 0xd, 0xa2, '\x00', 0x3}, {0x1, 0x0, 0x8, '\x00', 0x2}, {0x2, 0x0, 0x7, '\x00', 0xd}, {0x10, 0xf7, 0x8, '\x00', 0x7f}, {0x5, 0x80, 0x8d, '\x00', 0x8}]}}) (async) syz_clone3(&(0x7f00000003c0)={0x280800000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0, {0x11}, &(0x7f0000000280)=""/245, 0xf5, &(0x7f0000000840)=""/4096, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) ptrace(0x4216, r5) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0xfff, 0x5, 0x0, 0x1, 0xfffffffffffffffe, 0x5, 0x0, 0xbdb], 0x1, 0x14100}) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettaction={0x28, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r11, 0x1, 0x0, 0x80000000, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r10}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f0000000440)={0x5, 0xd}) 59.539824512s ago: executing program 32 (id=223): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000000)=0x599, 0x4) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xf000, 0x100, 0x1ff, 0x6, 0x0, [{0x4, 0xbd, 0x5, '\x00', 0x81}, {0x3, 0x71, 0x5, '\x00', 0xc7}, {0x95, 0xc4, 0x6, '\x00', 0x68}, {0x9, 0xf9, 0x4, '\x00', 0x72}, {0x9, 0xfc, 0x10, '\x00', 0x81}, {0xd, 0x8, 0x3, '\x00', 0x8}, {0x9, 0x20, 0x10, '\x00', 0xed}, {0x0, 0x4, 0x5, '\x00', 0xa1}, {0x3, 0x2, 0x7, '\x00', 0x8}, {0x8, 0xe1, 0x7f, '\x00', 0x8}, {0x1, 0xff, 0x2, '\x00', 0x2}, {0xfa, 0x6, 0x10, '\x00', 0xca}, {0x6, 0xe, 0xc, '\x00', 0x7}, {0x3, 0x5, 0x1, '\x00', 0xf2}, {0x7, 0x7, 0xfa, '\x00', 0x9}, {0xff, 0x8, 0x5, '\x00', 0x8f}, {0x80, 0x9, 0x2, '\x00', 0x8}, {0x6, 0x7, 0x8, '\x00', 0x1}, {0x8, 0x3, 0x9, '\x00', 0x7}, {0x5, 0xd, 0xa2, '\x00', 0x3}, {0x1, 0x0, 0x8, '\x00', 0x2}, {0x2, 0x0, 0x7, '\x00', 0xd}, {0x10, 0xf7, 0x8, '\x00', 0x7f}, {0x5, 0x80, 0x8d, '\x00', 0x8}]}}) (async) syz_clone3(&(0x7f00000003c0)={0x280800000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0, {0x11}, &(0x7f0000000280)=""/245, 0xf5, &(0x7f0000000840)=""/4096, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) ptrace(0x4216, r5) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0xfff, 0x5, 0x0, 0x1, 0xfffffffffffffffe, 0x5, 0x0, 0xbdb], 0x1, 0x14100}) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettaction={0x28, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r11, 0x1, 0x0, 0x80000000, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r10}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f0000000440)={0x5, 0xd}) 34.229758023s ago: executing program 3 (id=118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x100, 0xb4e, &(0x7f0000000040), 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000000603"], 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x84, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2b}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xab57}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x244}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004010}, 0x2200c048) ioctl$KVM_RUN(r3, 0xae80, 0x0) 28.000148951s ago: executing program 3 (id=118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x100, 0xb4e, &(0x7f0000000040), 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000000603"], 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x84, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2b}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xab57}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x244}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004010}, 0x2200c048) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21.681979493s ago: executing program 3 (id=118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x100, 0xb4e, &(0x7f0000000040), 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000000603"], 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x84, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2b}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xab57}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x244}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004010}, 0x2200c048) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17.786028912s ago: executing program 4 (id=689): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 64) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000180), 0x43) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000002440)) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) (async) sendmsg$kcm(r0, &(0x7f0000002400)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @local}, 0x3, 0x1, 0x4, 0x3}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="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", 0xff}, {&(0x7f0000000180)="0f9737bd649bb56af390b61766e8362b196b8fb03b7ebdf0eb76c1c5ab418d87d8754678896d36c56c4fe417aa3fbbdbb4f93b305a99d053bb68c27d1261a3b526cbae366e6864607a561a0d4a00e7e34187f9ff242df4f6c1f0ed", 0x5b}], 0x3, &(0x7f00000013c0)=[{0x1010, 0x10d, 0x7, "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"}], 0x1010}, 0x4) (async) write(r0, &(0x7f0000000000)="2000000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 17.784872988s ago: executing program 4 (id=691): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) 17.717124555s ago: executing program 4 (id=693): syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x2, 0xc84cf8fe4733a687, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) (async) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980900, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000400)={0x980902, 0x4, @value=0x4}) 17.716978401s ago: executing program 4 (id=694): timer_create(0x7, 0x0, &(0x7f0000000280)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}}, &(0x7f0000000300)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, 0x2, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x4000000) 17.640436693s ago: executing program 4 (id=695): prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$afs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x4800, &(0x7f0000000240)={[{@flock_openafs}], [{@measure}, {@fowner_eq={'fowner', 0x3d, r0}}, {@hash}, {@flag='mand'}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, 0x0}) sched_getattr(r2, &(0x7f00000002c0)={0x38}, 0x38, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000140)='binder\x00', 0x800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 17.639267786s ago: executing program 4 (id=696): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200), 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="56c77e3c733d76697274696f2c6e6f077874656e642c6163638173733d11c0792c63616368653d66736361636865"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a9c000000060a0b040000000000000000020000057000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c080003400000001730000180080001006e6174002400028008000740000000000800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a32"], 0xc4}, 0x1, 0x0, 0x0, 0x850}, 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000280)='./file0\x00') r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r2 = socket$caif_stream(0x25, 0x1, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) mount$tmpfs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x10, &(0x7f0000000b80)={[{@gid={'gid', 0x3d, r3}}]}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000a00)={0xa0, 0x0, 0x0, {{0x2, 0xfffffffffffffff7, 0x7fff, 0x2, 0x5a, 0x5, {0x6, 0x1, 0x8000000000000000, 0x7, 0x8, 0xb, 0x4, 0x1, 0x2, 0x6000, 0xffffffff, 0xffffffffffffffff, r3, 0xfc0, 0x8}}, {0x0, 0x1a}}}, 0xa0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000640)={'erspan0\x00', 0x0, 0x10, 0x40, 0x10, 0x2, {{0xa, 0x4, 0x0, 0x2b, 0x28, 0x67, 0x0, 0x7f, 0x29, 0x0, @multicast2, @remote, {[@ssrr={0x89, 0x13, 0xb, [@remote, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x3b1}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000400)='syzkaller\x00', 0x4, 0xed, &(0x7f0000000540)=""/237, 0x40f00, 0x4, '\x00', r4, @fallback=0xd, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0xa, 0x80000001, 0x6}, 0x10, r5, 0xffffffffffffffff, 0xa, &(0x7f0000000740)=[r1, r1, r1], &(0x7f0000000800)=[{0x3, 0x3, 0x8, 0xb}, {0x3, 0x4, 0x7}, {0x0, 0x4, 0x4, 0x4}, {0x0, 0x4, 0x2, 0x3}, {0x5, 0x4, 0xd, 0x7}, {0x0, 0x5, 0x7, 0x3}, {0x0, 0x4, 0x10, 0x8}, {0x0, 0x2, 0x9, 0x5}, {0x0, 0x2, 0x9, 0x1}, {0x4, 0x3, 0xf, 0x7}], 0x10, 0x97, @void, @value}, 0x94) fallocate(r1, 0x0, 0x0, 0x1000f4) r6 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x1000000000000025, &(0x7f0000008640), 0x1000000000000081, 0x0) mmap(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x1000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000100)={r9, 0x55}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000240)={r9, 0x1a4}, &(0x7f00000002c0)=0x8) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 16.799618881s ago: executing program 1 (id=718): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "45542f745866c700", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "faffffffffffffff"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "45542f745866c700", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "faffffffffffffff"}, 0x28) openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(&(0x7f0000000640)='./file0\x00') (async) rmdir(&(0x7f0000000640)='./file0\x00') sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 15.930163448s ago: executing program 1 (id=719): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x8000) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000580)='gfs2\x00', 0x3010003, &(0x7f0000000080)='norecovery') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x28011, r2, 0x0) (async) ftruncate(r2, 0x796c) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) landlock_restrict_self(r1, 0x2) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 15.929262224s ago: executing program 1 (id=720): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000500050002000000050004000100000005000100060000000c00078008000640000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x54}}, 0x0) 15.860431176s ago: executing program 1 (id=721): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000008c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x2, &(0x7f0000000640)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3ff}], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.736996434s ago: executing program 1 (id=722): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r1, 0xedaa7000) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x3}, 0xffffffffffffff37) 15.669817884s ago: executing program 1 (id=724): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000aff0000", @ANYRES32=r3, @ANYBLOB="140002"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newnexthop={0x90, 0x68, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x3, 0x0, 0x1}, [@NHA_ID={0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_OIF={0x8, 0x5, r3}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000001}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1}]}, @NHA_GROUP={0x2c, 0x2, [{0x0, 0x1}, {0x0, 0xd3}, {0x0, 0x3}, {0x2, 0x10}, {0x0, 0x1}]}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_HOOK_TYPE={0x5}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_GROUP_TYPE={0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c044) 15.348663844s ago: executing program 3 (id=118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x100, 0xb4e, &(0x7f0000000040), 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000000603"], 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x84, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2b}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xab57}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x244}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004010}, 0x2200c048) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.527890174s ago: executing program 3 (id=118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x100, 0xb4e, &(0x7f0000000040), 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000000603"], 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x84, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2b}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xab57}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x244}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004010}, 0x2200c048) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.469988333s ago: executing program 33 (id=696): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200), 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="56c77e3c733d76697274696f2c6e6f077874656e642c6163638173733d11c0792c63616368653d66736361636865"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a9c000000060a0b040000000000000000020000057000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c080003400000001730000180080001006e6174002400028008000740000000000800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a32"], 0xc4}, 0x1, 0x0, 0x0, 0x850}, 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000280)='./file0\x00') r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r2 = socket$caif_stream(0x25, 0x1, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) mount$tmpfs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x10, &(0x7f0000000b80)={[{@gid={'gid', 0x3d, r3}}]}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000a00)={0xa0, 0x0, 0x0, {{0x2, 0xfffffffffffffff7, 0x7fff, 0x2, 0x5a, 0x5, {0x6, 0x1, 0x8000000000000000, 0x7, 0x8, 0xb, 0x4, 0x1, 0x2, 0x6000, 0xffffffff, 0xffffffffffffffff, r3, 0xfc0, 0x8}}, {0x0, 0x1a}}}, 0xa0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000640)={'erspan0\x00', 0x0, 0x10, 0x40, 0x10, 0x2, {{0xa, 0x4, 0x0, 0x2b, 0x28, 0x67, 0x0, 0x7f, 0x29, 0x0, @multicast2, @remote, {[@ssrr={0x89, 0x13, 0xb, [@remote, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x3b1}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000400)='syzkaller\x00', 0x4, 0xed, &(0x7f0000000540)=""/237, 0x40f00, 0x4, '\x00', r4, @fallback=0xd, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0xa, 0x80000001, 0x6}, 0x10, r5, 0xffffffffffffffff, 0xa, &(0x7f0000000740)=[r1, r1, r1], &(0x7f0000000800)=[{0x3, 0x3, 0x8, 0xb}, {0x3, 0x4, 0x7}, {0x0, 0x4, 0x4, 0x4}, {0x0, 0x4, 0x2, 0x3}, {0x5, 0x4, 0xd, 0x7}, {0x0, 0x5, 0x7, 0x3}, {0x0, 0x4, 0x10, 0x8}, {0x0, 0x2, 0x9, 0x5}, {0x0, 0x2, 0x9, 0x1}, {0x4, 0x3, 0xf, 0x7}], 0x10, 0x97, @void, @value}, 0x94) fallocate(r1, 0x0, 0x0, 0x1000f4) r6 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x1000000000000025, &(0x7f0000008640), 0x1000000000000081, 0x0) mmap(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x1000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000100)={r9, 0x55}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000240)={r9, 0x1a4}, &(0x7f00000002c0)=0x8) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.190286318s ago: executing program 2 (id=750): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, r2, 0x25, 0x0, @void}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r3, r4}, 0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x4}, @nested={0x8, 0x36, 0x0, 0x1, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}]}, 0x24}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f4"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x4}}}, 0x24}}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 2.100026098s ago: executing program 2 (id=751): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) memfd_secret(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r1, r1, 0x0, 0x30) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000008caa989006d4bfb58973f90a5500"]) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000040)=0x3, 0x4) 2.099773068s ago: executing program 2 (id=752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a321f0000000900010073797a3000000000080005400000001f0800033472ab67043c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xc8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.019953528s ago: executing program 2 (id=753): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000600), &(0x7f0000001380)=@udp=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800}}], 0x1, 0x4044844) r3 = syz_open_dev$video(&(0x7f00000005c0), 0x20000000005, 0x8140) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001640), 0xb4, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000018000109000000000000000002180000fe0000080000000008000100ac1414"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@link_local, @random="82cdf99ffe4a", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000040)={0x0, 0x34324142, 0x1, 0x9, 0x1, @discrete={0x9, 0x8001}}) 2.019798485s ago: executing program 3 (id=118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x100, 0xb4e, &(0x7f0000000040), 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000000603"], 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x84, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2b}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xab57}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x244}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004010}, 0x2200c048) ioctl$KVM_RUN(r3, 0xae80, 0x0) 860.63102ms ago: executing program 5 (id=748): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) fcntl$lock(r0, 0x5, &(0x7f00000031c0)={0x1, 0x1, 0x0, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCL_SETSEL(r2, 0x5452, &(0x7f0000000100)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x28d) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={0x3c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0x5555555555550001}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r6, &(0x7f0000001e80)=@file={0x1, './file0\x00'}, 0x6e) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4f468e8665bbdf67) fcntl$lock(r5, 0x26, &(0x7f00000000c0)={0x0, 0x0, 0x7fffffff, 0xa}) 857.593168ms ago: executing program 2 (id=754): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r2 = dup(r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x88, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x52}}}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x9}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x8}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xe4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xd}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8b9}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x3bd3}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x22, 0x24, [{0xc, 0x1}, {0x3}, {0xc, 0x1}, {0x36}, {0x60, 0x1}, {0x6, 0x1}, {0x36, 0x1}, {0x36}, {0x12, 0x1}, {0x9, 0x1}, {0x28, 0x1}, {0x3}, {0x9, 0x1}, {0x60, 0x1}, {0x6, 0x1}, {0x30}, {0x24, 0x1}, {0x6}, {0x1}, {0x12, 0x1}, {0x36}, {0x1b}, {0xb, 0x1}, {0x12}, {0x2, 0x1}, {0x6c}, {0x9, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8080}, 0x20000004) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x8282dd81d01d9994}, 0x404c0a5) recvmmsg$unix(r5, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}}], 0x1, 0x10241, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x25dfdbfb, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r7}]}, 0x28}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000001680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xda, @empty, 0x3791fe2c}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000380)="b654f86db261d91047993bb93df178c91b95591c13c2cc05a9a2150f28b571512976b15b6e28ada276839546498d9872b1ad76eb8918cfd4a5eceb38837c7c13e0b8a0eb75208011f9c6462d970dbcb1761d7f28137caa7598bd212d6adc221ddb8f8f8c560f53ba1855d2a80ba7aeb5612432e898b27ab8f25ba8f32ad6d469710622f621c640e7304044eef56563036ae0c5f4d95b5b62e60eb5a27c", 0x9d}, {&(0x7f0000000440)="5b359abc853e7387841df0ec052a08e47c0e308d7bb6fe060c7c8db213a9be0a1fc02e4eb72d8d09c2cd425a6f0b5707094b9468233f536cb192a8f30997bcc913fad895e18bb378fe6382931e0ed4d9dc38bd93b226687d6329fc34f41eaa9a693fc1f3217d54a26cc4f5c38c07bffea586597ab3265815d20b7e3b0b1d9142b8f597b13e92e7fcfdc564853e013fb9a50255b738818aaf14a849a1fd7d355b700a7fa64d40453fdc2130fde0f9dadd05206f02de335aceb39568bf4567993993070dda170a982c", 0xc8}], 0x2, &(0x7f0000000740)=[@hoplimit={{0x14, 0x29, 0x34, 0x2}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x3a, 0x5, '\x00', [@ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0x9, [0x2]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0xa0, 0x29, 0x37, {0x3a, 0x10, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x10, {0x1, 0x2, 0xbc, 0xfe9, [0x0]}}, @jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7cb5]}}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0xa5, 0x45, "bdf41fe35905ae510810bcffcbf78495bbf9c2875657a7fab960f78dfa1ba395a481a185b04399560120b4820fb8c18f72b1207b71bafc2915413e8acf4eff42b5dbfb41dc"}]}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x6c, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0xb}, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0x8, [0x2, 0x100, 0x0, 0x3]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r7}}}], 0x170}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)}], 0x1, &(0x7f00000008c0)=[@rthdr={{0x88, 0x29, 0x39, {0x3b, 0xe, 0x2, 0x26, 0x0, [@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @local, @mcast2, @private1={0xfc, 0x1, '\x00', 0x7}]}}}, @dstopts_2292={{0xa8, 0x29, 0x4, {0x33, 0x11, '\x00', [@generic={0x1, 0x2e, "940dcaf8a8553b42f0ca07f1da2e9950d4f59dfac362b3410191ecbba3aa3ef892806e7fe8e9d4838060f13f1d5d"}, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x4}, @jumbo, @jumbo={0xc2, 0x4, 0xf394}, @ra={0x5, 0x2, 0x40}, @jumbo={0xc2, 0x4, 0x6}, @pad1, @generic={0x0, 0x2b, "971d464b1ff6fc885aa683a1f4fbc5585e6fddc7b9615ef7549e0e92c34efae3389ba9579933fb672f2c50"}, @pad1]}}}, @dstopts={{0xb0, 0x29, 0x37, {0x2c, 0x12, '\x00', [@ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0x2}, @pad1, @enc_lim, @calipso={0x7, 0x50, {0x0, 0x12, 0x45, 0x10, [0x2, 0x2, 0x81, 0x7fff, 0x100, 0x4, 0xb, 0xf, 0x5a]}}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x33, 0x2, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x5, 0x9}}, @pad1, @enc_lim={0x4, 0x1, 0x8}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x18000000}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x5c, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x847}, @pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0x3, 0x401, [0x5, 0x5, 0xf, 0x9c]}}, @ra={0x5, 0x2, 0x7ff}, @ra, @ra={0x5, 0x2, 0x81}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}}]}}}], 0x2a8}}, {{&(0x7f00000006c0)={0xa, 0x4e21, 0x7, @mcast2, 0x34}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000b80)="d1b0f84db0252083ae254ec60f66c5ae4bdbe54167d06076027942df7e675f2546a19caccb41ef5c9c63b8a0daa0d66e4e1dd4745d21420ee79075146e84c08727e1b82b916b21f63aa56bc6a128e6fbb57e9d267f4048437789eeda1e071c7ce8", 0x61}, {&(0x7f0000000c00)}], 0x2, &(0x7f0000000c80)=[@dontfrag={{0x14}}, @dstopts_2292={{0x268, 0x29, 0x4, {0x1, 0x49, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x5, 0x91, "069eb1c28e618759e1026c62b36b7d1242d994569a92208ea0962fa957cb873ef19dcf573d73f6cd2327705e28c6040953abea66075689e57862dc774ebcd401c2dacfdc11548f87f578b2d3c598a67bf7207d17da17fcde7532b20fd4935f717f2e3b04340014aa37418f9c22d15e0d5d0d47b1ffa6a1b0f649b1af599e5e72db9bc6363f3bad9af9f39c853196d91a2b"}, @generic={0x8, 0x6c, "84f56c67f72b328526f046692231605ecce8d0a8fce3d37a2db783b67e63662ca0e6b13a724b64299ab9a7e9c72c0d911caa3d13e06f145b356f3955eb9470cb8b61468345b353e44f81a2fc3ae0a32babdcc0c8a18167a36a396fc2e8b330efc73d1572b8fa78d28b1c46ea"}, @hao={0xc9, 0x10, @private2}, @generic={0x6, 0xe5, "df75bc4a8ae396183ae373bab74f802eb401573ed8d16ca372111572dd6ef0d30dfc53fa749deaede99fc8aaa15c9fa53e73b55f78b7f96463024438d228c49a8a1455865348c84b89c2fd934ba4fc8cfedec3663eed68d75394d71a6017b9b59d80442b1510188f053544560277640896c2f4f7d7e576481b37259f7c0d35949d16aad78ba01de195514207c808c94c28d51014f0445e40ec63048478257304e5bf15bd870ac670872142b0f653f8426daab8a7a8fbb80130e8cd65dd6c6b8d2807744763858c9f9cbfd6c1bc071f31a39bba914e3a86944a541a19939b5d873da2b003a2"}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @remote}]}}}], 0x280}}, {{&(0x7f0000000f00)={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000000f40)="0b5ab66dce1d5534429f824f5b5a7e911931efc647c03c9cabe235f13afca358fbd210ee71b2a80dcbb5c35bf170f569a1f6fa61894cf36c17c1e806b4455dcc9b92e9e5371d1a9e74f31096b9ef154532a7729d8baf83c0a7b5893dd61d9959e12ebd0acdeeee0f24d16f25a24b4ade11f57c8d62c41c928f5daa5138c45d8d71c01fa21fc52b9e08c224c4d7bdb26b923f88ad2688ae1d01a559a9db247ee42f8a62f5f999f364f46a57019916740c84939c1ca8192821fb11cc951b66bac7efb85932ab9dbd41073e86bba17ebf7cd94109d9047fb99e007ceb", 0xdb}, {&(0x7f0000001040)="e67c99167f4c67596fd5e09506fd9e121977bd3408e8c302476cbd9506bd96c6b6bfb9622c7df71d6d813c6c3e8748cdb632c05bdb586908fdf85fed7b4218fcdbe634846b5e8930746c8c721f4b63f3f71b2b", 0x53}, {&(0x7f00000010c0)="d83f09c17f660b94f2e018f2261c471b4669c2afb7a1a47f1fef28d18753e16914ec1f71dd4cc47c3a2b012bb80f16627198abd6bb1b53742bc0bd6104828b5cb00c61a36e9d88688a054e8e16e41d4027ecd97119e2a6", 0x57}, {&(0x7f0000001140)="865a20bd651c2f1ea3ef0547b08c9b2b528a85f2574163c308f34816b57238e159c23b3201c7fe8f5ce85bcc50ce4ab44d9aab00a1d1b1452fd3f986b1ea77b1b8fdcfb8c0237fd473ce55f883e5fc8de2c30052667dddea3fcf5c8787b1e3de74292d8f69778fd504277d8891beffcefbe7dc9aa17376eb0abbb4211a935d32858d8176694caf9bb927138ba7c51b9222d14b53f639e0a7aaaefc019cd245c01cc5adfd35456af8e3698cd8d5c0197686916a6c602a72376b821dffe9f1db9e3e45", 0xc2}], 0x4, &(0x7f0000001280)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0x95f}}, @rthdrdstopts={{0x158, 0x29, 0x37, {0x16, 0x27, '\x00', [@pad1, @generic={0x2, 0xbc, "1a5ca7d65d23ad3556b9f00c8d70ce18b8341570fd0f58192c5931f87ad8806fef841145a78d1b59f13301e95bb8fa8f22ed09a29d3949bd18e216de697cb1718531f890e2f1e684afa9d2538c90d23b3bf1f83dcfb5ec9f80b9cbf2f21994935f90278e0396ced8bf30a4d7eaaed43e2abeee5ae0e8ab737c9079bc5aa3aef8740389ff8d058c074174b63163d661c2a4b38f8563118239f892d48a2ad473db7f7a78b7498d9e0d05cc81b636f917fa7545dba915ea6ddcc1669946"}, @generic={0x4, 0x55, "2cfab99946aa2ae774f3252c3cb6db2c4a9c9ed9cdc4ff93d574d232ee44c67255232cb9a4291724bc7fb8925ef7a7dce9b69861d91610cc7faefb37308a8f07952ab88563804f8ca2b41cb29ff19ec7065f8e971a"}, @pad1, @pad1, @pad1, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x9db0}, @hao={0xc9, 0x10, @mcast1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @dontfrag={{0x14}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0xc, 0x7, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x37d, [0x3, 0x4, 0x38f, 0x9, 0x46]}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}]}}}, @dstopts={{0x38, 0x29, 0x37, {0x11, 0x3, '\x00', [@ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x18, {0x2, 0x4, 0x4, 0x0, [0x528, 0x3]}}]}}}], 0x270}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001500)="0e867f1c4a688fbd71068c7e6c2ee8b115ca2d06fe28ea5e3b32b9e97e43d6269e0f", 0x22}, {&(0x7f0000001540)="09e4f868a232b29957d19a56694645a4d971a2014b4c9051d442cd1acbde68e6cb0e3675584a32b719b23e1fdf6e102999525189eca1b7919a401d087cde854175d162335f82eb5ee87438784cefd30d71587200a7999f9955e707f954b09f4ede80a89a38987b56a18899362202cb4720e3ebf25808f80502061515f853357efa21aabacbfa01c56ad1519939d16ba57eafb0f37630d78ab84d650668542d7a6446f542e83e15bd0cfc6757a8bb8a55f5d0496273f38c32cf6e3c581c688ac144d3bda47c8fa2aa830af87a6a77f73dbd48d4", 0xd3}], 0x2}}], 0x5, 0x24004054) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1700000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) 740.032026ms ago: executing program 2 (id=755): mkdir(&(0x7f0000001c00)='./file0\x00', 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f1, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4100}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}]}, 0x2c}}, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0xa000, 0x124) mkdirat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x145) r6 = fanotify_init(0xf00, 0x0) r7 = open$dir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x90000, 0x101) fanotify_mark(r6, 0x1, 0x5000003a, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x37) mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r8 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000001c0), 0x90000, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) readv(r6, &(0x7f00000000c0)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@migrate={0xa8, 0x21, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@empty}, 0x0, 0x4f000e9ca1872fb5}, [@XFRMA_IF_ID={0x8}, @migrate={0x50, 0x11, [{@in6=@dev, @in=@private, @in6=@mcast1, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa8}}, 0x0) renameat2(r9, &(0x7f0000000100)='./file0\x00', r9, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x8) landlock_create_ruleset(&(0x7f0000000080)={0x39abbf9fd2bbf7e3, 0x2, 0x3}, 0x18, 0x5) 734.682046ms ago: executing program 5 (id=756): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$dsp(r1, &(0x7f0000003200)=""/4105, 0x1009) write$dsp(r0, &(0x7f0000002200)="44e2", 0x2) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x8}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) read$dsp(r1, &(0x7f0000003200)=""/4105, 0x1009) (async) write$dsp(r0, &(0x7f0000002200)="44e2", 0x2) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x8}}, 0x0) (async) 109.7034ms ago: executing program 5 (id=757): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) 109.172496ms ago: executing program 34 (id=724): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000aff0000", @ANYRES32=r3, @ANYBLOB="140002"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newnexthop={0x90, 0x68, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x3, 0x0, 0x1}, [@NHA_ID={0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_OIF={0x8, 0x5, r3}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000001}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1}]}, @NHA_GROUP={0x2c, 0x2, [{0x0, 0x1}, {0x0, 0xd3}, {0x0, 0x3}, {0x2, 0x10}, {0x0, 0x1}]}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_HOOK_TYPE={0x5}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_GROUP_TYPE={0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c044) 0s ago: executing program 5 (id=759): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @multicast2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004044}, 0x48044) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x2000, 0x0) getdents64(r4, &(0x7f00000032c0)=""/50, 0x32) getdents64(r4, 0xfffffffffffffffe, 0x29) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) kernel console output (not intermixed with test programs): ntered disabled state [ 82.142811][ T6706] usb 6-1: USB disconnect, device number 5 [ 82.148815][ T7245] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 82.237235][ T106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.241462][ T106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.245243][ T106] bond0 (unregistering): Released all slaves [ 82.290437][ T7248] program syz.4.353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.341095][ T7249] program syz.4.353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.541087][ T106] hsr_slave_0: left promiscuous mode [ 82.543576][ T106] hsr_slave_1: left promiscuous mode [ 82.546594][ T106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.549172][ T106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.552163][ T106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.554579][ T106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.556471][ T7258] netlink: 'syz.4.356': attribute type 10 has an invalid length. [ 82.573535][ T106] veth1_macvtap: left promiscuous mode [ 82.575417][ T106] veth0_macvtap: left promiscuous mode [ 82.577232][ T106] veth1_vlan: left promiscuous mode [ 82.578931][ T106] veth0_vlan: left promiscuous mode [ 82.656510][ T67] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.656572][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.658462][ T5286] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.724547][ T5286] Bluetooth: hci0: command tx timeout [ 83.113756][ T106] team0 (unregistering): Port device team_slave_1 removed [ 83.169928][ T106] team0 (unregistering): Port device team_slave_0 removed [ 83.244926][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 83.396227][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.400499][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 83.405393][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 83.409495][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.415117][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.418712][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.422480][ T10] usb 6-1: config 0 descriptor?? [ 83.609172][ T7258] veth1_macvtap: left promiscuous mode [ 83.667986][ T7195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.670949][ T7195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.677177][ T7195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.679075][ T7195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.751111][ T7195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.765662][ T7195] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.770589][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.772862][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.786609][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.788926][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.790188][ T7285] netlink: 'syz.2.363': attribute type 27 has an invalid length. [ 83.840818][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 83.843001][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 83.845713][ T7285] bridge0: port 3(veth0_to_bridge) entered disabled state [ 83.846385][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.849628][ T10] usb 6-1: USB disconnect, device number 6 [ 83.850510][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.903841][ T7285] batadv_slave_0: left promiscuous mode [ 83.907978][ T7285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.950756][ T7285] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.953565][ T7285] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.957774][ T7285] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.960480][ T7285] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.965973][ T7285] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 83.987831][ T7285] vlan2: left promiscuous mode [ 83.989435][ T7285] vlan2: left allmulticast mode [ 83.990978][ T7285] hsr_slave_1: left allmulticast mode [ 84.007448][ T7284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.010288][ T7284] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.014105][ T7284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.064935][ T7298] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 84.068175][ T7195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.199508][ T7195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.208714][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 84.208725][ T40] audit: type=1400 audit(1748301009.939:562): avc: denied { call } for pid=7314 comm="syz.4.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 84.208867][ T7315] binder_alloc: 7314: binder_alloc_buf, no vma [ 84.220296][ T7195] veth0_vlan: entered promiscuous mode [ 84.226667][ T7195] veth1_vlan: entered promiscuous mode [ 84.242792][ T7195] veth0_macvtap: entered promiscuous mode [ 84.248237][ T7195] veth1_macvtap: entered promiscuous mode [ 84.262287][ T7195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.269635][ T7195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.275873][ T7195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.278936][ T7195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.281993][ T7195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.285096][ T7195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.323685][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.327365][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.342667][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.349584][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.349726][ T40] audit: type=1400 audit(1748301010.079:563): avc: denied { write } for pid=7321 comm="syz.4.372" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.357659][ T7323] program syz.4.372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.368694][ T40] audit: type=1400 audit(1748301010.099:564): avc: denied { mounton } for pid=7195 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 84.384298][ T7322] __nla_validate_parse: 4 callbacks suppressed [ 84.384310][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.372'. [ 84.401877][ T7322] netlink: 52 bytes leftover after parsing attributes in process `syz.4.372'. [ 84.406589][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.372'. [ 84.410688][ T7322] tipc: MTU too low for tipc bearer [ 84.423334][ T40] audit: type=1400 audit(1748301010.149:565): avc: denied { create } for pid=7327 comm="syz.1.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 84.435704][ T40] audit: type=1400 audit(1748301010.159:566): avc: denied { getopt } for pid=7327 comm="syz.1.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 84.597624][ T40] audit: type=1400 audit(1748301010.329:567): avc: denied { read write } for pid=7341 comm="syz.1.378" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 84.601229][ T5974] hid (null): usage index exceeded [ 84.605168][ T40] audit: type=1400 audit(1748301010.329:568): avc: denied { open } for pid=7341 comm="syz.1.378" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 84.613914][ T5974] hid-generic 00CD:0073:7FFFFFFF.0004: unknown main item tag 0x0 [ 84.613950][ T5974] hid-generic 00CD:0073:7FFFFFFF.0004: ignoring exceeding usage max [ 84.614499][ T5974] hid-generic 00CD:0073:7FFFFFFF.0004: usage index exceeded [ 84.621267][ T5974] hid-generic 00CD:0073:7FFFFFFF.0004: item 0 0 2 0 parsing failed [ 84.623970][ T5974] hid-generic 00CD:0073:7FFFFFFF.0004: probe with driver hid-generic failed with error -22 [ 84.691299][ T7346] trusted_key: syz.1.379 sent an empty control message without MSG_MORE. [ 84.722077][ T7354] @: renamed from vlan0 (while UP) [ 84.722147][ T40] audit: type=1400 audit(1748301010.449:569): avc: denied { ioctl } for pid=7353 comm="syz.1.380" path="socket:[23578]" dev="sockfs" ino=23578 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.887720][ T7359] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=7359 comm=syz.1.382 [ 84.892444][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 84.898767][ T7359] gtp0: entered promiscuous mode [ 84.900486][ T7359] gtp0: entered allmulticast mode [ 84.971996][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 84.976437][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 84.982250][ T7361] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.985064][ T7361] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.987826][ T7361] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.990511][ T7361] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.993989][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 84.997972][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 85.032517][ T7363] netlink: 32 bytes leftover after parsing attributes in process `syz.2.384'. [ 85.411126][ T40] audit: type=1400 audit(1748301011.139:570): avc: denied { read } for pid=7365 comm="syz.4.385" path="socket:[20893]" dev="sockfs" ino=20893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.507004][ T7371] loop2: detected capacity change from 0 to 8 [ 85.512952][ T5937] Dev loop2: unable to read RDB block 8 [ 85.515616][ T5937] loop2: unable to read partition table [ 85.518171][ T5937] loop2: partition table beyond EOD, truncated [ 85.527429][ T7371] Dev loop2: unable to read RDB block 8 [ 85.529779][ T7371] loop2: unable to read partition table [ 85.532018][ T7371] loop2: partition table beyond EOD, truncated [ 85.534949][ T7371] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 85.539453][ T7371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.386'. [ 85.545125][ T7371] capability: warning: `syz.4.386' uses deprecated v2 capabilities in a way that may be insecure [ 85.549305][ T7371] netlink: 'syz.4.386': attribute type 2 has an invalid length. [ 85.552625][ T7371] netlink: 'syz.4.386': attribute type 2 has an invalid length. [ 85.555191][ T7371] netlink: 'syz.4.386': attribute type 2 has an invalid length. [ 85.557696][ T7371] netlink: 'syz.4.386': attribute type 2 has an invalid length. [ 85.560667][ T7371] netlink: 'syz.4.386': attribute type 2 has an invalid length. [ 85.563428][ T7371] netlink: 'syz.4.386': attribute type 2 has an invalid length. [ 85.566331][ T7371] netlink: 'syz.4.386': attribute type 1 has an invalid length. [ 85.569361][ T7371] netlink: 'syz.4.386': attribute type 1 has an invalid length. [ 85.614266][ T5286] block nbd1: Receive control failed (result -32) [ 85.618593][ T7358] block nbd1: shutting down sockets [ 85.813939][ T7376] kvm: kvm [7375]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 85.828565][ T40] audit: type=1400 audit(1748301011.559:571): avc: denied { read append } for pid=7375 comm="syz.4.388" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.368800][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.957627][ T7414] Driver unsupported XDP return value 0 on prog (id 122) dev N/A, expect packet loss! [ 87.019565][ T7420] input: syz1 as /devices/virtual/input/input10 [ 87.052263][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.058198][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.062432][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.067672][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.071857][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.106312][ T7405] block nbd1: shutting down sockets [ 87.202441][ T7421] chnl_net:caif_netlink_parms(): no params data found [ 87.255526][ T7437] block nbd0: server does not support multiple connections per device. [ 87.259541][ T7437] block nbd0: shutting down sockets [ 87.315120][ T7421] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.318110][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.321315][ T7421] bridge_slave_0: entered allmulticast mode [ 87.326345][ T7421] bridge_slave_0: entered promiscuous mode [ 87.329903][ T7421] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.332252][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.336329][ T7421] bridge_slave_1: entered allmulticast mode [ 87.339005][ T7421] bridge_slave_1: entered promiscuous mode [ 87.347306][ T7445] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 87.396755][ T7421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.401384][ T7421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.459616][ T7421] team0: Port device team_slave_0 added [ 87.462979][ T7421] team0: Port device team_slave_1 added [ 87.497745][ T7421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.499949][ T7421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.508110][ T7421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.512441][ T7421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.514870][ T7421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.522811][ T7421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.561887][ T7421] hsr_slave_0: entered promiscuous mode [ 87.564206][ T7421] hsr_slave_1: entered promiscuous mode [ 87.655309][ T7460] overlayfs: failed to resolve './file1': -2 [ 87.721510][ T7462] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 87.725768][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 87.808688][ T7473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=69 sclass=netlink_route_socket pid=7473 comm=syz.1.419 [ 87.847767][ T7474] xt_hashlimit: invalid interval [ 87.854753][ T10] usb 7-1: device descriptor read/64, error -71 [ 87.943257][ T7482] netlink: 'syz.4.423': attribute type 1 has an invalid length. [ 87.951744][ T7482] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.989814][ T7488] gfs2: Unknown parameter 'norecoverys' [ 88.035707][ T7492] overlay: filesystem on ./bus not supported as upperdir [ 88.104546][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 88.137871][ T7504] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 88.179945][ T7509] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 88.183496][ T7509] ALSA: mixer_oss: invalid OSS volume '' [ 88.195016][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.236548][ T10] usb 7-1: device descriptor read/64, error -71 [ 88.267595][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.292101][ T7516] vlan0: entered promiscuous mode [ 88.294222][ T7516] veth1_virt_wifi: entered promiscuous mode [ 88.323533][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.344720][ T10] usb usb7-port1: attempt power cycle [ 88.382838][ T5286] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 88.418522][ T7523] syz.4.438: attempt to access beyond end of device [ 88.418522][ T7523] loop4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 88.422615][ T7523] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32 [ 88.450055][ T46] bridge_slave_1: left allmulticast mode [ 88.452083][ T46] bridge_slave_1: left promiscuous mode [ 88.453973][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.459896][ T46] bridge_slave_0: left allmulticast mode [ 88.461733][ T46] bridge_slave_0: left promiscuous mode [ 88.463658][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.560731][ T7536] process 'syz.1.442' launched '/dev/fd/4' with NULL argv: empty string added [ 88.585578][ T7538] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 88.694521][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 88.701501][ T7546] QAT: failed to copy from user cfg_data. [ 88.709050][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.713226][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.714897][ T10] usb 7-1: device descriptor read/8, error -71 [ 88.718730][ T46] bond0 (unregistering): Released all slaves [ 88.964631][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 88.995081][ T10] usb 7-1: device descriptor read/8, error -71 [ 89.049993][ T7556] validate_nla: 3 callbacks suppressed [ 89.050030][ T7556] netlink: 'syz.4.449': attribute type 2 has an invalid length. [ 89.095258][ T46] hsr_slave_0: left promiscuous mode [ 89.098101][ T46] hsr_slave_1: left promiscuous mode [ 89.100097][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.102395][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.105343][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.107731][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.114783][ T10] usb usb7-port1: unable to enumerate USB device [ 89.134698][ T46] veth1_macvtap: left promiscuous mode [ 89.135376][ T7552] mmap: syz.4.449 (7552): VmData 25972736 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 89.136041][ T5286] Bluetooth: hci0: command tx timeout [ 89.136441][ T46] veth0_macvtap: left promiscuous mode [ 89.144686][ T46] veth1_vlan: left promiscuous mode [ 89.146411][ T46] veth0_vlan: left promiscuous mode [ 89.197579][ T5286] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15 [ 89.201069][ T5286] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 89.679214][ T46] team0 (unregistering): Port device team_slave_1 removed [ 89.738415][ T46] team0 (unregistering): Port device team_slave_0 removed [ 90.204551][ T7421] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.210775][ T7421] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.219126][ T7421] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.226924][ T7421] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.265586][ T7421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.280095][ T7421] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.287162][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.289544][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.296234][ T1191] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.299129][ T1191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.384526][ T7603] syzkaller1: entered promiscuous mode [ 90.386299][ T7603] syzkaller1: entered allmulticast mode [ 90.391672][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 90.391686][ T40] audit: type=1400 audit(1748301016.119:595): avc: denied { write } for pid=7601 comm="syz.4.462" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.456595][ T7421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.478581][ T7421] veth0_vlan: entered promiscuous mode [ 90.481730][ T7608] __nla_validate_parse: 10 callbacks suppressed [ 90.481740][ T7608] netlink: 700 bytes leftover after parsing attributes in process `syz.1.463'. [ 90.483581][ T7421] veth1_vlan: entered promiscuous mode [ 90.509987][ T7421] veth0_macvtap: entered promiscuous mode [ 90.516861][ T7421] veth1_macvtap: entered promiscuous mode [ 90.520093][ T7610] syzkaller1: entered promiscuous mode [ 90.521840][ T7610] syzkaller1: entered allmulticast mode [ 90.531629][ T7612] ntfs3(sr0): try to read out of volume at offset 0x0 [ 90.533968][ T7421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.567535][ T7421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.573138][ T7421] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.577188][ T7421] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.579943][ T7421] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.582627][ T7421] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.588863][ T7618] SELinux: Context #! ./file1 [ 90.588863][ T7618] is not valid (left unmapped). [ 90.638389][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.643011][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.657097][ T7620] netlink: 36 bytes leftover after parsing attributes in process `syz.2.468'. [ 90.660220][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.665369][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.773775][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'. [ 90.779262][ T7633] netlink: 'syz.1.473': attribute type 4 has an invalid length. [ 90.796846][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.843982][ T40] audit: type=1400 audit(1748301016.569:596): avc: denied { accept } for pid=7641 comm="syz.1.475" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.864570][ T40] audit: type=1400 audit(1748301016.569:597): avc: denied { accept } for pid=7641 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 90.902482][ T7649] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 91.003151][ T7655] binder: Unknown parameter 'm0000000000003' [ 91.003349][ T7656] binder: Unknown parameter 'm0000000000003' [ 91.008896][ T40] audit: type=1400 audit(1748301016.739:598): avc: denied { listen } for pid=7654 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.016941][ T40] audit: type=1400 audit(1748301016.739:599): avc: denied { accept } for pid=7654 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.106081][ T40] audit: type=1400 audit(1748301016.839:600): avc: denied { setopt } for pid=7659 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 91.286074][ T7693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=7693 comm=syz.2.489 [ 91.316618][ T40] audit: type=1400 audit(1748301017.049:601): avc: denied { map } for pid=7694 comm="syz.2.490" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 91.323987][ T40] audit: type=1400 audit(1748301017.049:602): avc: denied { execute } for pid=7694 comm="syz.2.490" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 91.476435][ T40] audit: type=1400 audit(1748301017.209:603): avc: denied { wake_alarm } for pid=7698 comm="syz.2.491" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.484492][ T5975] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 91.488101][ T40] audit: type=1400 audit(1748301017.219:604): avc: denied { ioctl } for pid=7698 comm="syz.2.491" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 91.674541][ T5975] usb 6-1: Using ep0 maxpacket: 16 [ 91.684246][ T5975] usb 6-1: config 14 has an invalid interface number: 45 but max is 3 [ 91.687238][ T5975] usb 6-1: config 14 has an invalid interface number: 15 but max is 3 [ 91.689857][ T5975] usb 6-1: config 14 has an invalid interface number: 167 but max is 3 [ 91.692515][ T5975] usb 6-1: config 14 has an invalid interface number: 208 but max is 3 [ 91.695519][ T5975] usb 6-1: config 14 has an invalid interface number: 200 but max is 3 [ 91.698122][ T5975] usb 6-1: config 14 has 5 interfaces, different from the descriptor's value: 4 [ 91.701054][ T5975] usb 6-1: config 14 has no interface number 0 [ 91.703064][ T5975] usb 6-1: config 14 has no interface number 1 [ 91.705658][ T5975] usb 6-1: config 14 has no interface number 2 [ 91.707733][ T5975] usb 6-1: config 14 has no interface number 3 [ 91.709713][ T5975] usb 6-1: config 14 has no interface number 4 [ 91.712038][ T5975] usb 6-1: config 14 interface 45 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 91.715327][ T7715] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 91.716658][ T5975] usb 6-1: config 14 interface 45 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 91.719558][ T7712] ipt_ECN: cannot use operation on non-tcp rule [ 91.720961][ T5975] usb 6-1: config 14 interface 45 altsetting 0 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 91.722210][ T7715] cramfs: wrong magic [ 91.724199][ T7712] netlink: 'syz.2.497': attribute type 58 has an invalid length. [ 91.727378][ T5975] usb 6-1: config 14 interface 45 altsetting 0 endpoint 0x85 has an invalid bInterval 202, changing to 11 [ 91.729089][ T7712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.497'. [ 91.731115][ T5975] usb 6-1: config 14 interface 45 altsetting 0 endpoint 0x85 has invalid maxpacket 9131, setting to 1024 [ 91.731133][ T5975] usb 6-1: config 14 interface 45 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 91.731145][ T5975] usb 6-1: config 14 interface 45 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 91.731157][ T5975] usb 6-1: config 14 interface 45 altsetting 0 bulk endpoint 0xF has invalid maxpacket 32 [ 91.731170][ T5975] usb 6-1: config 14 interface 45 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 91.755139][ T5975] usb 6-1: config 14 interface 15 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 91.758500][ T5975] usb 6-1: config 14 interface 15 altsetting 2 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 91.763047][ T5975] usb 6-1: config 14 interface 15 altsetting 2 bulk endpoint 0xC has invalid maxpacket 8 [ 91.766153][ T5975] usb 6-1: config 14 interface 15 altsetting 2 endpoint 0x8 has invalid wMaxPacketSize 0 [ 91.769158][ T5975] usb 6-1: config 14 interface 15 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 91.773071][ T5975] usb 6-1: config 14 interface 167 altsetting 5 endpoint 0xE has invalid maxpacket 2047, setting to 64 [ 91.777639][ T5975] usb 6-1: config 14 interface 167 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 91.782000][ T5975] usb 6-1: config 14 interface 167 altsetting 5 has an endpoint descriptor with address 0x6E, changing to 0xE [ 91.786342][ T5975] usb 6-1: config 14 interface 167 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 91.790124][ T5975] usb 6-1: config 14 interface 167 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 91.794787][ T5975] usb 6-1: config 14 interface 167 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 91.799259][ T5975] usb 6-1: config 14 interface 167 altsetting 5 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 91.803899][ T5975] usb 6-1: config 14 interface 167 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 91.808574][ T5975] usb 6-1: config 14 interface 167 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 9 [ 91.813944][ T5975] usb 6-1: too many endpoints for config 14 interface 208 altsetting 35: 220, using maximum allowed: 30 [ 91.818608][ T5975] usb 6-1: config 14 interface 208 altsetting 35 has a duplicate endpoint with address 0x6, skipping [ 91.823071][ T5975] usb 6-1: config 14 interface 208 altsetting 35 has an invalid descriptor for endpoint zero, skipping [ 91.827652][ T5975] usb 6-1: config 14 interface 208 altsetting 35 has a duplicate endpoint with address 0xD, skipping [ 91.832059][ T5975] usb 6-1: config 14 interface 208 altsetting 35 has 3 endpoint descriptors, different from the interface descriptor's value: 220 [ 91.837580][ T5975] usb 6-1: config 14 interface 200 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 91.842006][ T5975] usb 6-1: config 14 interface 200 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 91.846536][ T5975] usb 6-1: config 14 interface 200 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 91.850913][ T5975] usb 6-1: config 14 interface 200 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 91.855517][ T5975] usb 6-1: config 14 interface 200 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 91.860036][ T5975] usb 6-1: config 14 interface 15 has no altsetting 0 [ 91.863677][ T5975] usb 6-1: config 14 interface 167 has no altsetting 0 [ 91.866468][ T5975] usb 6-1: config 14 interface 208 has no altsetting 0 [ 91.869311][ T5975] usb 6-1: config 14 interface 200 has no altsetting 0 [ 91.874272][ T5975] usb 6-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=9b.c8 [ 91.878074][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.881225][ T5975] usb 6-1: Product: ﻑꋮ擈좰檎췩튆챣罜ꃓ˗봳à¾ä½»ì¶ƒå™‚辅⒘蔵íºá–­ãŒºá¶î»è£¬å„¯èŠá‰²ï’ªè®Œí›»ì«¼å¼¤ï®¸â›’᭼禞駄୘盉堎å¡à¯œã§žã¾¸é¢„Û©î¨žåª ï”†á¸ªç“™å’—ã€¥ê±©éŽ»îº [ 91.888731][ T5975] usb 6-1: Manufacturer: 븋곞å“軺⩳鱄勋á«á‚¼éƒ˜ê¢ ê‡«ì–¼èŠ©êœ©ä”•à¶—꽽官￤車谘æ»æ¿ºè±ºï—…ㅻ♌멨㵓₽邇ä–ᵬȾⴃ繀ﶈኢ롱旱èŽê€†ã‘Žë“²â…”䯓䥕린ç±å««ä¸Žç»±ã‰™ï·œç¾¤âš¢ìµ„顩贕풮ᇘͤ鼬熤蒶輪剋郞䞙䋾뗕ê”픆垲ă [ 91.897734][ T5975] usb 6-1: SerialNumber: 鞇苮곡翃鵵ê™îªê£’ﺓçªã²†ê½ç® åŽ´ç˜¢æ¾¦à¾µä¢¶è·ªì’‚⯔逊䇨㘿㦶鑇跅躹ュṼ䖖毭钥ꮮ [ 91.904327][ T7690] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 91.907742][ T7690] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.073835][ T7730] macsec1: entered promiscuous mode [ 92.369839][ T7690] xt_hashlimit: size too large, truncated to 1048576 [ 92.378852][ T7690] syz.1.487: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 92.384317][ T7690] CPU: 1 UID: 0 PID: 7690 Comm: syz.1.487 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 92.384332][ T7690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.384339][ T7690] Call Trace: [ 92.384343][ T7690] [ 92.384348][ T7690] dump_stack_lvl+0x16c/0x1f0 [ 92.384395][ T7690] warn_alloc+0x248/0x3a0 [ 92.384408][ T7690] ? __pfx_warn_alloc+0x10/0x10 [ 92.384424][ T7690] ? __get_vm_area_node+0x1dc/0x330 [ 92.384442][ T7690] ? __get_vm_area_node+0x208/0x330 [ 92.384472][ T7690] __vmalloc_node_range_noprof+0x1110/0x1540 [ 92.384494][ T7690] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 92.384515][ T7690] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 92.384538][ T7690] __kvmalloc_node_noprof+0x2ff/0x600 [ 92.384556][ T7690] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 92.384572][ T7690] ? net_generic+0xea/0x2a0 [ 92.384585][ T7690] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 92.384604][ T7690] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 92.384620][ T7690] hashlimit_mt_check_common+0x8bb/0x1460 [ 92.384643][ T7690] hashlimit_mt_check_v1+0x2fc/0x370 [ 92.384663][ T7690] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 92.384678][ T7690] ? find_held_lock+0x2b/0x80 [ 92.384697][ T7690] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 92.384713][ T7690] xt_check_match+0x283/0xa50 [ 92.384728][ T7690] ? is_mmconf_reserved+0x110/0x500 [ 92.384744][ T7690] ? __pfx_xt_check_match+0x10/0x10 [ 92.384758][ T7690] ? pcpu_memcg_post_alloc_hook+0x1e/0x740 [ 92.384775][ T7690] ? xt_find_match+0x1f6/0x290 [ 92.384793][ T7690] find_check_entry.constprop.0+0x34e/0xa20 [ 92.384814][ T7690] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 92.384833][ T7690] ? kasan_quarantine_put+0x10a/0x240 [ 92.384851][ T7690] ? lockdep_hardirqs_on+0x7c/0x110 [ 92.384869][ T7690] ? kfree+0x2b6/0x4d0 [ 92.384883][ T7690] ? translate_table+0xc0e/0x17b0 [ 92.384900][ T7690] translate_table+0xd0b/0x17b0 [ 92.384921][ T7690] ? __pfx_translate_table+0x10/0x10 [ 92.384935][ T7690] ? xt_alloc_table_info+0x3e/0xa0 [ 92.384953][ T7690] do_ip6t_set_ctl+0x570/0xb00 [ 92.384968][ T7690] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 92.384986][ T7690] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 92.385002][ T7690] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 92.385027][ T7690] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 92.385043][ T7690] nf_setsockopt+0x8a/0xf0 [ 92.385057][ T7690] ipv6_setsockopt+0x135/0x170 [ 92.385073][ T7690] rawv6_setsockopt+0xc2/0x510 [ 92.385086][ T7690] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 92.385099][ T7690] ? selinux_socket_setsockopt+0x6a/0x80 [ 92.385118][ T7690] ? sock_common_setsockopt+0x2e/0xf0 [ 92.385134][ T7690] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 92.385149][ T7690] do_sock_setsockopt+0x221/0x470 [ 92.385164][ T7690] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 92.385188][ T7690] __sys_setsockopt+0x1a0/0x230 [ 92.385202][ T7690] __x64_sys_setsockopt+0xbd/0x160 [ 92.385213][ T7690] ? do_syscall_64+0x91/0x260 [ 92.385229][ T7690] ? lockdep_hardirqs_on+0x7c/0x110 [ 92.385244][ T7690] do_syscall_64+0xcd/0x260 [ 92.385261][ T7690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.385273][ T7690] RIP: 0033:0x7fca2738e969 [ 92.385283][ T7690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.385294][ T7690] RSP: 002b:00007fca28179038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 92.385304][ T7690] RAX: ffffffffffffffda RBX: 00007fca275b6080 RCX: 00007fca2738e969 [ 92.385311][ T7690] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000009 [ 92.385317][ T7690] RBP: 00007fca27410ab1 R08: 00000000000004c0 R09: 0000000000000000 [ 92.385324][ T7690] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 92.385330][ T7690] R13: 0000000000000000 R14: 00007fca275b6080 R15: 00007ffc39870598 [ 92.385344][ T7690] [ 92.502506][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.505229][ T7690] Mem-Info: [ 92.506341][ T7690] active_anon:32335 inactive_anon:0 isolated_anon:0 [ 92.506341][ T7690] active_file:10917 inactive_file:40606 isolated_file:0 [ 92.506341][ T7690] unevictable:1768 dirty:31 writeback:25 [ 92.506341][ T7690] slab_reclaimable:6996 slab_unreclaimable:72240 [ 92.506341][ T7690] mapped:24773 shmem:17768 pagetables:851 [ 92.506341][ T7690] sec_pagetables:304 bounce:0 [ 92.506341][ T7690] kernel_misc_reclaimable:0 [ 92.506341][ T7690] free:448238 free_pcp:3249 free_cma:0 [ 92.520153][ T7690] Node 0 active_anon:129340kB inactive_anon:0kB active_file:43668kB inactive_file:162220kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:99092kB dirty:124kB writeback:96kB shmem:67536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11568kB pagetables:3404kB sec_pagetables:1216kB all_unreclaimable? no Balloon:0kB [ 92.530464][ T7690] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:4kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 92.539938][ T7690] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 92.548163][ T7690] lowmem_reserve[]: 0 1238 1238 1238 1238 [ 92.550000][ T7690] Node 0 DMA32 free:163288kB boost:0kB min:27576kB low:34468kB high:41360kB reserved_highatomic:0KB active_anon:129340kB inactive_anon:0kB active_file:43668kB inactive_file:162220kB unevictable:3536kB writepending:220kB present:2080628kB managed:1268528kB mlocked:0kB bounce:0kB free_pcp:11892kB local_pcp:1492kB free_cma:0kB [ 92.559255][ T7690] lowmem_reserve[]: 0 0 0 0 0 [ 92.560820][ T7690] Node 1 Normal free:1614208kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781964kB mlocked:0kB bounce:0kB free_pcp:1168kB local_pcp:64kB free_cma:0kB [ 92.570079][ T7690] lowmem_reserve[]: 0 0 0 0 0 [ 92.571657][ T7690] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 92.575926][ T7690] Node 0 DMA32: 205*4kB (UME) 247*8kB (UME) 214*16kB (UME) 142*32kB (UME) 106*64kB (UME) 58*128kB (UME) 19*256kB (UME) 24*512kB (UME) 22*1024kB (UME) 6*2048kB (UME) 22*4096kB (UM) = 167052kB [ 92.581974][ T7690] Node 1 Normal: 14*4kB (UME) 13*8kB (UME) 30*16kB (UME) 156*32kB (UME) 58*64kB (UME) 24*128kB (UME) 1*256kB (E) 4*512kB (UM) 2*1024kB (UE) 4*2048kB (UM) 388*4096kB (M) = 1614208kB [ 92.588046][ T7690] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.591015][ T7690] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 92.593861][ T7690] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.597063][ T7690] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 92.598249][ T7739] netlink: 108 bytes leftover after parsing attributes in process `syz.2.503'. [ 92.599952][ T7690] 69288 total pagecache pages [ 92.602859][ T7739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.503'. [ 92.604257][ T7690] 0 pages in swap cache [ 92.604263][ T7690] Free swap = 124996kB [ 92.604268][ T7690] Total swap = 124996kB [ 92.604273][ T7690] 1048443 pages RAM [ 92.604277][ T7690] 0 pages HighMem/MovableOnly [ 92.604281][ T7690] 281980 pages reserved [ 92.604285][ T7690] 0 pages cma reserved [ 92.723457][ T7743] Invalid ELF header type: 0 != 1 [ 92.730201][ T5975] usbhid 6-1:14.15: couldn't find an input interrupt endpoint [ 92.746455][ T7746] vxcan0: tx address claim with dest, not broadcast [ 92.750026][ T7745] vxcan0: tx address claim with dest, not broadcast [ 92.750226][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.506'. [ 92.753110][ T5975] usb 6-1: USB disconnect, device number 7 [ 92.779428][ T5937] udevd[5937]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:14.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.886538][ T7756] overlayfs: missing 'lowerdir' [ 92.960450][ T7764] netlink: 108 bytes leftover after parsing attributes in process `syz.2.512'. [ 92.963268][ T7764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.512'. [ 93.183583][ T7782] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 93.257227][ T7795] netlink: 108 bytes leftover after parsing attributes in process `syz.1.523'. [ 93.296590][ T7797] cgroup: Invalid name [ 93.356126][ T77] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.151484][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.154613][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.158332][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.171385][ T7831] block nbd1: Unsupported socket: shutdown callout must be supported. [ 94.174459][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.177167][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.292088][ T7828] chnl_net:caif_netlink_parms(): no params data found [ 94.379800][ T7828] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.382215][ T7828] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.384745][ T7828] bridge_slave_0: entered allmulticast mode [ 94.387419][ T7828] bridge_slave_0: entered promiscuous mode [ 94.390542][ T7828] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.392768][ T7828] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.393916][ T7843] syz.1.537: attempt to access beyond end of device [ 94.393916][ T7843] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 94.395644][ T7842] nbd1: detected capacity change from 0 to 67108884 [ 94.400747][ T7843] block nbd1: Send control failed (result -89) [ 94.401295][ T7828] bridge_slave_1: entered allmulticast mode [ 94.403219][ T7843] block nbd1: Request send failed, requeueing [ 94.406926][ T7828] bridge_slave_1: entered promiscuous mode [ 94.408600][ T5286] block nbd1: Receive control failed (result -32) [ 94.410689][ T124] block nbd1: Dead connection, failed to find a fallback [ 94.413215][ T124] block nbd1: shutting down sockets [ 94.414232][ T5937] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.415423][ T124] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.417931][ T5937] Buffer I/O error on dev nbd1, logical block 0, async page read [ 94.422116][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 94.423903][ T5937] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.426953][ T7843] I/O error, dev nbd1, sector 67108882 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.429231][ T5937] Buffer I/O error on dev nbd1, logical block 1, async page read [ 94.432460][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554441, location=33554441 [ 94.435408][ T5937] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.439207][ T7843] I/O error, dev nbd1, sector 67108370 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.441688][ T5937] Buffer I/O error on dev nbd1, logical block 2, async page read [ 94.443942][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554185, location=33554185 [ 94.446370][ T5937] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.449525][ T7843] I/O error, dev nbd1, sector 67108880 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.452253][ T5937] Buffer I/O error on dev nbd1, logical block 3, async page read [ 94.455348][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554440, location=33554440 [ 94.455598][ T7828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.457186][ T7828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.457828][ T5937] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.460900][ T7843] I/O error, dev nbd1, sector 67108368 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.463650][ T5937] Buffer I/O error on dev nbd1, logical block 0, async page read [ 94.466540][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554184, location=33554184 [ 94.466669][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554439, location=33554439 [ 94.469430][ T5937] Buffer I/O error on dev nbd1, logical block 1, async page read [ 94.472480][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554183, location=33554183 [ 94.475984][ T5937] Buffer I/O error on dev nbd1, logical block 2, async page read [ 94.478036][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554291, location=33554291 [ 94.481227][ T5937] Buffer I/O error on dev nbd1, logical block 3, async page read [ 94.483808][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554035, location=33554035 [ 94.486763][ T5937] Buffer I/O error on dev nbd1, logical block 0, async page read [ 94.489266][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554289, location=33554289 [ 94.492442][ T5937] Buffer I/O error on dev nbd1, logical block 1, async page read [ 94.494855][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554033, location=33554033 [ 94.499106][ T5937] ldm_validate_partition_table(): Disk read failed. [ 94.500452][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 94.505959][ T5937] Dev nbd1: unable to read RDB block 0 [ 94.507177][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 94.509742][ T5937] nbd1: unable to read partition table [ 94.511428][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777220, location=16777220 [ 94.525081][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776964, location=16776964 [ 94.526258][ T5937] ldm_validate_partition_table(): Disk read failed. [ 94.528397][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777219, location=16777219 [ 94.530842][ T5937] Dev nbd1: unable to read RDB block 0 [ 94.534827][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776963, location=16776963 [ 94.535788][ T5937] nbd1: unable to read partition table [ 94.538378][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777218, location=16777218 [ 94.543193][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776962, location=16776962 [ 94.546873][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777070, location=16777070 [ 94.550175][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776814, location=16776814 [ 94.551829][ T7828] team0: Port device team_slave_0 added [ 94.553448][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777068, location=16777068 [ 94.558449][ T7828] team0: Port device team_slave_1 added [ 94.566546][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776812, location=16776812 [ 94.569989][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 94.573761][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 94.577063][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388609, location=8388609 [ 94.580436][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388353, location=8388353 [ 94.583680][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388608, location=8388608 [ 94.587142][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388352, location=8388352 [ 94.590429][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388607, location=8388607 [ 94.593664][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388351, location=8388351 [ 94.597059][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388459, location=8388459 [ 94.600267][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388203, location=8388203 [ 94.603531][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388457, location=8388457 [ 94.603697][ T7828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.607801][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388201, location=8388201 [ 94.609371][ T7828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.612584][ T7843] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 94.621617][ T7828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.624459][ T7843] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 94.633231][ T7828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.637139][ T7828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.647894][ T7828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.714968][ T7828] hsr_slave_0: entered promiscuous mode [ 94.718393][ T7828] hsr_slave_1: entered promiscuous mode [ 94.721316][ T7828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.726791][ T7828] Cannot create hsr debugfs directory [ 94.947039][ T77] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.029150][ T77] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.103565][ T77] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.208758][ T77] bridge_slave_1: left allmulticast mode [ 95.210751][ T77] bridge_slave_1: left promiscuous mode [ 95.212565][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.216215][ T77] bridge_slave_0: left allmulticast mode [ 95.217977][ T77] bridge_slave_0: left promiscuous mode [ 95.219845][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.359825][ T7867] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 95.473084][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.477386][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.480979][ T77] bond0 (unregistering): Released all slaves [ 95.530392][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 95.530404][ T40] audit: type=1400 audit(1748301021.259:627): avc: denied { remount } for pid=7868 comm="syz.2.545" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 95.777532][ T77] hsr_slave_0: left promiscuous mode [ 95.779594][ T77] hsr_slave_1: left promiscuous mode [ 95.781665][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.784019][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.787875][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.790186][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.812371][ T77] veth1_macvtap: left promiscuous mode [ 95.814427][ T77] veth0_macvtap: left promiscuous mode [ 95.816326][ T77] veth1_vlan: left promiscuous mode [ 95.818031][ T77] veth0_vlan: left promiscuous mode [ 95.944016][ T40] audit: type=1400 audit(1748301021.669:628): avc: denied { map } for pid=7872 comm="syz.4.546" path="socket:[24476]" dev="sockfs" ino=24476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 95.985228][ T7875] netlink: 'syz.4.547': attribute type 1 has an invalid length. [ 96.027252][ T40] audit: type=1400 audit(1748301021.759:629): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 96.214558][ T7884] __nla_validate_parse: 4 callbacks suppressed [ 96.214569][ T7884] netlink: 108 bytes leftover after parsing attributes in process `syz.2.550'. [ 96.243341][ T7886] syz.2.551 (7886): /proc/7885/oom_adj is deprecated, please use /proc/7885/oom_score_adj instead. [ 96.254792][ T5286] Bluetooth: hci0: command tx timeout [ 96.445820][ T77] team0 (unregistering): Port device team_slave_1 removed [ 96.503778][ T77] team0 (unregistering): Port device team_slave_0 removed [ 96.956874][ T7875] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 96.978426][ T7879] veth3: entered promiscuous mode [ 96.989669][ T7888] @: renamed from veth1_to_team [ 97.019353][ T7893] usb usb8: usbfs: process 7893 (syz.2.553) did not claim interface 0 before use [ 97.026005][ T7893] ERROR: device name not specified. [ 97.038225][ T40] audit: type=1400 audit(1748301022.769:630): avc: denied { setopt } for pid=7892 comm="syz.2.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 97.041778][ T7828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.048763][ T7828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.052885][ T7828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.067003][ T7828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.106612][ T7828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.108899][ T7898] netlink: 68 bytes leftover after parsing attributes in process `syz.4.555'. [ 97.111808][ T7898] netlink: 44 bytes leftover after parsing attributes in process `syz.4.555'. [ 97.117100][ T7828] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.117484][ T7898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=7898 comm=syz.4.555 [ 97.122342][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.125335][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.132119][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.134740][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.261986][ T7828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.283237][ T7828] veth0_vlan: entered promiscuous mode [ 97.288226][ T7828] veth1_vlan: entered promiscuous mode [ 97.302682][ T7828] veth0_macvtap: entered promiscuous mode [ 97.306452][ T7828] veth1_macvtap: entered promiscuous mode [ 97.314616][ T7828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.320084][ T7828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.324591][ T7828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.327307][ T7828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.330020][ T7828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.332765][ T7828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.371646][ T40] audit: type=1400 audit(1748301023.099:631): avc: denied { create } for pid=7897 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 97.372103][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'. [ 97.378325][ T40] audit: type=1400 audit(1748301023.099:632): avc: denied { listen } for pid=7897 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 97.386989][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.389443][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.400454][ T5975] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 97.403213][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.406327][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.555747][ T5975] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.558765][ T5975] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.561735][ T5975] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.567336][ T5975] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 97.570142][ T5975] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.572609][ T5975] usb 9-1: Product: syz [ 97.573926][ T5975] usb 9-1: Manufacturer: syz [ 97.575588][ T5975] usb 9-1: SerialNumber: syz [ 97.784332][ T5975] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 97.983342][ T40] audit: type=1400 audit(1748301023.709:633): avc: denied { read write } for pid=7902 comm="syz.4.557" name="lp0" dev="devtmpfs" ino=2934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 97.990534][ T40] audit: type=1400 audit(1748301023.709:634): avc: denied { open } for pid=7902 comm="syz.4.557" path="/dev/usb/lp0" dev="devtmpfs" ino=2934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 97.997871][ T40] audit: type=1400 audit(1748301023.709:635): avc: denied { ioctl } for pid=7902 comm="syz.4.557" path="/dev/usb/lp0" dev="devtmpfs" ino=2934 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 98.088184][ T7903] usblp0:failed reading printer status (-71) [ 98.088299][ T3229] usb 9-1: USB disconnect, device number 3 [ 98.099031][ T3229] usblp0: removed [ 98.573013][ T7918] netlink: 108 bytes leftover after parsing attributes in process `syz.2.560'. [ 98.576121][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 98.606103][ T40] audit: type=1400 audit(1748301024.339:636): avc: denied { append } for pid=7919 comm="syz.2.561" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 98.647186][ T7920] usb usb1: usbfs: process 7920 (syz.2.561) did not claim interface 0 before use [ 98.654095][ T7921] syz.2.561: attempt to access beyond end of device [ 98.654095][ T7921] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 98.658484][ T7921] befs: (nbd2): unable to read superblock [ 98.717958][ T7935] SELinux: failed to load policy [ 98.994969][ T7909] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 99.144657][ T7909] usb 9-1: Using ep0 maxpacket: 16 [ 99.148772][ T7909] usb 9-1: config index 0 descriptor too short (expected 30500, got 36) [ 99.152270][ T7909] usb 9-1: config 152 has too many interfaces: 153, using maximum allowed: 32 [ 99.156602][ T7909] usb 9-1: config 152 has 1 interface, different from the descriptor's value: 153 [ 99.160419][ T7909] usb 9-1: config 152 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 99.166067][ T7909] usb 9-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 99.169848][ T7909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.379392][ T7939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.382370][ T7939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.386385][ T7983] netlink: 108 bytes leftover after parsing attributes in process `syz.2.569'. [ 99.386943][ T7909] usb 9-1: string descriptor 0 read error: -71 [ 99.389185][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 99.401369][ T7909] usbhid 9-1:152.0: couldn't find an input interrupt endpoint [ 99.404825][ T7909] usb 9-1: USB disconnect, device number 4 [ 99.573646][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.356285][ T8000] netlink: 'syz.4.574': attribute type 2 has an invalid length. [ 100.362184][ T8000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=8000 comm=syz.4.574 [ 100.451141][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.455593][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.459605][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.463638][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.467151][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.537378][ T8011] Bluetooth: MGMT ver 1.23 [ 100.538864][ T8011] Bluetooth: hci0: load_link_keys: too big key_count value 65535 [ 100.559294][ T8003] chnl_net:caif_netlink_parms(): no params data found [ 100.569290][ T8017] netlink: 108 bytes leftover after parsing attributes in process `syz.2.578'. [ 100.572291][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 100.633676][ T8003] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.636156][ T8003] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.638514][ T8003] bridge_slave_0: entered allmulticast mode [ 100.641126][ T8003] bridge_slave_0: entered promiscuous mode [ 100.644237][ T8024] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (8), value rounded to 0 ms [ 100.656896][ T8003] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.659234][ T8003] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.661586][ T8003] bridge_slave_1: entered allmulticast mode [ 100.664236][ T8003] bridge_slave_1: entered promiscuous mode [ 100.709629][ T8003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.714500][ T8003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.750517][ T8003] team0: Port device team_slave_0 added [ 100.754658][ T8003] team0: Port device team_slave_1 added [ 100.790653][ T8003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.792826][ T8003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.801616][ T8003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.807272][ T8003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.809433][ T8003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.819944][ T8003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.856268][ T8003] hsr_slave_0: entered promiscuous mode [ 100.858485][ T8003] hsr_slave_1: entered promiscuous mode [ 101.044662][ T3229] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 101.207053][ T3229] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.209562][ T3229] usb 7-1: config 0 has no interface number 0 [ 101.211496][ T3229] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 101.215037][ T3229] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 101.216298][ T8035] netlink: 'syz.4.584': attribute type 3 has an invalid length. [ 101.218044][ T3229] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 101.223300][ T3229] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.228482][ T3229] usb 7-1: config 0 descriptor?? [ 101.232319][ T3229] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 101.240092][ T8035] bridge_slave_0: left allmulticast mode [ 101.241938][ T8035] bridge_slave_0: left promiscuous mode [ 101.243830][ T8035] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.247976][ T8035] bridge_slave_1: left allmulticast mode [ 101.249769][ T8035] bridge_slave_1: left promiscuous mode [ 101.251633][ T8035] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.256990][ T8035] bond0: (slave bond_slave_0): Releasing backup interface [ 101.261284][ T8035] bond0: (slave bond_slave_1): Releasing backup interface [ 101.273266][ T8035] team0: Port device team_slave_0 removed [ 101.279161][ T8035] team0: Port device team_slave_1 removed [ 101.295257][ T8035] netlink: 'syz.4.584': attribute type 3 has an invalid length. [ 101.331835][ T8038] capability: warning: `syz.4.585' uses 32-bit capabilities (legacy support in use) [ 101.432994][ T8033] iowarrior 7-1:0.1: Error -90 while submitting URB [ 101.472884][ T8033] __nla_validate_parse: 3 callbacks suppressed [ 101.472895][ T8033] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.583'. [ 101.479209][ T9] usb 7-1: USB disconnect, device number 13 [ 101.490697][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.507177][ T8045] program syz.4.587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.512319][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 101.512328][ T40] audit: type=1400 audit(1748301027.239:639): avc: denied { setopt } for pid=8044 comm="syz.4.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.543805][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.545635][ T8047] netlink: 108 bytes leftover after parsing attributes in process `syz.4.588'. [ 101.549834][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.588'. [ 101.604088][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.614544][ T8051] tipc: Enabling of bearer rejected, failed to enable media [ 101.646679][ T8053] program syz.4.591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.695034][ T1112] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 101.697966][ T8054] netlink: 276 bytes leftover after parsing attributes in process `syz.4.591'. [ 101.698172][ T1112] ata1.00: irq_stat 0x40000000 [ 101.702799][ T1112] ata1.00: failed command: ZAC MANAGEMENT OUT [ 101.705461][ T1112] ata1.00: cmd 9f/01:00:00:08:00/00:00:00:00:00/40 tag 5 [ 101.705461][ T1112] res 41/04:00:00:08:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 101.711890][ T1112] ata1.00: status: { DRDY ERR } [ 101.713938][ T1112] ata1.00: error: { ABRT } [ 101.718875][ T1112] ata1.00: device reported invalid CHS sector 0 [ 101.725512][ T64] bridge_slave_1: left allmulticast mode [ 101.727309][ T64] bridge_slave_1: left promiscuous mode [ 101.729133][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.733051][ T64] bridge_slave_0: left allmulticast mode [ 101.735731][ T64] bridge_slave_0: left promiscuous mode [ 101.737592][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.990220][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.994320][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.000891][ T64] bond0 (unregistering): Released all slaves [ 102.010951][ T40] audit: type=1400 audit(1748301027.739:640): avc: denied { connect } for pid=8065 comm="syz.2.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.018185][ T40] audit: type=1400 audit(1748301027.739:641): avc: denied { bind } for pid=8065 comm="syz.2.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.070182][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.597'. [ 102.108095][ T8072] netlink: 108 bytes leftover after parsing attributes in process `syz.4.598'. [ 102.111620][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.598'. [ 102.315873][ T64] hsr_slave_0: left promiscuous mode [ 102.317966][ T64] hsr_slave_1: left promiscuous mode [ 102.319975][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.322282][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.325395][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.327739][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.348916][ T64] veth1_macvtap: left promiscuous mode [ 102.350738][ T64] veth0_macvtap: left promiscuous mode [ 102.352506][ T64] veth1_vlan: left promiscuous mode [ 102.354199][ T64] veth0_vlan: left promiscuous mode [ 102.434529][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 102.486007][ T5939] Bluetooth: hci0: command tx timeout [ 102.584443][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 102.587577][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.590738][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.593819][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.596991][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.601131][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.603998][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.812487][ T9] usb 9-1: GET_CAPABILITIES returned 0 [ 102.814324][ T9] usbtmc 9-1:16.0: can't read capabilities [ 102.876040][ T64] team0 (unregistering): Port device team_slave_1 removed [ 102.932916][ T64] team0 (unregistering): Port device team_slave_0 removed [ 103.366566][ T7909] usb 9-1: USB disconnect, device number 5 [ 103.388225][ T40] audit: type=1400 audit(1748301029.119:642): avc: denied { connect } for pid=8085 comm="syz.2.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 103.392636][ T8003] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.395220][ T40] audit: type=1400 audit(1748301029.119:643): avc: denied { shutdown } for pid=8085 comm="syz.2.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 103.404652][ T8003] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.411226][ T8003] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.417382][ T8003] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.446311][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'. [ 103.462265][ T8003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.470979][ T8003] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.476658][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.478897][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.482959][ T40] audit: type=1400 audit(1748301029.209:644): avc: denied { setopt } for pid=8091 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.484351][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.485445][ T8093] fuse: Bad value for 'rootmode' [ 103.492746][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.598373][ T8108] netlink: 108 bytes leftover after parsing attributes in process `syz.2.607'. [ 103.601174][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'. [ 103.620066][ T8003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.643688][ T8003] veth0_vlan: entered promiscuous mode [ 103.649575][ T8113] netlink: 'syz.1.609': attribute type 21 has an invalid length. [ 103.662157][ T8114] netlink: 'syz.1.609': attribute type 21 has an invalid length. [ 103.666365][ T8003] veth1_vlan: entered promiscuous mode [ 103.680430][ T8003] veth0_macvtap: entered promiscuous mode [ 103.684015][ T8003] veth1_macvtap: entered promiscuous mode [ 103.694565][ T8003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.698742][ T8003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.712036][ T8003] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.718925][ T8003] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.722279][ T8003] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.725627][ T8003] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.732087][ T8119] mkiss: ax0: crc mode is auto. [ 103.762618][ T8119] syzkaller0: entered promiscuous mode [ 103.764583][ T8119] syzkaller0: entered allmulticast mode [ 103.769175][ T40] audit: type=1400 audit(1748301029.499:645): avc: denied { relabelfrom } for pid=8118 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 103.775626][ T40] audit: type=1400 audit(1748301029.499:646): avc: denied { relabelto } for pid=8118 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 103.785782][ T8119] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 103.788420][ T8119] team0: Device ipvlan2 is already an upper device of the team interface [ 103.802708][ T8122] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 103.805286][ T8122] team0: Device ipvlan2 is already an upper device of the team interface [ 103.853830][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.856486][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.878678][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.881198][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.895006][ T40] audit: type=1400 audit(1748301029.629:647): avc: denied { connect } for pid=8127 comm="syz.1.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 103.903866][ T40] audit: type=1400 audit(1748301029.629:648): avc: denied { listen } for pid=8127 comm="syz.1.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 104.066889][ T8130] kAFS: unparsable volume name [ 104.925485][ T1112] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 104.927605][ T1112] ata1: failed to read log page 10h (errno=-5) [ 104.929566][ T1112] ata1.00: exception Emask 0x1 SAct 0x40 SErr 0x0 action 0x0 [ 104.931870][ T1112] ata1.00: irq_stat 0x40000000 [ 104.933369][ T1112] ata1.00: failed command: WRITE FPDMA QUEUED [ 104.935811][ T1112] ata1.00: cmd 61/60:30:f6:08:10/00:00:00:00:00/40 tag 6 ncq dma 49152 out [ 104.935811][ T1112] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 104.941008][ T1112] ata1.00: status: { DRDY } [ 104.942440][ T1112] ata1.00: error: { ABRT } [ 104.944930][ T1112] ata1.00: configured for UDMA/100 [ 104.946809][ T1112] ata1: EH complete [ 104.979768][ T8162] trusted_key: encrypted_key: master key parameter 'ÔfUÚÌ×°Ú' is invalid [ 105.007473][ T8168] tmpfs: Unknown parameter '0xffffffffffffffff' [ 105.010300][ T8169] tmpfs: Unknown parameter '0xffffffffffffffff' [ 105.172653][ T8194] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 105.250545][ T8198] syz.2.633: attempt to access beyond end of device [ 105.250545][ T8198] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 105.254847][ T8198] efs: cannot read volume header [ 105.501076][ T8218] vlan0: entered promiscuous mode [ 105.528756][ T8223] xt_CT: No such helper "pptp" [ 105.599179][ T8226] syz.4.642: attempt to access beyond end of device [ 105.599179][ T8226] loop4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 105.604106][ T8226] syz.4.642: attempt to access beyond end of device [ 105.604106][ T8226] loop4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 105.608684][ T8226] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 105.611817][ T8226] syz.4.642: attempt to access beyond end of device [ 105.611817][ T8226] loop4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 105.619871][ T8226] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 105.622974][ T8226] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 105.626669][ T8226] UDF-fs: Scanning with blocksize 512 failed [ 105.628972][ T8226] syz.4.642: attempt to access beyond end of device [ 105.628972][ T8226] loop4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 105.633602][ T8226] syz.4.642: attempt to access beyond end of device [ 105.633602][ T8226] loop4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 105.651293][ T8226] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 105.654639][ T8226] syz.4.642: attempt to access beyond end of device [ 105.654639][ T8226] loop4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 105.658663][ T8226] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 105.661744][ T8226] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 105.664171][ T8226] UDF-fs: Scanning with blocksize 1024 failed [ 105.666666][ T8226] syz.4.642: attempt to access beyond end of device [ 105.666666][ T8226] loop4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 105.670594][ T8226] syz.4.642: attempt to access beyond end of device [ 105.670594][ T8226] loop4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 105.674651][ T8226] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 105.679170][ T8226] syz.4.642: attempt to access beyond end of device [ 105.679170][ T8226] loop4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 105.683308][ T8226] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 105.688704][ T8226] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 105.691098][ T8226] UDF-fs: Scanning with blocksize 2048 failed [ 105.693362][ T8226] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 105.697231][ T8226] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 105.700234][ T8226] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 105.702604][ T8226] UDF-fs: Scanning with blocksize 4096 failed [ 105.704665][ T8226] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 105.732929][ T8252] program syz.1.650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.918977][ T1146] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.205629][ T8272] kvm: pic: non byte read [ 106.208334][ T8272] kvm: pic: level sensitive irq not supported [ 106.208601][ T8272] kvm: pic: non byte read [ 106.212985][ T8272] kvm: pic: level sensitive irq not supported [ 106.213267][ T8272] kvm: pic: non byte read [ 106.792400][ T8278] tmpfs: Bad value for 'mpol' [ 106.860943][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 106.860955][ T40] audit: type=1400 audit(1748301032.589:663): avc: denied { setopt } for pid=8283 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 106.862924][ T8286] binder: 8283:8286 ioctl 1276 0 returned -22 [ 106.868996][ T40] audit: type=1400 audit(1748301032.589:664): avc: denied { getopt } for pid=8283 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 106.877049][ T40] audit: type=1400 audit(1748301032.599:665): avc: denied { remove_name } for pid=8283 comm="syz.1.659" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.883918][ T40] audit: type=1400 audit(1748301032.599:666): avc: denied { unlink } for pid=8283 comm="syz.1.659" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 106.892434][ T8284] team0: entered promiscuous mode [ 106.894098][ T8284] team_slave_0: entered promiscuous mode [ 106.896688][ T8284] team_slave_1: entered promiscuous mode [ 106.899089][ T5286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.905965][ T5286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.908937][ T5286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.911903][ T5286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.914934][ T5286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.932482][ T40] audit: type=1400 audit(1748301032.659:667): avc: denied { read } for pid=8303 comm="syz.4.663" name="file0" dev="tmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 106.940152][ T40] audit: type=1400 audit(1748301032.659:668): avc: denied { open } for pid=8303 comm="syz.4.663" path="/154/file0" dev="tmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 107.017031][ T8296] chnl_net:caif_netlink_parms(): no params data found [ 107.083595][ T8296] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.085927][ T8296] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.088339][ T8296] bridge_slave_0: entered allmulticast mode [ 107.090961][ T8296] bridge_slave_0: entered promiscuous mode [ 107.094140][ T8296] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.096764][ T8296] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.099037][ T8296] bridge_slave_1: entered allmulticast mode [ 107.101658][ T8296] bridge_slave_1: entered promiscuous mode [ 107.134641][ T8318] __nla_validate_parse: 14 callbacks suppressed [ 107.134653][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 107.137959][ T8296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.140548][ T8318] netlink: 'syz.4.664': attribute type 30 has an invalid length. [ 107.143934][ T8296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.150803][ T8318] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.153549][ T8318] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.154488][ T7081] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 107.156405][ T8318] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.161447][ T8318] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.180042][ T8318] bridge0: port 1(gretap0) entered blocking state [ 107.182436][ T8318] bridge0: port 1(gretap0) entered disabled state [ 107.185764][ T8318] gretap0: entered allmulticast mode [ 107.188552][ T8318] gretap0: entered promiscuous mode [ 107.191699][ T8318] bridge0: port 1(gretap0) entered blocking state [ 107.193987][ T8318] bridge0: port 1(gretap0) entered forwarding state [ 107.215490][ T8318] gretap0: left allmulticast mode [ 107.217141][ T8318] gretap0: left promiscuous mode [ 107.219461][ T8318] bridge0: port 1(gretap0) entered disabled state [ 107.227503][ T8296] team0: Port device team_slave_0 added [ 107.231439][ T8296] team0: Port device team_slave_1 added [ 107.260383][ T8296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.263131][ T8296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.272993][ T8296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.279852][ T8296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.282041][ T8296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.290188][ T8296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.304472][ T7081] usb 6-1: Using ep0 maxpacket: 32 [ 107.309177][ T7081] usb 6-1: config 7 has an invalid interface number: 110 but max is 3 [ 107.311947][ T7081] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 107.315217][ T7081] usb 6-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 107.317949][ T7081] usb 6-1: config 7 has no interface number 0 [ 107.319973][ T7081] usb 6-1: config 7 interface 110 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 107.323319][ T7081] usb 6-1: config 7 interface 110 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 107.326875][ T7081] usb 6-1: config 7 interface 110 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 107.330933][ T7081] usb 6-1: config 7 interface 110 has no altsetting 0 [ 107.334932][ T7081] usb 6-1: New USB device found, idVendor=054c, idProduct=0437, bcdDevice=48.9b [ 107.335151][ T8296] hsr_slave_0: entered promiscuous mode [ 107.339463][ T7081] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.340120][ T8296] hsr_slave_1: entered promiscuous mode [ 107.342079][ T7081] usb 6-1: Product: 襡ë°âž‰ì‡–㗵ꗖ쟳є솧软嵸í€å½·ç­§î®¤çŠŸè“ˆëŠ…熕ᨣã­å¿¹ê®™ï‘°ä‡§ã†ç¯–嗠桧榴ḃå“í—ì´ìµ„è’°êž°ê’”ç®ã¼æ¹¾ê«·ê©³ãŽ†ë¶²ä±žå€½å½¿å³¶ê›êšé±„☨膈휡뙑ä»ê¶‚뻿⊹ଋꔚá®â¯‡ç‡‚ç¸ã€­ã·Œà­§è‡™â•‹à¡ì—탖႕콼龃ဠ⛥暪撹⛴숬陕세ç«ç„‰í‹Šé™› [ 107.342099][ T7081] usb 6-1: Manufacturer: í…˜ê‘﫟沉㟇쓯扗煮嫖ꨊ褦┆᜘묤稫綑ä¨á“ºæ·™á‹ì€²ç½Šéµ£ï’©é–ºà¼šä떞뤫ä·çœ–ä½é°‡ê†‘磟곴誱ө [ 107.342111][ T7081] usb 6-1: SerialNumber: 뛽祎㬰ﶥ⣃럹蘆㦂æ¹ìƒŒí˜”ç•ëŠæ¼˜ï—¼ãž£ïœ£ [ 107.344188][ T8296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.362425][ T8296] Cannot create hsr debugfs directory [ 107.372950][ T1146] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.576510][ T1146] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.657057][ T1146] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.664237][ T8282] team0: left promiscuous mode [ 107.666004][ T8282] team_slave_0: left promiscuous mode [ 107.669279][ T8282] team_slave_1: left promiscuous mode [ 107.771887][ T1146] bridge_slave_1: left allmulticast mode [ 107.773673][ T1146] bridge_slave_1: left promiscuous mode [ 107.776738][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.780381][ T1146] bridge_slave_0: left allmulticast mode [ 107.782181][ T1146] bridge_slave_0: left promiscuous mode [ 107.784000][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.066523][ T7081] pl2303 6-1:7.110: required endpoints missing [ 108.073516][ T7081] usb 6-1: USB disconnect, device number 8 [ 108.084009][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.088901][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.092439][ T1146] bond0 (unregistering): Released all slaves [ 108.189865][ T8343] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 108.190965][ T40] audit: type=1400 audit(1748301033.919:669): avc: denied { create } for pid=8342 comm="syz.2.671" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 108.216386][ T8343] overlayfs: failed to resolve './file1': -2 [ 108.217868][ T40] audit: type=1400 audit(1748301033.919:670): avc: denied { associate } for pid=8342 comm="syz.2.671" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 108.251796][ C2] vkms_vblank_simulate: vblank timer overrun [ 108.286434][ T40] audit: type=1400 audit(1748301033.949:671): avc: denied { mounton } for pid=8342 comm="syz.2.671" path="/203/bus" dev="tmpfs" ino=1093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 108.303269][ T40] audit: type=1400 audit(1748301034.029:672): avc: denied { rmdir } for pid=5933 comm="syz-executor" name="bus" dev="tmpfs" ino=1093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 108.363973][ T5939] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 108.406740][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'. [ 108.425832][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.675'. [ 108.570777][ T1146] hsr_slave_0: left promiscuous mode [ 108.572938][ T1146] hsr_slave_1: left promiscuous mode [ 108.575574][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.577851][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.581250][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.583511][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.613002][ T1146] veth1_macvtap: left promiscuous mode [ 108.614923][ T1146] veth0_macvtap: left promiscuous mode [ 108.616837][ T1146] veth1_vlan: left promiscuous mode [ 108.618650][ T1146] veth0_vlan: left promiscuous mode [ 108.964517][ T5939] Bluetooth: hci0: command tx timeout [ 109.187035][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 109.246223][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 109.678854][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.686'. [ 109.736559][ T8398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.687'. [ 109.749095][ T8296] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.754323][ T8296] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.759786][ T8296] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.766587][ T8296] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 109.815259][ T8296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.824613][ T8296] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.829448][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.831701][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.837383][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.839616][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.871850][ T8415] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8415 comm=syz.2.692 [ 109.880662][ T8415] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8415 comm=syz.2.692 [ 109.977789][ T8296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.012657][ T8296] veth0_vlan: entered promiscuous mode [ 110.019942][ T8296] veth1_vlan: entered promiscuous mode [ 110.046940][ T8296] veth0_macvtap: entered promiscuous mode [ 110.050688][ T8296] veth1_macvtap: entered promiscuous mode [ 110.059582][ T8296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.065219][ T8296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.070180][ T8296] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.072881][ T8296] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.076877][ T8296] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.079576][ T8296] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.114090][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.117539][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.147217][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.149667][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.266154][ T8441] netlink: 'syz.2.700': attribute type 2 has an invalid length. [ 110.319549][ T8449] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 110.684709][ T8483] netlink: 40 bytes leftover after parsing attributes in process `syz.1.715'. [ 111.630855][ T8502] bio_check_eod: 3 callbacks suppressed [ 111.630865][ T8502] syz.1.719: attempt to access beyond end of device [ 111.630865][ T8502] loop1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 111.637510][ T8502] gfs2: error -5 reading superblock [ 111.876941][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 111.876957][ T40] audit: type=1400 audit(1748301037.609:696): avc: denied { map } for pid=8511 comm="syz.1.722" path="/223" dev="tmpfs" ino=1213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 111.886205][ T40] audit: type=1400 audit(1748301037.619:697): avc: denied { setattr } for pid=5934 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.920073][ T40] audit: type=1400 audit(1748301037.649:698): avc: denied { create } for pid=8515 comm="syz.2.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.927960][ T40] audit: type=1400 audit(1748301037.649:699): avc: denied { setopt } for pid=8515 comm="syz.2.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.279023][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.369081][ T5286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.372122][ T5286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.376151][ T5286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.379318][ T5286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.381942][ T5286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.546601][ T8528] chnl_net:caif_netlink_parms(): no params data found [ 113.606394][ T8528] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.608689][ T8528] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.610989][ T8528] bridge_slave_0: entered allmulticast mode [ 113.613588][ T8528] bridge_slave_0: entered promiscuous mode [ 113.617591][ T8528] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.619851][ T8528] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.622104][ T8528] bridge_slave_1: entered allmulticast mode [ 113.624797][ T8528] bridge_slave_1: entered promiscuous mode [ 113.655829][ T8528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.660653][ T8528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.694168][ T8528] team0: Port device team_slave_0 added [ 113.698121][ T8528] team0: Port device team_slave_1 added [ 113.728602][ T8528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.730821][ T8528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.738779][ T8528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.742975][ T8528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.746771][ T8528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.754934][ T8528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.792115][ T8528] hsr_slave_0: entered promiscuous mode [ 113.794510][ T8528] hsr_slave_1: entered promiscuous mode [ 114.091178][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.196685][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.347331][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.445998][ T46] bridge_slave_1: left allmulticast mode [ 114.447830][ T46] bridge_slave_1: left promiscuous mode [ 114.449718][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.453389][ T46] bridge_slave_0: left allmulticast mode [ 114.456993][ T46] bridge_slave_0: left promiscuous mode [ 114.458827][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.604555][ T5975] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 114.703468][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.708433][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.712014][ T46] bond0 (unregistering): Released all slaves [ 114.754844][ T5975] usb 7-1: Using ep0 maxpacket: 32 [ 114.757699][ T5975] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 114.762259][ T5975] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 114.765192][ T5975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.767689][ T5975] usb 7-1: Product: syz [ 114.768996][ T5975] usb 7-1: Manufacturer: syz [ 114.770483][ T5975] usb 7-1: SerialNumber: syz [ 114.778750][ T5975] usb 7-1: config 0 descriptor?? [ 114.780938][ T8541] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 114.786778][ T5975] hub 7-1:0.0: bad descriptor, ignoring hub [ 114.788671][ T5975] hub 7-1:0.0: probe with driver hub failed with error -5 [ 114.802627][ T5975] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input13 [ 114.987960][ T40] audit: type=1400 audit(1748301040.719:700): avc: denied { ioctl } for pid=8540 comm="syz.2.729" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 115.056788][ T46] hsr_slave_0: left promiscuous mode [ 115.058976][ T46] hsr_slave_1: left promiscuous mode [ 115.060961][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.063263][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.066471][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.068772][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.087807][ T46] veth1_macvtap: left promiscuous mode [ 115.089573][ T46] veth0_macvtap: left promiscuous mode [ 115.091383][ T46] veth1_vlan: left promiscuous mode [ 115.093995][ T46] veth0_vlan: left promiscuous mode [ 115.122410][ T9] usb 7-1: USB disconnect, device number 14 [ 115.122529][ C3] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 115.446478][ T5286] Bluetooth: hci0: command tx timeout [ 115.673372][ T46] team0 (unregistering): Port device team_slave_1 removed [ 115.678826][ T5286] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 115.755948][ T46] team0 (unregistering): Port device team_slave_0 removed [ 116.263527][ T40] audit: type=1400 audit(1748301041.989:701): avc: denied { create } for pid=8551 comm="syz.2.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.273125][ T40] audit: type=1400 audit(1748301042.009:702): avc: denied { shutdown } for pid=8551 comm="syz.2.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.278908][ T8552] vlan4: entered promiscuous mode [ 116.282340][ T8552] bond0: entered promiscuous mode [ 116.283915][ T8552] bond_slave_0: entered promiscuous mode [ 116.288351][ T8552] bond_slave_1: entered promiscuous mode [ 116.377538][ T8528] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 116.384580][ T8528] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 116.396746][ T8528] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 116.404966][ T8528] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 116.453563][ T8528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.471576][ T8528] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.476767][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.477674][ T40] audit: type=1400 audit(1748301042.209:703): avc: denied { bind } for pid=8556 comm="syz.2.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.479016][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.490621][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.492899][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.598304][ T8528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.622031][ T8528] veth0_vlan: entered promiscuous mode [ 116.629364][ T8528] veth1_vlan: entered promiscuous mode [ 116.651186][ T8528] veth0_macvtap: entered promiscuous mode [ 116.655424][ T8528] veth1_macvtap: entered promiscuous mode [ 116.665105][ T8528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.676325][ T8528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.680617][ T8528] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.684006][ T8528] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.687944][ T8528] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.691311][ T8528] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.727484][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.730454][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.745617][ T1191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.748074][ T1191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.757593][ T1146] Bluetooth: Error in BCSP hdr checksum [ 116.759138][ T8564] cgroup: Name too long [ 118.804513][ T5286] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 118.804540][ T5939] Bluetooth: hci4: command 0x1003 tx timeout [ 118.904629][ T8570] netlink: 'syz.2.737': attribute type 3 has an invalid length. [ 118.907067][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 119.087630][ T1142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.251924][ T40] audit: type=1400 audit(1748301045.979:704): avc: denied { bind } for pid=8572 comm="syz.2.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.262034][ T40] audit: type=1400 audit(1748301045.989:705): avc: denied { setopt } for pid=8572 comm="syz.2.738" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.271433][ T40] audit: type=1400 audit(1748301045.989:706): avc: denied { write } for pid=8572 comm="syz.2.738" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.282347][ T40] audit: type=1400 audit(1748301045.989:707): avc: denied { connect } for pid=8572 comm="syz.2.738" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.291877][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.297504][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.301029][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.304024][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.306851][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.413451][ T8576] chnl_net:caif_netlink_parms(): no params data found [ 120.449648][ T8582] netlink: 9 bytes leftover after parsing attributes in process `syz.2.739'. [ 120.453544][ T8583] netlink: 5 bytes leftover after parsing attributes in process `syz.2.739'. [ 120.460898][ T8582] gretap0: entered promiscuous mode [ 120.480215][ T8583] 0ªX¹¦D: renamed from gretap0 [ 120.484793][ T8583] 0ªX¹¦D: left promiscuous mode [ 120.486727][ T8583] 0ªX¹¦D: entered allmulticast mode [ 120.490611][ T8583] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 120.516750][ T8576] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.519095][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.521425][ T8576] bridge_slave_0: entered allmulticast mode [ 120.524099][ T8576] bridge_slave_0: entered promiscuous mode [ 120.528188][ T8576] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.530496][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.533240][ T8576] bridge_slave_1: entered allmulticast mode [ 120.536880][ T8576] bridge_slave_1: entered promiscuous mode [ 120.547674][ T8589] netlink: 10 bytes leftover after parsing attributes in process `syz.2.740'. [ 120.576263][ T8576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.581356][ T8576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.618977][ T8576] team0: Port device team_slave_0 added [ 120.627142][ T8576] team0: Port device team_slave_1 added [ 120.662840][ T8576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.665221][ T8576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.673692][ T8576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.678161][ T8576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.680531][ T8576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.688974][ T8576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.730767][ T8576] hsr_slave_0: entered promiscuous mode [ 120.733181][ T8576] hsr_slave_1: entered promiscuous mode [ 120.736871][ T8576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.740277][ T8576] Cannot create hsr debugfs directory [ 120.800724][ T8594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.849197][ T1142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.936704][ T1142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.942116][ T8600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58480 sclass=netlink_route_socket pid=8600 comm=syz.2.745 [ 121.013067][ T1142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.179842][ T1142] bridge_slave_1: left allmulticast mode [ 121.181669][ T1142] bridge_slave_1: left promiscuous mode [ 121.183535][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.188805][ T1142] bridge_slave_0: left allmulticast mode [ 121.191412][ T1142] bridge_slave_0: left promiscuous mode [ 121.194101][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.444067][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.448495][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.452026][ T1142] bond0 (unregistering): Released all slaves [ 121.828602][ T1142] hsr_slave_0: left promiscuous mode [ 121.832198][ T1142] hsr_slave_1: left promiscuous mode [ 121.834251][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.836832][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.839505][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.841871][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.866662][ T1142] veth1_macvtap: left promiscuous mode [ 121.868447][ T1142] veth0_macvtap: left promiscuous mode [ 121.870282][ T1142] veth1_vlan: left promiscuous mode [ 121.871959][ T1142] veth0_vlan: left promiscuous mode [ 122.337409][ T5286] Bluetooth: hci0: command tx timeout [ 122.458633][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 122.522280][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 123.021768][ T8576] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 123.027301][ T8576] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 123.031447][ T8576] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 123.035428][ T8576] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 123.072227][ T8576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.084071][ T8576] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.097386][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.099901][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.112058][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.114327][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.233237][ T8576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.260413][ T8576] veth0_vlan: entered promiscuous mode [ 123.265865][ T8576] veth1_vlan: entered promiscuous mode [ 123.279782][ T8576] veth0_macvtap: entered promiscuous mode [ 123.283615][ T8576] veth1_macvtap: entered promiscuous mode [ 123.292805][ T8576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.298378][ T8576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.302715][ T8576] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.307721][ T8576] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.311115][ T8576] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.315091][ T8576] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.349839][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.352402][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.367601][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.370065][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.261348][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.271112][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.274017][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.278417][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.280861][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.373827][ T8621] chnl_net:caif_netlink_parms(): no params data found [ 125.408812][ T8627] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 125.444890][ T8621] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.447196][ T8621] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.450320][ T8621] bridge_slave_0: entered allmulticast mode [ 125.453234][ T8621] bridge_slave_0: entered promiscuous mode [ 125.457256][ T8621] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.459509][ T8621] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.461710][ T8621] bridge_slave_1: entered allmulticast mode [ 125.464321][ T8621] bridge_slave_1: entered promiscuous mode [ 125.497846][ T8634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.752'. [ 125.498470][ T8621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.506118][ T8621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.563759][ T8621] team0: Port device team_slave_0 added [ 125.582194][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.589794][ T8621] team0: Port device team_slave_1 added [ 125.625572][ T8621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.628180][ T8621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.636430][ T8621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.640611][ T8621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.642789][ T8621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.650760][ T8621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.660046][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.753'. [ 125.691387][ T8621] hsr_slave_0: entered promiscuous mode [ 125.693592][ T8621] hsr_slave_1: entered promiscuous mode [ 125.830297][ T8621] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 125.835113][ T8621] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 125.840826][ T8621] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 125.845928][ T8621] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 125.860205][ T8621] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.862972][ T8621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.866036][ T8621] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.868802][ T8621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.899450][ T8621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.907639][ T1191] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.912074][ T1191] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.925294][ T8621] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.932947][ T1191] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.935252][ T1191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.941706][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.944067][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.059885][ T8621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.190970][ T8621] veth0_vlan: entered promiscuous mode [ 126.198926][ T8621] veth1_vlan: entered promiscuous mode [ 126.212528][ T8621] veth0_macvtap: entered promiscuous mode [ 126.216242][ T8621] veth1_macvtap: entered promiscuous mode [ 126.225234][ T8621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.233354][ T8621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.238129][ T8621] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.240903][ T8621] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.243613][ T8621] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.246744][ T8621] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.283739][ T1191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.288947][ T1191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.301117][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.303595][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.743344][ T40] audit: type=1400 audit(1748301052.469:708): avc: denied { lock } for pid=8650 comm="syz.5.748" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 126.770981][ T40] audit: type=1400 audit(1748301052.499:709): avc: denied { associate } for pid=8650 comm="syz.5.748" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 126.778668][ T40] audit: type=1400 audit(1748301052.509:710): avc: denied { append } for pid=8650 comm="syz.5.748" name="cpuset.effective_cpus" dev="9p" ino=35913963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.798512][ T40] audit: type=1400 audit(1748301052.529:711): avc: denied { ioctl } for pid=8649 comm="syz.2.754" path="socket:[34494]" dev="sockfs" ino=34494 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 126.810181][ T40] audit: type=1400 audit(1748301052.539:712): avc: denied { lock } for pid=8650 comm="syz.5.748" path="/0/file0/cpuset.effective_cpus" dev="9p" ino=35913963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.862226][ T8658] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 126.867401][ T40] audit: type=1400 audit(1748301052.599:713): avc: denied { watch_reads } for pid=8657 comm="syz.2.755" path=2F3235362F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=1376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 126.887896][ T5286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.891884][ T5286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.895265][ T5286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 126.901430][ T5286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 126.906646][ T5286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.041492][ T8659] chnl_net:caif_netlink_parms(): no params data found [ 127.113562][ T8659] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.116058][ T8659] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.118355][ T8659] bridge_slave_0: entered allmulticast mode [ 127.121177][ T8659] bridge_slave_0: entered promiscuous mode [ 127.128314][ T8659] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.130642][ T8659] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.132921][ T8659] bridge_slave_1: entered allmulticast mode [ 127.136821][ T8659] bridge_slave_1: entered promiscuous mode [ 127.167357][ T8659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.171729][ T8659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.212984][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.222288][ T8659] team0: Port device team_slave_0 added [ 127.227172][ T8659] team0: Port device team_slave_1 added [ 127.263286][ T8659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.265608][ T8659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.273339][ T8659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.289190][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.296056][ T8659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.298270][ T8659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.308255][ T8659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.350107][ T8659] hsr_slave_0: entered promiscuous mode [ 127.352709][ T8659] hsr_slave_1: entered promiscuous mode [ 127.355077][ T8659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.357371][ T8659] Cannot create hsr debugfs directory [ 127.367947][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.374662][ T5286] Bluetooth: hci0: command tx timeout [ 127.496175][ T8675] netlink: 108 bytes leftover after parsing attributes in process `syz.5.757'. [ 127.566156][ T13] bridge_slave_1: left allmulticast mode [ 127.567949][ T13] bridge_slave_1: left promiscuous mode [ 127.569861][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.573782][ T13] bridge_slave_0: left allmulticast mode [ 127.576099][ T13] bridge_slave_0: left promiscuous mode [ 127.577918][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.593511][ T13] ================================================================== [ 127.596940][ T13] BUG: KASAN: global-out-of-bounds in fib6_ifdown+0x7f5/0x8f0 [ 127.600016][ T13] Read of size 8 at addr ffffffff9af9f5b0 by task kworker/u32:1/13 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 127.604670][ T13] [ 127.605721][ T13] CPU: 2 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 127.605743][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.605756][ T13] Workqueue: netns cleanup_net [ 127.605783][ T13] Call Trace: [ 127.605789][ T13] [ 127.605796][ T13] dump_stack_lvl+0x116/0x1f0 [ 127.605824][ T13] print_report+0xc3/0x670 [ 127.605862][ T13] ? __virt_addr_valid+0x5e/0x590 [ 127.605888][ T13] ? __phys_addr+0xc6/0x150 [ 127.605912][ T13] ? fib6_ifdown+0x7f5/0x8f0 [ 127.605931][ T13] kasan_report+0xe0/0x110 [ 127.605949][ T13] ? fib6_ifdown+0x7f5/0x8f0 [ 127.605971][ T13] fib6_ifdown+0x7f5/0x8f0 [ 127.605989][ T13] ? __lock_acquire+0x5ca/0x1ba0 [ 127.606017][ T13] ? __pfx_fib6_ifdown+0x10/0x10 [ 127.606036][ T13] fib6_clean_node+0x2a4/0x5b0 [ 127.606062][ T13] ? __pfx_fib6_clean_node+0x10/0x10 [ 127.606087][ T13] fib6_walk_continue+0x44f/0x8d0 [ 127.606116][ T13] fib6_walk+0x182/0x370 [ 127.606133][ T13] ? __pfx_fib6_ifdown+0x10/0x10 [ 127.606151][ T13] fib6_clean_tree+0xd4/0x110 [ 127.606167][ T13] ? __pfx_fib6_clean_tree+0x10/0x10 [ 127.606183][ T13] ? __lock_acquire+0xaa4/0x1ba0 [ 127.606210][ T13] ? __pfx_fib6_clean_node+0x10/0x10 [ 127.606229][ T13] ? __pfx_fib6_ifdown+0x10/0x10 [ 127.606251][ T13] ? __pfx_fib6_ifdown+0x10/0x10 [ 127.606269][ T13] __fib6_clean_all+0x107/0x2d0 [ 127.606289][ T13] rt6_disable_ip+0x2ec/0x990 [ 127.606313][ T13] ? __mutex_trylock_common+0xe9/0x250 [ 127.606341][ T13] ? __pfx___mutex_trylock_common+0x10/0x10 [ 127.606369][ T13] ? __pfx_rt6_disable_ip+0x10/0x10 [ 127.606395][ T13] ? rcu_is_watching+0x12/0xc0 [ 127.606417][ T13] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 127.606440][ T13] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 127.606468][ T13] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 127.606494][ T13] addrconf_notify+0x220/0x19e0 [ 127.606516][ T13] ? ip6mr_device_event+0x1bc/0x230 [ 127.606543][ T13] notifier_call_chain+0xbc/0x410 [ 127.606565][ T13] ? __pfx_addrconf_notify+0x10/0x10 [ 127.606587][ T13] call_netdevice_notifiers_info+0xbe/0x140 [ 127.606612][ T13] dev_close_many+0x319/0x630 [ 127.606638][ T13] ? __pfx_dev_close_many+0x10/0x10 [ 127.606665][ T13] unregister_netdevice_many_notify+0x578/0x26f0 [ 127.606687][ T13] ? __lock_acquire+0x5ca/0x1ba0 [ 127.606715][ T13] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 127.606738][ T13] ? unregister_netdevice_queue+0x22e/0x3f0 [ 127.606760][ T13] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 127.606781][ T13] ? find_held_lock+0x2b/0x80 [ 127.606801][ T13] ? bond_net_exit_batch_rtnl+0x138/0x430 [ 127.606824][ T13] ? __pfx_nexthop_net_exit_batch_rtnl+0x10/0x10 [ 127.606846][ T13] ? mutex_is_locked+0x17/0x60 [ 127.606862][ T13] ? nexthop_net_exit_batch_rtnl+0x1c6/0x290 [ 127.606884][ T13] cleanup_net+0x596/0xb30 [ 127.606917][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 127.606941][ T13] ? rcu_is_watching+0x12/0xc0 [ 127.606962][ T13] process_one_work+0x9cf/0x1b70 [ 127.606987][ T13] ? __pfx_process_one_work+0x10/0x10 [ 127.607009][ T13] ? assign_work+0x1a0/0x250 [ 127.607026][ T13] worker_thread+0x6c8/0xf10 [ 127.607054][ T13] ? __pfx_worker_thread+0x10/0x10 [ 127.607072][ T13] kthread+0x3c2/0x780 [ 127.607088][ T13] ? __pfx_kthread+0x10/0x10 [ 127.607104][ T13] ? __pfx_kthread+0x10/0x10 [ 127.607119][ T13] ? __pfx_kthread+0x10/0x10 [ 127.607134][ T13] ? __pfx_kthread+0x10/0x10 [ 127.607149][ T13] ? rcu_is_watching+0x12/0xc0 [ 127.607169][ T13] ? __pfx_kthread+0x10/0x10 [ 127.607186][ T13] ret_from_fork+0x45/0x80 [ 127.607202][ T13] ? __pfx_kthread+0x10/0x10 [ 127.607219][ T13] ret_from_fork_asm+0x1a/0x30 [ 127.607248][ T13] [ 127.607254][ T13] [ 127.611573][ T40] audit: type=1400 audit(1748301053.339:714): avc: denied { search } for pid=8676 comm="syz.5.759" name="/" dev="configfs" ino=3089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.615405][ T13] The buggy address belongs to the variable: [ 127.615413][ T13] __key.0+0x30/0x40 [ 127.615427][ T13] [ 127.615430][ T13] The buggy address belongs to the physical page: [ 127.615435][ T13] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1af9f [ 127.615445][ T13] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 127.615460][ T13] raw: 00fff00000002000 ffffea00006be7c8 ffffea00006be7c8 0000000000000000 [ 127.615470][ T13] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 127.615476][ T13] page dumped because: kasan: bad access detected [ 127.615481][ T13] page_owner info is not present (never set?) [ 127.615485][ T13] [ 127.615487][ T13] Memory state around the buggy address: [ 127.615492][ T13] ffffffff9af9f480: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 127.615500][ T13] ffffffff9af9f500: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 127.615507][ T13] >ffffffff9af9f580: 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 127.615513][ T13] ^ [ 127.615519][ T13] ffffffff9af9f600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f9 [ 127.615526][ T13] ffffffff9af9f680: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 127.615532][ T13] ================================================================== [ 127.615602][ T13] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 127.615615][ T13] CPU: 2 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 127.615638][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.615650][ T13] Workqueue: netns cleanup_net [ 127.615679][ T13] Call Trace: [ 127.615686][ T13] [ 127.615693][ T13] dump_stack_lvl+0x3d/0x1f0 [ 127.615718][ T13] panic+0x71c/0x800 [ 127.615744][ T13] ? __pfx_panic+0x10/0x10 [ 127.615768][ T13] ? mark_held_locks+0x49/0x80 [ 127.615796][ T13] ? fib6_ifdown+0x7f5/0x8f0 [ 127.615818][ T13] ? check_panic_on_warn+0x1f/0xb0 [ 127.615833][ T13] ? fib6_ifdown+0x7f5/0x8f0 [ 127.615844][ T13] check_panic_on_warn+0xab/0xb0 [ 127.615854][ T13] end_report+0x107/0x170 [ 127.615866][ T13] kasan_report+0xee/0x110 [ 127.615877][ T13] ? fib6_ifdown+0x7f5/0x8f0 [ 127.615890][ T13] fib6_ifdown+0x7f5/0x8f0 [ 127.615902][ T13] ? __lock_acquire+0x5ca/0x1ba0 [ 127.615918][ T13] ? __pfx_fib6_ifdown+0x10/0x10 [ 127.615930][ T13] fib6_clean_node+0x2a4/0x5b0 [ 127.615944][ T13] ? __pfx_fib6_clean_node+0x10/0x10 [ 127.615959][ T13] fib6_walk_continue+0x44f/0x8d0 [ 127.615978][ T13] fib6_walk+0x182/0x370 [ 127.615988][ T13] ? __pfx_fib6_ifdown+0x10/0x10 [ 127.616000][ T13] fib6_clean_tree+0xd4/0x110 [ 127.616010][ T13] ? __pfx_fib6_clean_tree+0x10/0x10 [ 127.616020][ T13] ? __lock_acquire+0xaa4/0x1ba0 [ 127.616037][ T13] ? __pfx_fib6_clean_node+0x10/0x10 [ 127.616053][ T13] ? __pfx_fib6_ifdown+0x10/0x10 [ 127.616067][ T13] ? __pfx_fib6_ifdown+0x10/0x10 [ 127.616078][ T13] __fib6_clean_all+0x107/0x2d0 [ 127.616091][ T13] rt6_disable_ip+0x2ec/0x990 [ 127.616107][ T13] ? __mutex_trylock_common+0xe9/0x250 [ 127.616124][ T13] ? __pfx___mutex_trylock_common+0x10/0x10 [ 127.616142][ T13] ? __pfx_rt6_disable_ip+0x10/0x10 [ 127.616159][ T13] ? rcu_is_watching+0x12/0xc0 [ 127.616173][ T13] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 127.616188][ T13] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 127.616205][ T13] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 127.616221][ T13] addrconf_notify+0x220/0x19e0 [ 127.616235][ T13] ? ip6mr_device_event+0x1bc/0x230 [ 127.616252][ T13] notifier_call_chain+0xbc/0x410 [ 127.616268][ T13] ? __pfx_addrconf_notify+0x10/0x10 [ 127.616284][ T13] call_netdevice_notifiers_info+0xbe/0x140 [ 127.616302][ T13] dev_close_many+0x319/0x630 [ 127.616318][ T13] ? __pfx_dev_close_many+0x10/0x10 [ 127.616336][ T13] unregister_netdevice_many_notify+0x578/0x26f0 [ 127.616351][ T13] ? __lock_acquire+0x5ca/0x1ba0 [ 127.616368][ T13] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 127.616384][ T13] ? unregister_netdevice_queue+0x22e/0x3f0 [ 127.616398][ T13] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 127.616412][ T13] ? find_held_lock+0x2b/0x80 [ 127.616426][ T13] ? bond_net_exit_batch_rtnl+0x138/0x430 [ 127.616440][ T13] ? __pfx_nexthop_net_exit_batch_rtnl+0x10/0x10 [ 127.616454][ T13] ? mutex_is_locked+0x17/0x60 [ 127.616464][ T13] ? nexthop_net_exit_batch_rtnl+0x1c6/0x290 [ 127.616478][ T13] cleanup_net+0x596/0xb30 [ 127.616493][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 127.616508][ T13] ? rcu_is_watching+0x12/0xc0 [ 127.616522][ T13] process_one_work+0x9cf/0x1b70 [ 127.616536][ T13] ? __pfx_process_one_work+0x10/0x10 [ 127.616551][ T13] ? assign_work+0x1a0/0x250 [ 127.616562][ T13] worker_thread+0x6c8/0xf10 [ 127.616577][ T13] ? __pfx_worker_thread+0x10/0x10 [ 127.616588][ T13] kthread+0x3c2/0x780 [ 127.616599][ T13] ? __pfx_kthread+0x10/0x10 [ 127.616608][ T13] ? __pfx_kthread+0x10/0x10 [ 127.616618][ T13] ? __pfx_kthread+0x10/0x10 [ 127.616628][ T13] ? __pfx_kthread+0x10/0x10 [ 127.616638][ T13] ? rcu_is_watching+0x12/0xc0 [ 127.616650][ T13] ? __pfx_kthread+0x10/0x10 [ 127.616661][ T13] ret_from_fork+0x45/0x80 [ 127.616672][ T13] ? __pfx_kthread+0x10/0x10 [ 127.616682][ T13] ret_from_fork_asm+0x1a/0x30 [ 127.616702][ T13] [ 127.617676][ T13] Kernel Offset: disabled VM DIAGNOSIS: 23:10:53 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000007 RBX=ffff888028d62f30 RCX=0000000000000000 RDX=0000000000000000 RSI=ffff888028d62f30 RDI=ffff888028d62440 RBP=ffff888028d62f30 RSP=ffffc900037d7590 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=ffffffff8e3bfc00 R12=0000000000000005 R13=0000000000000000 R14=ffff888028d62440 R15=0000000000000000 RIP=ffffffff81980902 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c25a089 CR3=0000000060541000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000004144 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe38769e40 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab23811a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab23811a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab23811a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab23811aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab23811b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab23811c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000b 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000036c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000b 0000000000000000 0000000000000000 000000000000036c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=000000000005c077 RCX=ffffffff8206bd75 RDX=ffff888025ce0000 RSI=ffffffff8206bdab RDI=0000000000000006 RBP=000000000005c077 RSP=ffffc9000413f798 R8 =0000000000000006 R9 =000000000017ffff R10=000000000005c077 R11=0000000000000000 R12=1ffff92000827ef4 R13=ffffea0001701dc0 R14=0000555557e19000 R15=0000000000000000 RIP=ffffffff81bb4631 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ada000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fae50ee7d60 CR3=000000002ba80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae503836a3 00007fae503836a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc851bee90 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555557a3a38c 0000555557a3a170 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555557a542fd 0000555557a51c10 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0410000590030010 0005800300100004 f00300100004e003 0fffffffffffff04 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0104800418868398 a008000100000008 0606011fe0041000 05b00300100005a0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0304100005900300 1000058003001000 04f00300100004e0 030fffffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0404d00300100004 c0030ffe80800404 b00301e4c0800404 a003001000049003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01c0100004800352 100001cce6c399cc e6b399cd04010000 080806060107f464 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000062 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854fb535 RDI=ffffffff9adfe5a0 RBP=ffffffff9adfe560 RSP=ffffc90000106d50 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3966666666666666 R12=0000000000000000 R13=0000000000000062 R14=ffffffff9adfe560 R15=ffffffff854fb4d0 RIP=ffffffff854fb55f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fae510b4ff8 CR3=0000000029ec1000 CR4=00352ef0 DR0=0000000000000008 DR1=00000000000000ff DR2=fffffffffffffffb DR3=3e00000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f6186ff600 000055f6186ff600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffcb9f5f60 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6567646972622831 2074726f70203a30 656764697262205d 3331542020205b5d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746361706d692064 6c756f6320686369 6877203272657961 6c206e6f20646574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e656d6761726620 6562206c6c697720 656361667265746e 6920736968742072 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65766f20676e696f 67207374656b6361 50202e7374656b63 6170207664612d6e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616d74616220666f 2074726f70736e61 7274206568742065 6c646e6168206f74 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001065bd RBX=0000000000000003 RCX=ffffffff8b6d4419 RDX=0000000000000000 RSI=ffffffff8dbe444d RDI=ffffffff8bf4a460 RBP=ffffed1003bda000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801ded0000 R14=ffffffff90853110 R15=0000000000000000 RIP=ffffffff8b6d2caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe38768f40 CR3=0000000021989000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f20611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f20611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f20611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f20611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f20611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f20611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0622be437712c53e 93b9f1e8728370bf 3cb3486e63e772d7 f3a22482dabb339f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030656c69662f30 656c69662f2f38d3 80e8f6f2cbf90004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c53e93b9f1e87283 70bf3cb3486e63e7 72d7f3a22482dabb 339f3c035440bd0d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000