last executing test programs: 11.525543994s ago: executing program 1 (id=305): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c10000000000000000000", 0x58}], 0x1) sendmmsg$sock(r0, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x500}}], 0x1, 0x20000001) recvfrom$inet(r0, 0x0, 0x0, 0x100, 0x0, 0x0) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc) 10.664109844s ago: executing program 1 (id=308): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0xd) io_setup(0x8, &(0x7f0000004200)) io_setup(0x3, &(0x7f0000000240)) io_setup(0x3083, &(0x7f0000000080)) io_setup(0xa, &(0x7f0000000040)) io_setup(0x8, &(0x7f00000001c0)) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_format(r1, &(0x7f0000000100)='0\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$IOMMU_VFIO_GET_API_VERSION(r1, 0x3b64) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x80000000}, &(0x7f0000000380)=0x8) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35b", 0x6) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000003c0)={r2, 0xb9fd}, &(0x7f0000000400)=0x8) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) listen(r3, 0x9) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b000000080003ec9cf0138adc1715b22dfa3a", @ANYRES32=r8, @ANYBLOB="25003300d0000000080211000001080211000000505050505050d00003"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) 10.510875479s ago: executing program 1 (id=309): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) close(0x3) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, 0x0, 0x4}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x30, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x314b1af5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2d2, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0xc, 0x0, 0x2, 0x1, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @func, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @alu={0x7, 0x1, 0xc, 0xd, 0xb, 0x0, 0x8}, @generic={0x2, 0x2, 0xd, 0x77, 0xfffffff7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x2d, 0x49, &(0x7f0000000240)=""/73, 0x41100, 0xa9, '\x00', r1, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x9, 0xb, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 10.510119786s ago: executing program 1 (id=311): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) r1 = getpid() r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x6, &(0x7f00000000c0)={0x1d, 0x5d7}) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000080)={r0, r0, 0xb}) r3 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r4, 0x80045626, &(0x7f0000000400)) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) 10.414697836s ago: executing program 1 (id=313): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x6c, 0x200, 0x100, 0x0, 0x1d0, 0x2e8, 0x2e8, 0x1d0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x3}, {0x1, 0x5, 0x3}, 0x6, 0x9}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xff000000, 0x0, 0xff], [], 'ip6_vti0\x00', 'wg0\x00', {}, {}, 0x2f, 0x0, 0x0, 0x72}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) 10.05519926s ago: executing program 1 (id=319): r0 = socket$kcm(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x3}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7fffffff}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="170000000000000001000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="d40000001b0001000000000000000000fc000000000000000000000000000000fe88000000000000000000000000000100000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000c001500000000000000000008001f000000000008ae77ea54b053e140e304a956bdc299b939a6bf1e4fc611e453ca209ffaef54fd91bdba6dec92daae34215e93a7f71eba63393bd850f3cd38d0b053c6d32fbdd6d6bf000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd607f00ef00042f0000000000000000000000000000000000ffa7c300000000000000000000000001000088be00089078"], 0x0) 10.026083922s ago: executing program 32 (id=319): r0 = socket$kcm(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x3}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7fffffff}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="170000000000000001000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="d40000001b0001000000000000000000fc000000000000000000000000000000fe88000000000000000000000000000100000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000c001500000000000000000008001f000000000008ae77ea54b053e140e304a956bdc299b939a6bf1e4fc611e453ca209ffaef54fd91bdba6dec92daae34215e93a7f71eba63393bd850f3cd38d0b053c6d32fbdd6d6bf000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd607f00ef00042f0000000000000000000000000000000000ffa7c300000000000000000000000001000088be00089078"], 0x0) 2.158655323s ago: executing program 4 (id=483): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r0, r0, 0x0, 0x40008) 1.954496882s ago: executing program 4 (id=484): r0 = socket$inet6(0xa, 0x3, 0x7) io_setup(0x10000, &(0x7f0000000000)) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) setresuid(0x0, 0xee01, 0xee00) setrlimit(0x2, &(0x7f0000000000)={0x800000002, 0x108d96}) r1 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000877000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) mq_open(&(0x7f0000000040)='[/*[/\x00', 0x1, 0x104, &(0x7f00000000c0)={0xc, 0x4, 0x45, 0x7}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040), 0x4) sendto$inet6(r2, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000240)={@mcast1, 0x10, 0x1, 0x0, 0x0, 0x4, 0x4}, 0x20) clock_gettime(0x0, &(0x7f0000005a80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005880)=[{{&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000240)}, {&(0x7f0000000280)=""/127, 0x7f}, {&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f00000003c0)=""/125, 0x7d}, {&(0x7f0000000440)=""/51, 0x33}, {&(0x7f0000000480)=""/77, 0x4d}], 0x7, &(0x7f00000005c0)=""/16, 0x10}, 0xb81}, {{&(0x7f0000000600)=@tipc=@name, 0x80, &(0x7f0000000900)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000000680)=""/85, 0x55}, {&(0x7f0000000700)=""/109, 0x6d}, {&(0x7f0000000780)=""/147, 0x93}, {&(0x7f0000000840)=""/102, 0x66}, {&(0x7f00000008c0)=""/38, 0x26}], 0x7}, 0x9}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/147, 0x93}], 0x1, &(0x7f0000000a80)=""/58, 0x3a}, 0x5}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/236, 0xec}, {&(0x7f0000000bc0)=""/46, 0x2e}, {&(0x7f0000000c00)=""/22, 0x16}, {&(0x7f0000000c40)=""/29, 0x1d}, {&(0x7f0000000c80)=""/172, 0xac}, {&(0x7f0000000d40)=""/152, 0x98}, {&(0x7f0000000e00)=""/164, 0xa4}, {&(0x7f0000000ec0)=""/216, 0xd8}], 0x8, &(0x7f0000001040)=""/209, 0xd1}, 0x6aca}, {{&(0x7f0000001140)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000012c0)=[{&(0x7f00000011c0)=""/197, 0xc5}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/238, 0xee}], 0x3, &(0x7f0000002540)=""/134, 0x86}, 0x9}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000001300)=""/63, 0x3f}, {&(0x7f0000002600)=""/23, 0x17}, {&(0x7f0000003740)=""/211, 0xd3}, {&(0x7f0000002640)=""/147, 0x93}], 0x4, &(0x7f0000003880)=""/158, 0x9e}, 0x6}, {{&(0x7f00000039c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000004080)=[{&(0x7f0000003a40)=""/156, 0x9c}, {&(0x7f0000003b00)=""/222, 0xde}, {&(0x7f0000003c00)=""/124, 0x7c}, {&(0x7f0000003c80)=""/132, 0x84}, {&(0x7f0000003d40)=""/151, 0x97}, {&(0x7f0000003e00)=""/199, 0xc7}, {&(0x7f0000003f00)=""/188, 0xbc}, {&(0x7f0000003fc0)=""/177, 0xb1}], 0x8, &(0x7f0000004100)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000005100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000005740)=[{&(0x7f0000003940)=""/61, 0x3d}, {&(0x7f0000005180)=""/169, 0xa9}, {&(0x7f0000005240)=""/255, 0xff}, {&(0x7f0000005340)=""/157, 0x9d}, {&(0x7f0000005400)=""/161, 0xa1}, {&(0x7f00000054c0)=""/237, 0xed}, {&(0x7f00000055c0)=""/125, 0x7d}, {&(0x7f0000005640)=""/244, 0xf4}], 0x8, &(0x7f00000057c0)=""/177, 0xb1}}], 0x8, 0x0, &(0x7f0000005ac0)={r4, r5+10000000}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001340)="cb75c73a02d0cf76f049a9e91a3638c9e6cf51594ca6c8b6f65c14f5bfbea339b9b931033431640e", 0x28}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000000001000008000000fbffffff723b2bb1d58e7ffdff030000"], 0x20}}], 0x1, 0x0) 982.528659ms ago: executing program 4 (id=511): r0 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0) pread64(r2, &(0x7f00000003c0)=""/214, 0xd6, 0x5) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={{r0}, 0x1d, 0x1, 0x51d}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x8001, 0xcc, 0x3, 0x1}, {0x8001, 0x7, 0x3, 0x72}, {0x1000, 0x0, 0x8, 0x25}]}, 0x10) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x1001, 0x0, 0x2}, 0xd, 0x0) landlock_restrict_self(r5, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r3, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) 981.609976ms ago: executing program 3 (id=512): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000000) 981.243966ms ago: executing program 4 (id=513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8a003, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x6, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0xe3, 0x7}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x890) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x203, 0x70bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x1, 0x2}, {0x1}}}, 0x24}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) syz_io_uring_setup(0x550a, &(0x7f0000000500)={0x0, 0x8000, 0x400}, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r7, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) 930.744813ms ago: executing program 3 (id=514): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x6, 0x0, @val=@iter={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x6, 0x0, @val=@tracing}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) 930.413942ms ago: executing program 3 (id=515): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x80042, 0x4, 0x2}, 0x10) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x80000000, 0x719627e6, 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000280)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000340)={'some', 0x20, 0x1, 0x20, 0x8}, 0x2f) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) close(r0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000040)={"c89bae93f273e67f779486778f123b7e", 0x0, 0x0, {0x8, 0x7}, {0x1, 0x96}, 0x8, [0x6, 0xffffffffffffffff, 0x1, 0x42f1, 0x4, 0x7ff, 0x4, 0x9dbd, 0x8001, 0x1, 0x3, 0x8, 0x3, 0xffffffffffffffff, 0x3, 0x5]}) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000001400)={0x79, 0xe, 0x6, 0x4, 0x6, "17648834196e6f83a8d436a1829f6493360d53"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000400)={{r0}, r5, 0x0, @inherit={0x60, &(0x7f00000001c0)={0x1, 0x3, 0x2, 0xf93d, {0x8, 0x6, 0xb2, 0xffff, 0x6}, [0x8a3, 0x5, 0x8000000000000000]}}, @name="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"}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000040)=0x4000000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x8, @empty, 0x9}}, 0xffff85e0, 0x0, 0x10403, 0x4, 0x22}, 0x9c) mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000380)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x200000, &(0x7f0000000300)='trans=rdma,') 664.018387ms ago: executing program 3 (id=516): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@my=0x1}, @any, 0x0, 0x0, 0x400005}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7aa, &(0x7f0000000000)={{@my=0x1}, @local}) socket$inet(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000600)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES64=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) syz_pidfd_open(0x0, 0x0) inotify_init1(0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r5 = fsopen(0x0, 0x0) fsmount(r5, 0x0, 0x0) creat(0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x7363) 663.525334ms ago: executing program 4 (id=517): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 662.842943ms ago: executing program 3 (id=518): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$nl_route(0x10, 0x3, 0x0) 614.887191ms ago: executing program 4 (id=519): syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$SIOCSIFHWADDR(r0, 0x4004550e, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x14dc02, 0x0) r2 = dup(r1) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000240)) accept$unix(r2, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e) r3 = socket(0x40000000015, 0x5, 0x0) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x1, 0x1}, 0x6) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x4, 0x4, @thr={&(0x7f0000000280)="8c6a690bf70ada4ee2c62a3a842e0c0ab731d72cecc7570d4ff0c7dda7cb8d4d203e54a032333a6939a53b608c7ab4403d732c799a322886a8ed148b30974e7c67fcf9a488338515ab6636a345daf605eaa9069a9cb830fda6e78b33baedab5319817797e0305b4f9da3c066b4d06fd3254a371afddec60baaea12daf47350e44e7398fbabf1db1000d7b643717ca979d51dc5fe4b1eb57f688a7413097b6c63aabdac3e642d1368f9be", &(0x7f0000000800)="a2a8be05c00a4787011a81d28b259e4a2efba5f862dcfb6164979682735d25009ca7fb9963b4754d92ac095759596ea9076f4b5053e6463236684365609cfa1f84ac17b92e47e820fbcbb5af1d2ae2a93f462ad7542c4e8f2113d15660bb18bc18f11219a34625c824e864a784220b71d69208cb58e4c922f663999418879ff7643d1d08e9a338d5f6546fe8fb55e06841d76237a83780cde5ad26190e03511115e787d620b9ac84872f21b65b8e0c0f6b6281b6b5d3fffa54ed430d5e773864d9613009a54dc1bfe3dbc3312549800c04167656fc3ccc495b00bd370a8864200da3274424bef7ab64d22489642aca09c015f5f20892bd6e35a4b747275f8b8511d01684e7aa6342452005e58d2d66f2893f89bfe282330092cc55fd6bd7794d6028a0b8d247fb00591ca10d53f010d2feb135f275d7473b8302f565ffd5d2e45f7b56362d6740ce67928b5f0e73012c858e4fadd207ccbfff6e07eb0699902d403b0079bae126797f1882b34e41195af239c2c6eb0962a32130827dcb0e021d8bd0c1c090ca205427f0c77ac58d68678689ae7988b02192bcf2a18cdc2f5bae3767b6d2e03b1a0e3f692778799e1ce46e939114408ac5a38e617d047d86c8903e786c38e88dffecc2acfb92fd2554e02f66af5148f9edf3f31d45fdd760a90c87b957b3ca29b6667b848766241e1394b85b1f8e411e6280deeae7cff09ace10e3b71ae09c0f2d592666a25d2eb2924672bd2430055e414472a16fa2894e941bc3f913ae091a9c31de59d700e77eb16ec1b00def2c6b43a7f2342da2e50934824fa72b0a0f3ad6925a39815eef74e8dc5fccde01f3daa6a5fc7afb841d01d0a3d544930fb81a8fced981409211a5e4be28e6346256b5438a11169bf6117442b602eed3257b6057f4502b88dcd739b80a8dd62115a6d7fd56bc6a562716c0acec149e42ddc071d11c5e72a2bfb6bfd89af5623f0bfe2ecb3c2210bf8833915b34d680ac345a6652ea8cf308022689f79f224644c41db1b0f6505b40141a9d1cb91d4d6e98f481cfe34863064053b8c9ebe4eaf000eb4af79c14a19d95697630297b40323f48eda2e9af00a0435efcaa3a72646ed0b39c0a81476a7400d567176ba7a3c7ca7dc61e252036d395ec095a983239500febd663f8319c90e2884b9ebf11e9f531ad2316a77916be91cdb013f497449a349dcda90b361181a9bd7bf9faac7650c5ab571decc5026088b283f35ae35e037692eb1a219b2f7eac6a8bf344e7c99f07aa52b69da7b323eee72246406838e148fcc29cdaf7459187b2aa1d1785e30d4e7de7a564e947ca649b18ec327a634b15e48d30d18b655da95946ec19d6f5dbfaed25a84b55a5c30ec94dec4d6e9847983ebc0a731a0e71d31128a68370e406d48f3d06d7e617d606a18204a343cbc6f74916138bd6e9efe36fae6601529bbcd13c065936053b1a1734855b9fbc0c5472c90d91304b2d041dca278ce8b2df9d565eb388cc2d42fc7225294747d257f50fc46aba11436534aaf69516e15289ed1a39a23ddf7db802b4019cdf561b3177365010a4f59161e6af2c9bc0f6abb2253643ca26d072d86faf5c4fc26cb7d1a65624ed9c8f8d35a5ead7469fb753f60d0d902f1df97a732f652a1cf9b5f5f5b9cb72edfaa9d1d45509f81ba495e89443f183d254f61478a381fc9b867de463e40129238ca2dfe4cce7656bbbc2770e73032f735c0a52cbf86f4e3d0515ff0a5832af31afb961f09cd4820c03ef3c41bdc2f995b15a9fa2eb480dc932335a91f9adab8c94c2423c3eedc64e6f184185a886681a3271fd78a9a5a248485b6392a7bbff07427b46c5c44da98fba31206840aed81cf71d23532f2ba6c2c6af2ff6a3bb080ea9d9276e57170f42e3659440efe990934e027449a68763bf81fbcb428ad864303e51811b4d6b2b31c55a974d70c024f2f954f532a544abd6d5335b1983d9d24d4c6d3ae6d8441773bb69107e9b241d4212bcc661ca91f331dfd1f0a306f8e4f4274e950b55b8b0c9dc0b9eea2766ef899473bf906622b90b103cda82c8e0be2cde8a07952161fdf59532f335299059461051a4406d7e6b59c59f207b8406ef4a95f739d07762fa4282eddf9e11028466ce576c85df83f6c94c6b281d89ba84956fa89f302a9df22be1b71667e0779451f07d0a0ca1da05b381ea7c8c9b8d1499ebbed75b2102ec8f611f513e8c95e1a85297210ad38e9b96dd28c968017e6ae290122c942740534c45369436cb32f90ee58ff0fe75f99a14e526305a3838ffa41f24ec642d1636cac0d3968813c6debe66438d9b3282f186d18266ebc03acdb5224481f94f6f6b38bf8812f970e18c5b197ab03758fe6e5fba8dc0058e5f8fd7545522fa0cc0270a13315adebd409b21d3a40697bf56558f20f83c16217776947e26d5a63f92be7a01bbefffb90caae4fc506377457db0bf624d049a8b4e7df5d69e86492a44c40a1118962d8814350c43106b6936a27ff3f777e2986a84ef7e0fa02cc28ed79e9b5e35ff6b0e0c8dd98c842043b1263878a8c51bfb69099b20f4d061d6f40645c175f9f8f08fcb0071a33e89cfcb703ff2a46129aa713cc69161b488bddf569a9e85196a872afa131b3d2fb418dd350a86809fc78ee377bf8dd128cc2feb3c470a2c27acd9e1a15332161d9c9509d05e7f2623663e4413cd213aad0951e9db11acb8f1eaa7999956c5d34698b024f63132e8ef7eb5b578ef363441e8074e674051c44eceb0ef1ff3dddac99fc9826f80a805df74e4b72271d97354bf5403ea881beab746add6466970e873587beaeb6994ad5dd572d98b59f75236373cbb5df16c2872cc9fbea8918fb29cff51da1e76a4db01bb9c266d095c5ad81bc022e66b5bfe966209ff590d84f2cf3092e447e3aed839b7c84bcd396c64941942a5ae1bceab9cfa458bc24fab729810cf555f600b6095747df67e159668dc0f0132c5b2c2df84ff3bacf5a395e8ce396740d620e70aae37f442af8f83c3dc60deb5cf60eb3e9607a70577c8af0adc346d09f0efc9f4a9b34766f53a3ff0ed79be97f65fc09e7762f2d325bb20b95bb7dce08472eed58159ec26047ce6d7ffdbc0f1784377687d2549e8ae87d5c6253f5d00e87c2678f5a906e9eec31202c62dccdfb939407c9c6888ab95e0d81c00eff2d6f5715a9d51a206e7a4fb8cb5696da8ea5624291cbf56465366e77371026d8f3a2abcabf9e9785aff4d80e5e4d5970b12012889d636e079ddc18edc016170db1777768b533aac848076ed8cabc7767024a3c1e56ac73970d4f6b135bdc70b5fc0556d7e1baf36869409b72549f9e23a131a6a7124f6c3fc912b8a58a6d34645a3b1b8aa39c21c6abf9c74b2351491c73fdf727f1c0a194601d0891c08e4201104ee4708b0599270b1a098bd7f6cb329744fb165c2ed9943126766dd7d7abc442ed7e80421c821d32f9ab61dd4411997337a22f7083f0984e63a1fb9168c17b8f5fbfec317300b08c0a73c58fd92542b9948f2a84d25cf8aa83d21d9309f5c379c3e385f64e2daac9b78b71b852652d8cee8a1294b88f83b9f3e69cfd24e1a929e1c880d189a750cbe429c1bb45909bcf77b7c81fac79a6779f32b5aaf849e1a7a92aa2e694b1b979b4e9a0131c1b674c6a093614299e783cae9e6d6ff0343605c8e376e42403912fc2eed046bf403c7bcb1c296f0e74ff52e25986ac2484abd598abe4673e093e9699b88e531c294682c0f0db7409ccb1cc4cd20668266a6760f228e4ab8d4d265133a3cedb02127c5c020bdf3a4ab9f1e32004b0a55903b0888d45b12fa366a8fc228fdcfba8d7cef09e09ac8882103cec9d22f9fec0ea9596d53612ca63f334b3476bee396766acd8755e63d591ed8117f8957473432005e1b8911e752016d3580e27c12c6a95df42dfcffd7d7c7d5aed2579970763d02325d40d776aba5741f3f1b2541ceae0f0b0be194f18a3de45eba46186341f4b709a473a1f476a3ce83563d052d21dd507ed3b4d226cad1d3c62d7c27b70221b48d6937fa31b2e4a0cf27c6769c3f6dab2db781b7542e99868d78e4a15e06d9843ef1785dbb8069424f43af0b7d405a545cbf8213957c545971abf8778a47a29dace0a29a60f2ed204c92b259cb2ef8d6cb19d107f912f145a65bc56ff9b4bb80e71b2d9ed9a2db313327ea26950438cb4f22f3467f09be33fcbb4c81a4a300d220a0c28bd48aa58bc36a3d8565b37dd6e939dfd27e36bf85341bbd92c6c8b6886fbccf5e9796ec8e8ab21746d7b3e75b74aecdeed4d4eb44809de7c0fa8d83ed8bcc1601219ff99a044989756eb28fd536ac7f38dfb6b42a5a595fd53bcde66604070aa4ab229645a505f79e15f6951f5151971cef1a452d77c0781635cd7e14edbd0c133708a57e6f3fe497addd54fa82760a6146b9ab1f3f0d909548ea5900494a408ecfefa3a545d015ff56b810957cb96df957831ad0bc426e0aba01de75cfef69b07de098ebf5bf46faa94cfd16644d7304dcfad970eb36788859cf7159335951404a394c0442d549c9dbedb7823d99ddc48fc0f2d06058bf55e9de4ef524d9e139b95f9da89d974332b3673869fe2fad79cb7056c24f908ba308cb5af3e50bc82a8b520924986f58aa42e8ef7c488f79c20242360ac18afe229c67eff0e44809e0e90b3e7b06a89bb67b870972f76c66df8a43a2c764d67929617d5ce9428a0eacde1fe9005fd118426bb237b4ee5aee47fec9fba7c52f5d3ed348f6f43bda637e6ff0877bae5a3d8adddf2a7242eabde3ebfede5451c7d9550eebe08657c24d810cec2eca5f5b32d164f7f9650b2bde31180dd302608be878404b6f193aef5a6270fb529e27f9489c2b97525d4983c18f7b4eb45e1971e7fefcca008b809c47a4b6c09aa997b1ac15c7c67b9f11b411a56ee4bfd97c2677a8d0b572f574b5f69944f80341130f643d954432abb5a6ed76b50db80e53960fcd795505e549a1c90e6bb991a35401e957d200a2260db613c13c7d97b0805ede515ffe69d697762e5265dd746a31acb19326d5323e12d78e88eaa73e3a3653293f5a7c5a2913b9f73a692fce6632a15cdedddf534523225d8ce39da51e1c1d63de0b213aa770bdb985deea588559dd7635f1bba36aa209c938535a350719951a371761cdb53f58ebde82e499e29eda3c48089ec01733d7fa2d37c1178924bf316e9f4b5dfe6d15cf8954ae537907572afd6ed66bc16bd10c4a7cb529c95f9f107e69aaab401b5597f99821cc239efd0994db51c582018bfd8e5e62e0dab62847f5ff21c7c4ea5142e194128905a99226cd60e04aeeafe1af4e1c5ec9bf8481191e3f74ba019a1e576a574ef9aece9a90b819776c6932bda5a60945297dd9cd8a4227445ad5805ef65dfb8881d985c927ba3f1780a66f753abd1358aed4c2f1019b7175cb5718f31048e7874fdcd27a86dca793e55859c133c3abc0f21ef6bd4564aa37d33850eb4ce8dfedc23e8e74c8a6c6fa9e8336ea80bbc814f5191057ff139de1ab88b3abeab24391d63cafb44c96bf21d4c421a637752125abfdb917049ec5648803a14284d94c21c2765a3c029c21d7ff4b595b5ccd534f5619a96596fd4564caa79ccf507b3a0331d7239c29ed5d931dee2bd83882f776761deb7853177fbcd81c454e0c0a7b8c2c4036e9faabecf987d2f0c8835bef6814ea90910a6719d0fa84de0a431f496ffdf0b8cc1e45b592d103855caed3b90cad121fb5988c831902ec057a625c67a3eec12e86e25109a2e36c8a91046541ba62"}}, &(0x7f0000000200)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x7) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_create(0x2, &(0x7f0000000440)={0x0, 0x38, 0x1, @thr={&(0x7f0000000380)="ac782ffa23cf9e7c3d634620df1518654c5ee0ef64ad8965779d429c6dc627a430d135f9653ce5993d7e26c5c2eb26e9cf1f", &(0x7f00000003c0)="4133d45a81cc0d8fd9f4a612194ae87e18e0a1a5f08bdd9f15f6e17e18a9ab25ffce6776f140de93be1b0dbe5b7e700912e13ab8abd5b0f6209a88b9e9cf6cb06507a3d6700a4a6c3ed4414f2b495c4716b6bb66915914f828c05bb540d30bf3"}}, &(0x7f0000000480)=0x0) clock_gettime(0x6, &(0x7f00000004c0)) recvmmsg$unix(r2, &(0x7f0000002140)=[{{&(0x7f0000000500), 0x6e, &(0x7f0000001a40)=[{&(0x7f0000000580)=""/56, 0x38}, {&(0x7f00000005c0)=""/201, 0xc9}, {&(0x7f00000006c0)=""/239, 0xef}, {&(0x7f0000001800)=""/236, 0xec}, {&(0x7f0000001900)=""/85, 0x55}, {&(0x7f0000001980)=""/133, 0x85}], 0x6, &(0x7f0000001ac0)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001b40)=@abs, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000001bc0)=""/190, 0xbe}, {&(0x7f0000001c80)=""/164, 0xa4}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/208, 0xd0}, {&(0x7f0000001e40)=""/189, 0xbd}, {&(0x7f0000001f00)=""/153, 0x99}, {&(0x7f0000001fc0)=""/192, 0xc0}, {&(0x7f0000002080)=""/37, 0x25}], 0x8}}], 0x2, 0x10041, &(0x7f00000021c0)={0x77359400}) timer_settime(r7, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r5, r6+10000000}}, 0x0) recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x10020) 614.335371ms ago: executing program 3 (id=521): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000000100)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x5) ioctl$KVM_CAP_SYNC_REGS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000001640)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x1000000, 0x0, 0x2, 0xfd, 0x0, 0x0, 0x7fffffff}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x21, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x2) getsockopt$ax25_int(r7, 0x101, 0x9, &(0x7f00000001c0), &(0x7f0000000000)=0x4) ppoll(&(0x7f0000001580)=[{r4, 0x1a}, {0xffffffffffffffff, 0x105}, {r2, 0x8220}], 0x3, &(0x7f00000015c0)={0x0, 0x989680}, &(0x7f0000001600)={[0x7]}, 0x8) r8 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r8, 0x40405514, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 'syz0\x00'}) r9 = memfd_secret(0x0) close_range(r9, 0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000200000007000000", @ANYRES32=r12, @ANYBLOB="000001008a20000014001a80100004800c000180080001"], 0x34}, 0x1, 0x0, 0x0, 0x54005}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x1d, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000002000000000000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000009d6385000023860000000964080014c0849039aeb2ed00000018116ec5c5", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085001c00860000001800000001000000000000005ed800002495bffffbffffff18680000010000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0xea, 0x1000, &(0x7f0000000400)=""/4096, 0x41000, 0x50, '\x00', r12, 0x25, r3, 0x8, &(0x7f0000001400)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001440)={0x2, 0xe, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001480)=[{0x5, 0x1, 0xc, 0x7}, {0x3, 0x3, 0x4, 0xc}, {0x1, 0x3, 0x6, 0xc}, {0x4, 0x5, 0x6, 0x1}], 0x10, 0xff, @void, @value}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r8, 0x40405515, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 'syz1\x00'}) 553.122165ms ago: executing program 2 (id=522): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x3, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) 552.470825ms ago: executing program 0 (id=524): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x6, 0x3cf, 0xe50, 0xffffffffffffffff, 0x5479, 0x103e, 0x6, 0x0, 0x32a, 0x95a9, 0x7fff, 0x1, 0x40004000009, 0x1007, 0x6a], 0x1000, 0x808d6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x370, r4, 0x10, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xca4f7595}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dvmrp0\x00'}}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x82}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2b94}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "02dc52ea7de87f2ea9135e17a28dc8e2601b193c2a60332075fb740efa51c792aef100"}}, @TIPC_NLA_NODE_ID={0xa6, 0x3, "9d2e2f8d02b7f506fc6c3d59288fbcc8ce737799aa6a0ad21bc1d401aa62498e77f7e2386ea9031a380852751030b4de31d13313b44ad22d29d778ef9a5ea63828bb557b8f58379ead8894d70990c7fec8824e135cca273e6e00b5b8f6bb5717615af24556844a28d936fba519ad493e2b7efc6128189e07d362d7910704d3618c5ec526f3d3d78f184cff5153386ab55ea114492dc46cdf98ecb6039e0ff97c98de"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "3ec59e3f5727eb52140005bb9d81f2b744e0f049d804db05f75d"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x21c7}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb91}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x370}, 0x1, 0x0, 0x0, 0x100}, 0x4) 408.534378ms ago: executing program 0 (id=525): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0xffffff5e, 0x800, 0x81, 0x7, 0x2, 0x1701719b}) lseek(r0, 0x3, 0x4) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x5}) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = io_uring_setup(0x2ad3, &(0x7f0000000140)={0x0, 0x38d9, 0x1000, 0x2, 0x311}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/224, 0xe0}, {&(0x7f00000002c0)}], 0x2) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$FUSE_GETXATTR(r3, &(0x7f00000003c0)={0x18, 0x0, 0x0, {0xc0}}, 0x18) r4 = memfd_create(&(0x7f0000000400)='/dev/cuse\x00', 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000440)={r4, 0x0, 0x100000000, 0xfffff000}) getdents(0xffffffffffffffff, &(0x7f0000000480)=""/67, 0x43) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000500)={0x3000, 0x0, 0x1}) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r6, &(0x7f0000000540)={'#! ', './file0', [{0x20, '-&[}%'}], 0xa, "21fc44b28597a98821f22746aa809648852bbe18eeacb81a12864334f499b10cdcb94954a03b51bec042ff02df9f1a593dcb972f4154d3a053e1fe3ca8563a1737fea6887fd45f8dce0e1b7651e4bd4751661dbe08ab55358a0909a5d988551743"}, 0x72) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f00000005c0)=0x5) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000640)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r7, &(0x7f00000006c0)={0xa, 0x4, 0xfa00, {r8}}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000740)={0x2, &(0x7f0000000700)=[{0x1, 0x1, 0x4, 0x1}, {0x9, 0x9, 0x3, 0x3}]}) tee(r7, r0, 0x7fff, 0xa) socket(0x10, 0x5, 0x4) ioctl$CDROMEJECT_SW(r2, 0x530f, 0x0) read$FUSE(r3, &(0x7f0000000780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f00000027c0)={0x10, 0x0, r9}, 0x10) ioctl$CDROMSUBCHNL(r2, 0x530b, &(0x7f0000002800)={0x0, 0x1, 0xa, 0x3, 0x7, 0xff, @lba=0x6c87, @lba=0x8}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000002880)={&(0x7f0000002840)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000032c0)={0x0, 0x5, &(0x7f00000031c0)=[r10, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003200)=[0x8, 0xf, 0x1000, 0x0, 0x0, 0x25e3dc73, 0x66, 0x1ff, 0x34b9], &(0x7f0000003240)=[0x0], &(0x7f0000003280)=[0x1, 0x3, 0x0, 0xa8bf, 0x316], 0x0, 0x51}) 408.270921ms ago: executing program 0 (id=526): r0 = open$dir(&(0x7f0000000000)='./bus\x00', 0x4802, 0x4) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x1) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f00000004c0)={0x0, 0xd34d, 0x400, 0x1, 0x20b}, &(0x7f0000000540)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x20) close_range(r2, r3, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 266.976777ms ago: executing program 0 (id=527): unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x8010) 204.722589ms ago: executing program 2 (id=528): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000), 0x4) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "7513d8d142f71a1a27cc314cc34550df469f6940256d42176fdb5e07236d4d68c5e76a78cd4ba68f8713c383ba230298e700b0030594d8fe6fe3abd5e70c12fc"}, 0x48, 0xffffffffffffffff) keyctl$read(0xf, r1, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x140) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="5300000007000046009d40ed", @ANYRES64], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 113.327743ms ago: executing program 0 (id=529): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f00000001c0)='./file1\x00', 0x8000, 0x1) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x4, 0x2d, 0xf6c, @vifc_lcl_ifindex, @multicast1}, 0x10) 112.983265ms ago: executing program 0 (id=530): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000007c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1008800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) creat(&(0x7f0000000280)='./file0\x00', 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x20) r6 = socket$unix(0x1, 0x5, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01) ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f00000000c0)={{{0x1, 0x1}}, 0x0, 0x1000, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48848}, 0x20000800) r9 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x40000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r3) sendmsg$FOU_CMD_ADD(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[], 0x24}}, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r13, 0x1, 0x2a, 0x0, &(0x7f0000000040)) sendmsg$FOU_CMD_DEL(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r12, 0x1}, 0x14}}, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r9, 0x81204101, &(0x7f0000000040)) 111.283961ms ago: executing program 2 (id=531): syz_emit_ethernet(0x7a, &(0x7f0000004540)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}}}}}}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x800, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='nilfs2\x00', 0x0, &(0x7f0000000980)='norecovery') 52.570941ms ago: executing program 2 (id=532): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @remote, @remote, @local}}}}, 0x0) 52.217712ms ago: executing program 2 (id=533): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RELDISP(r0, 0x5605) ioctl$TCXONC(r0, 0x540a, 0x1) 0s ago: executing program 2 (id=534): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x8000, 0x800}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010102}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x24040810) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f000bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75ddcf052a917deb7ba193b3e7772ed29f35239d2", "24431a1e77a68e174ff10000000000000010e200", [0x0, 0xfffffffffffffffc]}}) fchdir(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) kernel console output (not intermixed with test programs): [ 44.019989][ T40] audit: type=1400 audit(1750051501.393:60): avc: denied { rlimitinh } for pid=5913 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.025855][ T40] audit: type=1400 audit(1750051501.393:61): avc: denied { siginh } for pid=5913 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:36437' (ED25519) to the list of known hosts. [ 44.852244][ T40] audit: type=1400 audit(1750051502.233:62): avc: denied { name_bind } for pid=5922 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 44.869678][ T40] audit: type=1400 audit(1750051502.253:63): avc: denied { write } for pid=5923 comm="sh" path="pipe:[3873]" dev="pipefs" ino=3873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.881368][ T40] audit: type=1400 audit(1750051502.263:64): avc: denied { execute } for pid=5923 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.888771][ T40] audit: type=1400 audit(1750051502.263:65): avc: denied { execute_no_trans } for pid=5923 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.802841][ T40] audit: type=1400 audit(1750051504.183:66): avc: denied { mounton } for pid=5923 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.804763][ T5923] cgroup: Unknown subsys name 'net' [ 46.976439][ T5923] cgroup: Unknown subsys name 'cpuset' [ 46.980744][ T5923] cgroup: Unknown subsys name 'rlimit' [ 47.198840][ T5930] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 47.896825][ T5923] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.618574][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 50.618585][ T40] audit: type=1400 audit(1750051508.003:80): avc: denied { execmem } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.845805][ T40] audit: type=1400 audit(1750051508.233:81): avc: denied { create } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.852678][ T40] audit: type=1400 audit(1750051508.233:82): avc: denied { read write } for pid=5939 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.860759][ T40] audit: type=1400 audit(1750051508.233:83): avc: denied { open } for pid=5939 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.867937][ T40] audit: type=1400 audit(1750051508.253:84): avc: denied { ioctl } for pid=5939 comm="syz-executor" path="socket:[5923]" dev="sockfs" ino=5923 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.895608][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 50.899319][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 50.899754][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 50.902049][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 50.902347][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 50.903261][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 50.903865][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 50.904314][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 50.905139][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 50.907950][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 50.910043][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 50.912097][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 50.917853][ T40] audit: type=1400 audit(1750051508.293:85): avc: denied { read } for pid=5939 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.919196][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 50.919601][ T5947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 50.919893][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 50.920981][ T40] audit: type=1400 audit(1750051508.293:86): avc: denied { open } for pid=5939 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.927087][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 50.933847][ T40] audit: type=1400 audit(1750051508.303:87): avc: denied { mounton } for pid=5939 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 50.935372][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 50.957974][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 50.962206][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 50.964997][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.136018][ T40] audit: type=1400 audit(1750051508.523:88): avc: denied { module_request } for pid=5939 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.183453][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 51.219250][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 51.271715][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 51.278835][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 51.472428][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.475154][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.477498][ T5951] bridge_slave_0: entered allmulticast mode [ 51.480098][ T5951] bridge_slave_0: entered promiscuous mode [ 51.483648][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.485872][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.488105][ T5941] bridge_slave_0: entered allmulticast mode [ 51.490686][ T5941] bridge_slave_0: entered promiscuous mode [ 51.497047][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.499279][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.501503][ T5939] bridge_slave_0: entered allmulticast mode [ 51.504357][ T5939] bridge_slave_0: entered promiscuous mode [ 51.507465][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.509750][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.511994][ T5939] bridge_slave_1: entered allmulticast mode [ 51.514752][ T5939] bridge_slave_1: entered promiscuous mode [ 51.518298][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.520565][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.522934][ T5951] bridge_slave_1: entered allmulticast mode [ 51.525622][ T5951] bridge_slave_1: entered promiscuous mode [ 51.539943][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.542222][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.545630][ T5941] bridge_slave_1: entered allmulticast mode [ 51.548299][ T5941] bridge_slave_1: entered promiscuous mode [ 51.631636][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.634830][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.637517][ T5945] bridge_slave_0: entered allmulticast mode [ 51.640602][ T5945] bridge_slave_0: entered promiscuous mode [ 51.645194][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.647986][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.650454][ T5945] bridge_slave_1: entered allmulticast mode [ 51.653137][ T5945] bridge_slave_1: entered promiscuous mode [ 51.656921][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.662131][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.706798][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.711110][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.715418][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.719594][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.752754][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.757503][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.776203][ T5939] team0: Port device team_slave_0 added [ 51.854648][ T5939] team0: Port device team_slave_1 added [ 51.858541][ T5951] team0: Port device team_slave_0 added [ 51.862255][ T5941] team0: Port device team_slave_0 added [ 51.865607][ T5945] team0: Port device team_slave_0 added [ 51.881623][ T5951] team0: Port device team_slave_1 added [ 51.885052][ T5941] team0: Port device team_slave_1 added [ 51.888633][ T5945] team0: Port device team_slave_1 added [ 51.962248][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.965834][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.974044][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.978644][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.980942][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.989999][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.007020][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.009575][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.018466][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.036267][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.038572][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.046541][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.050991][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.053376][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.061988][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.066579][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.069009][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.081008][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.089503][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.091754][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.100057][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.111528][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.113877][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.122860][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.158891][ T5941] hsr_slave_0: entered promiscuous mode [ 52.161136][ T5941] hsr_slave_1: entered promiscuous mode [ 52.239239][ T5951] hsr_slave_0: entered promiscuous mode [ 52.241439][ T5951] hsr_slave_1: entered promiscuous mode [ 52.246157][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.248885][ T5951] Cannot create hsr debugfs directory [ 52.254111][ T5939] hsr_slave_0: entered promiscuous mode [ 52.256324][ T5939] hsr_slave_1: entered promiscuous mode [ 52.258467][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.260804][ T5939] Cannot create hsr debugfs directory [ 52.350838][ T5945] hsr_slave_0: entered promiscuous mode [ 52.353025][ T5945] hsr_slave_1: entered promiscuous mode [ 52.355584][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.357872][ T5945] Cannot create hsr debugfs directory [ 52.648178][ T5941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.654248][ T5941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.658261][ T5941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.667360][ T5941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.692928][ T5951] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.699849][ T5951] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.714945][ T5951] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.719096][ T5951] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.740947][ T5939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.748489][ T5939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.756693][ T5939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.762301][ T5939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.825683][ T5945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.832211][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.835828][ T5945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.840187][ T5945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.856084][ T5945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.867744][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.886652][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.889012][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.892499][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.894830][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.908773][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.938512][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.957570][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.962494][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.965953][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.973506][ T5949] Bluetooth: hci2: command tx timeout [ 52.975997][ T5949] Bluetooth: hci0: command tx timeout [ 52.978359][ T5949] Bluetooth: hci3: command tx timeout [ 52.980652][ T5943] Bluetooth: hci1: command tx timeout [ 52.987864][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.990343][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.996041][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.998556][ T40] audit: type=1400 audit(1750051510.383:89): avc: denied { sys_module } for pid=5941 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.011639][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.014034][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.025450][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.027732][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.050536][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.077002][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.094146][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.096894][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.116420][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.119244][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.141701][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.206040][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.211390][ T5941] veth0_vlan: entered promiscuous mode [ 53.224147][ T5941] veth1_vlan: entered promiscuous mode [ 53.242140][ T5951] veth0_vlan: entered promiscuous mode [ 53.257522][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.260014][ T5951] veth1_vlan: entered promiscuous mode [ 53.268819][ T5941] veth0_macvtap: entered promiscuous mode [ 53.277066][ T5941] veth1_macvtap: entered promiscuous mode [ 53.291470][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.299494][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.304285][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.317632][ T5941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.320395][ T5941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.323770][ T5941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.326459][ T5941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.334910][ T5951] veth0_macvtap: entered promiscuous mode [ 53.352490][ T5951] veth1_macvtap: entered promiscuous mode [ 53.357216][ T5939] veth0_vlan: entered promiscuous mode [ 53.379863][ T5939] veth1_vlan: entered promiscuous mode [ 53.402043][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.407657][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.410656][ T5945] veth0_vlan: entered promiscuous mode [ 53.425769][ T5951] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.428616][ T5951] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.431329][ T5951] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.434525][ T5951] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.439539][ T1242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.440379][ T5945] veth1_vlan: entered promiscuous mode [ 53.441993][ T1242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.455885][ T5939] veth0_macvtap: entered promiscuous mode [ 53.468086][ T5939] veth1_macvtap: entered promiscuous mode [ 53.476788][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.480222][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.494468][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.509887][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.519526][ T5939] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.522281][ T5939] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.525505][ T5939] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.528345][ T5939] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.539372][ T5941] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 53.542318][ T5945] veth0_macvtap: entered promiscuous mode [ 53.547509][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.549895][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.559533][ T5945] veth1_macvtap: entered promiscuous mode [ 53.589887][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.591610][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.592296][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.607889][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.617797][ T5945] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.620660][ T5945] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.623732][ T5945] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.626449][ T5945] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.634099][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.636547][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.654092][ T1242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.656904][ T1242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.695058][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.697491][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.735095][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.738229][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.743385][ T6037] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 53.746812][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.749766][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.757020][ T6037] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.757087][ T6036] Zero length message leads to an empty skb [ 53.759329][ T6037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.763780][ T6037] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.766030][ T6037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.774804][ T6037] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 53.784134][ T6037] bridge_slave_1: left allmulticast mode [ 53.785974][ T6037] bridge_slave_1: left promiscuous mode [ 53.787879][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.792466][ T6037] bridge_slave_0: left allmulticast mode [ 53.803628][ T6037] bridge_slave_0: left promiscuous mode [ 53.805526][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.819393][ T6037] bond0: (slave bridge0): Releasing backup interface [ 53.891149][ T6041] netlink: 328 bytes leftover after parsing attributes in process `syz.3.6'. [ 53.891658][ T6042] dlm: no local IP address has been set [ 53.895733][ T6042] dlm: cannot start dlm midcomms -107 [ 53.896438][ T6041] nr0: entered promiscuous mode [ 53.932213][ T6047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7'. [ 53.936470][ T6047] netlink: 'syz.2.7': attribute type 7 has an invalid length. [ 53.939123][ T6047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7'. [ 54.025158][ T6061] xt_l2tp: v2 doesn't support IP mode [ 54.027471][ T6061] tmpfs: Bad value for 'mpol' [ 54.056472][ T6066] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11'. [ 54.069085][ T6068] binder_alloc: 6067: binder_alloc_buf, no vma [ 54.147213][ T6079] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 54.150738][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 54.160393][ T6079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6079 comm=syz.3.18 [ 54.266489][ T6089] tmpfs: Bad value for 'mpol' [ 54.288777][ T6095] netlink: 'syz.0.23': attribute type 1 has an invalid length. [ 54.375352][ T6103] loop6: detected capacity change from 0 to 7 [ 54.379384][ T6103] Dev loop6: unable to read RDB block 7 [ 54.381266][ T6103] loop6: AHDI p2 [ 54.382791][ T6103] loop6: partition table partially beyond EOD, truncated [ 54.410967][ T6108] ======================================================= [ 54.410967][ T6108] WARNING: The mand mount option has been deprecated and [ 54.410967][ T6108] and is ignored by this kernel. Remove the mand [ 54.410967][ T6108] option from the mount to silence this warning. [ 54.410967][ T6108] ======================================================= [ 54.422902][ T6108] process 'syz.3.27' launched './file1' with NULL argv: empty string added [ 54.481251][ T6113] Bluetooth: MGMT ver 1.23 [ 55.053160][ T5949] Bluetooth: hci0: command tx timeout [ 55.053263][ T5948] Bluetooth: hci2: command tx timeout [ 55.063218][ T5948] Bluetooth: hci3: command tx timeout [ 55.063231][ T5949] Bluetooth: hci1: command tx timeout [ 55.345179][ T6211] netlink: 'syz.0.54': attribute type 7 has an invalid length. [ 55.355273][ T6211] : entered promiscuous mode [ 55.362475][ T6217] netlink: 830 bytes leftover after parsing attributes in process `syz.2.56'. [ 55.396652][ T6224] netlink: 'syz.0.58': attribute type 10 has an invalid length. [ 55.404497][ T6224] team0: Cannot enslave team device to itself [ 55.532134][ T6245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=6245 comm=syz.0.65 [ 55.747683][ T6267] 9pnet_virtio: no channels available for device syz [ 55.757881][ T40] kauditd_printk_skb: 178 callbacks suppressed [ 55.757891][ T40] audit: type=1400 audit(1750051513.143:268): avc: denied { write } for pid=6265 comm="syz.0.70" name="/" dev="9p" ino=36701512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.827528][ T40] audit: type=1400 audit(1750051513.213:269): avc: denied { create } for pid=6270 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 55.833030][ T6271] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.875894][ T40] audit: type=1400 audit(1750051513.263:270): avc: denied { unlink } for pid=6268 comm="syz.1.71" name="#1" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 55.881786][ T6275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 55.884797][ T40] audit: type=1400 audit(1750051513.263:271): avc: denied { mount } for pid=6268 comm="syz.1.71" name="/" dev="overlay" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.984722][ T40] audit: type=1400 audit(1750051513.373:272): avc: denied { read } for pid=6273 comm="syz.2.73" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 55.993388][ T40] audit: type=1400 audit(1750051513.373:273): avc: denied { open } for pid=6273 comm="syz.2.73" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 56.009064][ T40] audit: type=1400 audit(1750051513.393:274): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.137828][ T40] audit: type=1400 audit(1750051513.523:275): avc: denied { mount } for pid=6286 comm="syz.2.76" name="/" dev="ramfs" ino=11463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 56.157661][ T40] audit: type=1400 audit(1750051513.543:276): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 56.211636][ T40] audit: type=1400 audit(1750051513.593:277): avc: denied { read write } for pid=6293 comm="syz.2.78" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.503206][ T5943] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 56.893858][ T6312] afs: Unknown parameter 'dy:n' [ 57.143092][ T5943] Bluetooth: hci1: command tx timeout [ 57.143378][ T5949] Bluetooth: hci3: command tx timeout [ 57.145535][ T5943] Bluetooth: hci0: command 0x040f tx timeout [ 57.147128][ T5949] Bluetooth: hci2: command tx timeout [ 57.299470][ T6342] netlink: 'syz.3.92': attribute type 1 has an invalid length. [ 57.302039][ T6342] netlink: 224 bytes leftover after parsing attributes in process `syz.3.92'. [ 57.357600][ T5949] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 57.391200][ T6356] netlink: 'syz.2.96': attribute type 1 has an invalid length. [ 57.394724][ T6356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 57.520648][ T6374] syz.1.100 uses obsolete (PF_INET,SOCK_PACKET) [ 57.552713][ T6382] tmpfs: Bad value for 'mpol' [ 57.816949][ T6390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.106'. [ 57.820205][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 57.998016][ T6409] netlink: 40 bytes leftover after parsing attributes in process `syz.0.112'. [ 58.221700][ T6416] 9pnet: Unknown protocol version 9p20\++} [ 58.636521][ T6437] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 58.872803][ T54] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.882631][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 59.034199][ T54] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 59.039503][ T54] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.042823][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 59.045294][ T54] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.045357][ T29] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 59.049793][ T54] usb 8-1: config 0 interface 0 has no altsetting 0 [ 59.052207][ T29] usb 7-1: config 0 has no interface number 0 [ 59.056845][ T54] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.059265][ T29] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 59.060203][ T54] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.060226][ T54] usb 8-1: config 0 interface 0 has no altsetting 0 [ 59.061085][ T54] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.063462][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.066918][ T54] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.066933][ T54] usb 8-1: config 0 interface 0 has no altsetting 0 [ 59.068213][ T54] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.069268][ T29] usb 7-1: Product: syz [ 59.072126][ T54] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.074839][ T29] usb 7-1: Manufacturer: syz [ 59.078085][ T54] usb 8-1: config 0 interface 0 has no altsetting 0 [ 59.078823][ T54] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.080407][ T29] usb 7-1: SerialNumber: syz [ 59.083225][ T54] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.083241][ T54] usb 8-1: config 0 interface 0 has no altsetting 0 [ 59.083960][ T54] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.086935][ T29] usb 7-1: config 0 descriptor?? [ 59.087876][ T54] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.093521][ T29] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 59.094868][ T54] usb 8-1: config 0 interface 0 has no altsetting 0 [ 59.095564][ T29] usb 7-1: selecting invalid altsetting 1 [ 59.099469][ T54] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.100746][ T29] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 59.103456][ T54] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.108250][ T29] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 59.110804][ T54] usb 8-1: config 0 interface 0 has no altsetting 0 [ 59.113811][ T29] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 59.115459][ T54] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.117889][ T29] usb 7-1: media controller created [ 59.119630][ T54] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.131948][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 59.134051][ T54] usb 8-1: config 0 interface 0 has no altsetting 0 [ 59.144870][ T54] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 59.147689][ T54] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 59.150257][ T54] usb 8-1: Product: syz [ 59.151565][ T54] usb 8-1: Manufacturer: syz [ 59.153175][ T54] usb 8-1: SerialNumber: syz [ 59.156794][ T54] usb 8-1: config 0 descriptor?? [ 59.164884][ T54] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 59.212733][ T5949] Bluetooth: hci3: command tx timeout [ 59.212776][ T5948] Bluetooth: hci1: command tx timeout [ 59.223041][ T5948] Bluetooth: hci2: command tx timeout [ 59.282768][ T6026] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 59.415765][ C2] usb 8-1: yurex_control_callback - control failed: -71 [ 59.420257][ T54] usb 8-1: USB disconnect, device number 2 [ 59.424268][ T54] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 59.436697][ T6026] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 59.439612][ T6026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 59.442116][ T6026] usb 5-1: Product: syz [ 59.443545][ T6026] usb 5-1: Manufacturer: syz [ 59.445000][ T6026] usb 5-1: SerialNumber: syz [ 59.447872][ T6026] usb 5-1: config 0 descriptor?? [ 59.451415][ T6026] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 59.454200][ T6026] dvb-usb: bulk message failed: -22 (2/0) [ 59.457712][ T6026] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 59.461236][ T6026] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 59.463681][ T6026] usb 5-1: media controller created [ 59.476672][ T6026] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 59.565159][ T6453] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.569494][ T6453] netlink: 'syz.1.126': attribute type 1 has an invalid length. [ 59.645507][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 59.648402][ T6457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.128'. [ 59.652981][ T6457] openvswitch: netlink: Missing key (keys=40, expected=80) [ 59.667701][ T6184] udevd[6184]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 60.172799][ T29] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 60.175577][ T29] zl10353_read_register: readreg error (reg=127, ret==-110) [ 60.193243][ T6433] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 60.213301][ T6448] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 60.220681][ T6026] cxusb: set interface failed [ 60.222212][ T6026] dvb-usb: bulk message failed: -22 (1/0) [ 60.244514][ T6026] DVB: Unable to find symbol mt352_attach() [ 60.246679][ T6026] dvb-usb: bulk message failed: -22 (5/0) [ 60.248562][ T6026] zl10353_read_register: readreg error (reg=127, ret==-121) [ 60.250838][ T6026] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 60.302656][ T6026] rc_core: IR keymap rc-dvico-mce not found [ 60.304559][ T6026] Registered IR keymap rc-empty [ 60.307302][ T6026] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 60.311815][ T6026] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input5 [ 60.319717][ T6026] dvb-usb: schedule remote query interval to 100 msecs. [ 60.321938][ T6026] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 60.330068][ T6026] usb 5-1: USB disconnect, device number 3 [ 60.330943][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 60.357992][ T6026] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 60.801559][ T6495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.137'. [ 60.844913][ T5948] block nbd0: Receive control failed (result -32) [ 60.852717][ T5948] Bluetooth: min 32769 > max 1 [ 60.894757][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 60.898004][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 60.910980][ T40] kauditd_printk_skb: 122 callbacks suppressed [ 60.910990][ T40] audit: type=1400 audit(1750051518.293:400): avc: denied { bind } for pid=6506 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.958469][ T6515] kvm: user requested TSC rate below hardware speed [ 60.984396][ T6518] (syz.3.145,6518,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 60.987289][ T6518] (syz.3.145,6518,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 61.025990][ T40] audit: type=1400 audit(1750051518.413:401): avc: denied { setopt } for pid=6519 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 61.063500][ T6025] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 61.080117][ T40] audit: type=1400 audit(1750051518.463:402): avc: denied { read write } for pid=6523 comm="syz.3.149" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.087773][ T40] audit: type=1400 audit(1750051518.463:403): avc: denied { open } for pid=6523 comm="syz.3.149" path="/dev/ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.095521][ T40] audit: type=1400 audit(1750051518.463:404): avc: denied { ioctl } for pid=6523 comm="syz.3.149" path="/dev/ppp" dev="devtmpfs" ino=731 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.100821][ T6526] netlink: 'syz.0.147': attribute type 8 has an invalid length. [ 61.158864][ T40] audit: type=1400 audit(1750051518.543:405): avc: denied { create } for pid=6531 comm="syz.0.151" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.159105][ T6532] o2cb: This node has not been configured. [ 61.170037][ T6532] o2cb: Cluster check failed. Fix errors before retrying. [ 61.172250][ T6532] (syz.0.151,6532,2):user_dlm_register:674 ERROR: status = -22 [ 61.174749][ T6532] (syz.0.151,6532,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 61.199417][ T6534] capability: warning: `syz.3.152' uses deprecated v2 capabilities in a way that may be insecure [ 61.201537][ T40] audit: type=1400 audit(1750051518.583:406): avc: denied { create } for pid=6533 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.204104][ T6537] xt_hashlimit: overflow, rate too high: 0 [ 61.209318][ T40] audit: type=1400 audit(1750051518.593:407): avc: denied { setopt } for pid=6533 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.213841][ T6025] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.220692][ T6025] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.225202][ T6025] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 61.228321][ T6025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.247709][ T40] audit: type=1400 audit(1750051518.633:408): avc: denied { ioctl } for pid=6538 comm="syz.0.154" path="/dev/ptyq5" dev="devtmpfs" ino=132 ioctlcmd=0x5436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 61.255243][ T40] audit: type=1400 audit(1750051518.633:409): avc: denied { connect } for pid=6538 comm="syz.0.154" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.358385][ T6549] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 61.362000][ T6549] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 61.362693][ T6548] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 61.426992][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.160'. [ 61.438235][ T6025] usb 6-1: usb_control_msg returned -32 [ 61.440063][ T6025] usbtmc 6-1:16.0: can't read capabilities [ 61.475435][ T6560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.161'. [ 61.551057][ T6565] ALSA: mixer_oss: invalid OSS volume '' [ 61.561662][ T29] usb 7-1: USB disconnect, device number 2 [ 61.806232][ T6493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.136'. [ 61.809984][ T5948] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 61.813187][ T5948] CPU: 0 UID: 0 PID: 5948 Comm: kworker/u33:4 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 61.813203][ T5948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.813211][ T5948] Workqueue: hci0 hci_rx_work [ 61.813226][ T5948] Call Trace: [ 61.813230][ T5948] [ 61.813234][ T5948] dump_stack_lvl+0x16c/0x1f0 [ 61.813252][ T5948] sysfs_warn_dup+0x7f/0xa0 [ 61.813270][ T5948] sysfs_create_dir_ns+0x24b/0x2b0 [ 61.813285][ T5948] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 61.813300][ T5948] ? find_held_lock+0x2b/0x80 [ 61.813316][ T5948] ? do_raw_spin_unlock+0x172/0x230 [ 61.813329][ T5948] kobject_add_internal+0x2c4/0x9b0 [ 61.813342][ T5948] kobject_add+0x16e/0x240 [ 61.813352][ T5948] ? __pfx_kobject_add+0x10/0x10 [ 61.813364][ T5948] ? do_raw_spin_unlock+0x172/0x230 [ 61.813376][ T5948] ? kobject_put+0xab/0x5a0 [ 61.813391][ T5948] device_add+0x288/0x1a70 [ 61.813402][ T5948] ? __pfx_dev_set_name+0x10/0x10 [ 61.813413][ T5948] ? __pfx_device_add+0x10/0x10 [ 61.813423][ T5948] ? mgmt_send_event_skb+0x2fb/0x460 [ 61.813444][ T5948] hci_conn_add_sysfs+0x17e/0x230 [ 61.813455][ T5948] le_conn_complete_evt+0x1075/0x1d70 [ 61.813476][ T5948] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 61.813491][ T5948] ? hci_event_packet+0x459/0x11c0 [ 61.813512][ T5948] hci_le_conn_complete_evt+0x23c/0x370 [ 61.813531][ T5948] hci_le_meta_evt+0x354/0x5e0 [ 61.813541][ T5948] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 61.813559][ T5948] hci_event_packet+0x685/0x11c0 [ 61.813576][ T5948] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 61.813586][ T5948] ? __pfx_hci_event_packet+0x10/0x10 [ 61.813604][ T5948] ? kcov_remote_start+0x3c9/0x6d0 [ 61.813616][ T5948] ? lockdep_hardirqs_on+0x7c/0x110 [ 61.813636][ T5948] hci_rx_work+0x2c5/0x16b0 [ 61.813646][ T5948] ? rcu_is_watching+0x12/0xc0 [ 61.813662][ T5948] process_one_work+0x9cc/0x1b70 [ 61.813680][ T5948] ? __pfx_process_one_work+0x10/0x10 [ 61.813695][ T5948] ? assign_work+0x1a0/0x250 [ 61.813714][ T5948] worker_thread+0x6c8/0xf10 [ 61.813731][ T5948] ? __pfx_worker_thread+0x10/0x10 [ 61.813742][ T5948] kthread+0x3c2/0x780 [ 61.813753][ T5948] ? __pfx_kthread+0x10/0x10 [ 61.813764][ T5948] ? rcu_is_watching+0x12/0xc0 [ 61.813777][ T5948] ? __pfx_kthread+0x10/0x10 [ 61.813787][ T5948] ret_from_fork+0x5d7/0x6f0 [ 61.813803][ T5948] ? __pfx_kthread+0x10/0x10 [ 61.813813][ T5948] ret_from_fork_asm+0x1a/0x30 [ 61.813832][ T5948] [ 61.813844][ T5948] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 61.897840][ T5948] Bluetooth: hci0: failed to register connection device [ 61.922107][ T6581] kvm: emulating exchange as write [ 62.617307][ T6615] tmpfs: Unknown parameter 'indo64' [ 62.621609][ T6615] overlay: ./file0 is not a directory [ 62.892649][ T5949] Bluetooth: hci3: command tx timeout [ 63.683280][ T6380] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 63.713204][ T10] usb 6-1: USB disconnect, device number 2 [ 63.838705][ T6649] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 63.852981][ T6380] usb 5-1: Using ep0 maxpacket: 8 [ 63.856507][ T6380] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 63.862645][ T6380] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 63.865708][ T6380] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 63.868866][ T6380] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 63.873280][ T6380] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.878824][ T6380] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 63.882412][ T6380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.960052][ T6660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.192'. [ 64.088791][ T6380] usb 5-1: usb_control_msg returned -32 [ 64.090575][ T6380] usbtmc 5-1:16.0: can't read capabilities [ 64.292649][ T54] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 64.442314][ T6676] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 64.442689][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 64.448273][ T54] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.452196][ T54] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 64.454307][ T6629] tipc: Failed to remove unknown binding: 66,1,1/0:3071785340/3071785342 [ 64.456798][ T54] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 64.460128][ T6629] tipc: Failed to remove unknown binding: 66,1,1/0:3071785340/3071785342 [ 64.463722][ T54] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 64.463738][ T54] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 64.463761][ T54] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 64.479370][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.482815][ T6380] usb 5-1: USB disconnect, device number 4 [ 64.494967][ T54] hub 6-1:1.0: bad descriptor, ignoring hub [ 64.497383][ T54] hub 6-1:1.0: probe with driver hub failed with error -5 [ 64.501071][ T54] cdc_wdm 6-1:1.0: skipping garbage [ 64.503378][ T54] cdc_wdm 6-1:1.0: skipping garbage [ 64.505618][ T54] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 64.690802][ T6670] [U]  [ 64.799283][ T10] usb 6-1: USB disconnect, device number 3 [ 64.876577][ T6695] netlink: 'syz.0.201': attribute type 16 has an invalid length. [ 64.879774][ T6695] netlink: 'syz.0.201': attribute type 17 has an invalid length. [ 65.167601][ T6706] __nla_validate_parse: 1 callbacks suppressed [ 65.167612][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 65.231457][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'. [ 65.477987][ T6736] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1727626753 (3455253506 ns) > initial count (6817288 ns). Using initial count to start timer. [ 65.583010][ T6761] xt_hashlimit: size too large, truncated to 1048576 [ 65.623032][ T6759] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 65.653187][ T6775] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 65.657296][ T6775] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 65.677677][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.228'. [ 65.693082][ T6782] netlink: 20 bytes leftover after parsing attributes in process `syz.1.228'. [ 65.696891][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 65.704302][ T6782] support for the xor transformation has been removed. [ 65.734323][ T6796] syz_tun: entered allmulticast mode [ 65.740657][ T6796] dvmrp1: entered allmulticast mode [ 65.771734][ T5949] Bluetooth: hci0: unexpected event for opcode 0x080f [ 65.772134][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 65.790106][ T6792] syz_tun: left allmulticast mode [ 66.014444][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.104368][ T6834] sp0: Synchronizing with TNC [ 66.108674][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 66.108683][ T40] audit: type=1400 audit(1750051523.493:454): avc: denied { search } for pid=5655 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.120006][ T40] audit: type=1400 audit(1750051523.503:455): avc: denied { search } for pid=5655 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.128885][ T40] audit: type=1400 audit(1750051523.503:456): avc: denied { search } for pid=5655 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.135653][ T40] audit: type=1400 audit(1750051523.503:457): avc: denied { read } for pid=5655 comm="dhcpcd" name="n103" dev="tmpfs" ino=2852 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.142328][ T40] audit: type=1400 audit(1750051523.503:458): avc: denied { open } for pid=5655 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=2852 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.150876][ T40] audit: type=1400 audit(1750051523.503:459): avc: denied { getattr } for pid=5655 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=2852 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.172714][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.300933][ T6845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 66.307236][ T34] usb 7-1: device descriptor read/64, error -71 [ 66.429945][ T40] audit: type=1400 audit(1750051523.813:460): avc: denied { bind } for pid=6860 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.517472][ T40] audit: type=1400 audit(1750051523.903:461): avc: denied { read } for pid=6871 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 66.544987][ T40] audit: type=1400 audit(1750051523.933:462): avc: denied { setattr } for pid=6877 comm="syz.1.248" path="socket:[12701]" dev="sockfs" ino=12701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.552162][ T40] audit: type=1400 audit(1750051523.933:463): avc: denied { ioctl } for pid=6877 comm="syz.1.248" path="socket:[14344]" dev="sockfs" ino=14344 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.572701][ T34] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 66.630827][ T6893] tipc: Started in network mode [ 66.632517][ T6893] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 66.637028][ T6893] tipc: Enabled bearer , priority 10 [ 66.702639][ T34] usb 7-1: device descriptor read/64, error -71 [ 66.823047][ T34] usb usb7-port1: attempt power cycle [ 67.159176][ T6919] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 67.162622][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 67.183089][ T34] usb 7-1: device descriptor read/8, error -71 [ 67.422748][ T34] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 67.443079][ T34] usb 7-1: device descriptor read/8, error -71 [ 67.522708][ T54] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 67.552946][ T34] usb usb7-port1: unable to enumerate USB device [ 67.568968][ T6931] 8021q: VLANs not supported on ip_vti0 [ 67.686273][ T54] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 67.689829][ T54] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 67.693054][ T54] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 67.695853][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.702837][ T6929] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 67.711312][ T54] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 67.764857][ T29] tipc: Node number set to 4269801514 [ 67.983694][ T54] usb 8-1: USB disconnect, device number 3 [ 68.260009][ T34] IPVS: starting estimator thread 0... [ 68.299288][ T7000] sctp: [Deprecated]: syz.3.279 (pid 7000) Use of int in max_burst socket option deprecated. [ 68.299288][ T7000] Use struct sctp_assoc_value instead [ 68.362875][ T6994] IPVS: using max 42 ests per chain, 100800 per kthread [ 68.376122][ T7004] Invalid source name [ 68.377516][ T7004] UBIFS error (pid: 7004): cannot open "./file0", error -22 [ 68.511048][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 68.612519][ T7027] 9pnet_fd: Insufficient options for proto=fd [ 68.680171][ T7037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.292'. [ 68.726962][ T7044] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 3952. macoff=96 [ 68.743590][ T7046] capability: warning: `syz.1.295' uses 32-bit capabilities (legacy support in use) [ 68.775833][ T7052] input: syz0 as /devices/virtual/input/input9 [ 68.804893][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 68.934346][ T7057] syz.1.300: attempt to access beyond end of device [ 68.934346][ T7057] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 68.938895][ T7057] EXT4-fs (nbd1): unable to read superblock [ 68.996264][ T7066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.999291][ T7066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.018060][ T7061] x_tables: duplicate underflow at hook 1 [ 69.074638][ T7061] kvm: MONITOR instruction emulated as NOP! [ 69.081566][ T7071] binder_alloc: 7070: binder_alloc_buf size 26664 failed, no address space [ 69.085407][ T7071] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) [ 69.232719][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 69.319268][ T7079] could not allocate digest TFM handle cryptd(blake2b-160) [ 69.382696][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 69.385961][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.389393][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.392922][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.397371][ T10] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 69.400338][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.404973][ T10] usb 5-1: config 0 descriptor?? [ 69.410826][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input10 [ 69.416465][ T5337] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 69.421482][ T5337] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 69.424669][ T5337] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 69.433050][ T5337] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 69.436302][ T5955] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 69.440659][ T5337] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 69.444612][ T5337] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 69.448053][ T5337] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 69.532666][ T29] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 69.611241][ T7066] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 69.618163][ T6014] usb 5-1: USB disconnect, device number 5 [ 69.662645][ T29] usb 7-1: device descriptor read/64, error -71 [ 69.902664][ T29] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 70.042634][ T29] usb 7-1: device descriptor read/64, error -71 [ 70.132354][ T7090] veth0: entered promiscuous mode [ 70.136541][ T7090] loop2: detected capacity change from 0 to 7 [ 70.140369][ T7090] Dev loop2: unable to read RDB block 7 [ 70.142120][ T7090] loop2: AHDI p1 p2 p3 [ 70.143530][ T7090] loop2: partition table partially beyond EOD, truncated [ 70.146331][ T7090] loop2: p1 start 1601398130 is beyond EOD, truncated [ 70.148465][ T7090] loop2: p2 start 1702059890 is beyond EOD, truncated [ 70.151101][ T7089] veth0: left promiscuous mode [ 70.165137][ T29] usb usb7-port1: attempt power cycle [ 70.195718][ T7093] netlink: 'syz.0.310': attribute type 32 has an invalid length. [ 70.230932][ T7101] xt_bpf: check failed: parse error [ 70.238338][ T7101] program syz.0.312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.337613][ T7103] tmpfs: Bad value for 'huge' [ 70.522854][ T29] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 70.556954][ T29] usb 7-1: device descriptor read/8, error -71 [ 70.579015][ T7114] binder: Bad value for 'max' [ 70.581554][ T7116] binder: Bad value for 'max' [ 70.769175][ T5943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.772444][ T5943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.775557][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.778529][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.781094][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.802702][ T29] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 70.812739][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 70.816712][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 70.822714][ T5949] Bluetooth: hci3: command tx timeout [ 70.830076][ T29] usb 7-1: device descriptor read/8, error -71 [ 70.874887][ T7134] vlan2: entered promiscuous mode [ 70.876558][ T7134] veth1_virt_wifi: entered promiscuous mode [ 70.919274][ T7129] chnl_net:caif_netlink_parms(): no params data found [ 70.933584][ T29] usb usb7-port1: unable to enumerate USB device [ 70.977157][ T7129] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.979549][ T7129] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.982230][ T7129] bridge_slave_0: entered allmulticast mode [ 70.985217][ T7129] bridge_slave_0: entered promiscuous mode [ 70.988349][ T7129] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.990683][ T7129] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.993249][ T7129] bridge_slave_1: entered allmulticast mode [ 70.995857][ T7129] bridge_slave_1: entered promiscuous mode [ 71.038699][ T7129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.048481][ T7129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.058368][ T7142] overlayfs: statfs failed on './file0' [ 71.095423][ T7129] team0: Port device team_slave_0 added [ 71.099416][ T7129] team0: Port device team_slave_1 added [ 71.129770][ T7129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.131976][ T7129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.136031][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.141089][ T7129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.146956][ T7129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.149136][ T7129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.164062][ T7129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.238627][ T7129] hsr_slave_0: entered promiscuous mode [ 71.241773][ T7129] hsr_slave_1: entered promiscuous mode [ 71.245653][ T7129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.249634][ T7129] Cannot create hsr debugfs directory [ 71.391425][ T7129] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.397478][ T7129] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.401573][ T7129] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.406012][ T7129] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.427124][ T7129] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.430100][ T7129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.433081][ T7129] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.435736][ T7129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.474785][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.479219][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.504583][ T7129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.522685][ T7129] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.528127][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.530514][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.537127][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.539385][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.661244][ T7129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.803776][ T7129] veth0_vlan: entered promiscuous mode [ 71.809010][ T7129] veth1_vlan: entered promiscuous mode [ 71.830809][ T7129] veth0_macvtap: entered promiscuous mode [ 71.835013][ T7129] veth1_macvtap: entered promiscuous mode [ 71.844049][ T7129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.851386][ T7129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.857619][ T7129] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.860353][ T7129] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.863137][ T7129] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.865834][ T7129] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.899318][ T1242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.902403][ T1242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.916518][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.919044][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.927278][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 71.927289][ T40] audit: type=1400 audit(1750051528.304:502): avc: denied { mounton } for pid=7129 comm="syz-executor" path="/syzkaller.Ev8VP5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 72.019559][ T7176] openvswitch: netlink: Message has 194 unknown bytes. [ 72.021640][ T1242] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.022249][ T40] audit: type=1400 audit(1750051528.394:503): avc: denied { read } for pid=7173 comm="syz.0.331" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 72.022655][ T5949] Bluetooth: hci2: command tx timeout [ 72.044453][ T40] audit: type=1400 audit(1750051528.394:504): avc: denied { open } for pid=7173 comm="syz.0.331" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 72.054838][ T7175] IPVS: persistence engine module ip_vs_pe_s not found [ 72.057639][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'. [ 72.061958][ T40] audit: type=1400 audit(1750051528.434:505): avc: denied { ioctl } for pid=7173 comm="syz.0.331" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 72.095713][ T40] audit: type=1400 audit(1750051528.474:506): avc: denied { setopt } for pid=7183 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.140347][ T7193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.336'. [ 72.168610][ T7195] netlink: 'syz.0.338': attribute type 29 has an invalid length. [ 72.174388][ T7195] netlink: 'syz.0.338': attribute type 29 has an invalid length. [ 72.182448][ T7195] netlink: 588 bytes leftover after parsing attributes in process `syz.0.338'. [ 72.217541][ T40] audit: type=1400 audit(1750051528.594:507): avc: denied { getopt } for pid=7199 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.222077][ T7200] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.340'. [ 72.312327][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.378127][ T40] audit: type=1400 audit(1750051528.754:508): avc: denied { write } for pid=7221 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 72.431801][ T40] audit: type=1400 audit(1750051528.804:509): avc: denied { getopt } for pid=7221 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.441839][ T7234] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 72.465113][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.496742][ T7241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.537490][ T7241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.597712][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.621290][ T7252] warning: `syz.4.356' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.690904][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.765545][ T7271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.823927][ T7274] netlink: 'syz.3.362': attribute type 1 has an invalid length. [ 72.870632][ T40] audit: type=1400 audit(1750575817.247:510): avc: denied { read } for pid=5337 comm="acpid" name="event4" dev="devtmpfs" ino=2930 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 72.897400][ T40] audit: type=1400 audit(1750575817.247:511): avc: denied { open } for pid=5337 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2930 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 73.221837][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.241491][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.250617][ T46] bond0 (unregistering): Released all slaves [ 73.337279][ T7313] netlink: 16 bytes leftover after parsing attributes in process `syz.4.370'. [ 73.340165][ T7313] netlink: 16 bytes leftover after parsing attributes in process `syz.4.370'. [ 73.346803][ T7313] netlink: 24 bytes leftover after parsing attributes in process `syz.4.370'. [ 73.436604][ T7324] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 73.477108][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.373'. [ 73.629184][ T46] hsr_slave_0: left promiscuous mode [ 73.641312][ T46] hsr_slave_1: left promiscuous mode [ 73.647586][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.654149][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.657525][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.661581][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.662835][ T7357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.379'. [ 73.688585][ T46] veth1_macvtap: left promiscuous mode [ 73.690445][ T46] veth0_macvtap: left promiscuous mode [ 73.692698][ T46] veth1_vlan: left promiscuous mode [ 73.694317][ T46] veth0_vlan: left promiscuous mode [ 73.698655][ T7361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.377'. [ 74.332698][ T46] team0 (unregistering): Port device team_slave_1 removed [ 74.388835][ T46] team0 (unregistering): Port device team_slave_0 removed [ 75.092485][ T7400] netlink: 'syz.2.391': attribute type 10 has an invalid length. [ 75.096932][ T7400] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 75.099407][ T7400] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 75.102476][ T7400] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 75.175024][ T7407] Bluetooth: MGMT ver 1.23 [ 75.670445][ T7461] netlink: 'syz.3.409': attribute type 30 has an invalid length. [ 75.677586][ T7461] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.680456][ T7461] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.683172][ T7461] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.686261][ T7461] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.802688][ T7468] ipip0: entered promiscuous mode [ 75.890709][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 76.057723][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 76.061736][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 76.065816][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.072387][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 76.076067][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.079127][ T10] usb 7-1: Product: syz [ 76.080732][ T10] usb 7-1: Manufacturer: syz [ 76.082478][ T10] usb 7-1: SerialNumber: syz [ 76.093952][ T10] hub 7-1:1.0: bad descriptor, ignoring hub [ 76.096630][ T10] hub 7-1:1.0: probe with driver hub failed with error -5 [ 76.253918][ T7506] Malformed UNC in devname [ 76.253918][ T7506] [ 76.256171][ T7506] CIFS: VFS: Malformed UNC in devname [ 76.312978][ T10] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 76.376565][ T7516] sp0: Synchronizing with TNC [ 76.498275][ T5948] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 76.501697][ T5948] Bluetooth: hci0: Injecting HCI hardware error event [ 76.584011][ T7530] syz.4.432 (7530): attempted to duplicate a private mapping with mremap. This is not supported. [ 76.632432][ T29] usb 7-1: USB disconnect, device number 11 [ 76.637220][ T29] usblp0: removed [ 76.825208][ T1142] bond0: (slave bond_slave_0): interface is now down [ 76.827695][ T1142] bond0: (slave bond_slave_1): interface is now down [ 76.831579][ T1142] bond0: now running without any active interface! [ 77.069483][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 77.069494][ T40] audit: type=1400 audit(1750575821.348:559): avc: denied { getopt } for pid=7559 comm="syz.0.440" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.142994][ T7567] kvm: user requested TSC rate below hardware speed [ 77.157834][ T40] audit: type=1400 audit(1750575821.435:560): avc: denied { mount } for pid=7568 comm="syz.2.443" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 77.189582][ T40] audit: type=1400 audit(1750575821.464:561): avc: denied { remount } for pid=7568 comm="syz.2.443" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 77.200216][ T40] audit: type=1400 audit(1750575821.464:562): avc: denied { mounton } for pid=7568 comm="syz.2.443" path="/74/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 77.260491][ T40] audit: type=1400 audit(1750575821.542:563): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 77.333338][ T7578] __nla_validate_parse: 25 callbacks suppressed [ 77.333350][ T7578] netlink: 6 bytes leftover after parsing attributes in process `syz.0.445'. [ 77.399510][ T7575] sd 0:0:0:0: PR command failed: 1026 [ 77.402179][ T7575] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 77.404361][ T7575] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 77.439712][ T40] audit: type=1400 audit(1750575821.708:564): avc: denied { bind } for pid=7583 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 77.603477][ T40] audit: type=1400 audit(1750575821.864:565): avc: denied { transfer } for pid=7598 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 77.683314][ T7610] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 77.692427][ T7610] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 77.767902][ T7619] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7619 comm=syz.3.459 [ 77.772643][ T7619] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7619 comm=syz.3.459 [ 77.780525][ T40] audit: type=1400 audit(1750575822.039:566): avc: denied { audit_write } for pid=7618 comm="syz.3.459" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 77.838348][ T40] audit: type=1400 audit(1750575822.098:567): avc: denied { setopt } for pid=7627 comm="syz.0.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 77.859152][ T40] audit: type=1400 audit(1750575822.117:568): avc: denied { write } for pid=7643 comm="syz.4.467" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 77.890673][ T7651] netlink: 'syz.3.463': attribute type 2 has an invalid length. [ 78.069898][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 78.073391][ T7679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.477'. [ 78.130160][ T7684] netlink: 168 bytes leftover after parsing attributes in process `syz.4.478'. [ 78.289093][ T7696] ip6t_srh: unknown srh match flags 4000 [ 78.358041][ T7700] random: crng reseeded on system resumption [ 78.362624][ T7700] Unrecognized hibernate image header format! [ 78.364665][ T7700] PM: hibernation: Image mismatch: architecture specific data [ 78.716134][ T7714] sctp: [Deprecated]: syz.4.484 (pid 7714) Use of int in max_burst socket option deprecated. [ 78.716134][ T7714] Use struct sctp_assoc_value instead [ 78.749836][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 78.763171][ T7719] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 78.767936][ T7719] overlayfs: overlapping lowerdir path [ 78.945125][ T7741] overlayfs: missing 'workdir' [ 78.949496][ T7741] overlayfs: overlapping lowerdir path [ 79.071897][ T7754] qrtr: Invalid version 47 [ 79.110517][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 79.114950][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 79.130886][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'. [ 79.364828][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.507'. [ 79.497417][ T7793] 9pnet_fd: Insufficient options for proto=fd [ 79.718564][ T7810] netlink: 'syz.4.513': attribute type 10 has an invalid length. [ 79.724259][ T7810] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.728007][ T7810] bridge_slave_1: left allmulticast mode [ 79.730257][ T7810] bridge_slave_1: left promiscuous mode [ 79.732636][ T7810] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.748753][ T7810] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 79.757804][ T7814] netlink: 'syz.3.515': attribute type 39 has an invalid length. [ 80.107420][ T7832] loop6: detected capacity change from 0 to 524287999 [ 80.278021][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 80.441745][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 80.443569][ T7849] 9pnet: p9_errstr2errno: server reported unknown error @ [ 80.447928][ T34] usb 9-1: config 0 has no interfaces? [ 80.452715][ T34] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 80.456268][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.459421][ T34] usb 9-1: Product: syz [ 80.461090][ T34] usb 9-1: Manufacturer: syz [ 80.463517][ T34] usb 9-1: SerialNumber: syz [ 80.471597][ T34] usb 9-1: config 0 descriptor?? [ 80.565462][ T7856] NILFS (nbd2): device size too small [ 80.599316][ T7859] usb usb2: usbfs: process 7859 (syz.0.530) did not claim interface 0 before use [ 80.645207][ T7863] loop6: detected capacity change from 0 to 63 [ 80.651510][ T7863] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.654484][ T7863] Buffer I/O error on dev loop6, logical block 1, async page read [ 80.658176][ T7863] Buffer I/O error on dev loop6, logical block 2, async page read [ 80.661243][ T7863] Buffer I/O error on dev loop6, logical block 3, async page read [ 80.664420][ T6472] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.668462][ T6472] Buffer I/O error on dev loop6, logical block 1, async page read [ 80.671648][ T6472] Buffer I/O error on dev loop6, logical block 2, async page read [ 80.674848][ T6472] Buffer I/O error on dev loop6, logical block 3, async page read [ 80.681022][ T6472] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.682353][ T7824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.684810][ T6472] Buffer I/O error on dev loop6, logical block 1, async page read [ 80.688654][ T7824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.696546][ T7824] sp0: Synchronizing with TNC [ 81.483168][ T7866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.535'. [ 81.486396][ T46] ------------[ cut here ]------------ [ 81.488689][ T46] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 81.491906][ T46] WARNING: CPU: 3 PID: 46 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 81.496065][ T46] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 81.498178][ T46] CPU: 3 UID: 0 PID: 46 Comm: kworker/u32:2 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 81.503210][ T46] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.506539][ T46] Workqueue: bond0 bond_mii_monitor [ 81.508496][ T46] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 81.510957][ T46] Code: 05 ff ff ff e8 14 77 59 f8 c6 05 2f dc 2d 07 01 90 ba 48 00 00 00 48 c7 c6 c0 94 e3 8c 48 c7 c7 60 94 e3 8c e8 b4 3b 18 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 46 a8 90 e8 ce 4e c0 f8 e9 [ 81.518417][ T46] RSP: 0018:ffffc900007ef9f0 EFLAGS: 00010286 [ 81.520821][ T46] RAX: 0000000000000000 RBX: ffff88802fc3a000 RCX: ffffffff817ae248 [ 81.524001][ T46] RDX: ffff88801fa84880 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 81.526751][ T46] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 81.529331][ T46] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000fdf48 [ 81.531782][ T46] R13: ffff88802fc3acc5 R14: ffffffff8c591440 R15: ffffffff899be1d0 [ 81.534480][ T46] FS: 0000000000000000(0000) GS:ffff8880d6a53000(0000) knlGS:0000000000000000 [ 81.537399][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.539928][ T46] CR2: 000000110c269812 CR3: 0000000033122000 CR4: 0000000000352ef0 [ 81.542630][ T46] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.545196][ T46] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.547655][ T46] Call Trace: [ 81.548707][ T46] [ 81.549644][ T46] ethtool_op_get_link+0x1d/0x70 [ 81.551403][ T46] bond_check_dev_link+0x3f9/0x710 [ 81.552995][ T46] ? stack_trace_save+0x8e/0xc0 [ 81.554704][ T46] ? __pfx_bond_check_dev_link+0x10/0x10 [ 81.556570][ T46] bond_mii_monitor+0x3c0/0x2dc0 [ 81.558127][ T46] ? __pfx_bond_mii_monitor+0x10/0x10 [ 81.559877][ T46] ? rcu_is_watching+0x12/0xc0 [ 81.561364][ T46] process_one_work+0x9cc/0x1b70 [ 81.562896][ T46] ? __pfx_process_one_work+0x10/0x10 [ 81.564686][ T46] ? assign_work+0x1a0/0x250 [ 81.566163][ T46] worker_thread+0x6c8/0xf10 [ 81.567632][ T46] ? __pfx_worker_thread+0x10/0x10 [ 81.569255][ T46] kthread+0x3c2/0x780 [ 81.570843][ T46] ? __pfx_kthread+0x10/0x10 [ 81.572663][ T46] ? rcu_is_watching+0x12/0xc0 [ 81.575554][ T46] ? __pfx_kthread+0x10/0x10 [ 81.577292][ T46] ret_from_fork+0x5d7/0x6f0 [ 81.578801][ T46] ? __pfx_kthread+0x10/0x10 [ 81.580297][ T46] ret_from_fork_asm+0x1a/0x30 [ 81.581812][ T46] [ 81.582802][ T46] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 81.585097][ T46] CPU: 3 UID: 0 PID: 46 Comm: kworker/u32:2 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 81.589386][ T46] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.592844][ T46] Workqueue: bond0 bond_mii_monitor [ 81.594478][ T46] Call Trace: [ 81.595539][ T46] [ 81.596500][ T46] dump_stack_lvl+0x3d/0x1f0 [ 81.598164][ T46] panic+0x71c/0x800 [ 81.599646][ T46] ? __pfx_panic+0x10/0x10 [ 81.601112][ T46] ? show_trace_log_lvl+0x29b/0x3e0 [ 81.602817][ T46] ? check_panic_on_warn+0x1f/0xb0 [ 81.604503][ T46] ? __linkwatch_sync_dev+0x1ed/0x230 [ 81.606256][ T46] check_panic_on_warn+0xab/0xb0 [ 81.607921][ T46] __warn+0xf6/0x3c0 [ 81.609588][ T46] ? __pfx_vprintk_emit+0x10/0x10 [ 81.611655][ T46] ? __linkwatch_sync_dev+0x1ed/0x230 [ 81.613822][ T46] report_bug+0x3c3/0x580 [ 81.615550][ T46] ? __linkwatch_sync_dev+0x1ed/0x230 [ 81.617714][ T46] handle_bug+0x184/0x210 [ 81.619471][ T46] exc_invalid_op+0x17/0x50 [ 81.621330][ T46] asm_exc_invalid_op+0x1a/0x20 [ 81.623179][ T46] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 81.625408][ T46] Code: 05 ff ff ff e8 14 77 59 f8 c6 05 2f dc 2d 07 01 90 ba 48 00 00 00 48 c7 c6 c0 94 e3 8c 48 c7 c7 60 94 e3 8c e8 b4 3b 18 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 46 a8 90 e8 ce 4e c0 f8 e9 [ 81.631273][ T46] RSP: 0018:ffffc900007ef9f0 EFLAGS: 00010286 [ 81.633098][ T46] RAX: 0000000000000000 RBX: ffff88802fc3a000 RCX: ffffffff817ae248 [ 81.635732][ T46] RDX: ffff88801fa84880 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 81.638468][ T46] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 81.641511][ T46] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000fdf48 [ 81.644649][ T46] R13: ffff88802fc3acc5 R14: ffffffff8c591440 R15: ffffffff899be1d0 [ 81.647635][ T46] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 81.649442][ T46] ? __warn_printk+0x198/0x350 [ 81.650955][ T46] ? __warn_printk+0x1a5/0x350 [ 81.652540][ T46] ethtool_op_get_link+0x1d/0x70 [ 81.654204][ T46] bond_check_dev_link+0x3f9/0x710 [ 81.655817][ T46] ? stack_trace_save+0x8e/0xc0 [ 81.657358][ T46] ? __pfx_bond_check_dev_link+0x10/0x10 [ 81.659252][ T46] bond_mii_monitor+0x3c0/0x2dc0 [ 81.660827][ T46] ? __pfx_bond_mii_monitor+0x10/0x10 [ 81.662529][ T46] ? rcu_is_watching+0x12/0xc0 [ 81.664037][ T46] process_one_work+0x9cc/0x1b70 [ 81.665600][ T46] ? __pfx_process_one_work+0x10/0x10 [ 81.667245][ T46] ? assign_work+0x1a0/0x250 [ 81.668867][ T46] worker_thread+0x6c8/0xf10 [ 81.670343][ T46] ? __pfx_worker_thread+0x10/0x10 [ 81.671957][ T46] kthread+0x3c2/0x780 [ 81.673246][ T46] ? __pfx_kthread+0x10/0x10 [ 81.674716][ T46] ? rcu_is_watching+0x12/0xc0 [ 81.676284][ T46] ? __pfx_kthread+0x10/0x10 [ 81.677813][ T46] ret_from_fork+0x5d7/0x6f0 [ 81.679362][ T46] ? __pfx_kthread+0x10/0x10 [ 81.680794][ T46] ret_from_fork_asm+0x1a/0x30 [ 81.682312][ T46] [ 81.683845][ T46] Kernel Offset: disabled [ 81.685258][ T46] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:25:39 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000001 RBX=ffffea00004a3dc0 RCX=ffffffff81f842e5 RDX=ffff88802d012440 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc90003fa73c0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff88801ce80048 R13=0000000000020901 R14=0000000000000000 R15=ffff88807ffd7400 RIP=ffffffff81bc1588 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f858bee7d60 CR3=00000000299f2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f858b3846a3 00007f858b3846a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa1bb3470 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556495881a 0000555564957470 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555564948ff7 0000555564948c20 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000db00328100004 90030004001da403 0002001da2030002 001da00304ddfeef ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100001080001 0000000806060103 f620808810000d80 0401000006080606 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0167bc0008000de0 030010000dd00300 10000dc003021000 0db0032810000490 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030004001da40300 02001da203000200 1da00304ddfeeff6 08001d98030785f4 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d608001d90031080 04001d8c03600400 1d88032808001d80 031d800404800304 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000005 RBX=0000000000000001 RCX=ffffffff914b49a8 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000001 RBP=ffffc900036070e0 RSP=ffffc90003607028 R8 =ffffffff914b49ac R9 =0000000000000000 R10=0000000000000000 R11=00000000000122bd R12=ffffc900036070e8 R13=ffffc90003607098 R14=ffffc900036073f8 R15=ffffc900036070cc RIP=ffffffff816ad34e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa925bf66c0 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa925bd5d58 CR3=000000004bb2e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3557db40 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bfcc11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bfcc11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bfcc11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bfcc11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bfcc11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bfcc11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff913dea5a RBX=ffffffff90b9d8d4 RCX=dffffc0000000000 RDX=0000000000000007 RSI=0000000000000000 RDI=ffffffff90b9d8cc RBP=ffffffff90b9d8cc RSP=ffffc90004447708 R8 =ffffffff913dea78 R9 =0000000000000001 R10=0000000000000000 R11=0000000000007ec5 R12=ffffffff90b9d8dc R13=ffffffff817ec539 R14=ffffffff90b9d8cc R15=ffffffff90b9d8cc RIP=ffffffff816abd5e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555569bd5500 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3e2f7e CR3=000000005118e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f5e811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f5e811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f5e811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f5e811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f5e811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f5e811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b06ccfe9b9889a20 f6b0d5abb83ae112 09707e5bbe0d1bbe 93de40f17667ceff ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f30bd340b55bc028 f814599166bbb616 475c492b4f410004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b06ccfe9b9889a20 f6b0d5abb83ae112 09707e5bbe0d1bbe 93de40f17667ceff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bef968132d643eac bdaa636c7b091374 8a687fb51e4bfec5 1dd579a97c7143b6 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d70010dbf1abfb98 734ee45073f4da12 eaaa0bc6defd1a37 4a25d36fd0b466c0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a39d4f5b30e09777 811953abedba338b e7a6fd30b89c9a06 a9ea05f6da45a336 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66ab15853388a4f9 fc677c4e97308b14 eda88628329a792c 733d40b47a8c603b ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855ba255 RDI=ffffffff9b0893a0 RBP=ffffffff9b089360 RSP=ffffc900007ef360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000003a R14=ffffffff9b089360 R15=ffffffff855ba1f0 RIP=ffffffff855ba27f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c269812 CR3=0000000033122000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5db1011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5db1011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5db1011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5db1011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5db1011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5db1011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5db1184488 00007f5db1184480 00007f5db1184478 00007f5db1184450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5db1ced100 00007f5db1184440 00007f5db1180004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5db1184498 00007f5db1184490 00007f5db1184488 00007f5db1184480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 000000000000011c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000