last executing test programs: 3.281383779s ago: executing program 0 (id=537): r0 = openat$kvm(0x0, &(0x7f00000004c0), 0x2182, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400"]) 3.150494568s ago: executing program 0 (id=539): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) openat$adsp1(0xffffffffffffff9c, 0x0, 0x101000, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.150212718s ago: executing program 0 (id=540): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000020c0)={0x89, 0xcfc, 0x4, 0x57, 0x6}, 0x14) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000161000/0xf000)=nil, &(0x7f00001df000/0x3000)=nil, 0xf000, 0x2, 0x2}) r2 = syz_open_dev$evdev(&(0x7f0000000880), 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80284511, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) read$FUSE(r3, &(0x7f0000002100)={0x2020}, 0x2020) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000002c0)="660f3a42db1cba210066b8a63cfcae66efbaf80c66b82689638666efbafc0cec0fb62bb849008ec80f09ba2101ec650fbef50fc7ac09000f20d86635080000000f22d8", 0x43}], 0x1, 0x52, 0x0, 0x5a) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x250, 0x268, 0x300, 0x250, 0x268, 0x360, 0x460, 0x460, 0x360, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x24, 0x0, 0x0, 0x5, 0x9, 0x0, 0x18}}}, @common=@frag={{0x30}, {[0x2, 0x4], 0x8, 0x30, 0x4}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x2}}}, {{@ipv6={@private2, @mcast2, [], [], 'vlan0\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1a, 0x0, 0x20000000, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) 2.961471111s ago: executing program 0 (id=543): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xeffffffc}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)={0x10c4, 0x3e, 0x100, 0x70bd2c, 0x25dfdbfc, {0x17}, [@nested={0x6, 0xea, 0x0, 0x1, [@generic="fc54"]}, @nested={0x1008, 0x149, 0x0, 0x1, [@generic="352417ad2ebaadf1ec94a6ba5b92620b38c8d0b6a802cba7d38d1cdd8d665248afae88dee68b6f54bc24e0cec16c41082dea7aa6bdf0d705aa4bf13be860c3a7d74abaac66f88d2d72a0fb0fe5405f25ad5ee330b860fb91a6aafaa033d3b15f0ba6ac63c87ec966646fd988f1b7c92c43367caf545366183251c426144162dd4f9b777f1a8a5b10794cc822f581858504eeb02023775dd9c241b21e27d41564f54c56861e236cae391a002758552087ccf5f19af87c0612a6579f08b2e2685fc3fdd3095a00a6ac3b5199dd2967d9de9df7187acf2d865820141af259bcf75fd127698b69b4ac474ada8f303b770109b67c1a76bec10490085504c5d36796c34f80486facad70442ccdb199f771e09ee2cc56575a914429b255f40a2f447a009461d830a3469d9593a9be67e1e696940e51c7f308b78d156952acea7ddfc33e7eeb8a5508b43d9cd5b80cbcb2774b7d8d5e61386859291263166d3702d8122a205a0d884a059e9035d255a889f9a7b076a57e69e6cf98d606f2940a52c00f3b612be1667023277c0e3ba18d10bd3a9efd9aa33685353c1dba202633ce995301737e8225525ab45dac753287c0feca315026ec538a5028a70dd98151d36228321d00b15b737b301b1077a2e67904cf9fb8eb7fc8d677826831ecf1bbc47a3f89ad4cf745de79cf812ddbb46dc7a2b9491d083723a6965f9bd5ceba24180effed1401ba8f6f733b92b2454fce89d6cc8e74517ec2ba520f960ab7968f80fc1f1562c6dc1d4b8877a8d863103456f27692323f646cce8aa376a0adfbb319aa788d916cc2e35380dd890afc34879894e2bf939ca15abd9b807720b7388365e12080a1a50c90f2154a15a60ad0c9c965e34af2f110b58a16ad711e51afe30edc42575eff8464f5552354fae7c1567693c83c26dbd29f564828d2c8007689edd36412e8b747092e1263aebeb62f0b742dbe016057ae3a854eeb5b08a616665a715dd5d7fd8ab4d253b68d16e76172099d8f6c699aaf05aed993626cd59db727dce11e3b2f6a9a533187fcb4f90ee63d4aff44775e6d1bbc3c5392c2dff9db42dd07af96748f5646124499b6d6f5127a3996cbe3059cb30b7685e2ea514d01b1f1368f8c475bd8c261ff4ae8a494bff759dabd0d7a41ac4ad2e197bdf35669f04e5248ba9bcbcd207bd2ed5130dd372a1bb32e0aace380a55811e5de0ec107ef2e573240db0b4e072ddfad45d25030f5467f024df8fc6721373ffd6a9b14ff0e446577accb22b4fb28ab401adcb891c9a47050a825f28c1c826a8da6a7d13e363ad24728b131da5393e4fe8ad4bd29013850f2704aefb0625724c6c42cee32e38658df5b6ddff94023df202d5e4e9f5f0221d47b556670846a2abd80abf1b43318d8f1974b002029d556a29d0e62ad74627adeb9de66efd08f4e421cda2ddd7f904b72c2fa83bf767199ff07f466bada0c0e58d682c719a66eb952723727c975a26bb4cb94600f2e3b9196598d37c7058191ee7a0c10315045c93036d95f593937e3880904bf1f2619530e7371601e0caa976f51f2be71648017a8bc0b54f6462a08c830c53b53f4e0ebc32a2edd4bdebbbdcc84be9dc5a016c3e964db61d12d155ce1c92a1548ef98e018617bcf6af285d798b71037f03f9f9e4cee168fd23c423202bc6b09460df90b758adb2f6ad319fa65e3c90bee76d40b05b6c358230a21b9f2987ddae2c6ac6dcbd095f5b897c7d04ad16c22690fed95fd72dd415d7ca1597fd300ba5bc6a8be24a441016847fc55ffcc69ea576952a81ea214975081d875639601e79502333e0df94be6a10b3e92acc97035090d61cca2a61d5ac12b37e2e6556037996d5dfcd039d4aa3066050fd54e7b9a0fe9c29efe6cf7445fa3e7a0cc1ee4a66363d7417d2945c09ca3397b5be676207c5b7aab16ed6d4da3fb135a2ee3e0480584a81acd7eb11ecf2fdcf5ebcdcc7846c979c3d51577308f3c144a4a14e09760269f60ab8df99a592b07d2695c0bd65f1ad1309d0bb7e5c0b944cd923382de586c118df07ccb4dbaeef0703caea0ecae9e1edeea834ce21f992a4b3a41ee17121b558150d707f44e6a892406ea95e4fc1a05aad867e49504fdfd3f7d16f3201e92bb2eb0d92b6f0b01ecf202a5c68cd6de313565cc768038a21a437db0fe443eea4e5132f3603d9888d2cbe6ae86b14aed27fa0239e77dca27631eee19a86a752cec82fa00f4bdbac34d0c5e3cbcd1bb04971a7c7b2a88dd493ff6a6204f9bc4e53f643b0ccea5b8c11ec65aab84d477f3b21a5d5856223f2defac3d556a3596edf579b30b542727af096b30b1abfaee743efb8c05a57a94729b90c1802edca7825b101d624c3e3510cd03c5572412e7a5f0cf9785ed53d3900e8fdc6e1c2bfd796ee0a40e6cd5f16b51b31f84f2f442d983ba49fcd1c293e4f6b8a001e9f3e08f89e209196197c0da56f7cff9dfb4b829df3fe62b39d82164c66bee31ffddd494fa1e0b53364f8789d495f68d4ee460be31081cc669fdab4d34efae6daf0d99d0eaa6c041fbe053519d802747bbedba12f55307f54c8347ba42c46363896877f75af2ca982fa01492f8aeef5a3c127a63c1e9f4d84252395c1dcde05ef6189864c3bcbfbd7d93d0da9f3ec3100ba604178d5e0750a41e269136815c5b921ad6aa31bf13a83ff72d7ec09c75ae8a7343f8ba971fd16615535f92efc190e845674b700e3461afd6e1998171df3c1b3dc66920597c14a6abe21db09a21aafe8875bfe66df9dc458af70d0c6976528e9987772584ce115c0fd005c57f9700ccf778ebf35038fa1aa0f270d9e2866d7a30bc5a525ff78149f0d4d525a10baf903fdb578a8bcddfc6920328372fc7f9085ff8a5c5972ac238f708cb5766c9796ca650714b2185e81424ec9cbe709d4e5a5dacb8afd52a0c231a797d9dd7c1165ece091093462a0ee99bedd0df49aff84785827da13359af2d339d12d175c4e27b5ba5359272c31f474e53264e1f73a7ebcdf6c99a2988353db536eb1d1deec15449905368bf51678d3ca7f95d1c30e30cdc07fea434f8fb25091f919daeb51e1800a02f7ab597148e21d9a16cf12b7d62a449ff66ec8a5fea8d20208f27912ed8df2306cd5c654ab95f6d00e30a45a67e757c27d943c64ffe85b7e7b949bfe08825867cf1d88f223983bfda70f53042fabb6bb7e68056de75af128d019a63b44a21b2176a6fc144c07f00a2d8ebf830c178e5cb272110bb33992312b8139de42405d8668569a697982a62597f76ebbb6dae80d32c941d56aaa808e2545f7287423aed369bb8ee8ba4e4f5d0756dd0a1cb16f8e8507a7263e60affb33ccd7aaed61b1a7d9bac8690ffb4bd71a7c80312c7db19d63eae382d1df39b8815fd8d22b4859de1705a6a83169107d36b4564aaae0f5b86a66fb59eebd5f7e9bdc07fb94c83d362f06fcc289b3a9c173f8c09f231936362196f8dda67c87df66e4c4f2295fa080cbb25aa07f2bb67bf5e52389cd4ddf6b064d5ac0969e0f0a3824066d8c0551faee6ecec05472c0477832ff84954cb1e411311aaf6388ce252ca328619876206dcc51be205b4564893fee0d77ef2108ad271e68468f0a29cb13cf995f7b93737cc3920fd56452aa7307c2e652c7dab7dfdea547b02a6692f27d91677b7b3e69a7424648f38f79c19e2c5dacdedb7fe9440959339377c78b91b72801c61e1a66e82741e5a38f6ea3336e304c6820dcec0e015c66fbf87078014d870416fb9174d65f7c3974d5109905af8b34ce780603d4cb69b678e9d900fa4aa2d5bc378b720efcdd07d9e39d9a5d6326cb9c63fcf0175954a1ef95b384d6d8d036f844dd6c8f5d4dd8fd528bbeecc16e2f43aef8cc4a236435be8bd28a685dc4d138ce565305f6fb63d394610d94dc0b22372b5c853c4e3dfe8120f67bda126394d1149f4fb99f6ab253817112d4e43f6afe8bed1616dc84f7acc93d576d7bb900eaf5e1516582ed7313ec75da37fbc82a0136c355e10100070fcdbfd1260793b0fee5204286ed67a76b4866643a01c095972721e9d80f47a4204e70a2a1a7d288f170f6a16feb056d7f9b67c1a91066bb1ded9c67295a485d98dd21afdeb4981e8eb88e6354649bb5d07eaea61ff8bc32caf1e3aea79f9151a42f65aece4b96b3b8e226d96d905a4260b72936084117bce27da71a071693f3464a9388de1a4ac1b90e1594c9d211cdb1dae19aaf5359016376067ac07a40d0aadc8c44303c9a404a8bf8d6d35fda0c67179c4fc12ca41f7c29c41ebd6ce2554280e3ef9970e406b70f6892b4433af07834dac7ffd2e2f2b7fa4ad57140883858c0194089c9b931845e3c7de1d9273576d87fa94d52af32de28c55c57b2ddae19b1eb80125c0225b60698ce445fdfc06b829df74958f728464ba70453b7f8070af4069b90ed2a323e1d479fa639bd780f75b309d28fa54a78228993c87e534bfc89c532e578b9b626a161192acb6a2db1fb8794a791aafae669705e31f9ac5be047119113a16037adf96b8ae0fde894e11de0f3db2bf8659f38db6ad2c6c3edca2832caed3052eddb0cd48f4148fc3772a4fdc6f70e56b2f295fa239616390db62252e2e826577ffd04eaecda4ca3b5a5cb6581e3cb7168c8509fdda24d0642e64018868a6402604707abd30b8a74cc38d01b4152c04c807aa3ff7fec08e52a963bc9a190c009eb479566da32bf19858ad47ef611f7e8fcd08d2a7691460ed5b14962e8071223e801247bcb435316a1427abf806c2d7e4951029bc51c725e50e161fe6819acedd83ce59b50a3ce7a5b988c06eb8fd04828be1b236e6c3b316a313ccd20859b9080406973ef26b5e177387253fd3ebd92baecea07522a3ad269fb71ccad9c4b4299e006bbf74b99a1179456bb4ba2e446f75edfe3439a389208d361b0929bada4f9e685da4b55d834438931f9dbeb43eb60db67640de9899695049454cc7b8f1ce56b70f94e9831dc098c54d862dba4692271e0a3927c6bae57d50b6a33dd8a7f2a4aef2a0d7dfc9f76fa1f8620d7a220f4ddfe21a2e99f8dbb16dc68e96b9d91f58e9048b9420dd6a70577d668f4f9d17d515e103744738fc4521728bf32bc383388d9540dc67b4275fd4d992404bb31a001d543392835a86932366a58f150243548b9a540184772d695bc29ee3afcafa5c277bb0ca13c06d32ba1dc90a53901cc86fa8905379360a832b0e61a7324de6eb905b5dba20453fb292402764930e348c185b84ba209fb3dec897915f6836398e5871b0fbf33a0bc0baae24c38dd168504967f997d47a0a18e966b931230f82d1c6029a2b9a92420cd5e64ef44950a02023c809ed943b758909c28fc6e268a035edbdf2b48448dcc509df5fc144bdc171bed6b848065008f65c60f355fd5e01e53264a0cc431da599f3cda63512a8ffbf1b28d62ebe5d6f06014935ff7c250849b78b3dedf7b1b9cd9686abe9f5c79de823c3aea73f839358fb7a90c7aa414f08418b6f64adcbe38c605d41398071b78b7ada84ec3ad01e1395d77cd193de09ee9382981590d7209125f6dcabe44d7e73b3941edbbcab181b7aa97ee889e35e259b1612a5b367921f1a598ed3ca71cdf9334d1093eb8b5a675d8a46e93c77a345b6d5ac4ce005aecafdaf182c2e45b908e70d7bede299f39381286621c7105d4903804ebc4beb1e1ee5bb6f13eb2c14886905f4058ab205c93214b939ce75fe6fc198eaac9abbda2da5d39c537b0c06a0a0ad31ac4e95c22130be9a8d05b332ae6ff20f5cd226de3f126589ae304dfd69", @typed={0x4, 0x6e}]}, @generic="c828aeb94b4e11eef14b7bc0584c75c10ab8497f1a1db3652f87efbbf25deb75612401e30e9fb8686e9de6fdfbe2624e2da43b8484c26abc5b8fbf976d95081ee415818bda236e35aab336f2f21f16b9f2fa48780e8c852b48fc229355b6096614b8f03a8d059da9ab0c1bebbadb", @nested={0x2e, 0x122, 0x0, 0x1, [@typed={0x14, 0xd7, 0x0, 0x0, @ipv6=@remote}, @generic="1a5c", @typed={0x12, 0x63, 0x0, 0x0, @binary="6f098c9c93c7f628a2e18397d78e"}]}]}, 0x10c4}, 0x1, 0x0, 0x0, 0x4004010}, 0x10) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e21, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}, 0x0) 2.961231651s ago: executing program 0 (id=544): r0 = syz_io_uring_setup(0x236, &(0x7f0000000240)={0x0, 0xebcc, 0xf, 0x2, 0x2b}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000002c0)={&(0x7f0000001000)={[{0x0, 0xfffffffffffffece, 0x3}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) accept4$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000300)=0x6e, 0x800) (async) accept4$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000300)=0x6e, 0x800) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) landlock_create_ruleset(0xffffffffffffffff, 0x6c, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='freezer.self_freezing\x00', 0x0, 0x0) preadv2(r4, &(0x7f0000000280)=[{&(0x7f0000000340)=""/198, 0xc6}], 0x1, 0x0, 0x0, 0x0) (async) preadv2(r4, &(0x7f0000000280)=[{&(0x7f0000000340)=""/198, 0xc6}], 0x1, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) (async) io_uring_enter(r0, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000203010200000000000000000000000000000002000100000800054000000002"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) 2.881425806s ago: executing program 0 (id=545): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1081, 0x124) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@deltclass={0x44, 0x29, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x5, 0xa}, {0x8, 0xf}, {0x9, 0x10}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20008081) write$FUSE_INIT(r4, 0x0, 0xc) 786.801101ms ago: executing program 2 (id=591): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000b00)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="0b03000000ff25000200475400f6a13bb1f8", 0x12, 0x0, &(0x7f0000000140)={0x11, 0xf5, r2}, 0x14) (async) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) (async) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async, rerun: 64) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100e29b5c20c4209adcc7cfda313c34c26b3566bf81d8c03d87c4e53f566cdecae75363285ed61c0204e634668c970eff4bcf02a2d89b4709413ae4124db5b52969f4d496de03743a1ea8a984dcafd895e01ad3c6253b9122a2d63115dac8aaa67b4047ced4cdae73c931c9770b1ed87ae99438d4445444fad17cb4bf695d1f840794fe1fe8e01e93943cea758766738d4c70dc7935e3b2798ce023a148c42ef39ab0da2b3c6b50b5ac562703af4480e049e5cb55968c990237371246557627a2215abfbb7d8fdeb78c2a383dba48387cf1533698e10c87456179aef11047ea2656", @ANYRES32=r0, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 671.02483ms ago: executing program 2 (id=595): setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) (async) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) close(r0) (async) close(r0) socket$inet(0x2, 0x0, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xa0, 0x340) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x10000, 0x3, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x9, 0x9}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x10000, 0x3, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x9, 0x9}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000300)={{0x5, 0x5, 0x7, 0x5, '\x00', 0x5}, 0x0, 0x200, 0x827a, r2, 0x4, 0x81, 'syz0\x00', &(0x7f0000000140)=['\x00', '\\\x00', 'veth1_virt_wifi\x00', 'veth1_virt_wifi\x00'], 0x23}) 610.52372ms ago: executing program 2 (id=601): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x24, r0, 0x121, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}}, 0x0) 551.098027ms ago: executing program 2 (id=602): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) openat$adsp1(0xffffffffffffff9c, 0x0, 0x101000, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 550.395687ms ago: executing program 2 (id=604): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002fbd7000ffdbdf250800000008000200000000003000018008000700", @ANYRES32=r3, @ANYBLOB="080003000a01010206000500030000000000002f0000000000000000000000000000000053e6e046a6b9469c6974d34108ef8f760a173bf2a7961d487e2ea927fbf2e56c8f3be58ec0248a08e60e37690eae9dde5198f85ec3f7d037ca412666688c635b08e7d91f048f3d7bb7aea30c8741ccbb117d34cdcaabceda6e0f470b33e1b2819738d8e4bc"], 0x4c}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r4, @ANYBLOB="080003"], 0x80}}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000001e00010000030000000000000a0000000100000000000000080001"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000700039022abd7000fbdbdf25070000009c487998f18ba266c824b54f41f422b115f703cb305bd708ff3b8211bf908ad5c2f6a8ea753ae9ac40b08f9f50eebd057c709111796b22e845b9d693c153323fc661d02447ccb70c35c93825204814a22c30107a2de4648975aab108b010b4bd6ac38ebc79cca2dc694da444517c61a0554ca329b151258517aa03b332f29647b9c2c28d4da1e4ff7947cb8e8223cd087575772a59f6838d6dfdc5ea01204c63bd7700d25380fb61db35ffa1611c497a60edd4556a4c31ac33ec76061a691ccb0976ffeb871543a58c50eb7da0", @ANYRES32=r6], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) 481.334211ms ago: executing program 2 (id=606): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x56, 0x54, 0x48, 0x20, 0x5e1, 0x408, 0x2511, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0xc2, 0x5d}}]}}]}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[], 0x240}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000001600)='\t', 0x1, 0x11, 0x0, 0x0) 410.425061ms ago: executing program 1 (id=609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xd}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}]}, 0x58}}, 0x4001) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004011}, 0x20008000) 341.353811ms ago: executing program 1 (id=610): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x24, r0, 0x121, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}}, 0x0) 340.665019ms ago: executing program 1 (id=612): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) syz_io_uring_setup(0x5ce6, &(0x7f0000000180)={0x0, 0xafbe, 0x4, 0x2, 0xc, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) 339.927199ms ago: executing program 3 (id=614): setresuid(0x0, 0xee00, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="b0", 0x1}], 0x1}}], 0x2, 0x0) (async, rerun: 64) shutdown(r0, 0x1) (rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) (async) setgid(0x0) 250.805161ms ago: executing program 3 (id=615): r0 = openat$kvm(0x0, &(0x7f00000004c0), 0x2182, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000004000000"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) 181.270949ms ago: executing program 1 (id=616): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000080), 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x5420, 0xfffffffffffffffe) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) cachestat(r6, &(0x7f00000000c0), &(0x7f0000000100), 0x0) signalfd(r1, &(0x7f0000000000)={[0x97a]}, 0x8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0x38, 0x0, 0x42, 0x6e}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x7}]}, 0x0, 0x2}, 0x94) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001002bbd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="08000000190205001c00128009000100626f6e64000000000c0002800500110001007e7ee2aa16e391820000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008880) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 180.856195ms ago: executing program 3 (id=617): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @rand_addr=0x64010901}, 0x10) mkdir(&(0x7f0000000000)='./bus\x00', 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x11dbc08, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) inotify_add_watch(r2, &(0x7f0000000000)='./control\x00', 0x40000000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) listen(r0, 0x1ff) sendto$inet(r0, &(0x7f00000004c0)="ab", 0x1, 0x20c0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback=0x7f0000c0}, 0x10) 101.221042ms ago: executing program 3 (id=618): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20040840}, 0x20044000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) 937.692µs ago: executing program 3 (id=619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 722.308µs ago: executing program 3 (id=620): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r3, 0x105, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xa}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000001000a00000800040001000000", 0x24) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x2004c891) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000400)=ANY=[], 0x1df) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001240)={0x38, r10, 0x5, 0x4, 0x4, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x1}]}]}, 0x38}}, 0x20004000) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x14, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=ANY=[@ANYBLOB="1c00000034400701fdfffffffeffffff017c00123fbb218004004980"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000010140)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r12}, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x4, 0x0, 0xfd, 0x1, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r14, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x1c, r15, 0x1, 0x70bd29, 0xa5dfdbfc, {{}, {@val={0x8, 0x3, r16}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x44040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b5cca7080000000000fb2c428c8610ff070000000000c9cead501ff3000000000005000000bb00e8ffffff00"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) 583.599µs ago: executing program 1 (id=621): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x24, r0, 0x121, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}}, 0x0) 0s ago: executing program 1 (id=622): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000500000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, &(0x7f0000000000)={0x1d, r4}, 0x10) (async, rerun: 32) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f00000000c0)=0x2473, 0x4) (rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xb, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x40044) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) syz_emit_ethernet(0x5c, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x4, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0x4e20, 0x3a, 0x0, @opaque="8d15d869c9b0cd316028b069edfd3613d37dae4109d12fbcdd86c270ccc837a63839b848fcaf1b8b65b4cd3a332852f07310"}}}}}, 0x0) 0s ago: executing program 3 (id=623): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000c00000000100c0"]) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, "00000000eabb000003a8a40000000000004000e5ffffffffffffff000000000010000000000000000000000000000008000000000000000080010000000048004000"}, 0xd8) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000300)="27050200340f14000600002fb96dbcf706060000170008005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600004000000000805db18f", 0x4b}, {&(0x7f0000000380)="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", 0xeff}], 0x2}, 0x20008010) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x65, 0x10000, 0x4, 0x2, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x800, 0xe, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0x1000b, 0xe69, 0x3c, 0x8, 0x6, 0xb, 0xfffffffc]}) kernel console output (not intermixed with test programs): [ 38.188113][ T40] audit: type=1400 audit(1752924389.257:60): avc: denied { rlimitinh } for pid=5856 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.194054][ T40] audit: type=1400 audit(1752924389.257:61): avc: denied { siginh } for pid=5856 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:33846' (ED25519) to the list of known hosts. [ 39.087870][ T40] audit: type=1400 audit(1752924390.177:62): avc: denied { name_bind } for pid=5863 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.109433][ T40] audit: type=1400 audit(1752924390.197:63): avc: denied { write } for pid=5864 comm="sh" path="pipe:[7187]" dev="pipefs" ino=7187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.128177][ T40] audit: type=1400 audit(1752924390.217:64): avc: denied { execute } for pid=5864 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.134919][ T40] audit: type=1400 audit(1752924390.217:65): avc: denied { execute_no_trans } for pid=5864 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.143657][ T40] audit: type=1400 audit(1752924392.237:66): avc: denied { mounton } for pid=5864 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.145997][ T5864] cgroup: Unknown subsys name 'net' [ 41.297217][ T5864] cgroup: Unknown subsys name 'cpuset' [ 41.301085][ T5864] cgroup: Unknown subsys name 'rlimit' [ 41.539353][ T5911] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.211273][ T5864] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.055945][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 45.055956][ T40] audit: type=1400 audit(1752924396.147:80): avc: denied { execmem } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.267699][ T40] audit: type=1400 audit(1752924396.357:81): avc: denied { create } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.274714][ T40] audit: type=1400 audit(1752924396.357:82): avc: denied { read write } for pid=5949 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.281842][ T40] audit: type=1400 audit(1752924396.357:83): avc: denied { open } for pid=5949 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.289293][ T40] audit: type=1400 audit(1752924396.367:84): avc: denied { ioctl } for pid=5949 comm="syz-executor" path="socket:[4833]" dev="sockfs" ino=4833 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.302574][ T5953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.305207][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.308248][ T5953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.318380][ T5961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.319741][ T5965] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.321064][ T5961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.322269][ T5953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.323032][ T5953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.325396][ T5961] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.327414][ T5953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.328139][ T5966] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.328532][ T5965] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.328622][ T5965] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.329369][ T5965] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.329792][ T5961] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.330156][ T5961] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.333117][ T40] audit: type=1400 audit(1752924396.417:85): avc: denied { read } for pid=5954 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.333142][ T40] audit: type=1400 audit(1752924396.417:86): avc: denied { open } for pid=5954 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.333404][ T5313] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.335289][ T40] audit: type=1400 audit(1752924396.437:87): avc: denied { mounton } for pid=5954 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.337964][ T5965] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.342433][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.371311][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.504409][ T40] audit: type=1400 audit(1752924396.597:88): avc: denied { module_request } for pid=5954 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.572408][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 45.595302][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 45.615244][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 45.656444][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 45.788994][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.791227][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.794817][ T5954] bridge_slave_0: entered allmulticast mode [ 45.797389][ T5954] bridge_slave_0: entered promiscuous mode [ 45.817337][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.819578][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.821950][ T5949] bridge_slave_0: entered allmulticast mode [ 45.825174][ T5949] bridge_slave_0: entered promiscuous mode [ 45.840230][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.843283][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.845491][ T5954] bridge_slave_1: entered allmulticast mode [ 45.848631][ T5954] bridge_slave_1: entered promiscuous mode [ 45.855222][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.857460][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.859664][ T5949] bridge_slave_1: entered allmulticast mode [ 45.862967][ T5949] bridge_slave_1: entered promiscuous mode [ 45.955104][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.957559][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.959915][ T5951] bridge_slave_0: entered allmulticast mode [ 45.963386][ T5951] bridge_slave_0: entered promiscuous mode [ 45.967872][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.984726][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.987699][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.989946][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.992575][ T5951] bridge_slave_1: entered allmulticast mode [ 45.995146][ T5951] bridge_slave_1: entered promiscuous mode [ 45.998945][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.002470][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.004704][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.006944][ T5952] bridge_slave_0: entered allmulticast mode [ 46.009471][ T5952] bridge_slave_0: entered promiscuous mode [ 46.014085][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.081198][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.084252][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.086533][ T5952] bridge_slave_1: entered allmulticast mode [ 46.089050][ T5952] bridge_slave_1: entered promiscuous mode [ 46.119321][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.123998][ T5954] team0: Port device team_slave_0 added [ 46.139346][ T5949] team0: Port device team_slave_0 added [ 46.142544][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.146530][ T5954] team0: Port device team_slave_1 added [ 46.149842][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.155010][ T5949] team0: Port device team_slave_1 added [ 46.183227][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.255938][ T5951] team0: Port device team_slave_0 added [ 46.258332][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.260486][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.268777][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.286654][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.288859][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.297659][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.302437][ T5951] team0: Port device team_slave_1 added [ 46.304677][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.306864][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.314937][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.319805][ T5952] team0: Port device team_slave_0 added [ 46.322332][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.325044][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.332928][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.365666][ T5952] team0: Port device team_slave_1 added [ 46.397077][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.399253][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.407179][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.410904][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.413659][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.421427][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.425906][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.428052][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.435848][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.455929][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.458653][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.466821][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.534047][ T5949] hsr_slave_0: entered promiscuous mode [ 46.536267][ T5949] hsr_slave_1: entered promiscuous mode [ 46.554838][ T5954] hsr_slave_0: entered promiscuous mode [ 46.557008][ T5954] hsr_slave_1: entered promiscuous mode [ 46.559380][ T5954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.561733][ T5954] Cannot create hsr debugfs directory [ 46.578014][ T5951] hsr_slave_0: entered promiscuous mode [ 46.580291][ T5951] hsr_slave_1: entered promiscuous mode [ 46.582351][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.584639][ T5951] Cannot create hsr debugfs directory [ 46.620371][ T5952] hsr_slave_0: entered promiscuous mode [ 46.622551][ T5952] hsr_slave_1: entered promiscuous mode [ 46.624504][ T5952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.626842][ T5952] Cannot create hsr debugfs directory [ 46.933818][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.939424][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.943804][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.951885][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.977324][ T5952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.981665][ T5952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.985959][ T5952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.990925][ T5952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.028192][ T5954] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.036413][ T5954] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.043056][ T5954] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.050058][ T5954] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.095896][ T5949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.104021][ T5949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.108002][ T5949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.115698][ T5949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.145530][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.163196][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.171039][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.179361][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.181627][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.202630][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.204835][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.211538][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.217484][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.228388][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.230615][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.238695][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.246112][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.248333][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.251471][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.253756][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.265842][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.268034][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.280841][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.316825][ T40] audit: type=1400 audit(1752924398.407:89): avc: denied { sys_module } for pid=5951 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.328040][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.339530][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.341774][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.351177][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.353466][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.382519][ T5958] Bluetooth: hci1: command tx timeout [ 47.384415][ T5958] Bluetooth: hci3: command tx timeout [ 47.386205][ T5958] Bluetooth: hci0: command tx timeout [ 47.392542][ T5953] Bluetooth: hci2: command tx timeout [ 47.393554][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.420127][ T5951] veth0_vlan: entered promiscuous mode [ 47.425207][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.435982][ T5951] veth1_vlan: entered promiscuous mode [ 47.441329][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.468390][ T5952] veth0_vlan: entered promiscuous mode [ 47.475783][ T5951] veth0_macvtap: entered promiscuous mode [ 47.481937][ T5952] veth1_vlan: entered promiscuous mode [ 47.490918][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.495767][ T5951] veth1_macvtap: entered promiscuous mode [ 47.516521][ T5954] veth0_vlan: entered promiscuous mode [ 47.519695][ T5952] veth0_macvtap: entered promiscuous mode [ 47.525837][ T5952] veth1_macvtap: entered promiscuous mode [ 47.531970][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.537145][ T5954] veth1_vlan: entered promiscuous mode [ 47.546018][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.553965][ T5951] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.556731][ T5951] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.559479][ T5951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.563344][ T5951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.576862][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.586877][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.589480][ T5949] veth0_vlan: entered promiscuous mode [ 47.600643][ T5952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.604138][ T5952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.606850][ T5952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.609525][ T5952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.615608][ T5949] veth1_vlan: entered promiscuous mode [ 47.624222][ T5954] veth0_macvtap: entered promiscuous mode [ 47.636175][ T5954] veth1_macvtap: entered promiscuous mode [ 47.641660][ T218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.644626][ T218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.659999][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.670187][ T5949] veth0_macvtap: entered promiscuous mode [ 47.675961][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.678448][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.683656][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.688161][ T5949] veth1_macvtap: entered promiscuous mode [ 47.701847][ T5954] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.704929][ T5954] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.707626][ T5954] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.710340][ T5954] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.718628][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.720078][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.721257][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.735168][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.740432][ T5949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.743844][ T5949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.746910][ T5949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.749774][ T5949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.753345][ T5951] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.766526][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.769583][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.797539][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.799996][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.827040][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.830086][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.862433][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.864871][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.874124][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.877430][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.092887][ T6035] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 48.173677][ T6061] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11'. [ 48.214015][ T6061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.218189][ T6061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.221673][ T6061] bond0 (unregistering): Released all slaves [ 48.254859][ T6035] usb 5-1: Using ep0 maxpacket: 32 [ 48.259622][ T6035] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 48.262949][ T6035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.265646][ T6035] usb 5-1: Product: syz [ 48.267026][ T6035] usb 5-1: Manufacturer: syz [ 48.268536][ T6035] usb 5-1: SerialNumber: syz [ 48.271900][ T6035] usb 5-1: config 0 descriptor?? [ 48.276340][ T6035] usb 5-1: no audio or video endpoints found [ 48.480957][ T6035] usb 5-1: USB disconnect, device number 2 [ 48.745290][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 48.748111][ T6068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14'. [ 48.750896][ T6068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14'. [ 49.038382][ T6087] batadv_slave_1: entered promiscuous mode [ 49.041241][ T6087] batadv_slave_1: left promiscuous mode [ 49.084748][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 49.139603][ T6092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.24'. [ 49.149071][ T6089] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 49.152792][ T6089] team0 (unregistering): Port device team_slave_0 removed [ 49.157888][ T6089] team0 (unregistering): Failed to send options change via netlink (err -105) [ 49.160832][ T6089] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 49.164463][ T6089] team0 (unregistering): Port device team_slave_1 removed [ 49.462619][ T5953] Bluetooth: hci2: command tx timeout [ 49.462973][ T5958] Bluetooth: hci0: command tx timeout [ 49.463001][ T5965] Bluetooth: hci3: command tx timeout [ 49.463029][ T5965] Bluetooth: hci1: command tx timeout [ 49.841761][ T6095] smc: net device bond0 applied user defined pnetid SYZ0 [ 50.144069][ T40] kauditd_printk_skb: 63 callbacks suppressed [ 50.144080][ T40] audit: type=1400 audit(1752924401.237:153): avc: denied { bind } for pid=6117 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.152734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 50.163016][ T67] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 50.165608][ T40] audit: type=1400 audit(1752924401.237:154): avc: denied { setopt } for pid=6117 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.218676][ T40] audit: type=1400 audit(1752924401.307:155): avc: denied { read write } for pid=6125 comm="syz.3.41" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 50.227907][ T40] audit: type=1400 audit(1752924401.307:156): avc: denied { open } for pid=6125 comm="syz.3.41" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 50.244062][ T40] audit: type=1400 audit(1752924401.327:157): avc: denied { watch watch_reads } for pid=6129 comm="syz.3.43" path="/9/file1" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.323200][ T67] usb 5-1: Using ep0 maxpacket: 32 [ 50.327484][ T67] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 50.330283][ T67] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.333175][ T67] usb 5-1: Product: syz [ 50.334500][ T67] usb 5-1: Manufacturer: syz [ 50.335950][ T67] usb 5-1: SerialNumber: syz [ 50.344265][ T67] usb 5-1: config 0 descriptor?? [ 50.348711][ T67] usb 5-1: no audio or video endpoints found [ 50.434135][ T6150] Zero length message leads to an empty skb [ 50.474344][ T40] audit: type=1400 audit(1752924401.567:158): avc: denied { create } for pid=6155 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.480397][ T40] audit: type=1400 audit(1752924401.567:159): avc: denied { setopt } for pid=6155 comm="syz.3.55" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.486960][ T40] audit: type=1400 audit(1752924401.567:160): avc: denied { connect } for pid=6155 comm="syz.3.55" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.549146][ T6017] usb 5-1: USB disconnect, device number 3 [ 50.612190][ T67] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.639020][ T6167] syz.3.60 uses obsolete (PF_INET,SOCK_PACKET) [ 50.752824][ T6175] xt_hashlimit: size too large, truncated to 1048576 [ 50.762440][ T67] usb 7-1: Using ep0 maxpacket: 16 [ 50.767185][ T67] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.770523][ T67] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.774800][ T67] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 50.778727][ T67] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 50.781513][ T67] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.786237][ T67] usb 7-1: config 0 descriptor?? [ 50.814853][ T6181] : renamed from bridge_slave_0 (while UP) [ 50.815857][ T40] audit: type=1400 audit(1752924401.907:161): avc: denied { ioctl } for pid=6174 comm="syz.3.64" path="socket:[10298]" dev="sockfs" ino=10298 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.855684][ T40] audit: type=1400 audit(1752924401.947:162): avc: denied { mounton } for pid=6182 comm="syz.3.67" path="/21/file0" dev="tmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.195880][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 51.198261][ T67] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 51.201664][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 51.204515][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 51.206802][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 51.209043][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 51.211363][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 51.213931][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 51.216181][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 51.218434][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 51.220686][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 51.223597][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 51.396263][ T67] microsoft 0003:045E:07DA.0002: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 51.399796][ T67] microsoft 0003:045E:07DA.0002: no inputs found [ 51.401787][ T67] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 51.542804][ T5953] Bluetooth: hci0: command tx timeout [ 51.543010][ T5958] Bluetooth: hci2: command tx timeout [ 51.552350][ T5958] Bluetooth: hci1: command tx timeout [ 51.552356][ T5953] Bluetooth: hci3: command tx timeout [ 51.595545][ T6017] usb 7-1: USB disconnect, device number 2 [ 51.692193][ T5913] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 51.842275][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 51.847182][ T5913] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 51.850041][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.852727][ T5913] usb 5-1: Product: syz [ 51.854074][ T5913] usb 5-1: Manufacturer: syz [ 51.856081][ T5913] usb 5-1: SerialNumber: syz [ 51.865055][ T5913] usb 5-1: config 0 descriptor?? [ 51.869281][ T5913] usb 5-1: no audio or video endpoints found [ 51.873299][ T6211] netlink: 14 bytes leftover after parsing attributes in process `syz.1.80'. [ 52.071993][ T5913] usb 5-1: USB disconnect, device number 4 [ 52.302179][ T61] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.384723][ T6231] warning: `syz.2.90' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 52.421566][ T6233] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 52.462208][ T61] usb 6-1: Using ep0 maxpacket: 16 [ 52.465509][ T61] usb 6-1: config 0 has no interfaces? [ 52.468799][ T61] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 52.471603][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.475609][ T61] usb 6-1: Product: syz [ 52.477065][ T61] usb 6-1: Manufacturer: syz [ 52.478735][ T61] usb 6-1: SerialNumber: syz [ 52.481720][ T61] usb 6-1: config 0 descriptor?? [ 52.596168][ T6244] overlayfs: missing 'lowerdir' [ 52.688880][ T6221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.691786][ T67] IPVS: starting estimator thread 0... [ 52.692773][ T6221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.697196][ T61] usb 6-1: USB disconnect, device number 2 [ 52.812675][ T6250] IPVS: using max 42 ests per chain, 100800 per kthread [ 53.262193][ T6037] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 53.412194][ T6037] usb 7-1: Using ep0 maxpacket: 32 [ 53.417337][ T6037] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 53.420127][ T6037] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.422726][ T6037] usb 7-1: Product: syz [ 53.424040][ T6037] usb 7-1: Manufacturer: syz [ 53.425557][ T6037] usb 7-1: SerialNumber: syz [ 53.428917][ T6037] usb 7-1: config 0 descriptor?? [ 53.433299][ T6037] usb 7-1: no audio or video endpoints found [ 53.622214][ T5953] Bluetooth: hci3: command tx timeout [ 53.623938][ T5953] Bluetooth: hci0: command tx timeout [ 53.624170][ T63] Bluetooth: hci2: command tx timeout [ 53.625642][ T5958] Bluetooth: hci1: command tx timeout [ 53.633476][ T6017] usb 7-1: USB disconnect, device number 3 [ 53.742199][ T839] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 53.892248][ T839] usb 5-1: Using ep0 maxpacket: 16 [ 53.896225][ T839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.900522][ T839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.904618][ T839] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 53.908300][ T839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.912788][ T839] usb 5-1: config 0 descriptor?? [ 54.010634][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 54.015745][ T6278] IPVS: Error joining to the multicast group [ 54.124100][ T839] usbhid 5-1:0.0: can't add hid device: -71 [ 54.126730][ T839] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 54.131928][ T839] usb 5-1: USB disconnect, device number 5 [ 54.469073][ T6316] ieee802154 phy0 wpan0: encryption failed: -22 [ 54.572550][ T67] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.578554][ T6325] smc: net device bond0 erased user defined pnetid SYZ0 [ 54.732194][ T67] usb 8-1: Using ep0 maxpacket: 32 [ 54.737543][ T67] usb 8-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 54.741094][ T67] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.746618][ T67] usb 8-1: Product: syz [ 54.748263][ T67] usb 8-1: Manufacturer: syz [ 54.750098][ T67] usb 8-1: SerialNumber: syz [ 54.767080][ T67] usb 8-1: config 0 descriptor?? [ 54.777470][ T67] usb 8-1: no audio or video endpoints found [ 54.842329][ T59] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 54.971835][ T67] usb 8-1: USB disconnect, device number 2 [ 54.994935][ T59] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 54.998012][ T59] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.001940][ T59] usb 6-1: config 0 has no interface number 0 [ 55.007437][ T59] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 55.010924][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.014712][ T59] usb 6-1: Product: syz [ 55.016373][ T59] usb 6-1: Manufacturer: syz [ 55.018160][ T59] usb 6-1: SerialNumber: syz [ 55.021181][ T59] usb 6-1: config 0 descriptor?? [ 55.111519][ T6357] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 55.219868][ T6356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.229379][ T5913] usb 6-1: USB disconnect, device number 3 [ 55.546737][ T6365] netlink: 'syz.3.151': attribute type 29 has an invalid length. [ 55.575871][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 55.575884][ T40] audit: type=1400 audit(1752924406.667:187): avc: denied { create } for pid=6366 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.584604][ T40] audit: type=1400 audit(1752924406.667:188): avc: denied { setopt } for pid=6366 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.600220][ T40] audit: type=1400 audit(1752924406.687:189): avc: denied { create } for pid=6368 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 55.606449][ T40] audit: type=1400 audit(1752924406.687:190): avc: denied { getopt } for pid=6368 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 55.982189][ T61] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 55.982638][ T40] audit: type=1400 audit(1752924407.077:191): avc: denied { read write } for pid=6407 comm="syz.0.172" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.991950][ T40] audit: type=1400 audit(1752924407.077:192): avc: denied { open } for pid=6407 comm="syz.0.172" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.000041][ T40] audit: type=1400 audit(1752924407.087:193): avc: denied { ioctl } for pid=6407 comm="syz.0.172" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.140497][ T40] audit: type=1400 audit(1752924407.227:194): avc: denied { create } for pid=6415 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.142559][ T6416] netlink: 277 bytes leftover after parsing attributes in process `syz.0.175'. [ 56.147549][ T40] audit: type=1400 audit(1752924407.227:195): avc: denied { write } for pid=6415 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.152294][ T61] usb 8-1: Using ep0 maxpacket: 32 [ 56.155754][ T40] audit: type=1400 audit(1752924407.227:196): avc: denied { nlmsg_write } for pid=6415 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.172932][ T61] usb 8-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 56.176025][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.178539][ T61] usb 8-1: Product: syz [ 56.179856][ T61] usb 8-1: Manufacturer: syz [ 56.181337][ T61] usb 8-1: SerialNumber: syz [ 56.186139][ T61] usb 8-1: config 0 descriptor?? [ 56.189521][ T61] usb 8-1: no audio or video endpoints found [ 56.390776][ T61] usb 8-1: USB disconnect, device number 3 [ 56.597010][ T6450] netlink: 60 bytes leftover after parsing attributes in process `syz.2.192'. [ 57.211937][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 57.242335][ T53] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 57.292438][ T6037] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 57.352367][ T6034] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 57.413079][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 57.419289][ T53] usb 6-1: config index 0 descriptor too short (expected 65535, got 36) [ 57.422453][ T53] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.425583][ T53] usb 6-1: config 0 has no interfaces? [ 57.427290][ T53] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 57.430142][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.435476][ T53] usb 6-1: config 0 descriptor?? [ 57.443423][ T6037] usb 7-1: config 0 has no interfaces? [ 57.446762][ T6037] usb 7-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 57.449597][ T6037] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.453011][ T6037] usb 7-1: Product: syz [ 57.454349][ T6037] usb 7-1: Manufacturer: syz [ 57.455882][ T6037] usb 7-1: SerialNumber: syz [ 57.459339][ T6037] usb 7-1: config 0 descriptor?? [ 57.512199][ T6034] usb 8-1: Using ep0 maxpacket: 32 [ 57.526001][ T6034] usb 8-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 57.528932][ T6034] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.531553][ T6034] usb 8-1: Product: syz [ 57.532949][ T6034] usb 8-1: Manufacturer: syz [ 57.534415][ T6034] usb 8-1: SerialNumber: syz [ 57.537211][ T6034] usb 8-1: config 0 descriptor?? [ 57.540679][ T6034] usb 8-1: no audio or video endpoints found [ 57.641195][ T6494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.644584][ T6494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.714199][ T6016] usb 7-1: USB disconnect, device number 4 [ 57.742249][ T59] usb 8-1: USB disconnect, device number 4 [ 57.851364][ T61] usb 6-1: USB disconnect, device number 4 [ 58.399970][ T6541] process 'syz.0.230' launched './file0' with NULL argv: empty string added [ 58.686920][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 58.695759][ T5958] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 58.698799][ T5958] CPU: 3 UID: 0 PID: 5958 Comm: kworker/u33:4 Not tainted 6.16.0-rc6-syzkaller-00237-gc7de79e662b8 #0 PREEMPT(full) [ 58.698815][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.698823][ T5958] Workqueue: hci2 hci_rx_work [ 58.698837][ T5958] Call Trace: [ 58.698841][ T5958] [ 58.698846][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 58.698866][ T5958] sysfs_warn_dup+0x7f/0xa0 [ 58.698885][ T5958] sysfs_create_dir_ns+0x24b/0x2b0 [ 58.698896][ T5958] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 58.698906][ T5958] ? find_held_lock+0x2b/0x80 [ 58.698924][ T5958] ? do_raw_spin_unlock+0x172/0x230 [ 58.698937][ T5958] kobject_add_internal+0x2c4/0x9b0 [ 58.698951][ T5958] kobject_add+0x16e/0x240 [ 58.698963][ T5958] ? __pfx_kobject_add+0x10/0x10 [ 58.698975][ T5958] ? do_raw_spin_unlock+0x172/0x230 [ 58.698988][ T5958] ? kobject_put+0xab/0x5a0 [ 58.699003][ T5958] device_add+0x288/0x1a70 [ 58.699016][ T5958] ? __pfx_dev_set_name+0x10/0x10 [ 58.699029][ T5958] ? irqentry_exit+0x3b/0x90 [ 58.699038][ T5958] ? __pfx_device_add+0x10/0x10 [ 58.699069][ T5958] hci_conn_add_sysfs+0x17e/0x230 [ 58.699082][ T5958] le_conn_complete_evt+0x1075/0x1d70 [ 58.699102][ T5958] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 58.699119][ T5958] ? hci_event_packet+0x459/0x11c0 [ 58.699139][ T5958] hci_le_conn_complete_evt+0x23c/0x370 [ 58.699159][ T5958] hci_le_meta_evt+0x354/0x5e0 [ 58.699170][ T5958] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 58.699188][ T5958] hci_event_packet+0x685/0x11c0 [ 58.699205][ T5958] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 58.699216][ T5958] ? __pfx_hci_event_packet+0x10/0x10 [ 58.699234][ T5958] ? kcov_remote_start+0x3c9/0x6d0 [ 58.699246][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 58.699265][ T5958] hci_rx_work+0x2c5/0x16b0 [ 58.699276][ T5958] ? rcu_is_watching+0x12/0xc0 [ 58.699292][ T5958] process_one_work+0x9cf/0x1b70 [ 58.699310][ T5958] ? __pfx_process_one_work+0x10/0x10 [ 58.699326][ T5958] ? assign_work+0x1a0/0x250 [ 58.699338][ T5958] worker_thread+0x6c8/0xf10 [ 58.699356][ T5958] ? __pfx_worker_thread+0x10/0x10 [ 58.699367][ T5958] kthread+0x3c5/0x780 [ 58.699378][ T5958] ? __pfx_kthread+0x10/0x10 [ 58.699389][ T5958] ? rcu_is_watching+0x12/0xc0 [ 58.699403][ T5958] ? __pfx_kthread+0x10/0x10 [ 58.699413][ T5958] ret_from_fork+0x5d4/0x6f0 [ 58.699429][ T5958] ? __pfx_kthread+0x10/0x10 [ 58.699440][ T5958] ret_from_fork_asm+0x1a/0x30 [ 58.699458][ T5958] [ 58.699486][ T5958] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 58.786091][ T5958] Bluetooth: hci2: failed to register connection device [ 58.823414][ T6576] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 58.825584][ T6576] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 58.832360][ T6576] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 58.837578][ T6576] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 58.841033][ T6576] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.847214][ T6576] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.851221][ T6576] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 58.854200][ T6576] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.857960][ T6576] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.868751][ T6576] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.871228][ T6576] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.873531][ T6576] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.877044][ T6576] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.977374][ T6594] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.269987][ T6622] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 59.682174][ T61] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 59.832554][ T61] usb 5-1: Using ep0 maxpacket: 32 [ 59.837314][ T61] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 59.840247][ T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.843021][ T61] usb 5-1: Product: syz [ 59.844718][ T61] usb 5-1: Manufacturer: syz [ 59.846448][ T61] usb 5-1: SerialNumber: syz [ 59.851037][ T61] usb 5-1: config 0 descriptor?? [ 59.859835][ T61] usb 5-1: no audio or video endpoints found [ 60.057923][ T61] usb 5-1: USB disconnect, device number 6 [ 60.562224][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 60.673150][ T6034] IPVS: starting estimator thread 0... [ 60.723833][ T9] usb 7-1: config 0 has an invalid interface number: 204 but max is 0 [ 60.726436][ T9] usb 7-1: config 0 has no interface number 0 [ 60.730191][ T9] usb 7-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 60.733341][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.735846][ T9] usb 7-1: Product: syz [ 60.737186][ T9] usb 7-1: Manufacturer: syz [ 60.738879][ T9] usb 7-1: SerialNumber: syz [ 60.741735][ T9] usb 7-1: config 0 descriptor?? [ 60.744815][ T9] ems_usb 7-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 60.751871][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 60.751880][ T40] audit: type=1400 audit(1752924411.837:231): avc: denied { read } for pid=6714 comm="syz.1.315" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 60.755039][ T9] ems_usb 7-1:0.204: probe with driver ems_usb failed with error -22 [ 60.761056][ T40] audit: type=1400 audit(1752924411.837:232): avc: denied { open } for pid=6714 comm="syz.1.315" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 60.762215][ T6713] IPVS: using max 42 ests per chain, 100800 per kthread [ 60.812075][ T40] audit: type=1400 audit(1752924411.897:233): avc: denied { connect } for pid=6714 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.902313][ T5958] Bluetooth: hci3: command 0x0c1a tx timeout [ 60.902340][ T5965] Bluetooth: hci2: command 0x0c1a tx timeout [ 60.904433][ T5958] Bluetooth: hci1: command 0x0c1a tx timeout [ 60.906271][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 60.951806][ T40] audit: type=1400 audit(1752924412.037:234): avc: denied { create } for pid=6679 comm="syz.2.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 60.971121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 60.974176][ T9] usb 7-1: USB disconnect, device number 5 [ 61.082230][ T6034] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 61.233316][ T6034] usb 5-1: Using ep0 maxpacket: 32 [ 61.238906][ T6034] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 61.242734][ T6034] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.245341][ T6034] usb 5-1: Product: syz [ 61.246730][ T6034] usb 5-1: Manufacturer: syz [ 61.248277][ T6034] usb 5-1: SerialNumber: syz [ 61.251418][ T6034] usb 5-1: config 0 descriptor?? [ 61.255622][ T6034] usb 5-1: no audio or video endpoints found [ 61.456266][ T6034] usb 5-1: USB disconnect, device number 7 [ 61.566343][ T40] audit: type=1400 audit(1752924412.657:235): avc: denied { read } for pid=6751 comm="syz.1.332" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.573443][ T40] audit: type=1400 audit(1752924412.657:236): avc: denied { open } for pid=6751 comm="syz.1.332" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.580844][ T40] audit: type=1400 audit(1752924412.657:237): avc: denied { ioctl } for pid=6751 comm="syz.1.332" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.588732][ T40] audit: type=1400 audit(1752924412.657:238): avc: denied { set_context_mgr } for pid=6751 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 61.595401][ T40] audit: type=1400 audit(1752924412.667:239): avc: denied { write } for pid=6751 comm="syz.1.332" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.772163][ T6037] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 61.943923][ T6037] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.947200][ T6037] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 61.949957][ T6037] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 61.954545][ T6037] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 61.963737][ T6037] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.966546][ T6037] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.972165][ T6037] usb 7-1: Product: syz [ 61.973480][ T6037] usb 7-1: Manufacturer: syz [ 61.974930][ T6037] usb 7-1: SerialNumber: syz [ 62.017586][ T6766] tipc: Started in network mode [ 62.019266][ T6766] tipc: Node identity 8af3c38723bd, cluster identity 4711 [ 62.022036][ T6766] tipc: Enabled bearer , priority 0 [ 62.027011][ T6765] tipc: Resetting bearer [ 62.187950][ T6037] usb 7-1: USB disconnect, device number 6 [ 62.262561][ T59] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 62.412171][ T59] usb 8-1: Using ep0 maxpacket: 32 [ 62.415318][ T59] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 62.417868][ T59] usb 8-1: config 0 has no interface number 0 [ 62.419817][ T59] usb 8-1: config 0 interface 89 has no altsetting 0 [ 62.424082][ T59] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 62.426859][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.429812][ T59] usb 8-1: Product: syz [ 62.431129][ T59] usb 8-1: Manufacturer: syz [ 62.432850][ T59] usb 8-1: SerialNumber: syz [ 62.435503][ T59] usb 8-1: config 0 descriptor?? [ 62.440832][ T59] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 62.443988][ T59] em28xx 8-1:0.89: Video interface 89 found: bulk [ 62.641995][ T6765] tipc: Disabling bearer [ 62.821874][ T40] audit: type=1400 audit(1752924413.907:240): avc: denied { ioctl } for pid=6787 comm="syz.1.349" path="socket:[15683]" dev="sockfs" ino=15683 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.982185][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.992652][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 62.994645][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 62.994667][ T5965] Bluetooth: hci2: command 0x0c1a tx timeout [ 63.045384][ T59] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 63.047841][ T6810] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 63.049966][ T6810] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.053225][ T6810] vhci_hcd vhci_hcd.0: Device attached [ 63.058215][ T6810] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 63.060490][ T6810] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.063663][ T6810] vhci_hcd vhci_hcd.0: Device attached [ 63.066663][ T6810] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 63.068618][ T6810] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 63.070982][ T6810] vhci_hcd vhci_hcd.0: Device attached [ 63.073723][ T6810] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 63.077164][ T6810] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 63.080644][ T6810] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13) [ 63.082713][ T6810] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 63.085363][ T6810] vhci_hcd vhci_hcd.0: Device attached [ 63.087463][ T6817] vhci_hcd: connection closed [ 63.088145][ T6813] vhci_hcd: connection closed [ 63.088222][ T46] vhci_hcd: stop threads [ 63.088538][ T6815] vhci_hcd: connection closed [ 63.089720][ T6811] vhci_hcd: connection closed [ 63.091317][ T46] vhci_hcd: release socket [ 63.097018][ T46] vhci_hcd: disconnect device [ 63.098850][ T46] vhci_hcd: stop threads [ 63.100187][ T46] vhci_hcd: release socket [ 63.101594][ T46] vhci_hcd: disconnect device [ 63.103700][ T46] vhci_hcd: stop threads [ 63.105037][ T46] vhci_hcd: release socket [ 63.106530][ T46] vhci_hcd: disconnect device [ 63.108582][ T46] vhci_hcd: stop threads [ 63.109971][ T46] vhci_hcd: release socket [ 63.111372][ T46] vhci_hcd: disconnect device [ 63.112166][ T839] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 63.116261][ T6822] capability: warning: `syz.2.362' uses deprecated v2 capabilities in a way that may be insecure [ 63.142536][ T6824] ucma_write: process 219 (syz.2.363) changed security contexts after opening file descriptor, this is not allowed. [ 63.282153][ T839] usb 6-1: Using ep0 maxpacket: 32 [ 63.287133][ T839] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 63.290000][ T839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.292985][ T839] usb 6-1: Product: syz [ 63.294321][ T839] usb 6-1: Manufacturer: syz [ 63.295774][ T839] usb 6-1: SerialNumber: syz [ 63.298594][ T839] usb 6-1: config 0 descriptor?? [ 63.302628][ T839] usb 6-1: no audio or video endpoints found [ 63.508793][ T6017] usb 6-1: USB disconnect, device number 5 [ 63.654112][ T59] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 63.656693][ T59] em28xx 8-1:0.89: board has no eeprom [ 63.712184][ T59] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 63.714465][ T59] em28xx 8-1:0.89: analog set to bulk mode. [ 63.718783][ T6017] em28xx 8-1:0.89: Registering V4L2 extension [ 63.722486][ T59] usb 8-1: USB disconnect, device number 5 [ 63.724778][ T59] em28xx 8-1:0.89: Disconnecting em28xx [ 63.739391][ T6017] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 63.741714][ T6017] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 63.744184][ T6017] em28xx 8-1:0.89: No AC97 audio processor [ 63.752314][ T6017] usb 8-1: Decoder not found [ 63.753831][ T6017] em28xx 8-1:0.89: failed to create media graph [ 63.755783][ T6017] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 63.759389][ T6017] em28xx 8-1:0.89: Registering snapshot button... [ 63.762967][ T6017] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.89/input/input6 [ 63.767538][ T6017] em28xx 8-1:0.89: Remote control support is not available for this card. [ 63.770784][ T59] em28xx 8-1:0.89: Closing input extension [ 63.773730][ T59] em28xx 8-1:0.89: Deregistering snapshot button [ 63.784427][ T59] em28xx 8-1:0.89: Freeing device [ 64.357603][ T63] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 64.498664][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.383'. [ 64.501473][ T6870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.383'. [ 64.506071][ T6871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.383'. [ 64.509101][ T6871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.383'. [ 64.538702][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 64.548096][ T6875] tipc: Started in network mode [ 64.550134][ T6875] tipc: Node identity 2, cluster identity 4711 [ 64.553514][ T6875] tipc: Node number set to 2 [ 64.768202][ T6908] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.782461][ T6909] netlink: 44 bytes leftover after parsing attributes in process `syz.1.397'. [ 64.785972][ T6909] netlink: 40 bytes leftover after parsing attributes in process `syz.1.397'. [ 64.804678][ T6916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6916 comm=syz.3.398 [ 64.817191][ T6916] netlink: 28 bytes leftover after parsing attributes in process `syz.3.398'. [ 65.014343][ T6942] pim6reg: entered allmulticast mode [ 65.017217][ T6942] pim6reg: left allmulticast mode [ 65.050706][ T6952] ======================================================= [ 65.050706][ T6952] WARNING: The mand mount option has been deprecated and [ 65.050706][ T6952] and is ignored by this kernel. Remove the mand [ 65.050706][ T6952] option from the mount to silence this warning. [ 65.050706][ T6952] ======================================================= [ 65.062188][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.063352][ T5958] Bluetooth: hci1: command 0x0c1a tx timeout [ 65.064390][ T5953] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.156618][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 65.159464][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.414'. [ 65.163033][ T6966] netlink: 'syz.0.414': attribute type 19 has an invalid length. [ 65.258883][ T6980] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 65.298417][ T6980] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 65.383716][ T6986] netlink: 'syz.3.424': attribute type 7 has an invalid length. [ 65.391242][ T6986] : entered promiscuous mode [ 65.499917][ T6994] binder: 6993:6994 ioctl 4008af12 200000000080 returned -22 [ 65.576754][ T6998] kAFS: unable to lookup cell '/,c¾ûL' [ 65.578849][ T7002] kAFS: unable to lookup cell '/,c¾ûL' [ 65.762695][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 65.762706][ T40] audit: type=1400 audit(1752924416.857:279): avc: denied { read write } for pid=7007 comm="syz.3.434" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 65.775075][ T40] audit: type=1400 audit(1752924416.857:280): avc: denied { open } for pid=7007 comm="syz.3.434" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 65.797319][ T40] audit: type=1400 audit(1752924416.857:281): avc: denied { write } for pid=7009 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 65.924173][ T40] audit: type=1400 audit(1752924417.017:282): avc: denied { execute } for pid=7026 comm="syz.1.441" path="/114/cgroup.events" dev="tmpfs" ino=594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.002620][ T40] audit: type=1400 audit(1752924417.087:283): avc: denied { watch } for pid=7034 comm="syz.2.444" path="/126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.030072][ T40] audit: type=1400 audit(1752924417.087:284): avc: denied { watch_sb watch_reads } for pid=7034 comm="syz.2.444" path="/126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.044634][ T40] audit: type=1400 audit(1752924417.097:285): avc: denied { getopt } for pid=7036 comm="syz.1.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.050636][ T40] audit: type=1400 audit(1752924417.097:286): avc: denied { read write } for pid=7036 comm="syz.1.445" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.058498][ T40] audit: type=1400 audit(1752924417.097:287): avc: denied { open } for pid=7036 comm="syz.1.445" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.066341][ T40] audit: type=1400 audit(1752924417.097:288): avc: denied { ioctl } for pid=7036 comm="syz.1.445" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.621134][ T7121] netlink: 'syz.2.463': attribute type 2 has an invalid length. [ 66.624821][ T7121] netlink: 'syz.2.463': attribute type 1 has an invalid length. [ 66.807581][ T7135] netlink: 'syz.3.469': attribute type 1 has an invalid length. [ 66.810700][ T7135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.944840][ T7160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5138 sclass=netlink_tcpdiag_socket pid=7160 comm=syz.0.479 [ 67.021015][ T7168] netlink: 'syz.2.482': attribute type 1 has an invalid length. [ 67.034956][ T7168] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.039861][ T7168] dummy0: entered promiscuous mode [ 67.047461][ T7168] bond1: (slave dummy0): making interface the new active one [ 67.050422][ T7168] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 67.089613][ T7172] SELinux: policydb magic number 0xf97cfe8c does not match expected magic number 0xf97cff8c [ 67.093077][ T7172] SELinux: failed to load policy [ 67.129875][ T5958] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 67.142449][ T5958] Bluetooth: hci2: command 0x0c1a tx timeout [ 67.342197][ T59] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 67.492214][ T59] usb 7-1: Using ep0 maxpacket: 32 [ 67.502915][ T59] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 67.506551][ T59] usb 7-1: config 0 has no interface number 0 [ 67.509156][ T59] usb 7-1: config 0 interface 184 has no altsetting 0 [ 67.514189][ T59] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 67.518107][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.521567][ T59] usb 7-1: Product: syz [ 67.523322][ T59] usb 7-1: Manufacturer: syz [ 67.524892][ T59] usb 7-1: SerialNumber: syz [ 67.528284][ T59] usb 7-1: config 0 descriptor?? [ 67.531743][ T59] smsc75xx v1.0.0 [ 67.542853][ T7197] bond1: entered allmulticast mode [ 67.842436][ T6035] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 67.842497][ T7211] netfs: Couldn't get user pages (rc=-14) [ 67.850173][ T7211] netfs: Couldn't get user pages (rc=-14) [ 68.000958][ T6035] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 68.004203][ T6035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.006708][ T6035] usb 5-1: Product: syz [ 68.008040][ T6035] usb 5-1: Manufacturer: syz [ 68.009516][ T6035] usb 5-1: SerialNumber: syz [ 68.016470][ T6035] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 68.040728][ T53] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 68.103730][ T7223] binder: Unknown parameter '00000000000000000004' [ 68.423028][ T5958] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 68.426069][ T5958] Bluetooth: hci3: Injecting HCI hardware error event [ 68.541949][ T59] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 68.545420][ T59] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 68.572228][ T6035] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 68.635586][ T7248] syz.1.511: attempt to access beyond end of device [ 68.635586][ T7248] loop1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 68.639722][ T7248] gfs2: error -5 reading superblock [ 68.722337][ T6035] usb 8-1: Using ep0 maxpacket: 8 [ 68.732035][ T6035] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.736859][ T6035] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 68.739724][ T6035] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.743438][ T6035] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 68.746787][ T6035] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 68.750200][ T6035] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 68.752066][ T59] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 68.753543][ T6035] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.756415][ T59] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 68.762700][ T7245] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 68.765014][ T59] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 68.766270][ T6035] hub 8-1:1.0: bad descriptor, ignoring hub [ 68.768193][ T59] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 68.769898][ T6035] hub 8-1:1.0: probe with driver hub failed with error -5 [ 68.774324][ T59] usb 7-1: USB disconnect, device number 7 [ 68.789132][ T6035] cdc_wdm 8-1:1.0: skipping garbage [ 68.790818][ T6035] cdc_wdm 8-1:1.0: skipping garbage [ 68.812313][ T6035] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 68.814292][ T6035] cdc_wdm 8-1:1.0: Unknown control protocol [ 69.094714][ T6016] usb 8-1: USB disconnect, device number 6 [ 69.315514][ T53] usb 5-1: Service connection timeout for: 256 [ 69.317762][ T53] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 69.351114][ T53] ath9k_htc: Failed to initialize the device [ 69.369261][ T53] usb 5-1: ath9k_htc: USB layer deinitialized [ 69.412200][ T59] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 69.466217][ T6035] usb 5-1: USB disconnect, device number 8 [ 69.563675][ T59] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.567039][ T59] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 69.569964][ T59] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.573872][ T59] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 69.577560][ T59] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 69.581187][ T59] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 69.584498][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.590537][ T7245] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 69.595408][ T59] hub 8-1:1.0: bad descriptor, ignoring hub [ 69.597404][ T59] hub 8-1:1.0: probe with driver hub failed with error -5 [ 69.600067][ T59] cdc_wdm 8-1:1.0: skipping garbage [ 69.601831][ T59] cdc_wdm 8-1:1.0: skipping garbage [ 69.605567][ T59] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 69.608250][ T59] cdc_wdm 8-1:1.0: Unknown control protocol [ 69.664817][ T7260] __nla_validate_parse: 5 callbacks suppressed [ 69.664828][ T7260] netlink: 132 bytes leftover after parsing attributes in process `syz.1.515'. [ 69.915325][ T6035] usb 8-1: USB disconnect, device number 7 [ 70.242248][ T6035] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 70.372577][ T6035] usb 6-1: device descriptor read/64, error -71 [ 70.416208][ T7288] bridge0: entered promiscuous mode [ 70.418389][ T7288] macsec1: entered promiscuous mode [ 70.420151][ T7288] macsec1: entered allmulticast mode [ 70.421953][ T7288] bridge0: entered allmulticast mode [ 70.426527][ T7288] bridge0: port 3(macsec1) entered blocking state [ 70.428680][ T7288] bridge0: port 3(macsec1) entered disabled state [ 70.434554][ T7288] bridge0: left allmulticast mode [ 70.437022][ T7288] bridge0: left promiscuous mode [ 70.612226][ T6035] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 70.742183][ T6035] usb 6-1: device descriptor read/64, error -71 [ 70.755829][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'. [ 70.788210][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 70.788220][ T40] audit: type=1400 audit(1752924421.877:334): avc: denied { execute_no_trans } for pid=7308 comm="syz.3.533" path="/113/file2" dev="tmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.792788][ T7309] Bluetooth: MGMT ver 1.23 [ 70.798062][ T40] audit: type=1400 audit(1752924421.877:335): avc: denied { create } for pid=7308 comm="syz.3.533" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 70.801049][ T7309] overlay: ./file2 is not a directory [ 70.805348][ T40] audit: type=1400 audit(1752924421.887:336): avc: denied { write } for pid=7308 comm="syz.3.533" path="socket:[20526]" dev="sockfs" ino=20526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.816950][ T40] audit: type=1400 audit(1752924421.917:337): avc: denied { read } for pid=7308 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.850360][ T40] audit: type=1400 audit(1752924421.937:338): avc: denied { write } for pid=7311 comm="syz.3.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.862520][ T6035] usb usb6-port1: attempt power cycle [ 71.064998][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.067125][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.092985][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 71.095847][ T7330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.538'. [ 71.133734][ T40] audit: type=1400 audit(1752924422.227:339): avc: denied { ioctl } for pid=7333 comm="syz.0.540" path="/dev/input/event0" dev="devtmpfs" ino=941 ioctlcmd=0x4511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.189495][ T7334] xt_hashlimit: overflow, rate too high: 0 [ 71.212284][ T6035] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 71.235619][ T6035] usb 6-1: device descriptor read/8, error -71 [ 71.472235][ T6035] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 71.492679][ T6035] usb 6-1: device descriptor read/8, error -71 [ 71.603253][ T6035] usb usb6-port1: unable to enumerate USB device [ 72.041409][ T40] audit: type=1400 audit(1752924423.127:340): avc: denied { append } for pid=7367 comm="syz.2.552" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 72.106304][ T7373] netlink: 'syz.3.553': attribute type 2 has an invalid length. [ 72.109534][ T7373] netlink: 'syz.3.553': attribute type 2 has an invalid length. [ 72.116707][ T40] audit: type=1400 audit(1752924423.207:341): avc: denied { accept } for pid=7372 comm="syz.3.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.117262][ T7373] netlink: 'syz.3.553': attribute type 2 has an invalid length. [ 72.123507][ T40] audit: type=1400 audit(1752924423.207:342): avc: denied { listen } for pid=7372 comm="syz.3.553" lport=49199 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.126299][ T7373] netlink: 'syz.3.553': attribute type 2 has an invalid length. [ 72.138260][ T7373] netlink: 'syz.3.553': attribute type 2 has an invalid length. [ 72.140800][ T7373] netlink: 'syz.3.553': attribute type 2 has an invalid length. [ 72.143713][ T7373] netlink: 'syz.3.553': attribute type 2 has an invalid length. [ 72.146458][ T7373] netlink: 'syz.3.553': attribute type 2 has an invalid length. [ 72.149136][ T7373] netlink: 'syz.3.553': attribute type 2 has an invalid length. [ 72.151648][ T7373] netlink: 'syz.3.553': attribute type 2 has an invalid length. [ 72.157703][ T40] audit: type=1400 audit(1752924423.257:343): avc: denied { accept } for pid=7372 comm="syz.3.553" lport=49199 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.397453][ T6016] IPVS: starting estimator thread 0... [ 72.404419][ T7388] macvtap1: entered allmulticast mode [ 72.406176][ T7388] veth0_macvtap: entered allmulticast mode [ 72.413297][ T7383] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 72.492197][ T7389] IPVS: using max 42 ests per chain, 100800 per kthread [ 72.512807][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 72.542136][ T7402] tmpfs: Unknown parameter ')_ðMªXnosÄ' [ 72.582319][ T7406] hsr_slave_0: left promiscuous mode [ 72.584486][ T7406] hsr_slave_1: left promiscuous mode [ 73.136005][ T7436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.143127][ T7436] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 73.148514][ T7436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.150968][ T7436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.154035][ T7436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.156419][ T7436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.166031][ T7436] bond0: (slave batadv0): Releasing backup interface [ 73.208399][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.576'. [ 73.211203][ T7439] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 73.343371][ T7451] fuse: Bad value for 'rootmode' [ 73.345096][ T7451] fuse: Bad value for 'rootmode' [ 73.347123][ T7451] fuse: Bad value for 'rootmode' [ 73.383025][ T7460] netlink: 132 bytes leftover after parsing attributes in process `syz.3.583'. [ 73.556013][ T7496] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54 sclass=netlink_xfrm_socket pid=7496 comm=syz.1.594 [ 73.600939][ T7508] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 73.601108][ T7505] SELinux: unknown common r [ 73.605444][ T7505] SELinux: failed to load policy [ 73.679736][ T7520] netlink: 32 bytes leftover after parsing attributes in process `syz.3.600'. [ 73.816874][ T7537] tmpfs: Unknown parameter 'm^ol' [ 74.012186][ T59] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 74.162639][ T59] usb 7-1: Using ep0 maxpacket: 32 [ 74.167443][ T59] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 74.170298][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.175257][ T59] usb 7-1: Product: syz [ 74.176756][ T59] usb 7-1: Manufacturer: syz [ 74.178465][ T59] usb 7-1: SerialNumber: syz [ 74.182918][ T59] usb 7-1: config 0 descriptor?? [ 74.188752][ T59] usb 7-1: no audio or video endpoints found [ 74.297833][ T7578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.308246][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 74.335780][ T7582] ------------[ cut here ]------------ [ 74.337576][ T7582] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl812.c:1152:10 [ 74.340142][ T7582] shift exponent 101 is too large for 32-bit type 'int' [ 74.344728][ T7582] CPU: 1 UID: 0 PID: 7582 Comm: syz.3.623 Not tainted 6.16.0-rc6-syzkaller-00237-gc7de79e662b8 #0 PREEMPT(full) [ 74.344742][ T7582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.344748][ T7582] Call Trace: [ 74.344752][ T7582] [ 74.344757][ T7582] dump_stack_lvl+0x16c/0x1f0 [ 74.344789][ T7582] __ubsan_handle_shift_out_of_bounds+0x27f/0x420 [ 74.344814][ T7582] pcl812_attach.cold+0x1a/0x1f [ 74.344830][ T7582] comedi_device_attach+0x3b0/0x900 [ 74.344851][ T7582] do_devconfig_ioctl+0x1a7/0x580 [ 74.344864][ T7582] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 74.344885][ T7582] ? find_held_lock+0x2b/0x80 [ 74.344902][ T7582] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 74.344917][ T7582] ? do_raw_spin_unlock+0xb4/0x230 [ 74.344930][ T7582] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.344943][ T7582] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 74.344957][ T7582] ? do_vfs_ioctl+0x523/0x1a60 [ 74.344972][ T7582] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 74.344989][ T7582] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 74.345007][ T7582] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 74.345026][ T7582] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 74.345048][ T7582] ? hook_file_ioctl_common+0x145/0x410 [ 74.345064][ T7582] ? selinux_file_ioctl+0x180/0x270 [ 74.345080][ T7582] ? selinux_file_ioctl+0xb4/0x270 [ 74.345098][ T7582] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 74.345112][ T7582] __x64_sys_ioctl+0x18e/0x210 [ 74.345127][ T7582] do_syscall_64+0xcd/0x4c0 [ 74.345139][ T7582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.345184][ T7582] RIP: 0033:0x7f7252b8e9a9 [ 74.345211][ T7582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.345222][ T7582] RSP: 002b:00007f72539f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.345233][ T7582] RAX: ffffffffffffffda RBX: 00007f7252db5fa0 RCX: 00007f7252b8e9a9 [ 74.345240][ T7582] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000008 [ 74.345246][ T7582] RBP: 00007f7252c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 74.345252][ T7582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.345258][ T7582] R13: 0000000000000000 R14: 00007f7252db5fa0 R15: 00007ffc0fc05de8 [ 74.345273][ T7582] [ 74.345277][ T7582] ---[ end trace ]--- [ 74.389389][ T6037] usb 7-1: USB disconnect, device number 8 [ 74.390446][ T7582] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 74.390457][ T7582] CPU: 1 UID: 0 PID: 7582 Comm: syz.3.623 Not tainted 6.16.0-rc6-syzkaller-00237-gc7de79e662b8 #0 PREEMPT(full) [ 74.390471][ T7582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.390478][ T7582] Call Trace: [ 74.390484][ T7582] [ 74.390488][ T7582] dump_stack_lvl+0x3d/0x1f0 [ 74.390515][ T7582] panic+0x71c/0x800 [ 74.390539][ T7582] ? __pfx_panic+0x10/0x10 [ 74.390564][ T7582] ? __pfx__printk+0x10/0x10 [ 74.390580][ T7582] check_panic_on_warn+0xab/0xb0 [ 74.390591][ T7582] __ubsan_handle_shift_out_of_bounds+0x2a6/0x420 [ 74.390611][ T7582] pcl812_attach.cold+0x1a/0x1f [ 74.390627][ T7582] comedi_device_attach+0x3b0/0x900 [ 74.390655][ T7582] do_devconfig_ioctl+0x1a7/0x580 [ 74.390674][ T7582] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 74.390700][ T7582] ? find_held_lock+0x2b/0x80 [ 74.390717][ T7582] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 74.390733][ T7582] ? do_raw_spin_unlock+0xb4/0x230 [ 74.390747][ T7582] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.390761][ T7582] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 74.390775][ T7582] ? do_vfs_ioctl+0x523/0x1a60 [ 74.390791][ T7582] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 74.390808][ T7582] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 74.390826][ T7582] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 74.390846][ T7582] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 74.390868][ T7582] ? hook_file_ioctl_common+0x145/0x410 [ 74.390884][ T7582] ? selinux_file_ioctl+0x180/0x270 [ 74.390901][ T7582] ? selinux_file_ioctl+0xb4/0x270 [ 74.390918][ T7582] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 74.390933][ T7582] __x64_sys_ioctl+0x18e/0x210 [ 74.390949][ T7582] do_syscall_64+0xcd/0x4c0 [ 74.390962][ T7582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.390973][ T7582] RIP: 0033:0x7f7252b8e9a9 [ 74.390982][ T7582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.390993][ T7582] RSP: 002b:00007f72539f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.391004][ T7582] RAX: ffffffffffffffda RBX: 00007f7252db5fa0 RCX: 00007f7252b8e9a9 [ 74.391011][ T7582] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000008 [ 74.391018][ T7582] RBP: 00007f7252c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 74.391025][ T7582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.391031][ T7582] R13: 0000000000000000 R14: 00007f7252db5fa0 R15: 00007ffc0fc05de8 [ 74.391044][ T7582] [ 74.392469][ T7582] Kernel Offset: disabled VM DIAGNOSIS: 11:27:05 Registers: info registers vcpu 0 CPU#0 RAX=000000000010724b RBX=0000000000000000 RCX=ffffffff8b866c99 RDX=0000000000000000 RSI=ffffffff8de2fd99 RDI=ffffffff8c157260 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a93d50 R15=0000000000000000 RIP=ffffffff8b8657ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6722000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7252db7bac CR3=0000000051f91000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd61b4c8c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb78f211d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb78f211d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb78f211d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb78f211d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb78f211de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb78f211ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855a3e65 RDI=ffffffff9b0b7e20 RBP=ffffffff9b0b7de0 RSP=ffffc9000cc2f4c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000033 R14=ffffffff9b0b7de0 R15=ffffffff855a3e00 RIP=ffffffff855a3e8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f72539f86c0 ffffffff 00c00000 GS =0000 ffff8880d6822000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=000000003347f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72539f7f90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7252c11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7252c11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7252c11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7252c11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7252c11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7252c11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000003 RBX=ffff88806a633228 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8c1571e0 RDI=ffffffff8df3ddb0 RBP=0000000000000002 RSP=ffffc90000648c18 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81a16a4d RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6922000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3e8761 CR3=0000000051e2c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0fc06170 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7252c11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7252c11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7252c11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7252c11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7252c11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7252c11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000a2c5b RBX=0000000000000003 RCX=ffffffff8b866c99 RDX=0000000000000000 RSI=ffffffff8de2fd99 RDI=ffffffff8c157260 RBP=ffffed1003c56000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801e2b0000 R14=ffffffff90a93d50 R15=0000000000000000 RIP=ffffffff8b8657ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a22000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f74f1118d58 CR3=0000000028130000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74f0411d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74f0411d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74f0411d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74f0411d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74f0411de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74f0411ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1073f05228333acd b4658b1baffc48b8 3938a637c8cc70c2 86ddbc2fd10941ae ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9500000000000000 b700000085000000 8500000000000002 0004000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bf00000000000000 9500000000000109 5500000000000009 bf00000083000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000038 0000000000000001 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000