last executing test programs: 1.57320088s ago: executing program 3 (id=566): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x8000, 0x8, 0x4, 0x6, {{0xc, 0x4, 0x1, 0x32, 0x30, 0x65, 0x0, 0xb, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @empty, {[@timestamp={0x44, 0x1c, 0xe6, 0x0, 0xc, [0x7c8, 0x6, 0x4, 0x8, 0x7, 0x2]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xffff, 0x5}, {0x5, 0xa}, {0xf, 0xfff2}}, ["", "", ""]}, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x8, 0xfff4}, {}, {0xfffa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xc5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.522110819s ago: executing program 3 (id=567): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e21, @rand_addr=0x64010101}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x8080) 1.450105776s ago: executing program 3 (id=570): r0 = socket$netlink(0x10, 0x3, 0x7) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)=ANY=[@ANYBLOB="14000000150001008000"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0xc804) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x2, 0x22800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x4008031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) syz_clone(0x4386111, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000141000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000781000/0x2000)=nil) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x3, [0x0], [0x0, 0xfffffffc], [0x0, 0x3c, 0x2], [0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r10}) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a36fff60a84c9f5d1938837e7860e4509c5bb5a00f69853000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x20004894) close_range(r0, r11, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r13) sendmsg$NL802154_CMD_SET_CHANNEL(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="09002cbd7000fedbdf250900004397225a00000000000500d6fdfb12993d240484e7ab26cc61"], 0x2c}, 0x1, 0x0, 0x0, 0x200488c4}, 0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r13, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) 1.131855691s ago: executing program 0 (id=578): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = socket(0xb, 0x80000, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000080)=0x6) r3 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x182) writev(r3, &(0x7f0000000800)=[{&(0x7f0000000040)="ac", 0x1}], 0x1) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x5, "ea44e7b56570eb98472b3f22fe6698655f5c52f5268fa439f01b0b4ed84f98fe", 0x6, 0x5, 0x5, 0x7, 0x2, 0x6, 0x7f, 0x6, [0x0, 0x6cf6, 0x7, 0xffffff0e]}) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$can_bcm(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r5}, 0x10, &(0x7f00000004c0)={&(0x7f0000000580)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x9) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r8, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r10, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r12, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) close_range(r6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000f20000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.052983737s ago: executing program 0 (id=579): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2e}, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xccf}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xa}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x20004040) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 32) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000040)=0x12) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000200)={"52ebe7da", 0x3ff, 0x4a, 0x9, 0x3, 0x800000, "4e44d6802676ba11889cf8b7880723", "9bd82916", "f37f3f7b", "237772f6", ["009051d54151dc1ca395c3b3", "83968fbaae74e6c2d95086de", "5ff6e555d07f6a2262c5b341", "1382840c290e77357e23fecd"]}) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x100) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a0000040502"], 0x528}}, 0xc000) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) (async) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) (async, rerun: 64) r10 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = dup(r11) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0xf0ffff, {0x0, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r10, 0x0) (async, rerun: 32) vmsplice(r9, &(0x7f0000000140)=[{&(0x7f00000015c0)='5', 0xfe70}], 0x1, 0xb) (async, rerun: 32) splice(r8, 0x0, r7, 0x0, 0x8000, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0xd000, 0x3000}}, "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", "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"}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 862.458637ms ago: executing program 3 (id=585): socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x2019}}}, 0x7) 652.897324ms ago: executing program 3 (id=588): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002380)="ad56b6c5820fae9d6dcc2692ea54c7beef915d564c90c2007c832cd541ca246f19bfd37ff275599f9309db047d9b36f6e4cb06fa01ea6978382ac7120f3e895c402585657426c171b4a4ca378bca9ed79f9bf24c98d142d04b6e40dc02ab1ed88e33a8713fd15f5c6deca77d50a642598d445a1381475c2d411b64b119e390e693ae4e9e1efecaac9c4f1b5e099c9b43b3c5d51aabb550a87f5cab41fb6f31", 0x9f) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mremap(&(0x7f000050d000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r1) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x0, 0x0, 0xd5]}}, 0x0, 0x2d, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r5 = socket$phonet(0x23, 0x2, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x10021}) io_uring_enter(r2, 0x2, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000280)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x4}, 0x38) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x20040, 0x0) r9 = socket$caif_stream(0x25, 0x1, 0x4) sendmmsg(r9, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)='r', 0x1}], 0x1}}], 0x1, 0x40) read$FUSE(r8, &(0x7f0000000340)={0x2020}, 0x2020) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x16) write(r6, &(0x7f0000000000)="0a0000000100dd", 0x7) 562.352656ms ago: executing program 3 (id=591): openat$hwrng(0xffffffffffffff9c, 0x0, 0x200000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x100, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xd, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = dup(r3) fanotify_mark(r3, 0x1, 0x4800107b, r4, 0x0) read$ptp(r4, &(0x7f0000000340)=""/269, 0x10d) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000040)=r4, 0x1) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='./file0\x00', &(0x7f0000002340)='virtiofs\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002240)=ANY=[@ANYRESHEX]) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6(0x10, 0xa, 0x7bd) sendto$inet6(r8, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0xfffffd0c) recvfrom$inet6(r8, &(0x7f0000000000)=""/20, 0xfffffd56, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0x400000, 0x0) 502.180654ms ago: executing program 2 (id=595): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x1, 0x6}, {0xd, 0x1}, {0xffe0, 0xffe4}}, [""]}, 0x24}}, 0x4040800) dup(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000086a0000022bbd7000fcdbdf250a00000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x45}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x401, 0x4000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20480}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x4}, @IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x3}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0x8}, @IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0xff}]}}}]}, 0x54}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x0, 0xfa5, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x8, 0x5, 0x5d, 0xc408, 0xffffffffffffffff, 0x9, '\x00', r1, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0xd, @value=r4, @void, @void, @value}, 0x50) 423.141467ms ago: executing program 2 (id=596): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x16, 0x4, 0xd3, 0x96, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x13}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x57, 0xa, 0x1, "3258c546dacccfae1e008faa00000000f4ff4000", 0x48524742}) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x1c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xaa2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xa}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @alu={0x4, 0x1, 0x9, 0x4, 0x5, 0x50, 0xc}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x97, &(0x7f00000002c0)=""/151, 0x41100, 0x4c, '\x00', r5, @fallback, r0, 0x8, &(0x7f0000000240)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x169e, 0x1}, 0x10, r7, r0, 0x0, 0x0, 0x0, 0x10, 0xdd, @void, @value}, 0x94) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000019240)=""/102393, 0x18ff9) 422.81347ms ago: executing program 1 (id=597): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x990a23, 0x6477}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000005010040"]) (async) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x4800) poll(&(0x7f0000000480)=[{r5, 0x8410}, {r5, 0x100}], 0x2, 0x9) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x1e) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r6 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) (async) r8 = syz_open_pts(r7, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x44) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r9, 0x40106410, &(0x7f0000000280)={0x73, &(0x7f0000000200)="d0e6c37f065a9151b03792e319aa37272bd17b2981552764288aee53ba28aefde94ac869385237d696fcc6dfbc8deda71640940c86de0b0bf2382f4efd48dd7b80398d813bd7869144757776b5c67a160284109f0598ebf0eb9523fee1ae96de40b3c63e44a8dd304e7516e275dbe27d76719d"}) (async) syz_usb_disconnect(r6) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x3, 0x75, &(0x7f0000000700)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x1, 0xb, 0x50, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x3096, 0x2, 0xff}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0xd8}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x0, 0x0, 0x9, 0x0, 0xb}, @country_functional={0xa, 0x24, 0x7, 0x5a, 0x40, [0x8, 0x7]}, @ncm={0x6, 0x24, 0x1a, 0x400, 0xa}, @dmm={0x7, 0x24, 0x14, 0x40, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x240, 0x42, 0xa, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xf, 0x80}}}}}]}}]}}, 0x0) (async) dup2(r0, r5) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a36fff60a84c9f5d1938837e7860e4509c5bb5a00f69853000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x20004894) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000540)="4c21bc249a1fe758bc4ba47bca44ed", 0x73}, {&(0x7f0000000080)="60b6431f6b30505a1d37ca68545ce691c345c98724dd35b10d30119489f7cfb78c7a2faf3ce52cf313e2997ae19e40e83a6b8a1e643f991d523958e6264cf873e87825015ca79a1eccc66f9322235e236813709c85778b46fba1f6c1", 0x5c}, {&(0x7f0000000180)="7349ecca08e75ee60ba2f876d4c4407759fc51408b9792c26ac759bb4b80834595e3f675242884b7be6690e4bfbd4ee19fa492773b1307c4554847480eb4417c2c0faa2897b5370f934eea6c63c9426c0556cf43278766745984154d1e6af5bc", 0x60}, {&(0x7f0000000580)="5dd0b6ed0086baa3eb74a6b1270d8cd3b087e5222867b0fd598ebba0665d2561dcac98d818ce5e6c84688542fd20b02265f6baf3170416d4bcb2983b99f5bfb7412097283666865502de13d659913e8befa803bfc6c10c4c5c71fa3dcc16e45a344f474f6071106ee7f949b1a254ae955b80d686afe7f28eb32a5953d198f35037a78481847451b60557efc290deb45ac23f127598729902d3663a67cdfd9197ac5e26d96d4d33ef87f56030f4c1ec9195ffd1f59d51fffe0b81fe6f2e464cc896229eafcc7913ec621dc24ac3bbe02a57a8f995ded7ebb0ba4e872a92dc8374235b4f91a36f11d2fcfb28d73b8828f479abebe5c7", 0xe6}, {&(0x7f0000000300)="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", 0xff}], 0x5) 213.219893ms ago: executing program 1 (id=598): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x1) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000140)={{0x0, 0x6}, {0x2, 0x10}, 0xe, 0x1}) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x6) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000240)) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x1, 0x0, 0x4, 0xb, 0x0, 0x2, 0x4}}) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300), &(0x7f0000000340)=0xe) write$cgroup_int(r0, &(0x7f0000000380)=0x1, 0x12) r4 = syz_open_dev$radio(&(0x7f00000003c0), 0x1, 0x2) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000400)={0x0, 0x3, 0x7, {0x1e04, 0x2, 0xffff, 0xfffffff8}}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000440)={0x0, 0x6700000000, 0x3, 0x0, 0xfffffffa}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000480)={0x5, 0x5}) r5 = syz_open_dev$radio(&(0x7f00000004c0), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f0000000500)={0x1, 0x0, 0x100, 0x1, {0x2ad, 0x36a, 0x9f4, 0x6353184e}}) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000540)=""/221, 0xdd}], 0x1, 0x4, 0x5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000680), 0x4) r7 = accept4$rose(r0, &(0x7f00000006c0)=@full={0xb, @remote, @remote, 0x0, [@null, @null, @netrom, @netrom, @netrom, @bcast]}, &(0x7f0000000700)=0x40, 0x800) sendto$rose(r7, &(0x7f0000000740)="49ab31dee9a5c2f8182e18660bc7074091a372565c6d06040d164ab6f67e24de1940f8ead632dfa647ebea9fedcb56c5c39fd4c3adccc0550e8ae82131490e25996b7344ebc688fe0236e6938da11bb2f60dabdab7de494cae1a6c2cd097e0f8e24c2fbb3b3ff73b0b4cf55be71db2c9f7e5b60bf21192fb6cf2f3a55f13b8d27d1191ec323a92841959ef5b0ddf14c96afdf09e985d5fdf5f2d0a45ad98b6b9889c415b03", 0xa5, 0x0, &(0x7f0000000800)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default]}, 0x40) r8 = dup2(0xffffffffffffffff, r6) accept$netrom(r8, 0x0, &(0x7f0000000840)) keyctl$clear(0x7, r1) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000880)={0x9, 0x4, [0x10001]}) connect$rxrpc(r3, &(0x7f00000008c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x24) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000900)={0x0, 0x8}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000a00)={r9, 0x74, &(0x7f0000000980)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0x9, @mcast2, 0x7}, @in6={0xa, 0x4e24, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e21, 0x7, @empty, 0x8001}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}]}, &(0x7f0000000a40)=0x10) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000ac0)) 212.671263ms ago: executing program 2 (id=599): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071108d00004b0d009500000000000200"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000000000046e5174d1e3c1ef83f32986e91d21c8e3d7f"], 0x1a, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001dc0)) ioctl$SIOCSIFHWADDR(r8, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r9 = dup(r4) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000300)=ANY=[@ANYRESDEC=r6, @ANYRES16=r0, @ANYRESHEX=r2, @ANYRESOCT=r2], 0xb0) getresuid(&(0x7f00000002c0), &(0x7f00000001c0), &(0x7f00000000c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',privport,access=', @ANYRESDEC=r10]) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1}) chmod(&(0x7f0000000180)='./file0\x00', 0x0) r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket(0x2, 0x1, 0x0) waitid(0x2, 0x0, 0x0, 0x8, 0x0) r12 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r12, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0xdd12, 0x0, 0x1], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000010000000068000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000626f6e645f736c6176655f3000000000736974300000000000000000000000007465716c30000000b8adaed8ec6e8fac0000000000000000000000000180c20000000000000000000000b8080000b8080000e8080000616d6f6e6700000000000000000000000000000000000000000004000000000018040000000000000c0000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00000000fa0100000000000000000000000000000000000000000000000000000000004037118bc35d3037960000000000000000000000000000000000000000000000000000000000001f00000000000000000000009300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300020000000000000000006c00000000000000000000000000000000000000000000000000000000000000000000000000892f9284b45f00000000000000000000000000000000a600000000000000000000000000f9ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000800000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c5000000000000000000000000000000e21071ce4cc8eaac65a0f6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070cc490d0510d30ce90b91aedadb0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd00000000000000000000000000000000009476b0c33efd5e65b7316c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014bc1d077b4817d693d02c0000000000000000000000000000000000416cbf6525780f42e3870800000000000000000000000000000000000000000000000000000000000000abcc3311337430270000000000000000000000000000000000000000000000000037ff1cf2f8e52e074300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d65992000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cbcb951a4f0f3300ebb39c00000000000000000000000000000000000000000000000000000000000000000000000000e70000000000053cbf7eee533b170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081cc42e042291bc3000000000000200000000000000000000000000000000000000000000000000000000000005de0eab8674f2269845f530928d7000000000000000000000000000000000000000000000000000000000000000000000000000000ee72000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095dd0000000000000000c1a8a95ba6a3ba677371c303b5426300000000000000000000000000000000000000000000000000000000597924c6edee670300000000000000000000000000000000000000000000080000000000000000e28abc2086f4dcecbcd7aca1775004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000800000000000000000000000000000000000000000000000c81e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000052000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003800e04771f4c2d100"/2376]}, 0x9c0) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x23, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a8e6b49732b70e1b5e3e062b9a9eb0a79a721cd999c4557f3a8235a3ff211180c3d248", 0x0, 0x10, 0x39, 0x2, 0x0}) 210.313962ms ago: executing program 1 (id=600): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000057cc69027a664ea34e38f5000008000081103cff525c844093fe000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001bc0)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x1, 0x2, 0x8, 0xff, 0x94, 0x9, 0x3, 0x1000, [{0x4, 0xffffffff, 0x5, 0x35b}, {0x6, 0x7fffffff, 0x4, 0x92d}, {0x6, 0x5, 0x8, 0x6}, {0x9, 0x5, 0x4, 0x5}, {0x9, 0x800, 0xbf2e, 0x2}, {0x7f59, 0x8, 0x18000, 0x8}, {0x9, 0x1, 0x4018, 0xe0}, {0x476a, 0x4, 0x5}]}}]}}]}, 0xc4}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 153.157613ms ago: executing program 1 (id=601): r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000000), 0x4142, 0x0) (async, rerun: 32) r1 = gettid() (rerun: 32) fcntl$setown(r0, 0x8, r1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {0x9, 0x9, 0x101}, 0x31, [0x1, 0x1, 0x359, 0x2, 0x2, 0xcf21, 0x3, 0x5, 0x16c, 0x1, 0x2, 0x7, 0x4, 0x63b, 0x80000000, 0x6, 0x40, 0x9, 0x9, 0x8, 0x9, 0x7, 0x7, 0x8a15, 0x2, 0x401, 0x49, 0x6, 0x1, 0x7, 0x5, 0x5, 0x4, 0x8000, 0xc64, 0x4, 0x4, 0x7, 0x8, 0x9a, 0xff, 0xe, 0xd, 0xffffffff, 0x101, 0xffff, 0x4, 0x9, 0x28, 0xfffffff6, 0x3, 0x9, 0x4, 0x0, 0x9, 0x10000000, 0x5, 0x10001, 0x10000, 0x3, 0x8, 0x10, 0x365d], [0x7d5, 0x2, 0x1, 0x6, 0x0, 0x3, 0xdb, 0x4, 0x5, 0x4, 0x7, 0x6, 0x0, 0xf1, 0x400, 0x6, 0x5270000, 0x2, 0x7, 0x0, 0xfffffffd, 0xffff, 0x9, 0x80000001, 0x10, 0x7, 0x7, 0x523fafdc, 0x8, 0xffff, 0x2, 0x3, 0x80, 0x9, 0x7fffffff, 0x41, 0x4, 0x3, 0x9, 0x4, 0x6c9, 0x3, 0xfffff6d4, 0x6, 0xa875, 0x4, 0x9, 0x6, 0x5, 0x40, 0xb, 0x6, 0xfffffff2, 0x7, 0x2, 0x0, 0x6, 0x7, 0x7, 0x9, 0x1, 0xffffffff, 0x8, 0x3], [0xe, 0xdb0b, 0xcce, 0x3, 0x8000, 0xdb, 0x9, 0x100, 0x7, 0x2, 0x9, 0x6, 0x6, 0x7, 0x40000000, 0x25, 0x71d3df0a, 0xe, 0x7, 0x9e9, 0x5, 0x5, 0x7, 0x33, 0x4, 0xfffffffc, 0xa4b, 0x3, 0x5d41, 0x3, 0x40, 0x0, 0x7, 0x300, 0x10000, 0x2a1, 0x4, 0x9, 0x20000, 0x100, 0x8, 0x3, 0xffffffd6, 0x7f, 0x0, 0x6, 0x10001, 0xff, 0x6, 0x6, 0x1000, 0x40000, 0x9, 0xf0, 0xfad1, 0xd, 0x51a6, 0x7, 0x6, 0x2, 0xeb0, 0x0, 0x1f5, 0x18d2], [0x0, 0x0, 0x44, 0x80000001, 0x6, 0x7ff, 0xff, 0x6, 0x4, 0x80000000, 0x6, 0x1, 0x5, 0x6, 0x3, 0x9, 0x7ff, 0x1000, 0x2, 0x101, 0x7, 0x8, 0x4, 0x2, 0x64, 0x9, 0x4, 0x0, 0x2, 0x10, 0x5, 0xac500, 0xffff, 0x2, 0x3c52, 0x7, 0xabc, 0x1ff, 0x0, 0x34c7, 0x2, 0x2, 0x5a6a, 0x80000000, 0x4, 0x100, 0x401, 0x6, 0x200, 0x3, 0x3, 0x2, 0x9, 0x3, 0xa3, 0xc, 0xb7d, 0xfffffff7, 0xc3ec, 0xd917, 0x5, 0x6, 0x2, 0x8]}, 0x45c) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000500), 0x40080, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000540)=@bpq0, 0x10) getdents(r3, &(0x7f0000000580)=""/120, 0x78) r4 = memfd_secret(0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) (async) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000740)={0x6fc3, 0x4, 0x5, 0xfa, 0x5, 0x4}) (async) syz_usb_disconnect(0xffffffffffffffff) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) r6 = accept$packet(r4, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000007c0)=0x14) getsockname$packet(r6, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000840)=0x14) r7 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000880)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x0, 0xff, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0xe4, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x929}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf8, 0x5, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xda, 0x0, 0x9}}]}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x300, 0xc, 0xd, 0xe0, 0x8c5a179e55bfc542, 0x3c}, 0x38, &(0x7f0000000900)={0x5, 0xf, 0x38, 0x6, [@ptm_cap={0x3}, @generic={0xb, 0x10, 0x2, "df3a8dddf2d709ef"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "ef18e4852a31369af1a8ad7a0e729532"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x0, 0xff, 0x1ff, 0x7}]}, 0x2, [{0x36, &(0x7f0000000940)=@string={0x36, 0x3, "c1c5ca688514726caaed5c2ee781e18a05f38cba7ec14e82be9c8e7dddbd0a1ccdcd01a0382dbb95ae9530e48a0a6fe464926372"}}, {0x5f, &(0x7f0000000980)=@string={0x5f, 0x3, "af9b1493292af59f59038b2f894a96bc42963289cb4f021e2a71d38a8d9adab30cbbbf10d92fd8b36dd06bd97e25b41940e34cf002cbc72b472bf9cb35a39901fbc778a92c89d60c774f36f90c0cabc5c35fa2ce7aceda442f2fef41d5"}}]}) syz_usb_control_io$hid(r7, &(0x7f0000000b80)={0x24, &(0x7f0000000a40)={0x20, 0x2, 0x6f, {0x6f, 0x2, "5d62d53bae2223292ad339ffd449ee0c82cce80c0ce0d7f8c582d035d545a3c77c9daed5dbc6cb34b23234a46c015b1c044e518fe87f5702c6d44b96529c23dcc4ee298546c153d4fd1784d9e1cf1fb9bc707147d6f59a4addcef8c212198152ab61f29699b6907d1bf1d4355e"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "e29e0dff"}]}}, &(0x7f0000000b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x200, 0x4, 0x1, {0x22, 0xb1b}}}}, &(0x7f0000000e00)={0x2c, &(0x7f0000000bc0)={0x0, 0x7, 0x41, "72a2b72ae92324033baf66b2dcb4c9648924c409bf2d73acf666972334334e8cc5361d9c62ceedf33ff1bda6a407675b8d02b884fcca95ae826ee2abaa67e4e3f7"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000cc0)={0x20, 0x1, 0xd5, "8201c7531bb2bbc68c669c31a02f7251fdc0805a86c380cde9d1865085e3eec614c4afd4c9a2ca2b5eb3f56b6c71295199f61f27dda9df44b75f6f4daa886a6d130d9edf67b1308b3c650b632dcbe794b36fecc478071f18b1618d8e2d3998159b213f014a55c85881f2f6b8b457a896cc96e179d169be941e244262735fe7402d2377a867860b90023f94a7e076f2704d020fe021680e744ed8da7ff010a232afb1295a40f11df3d9f2016b7d8a2764145a36169c4c883ce6f89ba1653ee62d695c58f696c4007ace37f127360e7780f2f0400efd"}, &(0x7f0000000dc0)={0x20, 0x3, 0x1, 0x5}}) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000e40)) (async) open_by_handle_at(r4, &(0x7f0000000f80)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x3d68, 0x1000, 0x5, 0x39, 0x6}}, 0x450000) (async) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000000fc0)={0xe, 0x9, 0x7fff}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000001000)={0x2, 0x2}) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001040)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000001080)={'dvmrp1\x00', {0x2, 0x4e20, @private=0xa010101}}) (async, rerun: 64) lseek(r0, 0x8, 0x7) (async, rerun: 64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x48, r9, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0xf4bc153046792bda}, 0x20000014) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000001240)={'wpan1\x00'}) 152.822352ms ago: executing program 0 (id=602): syz_open_dev$vim2m(&(0x7f0000000340), 0x7f, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffffc6) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r3, 0x0, 0xfce1) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x12, 0x1, 0x0, "c175f0b781eddc96e6d941c3a7f9582753f9ffff8cbae2850c67ea00"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66450f388010b92c020000b85a00c0feba000000000f3066b876008ed8c7442400623a0000c744240200000000c7442406000000000f011c240f20d835200000000f22d8c4e27d3328c4c2fd235bf7b9930a0000b8feffffffba000000000f30b948030000b886af8648ba3128fb2c0f30c421cd147c8c5e", 0x78}], 0x1, 0x30, 0x0, 0x0) 152.480298ms ago: executing program 1 (id=603): r0 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@typedef={0xd, 0x0, 0x0, 0x8, 0x5}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61, 0x0, 0x0, 0x5f, 0x2e, 0x30]}}, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000015000103000000000000000005"], 0x14}}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000001c0)="1e62359a18e0ed7b42428cca0eabb53962e291a1ff00bd547c13577772ec7dc771cd202893e767c50ea86063a12410325bdaad0d55cbfc281a1d613f5734f7377240d81762e0e59e1eb5706fba1ac1d3d732", 0x52) 93.224421ms ago: executing program 0 (id=604): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000b88ae4ef00000001000000080005"], 0x20}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) (async) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000b88ae4ef00000001000000080005"], 0x20}}, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 92.839372ms ago: executing program 1 (id=605): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x129202, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15be, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000008c0)={0x8, {"5f64ba33033d9d80d858fbf68be5e98239a5ad2900b508285ab10a1982abc1606079fea567a50aa3d035275089002aa0159effb1da6c514b11b888fdd53d7e8a64020a2f434c835c845710c57c576442a70a662222d3f227f1cab970f59239a4f310eae6ea13477c5e74b6fdecc2ad25516d0f24bb1f91c6f4708eb256e2c6d7ab56448019ad7c15bdb16388714065758a83f97954d42b5d08fd53229b4822309bd8d9058b2192184f05e78c8323745550283bc7c5a8a2b9741c1d5044fac0acaa0fe9285101af798006e1e56a3c9fff369e30063bbe0f1bef30299e2723246bf2853af588ec06b9b6efb02d0ea40573df6fd0dd3122f88a0f35b3af08a3c06b1ad6f40ad06e50e15904ab78add63eb97072647266aac7b148e80092bc2e610e10fbdf8b50c5a9eade13691368222da792328b78f1a465bf2afa3c31ba2f135918e239d5404aa62862192cc00d96df29c8a5a988cefeefd0167543a335b85647a30675b8fc2a80f94f4b907d547424b3563c87d24b34e4bc3b18a9adbf7beac9d0066df37b9286fefc47711c1dd2c8b8e16ae087052bc9e31c2be128a49970179c562f20730ac1ce0628fd8073eca235d2b3025701b6d89510fc15ff5c3918d8ad216b408e74792a54ba0b0250bfa966323525153105fc212832af613a79db108553fc344b2f5ca8f659a69dc0a458df7c45d1aa92ec34d25643c45b8bf2649f8de39b3be6a2b87cb939db53c97826490ec9b54cc6a04fb14fb8a88b1ad5628584f494c643b4c42897222cc0a0c708856e6a9f611586a3a8c01b6dc3e545b0c51a8dea5d6e78a254df09c5640c0bb11bae61b4b92bf311cfe86ac783f1d7883e8d82d9adc56c7ec828126bcf881e3b90ec502f756d0453daaa5965132816d4842d54e1ef7756d7b4f1626932aeea1cff67d0b74760ccde98b78444465a9b5d2dbaeb9924d389874e3b2cf05d8009db1821027851f36632b298c098f313ac909645bc9aec6b49333709c6fa02c2095f6a46bd46275f1f3b6d9be36d62e4169655bd76b63ec3ae1bb9d38bba20a19fee65947fcc5009778c64a6497c42e6e3d4f3b7564a5ccb240484d83ecf477f0047b4c8c8aa60e4895b2c98d78a1f4d8924d058f8f2074e761ad0b7309e13c8bad49923b4fbd08553d0b459c0c054e3c533fa0ba860274e1c3f5a9770497b67ebb89035ea6a1b806703b28a93b9cd07cd76cbf1a26c84277bd56ad494e2745a3091f9b1f1f43f578c1dc7b028a528fde92d4b8bccdb803b17ef32ee146ccd3555be67b6b9ccd394dc1601ae2e942361c14334e2a1a5f79207f440b2e34552dd39c525d364746822c3599ec37fcf2516d6507f1f97bb747c736081fe283ded673760e6d2cc8fe62150056e4fb374b97eadd23071b3b1c2b9e61e37b50c008a34adce78bf9dfdbb698c9137e4b4b45fb912b78bbcc39f405bca46938da3caef2e8819a6a7baae4b12a3b91480ee3d2c8198d8f5d6330839d55db4b0e7a4d9dbdff7f056057d0e240d4a9842026692d98da3cb59ec20e847ffe1fbc60dff5e81f83ba4b03fdc52f21483ee959e5bccd56ecb8a4573d02651bd38e3bcec65e682452d168595a7ef3325772d24237d20fd49bcb515ed46b838f41cb5b4e9dde846f0056f9bb62b2ef106debfaf4d5bd75113e61bd8f4a1173a4c3630f50b7492a02f12dcf296965ad0eba3d6ddaa7967362a667852a8ac1139d4a18b81b02f4e584351673dd04e0d2979cf4e0ada633b65043cbb8d3bb3bb063cf904f7d0b8e522a39bad3a0029fb118e987ed5bcfa535a2691db896458c2d145f1dbcc64d5123468952bd88e351593a78d7cde542597de9cbf1e5f6342a7199545dac3db7bf00035e1021eb21c5b675910cb4f935506bef1764caecdbcbbd1d228046bcebc8733797b095fd9b971f1be8c46a21089414465cd2f5b068a381d171807c7d36ea34cd5b57f530e1d310adb19657c947785330c6afe6e7e88ae3ea93f47e555c191e8b71d56d9cae9163d8bc4d00e75aa31cc0b23007b4417537c0d4539562097d73e3ccb7650c35fbc97a14fe9bb88c542996ea5dece95021b824cc00eab728deec166bc5f2a449dec68c6f2683caa55574c42709df309abce484068013c1f473171bbc3a3724608874fe252fbb32564dc47e4e7d08fdca5208d1983d830b9014c3194ebb7aeeed8c0e4959e909f4b34fa280bb9144a7049a99106070e7b079113ff15fda6f02cf228c8699ab42a774f356fae081173d164de154d7848805c94df3b6cc0ee0b4bcb78255e6460e920821c41463006c52379f9ccbb0420d346db7970cc7e74d716b5d64bc1d12d88b5119a24e4adab5686165706688fc94d216e52642afdc003ec8cacbb894181494be79a1e8b837742f9b330161f878bdd0dd42c2a08afd34057970967fffcdbd7b2ed6c4509c711e920e9b07ad0850cd5206e4887c7852b7376843640f97ae43128928b377e1cd24d70fcd6e0847ba75219939b4752b20c531e379dd427ff184f97f6984457d69b98135d43d38613480628b8050b5ac0da662537760c31f06183aa213877970c3e605bff119585212041ce9a8c3e7972f6e4997e7223605411e8df43f7183bd18ae2a4e8f964c16e9285e35d72d80b5b43119ccc766dadcc4e047aafee06cc474a52640d9dbd173931c5be32b785d6710994fa390ca05938e374f9ddba1630ebded819bdcf6b919b940803a612cf05e6cb5e72e17eb01733df5da2282c44da77ab8ec0a85e7fe48dad4f06d21b149994e250fb6ba5efa3652a9c674f1892f7380bdaca90b4218007c3af46553a41fa891a1f0752f38b933502a04ca5a254f2c5f3a9fb25c2df7f415f39f3b97b4355d4f59c37863962a455891dfd4b5fa76b522d506b72b4aa1a615639e66e34d510cd265ef7d0f5e4226fcfd1cb6a5174b1388f6f6941b9c3cc3f9bd31198e39f34f73682fd4768d888ee5dca9725e6ceaf1766009067c6b28c6290302f11b5b2dbdf44d1ea2b38dbb7bc22b7e9bfa456c0dbea1fb6bd5a8ff185fc0706c7e182f283f6382a25f2325ba8d87df9b95bc23eebbb79dea4ca12a768b4ea060cdcd013d7dc0acb4285380545c60c583816c0d7165a9dc251f7cc295fb43bf182639904c983f75a38cebce44577ced222146144a05a06caf53761f3c3387077e0c0e5116c0f218fa0db76f2ae8f79c1e0791eeea5dfa1365e585b1b5d83230e9e0acd51b2c9e036a8e14c21018aaa218ed706c6cc17ef50679d59e92f3297f1297668563f9385e875d9b3a7f538082752b33e9d22b74747a84ac56a2e45ef4013f219f9dcac05f49f81b33db070c3669cd062bb0645a67ed428ed532f40775e336d3880bc6b84382d3ceeb2a5b12827c8550c897677582f2dffbeefffc34b6fefcaff169a4210562dc98b7f5309a7293f3f788f30e452373cbb78537ceaa71886f8d43535d054f750c82b67b951942efd2518a29eb981f2c4a747a798caa969ca11211b1a28f76a38bfa49877642febdf892fe14e1be704f7f5e6f5160a360189a7ead24d35543fd6959199d738314e32f6f0d0ef4429de5f0c6c1287b6931fd3b07f05ba045283b40f708efaba264b3be2e444fc4189889427c5d9cf51917d3ca2719ba81d125af55640be14cb9ae609bb6da062195e159c965aba6ba47f5d6193aec7b741be993b33defb6ccf9195e268e4deed86a82ab77f01f59cea647ce1df2536b1a37c2db836cc42dd4d3dc2bddad88bae0dd6f6ecd8574f09df98965b9e66dab0d56f282412222ebed08fb5c1637b38a60aac5210f096cb1a271a3f0cde736fc5b2e29aa0154366b14781cdfe55a7ec9b3660bcbe03548df7ea81a5e3af00f8e66fa4ad2ba05e04ca4fb4680d21d2fc063adeb4c4c8b12a957f6af7cc627bb3d786460df72a518ece9304ef5c4ce6d68ec714f909e93dfa4ec23e3e2a020ac8adfa0f6b649712b1d8930fcc369488965f58c6a47a8038cf4335aca8aed4e7adc8f39bc156500b0a519d23b3929de612f5afe70792564a04f684437aa7efccdab083a9fff11389084ae4655fd7808254a758771df2964f3b7e90dd309fb0ba97a7cdbc500b03a00280470bf254e8a5f24da0f3e3ca1120fc75743e67382531171f33f54bd09f7f4c881106ea4a993b8892f81d1773ea7d5073ae10a2a8da5c58e4abfe4cd3c42d473bde8eb60f6f9a7ab56c31b6c28d6973a628a5b43a37d663571f6e8ef9adb5fa3f1f114afbf03977703e9ed1acea8f5dc815bfa3330d386d3e17900c7e4f4704333ca8a93644f1ac972abe83c86f7ecd7875ac8ae731811ba6e2bf64c13550f74be2f03b6343a4a8822eedd312ab3faa7c81fcdadd57b0a3be56c2ff631e18af3472208c31deb536c9b0f893b73d462215879ead5a7d7034484aeebe9d24f0213d28d2767198c0bc1ed961080b5d2510bfdd04391057853d58f9dc2c2d632549f6a4db191284f4b7d830555177d1dd705311c54794c5834e1060fbe93a0bd034c80f5b4823a6c693317d4892e22a5aebf1076f687ef961f2c95092584b51e5e9200543f30b8cb849de8cd6b5cbd5b9ca31a05a709635a54b1d319aeaec8ed046c0e4eb628f13c384702d165a6750fcbfd9d7b66de861cae94cdf67c3e4ce184e2e57cb8107af45de77eb69a0fc141a622c4e7cb588aab4b75e79c45e980bd53014fa42abdf8f1d1c51079e7d6716c348e1cd88d3eb633b8a1826db187370b00afa30ea0afbaf54b6dd9d0b86c71448ae2e9e69edeead918dbd10bdefbd08cc15b61977fbfa4153fefb5c43f8a7da1e3ee37b67fd787b606db62e45c6a01d0ffda4cea93acd98eee5951f9d56ac6533687fa24d8aedfa32bdaa74f2aca283dc2e0d77c457e57bd779fdf8688d3f840fc6b90c8a0337f0817616db7c39a56b32a4cf576747e9014e094b416e85ef9a8d637afd35e3a3c52460179bdde1b86cd739123d92ae583c27f3eb111564fb0d8b45bbfe4c2488c02be2b76679e7fae79d85d1e0c2010723e95de16af7daad611f8cfd3efa735b64072a8975373d642a5c5640ba058b2422246924903087ec017e7c58b9af7de2b5f3753cbf96972a1d100267f31783c325daabc9b6f8870203ce7820b9d31e17331c93ce6ea989d60f197cebd7489f31e05929b77b93865f3cd5448b62a45e2c7b5cfae1bac0052ef8d26a21d4b7ca411c24e29ba3025772e0c78b7fa1a987927d3bac3b571e0175c51567db9f2f7f68a230fb6da307a9eae9a5f1b6ac241fd456af1fc3ecb606b22fa64cef8c82fc9bf8ac9f5078e48797ca7cf281d391779f6e3ea602286d9be815e4830855174767987cfd906dec55b396dc2a4ad8852674dc8a3854e6fa4f6fcc42535417476fcb4f535d6000f85b1154d28f8d414941fa6916b3ae74c2422b924b3f914032050014aee6b65f2b02121ef48ef69b2a9bc1ca6d429abe7a1d15bc483f61441c3e91a63a64a2531afee827dce9da1e61ffe48e0e278a307adc561b52fccfeb3adbcd5d11947e380fa69ef17145ca678dd04ae697b8a37cda2c92356cea3fcd0d83ee4a98ae017f38281bf140b337a9a7a32e7ca73c0977bb75c822eac1bc6aaba437e634194a47dee616bd734406448c1d2cfa30ed0c2a93c5b1b6fe5c0b2da71e602854ab7c07e55ee1d06e8ac8568afa78fc6563ce953e84a5a7c820c02b0e5e108d53d3c6a07e19001b7e632655e004429a552771831a8ed98fc4eaa10e2f6ba14c568830bd743ad47f92fb60df1a7f604cc56a38dd3a9dc744f8a2e6f4883242487262f41cf9", 0x1000}}, 0x1006) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x4c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4) sendmsg$can_raw(r6, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba7ca62a"}, 0x10}}, 0x0) shutdown(r1, 0x0) write(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000180)={{@local, 0x2}, @any, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x5c}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x4, 0x5e, 0x8, 0xfffffffffffffffe}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x2000) write$binfmt_elf32(r0, 0x0, 0x4cd) r9 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x101000) ioctl$BLKTRACESETUP(r9, 0x1260, &(0x7f0000002200)={'\x00', 0x100, 0x3, 0x4, 0x7fffffffffffffff, 0x20000}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x24) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daa", 0x10) 91.548597ms ago: executing program 2 (id=606): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x400, 0x4f424752, 0x1, 0x8, 0x6, 0xb, 0xa, 0x0, 0x8, 0x0, 0x7}}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r2, 0x4b4c, &(0x7f0000000140)) 3.444751ms ago: executing program 0 (id=607): sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c010000", @ANYRES16, @ANYBLOB="040427bd7000fbdbdf2514000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000180000006001100ff07000008001500060000000e0001006e657464657673696d0000000f00"], 0x14c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001d00070f000000000200000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}}, 0x0) (async, rerun: 64) r2 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xb, 0x2000) (async, rerun: 64) r3 = syz_open_procfs(0x0, &(0x7f0000002180)='coredump_filter\x00') read$FUSE(r3, 0x0, 0x0) (async, rerun: 32) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000040)={0x0, 0x0, {0x9, 0x4, 0x1012, 0x4, 0x0, 0x0, 0x2, 0x6}}) (async, rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) (async) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) fchown(r3, r4, r6) 692.574µs ago: executing program 2 (id=608): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) unshare(0x2a020400) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000580)={0x2c04, 0xfff8, 0x3, 0x7fff, 0xd, "60b472c9ffa4a5ee"}) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000200)='3', 0x1}], 0x1) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f00000005c0)={{}, {0x9}, 0xc0, 0x0, 0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)="5f18b17e266b658fbaf13c99f0568cdc9528e48ab580d1750b09c4bd7036d809fe89eace1a60115298deebacf4ad96e624ee58a38237613076306bdc3ad4ed6c62a2ff1d83f727dc21007103cae6082b932182c9bc67d92fda34d2599e5c51d1c46bc5d6969c9155d81cdb54649761098affd3a222e5b5dc840f", 0x7a, 0x0, &(0x7f00000008c0)={0x2, 0x162, {0x1, 0xc, 0xa8, "96f35dbaaaaeebf39e8566c914a7da030c2f1d6060f8ccf76246045fcd732ad43c5381c700c4226331952722e36c7812abaaf9da38a809fe8cd12dd63806b63b9d335ab7357829e33cf349f7d865a48e8ef55cf0117cd9392a68585c5352930de2a3f604ba35becffa3d7a35eb447418f763a8297f32666b77b0a4a777827f35f6964453719bf88582cc81fc22f0a001771e39bb46522a2f4a22434e4b5e8eeebf2f004dd2269702", 0xad, "0181a1e5251d3ceff4a53f48f54b22d00a933f6d1f466a1f3327263827289579af441c8f42e17e1e5c826fa56dd7aeb8a5c2adf60aa7a3a7f42ddcaba75ae80b19ecfc00fdcc77afb876dec5b03148f0f60f34f8ce1eb5b98f78b8390921fe5571f2845da255fb452f51ca1a84488ad3e05308e62b18386b4c4d13168806b8f94ec74051a1a7fc8f1a308c6af8927df7be95bc2d94d3383a98a8a500697bb38bcbcda88a32eb5cc5eed55a6606"}, 0xbe, "3b0833fb2354bcb925652b477ecf414b4eb2979f426b6ba39cdf05784c608618688a02b0fb14f77a08afc85ddb36f290e652a7b6e74c75c8e55e19ada411644a9013e2eb1238eb719a2121f69d887b46ba936ba75642d6531e28ff89f2db0fccb57af35c1aed0993cd6044ae13bb5f9c798b0a880ad2cbe539146997e62e747d1bcc76e882ee5b93fc44c7e8fe5f5f1447a8fc4f898c328b2e5d75fe52b6b11fa67b4fc505fe87b745c91988305e8e1df4e5a4a61a1dbd76593cc7dae8af"}, 0x22c}) read$FUSE(r1, &(0x7f0000001000)={0x2020}, 0x2020) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[], 0xd8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x31, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xc}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8001}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xc5663f970d8fe9dd}}, @jmp={0x5, 0x1, 0x0, 0x7, 0x2, 0x8, 0xfffffffffffffffc}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @alu={0x7, 0x1, 0x5, 0x2, 0x3, 0x1, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@s}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xe7, &(0x7f0000000480)=""/231, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 344.725µs ago: executing program 0 (id=609): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e070e051429"], 0xa) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000000)={&(0x7f0000000040), 0x0, 0x2, 0x4000000c, 0xc}) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x5e}, "44e2fa0af48959b657f5f8a3dfccf4fc1bb5465f5fa10b10d0aeb96314894a3c517f17d6cf14620cd985e8491bb50bcec3e9348d7dcb314d7d69eca526b9ca36034a089bf0a4af479201d8f26f27831bc31e1e0bc6e85b849fd85486e505"}, 0x62) 0s ago: executing program 2 (id=610): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000080)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16YJa\xf5\x82\xbc\x11\xda\x82\"-\xb2\x03b\xcc\x82\xef]\x83\xf1w\xcb\x9ew{\xb0\xc5\xcc2F\xf1\xacp\xdf\x1e\x9f\xd5Y\x03\xe0\xd0\x90\xea\x06', 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in={0x2, 0x4c20, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0xa9d1, @mcast1, 0xc}], 0x5c) kernel console output (not intermixed with test programs): [ 38.257279][ T39] audit: type=1400 audit(1737599894.086:82): avc: denied { siginh } for pid=5913 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.408355][ T39] audit: type=1400 audit(1737599895.266:83): avc: denied { read } for pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.418148][ T39] audit: type=1400 audit(1737599895.266:84): avc: denied { append } for pid=5330 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.425910][ T39] audit: type=1400 audit(1737599895.266:85): avc: denied { open } for pid=5330 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.433785][ T39] audit: type=1400 audit(1737599895.266:86): avc: denied { getattr } for pid=5330 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:57336' (ED25519) to the list of known hosts. [ 39.589477][ T39] audit: type=1400 audit(1737599895.446:87): avc: denied { name_bind } for pid=5918 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.188213][ T5920] cgroup: Unknown subsys name 'net' [ 41.330723][ T5920] cgroup: Unknown subsys name 'cpuset' [ 41.333830][ T5920] cgroup: Unknown subsys name 'rlimit' [ 41.556971][ T5925] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.207891][ T5920] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.844326][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 43.844344][ T39] audit: type=1400 audit(1737599899.696:105): avc: denied { execmem } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.073211][ T39] audit: type=1400 audit(1737599899.926:106): avc: denied { create } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.082900][ T39] audit: type=1400 audit(1737599899.926:107): avc: denied { read write } for pid=5931 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.090127][ T39] audit: type=1400 audit(1737599899.926:108): avc: denied { open } for pid=5931 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.096793][ T39] audit: type=1400 audit(1737599899.936:109): avc: denied { ioctl } for pid=5932 comm="syz-executor" path="socket:[8200]" dev="sockfs" ino=8200 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.104594][ T39] audit: type=1400 audit(1737599899.936:110): avc: denied { ioctl } for pid=5931 comm="syz-executor" path="socket:[7360]" dev="sockfs" ino=7360 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.113721][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.116398][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.119160][ T5942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.122419][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.125123][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.127478][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.129904][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.132425][ T5943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.132749][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.135342][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.135777][ T5943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.135917][ T5943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.136382][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.136472][ T5943] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.136809][ T5943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.138564][ T5943] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.138577][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.139353][ T5938] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.140460][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.141255][ T5943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.143902][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.144581][ T39] audit: type=1400 audit(1737599899.996:111): avc: denied { read } for pid=5933 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.144601][ T39] audit: type=1400 audit(1737599899.996:112): avc: denied { open } for pid=5933 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.144616][ T39] audit: type=1400 audit(1737599899.996:113): avc: denied { mounton } for pid=5933 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.161937][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.187734][ T5944] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.191055][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.258385][ T39] audit: type=1400 audit(1737599900.116:114): avc: denied { module_request } for pid=5933 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 44.297144][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 44.331288][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 44.404293][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.406455][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.409913][ T5933] bridge_slave_0: entered allmulticast mode [ 44.412216][ T5933] bridge_slave_0: entered promiscuous mode [ 44.420988][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.423143][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.425294][ T5933] bridge_slave_1: entered allmulticast mode [ 44.427439][ T5933] bridge_slave_1: entered promiscuous mode [ 44.462278][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 44.480537][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.484442][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 44.513029][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.531184][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.533305][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.535360][ T5932] bridge_slave_0: entered allmulticast mode [ 44.537498][ T5932] bridge_slave_0: entered promiscuous mode [ 44.592059][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.594052][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.595996][ T5932] bridge_slave_1: entered allmulticast mode [ 44.598455][ T5932] bridge_slave_1: entered promiscuous mode [ 44.616975][ T5933] team0: Port device team_slave_0 added [ 44.619876][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.621875][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.623893][ T5931] bridge_slave_0: entered allmulticast mode [ 44.626058][ T5931] bridge_slave_0: entered promiscuous mode [ 44.653930][ T5933] team0: Port device team_slave_1 added [ 44.663557][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.665644][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.667707][ T5931] bridge_slave_1: entered allmulticast mode [ 44.670123][ T5931] bridge_slave_1: entered promiscuous mode [ 44.673580][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.687238][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.692096][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.694687][ T5940] bridge_slave_0: entered allmulticast mode [ 44.697359][ T5940] bridge_slave_0: entered promiscuous mode [ 44.726552][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.729302][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.731284][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.733277][ T5940] bridge_slave_1: entered allmulticast mode [ 44.735313][ T5940] bridge_slave_1: entered promiscuous mode [ 44.737650][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.739748][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.746835][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.751937][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.786899][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.789628][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.796748][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.804324][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.808427][ T5932] team0: Port device team_slave_0 added [ 44.811679][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.832561][ T5932] team0: Port device team_slave_1 added [ 44.835318][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.857021][ T5933] hsr_slave_0: entered promiscuous mode [ 44.859300][ T5933] hsr_slave_1: entered promiscuous mode [ 44.891783][ T5940] team0: Port device team_slave_0 added [ 44.895267][ T5931] team0: Port device team_slave_0 added [ 44.906793][ T5940] team0: Port device team_slave_1 added [ 44.919124][ T5931] team0: Port device team_slave_1 added [ 44.921154][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.923240][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.930727][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.960261][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.962279][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.969650][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.973276][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.975324][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.982749][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.998954][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.001007][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.008432][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.012028][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.014513][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.024256][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.040124][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.042156][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.049663][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.096303][ T5940] hsr_slave_0: entered promiscuous mode [ 45.098429][ T5940] hsr_slave_1: entered promiscuous mode [ 45.100250][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.102560][ T5940] Cannot create hsr debugfs directory [ 45.106475][ T5932] hsr_slave_0: entered promiscuous mode [ 45.109313][ T5932] hsr_slave_1: entered promiscuous mode [ 45.111790][ T5932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.114801][ T5932] Cannot create hsr debugfs directory [ 45.163436][ T5931] hsr_slave_0: entered promiscuous mode [ 45.165835][ T5931] hsr_slave_1: entered promiscuous mode [ 45.167899][ T5931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.170999][ T5931] Cannot create hsr debugfs directory [ 45.300566][ T5933] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.312419][ T5933] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.331287][ T5933] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.345670][ T5933] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.375116][ T5940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.381139][ T5940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.386206][ T5940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.390563][ T5940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.413636][ T5932] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.416779][ T5932] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.420629][ T5932] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.423528][ T5932] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.451021][ T5931] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.454998][ T5931] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.460063][ T5931] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.463192][ T5931] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.489149][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.523266][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.527846][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.538174][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.540261][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.546443][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.548782][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.556151][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.565292][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.574764][ T221] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.576900][ T221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.584700][ T221] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.586700][ T221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.600271][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.609592][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.613139][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.615274][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.621394][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.623456][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.648737][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.655238][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.657371][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.665293][ T5931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.670499][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.672852][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.686100][ T5932] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.689828][ T5932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.703939][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.725670][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.729531][ T5933] veth0_vlan: entered promiscuous mode [ 45.734647][ T5933] veth1_vlan: entered promiscuous mode [ 45.755692][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.758763][ T5933] veth0_macvtap: entered promiscuous mode [ 45.765820][ T5933] veth1_macvtap: entered promiscuous mode [ 45.769662][ T5940] veth0_vlan: entered promiscuous mode [ 45.775809][ T5940] veth1_vlan: entered promiscuous mode [ 45.784429][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.795327][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.800630][ T5933] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.803978][ T5933] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.807108][ T5933] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.811236][ T5933] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.829092][ T5931] veth0_vlan: entered promiscuous mode [ 45.832838][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.843425][ T5931] veth1_vlan: entered promiscuous mode [ 45.855195][ T5940] veth0_macvtap: entered promiscuous mode [ 45.863300][ T5940] veth1_macvtap: entered promiscuous mode [ 45.863463][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.867826][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.881877][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.884988][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.888825][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.894076][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.897112][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.901401][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.909110][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.911392][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.912396][ T5940] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.916792][ T5940] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.920137][ T5940] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.922602][ T5940] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.930912][ T5931] veth0_macvtap: entered promiscuous mode [ 45.936484][ T5932] veth0_vlan: entered promiscuous mode [ 45.948718][ T5931] veth1_macvtap: entered promiscuous mode [ 45.957834][ T5932] veth1_vlan: entered promiscuous mode [ 45.962926][ T5933] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 45.971188][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.974188][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.977288][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.983029][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.985973][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.989980][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.993962][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.009468][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.009548][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.012243][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.015190][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.015200][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.015207][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.027567][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.032500][ T5931] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.034993][ T5931] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.037514][ T5931] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.040134][ T5931] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.049407][ T5932] veth0_macvtap: entered promiscuous mode [ 46.056057][ T5932] veth1_macvtap: entered promiscuous mode [ 46.068364][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.071445][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.074292][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.077262][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.080829][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.083773][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.087328][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.097116][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.101388][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.104223][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.107232][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.110499][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.113485][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.116895][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.123031][ T5932] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.125598][ T5932] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.129134][ T5932] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.131670][ T5932] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.136541][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.139025][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.158726][ T5944] Bluetooth: hci1: command tx timeout [ 46.166595][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.169424][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.189416][ T221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.191734][ T221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.209341][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.211930][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.228184][ T5944] Bluetooth: hci0: command tx timeout [ 46.228218][ T5939] Bluetooth: hci2: command tx timeout [ 46.230062][ T5938] Bluetooth: hci3: command tx timeout [ 46.239400][ T6015] netlink: 'syz.1.7': attribute type 10 has an invalid length. [ 46.240460][ T6016] netlink: 'syz.1.7': attribute type 10 has an invalid length. [ 46.253745][ T6015] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 46.300001][ T6020] random: crng reseeded on system resumption [ 46.351229][ T6026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11'. [ 46.395221][ T6029] evm: overlay not supported [ 46.570691][ T6052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6052 comm=syz.2.18 [ 46.590971][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 46.757714][ T6070] Zero length message leads to an empty skb [ 46.788155][ T63] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 46.915891][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 46.938300][ T63] usb 6-1: Using ep0 maxpacket: 8 [ 46.942894][ T63] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 46.944326][ T6081] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 46.945289][ T63] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 46.951812][ T63] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 46.954613][ T63] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 46.957369][ T63] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 46.961592][ T63] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 46.964376][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.988895][ T6085] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.044725][ T6087] kvm: emulating exchange as write [ 47.053398][ T6085] warning: `syz.0.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 47.076023][ T6093] Bluetooth: MGMT ver 1.23 [ 47.077857][ T6093] Bluetooth: hci0: load_link_keys: too big key_count value 8434 [ 47.169993][ T6107] netlink: 'syz.3.37': attribute type 9 has an invalid length. [ 47.172612][ T6107] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.37'. [ 47.175601][ T6107] netlink: 'syz.3.37': attribute type 9 has an invalid length. [ 47.177860][ T6107] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.37'. [ 47.183357][ T6049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.185957][ T6049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.187353][ T63] usb 6-1: usb_control_msg returned -32 [ 47.191590][ T63] usbtmc 6-1:16.0: can't read capabilities [ 48.228199][ T5938] Bluetooth: hci1: command tx timeout [ 48.307550][ T6146] usbtmc 6-1:16.0: usb_clear_halt returned -32 [ 48.309078][ T6124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.39'. [ 48.311768][ T5938] Bluetooth: hci2: command tx timeout [ 48.319426][ T5938] Bluetooth: hci0: command tx timeout [ 48.322332][ T5938] Bluetooth: hci3: command tx timeout [ 48.450260][ T6158] binder: 6156:6158 ioctl c010641d 20000340 returned -22 [ 48.575025][ T6166] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.624050][ T6172] devpts: called with bogus options [ 48.855176][ T6175] netlink: 68 bytes leftover after parsing attributes in process `syz.2.57'. [ 49.028064][ T63] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 49.198083][ T63] usb 8-1: Using ep0 maxpacket: 8 [ 49.201027][ T63] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 49.203753][ T63] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 49.206536][ T63] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 49.209384][ T63] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 49.213052][ T63] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 49.215565][ T63] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.255128][ T39] kauditd_printk_skb: 149 callbacks suppressed [ 49.255140][ T39] audit: type=1400 audit(1737599905.106:264): avc: denied { read append } for pid=6178 comm="syz.0.59" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 49.264887][ T39] audit: type=1400 audit(1737599905.106:265): avc: denied { open } for pid=6178 comm="syz.0.59" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 49.282927][ T39] audit: type=1400 audit(1737599905.136:266): avc: denied { read } for pid=6180 comm="syz.0.60" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 49.290084][ T39] audit: type=1400 audit(1737599905.136:267): avc: denied { open } for pid=6180 comm="syz.0.60" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 49.367010][ T6188] capability: warning: `syz.0.63' uses 32-bit capabilities (legacy support in use) [ 49.392104][ T39] audit: type=1400 audit(1737599905.246:268): avc: denied { create } for pid=6187 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 49.397772][ T39] audit: type=1400 audit(1737599905.246:269): avc: denied { create } for pid=6187 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.422595][ T39] audit: type=1400 audit(1737599905.276:270): avc: denied { write } for pid=6192 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 49.422800][ T63] usb 8-1: usb_control_msg returned -32 [ 49.430015][ T63] usbtmc 8-1:16.0: can't read capabilities [ 49.454022][ T6195] netlink: 165 bytes leftover after parsing attributes in process `syz.0.66'. [ 49.457743][ T39] audit: type=1400 audit(1737599905.306:271): avc: denied { ioctl } for pid=6194 comm="syz.0.66" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 49.561948][ T63] usb 6-1: USB disconnect, device number 2 [ 49.568054][ T39] audit: type=1400 audit(1737599905.416:272): avc: denied { unlink } for pid=5940 comm="syz-executor" name="file0" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.576405][ T39] audit: type=1400 audit(1737599905.426:273): avc: denied { create } for pid=6204 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 49.600494][ T6200] capability: warning: `syz.2.67' uses deprecated v2 capabilities in a way that may be insecure [ 49.649565][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 49.652874][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 49.705103][ T6226] af_packet: tpacket_rcv: packet too big, clamped from 102 to 4294967286. macoff=82 [ 49.709245][ T6226] xt_TCPMSS: Only works on TCP SYN packets [ 49.743903][ T6228] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 49.871358][ T6251] binder: 6250:6251 unknown command 0 [ 49.873034][ T6251] binder: 6250:6251 ioctl c0306201 20000080 returned -22 [ 50.002928][ T6266] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 50.005302][ T6266] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 50.009024][ T6266] vhci_hcd vhci_hcd.0: Device attached [ 50.011859][ T6266] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 50.013717][ T6266] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 50.015923][ T6266] vhci_hcd vhci_hcd.0: Device attached [ 50.018716][ T6266] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 50.020593][ T6266] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 50.022817][ T6266] vhci_hcd vhci_hcd.0: Device attached [ 50.025207][ T6266] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(26) [ 50.027055][ T6266] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 50.029266][ T6266] vhci_hcd vhci_hcd.0: Device attached [ 50.031540][ T6266] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(37) [ 50.033476][ T6266] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 50.035848][ T6266] vhci_hcd vhci_hcd.0: Device attached [ 50.039071][ T6266] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(48) [ 50.040939][ T6266] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 50.043633][ T6266] vhci_hcd vhci_hcd.0: Device attached [ 50.048167][ T6266] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(59) [ 50.050049][ T6266] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 50.052280][ T6266] vhci_hcd vhci_hcd.0: Device attached [ 50.055427][ T6266] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(68) [ 50.057290][ T6266] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 50.059958][ T6266] vhci_hcd vhci_hcd.0: Device attached [ 50.061901][ T6267] ptm ptm56: ldisc open failed (-12), clearing slot 56 [ 50.075037][ T6281] vhci_hcd: connection closed [ 50.075282][ T6279] vhci_hcd: connection closed [ 50.077250][ T12] vhci_hcd: stop threads [ 50.077324][ T6277] vhci_hcd: connection closed [ 50.079524][ T12] vhci_hcd: release socket [ 50.082362][ T6275] vhci_hcd: connection closed [ 50.082594][ T12] vhci_hcd: disconnect device [ 50.083247][ T6283] vhci_hcd: connection closed [ 50.083885][ T6273] vhci_hcd: connection closed [ 50.084046][ T12] vhci_hcd: stop threads [ 50.085636][ T6270] vhci_hcd: connection closed [ 50.086754][ T6268] vhci_hcd: connection closed [ 50.087296][ T12] vhci_hcd: release socket [ 50.094374][ T12] vhci_hcd: disconnect device [ 50.098103][ T12] vhci_hcd: stop threads [ 50.099330][ T12] vhci_hcd: release socket [ 50.100764][ T12] vhci_hcd: disconnect device [ 50.103750][ T12] vhci_hcd: stop threads [ 50.105105][ T12] vhci_hcd: release socket [ 50.106462][ T12] vhci_hcd: disconnect device [ 50.107929][ T12] vhci_hcd: stop threads [ 50.110514][ T12] vhci_hcd: release socket [ 50.111847][ T12] vhci_hcd: disconnect device [ 50.113341][ T12] vhci_hcd: stop threads [ 50.114750][ T12] vhci_hcd: release socket [ 50.116082][ T12] vhci_hcd: disconnect device [ 50.117550][ T12] vhci_hcd: stop threads [ 50.119939][ T12] vhci_hcd: release socket [ 50.121823][ T12] vhci_hcd: disconnect device [ 50.123653][ T12] vhci_hcd: stop threads [ 50.124849][ T12] vhci_hcd: release socket [ 50.126232][ T12] vhci_hcd: disconnect device [ 50.164900][ T6297] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 50.169558][ T6297] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 50.188935][ T5934] vhci_hcd: vhci_device speed not set [ 50.271449][ T6310] mmap: syz.0.91 (6310) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.275920][ T6311] overlayfs: conflicting lowerdir path [ 50.308335][ T5939] Bluetooth: hci1: command tx timeout [ 50.398128][ T5939] Bluetooth: hci3: command tx timeout [ 50.398270][ T5938] Bluetooth: hci0: command tx timeout [ 50.399772][ T5939] Bluetooth: hci2: command tx timeout [ 50.471454][ T6322] sctp: [Deprecated]: syz.1.97 (pid 6322) Use of struct sctp_assoc_value in delayed_ack socket option. [ 50.471454][ T6322] Use struct sctp_sack_info instead [ 50.641830][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.644194][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.647103][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.649647][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.653146][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.656026][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.659232][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.662190][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.664799][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.666895][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.669641][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.671845][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.674119][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.676815][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.679566][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.682290][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.685120][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.692318][ T35] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 50.857537][ T6343] netlink: 'syz.1.106': attribute type 12 has an invalid length. [ 50.860170][ T6343] netlink: 'syz.1.106': attribute type 29 has an invalid length. [ 50.936038][ T6352] input: syz0 as /devices/virtual/input/input5 [ 51.329549][ T6384] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 51.453327][ T6392] Invalid ELF header type: 0 != 1 [ 51.565859][ T6404] __nla_validate_parse: 4 callbacks suppressed [ 51.565868][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 51.599060][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'. [ 51.791094][ T2101] usb 8-1: USB disconnect, device number 2 [ 51.840946][ T6427] netlink: 'syz.2.130': attribute type 62 has an invalid length. [ 51.862388][ T6407] sock: sock_set_timeout: `syz.0.123' (pid 6407) tries to set negative timeout [ 51.905556][ T6433] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 6433 comm: syz.1.125) [ 51.976524][ T6452] 9pnet_fd: Insufficient options for proto=fd [ 51.982199][ T6454] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 137 [ 52.115308][ T6476] netlink: 'syz.1.140': attribute type 10 has an invalid length. [ 52.119180][ T6476] veth0_macvtap: left promiscuous mode [ 52.266868][ T6491] tipc: Started in network mode [ 52.269964][ T6491] tipc: Node identity 8a3f3d6c0db2, cluster identity 4711 [ 52.272361][ T6491] tipc: Enabled bearer , priority 0 [ 52.274334][ T6492] tipc: Enabling of bearer rejected, already enabled [ 52.285338][ T6491] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 52.294473][ T6491] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 52.302661][ T6492] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 52.308538][ T6490] tipc: Resetting bearer [ 52.390975][ T5939] Bluetooth: hci1: command tx timeout [ 52.461244][ T6497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.150'. [ 52.468385][ T5939] Bluetooth: hci3: command tx timeout [ 52.469068][ T5944] Bluetooth: hci2: command tx timeout [ 53.068992][ T6490] tipc: Disabling bearer [ 53.156656][ T6504] IPVS: Unknown mcast interface: dvmrp1 [ 53.241990][ T6521] tmpfs: Bad value for 'mpol' [ 53.244921][ T6520] fuse: Unknown parameter '0x0000000000000007' [ 53.290459][ T6530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 53.352893][ T6536] binder: 6535:6536 ioctl c0306201 0 returned -14 [ 53.355166][ T6536] binder: 6535:6536 ioctl c0306201 20000980 returned -11 [ 53.375324][ T1225] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 53.457012][ T6549] netlink: 'syz.2.167': attribute type 8 has an invalid length. [ 53.462538][ T6549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.167'. [ 53.479263][ T6547] XFS (nullb0): Invalid superblock magic number [ 53.518513][ T6559] netlink: 'syz.2.167': attribute type 10 has an invalid length. [ 53.520869][ T6559] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 53.692350][ T6579] netlink: 'syz.3.174': attribute type 10 has an invalid length. [ 53.694645][ T6579] hsr0: entered allmulticast mode [ 53.696104][ T6579] hsr_slave_0: entered allmulticast mode [ 53.697714][ T6579] hsr_slave_1: entered allmulticast mode [ 53.784639][ T6585] netlink: 'syz.1.176': attribute type 21 has an invalid length. [ 53.787676][ T6585] netlink: 128 bytes leftover after parsing attributes in process `syz.1.176'. [ 53.794753][ T6585] netlink: 'syz.1.176': attribute type 5 has an invalid length. [ 53.797894][ T6585] netlink: 'syz.1.176': attribute type 6 has an invalid length. [ 53.801654][ T6585] netlink: 3 bytes leftover after parsing attributes in process `syz.1.176'. [ 53.911525][ T6601] autofs: Bad value for 'fd' [ 54.103303][ T6626] process 'syz.0.187' launched './file0' with NULL argv: empty string added [ 54.197505][ T6640] team0: mtu less than device minimum [ 54.303799][ T6654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 54.306487][ T6654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 54.309307][ T6654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 54.407000][ T6664] netlink: 'syz.2.204': attribute type 29 has an invalid length. [ 54.411545][ T6665] geneve2: entered promiscuous mode [ 54.413096][ T6665] geneve2: entered allmulticast mode [ 54.416772][ T6665] batman_adv: batadv0: Adding interface: geneve2 [ 54.419451][ T6665] batman_adv: batadv0: Interface activated: geneve2 [ 54.435783][ T6666] vivid-001: ================= START STATUS ================= [ 54.438476][ T6666] vivid-001: Radio HW Seek Mode: Bounded [ 54.440401][ T6666] vivid-001: Radio Programmable HW Seek: false [ 54.442210][ T6666] vivid-001: RDS Rx I/O Mode: Block I/O [ 54.443880][ T6666] vivid-001: Generate RBDS Instead of RDS: false [ 54.446768][ T6666] vivid-001: RDS Reception: true [ 54.449537][ T6666] vivid-001: RDS Program Type: 0 inactive [ 54.451250][ T6666] vivid-001: RDS PS Name: inactive [ 54.452789][ T6666] vivid-001: RDS Radio Text: inactive [ 54.454385][ T6666] vivid-001: RDS Traffic Announcement: false inactive [ 54.456376][ T6666] vivid-001: RDS Traffic Program: false inactive [ 54.460334][ T6666] vivid-001: RDS Music: false inactive [ 54.461924][ T6666] vivid-001: ================== END STATUS ================== [ 54.464483][ T39] kauditd_printk_skb: 127 callbacks suppressed [ 54.464492][ T39] audit: type=1400 audit(1737599910.316:401): avc: denied { ioctl } for pid=6663 comm="syz.0.205" path="socket:[12899]" dev="sockfs" ino=12899 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.519014][ T6679] netlink: 'syz.2.206': attribute type 10 has an invalid length. [ 54.898074][ T833] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.060107][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.063354][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.066182][ T833] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 55.071311][ T833] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.073854][ T833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.078206][ T833] usb 7-1: config 0 descriptor?? [ 55.235985][ T6694] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.239457][ T6694] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 55.242638][ T6694] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.245769][ T6694] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 55.299874][ T833] usbhid 7-1:0.0: can't add hid device: -71 [ 55.301745][ T833] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 55.307178][ T833] usb 7-1: USB disconnect, device number 2 [ 55.358587][ T39] audit: type=1400 audit(1737599911.206:402): avc: denied { search } for pid=5648 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.365276][ T6705] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:20001 [ 55.392899][ T39] audit: type=1400 audit(1737599911.246:403): avc: denied { read } for pid=6713 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.399524][ T39] audit: type=1400 audit(1737599911.256:404): avc: denied { open } for pid=6713 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.406399][ T39] audit: type=1400 audit(1737599911.256:405): avc: denied { getattr } for pid=6713 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.413434][ T39] audit: type=1400 audit(1737599911.256:406): avc: denied { write } for pid=6708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.422129][ T39] audit: type=1400 audit(1737599911.256:407): avc: denied { add_name } for pid=6708 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.436339][ T39] audit: type=1400 audit(1737599911.286:408): avc: denied { remove_name } for pid=6717 comm="rm" name="resolv.conf.wlan2.link" dev="tmpfs" ino=2611 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.444006][ T39] audit: type=1400 audit(1737599911.296:409): avc: denied { bind } for pid=6709 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.458236][ T39] audit: type=1400 audit(1737599911.306:410): avc: denied { search } for pid=5648 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=13471 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 55.565122][ T6742] program syz.0.222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.635214][ T6759] overlayfs: failed to clone upperpath [ 55.695064][ T6775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=6775 comm=syz.0.231 [ 55.715330][ T6779] tmpfs: Unknown parameter 'm' [ 55.738526][ T2101] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 56.766990][ T6795] pim6reg1: entered promiscuous mode [ 56.769006][ T6795] pim6reg1: entered allmulticast mode [ 56.770321][ T6790] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 56.781673][ T6790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 56.819857][ T6798] overlayfs: missing 'lowerdir' [ 56.871756][ T6811] syz.1.243: attempt to access beyond end of device [ 56.871756][ T6811] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 56.876129][ T6811] syz.1.243: attempt to access beyond end of device [ 56.876129][ T6811] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 56.877642][ T6809] raw_sendmsg: syz.0.242 forgot to set AF_INET. Fix it! [ 56.886653][ T6788] team0: Device ipvlan2 failed to register rx_handler [ 56.915400][ T6819] NILFS (nbd1): device size too small [ 57.015769][ T6837] syz.0.251: attempt to access beyond end of device [ 57.015769][ T6837] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 57.016708][ T6839] bridge0: entered promiscuous mode [ 57.021841][ T6839] macvlan2: entered promiscuous mode [ 57.022677][ T6837] SQUASHFS error: Failed to read block 0x0: -5 [ 57.024275][ T6839] bridge0: port 3(macvlan2) entered blocking state [ 57.025295][ T6837] unable to read squashfs_super_block [ 57.027526][ T6839] bridge0: port 3(macvlan2) entered disabled state [ 57.032132][ T6839] macvlan2: entered allmulticast mode [ 57.033674][ T6839] bridge0: entered allmulticast mode [ 57.035968][ T6839] macvlan2: left allmulticast mode [ 57.037466][ T6839] bridge0: left allmulticast mode [ 57.039763][ T6839] bridge0: left promiscuous mode [ 57.093342][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 57.122891][ T6855] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.258'. [ 57.125616][ T6855] net_ratelimit: 62 callbacks suppressed [ 57.125633][ T6855] openvswitch: netlink: Unknown key attributes 20 [ 57.160115][ T6866] binder: Unknown parameter 'permit_directio' [ 57.194593][ T6875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=6875 comm=syz.3.265 [ 57.250878][ T6884] validate_nla: 1 callbacks suppressed [ 57.250887][ T6884] netlink: 'syz.1.269': attribute type 10 has an invalid length. [ 57.280112][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 57.418114][ T5993] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 57.440792][ T6904] netlink: 'syz.3.276': attribute type 21 has an invalid length. [ 57.443173][ T6904] netlink: 168 bytes leftover after parsing attributes in process `syz.3.276'. [ 57.499611][ T6915] xt_hashlimit: size too large, truncated to 1048576 [ 57.569213][ T5993] usb 5-1: not running at top speed; connect to a high speed hub [ 57.573479][ T5993] usb 5-1: config 9 has an invalid interface number: 217 but max is 3 [ 57.576690][ T5993] usb 5-1: config 9 has an invalid interface number: 7 but max is 3 [ 57.586417][ T5993] usb 5-1: config 9 has an invalid interface number: 36 but max is 3 [ 57.589497][ T5993] usb 5-1: config 9 has an invalid interface number: 74 but max is 3 [ 57.592649][ T5993] usb 5-1: config 9 has an invalid interface number: 237 but max is 3 [ 57.595721][ T5993] usb 5-1: config 9 has an invalid descriptor of length 69, skipping remainder of the config [ 57.608270][ T5993] usb 5-1: config 9 has 5 interfaces, different from the descriptor's value: 4 [ 57.611342][ T6915] netlink: 'syz.2.281': attribute type 10 has an invalid length. [ 57.611948][ T5993] usb 5-1: config 9 has no interface number 0 [ 57.616616][ T5993] usb 5-1: config 9 has no interface number 1 [ 57.617835][ T6915] team0: Device hsr_slave_0 failed to register rx_handler [ 57.619025][ T5993] usb 5-1: config 9 has no interface number 2 [ 57.623069][ T5993] usb 5-1: config 9 has no interface number 3 [ 57.625196][ T5993] usb 5-1: config 9 has no interface number 4 [ 57.626999][ T5993] usb 5-1: config 9 interface 217 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 57.638905][ T5993] usb 5-1: config 9 interface 217 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 57.643111][ T5993] usb 5-1: config 9 interface 217 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 57.646841][ T5993] usb 5-1: config 9 interface 217 altsetting 2 endpoint 0xF has an invalid bInterval 0, changing to 4 [ 57.653446][ T5993] usb 5-1: config 9 interface 217 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 57.657347][ T5993] usb 5-1: config 9 interface 217 altsetting 2 endpoint 0x7 has an invalid bInterval 124, changing to 4 [ 57.661494][ T5993] usb 5-1: config 9 interface 217 altsetting 2 endpoint 0x7 has invalid wMaxPacketSize 0 [ 57.664383][ T5993] usb 5-1: config 9 interface 217 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 57.667429][ T5993] usb 5-1: config 9 interface 217 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 57.670802][ T6938] fuse: Bad value for 'rootmode' [ 57.671109][ T5993] usb 5-1: config 9 interface 217 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 57.675235][ T5993] usb 5-1: config 9 interface 217 altsetting 2 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 57.678494][ T5993] usb 5-1: config 9 interface 7 altsetting 249 has an endpoint descriptor with address 0x78, changing to 0x8 [ 57.681605][ T5993] usb 5-1: config 9 interface 7 altsetting 249 has a duplicate endpoint with address 0x8, skipping [ 57.684649][ T5993] usb 5-1: config 9 interface 7 altsetting 249 has a duplicate endpoint with address 0xD, skipping [ 57.687669][ T5993] usb 5-1: config 9 interface 7 altsetting 249 has a duplicate endpoint with address 0x5, skipping [ 57.690935][ T5993] usb 5-1: config 9 interface 7 altsetting 249 has a duplicate endpoint with address 0x7, skipping [ 57.693973][ T5993] usb 5-1: config 9 interface 7 altsetting 249 has a duplicate endpoint with address 0xE, skipping [ 57.696985][ T5993] usb 5-1: config 9 interface 7 altsetting 249 has a duplicate endpoint with address 0xF, skipping [ 57.700599][ T5993] usb 5-1: config 9 interface 7 altsetting 249 has an invalid descriptor for endpoint zero, skipping [ 57.703716][ T5993] usb 5-1: config 9 interface 7 altsetting 249 has a duplicate endpoint with address 0xE, skipping [ 57.706809][ T5993] usb 5-1: config 9 interface 7 altsetting 249 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 57.712146][ T5993] usb 5-1: config 9 interface 7 altsetting 249 has a duplicate endpoint with address 0x7, skipping [ 57.715253][ T5993] usb 5-1: config 9 interface 36 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 57.718486][ T5993] usb 5-1: config 9 interface 36 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 57.721499][ T5993] usb 5-1: config 9 interface 36 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 57.724584][ T5993] usb 5-1: config 9 interface 36 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 57.727476][ T5993] usb 5-1: config 9 interface 36 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 57.730607][ T5993] usb 5-1: config 9 interface 36 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 57.733823][ T5993] usb 5-1: config 9 interface 36 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 57.736809][ T5993] usb 5-1: config 9 interface 36 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 14 [ 57.737767][ T6947] overlayfs: failed to resolve './file0': -2 [ 57.740663][ T5993] usb 5-1: too many endpoints for config 9 interface 74 altsetting 245: 104, using maximum allowed: 30 [ 57.740698][ T5993] usb 5-1: config 9 interface 74 altsetting 245 has a duplicate endpoint with address 0xC, skipping [ 57.740708][ T5993] usb 5-1: config 9 interface 74 altsetting 245 has a duplicate endpoint with address 0xB, skipping [ 57.740717][ T5993] usb 5-1: config 9 interface 74 altsetting 245 has an endpoint descriptor with address 0x24, changing to 0x4 [ 57.740729][ T5993] usb 5-1: config 9 interface 74 altsetting 245 endpoint 0x4 has invalid maxpacket 14217, setting to 64 [ 57.740740][ T5993] usb 5-1: config 9 interface 74 altsetting 245 has a duplicate endpoint with address 0xF, skipping [ 57.740749][ T5993] usb 5-1: config 9 interface 74 altsetting 245 has a duplicate endpoint with address 0xD, skipping [ 57.740759][ T5993] usb 5-1: config 9 interface 74 altsetting 245 has a duplicate endpoint with address 0x5, skipping [ 57.766793][ T5993] usb 5-1: config 9 interface 74 altsetting 245 has an invalid descriptor for endpoint zero, skipping [ 57.770049][ T5993] usb 5-1: config 9 interface 74 altsetting 245 has an invalid descriptor for endpoint zero, skipping [ 57.771332][ T6947] ip6t_srh: unknown srh match flags 4000 [ 57.773143][ T5993] usb 5-1: config 9 interface 74 altsetting 245 has 8 endpoint descriptors, different from the interface descriptor's value: 104 [ 57.778631][ T5993] usb 5-1: config 9 interface 237 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 57.782395][ T5993] usb 5-1: config 9 interface 217 has no altsetting 0 [ 57.786065][ T5993] usb 5-1: config 9 interface 7 has no altsetting 0 [ 57.786078][ T5993] usb 5-1: config 9 interface 36 has no altsetting 0 [ 57.786086][ T5993] usb 5-1: config 9 interface 74 has no altsetting 0 [ 57.786094][ T5993] usb 5-1: config 9 interface 237 has no altsetting 0 [ 57.787937][ T5993] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a99, bcdDevice= 4.40 [ 57.787950][ T5993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.787958][ T5993] usb 5-1: Product: syz [ 57.787965][ T5993] usb 5-1: Manufacturer:  [ 57.789739][ T5993] usb 5-1: SerialNumber: syz [ 57.791297][ T5993] usb 5-1: Interface #217 referenced by multiple IADs [ 57.791374][ T5993] usb 5-1: Interface #237 referenced by multiple IADs [ 57.792292][ T6871] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 57.886956][ T6972] netlink: 'syz.1.302': attribute type 6 has an invalid length. [ 58.002976][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 58.012799][ T5993] usb 5-1: USB disconnect, device number 2 [ 58.717566][ T7042] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.722059][ T7034] IPVS: set_ctl: invalid protocol: 137 10.1.1.2:20000 [ 58.729718][ T7042] team0: Cannot enslave team device to itself [ 58.773128][ T7045] overlayfs: failed to clone upperpath [ 58.829400][ T7056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.331'. [ 58.833343][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'. [ 58.878762][ T7065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 58.905486][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.336'. [ 58.908172][ T7067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.336'. [ 58.912606][ T7069] xt_TPROXY: Can be used only with -p tcp or -p udp [ 58.950400][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.973619][ T7074] binder: 7073:7074 ioctl c0306201 200003c0 returned -22 [ 59.016914][ T7079] bridge_slave_1: left allmulticast mode [ 59.019278][ T7079] bridge_slave_1: left promiscuous mode [ 59.022404][ T7079] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.026960][ T7079] bridge_slave_0: left allmulticast mode [ 59.029779][ T7079] bridge_slave_0: left promiscuous mode [ 59.031990][ T7079] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.364287][ T7115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 59.426374][ T7128] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 4, id = 0 [ 59.667368][ T39] kauditd_printk_skb: 40 callbacks suppressed [ 59.667378][ T39] audit: type=1400 audit(1737600171.510:451): avc: denied { bind } for pid=7133 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.676139][ T39] audit: type=1400 audit(1737600171.520:452): avc: denied { listen } for pid=7133 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.681849][ T39] audit: type=1400 audit(1737600171.520:453): avc: denied { write } for pid=7133 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.687242][ T39] audit: type=1400 audit(1737600171.520:454): avc: denied { accept } for pid=7133 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.219919][ T39] audit: type=1400 audit(1737600172.070:455): avc: denied { setcheckreqprot } for pid=7155 comm="syz.1.353" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 60.222897][ T7156] netlink: 'syz.1.353': attribute type 10 has an invalid length. [ 60.233263][ T7156] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.236247][ T7156] bond0: (slave team0): Enslaving as an active interface with an up link [ 60.263599][ T39] audit: type=1400 audit(1737600172.110:456): avc: denied { read write } for pid=7157 comm="syz.0.354" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 60.277881][ T7164] syz.2.355: attempt to access beyond end of device [ 60.277881][ T7164] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 60.277967][ T39] audit: type=1400 audit(1737600172.110:457): avc: denied { open } for pid=7157 comm="syz.0.354" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 60.282768][ T7164] EXT4-fs (nbd2): unable to read superblock [ 60.320763][ T39] audit: type=1400 audit(1737600172.170:458): avc: denied { setopt } for pid=7169 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.352421][ T7175] IPv6: Can't replace route, no match found [ 60.377831][ T7176] netlink: 'syz.0.357': attribute type 13 has an invalid length. [ 60.425710][ T39] audit: type=1400 audit(1737600172.270:459): avc: denied { connect } for pid=7184 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.928199][ T5975] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 61.078347][ T5975] usb 7-1: Using ep0 maxpacket: 16 [ 61.081656][ T5975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.084888][ T5975] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 61.088909][ T5975] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 61.092098][ T5975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.099610][ T5975] usb 7-1: config 0 descriptor?? [ 61.230090][ T7229] 9pnet: Unknown protocol version 9p2000.u [ 61.275515][ T39] audit: type=1400 audit(1737600173.120:460): avc: denied { create } for pid=7232 comm="syz.0.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 61.317898][ T5944] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 61.321830][ T5944] CPU: 3 UID: 0 PID: 5944 Comm: kworker/u33:6 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 61.321844][ T5944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.321851][ T5944] Workqueue: hci3 hci_rx_work [ 61.321881][ T5944] Call Trace: [ 61.321884][ T5944] [ 61.321888][ T5944] dump_stack_lvl+0x16c/0x1f0 [ 61.321911][ T5944] sysfs_warn_dup+0x7f/0xa0 [ 61.321923][ T5944] sysfs_create_dir_ns+0x24d/0x2b0 [ 61.321934][ T5944] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 61.321944][ T5944] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 61.321959][ T5944] ? kobject_add_internal+0x12d/0x990 [ 61.321971][ T5944] ? do_raw_spin_unlock+0x172/0x230 [ 61.321985][ T5944] kobject_add_internal+0x2c8/0x990 [ 61.321998][ T5944] kobject_add+0x16f/0x240 [ 61.322010][ T5944] ? __pfx_kobject_add+0x10/0x10 [ 61.322021][ T5944] ? class_to_subsys+0x3e/0x160 [ 61.322045][ T5944] ? do_raw_spin_unlock+0x172/0x230 [ 61.322059][ T5944] ? kobject_put+0xab/0x5a0 [ 61.322075][ T5944] device_add+0x289/0x1a70 [ 61.322090][ T5944] ? __pfx_dev_set_name+0x10/0x10 [ 61.322106][ T5944] ? __pfx_device_add+0x10/0x10 [ 61.322120][ T5944] ? mgmt_send_event_skb+0x2f2/0x460 [ 61.322136][ T5944] hci_conn_add_sysfs+0x17e/0x230 [ 61.322151][ T5944] le_conn_complete_evt+0x107f/0x1da0 [ 61.322165][ T5944] ? __pfx_lock_release+0x10/0x10 [ 61.322176][ T5944] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 61.322187][ T5944] ? __mutex_lock+0x1cc/0xb10 [ 61.322202][ T5944] hci_le_conn_complete_evt+0x23c/0x370 [ 61.322215][ T5944] hci_le_meta_evt+0x2e2/0x5d0 [ 61.322227][ T5944] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 61.322240][ T5944] hci_event_packet+0x666/0x1180 [ 61.322251][ T5944] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 61.322263][ T5944] ? __pfx_hci_event_packet+0x10/0x10 [ 61.322273][ T5944] ? mark_held_locks+0x9f/0xe0 [ 61.322284][ T5944] ? kcov_remote_start+0x3cf/0x6e0 [ 61.322297][ T5944] ? lockdep_hardirqs_on+0x7c/0x110 [ 61.322309][ T5944] hci_rx_work+0x2c5/0x16b0 [ 61.322322][ T5944] ? process_one_work+0x921/0x1ba0 [ 61.322334][ T5944] process_one_work+0x9c5/0x1ba0 [ 61.322349][ T5944] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 61.322360][ T5944] ? __pfx_process_one_work+0x10/0x10 [ 61.322370][ T5944] ? rcu_is_watching+0x12/0xc0 [ 61.322383][ T5944] ? assign_work+0x1a0/0x250 [ 61.322394][ T5944] worker_thread+0x6c8/0xf00 [ 61.322409][ T5944] ? __pfx_worker_thread+0x10/0x10 [ 61.322420][ T5944] kthread+0x3af/0x750 [ 61.322430][ T5944] ? __pfx_kthread+0x10/0x10 [ 61.322439][ T5944] ? lock_acquire+0x2f/0xb0 [ 61.322464][ T5944] ? __pfx_kthread+0x10/0x10 [ 61.322476][ T5944] ret_from_fork+0x45/0x80 [ 61.322487][ T5944] ? __pfx_kthread+0x10/0x10 [ 61.322498][ T5944] ret_from_fork_asm+0x1a/0x30 [ 61.322520][ T5944] [ 61.322531][ T5944] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 61.404814][ T5944] Bluetooth: hci3: failed to register connection device [ 62.067843][ T5975] usbhid 7-1:0.0: can't add hid device: -71 [ 62.073738][ T5975] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 62.079026][ T5975] usb 7-1: USB disconnect, device number 3 [ 62.426598][ T7315] xt_CONNSECMARK: invalid mode: 0 [ 62.451807][ T7318] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 62.496930][ T7325] overlayfs: failed to clone upperpath [ 62.529752][ T7327] syz.3.406 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 62.704443][ T7337] openvswitch: netlink: IP tunnel dst address not specified [ 62.748812][ T7339] __nla_validate_parse: 7 callbacks suppressed [ 62.748822][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 62.796693][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 63.438115][ T5993] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 63.439313][ T5939] Bluetooth: hci3: command tx timeout [ 63.590961][ T5993] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 63.593617][ T5993] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 63.596002][ T7366] ======================================================= [ 63.596002][ T7366] WARNING: The mand mount option has been deprecated and [ 63.596002][ T7366] and is ignored by this kernel. Remove the mand [ 63.596002][ T7366] option from the mount to silence this warning. [ 63.596002][ T7366] ======================================================= [ 63.596397][ T5993] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 63.610376][ T5993] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 63.614875][ T5993] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 63.619840][ T5993] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 63.622359][ T5993] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 63.624550][ T5993] usb 6-1: Product: syz [ 63.625760][ T5993] usb 6-1: Manufacturer: syz [ 63.629431][ T5993] cdc_wdm 6-1:1.0: skipping garbage [ 63.630902][ T5993] cdc_wdm 6-1:1.0: skipping garbage [ 63.633978][ T5993] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 63.635762][ T5993] cdc_wdm 6-1:1.0: Unknown control protocol [ 63.832805][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 63.848126][ T5975] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 63.978064][ T5975] usb 7-1: device descriptor read/64, error -71 [ 64.218057][ T5975] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 64.261081][ T7378] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.317259][ T7378] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.348338][ T5975] usb 7-1: device descriptor read/64, error -71 [ 64.399620][ T7378] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.458317][ T5975] usb usb7-port1: attempt power cycle [ 64.463073][ T7378] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.533126][ T7378] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.539972][ T7378] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.547724][ T7378] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.555329][ T7378] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.560025][ T7379] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.661931][ T7379] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.700188][ T7379] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.771373][ T7379] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.798065][ T5975] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 64.818439][ T5975] usb 7-1: device descriptor read/8, error -71 [ 64.869896][ T5944] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 64.869907][ T5939] Bluetooth: hci4: command 0xfc11 tx timeout [ 64.901705][ T7384] 9pnet_fd: Insufficient options for proto=fd [ 64.903632][ T7383] 9pnet_fd: Insufficient options for proto=fd [ 64.905691][ T7384] overlayfs: missing 'workdir' [ 64.905765][ T7383] overlayfs: missing 'workdir' [ 64.911675][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 64.914294][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 64.979964][ T39] kauditd_printk_skb: 18 callbacks suppressed [ 64.979973][ T39] audit: type=1400 audit(1737600176.830:479): avc: denied { map } for pid=7386 comm="syz.0.425" path="socket:[16624]" dev="sockfs" ino=16624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.988900][ T39] audit: type=1400 audit(1737600176.830:480): avc: denied { accept } for pid=7386 comm="syz.0.425" path="socket:[16624]" dev="sockfs" ino=16624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.057184][ T39] audit: type=1326 audit(1737600176.900:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.0.428" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3278cd29 code=0x7ffc0000 [ 65.063295][ T39] audit: type=1326 audit(1737600176.900:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.0.428" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3278cd29 code=0x7ffc0000 [ 65.068069][ T5975] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 65.069365][ T39] audit: type=1326 audit(1737600176.900:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.0.428" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fbe3278cd29 code=0x7ffc0000 [ 65.077425][ T39] audit: type=1326 audit(1737600176.900:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.0.428" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3278cd29 code=0x7ffc0000 [ 65.083438][ T39] audit: type=1326 audit(1737600176.900:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.0.428" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe3278cd29 code=0x7ffc0000 [ 65.090179][ T39] audit: type=1326 audit(1737600176.900:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.0.428" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3278cd29 code=0x7ffc0000 [ 65.096255][ T39] audit: type=1326 audit(1737600176.900:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.0.428" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe3278cd29 code=0x7ffc0000 [ 65.103427][ T5975] usb 7-1: device descriptor read/8, error -71 [ 65.104117][ T39] audit: type=1326 audit(1737600176.900:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.0.428" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3278cd29 code=0x7ffc0000 [ 65.142717][ T7401] netlink: 'syz.0.430': attribute type 10 has an invalid length. [ 65.150569][ T7401] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 65.208319][ T5975] usb usb7-port1: unable to enumerate USB device [ 65.571281][ T7417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=7417 comm=syz.0.434 [ 65.790564][ T7423] program syz.0.437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.158119][ T5993] usb 6-1: USB disconnect, device number 3 [ 66.627648][ T7438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.441'. [ 66.631978][ T7438] netlink: 64 bytes leftover after parsing attributes in process `syz.2.441'. [ 66.836183][ T7450] hfsplus: unable to find HFS+ superblock [ 66.842377][ T7450] bond0: (slave team0): Releasing backup interface [ 66.849733][ T7450] bridge_slave_0: left allmulticast mode [ 66.851743][ T7450] bridge_slave_0: left promiscuous mode [ 66.853841][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.858212][ T7450] bridge_slave_1: left allmulticast mode [ 66.860243][ T7450] bridge_slave_1: left promiscuous mode [ 66.862312][ T7450] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.867246][ T7450] bond0: (slave bond_slave_0): Releasing backup interface [ 66.874920][ T7450] bond0: (slave bond_slave_1): Releasing backup interface [ 66.889580][ T7450] team0: Port device team_slave_0 removed [ 66.889597][ T7451] netlink: 'syz.1.444': attribute type 10 has an invalid length. [ 66.893367][ T7451] netlink: 2 bytes leftover after parsing attributes in process `syz.1.444'. [ 66.894835][ T7450] team0: Port device team_slave_1 removed [ 66.897647][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.899803][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.902576][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.904944][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.911207][ T7450] bond0: (slave wlan1): Releasing backup interface [ 66.920405][ T7451] team0: entered promiscuous mode [ 66.922284][ T7451] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.924356][ T7451] bridge0: port 1(team0) entered blocking state [ 66.926176][ T7451] bridge0: port 1(team0) entered disabled state [ 66.928173][ T7451] team0: entered allmulticast mode [ 67.590479][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 67.903317][ T7477] xt_CT: No such helper "pptp" [ 67.938995][ T7492] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.454'. [ 67.941595][ T7492] netlink: zone id is out of range [ 67.943023][ T7492] netlink: zone id is out of range [ 67.944516][ T7492] netlink: zone id is out of range [ 67.945929][ T7492] netlink: get zone limit has 8 unknown bytes [ 67.951861][ T7492] syz.1.454 uses obsolete (PF_INET,SOCK_PACKET) [ 67.999423][ T7502] dlm: plock device version mismatch: kernel (1.2.0), user (188.0.0) [ 68.006140][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.456'. [ 68.146037][ T7379] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.156150][ T7379] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.162252][ T7379] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.167400][ T7379] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.190107][ T7513] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 68.468992][ T63] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 68.641753][ T63] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 68.645057][ T63] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.647964][ T63] usb 7-1: Product: syz [ 68.649627][ T63] usb 7-1: Manufacturer: syz [ 68.651463][ T63] usb 7-1: SerialNumber: syz [ 68.655930][ T63] usb 7-1: config 0 descriptor?? [ 68.860513][ T2101] usb 7-1: USB disconnect, device number 8 [ 69.061773][ T7522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.465'. [ 69.064451][ T7522] binder: 7521:7522 ioctl ae01 0 returned -22 [ 69.071785][ T7546] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.076696][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.471'. [ 69.164420][ T7549] overlayfs: failed to resolve './file0': -2 [ 69.170624][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 69.404820][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'. [ 69.434790][ T7557] netlink: 72 bytes leftover after parsing attributes in process `syz.1.474'. [ 69.435151][ T7558] netlink: 72 bytes leftover after parsing attributes in process `syz.1.474'. [ 69.533068][ T7560] netlink: 36 bytes leftover after parsing attributes in process `syz.1.475'. [ 69.536358][ T7560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.475'. [ 69.616010][ T7565] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 69.697716][ T7568] hsr_slave_1 (unregistering): left promiscuous mode [ 69.810282][ T7584] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 69.863012][ T7586] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 69.943590][ T9] IPVS: starting estimator thread 0... [ 69.994468][ T7599] cgroup: Name too long [ 70.039733][ T7593] IPVS: using max 40 ests per chain, 96000 per kthread [ 70.219388][ T39] kauditd_printk_skb: 75 callbacks suppressed [ 70.219399][ T39] audit: type=1400 audit(1737600182.070:564): avc: denied { ioctl } for pid=7614 comm="syz.1.490" path="socket:[18784]" dev="sockfs" ino=18784 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.336095][ T7620] overlayfs: missing 'lowerdir' [ 70.339017][ T39] audit: type=1400 audit(1737600182.190:565): avc: denied { map } for pid=7619 comm="syz.1.492" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 70.345448][ T39] audit: type=1400 audit(1737600182.190:566): avc: denied { execute } for pid=7619 comm="syz.1.492" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 70.650643][ T39] audit: type=1400 audit(1737600182.500:567): avc: denied { getopt } for pid=7646 comm="syz.2.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 70.656591][ T39] audit: type=1400 audit(1737600182.500:568): avc: denied { map } for pid=7646 comm="syz.2.498" path="socket:[16829]" dev="sockfs" ino=16829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 70.664670][ T39] audit: type=1400 audit(1737600182.500:569): avc: denied { read } for pid=7646 comm="syz.2.498" path="socket:[16829]" dev="sockfs" ino=16829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 70.671785][ T39] audit: type=1400 audit(1737600182.510:570): avc: denied { write } for pid=7648 comm="syz.1.500" path="socket:[18811]" dev="sockfs" ino=18811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 70.711093][ T39] audit: type=1400 audit(1737600182.560:571): avc: denied { read } for pid=7652 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.721598][ T39] audit: type=1400 audit(1737600182.570:572): avc: denied { ioctl } for pid=7658 comm="syz.3.502" path="socket:[17798]" dev="sockfs" ino=17798 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 70.751691][ T39] audit: type=1400 audit(1737600182.600:573): avc: denied { name_bind } for pid=7662 comm="syz.3.504" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 70.870743][ T7673] ip6t_srh: unknown srh invflags 7863 [ 70.907538][ T7673] netlink: 'syz.1.508': attribute type 2 has an invalid length. [ 71.113879][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.117212][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.273637][ T7709] netlink: 'syz.3.519': attribute type 1 has an invalid length. [ 71.288252][ T7709] bond1: entered promiscuous mode [ 71.289927][ T7709] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.298554][ T7709] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.300629][ T7709] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 71.303420][ T7709] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 71.307584][ T7709] bond1: (slave ip6gre1): making interface the new active one [ 71.309813][ T7709] ip6gre1: entered promiscuous mode [ 71.311955][ T7709] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 71.370622][ T7714] $Hÿ: renamed from bond0 (while UP) [ 71.377622][ T7714] $Hÿ: entered promiscuous mode [ 71.379357][ T7714] bond_slave_0: entered promiscuous mode [ 71.381281][ T7714] bond_slave_1: entered promiscuous mode [ 71.440829][ T7715] netlink: 'syz.3.520': attribute type 2 has an invalid length. [ 71.580418][ T7723] netlink: 'syz.2.523': attribute type 10 has an invalid length. [ 71.585238][ T7723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.600515][ T7723] bond0: entered promiscuous mode [ 71.602074][ T7723] bond_slave_0: entered promiscuous mode [ 71.603762][ T7723] bond_slave_1: entered promiscuous mode [ 71.643375][ T7725] geneve3: entered promiscuous mode [ 71.644945][ T7725] geneve3: entered allmulticast mode [ 71.842725][ T7734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7734 comm=syz.3.528 [ 71.847367][ T7735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7735 comm=syz.3.528 [ 71.940878][ T5975] IPVS: starting estimator thread 0... [ 72.048210][ T7743] IPVS: using max 40 ests per chain, 96000 per kthread [ 72.801899][ T5939] Bluetooth: hci1: unexpected subevent 0x12 length: 28 > 5 [ 73.945580][ T7807] veth1_to_batadv: entered promiscuous mode [ 73.947666][ T7807] macsec0: entered promiscuous mode [ 74.070530][ T7820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7820 comm=syz.3.555 [ 74.153360][ T7831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.157336][ T7831] batadv_slave_0: entered promiscuous mode [ 74.330631][ T7855] netlink: 'syz.3.567': attribute type 1 has an invalid length. [ 74.348824][ T7855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.372134][ T7843] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 74.374557][ T7843] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 74.379611][ T7855] bond0: (slave gretap1): making interface the new active one [ 74.383208][ T7855] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 74.391376][ T7843] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 74.395490][ T7843] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 74.397274][ T7843] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 74.404628][ T7843] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 74.414081][ T7843] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 74.415937][ T7843] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 74.421357][ T7843] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 74.423589][ T7843] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 74.426019][ T7843] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 74.430462][ T7843] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 74.441001][ T7863] overlayfs: workdir and upperdir must reside under the same mount [ 74.513608][ T7870] __nla_validate_parse: 9 callbacks suppressed [ 74.513619][ T7870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.571'. [ 74.753751][ T5944] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 74.782102][ T7887] netlink: 36 bytes leftover after parsing attributes in process `syz.0.578'. [ 74.784795][ T7887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.578'. [ 74.787363][ T7887] netlink: 36 bytes leftover after parsing attributes in process `syz.0.578'. [ 74.791023][ T7887] netlink: 36 bytes leftover after parsing attributes in process `syz.0.578'. [ 75.205363][ T5944] Bluetooth: hci1: unexpected event for opcode 0x2019 [ 75.383083][ T39] kauditd_printk_skb: 18 callbacks suppressed [ 75.383099][ T39] audit: type=1400 audit(1737600187.230:592): avc: denied { shutdown } for pid=7940 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.394070][ T39] audit: type=1400 audit(1737600187.230:593): avc: denied { read } for pid=7940 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.432584][ T7935] netlink: 108 bytes leftover after parsing attributes in process `syz.3.591'. [ 75.436642][ T7935] virtio-fs: tag <#! [ 75.436642][ T7935] > not found [ 75.439115][ T7935] fuse: Unknown parameter '0xffffffffffffffff' [ 75.727615][ T39] audit: type=1400 audit(1737600187.570:594): avc: denied { write } for pid=7962 comm="syz.1.601" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.904918][ T5944] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 75.907372][ T7995] ------------[ cut here ]------------ [ 75.909531][ T7995] WARNING: CPU: 0 PID: 7995 at mm/page_alloc.c:4729 __alloc_pages_noprof+0x1f66/0x2470 [ 75.913340][ T7995] Modules linked in: [ 75.914530][ T7995] CPU: 0 UID: 0 PID: 7995 Comm: syz.0.609 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 75.919531][ T7995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.922694][ T7995] RIP: 0010:__alloc_pages_noprof+0x1f66/0x2470 [ 75.924680][ T7995] Code: 24 38 41 89 c6 0f b6 c0 44 8b ac 24 84 00 00 00 89 44 24 18 e9 a8 f7 ff ff 90 0f 0b 90 e9 b6 f7 ff ff c6 05 a1 a3 5a 0e 01 90 <0f> 0b 90 e9 d9 e4 ff ff 90 0f 0b 90 e9 4e fb ff ff 83 bc 24 80 00 [ 75.930331][ T7995] RSP: 0018:ffffc90005bbf898 EFLAGS: 00010246 [ 75.932115][ T7995] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 75.934401][ T7995] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 75.936710][ T7995] RBP: 0000000100000030 R08: 0000000000000005 R09: 0000000000000000 [ 75.939048][ T7995] R10: 000000004000000c R11: 0000000000000000 R12: 0000000000000015 [ 75.941433][ T7995] R13: 1ffff92000b77f27 R14: 0000000100000030 R15: ffffffff853e5fc7 [ 75.944279][ T7995] FS: 00007fbe3358d6c0(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 75.946842][ T7995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.948916][ T7995] CR2: 000000110c3fa20f CR3: 0000000051f5c000 CR4: 0000000000352ef0 [ 75.951193][ T7995] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.953457][ T7995] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.955836][ T7995] Call Trace: [ 75.956817][ T7995] [ 75.957721][ T7995] ? __warn+0xea/0x3c0 [ 75.958967][ T7995] ? __alloc_pages_noprof+0x1f66/0x2470 [ 75.959437][ T5944] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 75.960533][ T7995] ? report_bug+0x3c0/0x580 [ 75.960558][ T7995] ? handle_bug+0x54/0xa0 [ 75.960571][ T7995] ? exc_invalid_op+0x17/0x50 [ 75.960585][ T7995] ? asm_exc_invalid_op+0x1a/0x20 [ 75.969519][ T7995] ? drm_syncobj_array_find+0x37/0x3b0 [ 75.971106][ T7995] ? __alloc_pages_noprof+0x1f66/0x2470 [ 75.972751][ T7995] ? hlock_class+0x4e/0x130 [ 75.974214][ T7995] ? __lock_acquire+0xcc5/0x3c40 [ 75.975755][ T7995] ? hlock_class+0x4e/0x130 [ 75.977085][ T7995] ? mark_lock+0xb5/0xc60 [ 75.978436][ T7995] ? stack_depot_save_flags+0x28/0x9c0 [ 75.980019][ T7995] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 75.981652][ T7995] ? mark_lock+0xb5/0xc60 [ 75.982934][ T7995] ? hlock_class+0x4e/0x130 [ 75.984282][ T7995] ? find_held_lock+0x2d/0x110 [ 75.985698][ T7995] ? __pfx_mark_lock+0x10/0x10 [ 75.987163][ T7995] ? hlock_class+0x4e/0x130 [ 75.989162][ T7995] ? __lock_acquire+0x15a9/0x3c40 [ 75.990767][ T7995] ? drm_syncobj_array_find+0x37/0x3b0 [ 75.992376][ T7995] ___kmalloc_large_node+0x84/0x1b0 [ 75.993916][ T7995] __kmalloc_large_node_noprof+0x1c/0x70 [ 75.995571][ T7995] ? __pfx___lock_acquire+0x10/0x10 [ 75.997104][ T7995] __kmalloc_noprof.cold+0xc/0x61 [ 75.998711][ T7995] drm_syncobj_array_find+0x37/0x3b0 [ 76.000318][ T7995] ? find_held_lock+0x2d/0x110 [ 76.001795][ T7995] drm_syncobj_timeline_wait_ioctl+0x23a/0x390 [ 76.003572][ T7995] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 76.005621][ T7995] ? drm_dev_enter+0x4c/0x170 [ 76.006994][ T7995] drm_ioctl_kernel+0x1e6/0x3d0 [ 76.008556][ T7995] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 76.010496][ T7995] ? __might_fault+0xe3/0x190 [ 76.011870][ T7995] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 76.013413][ T7995] ? __might_fault+0xe3/0x190 [ 76.014799][ T7995] drm_ioctl+0x5d6/0xc00 [ 76.016067][ T7995] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 76.018128][ T7995] ? __pfx_drm_ioctl+0x10/0x10 [ 76.019546][ T7995] ? __pfx_lock_release+0x10/0x10 [ 76.021035][ T7995] ? selinux_file_ioctl+0x180/0x270 [ 76.022592][ T7995] ? selinux_file_ioctl+0xb4/0x270 [ 76.024125][ T7995] ? __pfx_drm_ioctl+0x10/0x10 [ 76.025546][ T7995] __x64_sys_ioctl+0x190/0x200 [ 76.026934][ T7995] do_syscall_64+0xcd/0x250 [ 76.028349][ T7995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.030063][ T7995] RIP: 0033:0x7fbe3278cd29 [ 76.031376][ T7995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.036947][ T7995] RSP: 002b:00007fbe3358d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.039427][ T7995] RAX: ffffffffffffffda RBX: 00007fbe329a5fa0 RCX: 00007fbe3278cd29 [ 76.041717][ T7995] RDX: 0000000020000000 RSI: 00000000c03064ca RDI: 0000000000000003 [ 76.044044][ T7995] RBP: 00007fbe3280e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 76.046429][ T7995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.048925][ T7995] R13: 0000000000000000 R14: 00007fbe329a5fa0 R15: 00007ffc63b98d08 [ 76.051198][ T7995] [ 76.052143][ T7995] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.054243][ T7995] CPU: 0 UID: 0 PID: 7995 Comm: syz.0.609 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 76.057154][ T7995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.060209][ T7995] Call Trace: [ 76.061163][ T7995] [ 76.062014][ T7995] dump_stack_lvl+0x3d/0x1f0 [ 76.063369][ T7995] panic+0x71d/0x800 [ 76.064559][ T7995] ? __pfx_panic+0x10/0x10 [ 76.065873][ T7995] ? show_trace_log_lvl+0x29d/0x3d0 [ 76.067359][ T7995] ? __alloc_pages_noprof+0x1f66/0x2470 [ 76.068977][ T7995] check_panic_on_warn+0xab/0xb0 [ 76.070390][ T7995] __warn+0xf6/0x3c0 [ 76.071585][ T7995] ? __alloc_pages_noprof+0x1f66/0x2470 [ 76.073188][ T7995] report_bug+0x3c0/0x580 [ 76.074452][ T7995] handle_bug+0x54/0xa0 [ 76.075680][ T7995] exc_invalid_op+0x17/0x50 [ 76.077009][ T7995] asm_exc_invalid_op+0x1a/0x20 [ 76.078425][ T7995] RIP: 0010:__alloc_pages_noprof+0x1f66/0x2470 [ 76.080199][ T7995] Code: 24 38 41 89 c6 0f b6 c0 44 8b ac 24 84 00 00 00 89 44 24 18 e9 a8 f7 ff ff 90 0f 0b 90 e9 b6 f7 ff ff c6 05 a1 a3 5a 0e 01 90 <0f> 0b 90 e9 d9 e4 ff ff 90 0f 0b 90 e9 4e fb ff ff 83 bc 24 80 00 [ 76.085707][ T7995] RSP: 0018:ffffc90005bbf898 EFLAGS: 00010246 [ 76.087444][ T7995] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 76.089707][ T7995] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 76.092038][ T7995] RBP: 0000000100000030 R08: 0000000000000005 R09: 0000000000000000 [ 76.094301][ T7995] R10: 000000004000000c R11: 0000000000000000 R12: 0000000000000015 [ 76.096569][ T7995] R13: 1ffff92000b77f27 R14: 0000000100000030 R15: ffffffff853e5fc7 [ 76.098847][ T7995] ? drm_syncobj_array_find+0x37/0x3b0 [ 76.100419][ T7995] ? hlock_class+0x4e/0x130 [ 76.101732][ T7995] ? __lock_acquire+0xcc5/0x3c40 [ 76.103220][ T7995] ? hlock_class+0x4e/0x130 [ 76.104574][ T7995] ? mark_lock+0xb5/0xc60 [ 76.105856][ T7995] ? stack_depot_save_flags+0x28/0x9c0 [ 76.107412][ T7995] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 76.109067][ T7995] ? mark_lock+0xb5/0xc60 [ 76.110307][ T7995] ? hlock_class+0x4e/0x130 [ 76.111605][ T7995] ? find_held_lock+0x2d/0x110 [ 76.113002][ T7995] ? __pfx_mark_lock+0x10/0x10 [ 76.114396][ T7995] ? hlock_class+0x4e/0x130 [ 76.115706][ T7995] ? __lock_acquire+0x15a9/0x3c40 [ 76.117169][ T7995] ? drm_syncobj_array_find+0x37/0x3b0 [ 76.118735][ T7995] ___kmalloc_large_node+0x84/0x1b0 [ 76.120395][ T7995] __kmalloc_large_node_noprof+0x1c/0x70 [ 76.122035][ T7995] ? __pfx___lock_acquire+0x10/0x10 [ 76.123549][ T7995] __kmalloc_noprof.cold+0xc/0x61 [ 76.125068][ T7995] drm_syncobj_array_find+0x37/0x3b0 [ 76.126592][ T7995] ? find_held_lock+0x2d/0x110 [ 76.127984][ T7995] drm_syncobj_timeline_wait_ioctl+0x23a/0x390 [ 76.129762][ T7995] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 76.131661][ T7995] ? drm_dev_enter+0x4c/0x170 [ 76.133031][ T7995] drm_ioctl_kernel+0x1e6/0x3d0 [ 76.134434][ T7995] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 76.136397][ T7995] ? __might_fault+0xe3/0x190 [ 76.137756][ T7995] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 76.139305][ T7995] ? __might_fault+0xe3/0x190 [ 76.140671][ T7995] drm_ioctl+0x5d6/0xc00 [ 76.141890][ T7995] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 76.143832][ T7995] ? __pfx_drm_ioctl+0x10/0x10 [ 76.145241][ T7995] ? __pfx_lock_release+0x10/0x10 [ 76.146683][ T7995] ? selinux_file_ioctl+0x180/0x270 [ 76.148176][ T7995] ? selinux_file_ioctl+0xb4/0x270 [ 76.149637][ T7995] ? __pfx_drm_ioctl+0x10/0x10 [ 76.151010][ T7995] __x64_sys_ioctl+0x190/0x200 [ 76.152394][ T7995] do_syscall_64+0xcd/0x250 [ 76.153719][ T7995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.155426][ T7995] RIP: 0033:0x7fbe3278cd29 [ 76.156734][ T7995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.162243][ T7995] RSP: 002b:00007fbe3358d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.164865][ T7995] RAX: ffffffffffffffda RBX: 00007fbe329a5fa0 RCX: 00007fbe3278cd29 [ 76.167107][ T7995] RDX: 0000000020000000 RSI: 00000000c03064ca RDI: 0000000000000003 [ 76.169387][ T7995] RBP: 00007fbe3280e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 76.171629][ T7995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.173912][ T7995] R13: 0000000000000000 R14: 00007fbe329a5fa0 R15: 00007ffc63b98d08 [ 76.176171][ T7995] [ 76.177593][ T7995] Kernel Offset: disabled [ 76.178839][ T7995] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:38:51 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851f0585 RDI=ffffffff9ab6fda0 RBP=ffffffff9ab6fd60 RSP=ffffc90005bbf218 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000004 R12=0000000000000000 R13=0000000000000035 R14=ffffffff851f0520 R15=0000000000000000 RIP=ffffffff851f05af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbe3358d6c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3fa20f CR3=0000000051f5c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe3280f232 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe3280f23f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe3280f239 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe3280f24d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe3280f2d3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe3280f3b1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000032647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000011475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000086e0b RBX=0000000000000001 RCX=ffffffff8b349239 RDX=0000000000000000 RSI=ffffffff8b6cd9c0 RDI=ffffffff8bd2c780 RBP=ffffed1003b51910 RSP=ffffc90000187e08 R8 =0000000000000001 R9 =ffffed100d4e6f7d R10=ffff88806a737beb R11=0000000000000000 R12=0000000000000001 R13=ffff88801da8c880 R14=ffffffff90624190 R15=0000000000000000 RIP=ffffffff8b34a61f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001000 CR3=0000000033604000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555572169933 0000555572168fa0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557215c498 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555572160ed5 0000555572160c30 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02d8020002880302 b8c0048400028403 0404000280030288 0800021000041000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c804840002a40304 040002a00302f602 00028e0328020002 8c03280200028a03 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0302208080808200 02ae0302020002ac 033c020002aa0302 d8020002a80302b8 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0304040002e0030c c088848204880002 c80302b8c6048400 02c40304040002c0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101b81000028004 01c8080002880800 0100000408060a01 6af418080003b003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02020003ae030000 0000000000000000 00000001ffffffff ffffffffe5080394 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0302020003920303 fe020003900305a7 a204880003880302 b8c4048400038403 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1404000380030cc0 88848004880002e8 0302b0c004840002 e40304040002e003 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000c6393 RBX=0000000000000002 RCX=ffffffff8b349239 RDX=0000000000000000 RSI=ffffffff8b6cd9c0 RDI=ffffffff8bd2c780 RBP=ffffed1003b54000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d506f7d R10=ffff88806a837beb R11=0000000000000000 R12=0000000000000002 R13=ffff88801daa0000 R14=ffffffff90624190 R15=0000000000000000 RIP=ffffffff8b34a61f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbe32770ae0 CR3=00000000324b2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 aa0d11ee679e4577 90d312d598535a75 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9e440f232 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9e440f23f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9e440f239 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9e440f24d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9e440f2d3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9e440f3b1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff96eb4bd8 RBX=ffff8880274a5360 RCX=1ffffffff2dd6993 RDX=fffffbfff2dd6399 RSI=0000000000000008 RDI=ffffffff96eb4c9c RBP=dffffc0000000000 RSP=ffffc900048c74b0 R8 =ffffffff96eb4c9c R9 =fffffbfff2dd6398 R10=ffffffff96eb1cc7 R11=0000000000000007 R12=ffffed1004e94a6b R13=ffff8880274a4880 R14=0000000000000003 R15=0000000000000004 RIP=ffffffff8176a824 RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555576853500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f295f0d56c0 CR3=0000000032f6c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce6373fe0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f295e40f232 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f295e40f23f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f295e40f239 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f295e40f24d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f295e40f2d3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f295e40f3b1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000