last executing test programs: 5.235555069s ago: executing program 2 (id=316): r0 = syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT, @ANYBLOB="161a4d4a149576dab35adc0ce486ed0256c45f635ffe181e5b35a6c598e979e2683cbd99639e26b3ad3f404555b5ec497557bc029b879b7cf9a75343c5bf268372811dcb796f598bb867d0568b54dd58fe500bf132d7d4"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000880)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x33, 0xff, @dev={0xfe, 0x80, '\x00', 0x31}, @local, [@routing={0x2f}], "13d87159da0a7f6b"}}}}}}}, 0x0) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000140)=""/256, 0x100}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x3abe, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) 4.20115904s ago: executing program 3 (id=323): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000000)={{0x2c, @rand_addr=0x64010102, 0x4e24, 0x2, 'ovf\x00', 0x2, 0xfffff958, 0x7b}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x4e22, 0x2, 0x4, 0x7fffffff, 0x7}}, 0x44) (async, rerun: 32) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)=0x0) sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x204, 0x11, 0x8, 0x70bd2a, 0x25dfdbfd, {0x15}, [@nested={0x115, 0x5c, 0x0, 0x1, [@generic="2cbd9a94b6c38a2a9219a76bdf034bf8d47e09af9bc869bbea99ce901d795b2993b70e643e3c78e00e6d422e62a85c8660b79fd007e3a1f6274b07e8efb8797b33f8c3254e8983e107cef13fbd1d664a7dda7dec70e66a5564762b7c576c343f068dc79ab0ec1294bdb7dc147b7a287759c6d6a4cf6323e151b9b1725b3b98355b8542e55b62be6a333715501c13f4aab3c2af312efda94a83e8f48e8cac600b47ac6d79d6", @generic="7fa8ee38a10b4f25bcead6c3bc7dcc5c9b9520fa47d7575c48d60a7b6480", @nested={0x4, 0x12f}, @typed={0x14, 0x106, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @generic="a0f1bec6c0670da390351d96af7894bad6b19e464f280478ef4747265a2e9942f589", @nested={0x4, 0xc6}, @nested={0x4, 0x7a}, @nested={0x4, 0x125}, @generic="24661f04c0ae8648"]}, @generic="52e441a8ddc2cc80b467f55f17ccab7d4170c0e3fdd4a737b878e6ac2a1fe3c177878476e2cc6b86b3cfc88f5d44cc035cabe963f318244aa1bf42028b7cac212a80feb2382bc3bb0950680f002dbb36d88131d59a05a383510a5d69b313674d068c9f387dc4a92434e2690ca10471881716038dbf40195c739c319aa21e594a908227950dd7cf", @nested={0x18, 0xc0, 0x0, 0x1, [@nested={0x4, 0xd6}, @typed={0xc, 0x1e, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0xf}]}, @nested={0x38, 0xd5, 0x0, 0x1, [@nested={0x4, 0xe6}, @typed={0x8, 0xc9, 0x0, 0x0, @uid=r3}, @typed={0x14, 0x112, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @typed={0x8, 0xf1, 0x0, 0x0, @pid=r4}, @typed={0xc, 0x3e, 0x0, 0x0, @u64=0x9}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x40000}, 0x280040d0) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000540)={0x0, 0x7}, &(0x7f0000000580)=0x8) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000005c0)=0x9) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0x5de5e610}}, './file0\x00'}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x10, r6, 0xf33d7000) (async, rerun: 32) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000640)) (async, rerun: 32) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r1}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000006c0)={0x40, 0x7, 0x0, 0x1, 0x6, 0x200, 0x7fffffff, 0x4, r5}, &(0x7f0000000700)=0x20) (async) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x5) r9 = openat$cgroup_ro(r6, &(0x7f0000000740)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (async) r10 = openat$cgroup_ro(r6, &(0x7f0000000780)='cgroup.events\x00', 0x0, 0x0) (async, rerun: 64) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000007c0)={r8, 0xbb, "71c572863133da416175e02b32995720ad36b168f01c0a08885ed98c0da9bb52e298f3666dbdee55d6f968eea36a1cade218aceee30c2bf62f45c698b4b3f0a2d6bf1d10b0ed121f76391a99d2a98574afbb6bfe6ff3f045447d9abdf30f97917b8700acaa341d0b5175782d25fc0239372ee0fe77448d36d6d8993efb96aea7d7268aaa379e7fe8c3457691ccb035292c77a8ce95da1799ef0a9e980d30df6e151785721baf18c1b91282e8f62d9946a02744576a36b6a67d5900"}, &(0x7f00000008c0)=0xc3) (async, rerun: 64) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000900)={r5, 0x49fd, 0x30, 0x0, 0x4}, &(0x7f0000000940)=0x18) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000980)=@assoc_id=r11, 0x4) (async) splice(r10, &(0x7f00000009c0)=0x1, r9, &(0x7f0000000a00)=0x70, 0xffffffffffff0001, 0xf) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000a80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000ac0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000b00)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000b40)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x101, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000020}, 0xc000) (async) ioctl$PTP_PIN_GETFUNC2(r10, 0xc0603d0f, &(0x7f0000000c40)={'\x00', 0x7ff, 0x3, 0x1}) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000cc0)={'wlan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000d80)={'syztnl0\x00', &(0x7f0000000d00)={'syztnl1\x00', r2, 0x29, 0x4, 0x1, 0x1, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x1, 0xf}}) bind$packet(r1, &(0x7f0000000dc0)={0x11, 0x6, r16, 0x1, 0x8, 0x6, @random="a4567aed84d5"}, 0x14) (async, rerun: 64) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001040)={0x0, 0x5}) (rerun: 64) 4.200550641s ago: executing program 3 (id=324): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x24000894) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x60) 4.134689413s ago: executing program 3 (id=327): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xc, 0x9, &(0x7f0000000080)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000300)=""/231, 0xe7, 0x0, &(0x7f0000000180)=""/158, 0x9e}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="0e0000000051620002000000000000001200009c598d07a2021550ed87845a7ae299cde426ce8293e1a64e8c2500", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(r4, 0x0, 0x0, 0x4, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005800)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x1}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) getsockopt$sock_int(r1, 0x1, 0x12, 0x0, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r7) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fedbdf2511c3000020002b80050002000600000008000100030000000c00050001000000000000000c00060001"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x0, 0x3}}}, 0x24}}, 0x40) 4.051693538s ago: executing program 3 (id=328): ioctl(0xffffffffffffffff, 0x8, 0x0) r0 = openat$ndctl0(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000180)={[0x7fffffffffffffff, 0x7, 0x8, 0x2, 0x552, 0x6, 0x9, 0x4, 0x7fffffff, 0x6, 0x4, 0x6, 0x7ff, 0x6, 0x3, 0x6], 0x4, 0x20402}) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newae={0x6c, 0x1e, 0x400, 0x70bd2b, 0x25dfdbfb, {{@in6=@local, 0x4d6, 0xa, 0x3c}, @in=@empty, 0x8, 0x3503}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x2}, @encap={0x1c, 0x4, {0x0, 0x4e22, 0x4e24, @in=@local}}, @tfcpad={0x8, 0x16, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000080}, 0x24000800) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd4, r1, 0xa773da6f0d89d9cd, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x21}, {0xc, 0x90, 0x9ce0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0x10000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x2}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@ipv6_delroute={0x64, 0x19, 0x400, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x10, 0xc2, 0xfc, 0x2, 0x37, 0x9, 0x2c00}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_MARK={0x8, 0x10, 0x7}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r0}}}, @RTA_GATEWAY={0x14, 0x5, @private2}, @RTA_GATEWAY={0x14, 0x5, @private2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x8880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=@getchain={0x4c, 0x66, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x7, 0xffe0}, {0x3, 0x8}, {0xa, 0x7}}, [{0x8}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000010) syz_usb_connect$uac1(0x0, 0xcb, &(0x7f0000000840)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0x93, 0xb0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x8}, [@mixer_unit={0x5, 0x24, 0x4, 0x5, 0x4}, @processing_unit={0x9, 0x24, 0x7, 0x1, 0x0, 0x5c, '`#'}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x0, 0x5, 0x1, 0x8}, @feature_unit={0x11, 0x24, 0x6, 0x3, 0x3, 0x5, [0x6, 0xa, 0x6, 0xd, 0x9]}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0x6, 0x10, "392a88"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xf08e, 0x401, 0x0, "29a15da722"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x6, 0x2d, {0x7, 0x25, 0x1, 0x2, 0x3, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x8, 0x3}, @as_header={0x7, 0x24, 0x1, 0x10, 0x5, 0x3}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x4, 0x8, 0x8, "95eb", "e584"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x40, 0x9, {0x7, 0x25, 0x1, 0x1, 0x7f}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x200, 0x0, 0x3, 0x5, 0x8}, 0xcd, &(0x7f0000000980)={0x5, 0xf, 0xcd, 0x4, [@generic={0xae, 0x10, 0xa, "b7fbde6de581df1fd25f68a36173641bd440a15300e5f5ab7191e6a5ae2dd350a50b9de2a39c6d268177ffec2807ad054f3346f358e08b46cf301b518dae5a5e622b35155b4fabc7416e813d668802f7acd9d0e2665bc92da850a9d8adbf410cb293729dda97a78ea5f085a3a7eab130b1f2c92bf21e9952936ed6ab07e847c6f05071c400181871491a15f0ab9b515514b7a762268c69718f39dcc2b4cd3c17ac72b40065051276b6361e"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x19, "3e70446fcc6d3f8bf38a2c55cecb0032"}]}, 0x3, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x425}}]}) syz_emit_vhci(&(0x7f0000000e80)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0xb0, 0x2}, {0x5495}}}}, 0xf) 3.73056395s ago: executing program 2 (id=338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000100)=""/101) 2.80083745s ago: executing program 3 (id=342): mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8001, &(0x7f0000000080)=0x9f0, 0x40, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x2, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xc, &(0x7f0000000100)=[{0x9, 0x1, 0x5}, {0x8000000000000001, 0x2, 0x4}, {0xd, 0x7, 0x6}, {0x1, 0x7fffffffffffffff, 0x3d}, {0xf, 0xca}, {0xbc, 0x150}], 0x6, 0x40, 0x0, 0x1f, 0x40, 0x4}) (async) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x2, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xc, &(0x7f0000000100)=[{0x9, 0x1, 0x5}, {0x8000000000000001, 0x2, 0x4}, {0xd, 0x7, 0x6}, {0x1, 0x7fffffffffffffff, 0x3d}, {0xf, 0xca}, {0xbc, 0x150}], 0x6, 0x40, 0x0, 0x1f, 0x40, 0x4}) syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa8, 0x1, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x64a18be7901736f4}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40881}, 0x800) 2.283642871s ago: executing program 2 (id=348): r0 = syz_io_uring_setup(0x3331, &(0x7f0000000600)={0x0, 0x58bb, 0x4, 0x3, 0x3de}, &(0x7f00000005c0)=0x0, &(0x7f0000000180)=0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r3], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0xb8c1, 0x284280) r5 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x2000) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580000001800030000000000fcdbdf2b000000000d530f946ae8dab45623f36b1cf5fbf2a957ffffffff843e3db493fb3334455efc0514109d4ac2cf842dfdd210590655e01d9fb7388d7114890000000045387f94a1f0664967d31bacc817f769ffd00f77f8a906615be214a2f609a19f40218c8eb6bdc310595f386136109860f4ee2edd5d6222f8", @ANYRES64=r1, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028024000e000000000000000000030000000000000003000000000000000200040800000000"], 0x58}, 0x1, 0x2, 0x0, 0x2000c811}, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x35, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x1], [0x0, 0x0, 0x0, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000200)={r9}) r10 = socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x2329000, 0x800}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r11, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r11, 0x26, &(0x7f00000031c0)) fcntl$lock(r11, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x2cc, 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r12, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000004c0)="7cdf8b8cdbeb7168f1561b7936128c3d96a63cef3584d1a9dbd379bf307b64022ce2f5cb857805273406c1cb784963e5e8d46115019079764b4ca9c93e43006c2ef4346d8414cbdbc0c6ae84f36959d7d2014c1e7aa27dbe20d6057ef749012e059ab7e309e143c840d8aa7ca909a1d1c9dac0b9959bdd0c8099754c30160d0576881203301085872d5e1d45f2f2a2f0b8bc4da047c2b11b31b7fc87954bd5437279db5bd27cc5ef439add7c01995188a97e9d17a413597316d76c8b6c18183479", 0xc1, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f0000001c40)={&(0x7f0000001c00)=[r13], 0x1, 0x800}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000380)={r13, 0x37, &(0x7f0000000280)=""/55}) 2.202486656s ago: executing program 1 (id=349): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xe4}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_emit_ethernet(0x4a, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) unshare(0x22020600) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0xcb0a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002380)={'veth1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 2.202182463s ago: executing program 1 (id=350): ioctl(0xffffffffffffffff, 0x8, 0x0) r0 = openat$ndctl0(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000180)={[0x7fffffffffffffff, 0x7, 0x8, 0x2, 0x552, 0x6, 0x9, 0x4, 0x7fffffff, 0x6, 0x4, 0x6, 0x7ff, 0x6, 0x3, 0x6], 0x4, 0x20402}) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newae={0x6c, 0x1e, 0x400, 0x70bd2b, 0x25dfdbfb, {{@in6=@local, 0x4d6, 0xa, 0x3c}, @in=@empty, 0x8, 0x3503}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x2}, @encap={0x1c, 0x4, {0x0, 0x4e22, 0x4e24, @in=@local}}, @tfcpad={0x8, 0x16, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000080}, 0x24000800) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd4, r1, 0xa773da6f0d89d9cd, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x21}, {0xc, 0x90, 0x9ce0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0x10000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x2}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@ipv6_delroute={0x64, 0x19, 0x400, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x10, 0xc2, 0xfc, 0x2, 0x37, 0x9, 0x2c00}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_MARK={0x8, 0x10, 0x7}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r0}}}, @RTA_GATEWAY={0x14, 0x5, @private2}, @RTA_GATEWAY={0x14, 0x5, @private2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x8880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=@getchain={0x4c, 0x66, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x7, 0xffe0}, {0x3, 0x8}, {0xa, 0x7}}, [{0x8}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000010) syz_usb_connect$uac1(0x0, 0xcb, &(0x7f0000000840)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0x93, 0xb0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x8}, [@mixer_unit={0x5, 0x24, 0x4, 0x5, 0x4}, @processing_unit={0x9, 0x24, 0x7, 0x1, 0x0, 0x5c, '`#'}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x0, 0x5, 0x1, 0x8}, @feature_unit={0x11, 0x24, 0x6, 0x3, 0x3, 0x5, [0x6, 0xa, 0x6, 0xd, 0x9]}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0x6, 0x10, "392a88"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xf08e, 0x401, 0x0, "29a15da722"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x6, 0x2d, {0x7, 0x25, 0x1, 0x2, 0x3, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x8, 0x3}, @as_header={0x7, 0x24, 0x1, 0x10, 0x5, 0x3}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x4, 0x8, 0x8, "95eb", "e584"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x40, 0x9, {0x7, 0x25, 0x1, 0x1, 0x7f}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x200, 0x0, 0x3, 0x5, 0x8}, 0xcd, &(0x7f0000000980)={0x5, 0xf, 0xcd, 0x4, [@generic={0xae, 0x10, 0xa, "b7fbde6de581df1fd25f68a36173641bd440a15300e5f5ab7191e6a5ae2dd350a50b9de2a39c6d268177ffec2807ad054f3346f358e08b46cf301b518dae5a5e622b35155b4fabc7416e813d668802f7acd9d0e2665bc92da850a9d8adbf410cb293729dda97a78ea5f085a3a7eab130b1f2c92bf21e9952936ed6ab07e847c6f05071c400181871491a15f0ab9b515514b7a762268c69718f39dcc2b4cd3c17ac72b40065051276b6361e"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x19, "3e70446fcc6d3f8bf38a2c55cecb0032"}]}, 0x3, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x425}}]}) syz_emit_vhci(&(0x7f0000000e80)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0xb0, 0x2}, {0x5495}}}}, 0xf) 1.966860612s ago: executing program 0 (id=356): syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, &(0x7f00000006c0)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xf}, @from_mac=@device_b, @device_b, @device_a, {0x8, 0xd}, "", @void, @value=@ver_80211n={0x0, 0x58, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @random="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"}, 0x2a6) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x30, 0x0, 0x5f]}}, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x2, &(0x7f0000000200)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x9, &(0x7f00000003c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xf7d) sendto$inet(r1, 0x0, 0x0, 0x44800, 0x0, 0x0) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x228, 0x80000000, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040034}, 0x4812) (async) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x4, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xdc, 0x7a, 0x22, 0x40, 0xac8, 0x321, 0xa1c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x68, 0x20, 0x0, 0x63, 0x74, 0x11}}]}}]}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r4 = open(&(0x7f00000004c0)='./file0\x00', 0xc000, 0x100) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x110, 0x5, &(0x7f00000005c0)=[0x1, 0x2], 0x2) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80e85411, &(0x7f0000000600)) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r6, &(0x7f0000000480)={0x2, 0xe22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000), 0x0) (async) mknod(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000)='jffs2\x00', 0x400080, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000440)=@broadcast, &(0x7f0000000680)=@ctrl_frame=@cf_end={{}, {0x8}, @broadcast, @from_mac=@device_b}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x20002, 0x0) ioctl$EVIOCRMFF(r7, 0x5501, 0x0) (async) read$hidraw(0xffffffffffffffff, &(0x7f0000000100)=""/231, 0xe7) 1.539005634s ago: executing program 3 (id=357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000100)=""/101) 1.538507528s ago: executing program 0 (id=358): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b0800080039503230ac30"], 0x15) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000d00400", @ANYRESHEX=r1, @ANYRES16=r0]) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f00000019c0)) (async) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async) r7 = userfaultfd(0x801) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) (async) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000140)={0x5, 0x9}) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00002b3000/0x2000)=nil, 0x800000}) (async) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x8c, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES64=r4, @ANYBLOB=',wfdno=', @ANYRES32=0x0, @ANYBLOB=',access=any,access=client,cache=mmap']) (async, rerun: 64) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x115) (rerun: 64) 1.400301243s ago: executing program 0 (id=359): timerfd_create(0x8, 0x800) (async, rerun: 64) r0 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) (rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) (async, rerun: 64) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) (async, rerun: 32) fchdir(r1) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async, rerun: 32) r3 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') (rerun: 32) pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) 1.314410339s ago: executing program 2 (id=360): r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000007000000030000000100000f042000000f00000000000000000000000000000400000000005f00612e30"], &(0x7f0000001fc0)=""/4124, 0x3f, 0x101c, 0x1, 0x0, 0x0, @void, @value}, 0x28) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="10c00000000000001800128008000100677470000c00028008000200", @ANYRES32=r2, @ANYBLOB="080003"], 0x40}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 1.312854417s ago: executing program 2 (id=361): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000040), 0x4) syz_open_dev$video(0x0, 0xfffffffffffffff1, 0x14f301) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e10630715108856000000010902"], 0x0) sendmsg$can_j1939(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)="af4314b898728106625dd0d854fe519c9d57491344337a92ee4ec1c71627b3ab2ead8ffa3ebd6c78fa2797f1e0482ed3cd8af8b805656f27f2b41a59c4ef9f89ca31ac67ee10a4d76ab979b2a00a89ae927f0ece5ed1fa58d1cf6671f5dfdf58bbe299a61681eecf13fca40adaf7a02c8760c25c917bdcdc275723661b6f0dc7c905e5b9ad988c36a051d3aa6d7a813d33f13a6259571ae771777e1a61c7cce3bed06ed21b595794290dfa33728aee8e302dca143174c6637c4130f8c713fd64127894886e0f3e835adb4960e7d0f3dff884e1e7746035399cbfb7079d", 0xdd}, 0x1, 0x0, 0x0, 0x8880}, 0x0) fchdir(r1) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95::\x00\x00\x00', 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x2802015, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time\x00') 1.228754984s ago: executing program 0 (id=362): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {{0x6, 0x0, 0xb}, {0x65, 0x0, 0xc}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x7, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x103881, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a235d615ded3292397894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}, {&(0x7f0000000240)="f890ab7441efed4f0c412aa38ab6f09436de10e0cefb778c920997649d2d2f52965cc50229018431343f592c1d257ade09cdf64d7eeedf7ba305e57e0cbad8", 0x3f}], 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x0, r4}) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000a00)={'filter\x00', 0x1000, "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"}, &(0x7f0000000080)=0x1024) 918.660802ms ago: executing program 1 (id=363): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r2, 0x8004510b, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000040)='0\x00', 0x1) flistxattr(0xffffffffffffffff, 0x0, 0xfffffffffffffe2a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="736563747269747900000000000000000000000000000000000000000000000002"], 0x48) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 918.411677ms ago: executing program 1 (id=364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="c4e27d19e064f30f01bb05000000c744240076000000c744240250000000ff1c24430fe2710067430f015f8c660f38803166baa10066b80c0066efc744240040847745c7442402e0760000c7442406000000000f011424b9000b00000f32440f01c2", 0x62}], 0x1, 0x11, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x800, 0x7fffb, 0x59455247, 0x8, 0x7ffd, 0x3, 0x1, 0x10, 0x1, 0x7, 0x0, 0x2}}) r3 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080), 0x0, 0x0, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 613.972382ms ago: executing program 1 (id=365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r1, 0x6a98047402e98331, 0x70bd22, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004040}, 0x4008800) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0xa4042, 0x0) (async) pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7fffffff, 0x2, 0xffffffffffffff35, 0xedbf, 0x4, 0x9, 0x25c}, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)={0x24, 0x3c, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x0) (async) io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xf, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 267.321256ms ago: executing program 0 (id=366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40400) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x9, @sdr={0x52424752, 0xff}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xd, 0x4, @l2={'eth', 0x3a, 'vcan0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4) 139.188811ms ago: executing program 0 (id=367): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f00000001c0)={0x9, 0x4, 0x0, 0x8, 0x56b, 0xf, "5f4a0ad4eb5d754b70ef1d2fa87b97f0", 0x0, 0x3, 0x9, 0x80, 0x5, 0x2, 0x2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000900)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000980)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f00000009c0)={0x0}) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01064c1, &(0x7f0000000100)={r8}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02864c3, &(0x7f0000000a40)={&(0x7f0000000a00)=[0x0, r5, r6, r8], 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x80, 0x0, [0x0], [], [0x2cc0]}) r10 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r10, &(0x7f0000000600)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)='~', 0x1}], 0x1}, 0x48000) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000840)={&(0x7f0000000100)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000000)="b81a120aeca7a74747944de2", 0xc}, {&(0x7f0000000280)="6dd9414c1ccd65e25439b70c65fde0be71b65e49576b5627a2d858799afb94edc26c8d45217fa42759655a8ef1c8a1524981f1fc732009a54b4692985742e941fc9582f0d9bc17bfe262e4bcb728025d7a588e376c1aa35106dd1e0a7d4d56317611b97e732d6f3541f98344b5b63b84d509ed8f4d139719e943343dda0ca45c65998bd5f842472c7fc2245c6e9acb6d70c83ea3136ec7f5744c55e1585790b82abcf14ad71cf6a95c666a8ebdd41672289d3a3e3a2593befed730dea3c94805eb9d7221ca6f1ce6dfb0223c0840", 0xce}, {&(0x7f00000004c0)="0c6975527ec5d6a1b48fdd7c2533a2ae09e054d136ed694694db3648b449889aeee928f420ab039bf146e02f4866d2ec1c1e6e8021cb69efc231c21c12c731d5fe7ea09f804a4c6f9dda84fb98d386a07a89e4e3c360", 0x56}, {&(0x7f0000000640)="81802545ef4b708b826d3492180ddeb657dc4e72d9d4b517c9e9f2e829b26c1d3a0d8ef03cde61919d11edb2d616e8532c88bc5db16382e690dc8b901229656eaa03c316585e69c323508d670a927fbf2d8a248726c236c7c49af5b80c7522616d75ffae13e873f1b3ae2475d6e2c9696c6a0abd928cf7ea13dfbfe46cdb5a55ea5b071f0e4ce4716f82d12cec9b89d2c8cca2f3ce4b1aca67a3341c00e890d14d1cdd", 0xa3}, {&(0x7f0000000180)="f40da77b6ca148abf4806076464a0d4dd07c980048002d2763ce77cf63bd60ba1c86df72ad3def44e7e843b07f", 0x2d}, {&(0x7f0000000380)="3a88739490d598410701187c00b74649ed493553adec9587d8d20d45e4", 0x1d}, {&(0x7f0000000700)="ac8d66e0b9d7611097b3fa9bf60953371f2005aa8574475a0acf461a5254cccd5b05c69bb144839ceeac5d5b120578e58cd029d4d69a9071fa016a1d569fbfaab8a3ddbadf52942a50a05f92869d1b221ae030e747e1b7b501bde745ff58041acaf70844cf318f64f8da4e1f52c6da6f4428c338bbfe5d57bcb5fac5b7e9ef107ef5e28d6a3c34b844ae2623930c1a0de4852280f9623672b9796068a85d51845e9eefe2b040612e95", 0xa9}], 0x7, &(0x7f0000000900)}, 0xc000) sendmsg$inet(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="5c00000014006b03000000d86e6c1d0002845da60600000000000000e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000040) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r12}) 138.33497ms ago: executing program 1 (id=368): setresgid(0xee00, 0xee01, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0040020000000000"], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001c80)=ANY=[@ANYBLOB="000101001000370c00000000000001000000008c98f0b8630b36b2951a0eebe70e6736823698fa9c7acc8afa19a1e17a57f74fca907df7a54ac1da254d660f4bc3956e0590bbb993ddd1e30b8614715b9b15ce02245e5d70b4f239fa0fa280faa154348b45fad9db9ab214a89d5608feef432afe4ae2a587c9464dc99062c401280c6c64395d74099b3386fac554a139a1", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000500ffffffff"], 0x3c}}, 0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = accept4(r3, &(0x7f0000000200)=@ll, &(0x7f0000000280)=0xd0, 0x80000) r5 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)='\x00', 0xfffffffffffffffb) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r6, &(0x7f00000018c0)=[{&(0x7f0000000600)="cb54e04a2ce9855cbdb78d43fd3918fc2df3140ff5548874f9ce90ed202dd3f60dda3a0ed245175c7fb4716994dc3da02175ef1ce8de49d1aafb3c1b54cdfaaca682ce2477534aae174f1af2d8518a4289dfd0879379ae4367941507dc9a91e741f8c73521173014990234ddd8077e6e90b805411869ae413f6827a8fee171c515ceab599a7ac2eb68cd3c641313e3c558d0fc61b1cb341baf55bc3611c260682a85977183103de130b0539e848f8df0369c67bb126a3445d93556ca132df91760ff73668164fad01b93137179e50a5d93308ede1791", 0xd6}, {&(0x7f0000000700)="9dbd26f3fde548e6392f4fdb1c401f485b291db464850c7788992b5a6230790a3590c88d5cc64c925adab7f2d9b08b66079ed2f404b0e83d09c9a903676ccad1a2b82c76c8b48365b1b16aff8871cbc8ddafb8bdc39c15976e2874a86cc58f943d3608e59291641e08f0846fec7d2795c691d69143a3de319c0d0f6bf3249d540678963c25f25009e22efabb", 0x8c}, {&(0x7f0000000540)="b45390618b9355a26d9b5687963350c94181861e", 0x14}, {&(0x7f00000007c0)="2c819da7ee6f986d13e18a32548223be3c4cadbfd03a4e9e937963c2ae5d9e3d3fb4509b0c645d8cd0659935265345847a60b36057bdd9048b239577f96a41f55754659f7b68290df6359d0baa96eb544010c06220de32571a71d9a4fbaf91ccf6461ce20f4c1af6e10a35752ed2eafaf7d24933828e9cf01c7f2c6cd6f272d326de9de639efe0044b84078137f24f181d851556c629164d471200b863c86c6f5c48ac26a5f675220b32423061c2c4d964e89b7fe4609dccacb946ea11cfb3230fd637776da6b7c64ee43965ed5db1bc1ffc485f4fe4a00226386b858fcb331a6f3212e73af9f14fe255e14976d0542120441df223", 0xf5}, {&(0x7f00000008c0)="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", 0x1000}], 0x5) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) sendto$inet6(r6, &(0x7f00000001c0)="8f69b66e", 0x1f, 0x4000084, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) dup(r4) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x880) keyctl$get_security(0x11, r5, &(0x7f0000000140)=""/110, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x11, &(0x7f0000001bc0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x18e5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8, 0x0, 0x7, 0xfffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 2 (id=369): syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c000000000001907800000000510900002a00907800000000"], 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6}, {0x7, 0x3}]}]}, {0x0, [0x2e, 0x2e, 0x0, 0x0, 0x61, 0x5f]}}, 0x0, 0x3c, 0x0, 0x1, 0xd, 0x0, @void, @value}, 0x28) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x25dfdbfc, {{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x73}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f00000004c0)) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r7 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_usb_disconnect(r7) write$UHID_CREATE2(r6, 0x0, 0x118) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x40) fcntl$notify(r8, 0x402, 0x8000003d) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mknod(&(0x7f0000000140)='./file1/file3\x00', 0xc000, 0x9) rename(&(0x7f00000003c0)='./file1/file3\x00', &(0x7f0000000100)='./file0\x00') ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x7) 0s ago: executing program 3 (id=370): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="181200000000000000000085000000270000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000015c0)=@newtaction={0x48, 0x30, 0x12f, 0x70bd25, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = syz_open_dev$rtc(&(0x7f0000000040), 0x46, 0x80) r6 = socket$qrtr(0x2a, 0x2, 0x0) ppoll(&(0x7f0000000c00)=[{r5}, {r6, 0x182}], 0x2, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=prefer=statiF:0']) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000180)='\x00', &(0x7f0000000300), 0x40, &(0x7f0000000400)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x39]}}}}, {@grpquota_block_hardlimit}, {@uid={'uid', 0x3d, r8}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@size={'size', 0x3d, [0x65, 0x0, 0x30]}}], [{@smackfsdef={'smackfsdef', 0x3d, '\x00'}}]}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000140)) kernel console output (not intermixed with test programs): [ 38.048860][ T40] audit: type=1400 audit(1750701890.012:60): avc: denied { rlimitinh } for pid=5836 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.055234][ T40] audit: type=1400 audit(1750701890.012:61): avc: denied { siginh } for pid=5836 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:3224' (ED25519) to the list of known hosts. [ 39.179616][ T40] audit: type=1400 audit(1750701891.162:62): avc: denied { name_bind } for pid=5845 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.195801][ T40] audit: type=1400 audit(1750701891.182:63): avc: denied { write } for pid=5846 comm="sh" path="pipe:[1708]" dev="pipefs" ino=1708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.207605][ T40] audit: type=1400 audit(1750701891.192:64): avc: denied { execute } for pid=5846 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.217616][ T40] audit: type=1400 audit(1750701891.192:65): avc: denied { execute_no_trans } for pid=5846 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.097092][ T40] audit: type=1400 audit(1750701893.082:66): avc: denied { mounton } for pid=5846 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.108180][ T5846] cgroup: Unknown subsys name 'net' [ 41.279482][ T5846] cgroup: Unknown subsys name 'cpuset' [ 41.286713][ T5846] cgroup: Unknown subsys name 'rlimit' [ 41.441811][ T5851] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.182214][ T5846] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.021084][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 45.021095][ T40] audit: type=1400 audit(1750701897.002:80): avc: denied { execmem } for pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.202681][ T40] audit: type=1400 audit(1750701897.182:81): avc: denied { create } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.213952][ T40] audit: type=1400 audit(1750701897.182:82): avc: denied { read write } for pid=5929 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.221305][ T40] audit: type=1400 audit(1750701897.182:83): avc: denied { open } for pid=5929 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.228622][ T40] audit: type=1400 audit(1750701897.192:84): avc: denied { ioctl } for pid=5929 comm="syz-executor" path="socket:[6218]" dev="sockfs" ino=6218 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.243968][ T5933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.248390][ T5933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.251641][ T5933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.254771][ T5934] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.256325][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.258022][ T5934] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.259611][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.261691][ T5934] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.262150][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.262571][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.262837][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.263850][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.268265][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.269981][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.270385][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.270646][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.271791][ T40] audit: type=1400 audit(1750701897.252:85): avc: denied { read } for pid=5929 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.273087][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.274883][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.279214][ T40] audit: type=1400 audit(1750701897.252:86): avc: denied { open } for pid=5929 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.281100][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.282522][ T40] audit: type=1400 audit(1750701897.252:87): avc: denied { mounton } for pid=5929 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.297398][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.495174][ T40] audit: type=1400 audit(1750701897.472:88): avc: denied { module_request } for pid=5929 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.543993][ T5929] chnl_net:caif_netlink_parms(): no params data found [ 45.563288][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 45.610245][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 45.617367][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 45.781323][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.784364][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.787219][ T5929] bridge_slave_0: entered allmulticast mode [ 45.789910][ T5929] bridge_slave_0: entered promiscuous mode [ 45.808830][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.811094][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.813354][ T5942] bridge_slave_0: entered allmulticast mode [ 45.816153][ T5942] bridge_slave_0: entered promiscuous mode [ 45.843905][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.846381][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.848683][ T5929] bridge_slave_1: entered allmulticast mode [ 45.851270][ T5929] bridge_slave_1: entered promiscuous mode [ 45.867177][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.869440][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.871671][ T5942] bridge_slave_1: entered allmulticast mode [ 45.875421][ T5942] bridge_slave_1: entered promiscuous mode [ 45.962383][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.983771][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.009827][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.012070][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.014393][ T5931] bridge_slave_0: entered allmulticast mode [ 46.017145][ T5931] bridge_slave_0: entered promiscuous mode [ 46.022191][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.049884][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.053107][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.057455][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.059716][ T5938] bridge_slave_0: entered allmulticast mode [ 46.062430][ T5938] bridge_slave_0: entered promiscuous mode [ 46.065994][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.068240][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.070549][ T5938] bridge_slave_1: entered allmulticast mode [ 46.073943][ T5938] bridge_slave_1: entered promiscuous mode [ 46.090580][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.092896][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.095213][ T5931] bridge_slave_1: entered allmulticast mode [ 46.097754][ T5931] bridge_slave_1: entered promiscuous mode [ 46.116601][ T5929] team0: Port device team_slave_0 added [ 46.193486][ T5929] team0: Port device team_slave_1 added [ 46.199809][ T5942] team0: Port device team_slave_0 added [ 46.204925][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.250812][ T5942] team0: Port device team_slave_1 added [ 46.255318][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.260722][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.306330][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.309792][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.312691][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.324023][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.380207][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.383111][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.394407][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.399895][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.402093][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.410222][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.417229][ T5938] team0: Port device team_slave_0 added [ 46.437171][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.439381][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.447685][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.452797][ T5938] team0: Port device team_slave_1 added [ 46.457519][ T5931] team0: Port device team_slave_0 added [ 46.461163][ T5931] team0: Port device team_slave_1 added [ 46.512145][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.514688][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.523394][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.529920][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.532835][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.542516][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.612935][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.615193][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.622962][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.647079][ T5929] hsr_slave_0: entered promiscuous mode [ 46.649309][ T5929] hsr_slave_1: entered promiscuous mode [ 46.652961][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.655178][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.663541][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.692538][ T5942] hsr_slave_0: entered promiscuous mode [ 46.696129][ T5942] hsr_slave_1: entered promiscuous mode [ 46.698994][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.702339][ T5942] Cannot create hsr debugfs directory [ 46.770517][ T5938] hsr_slave_0: entered promiscuous mode [ 46.772917][ T5938] hsr_slave_1: entered promiscuous mode [ 46.775357][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.777758][ T5938] Cannot create hsr debugfs directory [ 46.851629][ T5931] hsr_slave_0: entered promiscuous mode [ 46.854815][ T5931] hsr_slave_1: entered promiscuous mode [ 46.857975][ T5931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.860980][ T5931] Cannot create hsr debugfs directory [ 47.163763][ T5929] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.176333][ T5929] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.180574][ T5929] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.188030][ T5929] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.207350][ T5942] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.212134][ T5942] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.220882][ T5942] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.225112][ T5942] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.274265][ T5938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.279012][ T5938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.285615][ T5938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.285661][ T5941] Bluetooth: hci3: command tx timeout [ 47.286107][ T5937] Bluetooth: hci0: command tx timeout [ 47.301822][ T5938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.355411][ T5941] Bluetooth: hci2: command tx timeout [ 47.355421][ T5937] Bluetooth: hci1: command tx timeout [ 47.368009][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.373378][ T5931] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.381708][ T5931] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.391653][ T5931] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.396659][ T5931] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.425865][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.432089][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.448739][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.451189][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.461715][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.472487][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.475593][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.499588][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.501900][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.517137][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.519385][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.536126][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.576647][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.591915][ T5929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.616118][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.619246][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.630072][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.641516][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.642106][ T40] audit: type=1400 audit(1750701899.622:89): avc: denied { sys_module } for pid=5929 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.644538][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.673982][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.699876][ T1261] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.702927][ T1261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.716147][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.719113][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.783625][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.824149][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.844505][ T5929] veth0_vlan: entered promiscuous mode [ 47.853519][ T5929] veth1_vlan: entered promiscuous mode [ 47.857944][ T5942] veth0_vlan: entered promiscuous mode [ 47.870255][ T5942] veth1_vlan: entered promiscuous mode [ 47.883217][ T5929] veth0_macvtap: entered promiscuous mode [ 47.895793][ T5929] veth1_macvtap: entered promiscuous mode [ 47.913984][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.923798][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.927566][ T5942] veth0_macvtap: entered promiscuous mode [ 47.937346][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.942166][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.947887][ T5942] veth1_macvtap: entered promiscuous mode [ 47.954922][ T5929] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.958321][ T5929] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.961016][ T5929] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.963751][ T5929] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.992673][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.000871][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.019743][ T5938] veth0_vlan: entered promiscuous mode [ 48.030637][ T5942] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.034247][ T5942] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.038294][ T5942] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.041251][ T5942] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.063887][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.068478][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.082500][ T5938] veth1_vlan: entered promiscuous mode [ 48.108549][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.115047][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.119418][ T5931] veth0_vlan: entered promiscuous mode [ 48.133748][ T5931] veth1_vlan: entered promiscuous mode [ 48.151472][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.153952][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.161177][ T5929] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.165055][ T5938] veth0_macvtap: entered promiscuous mode [ 48.179623][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.182609][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.189130][ T5938] veth1_macvtap: entered promiscuous mode [ 48.211823][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.218295][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.229716][ T5938] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.232561][ T5938] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.235513][ T5938] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.238231][ T5938] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.250340][ T5931] veth0_macvtap: entered promiscuous mode [ 48.256774][ T5931] veth1_macvtap: entered promiscuous mode [ 48.282429][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.297318][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.312260][ T5931] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.316570][ T5931] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.319268][ T5931] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.321950][ T5931] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.326797][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.330182][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.358693][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.361204][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.407800][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.410419][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.435220][ T6037] ntfs3(sr0): Primary boot signature is not NTFS. [ 48.437687][ T6037] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 48.441461][ T6037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 48.442664][ T6035] Zero length message leads to an empty skb [ 48.447396][ T1261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.450102][ T1261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.457343][ T6037] ntfs3(sr0): Primary boot signature is not NTFS. [ 48.460128][ T6037] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 48.617461][ T6054] cgroup: fork rejected by pids controller in /syz1 [ 48.618737][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 48.714615][ T6054] team0 (unregistering): Port device team_slave_0 removed [ 48.720364][ T6054] team0 (unregistering): Port device team_slave_1 removed [ 48.917896][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 48.999898][ T6065] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 49.004498][ T6065] afs: Unknown parameter 'au!j!' [ 49.085127][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 49.097879][ T29] usb 7-1: config 1 has an invalid interface number: 5 but max is 2 [ 49.099908][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 49.101180][ T29] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 49.101194][ T29] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 49.109098][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.111817][ T29] usb 7-1: config 1 has no interface number 1 [ 49.113595][ T6078] SELinux: failed to load policy [ 49.114705][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.119748][ T29] usb 7-1: config 1 interface 5 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 49.126879][ T29] usb 7-1: config 1 interface 5 has no altsetting 0 [ 49.130635][ T6078] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 49.133538][ T29] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 49.138117][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.141524][ T29] usb 7-1: Product: Х [ 49.143363][ T29] usb 7-1: Manufacturer: э [ 49.145951][ T29] usb 7-1: SerialNumber: syz [ 49.222582][ T6081] vivid-001: ================= START STATUS ================= [ 49.227108][ T6081] vivid-001: RDS Tx I/O Mode: Controls [ 49.228936][ T6081] vivid-001: RDS Program ID: 32904 [ 49.230550][ T6081] vivid-001: RDS Program Type: 3 [ 49.232245][ T6081] vivid-001: RDS PS Name: VIVID-TX [ 49.233892][ T6081] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 49.238510][ T6081] vivid-001: RDS Stereo: true [ 49.240041][ T6081] vivid-001: RDS Artificial Head: false [ 49.241784][ T6081] vivid-001: RDS Compressed: false [ 49.243487][ T6081] vivid-001: RDS Dynamic PTY: false [ 49.245563][ T6081] vivid-001: RDS Traffic Announcement: false [ 49.247511][ T6081] vivid-001: RDS Traffic Program: true [ 49.249260][ T6081] vivid-001: RDS Music: true [ 49.250728][ T6081] vivid-001: ================== END STATUS ================== [ 49.293375][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 49.355635][ T5937] Bluetooth: hci0: command tx timeout [ 49.357404][ T5941] Bluetooth: hci3: command tx timeout [ 49.357915][ T5937] Bluetooth: Unexpected continuation frame (len 10) [ 49.368739][ T29] usb 7-1: 0:2 : does not exist [ 49.384500][ T29] usb 7-1: USB disconnect, device number 2 [ 49.417009][ T6084] udevd[6084]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 49.421697][ T6093] binder: 6092:6093 ioctl c0286687 200000000300 returned -22 [ 49.426658][ T6093] program syz.3.28 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.430817][ T6094] binder: BINDER_SET_CONTEXT_MGR already set [ 49.433241][ T6094] binder: 6092:6094 ioctl 4018620d 2000000000c0 returned -16 [ 49.436771][ T5937] Bluetooth: hci1: command tx timeout [ 49.445933][ T5937] Bluetooth: hci2: command tx timeout [ 49.465922][ T61] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.469630][ T6098] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.539757][ T6100] netlink: 32 bytes leftover after parsing attributes in process `syz.3.30'. [ 49.543942][ T6100] netlink: 32 bytes leftover after parsing attributes in process `syz.3.30'. [ 49.625293][ T61] usb 5-1: Using ep0 maxpacket: 16 [ 49.631219][ T61] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 49.633393][ T6108] warning: `syz.3.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.640393][ T61] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 49.644852][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.650224][ T61] usb 5-1: config 0 descriptor?? [ 49.657063][ T61] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 50.031413][ T40] kauditd_printk_skb: 108 callbacks suppressed [ 50.031425][ T40] audit: type=1400 audit(1750701902.012:198): avc: denied { load_policy } for pid=6133 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 50.040790][ T6134] SELinux: ebitmap: truncated map [ 50.049328][ T6134] SELinux: failed to load policy [ 50.085608][ T40] audit: type=1400 audit(1750701902.072:199): avc: denied { create } for pid=6136 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 50.127385][ T40] audit: type=1400 audit(1750701902.112:200): avc: denied { connect } for pid=6139 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.163606][ T6144] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 50.241663][ T40] audit: type=1400 audit(1750701902.222:201): avc: denied { write } for pid=6150 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 50.248736][ T40] audit: type=1400 audit(1750701902.222:202): avc: denied { write } for pid=6150 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.301397][ T40] audit: type=1400 audit(1750701902.282:203): avc: denied { create } for pid=6150 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 50.309337][ T40] audit: type=1400 audit(1750701902.282:204): avc: denied { connect } for pid=6150 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 50.352897][ T40] audit: type=1400 audit(1750701902.332:205): avc: denied { bind } for pid=6150 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 50.361300][ T40] audit: type=1400 audit(1750701902.332:206): avc: denied { listen } for pid=6150 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 50.385103][ T61] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 50.535090][ T61] usb 7-1: Using ep0 maxpacket: 8 [ 50.539444][ T61] usb 7-1: config 1 has an invalid interface number: 5 but max is 2 [ 50.541966][ T61] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 50.545499][ T61] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 50.548526][ T61] usb 7-1: config 1 has no interface number 1 [ 50.550567][ T61] usb 7-1: config 1 interface 5 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 50.551900][ T40] audit: type=1400 audit(1750701902.532:207): avc: denied { mount } for pid=6153 comm="syz.3.52" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 50.554827][ T61] usb 7-1: config 1 interface 5 has no altsetting 0 [ 50.566964][ T61] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 50.569791][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.572328][ T61] usb 7-1: Product: Х [ 50.573628][ T61] usb 7-1: Manufacturer: э [ 50.575905][ T61] usb 7-1: SerialNumber: syz [ 50.782397][ T5937] Bluetooth: Unexpected continuation frame (len 10) [ 50.789631][ T61] usb 7-1: 0:2 : does not exist [ 50.796278][ T5343] udevd[5343]: worker [5936] terminated by signal 33 (Unknown signal 33) [ 50.800364][ T5343] udevd[5343]: worker [5936] failed while handling '/devices/platform/dummy_udc.2/gadget.2' [ 50.804699][ T5343] udevd[5343]: worker [5930] terminated by signal 33 (Unknown signal 33) [ 50.807664][ T5343] udevd[5343]: worker [5930] failed while handling '/devices/platform/dummy_udc.2/udc/dummy_udc.2' [ 50.809408][ T61] usb 7-1: USB disconnect, device number 3 [ 50.811693][ T5343] udevd[5343]: worker [6166] terminated by signal 33 (Unknown signal 33) [ 50.816670][ T5343] udevd[5343]: worker [6166] failed while handling '/bus/gadget/drivers/raw-gadget.0' [ 50.847583][ T6084] udevd[6084]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 51.387179][ T1261] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.435406][ T5937] Bluetooth: hci0: command tx timeout [ 51.515264][ T5941] Bluetooth: hci1: command tx timeout [ 51.517617][ T5937] Bluetooth: hci2: command tx timeout [ 51.577655][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.581220][ T5941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.584020][ T5941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.587904][ T5941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.590860][ T5941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.628362][ T1261] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.701673][ T1261] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.741933][ T6185] chnl_net:caif_netlink_parms(): no params data found [ 51.796876][ T1261] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.849858][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.852263][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.854715][ T6185] bridge_slave_0: entered allmulticast mode [ 51.859555][ T6185] bridge_slave_0: entered promiscuous mode [ 51.863294][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.866042][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.868688][ T6185] bridge_slave_1: entered allmulticast mode [ 51.871714][ T6185] bridge_slave_1: entered promiscuous mode [ 51.918769][ T6185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.925574][ T6185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.999015][ T6185] team0: Port device team_slave_0 added [ 52.007089][ T6185] team0: Port device team_slave_1 added [ 52.064399][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.068319][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.077223][ T6185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.081111][ T1261] bridge_slave_1: left allmulticast mode [ 52.082941][ T1261] bridge_slave_1: left promiscuous mode [ 52.087860][ T1261] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.105434][ T1261] bridge_slave_0: left allmulticast mode [ 52.107216][ T1261] bridge_slave_0: left promiscuous mode [ 52.109047][ T1261] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.236582][ T5996] usb 5-1: USB disconnect, device number 2 [ 52.375286][ T6215] netlink: 'syz.2.68': attribute type 39 has an invalid length. [ 52.387631][ T1261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.393874][ T1261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.401113][ T1261] bond0 (unregistering): Released all slaves [ 52.410015][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.412930][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.423629][ T6185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.425084][ T5971] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 52.529458][ T6185] hsr_slave_0: entered promiscuous mode [ 52.532174][ T6185] hsr_slave_1: entered promiscuous mode [ 52.535971][ T6185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.539268][ T6185] Cannot create hsr debugfs directory [ 52.585202][ T5971] usb 8-1: Using ep0 maxpacket: 8 [ 52.589121][ T5971] usb 8-1: config 1 has an invalid interface number: 5 but max is 2 [ 52.591982][ T5971] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 52.595780][ T5971] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 52.599004][ T5971] usb 8-1: config 1 has no interface number 1 [ 52.601734][ T5971] usb 8-1: config 1 interface 5 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 52.606168][ T5971] usb 8-1: config 1 interface 5 has no altsetting 0 [ 52.610517][ T5971] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.613372][ T5971] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.616075][ T5971] usb 8-1: Product: Х [ 52.617431][ T5971] usb 8-1: Manufacturer: э [ 52.618908][ T5971] usb 8-1: SerialNumber: syz [ 52.771707][ T6228] xt_hashlimit: size too large, truncated to 1048576 [ 52.823075][ T1261] hsr_slave_0: left promiscuous mode [ 52.826356][ T5937] Bluetooth: Unexpected continuation frame (len 10) [ 52.829611][ T5971] usb 8-1: 0:2 : does not exist [ 52.831629][ T1261] hsr_slave_1: left promiscuous mode [ 52.834527][ T1261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.840181][ T1261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.845006][ T5971] usb 8-1: USB disconnect, device number 2 [ 52.847692][ T1261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.850740][ T1261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.871079][ T1261] veth1_macvtap: left promiscuous mode [ 52.873492][ T1261] veth0_macvtap: left promiscuous mode [ 52.877283][ T1261] veth1_vlan: left promiscuous mode [ 52.877524][ T6170] udevd[6170]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 52.878971][ T1261] veth0_vlan: left promiscuous mode [ 53.192769][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'. [ 53.243960][ T6249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.78'. [ 53.430993][ T6254] hub 8-0:1.0: USB hub found [ 53.435143][ T6254] hub 8-0:1.0: 1 port detected [ 53.525077][ T5937] Bluetooth: hci0: command tx timeout [ 53.605208][ T5937] Bluetooth: hci2: command tx timeout [ 53.607007][ T5937] Bluetooth: hci1: command tx timeout [ 53.677550][ T5941] Bluetooth: hci3: command tx timeout [ 53.974075][ T6264] netlink: 16 bytes leftover after parsing attributes in process `syz.2.83'. [ 54.038317][ T6275] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 54.167813][ T6288] netlink: 57 bytes leftover after parsing attributes in process `syz.3.89'. [ 54.179997][ T6288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6288 comm=syz.3.89 [ 54.232220][ T6293] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 54.244527][ T6293] can0: slcan on ttyS3. [ 54.269283][ T6185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.276502][ T6185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.283390][ T6185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.292418][ T6185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.295120][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.357893][ T6185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.365761][ T6293] can0 (unregistered): slcan off ttyS3. [ 54.368984][ T6185] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.375537][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.377723][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.388436][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.391443][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.446168][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 54.450692][ T24] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 54.453168][ T24] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 54.456699][ T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 54.459383][ T24] usb 5-1: config 1 has no interface number 1 [ 54.461512][ T24] usb 5-1: config 1 interface 5 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 54.469442][ T24] usb 5-1: config 1 interface 5 has no altsetting 0 [ 54.475995][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 54.478807][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.481212][ T24] usb 5-1: Product: Х [ 54.482489][ T24] usb 5-1: Manufacturer: э [ 54.484077][ T24] usb 5-1: SerialNumber: syz [ 54.586288][ T6307] xt_hashlimit: size too large, truncated to 1048576 [ 54.620117][ T6185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.656689][ T6185] veth0_vlan: entered promiscuous mode [ 54.663273][ T6185] veth1_vlan: entered promiscuous mode [ 54.692088][ T5941] Bluetooth: Unexpected continuation frame (len 10) [ 54.707430][ T24] usb 5-1: 0:2 : does not exist [ 54.709714][ T6185] veth0_macvtap: entered promiscuous mode [ 54.714255][ T6185] veth1_macvtap: entered promiscuous mode [ 54.722755][ T24] usb 5-1: USB disconnect, device number 3 [ 54.724152][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.733113][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.738186][ T6185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.741394][ T6185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.744473][ T6185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.744569][ T6170] udevd[6170]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 54.747606][ T6185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.789067][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.791713][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.807699][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.810188][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.033574][ T5941] Bluetooth: hci3: unexpected event 0x10 length: 10 > 1 [ 55.034361][ T5941] Bluetooth: hci3: hardware error 0xf8 [ 55.068718][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'. [ 55.071415][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'. [ 55.124261][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 55.124273][ T40] audit: type=1400 audit(1750701907.102:254): avc: denied { create } for pid=6321 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 55.203485][ T40] audit: type=1400 audit(1750701907.182:255): avc: denied { lock } for pid=6334 comm="syz.2.99" path="socket:[10817]" dev="sockfs" ino=10817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.211369][ T40] audit: type=1400 audit(1750701907.182:256): avc: denied { getopt } for pid=6334 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.303238][ T6344] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.102'. [ 55.309944][ T40] audit: type=1400 audit(1750701907.292:257): avc: denied { mounton } for pid=6339 comm="syz.0.101" path="/17/bus" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 55.310183][ T6340] ntfs3(nbd0): try to read out of volume at offset 0x0 [ 55.329088][ T6340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.101'. [ 55.354191][ T40] audit: type=1400 audit(1750701907.332:258): avc: denied { watch } for pid=6346 comm="syz.1.104" path="/4/net_prio.prioidx" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.366135][ T40] audit: type=1400 audit(1750701907.332:259): avc: denied { watch_sb watch_reads } for pid=6346 comm="syz.1.104" path="/4/net_prio.prioidx" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.389056][ T40] audit: type=1400 audit(1750701907.372:260): avc: denied { setattr } for pid=6339 comm="syz.0.101" name="NETLINK" dev="sockfs" ino=12634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.433115][ T40] audit: type=1400 audit(1750701907.412:261): avc: denied { create } for pid=6359 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 55.456478][ T40] audit: type=1400 audit(1750701907.442:262): avc: denied { nlmsg_read } for pid=6363 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.489652][ T6366] xt_hashlimit: size too large, truncated to 1048576 [ 55.595681][ T40] audit: type=1400 audit(1750701907.582:263): avc: denied { ioctl } for pid=6371 comm="syz.2.112" path="socket:[10841]" dev="sockfs" ino=10841 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.685258][ T5996] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 55.690325][ T6381] Cannot find add_set index 0 as target [ 55.696690][ T6381] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.116'. [ 55.701253][ T6381] x_tables: duplicate underflow at hook 1 [ 55.712159][ T6381] fuse: Unknown parameter 'hash' [ 55.787614][ T6398] xt_hashlimit: size too large, truncated to 1048576 [ 55.848920][ T5996] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 55.851893][ T5996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.856662][ T5996] usb 5-1: Product: syz [ 55.858044][ T5996] usb 5-1: Manufacturer: syz [ 55.859631][ T5996] usb 5-1: SerialNumber: syz [ 55.865641][ T5996] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 55.892774][ T34] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 55.896413][ T6407] process 'syz.2.125' launched './file1' with NULL argv: empty string added [ 55.955279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 55.975064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 55.976484][ T6410] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.985266][ T6415] o2cb: This node has not been configured. [ 55.988188][ T6415] o2cb: Cluster check failed. Fix errors before retrying. [ 55.991118][ T6415] (syz.2.127,6415,1):user_dlm_register:674 ERROR: status = -22 [ 55.994054][ T6415] (syz.2.127,6415,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 56.052142][ T6410] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.304905][ T9] usb 5-1: USB disconnect, device number 4 [ 56.477361][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.132'. [ 56.505696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.771247][ T6444] FAULT_INJECTION: forcing a failure. [ 56.771247][ T6444] name failslab, interval 1, probability 0, space 0, times 1 [ 56.776848][ T6444] CPU: 0 UID: 0 PID: 6444 Comm: syz.2.136 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 56.776863][ T6444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.776870][ T6444] Call Trace: [ 56.776873][ T6444] [ 56.776877][ T6444] dump_stack_lvl+0x16c/0x1f0 [ 56.776896][ T6444] should_fail_ex+0x512/0x640 [ 56.776910][ T6444] ? fs_reclaim_acquire+0xae/0x150 [ 56.776922][ T6444] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 56.776936][ T6444] should_failslab+0xc2/0x120 [ 56.776951][ T6444] __kmalloc_noprof+0xd2/0x510 [ 56.776968][ T6444] tomoyo_realpath_from_path+0xc2/0x6e0 [ 56.776983][ T6444] ? tomoyo_profile+0x47/0x60 [ 56.777000][ T6444] tomoyo_path_number_perm+0x245/0x580 [ 56.777011][ T6444] ? tomoyo_path_number_perm+0x237/0x580 [ 56.777024][ T6444] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 56.777037][ T6444] ? find_held_lock+0x2b/0x80 [ 56.777061][ T6444] ? find_held_lock+0x2b/0x80 [ 56.777073][ T6444] ? hook_file_ioctl_common+0x145/0x410 [ 56.777092][ T6444] ? __fget_files+0x20e/0x3c0 [ 56.777109][ T6444] security_file_ioctl+0x9b/0x240 [ 56.777124][ T6444] __x64_sys_ioctl+0xb7/0x210 [ 56.777136][ T6444] do_syscall_64+0xcd/0x4c0 [ 56.777152][ T6444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.777163][ T6444] RIP: 0033:0x7f9cdb38e929 [ 56.777172][ T6444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.777181][ T6444] RSP: 002b:00007f9cd91f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.777191][ T6444] RAX: ffffffffffffffda RBX: 00007f9cdb5b5fa0 RCX: 00007f9cdb38e929 [ 56.777197][ T6444] RDX: 0000200000000040 RSI: 00000000c00c642e RDI: 0000000000000003 [ 56.777203][ T6444] RBP: 00007f9cd91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 56.777209][ T6444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.777214][ T6444] R13: 0000000000000000 R14: 00007f9cdb5b5fa0 R15: 00007ffca78cdc28 [ 56.777227][ T6444] [ 56.777231][ T6444] ERROR: Out of memory at tomoyo_realpath_from_path. [ 56.838913][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 56.856044][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'. [ 57.023134][ T6462] ======================================================= [ 57.023134][ T6462] WARNING: The mand mount option has been deprecated and [ 57.023134][ T6462] and is ignored by this kernel. Remove the mand [ 57.023134][ T6462] option from the mount to silence this warning. [ 57.023134][ T6462] ======================================================= [ 57.125228][ T5941] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 57.135062][ T34] usb 5-1: Service connection timeout for: 256 [ 57.136963][ T34] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 57.139839][ T34] ath9k_htc: Failed to initialize the device [ 57.142359][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 57.304806][ T6476] netlink: 'syz.2.145': attribute type 1 has an invalid length. [ 57.432805][ T6480] FAULT_INJECTION: forcing a failure. [ 57.432805][ T6480] name failslab, interval 1, probability 0, space 0, times 0 [ 57.437599][ T6480] CPU: 2 UID: 0 PID: 6480 Comm: syz.2.146 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 57.437616][ T6480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.437625][ T6480] Call Trace: [ 57.437631][ T6480] [ 57.437637][ T6480] dump_stack_lvl+0x16c/0x1f0 [ 57.437663][ T6480] should_fail_ex+0x512/0x640 [ 57.437682][ T6480] ? fs_reclaim_acquire+0xae/0x150 [ 57.437695][ T6480] ? tomoyo_encode2+0x100/0x3e0 [ 57.437714][ T6480] should_failslab+0xc2/0x120 [ 57.437739][ T6480] __kmalloc_noprof+0xd2/0x510 [ 57.437759][ T6480] ? d_absolute_path+0x136/0x1a0 [ 57.437780][ T6480] tomoyo_encode2+0x100/0x3e0 [ 57.437799][ T6480] tomoyo_encode+0x29/0x50 [ 57.437818][ T6480] tomoyo_realpath_from_path+0x18f/0x6e0 [ 57.437846][ T6480] tomoyo_path_number_perm+0x245/0x580 [ 57.437863][ T6480] ? tomoyo_path_number_perm+0x237/0x580 [ 57.437879][ T6480] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 57.437897][ T6480] ? find_held_lock+0x2b/0x80 [ 57.437938][ T6480] ? find_held_lock+0x2b/0x80 [ 57.437956][ T6480] ? hook_file_ioctl_common+0x145/0x410 [ 57.437980][ T6480] ? __fget_files+0x20e/0x3c0 [ 57.438004][ T6480] security_file_ioctl+0x9b/0x240 [ 57.438026][ T6480] __x64_sys_ioctl+0xb7/0x210 [ 57.438045][ T6480] do_syscall_64+0xcd/0x4c0 [ 57.438065][ T6480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.438081][ T6480] RIP: 0033:0x7f9cdb38e929 [ 57.438093][ T6480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.438107][ T6480] RSP: 002b:00007f9cd91f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.438121][ T6480] RAX: ffffffffffffffda RBX: 00007f9cdb5b5fa0 RCX: 00007f9cdb38e929 [ 57.438131][ T6480] RDX: 0000200000000040 RSI: 00000000c00c642e RDI: 0000000000000003 [ 57.438137][ T6480] RBP: 00007f9cd91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 57.438143][ T6480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.438152][ T6480] R13: 0000000000000000 R14: 00007f9cdb5b5fa0 R15: 00007ffca78cdc28 [ 57.438174][ T6480] [ 57.438189][ T6480] ERROR: Out of memory at tomoyo_realpath_from_path. [ 57.805293][ T838] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 57.837592][ T6484] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 57.975016][ T838] usb 7-1: Using ep0 maxpacket: 8 [ 57.979577][ T838] usb 7-1: config 1 has an invalid interface number: 5 but max is 2 [ 57.981966][ T838] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 57.989298][ T838] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 58.002111][ T838] usb 7-1: config 1 has no interface number 1 [ 58.004095][ T838] usb 7-1: config 1 interface 5 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 58.012859][ T838] usb 7-1: config 1 interface 5 has no altsetting 0 [ 58.016647][ T6490] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 58.018291][ T6410] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.018934][ T6490] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 58.023335][ T838] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 58.025468][ T6490] vhci_hcd vhci_hcd.0: Device attached [ 58.028255][ T838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.032126][ T838] usb 7-1: Product: Х [ 58.033671][ T838] usb 7-1: Manufacturer: э [ 58.035254][ T838] usb 7-1: SerialNumber: syz [ 58.041062][ T6493] vhci_hcd: connection closed [ 58.042894][ T13] vhci_hcd: stop threads [ 58.055407][ T13] vhci_hcd: release socket [ 58.056849][ T13] vhci_hcd: disconnect device [ 58.136464][ T6505] FAULT_INJECTION: forcing a failure. [ 58.136464][ T6505] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 58.143448][ T6505] CPU: 3 UID: 0 PID: 6505 Comm: syz.3.155 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 58.143470][ T6505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.143481][ T6505] Call Trace: [ 58.143488][ T6505] [ 58.143495][ T6505] dump_stack_lvl+0x16c/0x1f0 [ 58.143524][ T6505] should_fail_ex+0x512/0x640 [ 58.143556][ T6505] _copy_from_user+0x2e/0xd0 [ 58.143581][ T6505] drm_ioctl+0x4fb/0xc30 [ 58.143610][ T6505] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 58.143632][ T6505] ? __pfx_drm_ioctl+0x10/0x10 [ 58.143665][ T6505] ? selinux_file_ioctl+0x180/0x270 [ 58.143688][ T6505] ? selinux_file_ioctl+0xb4/0x270 [ 58.143710][ T6505] ? __pfx_drm_ioctl+0x10/0x10 [ 58.143734][ T6505] __x64_sys_ioctl+0x18b/0x210 [ 58.143756][ T6505] do_syscall_64+0xcd/0x4c0 [ 58.143783][ T6505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.143800][ T6505] RIP: 0033:0x7f25d6f8e929 [ 58.143814][ T6505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.143830][ T6505] RSP: 002b:00007f25d7d3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.143846][ T6505] RAX: ffffffffffffffda RBX: 00007f25d71b5fa0 RCX: 00007f25d6f8e929 [ 58.143856][ T6505] RDX: 0000200000000040 RSI: 00000000c00c642e RDI: 0000000000000003 [ 58.143866][ T6505] RBP: 00007f25d7d3d090 R08: 0000000000000000 R09: 0000000000000000 [ 58.143876][ T6505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.143885][ T6505] R13: 0000000000000000 R14: 00007f25d71b5fa0 R15: 00007fffd4d00db8 [ 58.143907][ T6505] [ 58.258219][ T838] usb 7-1: 0:2 : does not exist [ 58.277658][ T6513] netlink: 'syz.3.158': attribute type 4 has an invalid length. [ 58.281393][ T838] usb 7-1: USB disconnect, device number 4 [ 58.288401][ T6513] netlink: 'syz.3.158': attribute type 4 has an invalid length. [ 58.291180][ T6513] netlink: 'syz.3.158': attribute type 4 has an invalid length. [ 58.293847][ T6513] netlink: 'syz.3.158': attribute type 4 has an invalid length. [ 58.296972][ T6513] netlink: 'syz.3.158': attribute type 4 has an invalid length. [ 58.299299][ T6513] netlink: 'syz.3.158': attribute type 4 has an invalid length. [ 58.300888][ T6170] udevd[6170]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 58.301713][ T6513] netlink: 'syz.3.158': attribute type 4 has an invalid length. [ 58.310633][ T6513] netlink: 'syz.3.158': attribute type 4 has an invalid length. [ 58.313277][ T6513] netlink: 'syz.3.158': attribute type 4 has an invalid length. [ 58.316725][ T6513] netlink: 'syz.3.158': attribute type 4 has an invalid length. [ 58.396007][ T6520] syz.3.160 uses obsolete (PF_INET,SOCK_PACKET) [ 58.781624][ T6551] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 58.787017][ T6551] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 58.793955][ T6410] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.815484][ T6551] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !fIZE,=$)%ĂL [ 58.898070][ T6410] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.900481][ T6558] kvm: kvm [6557]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000008f) [ 58.911461][ T6410] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.924363][ T6410] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.938865][ T6410] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.238876][ T6587] __nla_validate_parse: 5 callbacks suppressed [ 59.238888][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 59.295979][ T6592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.180'. [ 59.298891][ T6592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.180'. [ 59.535136][ T838] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 59.605844][ T59] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.695196][ T838] usb 8-1: Using ep0 maxpacket: 8 [ 59.716305][ T838] usb 8-1: config 2 interface 0 has no altsetting 0 [ 59.721736][ T838] usb 8-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 59.726477][ T838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.729847][ T838] usb 8-1: Product: syz [ 59.731552][ T838] usb 8-1: Manufacturer: syz [ 59.733297][ T838] usb 8-1: SerialNumber: syz [ 59.755206][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 59.759441][ T59] usb 6-1: config 1 has an invalid interface number: 5 but max is 2 [ 59.761931][ T59] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 59.764904][ T59] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 59.768145][ T59] usb 6-1: config 1 has no interface number 1 [ 59.770137][ T59] usb 6-1: config 1 interface 5 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 59.774016][ T59] usb 6-1: config 1 interface 5 has no altsetting 0 [ 59.778143][ T59] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 59.781046][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.783486][ T59] usb 6-1: Product: Х [ 59.784885][ T59] usb 6-1: Manufacturer: э [ 59.786468][ T59] usb 6-1: SerialNumber: syz [ 59.859840][ T6615] input: syz0 as /devices/virtual/input/input5 [ 59.941924][ T838] usb 8-1: USB disconnect, device number 3 [ 59.997634][ T59] usb 6-1: 0:2 : does not exist [ 60.010352][ T59] usb 6-1: USB disconnect, device number 2 [ 60.027041][ T6619] FAULT_INJECTION: forcing a failure. [ 60.027041][ T6619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.031976][ T6619] CPU: 1 UID: 0 PID: 6619 Comm: syz.2.190 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 60.031996][ T6619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.032004][ T6619] Call Trace: [ 60.032010][ T6619] [ 60.032017][ T6619] dump_stack_lvl+0x16c/0x1f0 [ 60.032066][ T6619] should_fail_ex+0x512/0x640 [ 60.032086][ T6619] _copy_to_user+0x32/0xd0 [ 60.032102][ T6619] simple_read_from_buffer+0xcb/0x170 [ 60.032117][ T6619] proc_fail_nth_read+0x197/0x270 [ 60.032130][ T6619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.032144][ T6619] ? rw_verify_area+0xcf/0x680 [ 60.032156][ T6619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.032168][ T6619] vfs_read+0x1e4/0xc60 [ 60.032182][ T6619] ? __pfx___mutex_lock+0x10/0x10 [ 60.032198][ T6619] ? __pfx_vfs_read+0x10/0x10 [ 60.032213][ T6619] ? __fget_files+0x20e/0x3c0 [ 60.032231][ T6619] ksys_read+0x12a/0x250 [ 60.032243][ T6619] ? __pfx_ksys_read+0x10/0x10 [ 60.032256][ T6619] ? fput+0x70/0xf0 [ 60.032273][ T6619] do_syscall_64+0xcd/0x4c0 [ 60.032289][ T6619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.032300][ T6619] RIP: 0033:0x7f9cdb38d33c [ 60.032310][ T6619] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 60.032320][ T6619] RSP: 002b:00007f9cd91f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.032330][ T6619] RAX: ffffffffffffffda RBX: 00007f9cdb5b5fa0 RCX: 00007f9cdb38d33c [ 60.032336][ T6619] RDX: 000000000000000f RSI: 00007f9cd91f60a0 RDI: 0000000000000005 [ 60.032342][ T6619] RBP: 00007f9cd91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 60.032348][ T6619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.032354][ T6619] R13: 0000000000000000 R14: 00007f9cdb5b5fa0 R15: 00007ffca78cdc28 [ 60.032366][ T6619] [ 60.042759][ T6170] udevd[6170]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 60.316026][ T6635] syzkaller1: entered promiscuous mode [ 60.317873][ T6635] syzkaller1: entered allmulticast mode [ 60.324139][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 60.446788][ T6639] sctp: [Deprecated]: syz.2.197 (pid 6639) Use of struct sctp_assoc_value in delayed_ack socket option. [ 60.446788][ T6639] Use struct sctp_sack_info instead [ 60.536611][ T40] kauditd_printk_skb: 66 callbacks suppressed [ 60.536621][ T40] audit: type=1400 audit(1750701912.522:330): avc: denied { listen } for pid=6653 comm="syz.3.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.547479][ T40] audit: type=1400 audit(1750701912.532:331): avc: denied { append } for pid=6653 comm="syz.3.204" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.558496][ T40] audit: type=1400 audit(1750701912.532:332): avc: denied { accept } for pid=6653 comm="syz.3.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.639658][ T6669] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 60.649143][ T6669] CIFS mount error: No usable UNC path provided in device string! [ 60.649143][ T6669] [ 60.652328][ T6669] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 60.658250][ T40] audit: type=1400 audit(1750701912.642:333): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.699068][ T6671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.207'. [ 60.711726][ T6671] bridge0: entered promiscuous mode [ 60.713635][ T6671] macvlan2: entered promiscuous mode [ 60.817924][ T40] audit: type=1400 audit(1750701912.802:334): avc: denied { ioctl } for pid=6676 comm="syz.0.209" path="socket:[12260]" dev="sockfs" ino=12260 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 61.010783][ T40] audit: type=1400 audit(1750701912.992:335): avc: denied { connect } for pid=6695 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.018348][ T40] audit: type=1400 audit(1750701912.992:336): avc: denied { name_connect } for pid=6695 comm="syz.2.216" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 61.056544][ T6700] kAFS: No cell specified [ 61.062962][ T40] audit: type=1400 audit(1750701913.042:337): avc: denied { bind } for pid=6695 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.070797][ T40] audit: type=1400 audit(1750701913.042:338): avc: denied { name_bind } for pid=6695 comm="syz.2.216" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 61.079745][ T40] audit: type=1400 audit(1750701913.042:339): avc: denied { node_bind } for pid=6695 comm="syz.2.216" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 61.108371][ T6703] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.219'. [ 61.229215][ T6709] netlink: 36 bytes leftover after parsing attributes in process `syz.0.222'. [ 61.273219][ T6711] xt_hashlimit: size too large, truncated to 1048576 [ 61.484470][ T6726] ipvlan2: entered promiscuous mode [ 61.488248][ T6726] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 61.491109][ T6726] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 61.508767][ T5971] libceph: connect (1)[c::]:6789 error -101 [ 61.512136][ T5971] libceph: mon0 (1)[c::]:6789 connect error [ 61.549220][ T6733] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 61.763076][ T6743] xt_hashlimit: size too large, truncated to 1048576 [ 61.786809][ T5971] libceph: connect (1)[c::]:6789 error -101 [ 61.789249][ T5971] libceph: mon0 (1)[c::]:6789 connect error [ 61.818713][ T6743] xt_hashlimit: size too large, truncated to 1048576 [ 61.874182][ T6743] xt_hashlimit: size too large, truncated to 1048576 [ 61.961417][ T6743] xt_hashlimit: size too large, truncated to 1048576 [ 62.027900][ T6743] xt_hashlimit: size too large, truncated to 1048576 [ 62.108480][ T6743] xt_hashlimit: size too large, truncated to 1048576 [ 62.167097][ T6743] xt_hashlimit: size too large, truncated to 1048576 [ 62.175181][ T6683] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 62.231988][ T6743] xt_hashlimit: size too large, truncated to 1048576 [ 62.288221][ T6743] xt_hashlimit: size too large, truncated to 1048576 [ 62.297311][ T5971] libceph: connect (1)[c::]:6789 error -101 [ 62.299645][ T6761] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 62.299729][ T5971] libceph: mon0 (1)[c::]:6789 connect error [ 62.309507][ T6761] openvswitch: netlink: Flow key attr not present in new flow. [ 62.320336][ T6729] ceph: No mds server is up or the cluster is laggy [ 62.329519][ T6683] usb 7-1: Using ep0 maxpacket: 32 [ 62.342386][ T6683] usb 7-1: config 247 has an invalid interface number: 165 but max is 0 [ 62.347997][ T6683] usb 7-1: config 247 has no interface number 0 [ 62.350620][ T6683] usb 7-1: config 247 interface 165 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 62.355129][ T6683] usb 7-1: config 247 interface 165 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 62.359537][ T6683] usb 7-1: config 247 interface 165 altsetting 15 has a duplicate endpoint with address 0x6, skipping [ 62.364089][ T6683] usb 7-1: config 247 interface 165 has no altsetting 0 [ 62.372131][ T6683] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=e6.24 [ 62.375535][ T6683] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.378019][ T6683] usb 7-1: Product: syz [ 62.379350][ T6683] usb 7-1: Manufacturer: 宓䢔꨾ȅ刚瞢쟛㸣ޖ萱⠂묻벘ꄝ甲甬孋໗앙䨬㰢ꥹ⥌녫ꭲ鍝铦ꤴ䖛냾蕙䋶薹 [ 62.383634][ T6683] usb 7-1: SerialNumber: syz [ 62.542951][ T6780] netlink: 2 bytes leftover after parsing attributes in process `syz.1.242'. [ 62.582770][ T6786] overlayfs: failed to resolve './file1': -2 [ 62.665544][ T6683] asix 7-1:247.165 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 62.677779][ T6683] asix 7-1:247.165: probe with driver asix failed with error -71 [ 62.683746][ T6683] usb 7-1: USB disconnect, device number 5 [ 62.902098][ T6804] tmpfs: Unknown parameter 'quoua' [ 63.452693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.581842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.585472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.589247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.593179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.596308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.598961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.774005][ T6847] Bluetooth: hci4: Frame reassembly failed (-84) [ 63.777975][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 64.584977][ T6903] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 64.895625][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 65.034587][ T24] usb 7-1: device descriptor read/64, error -71 [ 65.291162][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 65.430023][ T24] usb 7-1: device descriptor read/64, error -71 [ 65.483473][ T5971] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 65.547827][ T24] usb usb7-port1: attempt power cycle [ 65.633328][ T5971] usb 6-1: device descriptor read/64, error -71 [ 65.761846][ T6937] SELinux: policydb version 1111410148 does not match my version range 15-34 [ 65.764917][ T6937] SELinux: failed to load policy [ 65.900383][ T5971] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 65.931554][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 65.931566][ T40] audit: type=1400 audit(1751750501.684:369): avc: denied { read } for pid=6943 comm="syz.3.282" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 65.932884][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 65.935385][ T40] audit: type=1400 audit(1751750501.684:370): avc: denied { open } for pid=6943 comm="syz.3.282" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 65.954677][ T24] usb 7-1: device descriptor read/8, error -71 [ 65.986008][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 65.986049][ T5941] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 65.993816][ T40] audit: type=1400 audit(1751750501.740:371): avc: denied { sqpoll } for pid=6943 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.039428][ T5971] usb 6-1: device descriptor read/64, error -71 [ 66.168497][ T5971] usb usb6-port1: attempt power cycle [ 66.221100][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 66.253666][ T24] usb 7-1: device descriptor read/8, error -71 [ 66.382315][ T24] usb usb7-port1: unable to enumerate USB device [ 66.531153][ T5971] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 66.553514][ T5971] usb 6-1: device descriptor read/8, error -71 [ 66.809140][ T5971] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 66.822940][ T6944] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 66.825675][ T6944] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 66.830355][ T6944] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 66.830886][ T5971] usb 6-1: device descriptor read/8, error -71 [ 66.835282][ T6944] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.837230][ T6944] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 66.839886][ T6944] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 66.879594][ T40] audit: type=1400 audit(1751750502.572:372): avc: denied { setopt } for pid=6947 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.921039][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'. [ 66.949222][ T5971] usb usb6-port1: unable to enumerate USB device [ 66.967481][ T6955] hashlimit_mt_check_common: 8 callbacks suppressed [ 66.967555][ T6955] xt_hashlimit: size too large, truncated to 1048576 [ 67.000894][ T6960] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.273334][ T40] audit: type=1400 audit(1751750502.937:373): avc: denied { read write } for pid=6978 comm="syz.3.292" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 67.282939][ T40] audit: type=1400 audit(1751750502.937:374): avc: denied { open } for pid=6978 comm="syz.3.292" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 67.365034][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 67.387506][ T40] audit: type=1400 audit(1751750503.049:375): avc: denied { shutdown } for pid=6978 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.525423][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 67.529490][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.533824][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.538877][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 67.544569][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 67.548363][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.553677][ T24] usb 5-1: config 0 descriptor?? [ 67.895378][ T40] audit: type=1400 audit(1751750503.517:376): avc: denied { name_bind } for pid=6985 comm="syz.2.294" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 67.902484][ T6986] geneve2: entered promiscuous mode [ 67.904449][ T6986] geneve2: entered allmulticast mode [ 67.991242][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 67.993279][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 67.997857][ T24] usb 5-1: USB disconnect, device number 5 [ 68.088637][ T40] audit: type=1400 audit(1751750503.695:377): avc: denied { create } for pid=6987 comm="syz.2.295" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:fusefs_t tclass=chr_file permissive=1 [ 68.143508][ T6992] fuse: Unknown parameter '^' [ 68.204681][ T6995] 9p: Unknown access argument 18446744073709551615: -34 [ 68.209876][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 68.217986][ T6997] kAFS: unable to lookup cell '/,cL' [ 68.468714][ T7006] /dev/sr0: Can't open blockdev [ 68.527946][ T7015] 9pnet_fd: p9_fd_create_tcp (7015): problem connecting socket to 127.0.0.1 [ 68.551937][ T40] audit: type=1400 audit(1751750504.125:378): avc: denied { read } for pid=7016 comm="syz.3.304" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 68.578849][ T7021] pimreg: entered allmulticast mode [ 68.595431][ T7021] validate_nla: 25 callbacks suppressed [ 68.595443][ T7021] netlink: 'syz.1.306': attribute type 1 has an invalid length. [ 68.599631][ T7021] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.306'. [ 68.607883][ T7021] Can't find a SQUASHFS superblock on nullb0 [ 68.735666][ T7039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.311'. [ 68.745333][ T7047] netlink: 'syz.3.314': attribute type 1 has an invalid length. [ 68.748241][ T7047] netlink: 224 bytes leftover after parsing attributes in process `syz.3.314'. [ 68.967391][ T7060] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 68.982450][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 68.990060][ T837] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 69.057906][ T7062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.319'. [ 69.150485][ T837] usb 6-1: Using ep0 maxpacket: 16 [ 69.153969][ T837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.157345][ T837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.160494][ T837] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 69.164746][ T837] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 69.167574][ T837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.172316][ T837] usb 6-1: config 0 descriptor?? [ 69.203816][ T61] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 69.376485][ T61] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 69.379785][ T61] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 69.383623][ T61] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 69.386401][ T61] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 64 [ 69.392564][ T61] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 69.395941][ T61] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 69.398758][ T61] usb 7-1: Product: syz [ 69.399978][ T61] usb 7-1: Manufacturer: syz [ 69.403002][ T7056] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 69.406359][ T61] cdc_wdm 7-1:1.0: skipping garbage [ 69.408049][ T61] cdc_wdm 7-1:1.0: skipping garbage [ 69.412209][ T61] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 69.413948][ T61] cdc_wdm 7-1:1.0: Unknown control protocol [ 69.609554][ T837] usbhid 6-1:0.0: can't add hid device: -71 [ 69.611821][ T837] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 69.615287][ T837] usb 6-1: USB disconnect, device number 7 [ 69.627823][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 69.629951][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 69.632656][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 69.634676][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 69.636933][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 69.639009][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 69.641004][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 69.643057][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 69.645150][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 69.646811][ T61] usb 7-1: USB disconnect, device number 10 [ 69.647177][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 69.651217][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 69.654790][ C3] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 69.946483][ T7075] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:20004 [ 69.949405][ T7075] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:20004 [ 69.951720][ T7075] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:20004 [ 69.979594][ T7080] xt_hashlimit: size too large, truncated to 1048576 [ 70.078350][ T7088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.326'. [ 70.149487][ T7092] Bluetooth: MGMT ver 1.23 [ 70.189919][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.331'. [ 70.192823][ T7099] netlink: 48 bytes leftover after parsing attributes in process `syz.0.331'. [ 70.281975][ T7103] "syz.1.333" (7103) uses obsolete ecb(arc4) skcipher [ 70.344455][ T7110] xt_hashlimit: size too large, truncated to 1048576 [ 70.376106][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 70.431934][ T7114] netlink: 32 bytes leftover after parsing attributes in process `syz.1.336'. [ 70.433440][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 70.444087][ T5971] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 70.470491][ T7116] netlink: 'syz.1.337': attribute type 10 has an invalid length. [ 70.473194][ T7116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.337'. [ 70.481843][ T7116] team0: Port device geneve0 added [ 70.529402][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 70.541422][ T34] usb 8-1: config 1 has an invalid interface number: 5 but max is 2 [ 70.545046][ T34] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 70.549076][ T34] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 70.553088][ T34] usb 8-1: config 1 has no interface number 1 [ 70.555690][ T34] usb 8-1: config 1 interface 5 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 70.560959][ T34] usb 8-1: config 1 interface 5 has no altsetting 0 [ 70.565631][ T34] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.569092][ T7123] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.569334][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.575743][ T34] usb 8-1: Product: Х [ 70.575760][ T34] usb 8-1: Manufacturer: э [ 70.575771][ T34] usb 8-1: SerialNumber: syz [ 70.604384][ T5971] usb 5-1: Using ep0 maxpacket: 8 [ 70.609618][ T5971] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.613678][ T5971] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.618207][ T5971] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.618231][ T5971] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.618324][ T5971] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 70.629778][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.732545][ T59] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 70.793803][ T5941] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 70.802984][ T34] usb 8-1: 0:2 : does not exist [ 70.817144][ T34] usb 8-1: USB disconnect, device number 4 [ 70.836372][ T6170] udevd[6170]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.853123][ T5971] usb 5-1: GET_CAPABILITIES returned 0 [ 70.855222][ T5971] usbtmc 5-1:16.0: can't read capabilities [ 70.877028][ C2] ata1: illegal qc_active transition (00000000->00080000) [ 70.895514][ T59] usb 7-1: Using ep0 maxpacket: 16 [ 70.898808][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.902689][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.906199][ T59] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 70.910363][ T59] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 70.913055][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.917256][ T59] usb 7-1: config 0 descriptor?? [ 71.070893][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.074885][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.077708][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.080539][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.083508][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.086543][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.091095][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.094150][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.096958][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.099752][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.102562][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.105413][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.108334][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.111165][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.116036][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.119827][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 71.127134][ T61] usb 5-1: USB disconnect, device number 6 [ 71.204459][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.239721][ T1111] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 71.246224][ T1111] ata1.00: configured for UDMA/100 [ 71.353998][ T59] usbhid 7-1:0.0: can't add hid device: -71 [ 71.356480][ T59] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 71.361019][ T59] usb 7-1: USB disconnect, device number 11 [ 71.620155][ T34] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 71.689736][ T7144] bridge0: port 3(syz_tun) entered blocking state [ 71.692302][ T7144] bridge0: port 3(syz_tun) entered disabled state [ 71.694566][ T7144] syz_tun: entered allmulticast mode [ 71.697655][ T7144] syz_tun: entered promiscuous mode [ 71.700496][ T7144] bridge0: port 3(syz_tun) entered blocking state [ 71.702641][ T7144] bridge0: port 3(syz_tun) entered forwarding state [ 71.709965][ T7144] syz_tun: left allmulticast mode [ 71.711590][ T7144] syz_tun: left promiscuous mode [ 71.714074][ T7144] bridge0: port 3(syz_tun) entered disabled state [ 71.720642][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.727500][ T7144] bridge_slave_0: left allmulticast mode [ 71.728475][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 71.728484][ T40] audit: type=1400 audit(1751750507.109:401): avc: denied { read } for pid=7138 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.729359][ T7144] bridge_slave_0: left promiscuous mode [ 71.739746][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.744600][ T7144] bridge_slave_1: left allmulticast mode [ 71.746382][ T7144] bridge_slave_1: left promiscuous mode [ 71.748682][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.753590][ T7144] bond0: (slave bond_slave_0): Releasing backup interface [ 71.758399][ T7144] bond0: (slave bond_slave_1): Releasing backup interface [ 71.763883][ T5941] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 71.773419][ T7144] team0: Port device team_slave_0 removed [ 71.778554][ T7144] team0: Port device team_slave_1 removed [ 71.781336][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.783645][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.786797][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.789248][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.795641][ T34] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 71.799130][ T34] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.804353][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 71.808135][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 71.812644][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.818233][ T34] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 71.823825][ T34] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 71.827078][ T34] usb 8-1: Product: syz [ 71.828807][ T34] usb 8-1: Manufacturer: syz [ 71.851005][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 71.851022][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 71.857964][ T34] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 71.857982][ T34] cdc_wdm 8-1:1.0: Unknown control protocol [ 71.906974][ T7156] netlink: 'syz.1.347': attribute type 32 has an invalid length. [ 71.915981][ T7156] (unnamed net_device) (uninitialized): option coupled_control: invalid value (39) [ 71.927994][ T7159] capability: warning: `syz.2.348' uses deprecated v2 capabilities in a way that may be insecure [ 71.932108][ T40] audit: type=1400 audit(1751750507.296:402): avc: denied { lock } for pid=7157 comm="syz.2.348" path="socket:[16521]" dev="sockfs" ino=16521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 72.033492][ T7169] Bluetooth: MGMT ver 1.23 [ 72.063026][ T5971] usb 8-1: USB disconnect, device number 5 [ 72.134649][ T7175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=7175 comm=syz.0.354 [ 72.238178][ T7179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.239683][ T40] audit: type=1400 audit(1751750507.577:403): avc: denied { write } for pid=7178 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.262071][ T837] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 72.421649][ T837] usb 6-1: Using ep0 maxpacket: 8 [ 72.425440][ T837] usb 6-1: config 1 has an invalid interface number: 5 but max is 2 [ 72.427967][ T837] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 72.430985][ T837] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 72.434205][ T837] usb 6-1: config 1 has no interface number 1 [ 72.436153][ T837] usb 6-1: config 1 interface 5 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 72.439949][ T837] usb 6-1: config 1 interface 5 has no altsetting 0 [ 72.444068][ T837] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 72.446856][ T837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.449322][ T837] usb 6-1: Product: Х [ 72.450600][ T837] usb 6-1: Manufacturer: э [ 72.452055][ T837] usb 6-1: SerialNumber: syz [ 72.642192][ T7186] mmap: syz.0.358 (7186) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.667589][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.675763][ T837] usb 6-1: 0:2 : does not exist [ 72.684371][ T837] usb 6-1: USB disconnect, device number 8 [ 72.702789][ T6170] udevd[6170]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.759646][ T40] audit: type=1400 audit(1751750508.072:404): avc: denied { wake_alarm } for pid=7191 comm="syz.0.359" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.892221][ T5971] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 73.063091][ T5971] usb 8-1: Using ep0 maxpacket: 16 [ 73.065988][ T5971] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.069382][ T5971] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.072521][ T5971] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 73.077050][ T5971] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 73.079913][ T5971] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.084763][ T5971] usb 8-1: config 0 descriptor?? [ 73.180958][ T34] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 73.351989][ T34] usb 7-1: Using ep0 maxpacket: 16 [ 73.372677][ T34] usb 7-1: config 0 has no interfaces? [ 73.374588][ T34] usb 7-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 73.377376][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.381795][ T34] usb 7-1: config 0 descriptor?? [ 73.401149][ T40] audit: type=1400 audit(1751750508.671:405): avc: denied { setattr } for pid=7214 comm="syz.1.364" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.437279][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.601800][ T6683] usb 7-1: USB disconnect, device number 12 [ 73.739085][ T5971] usbhid 8-1:0.0: can't add hid device: -71 [ 73.741063][ T5971] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 73.746720][ T5971] usb 8-1: USB disconnect, device number 6 [ 73.943765][ T40] audit: type=1400 audit(1751750509.176:406): avc: denied { append } for pid=7223 comm="syz.0.366" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 73.951521][ T7224] vcan0: MTU too low for tipc bearer [ 73.953314][ T7224] tipc: Enabling of bearer rejected, failed to enable media [ 74.042207][ T40] audit: type=1400 audit(1751750509.270:407): avc: denied { write } for pid=7227 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.049128][ T40] audit: type=1400 audit(1751750509.279:408): avc: denied { accept } for pid=7225 comm="syz.1.368" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.163149][ T40] audit: type=1400 audit(1751750509.382:409): avc: denied { append } for pid=7232 comm="syz.2.369" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 74.168821][ T7198] syz.0.359 (7198) used greatest stack depth: 20712 bytes left [ 74.312879][ T7235] ------------[ cut here ]------------ [ 74.314971][ T7235] WARNING: CPU: 2 PID: 7235 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 74.318426][ T7235] Modules linked in: [ 74.320822][ T7235] CPU: 2 UID: 0 PID: 7235 Comm: syz.3.370 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 74.325745][ T7235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.329234][ T7235] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 74.331473][ T7235] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 ff fb 6c 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 73 66 7a 0e 00 75 0b c6 05 6a 66 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 74.337617][ T7235] RSP: 0018:ffffc900056274f8 EFLAGS: 00010246 [ 74.339513][ T7235] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 74.341905][ T7235] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 74.344393][ T7235] RBP: 0000000400000000 R08: 0000000000000005 R09: 0000000000000000 [ 74.346902][ T7235] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000016 [ 74.349365][ T7235] R13: 1ffff92000ac4eb4 R14: 0000000400000000 R15: 0000000000000016 [ 74.351879][ T7235] FS: 00007f25d7d3d6c0(0000) GS:ffff8880d6953000(0000) knlGS:0000000000000000 [ 74.354555][ T7235] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.356687][ T7235] CR2: 0000200000000100 CR3: 0000000064a68000 CR4: 0000000000352ef0 [ 74.359145][ T7235] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.361575][ T7235] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.364131][ T7235] Call Trace: [ 74.365178][ T7235] [ 74.366136][ T7235] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 74.367156][ T7236] tmpfs: Bad value for 'mpol' [ 74.368161][ T7235] ? rcu_is_watching+0x12/0xc0 [ 74.368180][ T7235] ? trace_kmem_cache_alloc+0x28/0xc0 [ 74.368198][ T7235] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 74.368216][ T7235] ? hashtab_init+0x1b1/0x290 [ 74.368231][ T7235] __alloc_pages_noprof+0xb/0x1b0 [ 74.368245][ T7235] ___kmalloc_large_node+0x84/0x1e0 [ 74.368258][ T7235] ? hashtab_init+0x1b1/0x290 [ 74.368270][ T7235] __kmalloc_large_node_noprof+0x1c/0x70 [ 74.368281][ T7235] ? __pfx_ebitmap_read+0x10/0x10 [ 74.368295][ T7235] __kmalloc_noprof.cold+0xc/0x61 [ 74.368314][ T7235] hashtab_init+0x1b1/0x290 [ 74.368327][ T7235] ? __asan_memcpy+0x3c/0x60 [ 74.368340][ T7235] policydb_read+0x7b4/0x3220 [ 74.368357][ T7235] ? __pfx_policydb_read+0x10/0x10 [ 74.368379][ T7235] security_load_policy+0x15c/0x12c0 [ 74.393910][ T7235] ? __pfx_security_load_policy+0x10/0x10 [ 74.395706][ T7235] ? find_held_lock+0x2b/0x80 [ 74.397150][ T7235] ? __might_fault+0xe3/0x190 [ 74.398618][ T7235] ? __might_fault+0xe3/0x190 [ 74.400167][ T7235] ? __might_fault+0x13b/0x190 [ 74.401634][ T7235] sel_write_load+0x332/0x1bd0 [ 74.403116][ T7235] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.404719][ T7235] ? __lock_acquire+0xb8a/0x1c90 [ 74.406230][ T7235] ? __pfx_sel_write_load+0x10/0x10 [ 74.407933][ T7235] ? __pfx_sel_write_load+0x10/0x10 [ 74.409617][ T7235] vfs_write+0x29d/0x1150 [ 74.411048][ T7235] ? __pfx___mutex_lock+0x10/0x10 [ 74.412661][ T7235] ? __pfx_vfs_write+0x10/0x10 [ 74.414241][ T7235] ? __fget_files+0x20e/0x3c0 [ 74.415737][ T7235] ksys_write+0x12a/0x250 [ 74.417088][ T7235] ? __pfx_ksys_write+0x10/0x10 [ 74.418582][ T7235] ? fdget+0x187/0x210 [ 74.419880][ T7235] do_syscall_64+0xcd/0x4c0 [ 74.421385][ T7235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.423229][ T7235] RIP: 0033:0x7f25d6f8e929 [ 74.424668][ T7235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.430662][ T7235] RSP: 002b:00007f25d7d3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.433320][ T7235] RAX: ffffffffffffffda RBX: 00007f25d71b5fa0 RCX: 00007f25d6f8e929 [ 74.435747][ T7235] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000004 [ 74.438148][ T7235] RBP: 00007f25d7010b39 R08: 0000000000000000 R09: 0000000000000000 [ 74.440546][ T7235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.442183][ T837] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 74.442999][ T7235] R13: 0000000000000000 R14: 00007f25d71b5fa0 R15: 00007fffd4d00db8 [ 74.447862][ T7235] [ 74.448907][ T7235] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.451166][ T7235] CPU: 2 UID: 0 PID: 7235 Comm: syz.3.370 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 74.454267][ T7235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.457511][ T7235] Call Trace: [ 74.458547][ T7235] [ 74.459476][ T7235] dump_stack_lvl+0x3d/0x1f0 [ 74.460923][ T7235] panic+0x71c/0x800 [ 74.462147][ T7235] ? __pfx_panic+0x10/0x10 [ 74.463531][ T7235] ? show_trace_log_lvl+0x29b/0x3e0 [ 74.465183][ T7235] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 74.467023][ T7235] check_panic_on_warn+0xab/0xb0 [ 74.468608][ T7235] __warn+0xf6/0x3c0 [ 74.469821][ T7235] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 74.471657][ T7235] report_bug+0x3c3/0x580 [ 74.473035][ T7235] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 74.474960][ T7235] handle_bug+0x184/0x210 [ 74.476377][ T7235] exc_invalid_op+0x17/0x50 [ 74.477819][ T7235] asm_exc_invalid_op+0x1a/0x20 [ 74.479378][ T7235] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 74.481472][ T7235] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 ff fb 6c 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 73 66 7a 0e 00 75 0b c6 05 6a 66 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 74.487257][ T7235] RSP: 0018:ffffc900056274f8 EFLAGS: 00010246 [ 74.489149][ T7235] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 74.491577][ T7235] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 74.494041][ T7235] RBP: 0000000400000000 R08: 0000000000000005 R09: 0000000000000000 [ 74.496455][ T7235] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000016 [ 74.498871][ T7235] R13: 1ffff92000ac4eb4 R14: 0000000400000000 R15: 0000000000000016 [ 74.501370][ T7235] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 74.503360][ T7235] ? rcu_is_watching+0x12/0xc0 [ 74.504901][ T7235] ? trace_kmem_cache_alloc+0x28/0xc0 [ 74.506588][ T7235] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 74.508309][ T7235] ? hashtab_init+0x1b1/0x290 [ 74.509754][ T7235] __alloc_pages_noprof+0xb/0x1b0 [ 74.511313][ T7235] ___kmalloc_large_node+0x84/0x1e0 [ 74.512914][ T7235] ? hashtab_init+0x1b1/0x290 [ 74.514402][ T7235] __kmalloc_large_node_noprof+0x1c/0x70 [ 74.516178][ T7235] ? __pfx_ebitmap_read+0x10/0x10 [ 74.517746][ T7235] __kmalloc_noprof.cold+0xc/0x61 [ 74.519385][ T7235] hashtab_init+0x1b1/0x290 [ 74.520798][ T7235] ? __asan_memcpy+0x3c/0x60 [ 74.522201][ T7235] policydb_read+0x7b4/0x3220 [ 74.523689][ T7235] ? __pfx_policydb_read+0x10/0x10 [ 74.525346][ T7235] security_load_policy+0x15c/0x12c0 [ 74.527072][ T7235] ? __pfx_security_load_policy+0x10/0x10 [ 74.529030][ T7235] ? find_held_lock+0x2b/0x80 [ 74.530602][ T7235] ? __might_fault+0xe3/0x190 [ 74.532217][ T7235] ? __might_fault+0xe3/0x190 [ 74.533891][ T7235] ? __might_fault+0x13b/0x190 [ 74.535447][ T7235] sel_write_load+0x332/0x1bd0 [ 74.536931][ T7235] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.538743][ T7235] ? __lock_acquire+0xb8a/0x1c90 [ 74.540461][ T7235] ? __pfx_sel_write_load+0x10/0x10 [ 74.542142][ T7235] ? __pfx_sel_write_load+0x10/0x10 [ 74.543821][ T7235] vfs_write+0x29d/0x1150 [ 74.545252][ T7235] ? __pfx___mutex_lock+0x10/0x10 [ 74.546894][ T7235] ? __pfx_vfs_write+0x10/0x10 [ 74.548475][ T7235] ? __fget_files+0x20e/0x3c0 [ 74.549931][ T7235] ksys_write+0x12a/0x250 [ 74.551264][ T7235] ? __pfx_ksys_write+0x10/0x10 [ 74.552792][ T7235] ? fdget+0x187/0x210 [ 74.554102][ T7235] do_syscall_64+0xcd/0x4c0 [ 74.555501][ T7235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.557330][ T7235] RIP: 0033:0x7f25d6f8e929 [ 74.558706][ T7235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.564470][ T7235] RSP: 002b:00007f25d7d3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.567052][ T7235] RAX: ffffffffffffffda RBX: 00007f25d71b5fa0 RCX: 00007f25d6f8e929 [ 74.569423][ T7235] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000004 [ 74.571773][ T7235] RBP: 00007f25d7010b39 R08: 0000000000000000 R09: 0000000000000000 [ 74.574149][ T7235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.576508][ T7235] R13: 0000000000000000 R14: 00007f25d71b5fa0 R15: 00007fffd4d00db8 [ 74.578941][ T7235] [ 74.580651][ T7235] Kernel Offset: disabled [ 74.581990][ T7235] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:05:26 Registers: info registers vcpu 0 CPU#0 RAX=00000000000ee077 RBX=0000000000000000 RCX=ffffffff8b801c19 RDX=0000000000000000 RSI=ffffffff8de19d38 RDI=ffffffff8c157a20 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a81150 R15=0000000000000000 RIP=ffffffff8b80077f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3f563b CR3=00000000342d1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556eb86500 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556eb901c3 000055556eb8f8c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556eb87534 000055556eb87530 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556eb8a51a 000055556eb89d00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000078004040004 c20030656c69662f 2e01ffffffffffff ffffef0807800328 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffff90810 de0358020010dc03 7a020010da037469 6d696c647261685f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 118c03580200118a 03000000100ca406 10e6037a020010e4 0364697501ffffff ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 020011b803010ca4 001194037a020011 920364696701ffff fffffffffffff908 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01ca020011c4037a 020011c203657a69 7301ffffffffffff fffff70811ba0358 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010580040880a388 8a08000100000008 0606010fce000800 0580031080040180 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10000c8004068004 0010000a0141ca00 020011e603580200 11e4030001ffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffffd0811 e2037a020011e003 66656473666b6361 6d7301ffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffeb0811cc03 58020011ca036002 0011c80300020011 c60301ca020011c4 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000096c6c193 RBX=0000000000000001 RCX=00000000d352d026 RDX=0000000070f5052a RSI=000000009f0d9a0f RDI=ffff888026b5d398 RBP=ffff888026b5c880 RSP=ffffc9000343f180 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888026b5d370 R13=ffff888026b5d398 R14=00000000c137b698 R15=0000000000000001 RIP=ffffffff81985db8 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa5b27c86c0 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c416411 CR3=0000000036e6b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=cd7d3b57f649bd9d 7cfe8b3f817121c2 cd7d3b57f649bd9d 7cfe8b3f817121c2 cd7d3b57f649bd9d 7cfe8b3f817121c2 cd7d3b57f649bd9d 7cfe8b3f817121c2 ZMM18=90cfa9baf383018c 42d9ba61db44bb93 90cfa9baf383018c 42d9ba61db44bb93 90cfa9baf383018c 42d9ba61db44bb93 90cfa9baf383018c 42d9ba61db44bb93 ZMM19=e004000000000000 0000000000000005 e004000000000000 0000000000000004 e004000000000000 0000000000000003 e004000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8803000400048403 3e04000480030480 0403800302100010 8010000100000208 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 06060106a804c004 0014878408000180 0401c70800080242 d00031656c69662f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e01ffffffffffff ffffef0801800308 100000041e080004 8e08000100000008 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000003000000 000000080000000a 00040000000b000c 000a000000000000 ZMM25=8c5a1ace8c5a1ace 8c5a1ace8c5a1ace 8c5a1ace8c5a1ace 8c5a1ace8c5a1ace 8c5a1ace8c5a1ace 8c5a1ace8c5a1ace 8c5a1ace8c5a1ace 8c5a1ace8c5a1ace ZMM26=03aeb89103aeb891 03aeb89103aeb891 03aeb89103aeb891 03aeb89103aeb891 03aeb89103aeb891 03aeb89103aeb891 03aeb89103aeb891 03aeb89103aeb891 ZMM27=4b06c30d4b06c30d 4b06c30d4b06c30d 4b06c30d4b06c30d 4b06c30d4b06c30d 4b06c30d4b06c30d 4b06c30d4b06c30d 4b06c30d4b06c30d 4b06c30d4b06c30d ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=af020000af020000 af020000af020000 af020000af020000 af020000af020000 af020000af020000 af020000af020000 af020000af020000 af020000af020000 info registers vcpu 2 CPU#2 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b8a55 RDI=ffffffff9b087320 RBP=ffffffff9b0872e0 RSP=ffffc90005626e60 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9b0872e0 R15=ffffffff855b89f0 RIP=ffffffff855b8a7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f25d7d3d6c0 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000100 CR3=0000000064a68000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffe00 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25d7011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25d7011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25d7011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25d7011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25d7011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25d7011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 6374722f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000013 4057510c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000f0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000087d07 RBX=0000000000000003 RCX=ffffffff8b801c19 RDX=0000000000000000 RSI=ffffffff8de19d38 RDI=ffffffff8c157a20 RBP=ffffed1003c5c000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801e2e0000 R14=ffffffff90a81150 R15=0000000000000000 RIP=ffffffff8b80077f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000100 CR3=000000004f1bf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca78cdfb0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cdb411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cdb411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cdb411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cdb411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cdb411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cdb411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000