last executing test programs: 1m5.739141618s ago: executing program 1 (id=12): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) read(r1, &(0x7f0000000100)=""/41, 0x29) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x4, 0x0, @void}, 0x10) 1m5.642263765s ago: executing program 1 (id=13): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xfffffffe, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xb, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r10], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_to_hsr\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x4}}) 1m4.302203206s ago: executing program 1 (id=25): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000004, 0x5d032, 0xffffffffffffffff, 0x0) (async) r0 = userfaultfd(0x80001) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x0, 0x0, 0xb}) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1m4.241761279s ago: executing program 1 (id=27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x66, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x7000, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000300)='./file0/file0\x00', 0x1) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0x0, 0x9}, {0x8, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4840}, 0x20040054) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x40000000) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x18, 0x1411, 0x1, 0x8070bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040084}, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x110, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast1, @broadcast, 0xf, 0x1}}}, {{@arp={@local, @remote, 0x0, 0xff, 0x0, 0x8, {@mac=@broadcast, {[0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x3, 0x2, 0x0, 0x4, 0x81, 0x5, 'ip6gre0\x00', 'veth0_to_hsr\x00', {}, {}, 0x0, 0x242}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x7}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0xffffff00, 0x10, 0x1, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x7fff, 0x7, 0xe, 0x8f9, 0x9, 0xfff, 'bridge_slave_1\x00', 'pim6reg\x00', {}, {0xff}, 0x0, 0x60}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @broadcast, 0x8, 0xfffffffe}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 1m3.992264083s ago: executing program 1 (id=31): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285629, 0x0) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0xc044) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1m2.972497284s ago: executing program 1 (id=43): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x38, 0x0, &(0x7f0000000140)) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x12}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x8c}}, 0x0) 1m2.944694292s ago: executing program 32 (id=43): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x38, 0x0, &(0x7f0000000140)) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x12}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x8c}}, 0x0) 30.92245198s ago: executing program 0 (id=588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 30.842545739s ago: executing program 0 (id=589): r0 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000002010300000000000000000000000003140005800f00010073616e652d323030303000e408000c400000000348000180d5ff018008000100e000000108002100ac1414aa060003400001000000000340000300001400018008000100ac1414bb08000200640101018a5b4ef8"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x3, [{0x9}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @enum64={0x1, 0x4, 0x0, 0x13, 0x0, 0x0, [{0x3, 0x4f, 0xd867}, {0x7, 0xffffffff, 0x5}, {0xf, 0x2, 0x5}, {0x6, 0x3}]}, @restrict, @union={0x0, 0x3, 0x0, 0x2, 0x0, 0x6, [{0x5, 0x3, 0x9}, {0x1, 0x4, 0x4}, {0x7, 0x0, 0x7ff}]}]}}, 0x0, 0xb2}, 0x28) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000018c0)={{0x0, 0x92, 0x4, 0x9, 0xea, 0xfffffffffffffffd, 0xe, 0x40, 0x0, 0x3, 0x7, 0x7, 0x4, 0x9, 0x6}}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x40001f, 0x80900) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, r4, r7, 0xf8, 0x1, 0x803, 0x6, {0x8, 0x8, 0x0, 0x3, 0x3, 0x2, 0x1, 0x1, 0x0, 0xffff, 0x8, 0x7c0, 0xffffffff, 0x77, "ba9a42184edc4097e01b52f22e2cbb318719fb31f6699332292cc81f89f07580"}}) ioctl$USBDEVFS_FORBID_SUSPEND(r6, 0x5521) (async) socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r10, r9, 0x25, 0x8, @void}, 0x10) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d3000"], 0x108}}, 0x24040800) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) (async) r13 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ppoll(&(0x7f0000000040)=[{r13, 0x6d2}], 0x1, 0x0, 0x0, 0x0) 30.770617469s ago: executing program 0 (id=592): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff9, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff9, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xf}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x45aa, 0x2, 0x6}, {0x1, 0x0, 0x1}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x810) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xf}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x45aa, 0x2, 0x6}, {0x1, 0x0, 0x1}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x810) read$FUSE(0xffffffffffffffff, &(0x7f0000001300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'dummy0\x00'}) ioctl$CDROMREADAUDIO(r5, 0x5392, &(0x7f0000000000)={@msf={0x7, 0x4, 0xa}, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006400000002509"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r6, @ANYBLOB="4251b64ddbeddd5b833576b8c8bcd1e220b9f6f82f02686117d12dd4aa229df07b1785642ed07e68430ab9ce87ad2c79d49d00e2c9c3e45564dd3541d583c818e632aae0230fb0602497a20e3b93298106f9b1e38a6d6b0dd4aa469894547296ccec12adcfe81ecf88f20e7bed0cd2abf3550beea6363cc6f0728f799c3f79660b14"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) (async) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f0000002080)=0x3a, 0x2) (async) sendfile(r10, r9, &(0x7f0000002080)=0x3a, 0x2) ioctl$SNDCTL_DSP_POST(r9, 0x5008, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r4}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000340)=0x4) 30.530979695s ago: executing program 0 (id=599): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/hibernate_compression_threads', 0x48a82, 0x0) read$FUSE(r2, &(0x7f0000001340)={0x2020}, 0x2020) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000003b00000003"], 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000001740)={r4, 0x0, 0x0}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0xc4, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x45, 0x4, 0xfb, 0x5e, 0xc, 0x0, 0xfe, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x80000008, 0xfffffff8, 0x9, 0xa000, 0x800d}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x2, 0x5, 0x20, 0x3, 0x0, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 30.311021041s ago: executing program 0 (id=606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xf8}}, 0x0) io_cancel(0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="6e605f696eef64657392f99ec8"]) 30.261847708s ago: executing program 0 (id=607): mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000)='jfs\x00', 0x8080, &(0x7f00000001c0)='discard') stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)) 14.513637691s ago: executing program 33 (id=607): mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000)='jfs\x00', 0x8080, &(0x7f00000001c0)='discard') stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)) 9.146690099s ago: executing program 5 (id=767): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f01b, 0x7}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000004c0)={0x5, @vbi={0x5, 0x80000000, 0x23a2, 0x30313953, [0x3, 0x3], [0x78c, 0x80001], 0x13a}}) umount2(0x0, 0x1) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) 2.530552946s ago: executing program 2 (id=892): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10003, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x8, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x4, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0xffff, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x2, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ffb, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0x8, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_LEARNING={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) recvmmsg(r9, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x12, 0x80, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000440)=@ethtool_cmd={0x9, 0x2, 0x8f, 0x9, 0x7f, 0x2, 0x81, 0x7, 0x5, 0x62, 0xa, 0x2002, 0x0, 0x1, 0x6, 0x1002, [0x3d6b, 0x443f]}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none}}}, 0xa) bind$bt_hci(r14, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r14, 0x400448e6, &(0x7f0000000080)='|w') ioctl$sock_bt_hci(r14, 0x400448e7, &(0x7f0000000080)) sendmsg$NL80211_CMD_JOIN_IBSS(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000004", @ANYRES16=r12, @ANYBLOB="010102000000000000002b00000008000300", @ANYRES32=r13, @ANYBLOB="050034006e000000080026006c09000004002400"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r11, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r10, @ANYRESOCT=r8, @ANYBLOB="010029bd7000fedbdf256a00000008000300", @ANYRES32=r15, @ANYBLOB="0a0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x80dc}, 0x0) 1.670547739s ago: executing program 4 (id=906): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x44811}, 0x20000051) r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600060009000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.581903493s ago: executing program 4 (id=907): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0c09011000"], 0xf) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000800)=""/189, 0xbd}], 0x1}, 0x0, 0x40002141}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000100)={r6, 0x1, r5, 0x6, 0x80000}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 1.510237455s ago: executing program 2 (id=908): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x503, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, r1, 0x8, 0x52448}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008805}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x6800, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x28, 0xf9a6, 0x4069a064, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7}}, 0x50) (async) syz_fuse_handle_req(r3, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x20000004, 0xef0, 0x0, {0x5, 0x2, 0x1000b, 0x100000a, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x8000, 0x2000002, r5, r6, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x21, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x0) close(r10) (async) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$kcm(0x11, 0x3, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) (async) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r15, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x66e, 0x80000000, 0x10001, 0x790, 0x9, 0x1, 0xfffffff9, 0x1a7a, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x8, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x7, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0xb, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007e, 0x8, 0x0, 0x7, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce63, 0x4, 0x6, 0xe074, 0x6b10, 0x4, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0xffffffff, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b79, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x2004, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0x10000, 0xa4, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x40003, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffb, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x40000000, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x80, 0xffffffff, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffff7f, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x1, 0x800, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1000, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x1000007, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0xcb9, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x2, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x9, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r9, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) sendto$inet6(r2, &(0x7f00000002c0)="35b523", 0x3, 0x8000, 0x0, 0x0) 762.026098ms ago: executing program 3 (id=910): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x50, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x50}}, 0x40000) syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x0) 761.196842ms ago: executing program 3 (id=911): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="d100000000000180c20000000800450000200000e000002f1efbd776110c900c54a5"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x61}, 0x1, 0x0, 0x0, 0x4000}, 0x14) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'bond_slave_0\x00'}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003001c0012800b00010067726574617000000c00028008000700ac14142808000a00", @ANYRES32=r9], 0x44}}, 0x804) r10 = socket(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0xf0b, 0x70bc26, 0xfffffffc, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x44, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_RTT={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_ATM={0x8}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_MPU={0x8, 0xe, 0xa1}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_MEMORY={0x8, 0xa, 0xff}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="3c060000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000ffdbdf25080000003400018008000300020000001400020076657468315f6d6163767461700000001400020076657468305f766972745f77696669003400028008000200010001000400010004000100200005003fa44d26ab6a62ead43f56fa1e56d8f0e3d0731e172e395be1a92d6c0c00028008000200fbffffff880001801400020076657468305f746f5f626f6e640000001400020069703665727370616e3000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="140002006e6963766630000000000000000000001400020070696d3672656731000000000000000008000100", @ANYRES32=r12, @ANYBLOB="14000200767863616e310000000000000000000008000100", @ANYRES32=r13, @ANYBLOB="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"], 0x63c}, 0x1, 0x0, 0x0, 0x8010}, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 700.298482ms ago: executing program 4 (id=912): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x11, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002000}, 0x94) 700.054179ms ago: executing program 4 (id=913): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r1, 0x5, 0xffffffffffffffa5, 0x1}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000280)={0x3, 0x0, [{0x0, 0x31, &(0x7f0000000080)=""/49}, {0xdddd1000, 0xc4, &(0x7f00000003c0)=""/196}, {0x30000, 0xf2, &(0x7f00000004c0)=""/242}]}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 172.183481ms ago: executing program 2 (id=914): mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x81, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default', '=relative'}}}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xd, 0x3}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x90) r11 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) setns(r11, 0x8000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x4) umount2(&(0x7f0000000280)='./file0\x00', 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64=r11], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 170.415499ms ago: executing program 4 (id=915): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20040}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c844) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0x1, 0x70bd2e, 0x25dfdc00, {0x0, 0x0, 0x0, r0, {0x0, 0xa}, {0x9, 0xffff}, {0xc, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28}]}, 0xfffffffffffffe49}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 170.10637ms ago: executing program 3 (id=916): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0xffff, 0x4) listen(r0, 0x9) 79.890119ms ago: executing program 4 (id=917): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0x30, 0x5a, 0xbd, 0x40, 0x22b8, 0x6425, 0x8ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xae, 0x5, 0x10, 0x2}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x40045506, &(0x7f0000000040)=0x18) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@metacopy_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x89, &(0x7f0000000080), &(0x7f0000000140)=0x4) syz_usb_connect$uac2(0x5, 0xdb, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x38, 0x763, 0x1033, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0xee, 0x80, 0x5b, {0x8, 0xb, 0x2, 0x0, 0x1, 0xc, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xd, 0xb, 0x4f, 0xc}, [@selector_unit={0xc, 0x24, 0xb, 0x1, 0x7, "e0d2af7c75f10f"}, @source_unit={0x8, 0x24, 0xa, 0x2, 0x1, 0x5f, 0xfd, 0x1}, @selector_unit={0xd, 0x24, 0xb, 0x1, 0x8, "14318c92a4fd159c"}, @multiply_unit={0x7, 0x24, 0xc, 0x3, 0x80, 0x3, 0x8}, @sample_rate={0xd, 0x24, 0xd, 0x2, 0x3, 0x1, [0x0, 0x0, 0x2]}, @sample_rate={0x11, 0x24, 0xd, 0x5, 0x3, 0x3, [0x3, 0x2, 0x2, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x45, 0x50, 0x0, 0x0, 0x6, 0x8, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x2dc, 0x2, 0xff}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x9, 0x5, 0xf0, {0x8, 0x25, 0x1, 0x1, 0x33, 0x8, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xf8, 0x5, 0x5, {0x8, 0x25, 0x1, 0x81, 0x30, 0xf, 0x2353}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x81, 0x0, 0x9, 0x40, 0x2}, 0x46, &(0x7f0000000200)={0x5, 0xf, 0x46, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x5d3975e67ee55414, 0x4, 0x1, 0x93, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "40e480f0ad260d16d9e2cf4792267273"}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x9, 0xff0f, 0x5, [0xff00ff, 0xffffff, 0x0, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x9, 0xfff}]}, 0x6, [{0xd0, &(0x7f0000000380)=@string={0xd0, 0x3, "91d66859737308041353a6cb570f3c4eae0b2e96435069ffce659ff1fc766feb231842f114e1ecd277e5ef5ead167042b826abf985c55e845400f8e7618bce29d17b70733d54536aaccad0a68491951cf638619ca066d00a292b790b4fda6060e4bd14e09948b204a11c0264b1fbd5b964f3296728aa1c7953e7339920bfd9873bc9475a41b4370362bf08a81e413fdf35f2fa5868e17ac06e1454308aa41e7075253eccd18d2356cd08a899d50ca804885e6e5dabc01ca6e605fbf63258abbd93d455cd87178a261ededae8119a"}}, {0x8a, &(0x7f0000000580)=@string={0x8a, 0x3, "ae5582878eea49e3beb911a2809affba60310028096dadc33c007f15898cdcc69424f4b35125cea49c3c11119ab5902bc9622cd0a9e31d518fe5e62f694f0ca9de9c477c1e3a0d7503019b91b170c0b24de7c689e352f5f647317b9496b181cb2a3ceb97bb609c06899e2c797b97dc2ae2ea5cee5094873d240de6d6e9c92b7d88c05636bcf36d23"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x44e}}]}) 77.046263ms ago: executing program 3 (id=918): syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa018031c22ba7f9585186113543c20000000800450000b0"], 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x48968}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5}}]}]}]}, 0x50}}, 0x80000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x48968}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5}}]}]}]}, 0x50}}, 0x80000) r1 = socket(0x10, 0x803, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r3, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b080002"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b080002"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r7, r4, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000240), &(0x7f00000002c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f00000002c0)=0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x70, r6, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x10}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xc6}, @ETHTOOL_A_LINKMODES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c011) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, &(0x7f0000000080)=[0x0, 0xa, 0x0, 0x7, 0x3, 0xfffffffb, 0x7ff, 0x80]) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x3}]}, 0x10) getsockopt$sock_buf(r9, 0x1, 0x1a, 0x0, &(0x7f0000000000)) (async) getsockopt$sock_buf(r9, 0x1, 0x1a, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 76.728782ms ago: executing program 3 (id=919): pipe(&(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)={@cgroup=r3, r3, 0x2e, 0x8}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x10bb41) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000140)=0xfffff801) ioctl$USBDEVFS_RESET(r4, 0x5514) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 76.492039ms ago: executing program 2 (id=920): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000000)={0x13, &(0x7f0000000040)=[{0x23, '\x00', @st={0x4, [{0x1, @svalue=0x7}, {0x3, @uvalue=0x3}, {0x0, @svalue=0x5}, {0x2, @uvalue=0x1}]}, 0x1}]}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000390423bd7000fbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="81b8000000000000300012800b000100697036746e6c00"], 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x2241, 0x2, 0x2}, 0x18, 0x2) landlock_restrict_self(r3, 0xa) 1.285742ms ago: executing program 2 (id=921): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665"], 0x54}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000001c00)=""/4096, 0x1000}], 0x1, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 901.865µs ago: executing program 3 (id=922): r0 = socket$inet(0x2, 0x2, 0x1) r1 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x1) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x89f1, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = fanotify_init(0x200, 0x0) r7 = dup(r6) fanotify_mark(r6, 0x401, 0x1018, r7, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x4, {0x0, 0x0, 0x0, r11, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x59}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x8080) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0xfff, '\x00', r11, r5, 0x1, 0x4, 0x5}, 0x50) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fcntl$lock(r5, 0x5, &(0x7f00000003c0)={0x0, 0x4, 0xb, 0x5}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_clone(0xd006391, 0x0, 0xffffffffffffff6f, 0x0, 0x0, 0x0) execveat(r2, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xfbff, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000080) 0s ago: executing program 2 (id=923): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x48, r0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): 55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.024436][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.054108][ T6339] Zero length message leads to an empty skb [ 62.054385][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.061516][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.228481][ T6357] xt_CT: No such helper "snmp_trap" [ 62.236845][ T6361] netlink: 'syz.4.51': attribute type 61 has an invalid length. [ 62.479701][ T6382] netlink: 'syz.0.95': attribute type 1 has an invalid length. [ 62.506095][ T6382] bond3: entered promiscuous mode [ 62.507782][ T6382] bond3: entered allmulticast mode [ 62.509772][ T6382] 8021q: adding VLAN 0 to HW filter on device bond3 [ 62.525440][ T6382] erspan1: entered allmulticast mode [ 62.529559][ T6382] bond3: (slave erspan1): making interface the new active one [ 62.532439][ T6382] erspan1: entered promiscuous mode [ 62.535099][ T6382] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 62.709687][ T6411] syzkaller0: entered promiscuous mode [ 62.712828][ T6411] syzkaller0: entered allmulticast mode [ 62.718100][ T6411] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.104' resets device [ 62.722053][ T6412] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.104' resets device [ 63.039073][ T6432] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 63.048530][ T6433] Can't find a SQUASHFS superblock on nullb0 [ 63.052535][ T6432] Can't find a SQUASHFS superblock on nullb0 [ 63.058483][ T6435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.063575][ T6435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.314064][ T3334] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 63.379261][ T6458] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 63.382442][ T6458] IPv6: NLM_F_CREATE should be set when creating new route [ 63.385187][ T6458] IPv6: NLM_F_CREATE should be set when creating new route [ 63.395520][ T6458] 9pnet_fd: p9_fd_create_tcp (6458): problem connecting socket to 127.0.0.1 [ 63.405530][ T6455] netlink: 'syz.0.116': attribute type 29 has an invalid length. [ 63.409228][ T6455] netlink: 'syz.0.116': attribute type 29 has an invalid length. [ 63.413470][ T6455] netlink: 500 bytes leftover after parsing attributes in process `syz.0.116'. [ 63.442522][ T3334] usb 9-1: device descriptor read/64, error -71 [ 63.500670][ T6463] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 63.506527][ T6463] block device autoloading is deprecated and will be removed. [ 63.601132][ T40] kauditd_printk_skb: 112 callbacks suppressed [ 63.601148][ T40] audit: type=1400 audit(1774348497.260:304): avc: denied { sqpoll } for pid=6475 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 63.687594][ T3334] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 63.693889][ T40] audit: type=1400 audit(1774348497.360:305): avc: denied { read } for pid=6478 comm="syz.0.124" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.695793][ T6479] binder: BC_ATTEMPT_ACQUIRE not supported [ 63.704493][ T6479] binder: 6478:6479 ioctl c0306201 200000000480 returned -22 [ 63.724577][ T40] audit: type=1400 audit(1774348497.360:306): avc: denied { open } for pid=6478 comm="syz.0.124" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.734762][ T40] audit: type=1400 audit(1774348497.360:307): avc: denied { ioctl } for pid=6478 comm="syz.0.124" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.751412][ T40] audit: type=1400 audit(1774348497.410:308): avc: denied { read write } for pid=5941 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.759970][ T40] audit: type=1400 audit(1774348497.410:309): avc: denied { open } for pid=5941 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.768056][ T40] audit: type=1400 audit(1774348497.410:310): avc: denied { ioctl } for pid=5941 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.828418][ T3334] usb 9-1: device descriptor read/64, error -71 [ 63.873417][ T40] audit: type=1400 audit(1774348497.540:311): avc: denied { append } for pid=6490 comm="syz.2.122" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.877535][ T6491] kAFS: unable to lookup cell 'syz1' [ 63.892463][ T40] audit: type=1400 audit(1774348497.540:312): avc: denied { setattr } for pid=6490 comm="syz.2.122" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.933277][ T3334] usb usb9-port1: attempt power cycle [ 63.946236][ T40] audit: type=1400 audit(1774348497.610:313): avc: denied { read } for pid=6495 comm="syz.2.127" name="msr" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 63.989602][ T6498] 9pnet_virtio: no channels available for device syz [ 63.991412][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 63.993771][ T5290] Bluetooth: hci1: command tx timeout [ 64.017178][ T6505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.031599][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 64.035025][ T6507] No such timeout policy "syz1" [ 64.038770][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 64.047036][ T6505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.050580][ T6505] bond1: (slave bond0): making interface the new active one [ 64.053935][ T6505] bond1: (slave bond0): Enslaving as an active interface with an up link [ 64.058842][ T6505] netlink: 'syz.3.128': attribute type 4 has an invalid length. [ 64.064289][ T6505] netlink: 152 bytes leftover after parsing attributes in process `syz.3.128'. [ 64.068901][ T6505] .`: renamed from bond0 (while UP) [ 64.123385][ T155] bond1: (slave .`): link status definitely down, disabling slave [ 64.127657][ T155] bond1: now running without any active interface! [ 64.188790][ T6522] nftables ruleset with unbound set [ 64.192533][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 64.204513][ T6522] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 64.282448][ T3334] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 64.293691][ T5999] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.303031][ T3334] usb 9-1: device descriptor read/8, error -71 [ 64.453597][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.457166][ T5999] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.461119][ T5999] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.464181][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.468778][ T5999] usb 5-1: config 0 descriptor?? [ 64.542716][ T3334] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 64.562922][ T3334] usb 9-1: device descriptor read/8, error -71 [ 64.672973][ T3334] usb usb9-port1: unable to enumerate USB device [ 64.682376][ T6023] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 64.718308][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.140'. [ 64.833460][ T6023] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 64.836047][ T6023] usb 8-1: config 0 has no interface number 0 [ 64.837967][ T6023] usb 8-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 64.841734][ T6023] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 64.845366][ T6023] usb 8-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 64.848162][ T6023] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.851971][ T6023] usb 8-1: config 0 descriptor?? [ 64.857906][ T6023] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.120/input/input5 [ 64.896051][ T5999] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 65.126154][ T6023] usb 8-1: USB disconnect, device number 3 [ 65.172389][ T6022] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 65.190907][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.142'. [ 65.193997][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.142'. [ 65.244982][ T6566] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.142'. [ 65.323507][ T6022] usb 7-1: not running at top speed; connect to a high speed hub [ 65.327069][ T6022] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 65.330571][ T6022] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 132, changing to 4 [ 65.338357][ T6022] usb 7-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 65.341288][ T6022] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.352173][ T6022] usb 7-1: Product: ຌፐ褻೘֬ⱖᢣ諤䳨脷嬼ῗ㟹ૻ녁閬⋯팶湷卛纻姹繅倫둫꣡ [ 65.356624][ T6022] usb 7-1: Manufacturer: 廉䩰릝꾄祭匠려น폁缱濿엱鄷쪁젿屉讀࣍ꚇ릔폻㰤歐棈絘싂ᘤ꫰쐔춠뵥䘧スᵩ [ 65.361172][ T6022] usb 7-1: SerialNumber: syz [ 65.406673][ T6576] 5gQ[: renamed from lo (while UP) [ 65.627067][ T6022] snd-ua101 7-1:1.1: invalid format type [ 65.629053][ T6022] snd-ua101 7-1:1.0: invalid num_altsetting [ 65.636264][ T6022] usb 7-1: USB disconnect, device number 3 [ 66.062358][ T5290] Bluetooth: hci1: command tx timeout [ 66.362179][ T6605] Bluetooth: MGMT ver 1.23 [ 66.536871][ T6608] binder: 6607:6608 ioctl c0306201 0 returned -14 [ 66.597044][ T6608] tmpfs: Unknown parameter 'grpquota_inode_harVlimit' [ 66.726947][ T6612] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 66.821283][ T6620] xt_bpf: check failed: parse error [ 66.887570][ T6624] netlink: 'syz.3.159': attribute type 29 has an invalid length. [ 66.890249][ T6624] netlink: 'syz.3.159': attribute type 3 has an invalid length. [ 67.120744][ T6629] TCP: tcp_parse_options: Illegal window scaling value 218 > 14 received [ 67.125070][ T6628] vivid-001: ================= START STATUS ================= [ 67.127619][ T6628] vivid-001: Radio HW Seek Mode: Bounded [ 67.129446][ T6628] vivid-001: Radio Programmable HW Seek: false [ 67.139531][ T6628] vivid-001: RDS Rx I/O Mode: Block I/O [ 67.141402][ T6628] vivid-001: Generate RBDS Instead of RDS: false [ 67.144049][ T6628] vivid-001: RDS Reception: true [ 67.146201][ T6628] vivid-001: RDS Program Type: 0 inactive [ 67.148856][ T6628] vivid-001: RDS PS Name: inactive [ 67.151291][ T6628] vivid-001: RDS Radio Text: inactive [ 67.153920][ T6628] vivid-001: RDS Traffic Announcement: false inactive [ 67.156201][ T6628] vivid-001: RDS Traffic Program: false inactive [ 67.158371][ T6628] vivid-001: RDS Music: false inactive [ 67.160511][ T6628] vivid-001: ================== END STATUS ================== [ 67.413136][ T6638] libceph: resolve '0' (ret=-3): failed [ 67.512916][ T6642] tipc: Started in network mode [ 67.514916][ T6642] tipc: Node identity 72e1591e79fb, cluster identity 4711 [ 67.517334][ T6642] tipc: Enabled bearer , priority 0 [ 67.538796][ T6645] tipc: Disabling bearer [ 67.853325][ T5999] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 67.939561][ T6666] random: crng reseeded on system resumption [ 67.970104][ T6668] io-wq is not configured for unbound workers [ 68.045417][ T6678] overlay: Unknown parameter 'fowner>00000000000000000000' [ 68.052324][ T1028] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 68.142317][ T5290] Bluetooth: hci1: command tx timeout [ 68.202296][ T1028] usb 9-1: Using ep0 maxpacket: 8 [ 68.205449][ T1028] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.209140][ T1028] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.212521][ T1028] usb 9-1: config 0 interface 0 has no altsetting 0 [ 68.214676][ T1028] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 68.217576][ T1028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.221849][ T1028] usb 9-1: config 0 descriptor?? [ 68.634329][ T1028] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 68.636667][ T1028] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 68.638945][ T1028] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 68.643539][ T1028] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 68.646646][ T1028] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 68.649497][ T1028] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 68.809709][ T6698] netlink: 'syz.3.183': attribute type 10 has an invalid length. [ 68.812405][ T6698] __nla_validate_parse: 3 callbacks suppressed [ 68.812459][ T6698] netlink: 232 bytes leftover after parsing attributes in process `syz.3.183'. [ 68.836304][ T1028] usb 9-1: USB disconnect, device number 6 [ 68.909917][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 68.909932][ T40] audit: type=1400 audit(1774348502.570:352): avc: denied { getopt } for pid=6704 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.962075][ T6708] hpfs: hpfs_map_sector(): read error [ 69.126143][ T6721] fuse: Bad value for 'fd' [ 69.128116][ T6721] tipc: Enabled bearer , priority 0 [ 69.136015][ T6721] tipc: Disabling bearer [ 69.321721][ T6738] netlink: 'syz.2.192': attribute type 1 has an invalid length. [ 69.349173][ T40] audit: type=1400 audit(1774348503.010:353): avc: denied { create } for pid=6740 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 69.357318][ T40] audit: type=1400 audit(1774348503.010:354): avc: denied { ioctl } for pid=6740 comm="syz.2.193" path="socket:[15418]" dev="sockfs" ino=15418 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 69.387053][ T6743] bond0: (slave bond_slave_1): Releasing backup interface [ 69.403466][ T40] audit: type=1400 audit(1774348503.060:355): avc: denied { create } for pid=6744 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 69.405739][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'. [ 69.414636][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'. [ 69.468163][ T40] audit: type=1400 audit(1774348503.120:356): avc: denied { getopt } for pid=6751 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.489921][ T40] audit: type=1400 audit(1774348503.130:357): avc: denied { unlink } for pid=6754 comm="syz.2.198" name="#1" dev="tmpfs" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 69.496969][ T40] audit: type=1400 audit(1774348503.130:358): avc: denied { create } for pid=6754 comm="syz.2.198" name="#3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 69.504851][ T40] audit: type=1400 audit(1774348503.150:359): avc: denied { link } for pid=6754 comm="syz.2.198" name="#3" dev="tmpfs" ino=310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 69.513072][ T40] audit: type=1400 audit(1774348503.150:360): avc: denied { rename } for pid=6754 comm="syz.2.198" name="#4" dev="tmpfs" ino=310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 69.516974][ T6760] netlink: 112 bytes leftover after parsing attributes in process `syz.3.200'. [ 69.520364][ T40] audit: type=1400 audit(1774348503.180:361): avc: denied { write } for pid=6759 comm="syz.3.200" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.649645][ T6023] IPVS: starting estimator thread 0... [ 69.651042][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.205'. [ 69.656914][ T6778] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 69.743915][ T6780] IPVS: using max 43 ests per chain, 103200 per kthread [ 69.770231][ T6789] binfmt_misc: register: failed to install interpreter file ./file0 [ 69.774847][ T6789] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.777640][ T6789] netlink: 'syz.4.208': attribute type 1 has an invalid length. [ 69.825268][ T6023] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 69.956747][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'. [ 69.958859][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.210'. [ 69.972369][ T6023] usb 7-1: Using ep0 maxpacket: 8 [ 69.975493][ T6023] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.979195][ T6023] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.983474][ T6023] usb 7-1: config 0 interface 0 has no altsetting 0 [ 69.986014][ T6023] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 69.988806][ T6023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.994458][ T6023] usb 7-1: config 0 descriptor?? [ 70.054333][ T6801] program syz.4.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.214016][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.213'. [ 70.405029][ T6023] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 70.408028][ T6023] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 70.410993][ T6023] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 70.414392][ T6023] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 70.417207][ T6023] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 70.420881][ T6023] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 70.607636][ T5999] usb 7-1: USB disconnect, device number 5 [ 70.681791][ T6827] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.687087][ T6830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.220'. [ 70.689915][ T6827] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.720908][ T6830] vlan2: entered promiscuous mode [ 70.724431][ T6830] vlan2: entered allmulticast mode [ 70.726044][ T6830] hsr_slave_1: entered allmulticast mode [ 70.972764][ T6843] could not allocate digest TFM handle sha512_mb [ 71.042539][ T6848] netfs: Couldn't get user pages (rc=-14) [ 71.311073][ T6857] batadv_slave_1: entered promiscuous mode [ 71.316036][ T6855] syzkaller1: entered promiscuous mode [ 71.317763][ T6855] syzkaller1: entered allmulticast mode [ 71.333529][ T6860] batadv_slave_1: left promiscuous mode [ 71.354615][ T6862] netlink: 256 bytes leftover after parsing attributes in process `syz.3.229'. [ 71.681148][ T6893] netlink: 'syz.2.240': attribute type 5 has an invalid length. [ 71.908808][ T6919] netlink: 'syz.4.246': attribute type 1 has an invalid length. [ 71.909490][ T6917] overlay: filesystem on ./bus is read-only [ 71.923351][ T6919] bond1: entered promiscuous mode [ 71.925134][ T6919] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.935169][ T6919] bond1: (slave bridge1): making interface the new active one [ 71.937563][ T6919] bridge1: entered promiscuous mode [ 71.939818][ T6919] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 72.397587][ T6968] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 72.401089][ T6968] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 72.763028][ T6022] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 72.913830][ T6022] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 72.917472][ T6022] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 72.920785][ T6022] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 72.924086][ T6022] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.928710][ T6975] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.934405][ T6022] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 73.177970][ T3334] usb 8-1: USB disconnect, device number 4 [ 73.270673][ T7003] capability: warning: `syz.4.267' uses deprecated v2 capabilities in a way that may be insecure [ 73.325856][ T7012] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 73.330702][ T7012] SELinux: failed to load policy [ 73.409429][ T7024] netlink: 'syz.2.272': attribute type 1 has an invalid length. [ 73.411767][ T7024] netlink: 'syz.2.272': attribute type 1 has an invalid length. [ 73.414029][ T7024] netlink: 'syz.2.272': attribute type 8 has an invalid length. [ 73.567691][ T7034] bond0: (slave caif0): Error: Device type is different from other slaves [ 74.041431][ T7058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7058 comm=syz.4.282 [ 74.463729][ T7073] TCP: tcp_parse_options: Illegal window scaling value 218 > 14 received [ 74.469490][ T7073] process 'syz.3.285' launched './file0' with NULL argv: empty string added [ 74.473590][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 74.473600][ T40] audit: type=1400 audit(1774348508.140:399): avc: denied { execute_no_trans } for pid=7072 comm="syz.3.285" path="/104/file0" dev="tmpfs" ino=553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.497340][ T7073] bond0: entered promiscuous mode [ 74.499969][ T7073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.509380][ T40] audit: type=1400 audit(1774348508.170:400): avc: denied { map } for pid=7072 comm="syz.3.285" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 74.582998][ T7078] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 74.653867][ T40] audit: type=1400 audit(1774348508.320:401): avc: denied { read } for pid=7077 comm="syz.3.287" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 74.661027][ T40] audit: type=1400 audit(1774348508.320:402): avc: denied { open } for pid=7077 comm="syz.3.287" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 74.987667][ T40] audit: type=1400 audit(1774348508.650:403): avc: denied { read } for pid=7084 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.035852][ T40] audit: type=1400 audit(1774348508.700:404): avc: denied { write } for pid=7088 comm="syz.2.291" name="ip_vs_stats_percpu" dev="proc" ino=4026532999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 75.045170][ T7085] __nla_validate_parse: 6 callbacks suppressed [ 75.045188][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 75.051696][ T7085] netlink: 'syz.4.289': attribute type 30 has an invalid length. [ 75.055544][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 75.062373][ T40] audit: type=1400 audit(1774348508.730:405): avc: denied { read } for pid=7086 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.114470][ T7089] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 75.117200][ T7089] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 75.136003][ T7089] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 75.141954][ T7089] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.145074][ T7089] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 75.150393][ T7089] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 75.156319][ T7089] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.158887][ T7089] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 75.165329][ T7089] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 75.170850][ T7089] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.172980][ T7089] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 75.178244][ T7089] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 75.332514][ T40] audit: type=1400 audit(1774348508.990:406): avc: denied { read } for pid=7105 comm="syz.2.295" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 75.348858][ T40] audit: type=1400 audit(1774348508.990:407): avc: denied { open } for pid=7105 comm="syz.2.295" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 75.360200][ T40] audit: type=1400 audit(1774348509.000:408): avc: denied { ioctl } for pid=7105 comm="syz.2.295" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 75.512663][ T7118] erspan1: entered promiscuous mode [ 75.586372][ T7122] trusted_key: syz.4.302 sent an empty control message without MSG_MORE. [ 75.592996][ T6496] plantronics 0003:047F:FFFF.0002: timeout initializing reports [ 75.632609][ T5662] usb 5-1: USB disconnect, device number 3 [ 75.714297][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 75.755421][ T7135] netlink: 84 bytes leftover after parsing attributes in process `syz.4.305'. [ 75.769246][ T7135] netlink: 156 bytes leftover after parsing attributes in process `syz.4.305'. [ 75.944940][ T50] IPVS: starting estimator thread 0... [ 75.989440][ T7148] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 76.028635][ T7154] netlink: 20 bytes leftover after parsing attributes in process `syz.4.312'. [ 76.032835][ T7154] netlink: 36 bytes leftover after parsing attributes in process `syz.4.312'. [ 76.052506][ T7145] IPVS: using max 44 ests per chain, 105600 per kthread [ 76.064508][ T7159] xt_cgroup: xt_cgroup: no path or classid specified [ 76.228542][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.230812][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.309030][ T7176] netlink: 24 bytes leftover after parsing attributes in process `syz.4.315'. [ 76.392357][ T5662] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 76.542923][ T5662] usb 7-1: Using ep0 maxpacket: 8 [ 76.546711][ T5662] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.550558][ T5662] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.554385][ T5662] usb 7-1: config 0 interface 0 has no altsetting 0 [ 76.556723][ T5662] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 76.559675][ T5662] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.563786][ T5662] usb 7-1: config 0 descriptor?? [ 76.974964][ T5662] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 76.977690][ T5662] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 76.980128][ T5662] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 76.982625][ T5662] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 76.990108][ T5662] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 76.993242][ T5662] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 77.114643][ T7198] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.174890][ T5662] usb 7-1: USB disconnect, device number 6 [ 77.192768][ T5290] Bluetooth: hci1: command 0x0c1a tx timeout [ 77.192826][ T5938] Bluetooth: hci3: command 0x0c1a tx timeout [ 77.192875][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.192917][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.224816][ T7211] netlink: 'syz.0.330': attribute type 3 has an invalid length. [ 77.309853][ T7219] fuse: Unknown parameter 'xJāgrouJ~o#p_id' [ 77.426139][ T7223] program syz.3.332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.570454][ T7229] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 77.626602][ T7232] netlink: 88 bytes leftover after parsing attributes in process `syz.4.337'. [ 77.707486][ T7236] IPv6: NLM_F_CREATE should be specified when creating new route [ 77.710537][ T7236] netlink: 20 bytes leftover after parsing attributes in process `syz.2.340'. [ 77.783798][ T7243] 9pnet_fd: Insufficient options for proto=fd [ 77.807732][ T7243] ip6gretap1: entered promiscuous mode [ 77.809799][ T7243] ip6gretap1: entered allmulticast mode [ 77.833596][ T7241] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7241 comm=syz.2.342 [ 77.846953][ T7241] input: syz0 as /devices/virtual/input/input7 [ 77.878364][ T7249] Bluetooth: MGMT ver 1.23 [ 77.899904][ T6185] udevd[6185]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 77.989319][ T7254] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 78.038918][ T7262] capability: warning: `syz.0.347' uses 32-bit capabilities (legacy support in use) [ 78.170186][ T7273] netlink: 'syz.4.351': attribute type 1 has an invalid length. [ 78.170209][ T7273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.226058][ T7276] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 78.292600][ T7268] netfs: Couldn't get user pages (rc=-14) [ 78.295803][ T7268] netfs: Zero-sized read [R=4] [ 78.320815][ T7287] overlayfs: failed lookup in lower (newroot/115, name='bus', err=-40): overlapping layers [ 78.346655][ T7292] sctp: [Deprecated]: syz.0.355 (pid 7292) Use of struct sctp_assoc_value in delayed_ack socket option. [ 78.346655][ T7292] Use struct sctp_sack_info instead [ 78.359304][ T7292] ip6_vti0: Master is either lo or non-ether device [ 78.362671][ T7292] sctp: [Deprecated]: syz.0.355 (pid 7292) Use of struct sctp_assoc_value in delayed_ack socket option. [ 78.362671][ T7292] Use struct sctp_sack_info instead [ 78.552903][ T7308] CIFS: iocharset name too long [ 78.651137][ T7314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.792721][ T7331] netlink: 'syz.3.369': attribute type 1 has an invalid length. [ 78.804108][ T3334] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.904157][ T7339] tmpfs: Bad value for 'huge' [ 78.963848][ T3334] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 78.968039][ T3334] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 0 [ 78.973203][ T3334] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.983440][ T3334] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 78.987138][ T3334] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 78.994690][ T3334] usb 5-1: Product: syz [ 78.997523][ T3334] usb 5-1: Manufacturer: syz [ 78.999576][ T3334] usb 5-1: SerialNumber: syz [ 79.003997][ T3334] usb 5-1: config 0 descriptor?? [ 79.015669][ T3334] usb 5-1: selecting invalid altsetting 0 [ 79.233512][ T7305] 8021q: adding VLAN 0 to HW filter on device bond4 [ 79.244506][ T830] usb 5-1: USB disconnect, device number 4 [ 79.263115][ T5290] Bluetooth: hci3: command 0x0c1a tx timeout [ 79.265257][ T5290] Bluetooth: hci2: command 0x0c1a tx timeout [ 79.267917][ T5938] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.272468][ T5290] Bluetooth: hci1: command 0x0c1a tx timeout [ 79.328755][ T5999] IPVS: starting estimator thread 0... [ 79.412401][ T7375] IPVS: using max 26 ests per chain, 62400 per kthread [ 79.852779][ T7377] nbd0: detected capacity change from 0 to 63 [ 79.895384][ T7395] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 79.896145][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 79.896160][ T40] audit: type=1400 audit(1774348513.560:436): avc: denied { map } for pid=7394 comm="syz.4.384" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 79.911765][ T40] audit: type=1400 audit(1774348513.570:437): avc: denied { execute } for pid=7394 comm="syz.4.384" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 80.075289][ T7401] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 80.212413][ T7379] nbd1: detected capacity change from 0 to 63 [ 80.239000][ T5945] block nbd1: Receive control failed (result -104) [ 80.239004][ T5947] block nbd1: Receive control failed (result -32) [ 80.242308][ T5942] block nbd0: Receive control failed (result -32) [ 80.243423][ T5938] block nbd0: Receive control failed (result -32) [ 80.249583][ T5290] block nbd0: Receive control failed (result -32) [ 80.253505][ T5946] block nbd1: Receive control failed (result -32) [ 80.255885][ T5946] Bluetooth: hci3: unexpected event for opcode 0x2028 [ 80.276185][ T7407] binder: BINDER_SET_CONTEXT_MGR already set [ 80.282768][ T7407] binder: 7405:7407 ioctl 4018620d 200000004a80 returned -16 [ 80.297970][ T40] audit: type=1400 audit(1774348513.960:438): avc: denied { connect } for pid=7403 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 80.326366][ T7413] mmap: syz.2.389 (7413) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.344997][ T7418] Bluetooth: MGMT ver 1.23 [ 80.534846][ T7433] bridge0: entered promiscuous mode [ 80.537923][ T7433] macvlan2: entered promiscuous mode [ 80.609755][ T7444] evm: overlay not supported [ 80.616437][ T40] audit: type=1400 audit(1774348514.280:439): avc: denied { getopt } for pid=7446 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.625145][ T7447] syzkaller0: entered promiscuous mode [ 80.627574][ T7447] syzkaller0: entered allmulticast mode [ 80.641470][ T40] audit: type=1400 audit(1774348514.300:440): avc: denied { getopt } for pid=7443 comm="syz.0.398" lport=40348 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 80.652798][ T40] audit: type=1400 audit(1774348514.300:441): avc: denied { read } for pid=7446 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 80.755495][ T40] audit: type=1400 audit(1774348514.420:442): avc: denied { map } for pid=7446 comm="syz.2.399" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.844762][ T7456] __nla_validate_parse: 10 callbacks suppressed [ 80.844776][ T7456] netlink: 48 bytes leftover after parsing attributes in process `syz.3.400'. [ 80.912906][ T7463] netlink: 25 bytes leftover after parsing attributes in process `syz.0.403'. [ 80.918815][ T7463] netlink: 'syz.0.403': attribute type 4 has an invalid length. [ 81.007692][ T7475] overlay: ./file1 is not a directory [ 81.061414][ T7483] xfrm1: entered allmulticast mode [ 81.063253][ T7485] vivid-000: ================= START STATUS ================= [ 81.063485][ T7485] vivid-000: Test Pattern: 75% Colorbar [ 81.063535][ T7485] vivid-000: Fill Percentage of Frame: 4 [ 81.063555][ T7485] vivid-000: Horizontal Movement: No Movement [ 81.063575][ T7485] vivid-000: Vertical Movement: No Movement [ 81.063594][ T7485] vivid-000: OSD Text Mode: All [ 81.063613][ T7485] vivid-000: Show Border: false [ 81.063631][ T7485] vivid-000: Show Square: false [ 81.063650][ T7485] vivid-000: Sensor Flipped Horizontally: false [ 81.067554][ T7482] lo: entered promiscuous mode [ 81.068748][ T7479] sctp: [Deprecated]: syz.3.409 (pid 7479) Use of int in maxseg socket option. [ 81.068748][ T7479] Use struct sctp_assoc_value instead [ 81.068978][ T40] audit: type=1400 audit(1774348514.730:443): avc: denied { accept } for pid=7477 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 81.077923][ T7485] [ 81.079612][ T40] audit: type=1400 audit(1774348514.730:444): avc: denied { getopt } for pid=7477 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 81.081062][ T7485] vivid-000: Sensor Flipped Vertically: false [ 81.110077][ T7485] vivid-000: Insert SAV Code in Image: false [ 81.112054][ T7485] vivid-000: Insert EAV Code in Image: false [ 81.114270][ T7485] vivid-000: Insert Video Guard Band: false [ 81.116260][ T7485] vivid-000: Reduced Framerate: false [ 81.118168][ T7485] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 81.120703][ T7485] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 81.123723][ T7485] vivid-000: Enable Capture Cropping: true grabbed [ 81.125978][ T7485] vivid-000: Enable Capture Composing: true grabbed [ 81.128343][ T7485] vivid-000: Enable Capture Scaler: true grabbed [ 81.128361][ T7485] vivid-000: Timestamp Source: End of Frame [ 81.128373][ T7485] vivid-000: Colorspace: sRGB [ 81.128384][ T7485] vivid-000: Transfer Function: Default [ 81.128395][ T7485] vivid-000: Y'CbCr Encoding: [ 81.130796][ T7491] netlink: 'syz.3.413': attribute type 1 has an invalid length. [ 81.140237][ T7490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7490 comm=syz.2.412 [ 81.143510][ T7485] Default [ 81.148690][ T7485] vivid-000: HSV Encoding: Hue 0-179 [ 81.150264][ T7485] vivid-000: Quantization: Default [ 81.151808][ T7485] vivid-000: Apply Alpha To Red Only: true [ 81.154975][ T7485] vivid-000: Standard Aspect Ratio: 4x3 [ 81.156194][ T7490] netlink: 200484 bytes leftover after parsing attributes in process `syz.2.412'. [ 81.156713][ T7485] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 81.163454][ T7491] bond2: entered promiscuous mode [ 81.164651][ T7485] vivid-000: DV Timings: 640x480p59 inactive [ 81.164675][ T7485] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 81.169411][ T7491] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.172373][ T40] audit: type=1400 audit(1774348514.820:445): avc: denied { lock } for pid=7488 comm="syz.2.412" path="socket:[18202]" dev="sockfs" ino=18202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 81.197457][ T7485] [ 81.198424][ T7485] vivid-000: Maximum EDID Blocks: 2 [ 81.200424][ T7485] vivid-000: Limited RGB Range (16-235): false [ 81.203073][ T7485] vivid-000: Rx RGB Quantization Range: Automatic [ 81.205728][ T7485] vivid-000: Power Present: 0x00000001 [ 81.207996][ T7485] tpg source WxH: 320x180 (Luma) [ 81.209937][ T7485] tpg field: 1 [ 81.211337][ T7485] tpg crop: (0,0)/320x180 [ 81.219167][ T7485] tpg compose: (0,0)/320x180 [ 81.221275][ T7485] tpg colorspace: 8 [ 81.227001][ T7485] tpg transfer function: 0/2 [ 81.229512][ T7485] tpg quantization: 0/1 [ 81.231680][ T7485] tpg RGB range: 0/2 [ 81.238023][ T7485] vivid-000: ================== END STATUS ================== [ 81.352285][ T5290] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.356020][ T5290] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.358526][ T5290] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.363159][ T7523] netlink: 'syz.0.423': attribute type 21 has an invalid length. [ 81.366977][ T7523] netlink: 'syz.0.423': attribute type 6 has an invalid length. [ 81.370956][ T7523] netlink: 132 bytes leftover after parsing attributes in process `syz.0.423'. [ 81.409256][ T7523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16408 sclass=netlink_route_socket pid=7523 comm=syz.0.423 [ 81.437421][ T7537] sctp: [Deprecated]: syz.3.426 (pid 7537) Use of int in maxseg socket option. [ 81.437421][ T7537] Use struct sctp_assoc_value instead [ 81.458908][ T7537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.426'. [ 81.571198][ T7548] hugetlbfs: syz.3.430 (7548): Using mlock ulimits for SHM_HUGETLB is obsolete [ 81.608141][ T7553] xt_SECMARK: invalid mode: 2 [ 81.611793][ T7553] xt_SECMARK: invalid mode: 2 [ 81.612089][ T7552] pim6reg1: entered promiscuous mode [ 81.616635][ T7552] pim6reg1: entered allmulticast mode [ 81.655760][ T7557] /dev/nullb0: Can't open blockdev [ 81.791689][ T5938] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 81.794095][ T7563] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.435'. [ 81.798008][ T5938] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 81.861400][ T7566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.436'. [ 81.930493][ T7570] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.017250][ T7570] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.032398][ T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 82.096815][ T7570] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.155670][ T7570] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.193875][ T24] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.198102][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.201808][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 82.205276][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.209552][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.212591][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.218110][ T24] usb 9-1: config 0 descriptor?? [ 82.246107][ T87] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.259327][ T155] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.270629][ T87] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.275150][ T7576] netlink: 56 bytes leftover after parsing attributes in process `syz.0.439'. [ 82.284328][ T87] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.489906][ T5938] Bluetooth: hci3: Malformed Event: 0x13 [ 82.499165][ T7584] bond5: option primary: mode dependency failed, not supported in mode broadcast(3) [ 82.511594][ T7584] bond5 (unregistering): Released all slaves [ 82.545642][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.442'. [ 82.565941][ T7587] ip6gretap0: entered promiscuous mode [ 82.568313][ T7587] macsec1: entered promiscuous mode [ 82.581114][ T7587] macsec1: entered allmulticast mode [ 82.584215][ T7587] ip6gretap0: entered allmulticast mode [ 82.590740][ T7587] ip6gretap0: left allmulticast mode [ 82.592106][ T7588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.593086][ T7587] ip6gretap0: left promiscuous mode [ 82.606598][ T7584] netlink: 32 bytes leftover after parsing attributes in process `syz.0.442'. [ 82.655466][ T7584] bond5 (unregistering): Released all slaves [ 82.816823][ T7606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=7606 comm=syz.0.446 [ 82.865335][ T5938] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 82.881942][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.885697][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.933092][ T7614] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 83.167680][ T7630] openvswitch: netlink: Duplicate or invalid key (type 0). [ 83.170083][ T7630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.324215][ T7648] comedi comedi4: bad chanlist[0]=0x0000064a chan=1610 range length=2 [ 83.422488][ T5938] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.432333][ T54] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 83.604958][ T54] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 83.608815][ T54] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 83.613414][ T54] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 83.616866][ T54] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 83.620480][ T54] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 83.626519][ T54] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 83.630743][ T54] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 83.633696][ T54] usb 8-1: Product: syz [ 83.635259][ T54] usb 8-1: Manufacturer: syz [ 83.653412][ T54] cdc_wdm 8-1:1.0: skipping garbage [ 83.655421][ T54] cdc_wdm 8-1:1.0: skipping garbage [ 83.661085][ T54] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 83.661394][ T7673] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 83.663403][ T54] cdc_wdm 8-1:1.0: Unknown control protocol [ 83.687999][ T7673] bridge_slave_0: left allmulticast mode [ 83.689825][ T7673] bridge_slave_0: left promiscuous mode [ 83.692830][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.709643][ T7673] bridge_slave_1: left allmulticast mode [ 83.712313][ T7673] bridge_slave_1: left promiscuous mode [ 83.714927][ T7673] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.725979][ T7673] bond0: (slave bond_slave_0): Releasing backup interface [ 83.731396][ T7673] bond0: (slave bond_slave_1): Releasing backup interface [ 83.744205][ T7673] team0: Port device team_slave_0 removed [ 83.750523][ T7676] netlink: 'syz.0.464': attribute type 10 has an invalid length. [ 83.751669][ T7673] team0: Port device team_slave_1 removed [ 83.755825][ T7673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.758235][ T7673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.761533][ T7673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.764297][ T7673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.768087][ T7673] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 83.778887][ T7676] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 83.786480][ T7676] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 83.858481][ T54] usb 8-1: USB disconnect, device number 5 [ 83.881283][ T7689] netlink: 'syz.2.469': attribute type 21 has an invalid length. [ 83.884501][ T7689] netlink: 'syz.2.469': attribute type 6 has an invalid length. [ 83.909134][ T7687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=7687 comm=syz.0.468 [ 83.974825][ T7699] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 84.204579][ T7716] netlink: 'syz.2.478': attribute type 7 has an invalid length. [ 84.208261][ T7716] netlink: 'syz.2.478': attribute type 7 has an invalid length. [ 84.472477][ T830] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 84.532501][ T54] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 84.632985][ T830] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 84.636281][ T830] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.639388][ T830] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.642831][ T830] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.645741][ T830] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.648364][ T830] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.651534][ T830] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.654418][ T830] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.657050][ T830] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.660234][ T830] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.663009][ T830] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.665911][ T830] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.668984][ T830] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.671626][ T830] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.674414][ T830] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.677549][ T830] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.681267][ T830] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.684040][ T830] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.685854][ T54] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 84.687427][ T830] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.691348][ T54] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 84.693943][ T830] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.697245][ T54] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 84.699930][ T830] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.699950][ T830] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.700718][ T830] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.704040][ T54] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 84.706770][ T830] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.706787][ T830] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.708333][ T830] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 84.709470][ T54] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 84.712076][ T830] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 84.712090][ T830] usb 5-1: Product: syz [ 84.712098][ T830] usb 5-1: Manufacturer: syz [ 84.712107][ T830] usb 5-1: SerialNumber: syz [ 84.714017][ T830] usb 5-1: config 0 descriptor?? [ 84.718687][ T54] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 84.723351][ T830] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 84.726396][ T54] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 84.751220][ T54] usb 8-1: Product: syz [ 84.753230][ T54] usb 8-1: Manufacturer: syz [ 84.758651][ T54] cdc_wdm 8-1:1.0: skipping garbage [ 84.760446][ T54] cdc_wdm 8-1:1.0: skipping garbage [ 84.764332][ T54] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 84.766645][ T54] cdc_wdm 8-1:1.0: Unknown control protocol [ 84.774429][ T155] Bluetooth: Error in BCSP hdr checksum [ 84.796680][ T24] usbhid 9-1:0.0: can't add hid device: -71 [ 84.799886][ T24] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 84.806692][ T24] usb 9-1: USB disconnect, device number 7 [ 84.928606][ T830] usb 5-1: USB disconnect, device number 5 [ 84.934461][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 84.934472][ T40] audit: type=1400 audit(1774348518.600:468): avc: denied { write } for pid=7725 comm="syz.4.480" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 84.937597][ T830] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 84.943995][ T40] audit: type=1400 audit(1774348518.600:469): avc: denied { open } for pid=7725 comm="syz.4.480" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 84.958718][ T54] usb 8-1: USB disconnect, device number 6 [ 85.035423][ T13] Bluetooth: Error in BCSP hdr checksum [ 85.077822][ T40] audit: type=1400 audit(1774348518.740:470): avc: denied { append } for pid=7729 comm="syz.4.481" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.088090][ T40] audit: type=1400 audit(1774348518.750:471): avc: denied { map } for pid=7729 comm="syz.4.481" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.097879][ T40] audit: type=1400 audit(1774348518.750:472): avc: denied { execute } for pid=7729 comm="syz.4.481" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.134623][ T40] audit: type=1400 audit(1774348518.800:473): avc: denied { associate } for pid=7711 comm="syz.0.476" name="cpuset.memory_pressure_enabled" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 85.146514][ T40] audit: type=1400 audit(1774348518.810:474): avc: denied { lock } for pid=7711 comm="syz.0.476" path="/95/file0/cpuset.memory_pressure_enabled" dev="9p" ino=73662649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.370780][ T7734] mkiss: ax0: crc mode is auto. [ 85.429881][ T7742] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 85.581296][ T7755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7755 comm=syz.4.486 [ 85.717808][ T7766] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 85.858166][ T7769] __nla_validate_parse: 4 callbacks suppressed [ 85.858183][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'. [ 85.984957][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.491'. [ 85.988800][ T7774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.491'. [ 86.001673][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.491'. [ 86.005894][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.491'. [ 86.053703][ T7776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.491'. [ 86.057135][ T40] audit: type=1400 audit(1774348519.720:475): avc: denied { module_request } for pid=7773 comm="syz.4.491" kmod="net-cls-ba" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 86.179356][ T40] audit: type=1400 audit(1774348519.840:476): avc: denied { append } for pid=7778 comm="syz.4.492" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 86.266179][ T7782] fuse: Bad value for 'fd' [ 86.271528][ T7782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.493'. [ 86.436335][ T40] audit: type=1400 audit(1774348520.100:477): avc: denied { create } for pid=7781 comm="syz.4.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.467971][ T39] cfg80211: failed to load regulatory.db [ 86.552553][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 86.552902][ T5938] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 86.830970][ T7792] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.908689][ T7792] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.039869][ T7792] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.098673][ T7792] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.122394][ T1458] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 87.207893][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.225343][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.228382][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.247932][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.273615][ T1458] usb 7-1: config 0 has no interfaces? [ 87.277237][ T1458] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 87.280698][ T1458] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 87.283799][ T1458] usb 7-1: Product: syz [ 87.285096][ T1458] usb 7-1: Manufacturer: syz [ 87.286557][ T1458] usb 7-1: SerialNumber: syz [ 87.289593][ T1458] usb 7-1: config 0 descriptor?? [ 87.395204][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 87.418244][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 87.504130][ T29] usb 7-1: USB disconnect, device number 7 [ 87.569172][ T7823] Invalid source name [ 87.570509][ T7823] UBIFS error (pid: 7823): cannot open "ubifs", error -22 [ 87.644393][ T7830] netlink: 28 bytes leftover after parsing attributes in process `syz.4.510'. [ 87.664533][ T7830] hsr_slave_1 (unregistering): left promiscuous mode [ 87.785287][ T7843] syzkaller0: entered promiscuous mode [ 87.787146][ T7843] syzkaller0: entered allmulticast mode [ 87.808613][ T7846] syzkaller0: entered promiscuous mode [ 87.810416][ T7846] syzkaller0: entered allmulticast mode [ 88.232435][ T1458] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 88.372456][ T5662] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 88.394443][ T1458] usb 5-1: unable to get BOS descriptor or descriptor too short [ 88.398406][ T1458] usb 5-1: not running at top speed; connect to a high speed hub [ 88.404340][ T1458] usb 5-1: config 1 interface 0 altsetting 12 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 88.409904][ T1458] usb 5-1: config 1 interface 0 altsetting 12 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 88.414935][ T1458] usb 5-1: config 1 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.419568][ T1458] usb 5-1: config 1 interface 0 has no altsetting 0 [ 88.423787][ T1458] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.427802][ T1458] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.430723][ T1458] usb 5-1: Product: syz [ 88.432315][ T1458] usb 5-1: Manufacturer: syz [ 88.434154][ T1458] usb 5-1: SerialNumber: syz [ 88.439406][ T7859] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.442750][ T7859] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.542640][ T5662] usb 7-1: Using ep0 maxpacket: 8 [ 88.545942][ T5662] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.549420][ T5662] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.552650][ T5662] usb 7-1: config 0 interface 0 has no altsetting 0 [ 88.555280][ T5662] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 88.558348][ T5662] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.563071][ T5662] usb 7-1: config 0 descriptor?? [ 88.654120][ T7859] loop5: detected capacity change from 0 to 7 [ 88.660058][ T7875] ALSA: mixer_oss: invalid OSS volume '' [ 88.874953][ T7875] syz.4.525 (7875): drop_caches: 2 [ 88.878785][ T7875] syz.4.525 (7875): drop_caches: 2 [ 88.894505][ T7859] Dev loop5: unable to read RDB block 7 [ 88.896658][ T7859] loop5: unable to read partition table [ 88.899155][ T7859] loop5: partition table beyond EOD, truncated [ 88.911687][ T7859] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 88.941144][ T1458] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 88.959707][ T1458] usb 5-1: USB disconnect, device number 6 [ 88.975272][ T5662] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 88.978249][ T5662] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 88.982381][ T5662] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 88.985379][ T5662] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 88.988561][ T5662] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 88.994089][ T5662] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 89.133824][ T7892] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 89.187068][ T5662] usb 7-1: USB disconnect, device number 8 [ 89.331671][ T7908] overlayfs: missing 'lowerdir' [ 89.422278][ T7914] sp0: Synchronizing with TNC [ 89.538660][ T7926] netlink: 'syz.4.541': attribute type 1 has an invalid length. [ 89.561215][ T7927] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 89.567598][ T7927] bond2 (unregistering): Released all slaves [ 89.594092][ T7926] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.865541][ T7955] binder: Bad value for 'max' [ 89.908800][ T7963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7963 comm=syz.2.553 [ 89.945583][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 89.945599][ T40] audit: type=1400 audit(1774348523.610:491): avc: denied { create } for pid=7966 comm="syz.2.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 89.957566][ T40] audit: type=1400 audit(1774348523.630:492): avc: denied { getopt } for pid=7966 comm="syz.2.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 90.019936][ T155] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.032438][ T1231] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.035876][ T1231] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.038195][ T1231] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.134328][ T7986] bond0: (slave macvlan2): Opening slave failed [ 90.241421][ T7991] erofs (device loop4): cannot find valid erofs superblock [ 90.396300][ T8004] delete_channel: no stack [ 90.423478][ T8008] netlink: 'syz.4.566': attribute type 1 has an invalid length. [ 90.437987][ T8008] 8021q: adding VLAN 0 to HW filter on device bond3 [ 90.450262][ T8008] bond3: (slave ip6gretap2): making interface the new active one [ 90.455635][ T8008] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 90.460862][ T8012] bond0: left promiscuous mode [ 90.465046][ T8008] overlayfs: missing 'lowerdir' [ 90.465477][ T40] audit: type=1400 audit(1774348524.130:493): avc: denied { ioctl } for pid=8007 comm="syz.4.566" path="socket:[22651]" dev="sockfs" ino=22651 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.698020][ T8025] libceph: secret too big 289 [ 90.882464][ T24] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 90.931572][ T40] audit: type=1400 audit(1774348524.590:494): avc: denied { bpf } for pid=8034 comm="syz.0.575" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.940627][ T40] audit: type=1400 audit(1774348524.590:495): avc: denied { perfmon } for pid=8034 comm="syz.0.575" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.981603][ T40] audit: type=1400 audit(1774348524.640:496): avc: denied { append } for pid=8037 comm="syz.0.576" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 91.074339][ T24] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 91.075154][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.081013][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.081031][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 91.084005][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.090120][ T8050] Invalid argument reading file caps for ./file0 [ 91.090800][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.090819][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 91.101571][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.101604][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.101622][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 91.102786][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.102809][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.102823][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 91.103669][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.103691][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.103705][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 91.104638][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.110263][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.115620][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.122412][ T40] audit: type=1400 audit(1774348524.790:497): avc: denied { mount } for pid=8052 comm="syz.2.581" name="/" dev="autofs" ino=21798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 91.139179][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 91.149566][ T40] audit: type=1400 audit(1774348524.800:498): avc: denied { read } for pid=8056 comm="syz.0.582" lport=54436 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 91.161524][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.161553][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.161569][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 91.162556][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.162585][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.162601][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 91.164319][ T24] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 91.192298][ T24] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 91.192314][ T24] usb 8-1: Product: syz [ 91.192323][ T24] usb 8-1: Manufacturer: syz [ 91.192330][ T24] usb 8-1: SerialNumber: syz [ 91.193649][ T24] usb 8-1: config 0 descriptor?? [ 91.199950][ T24] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 91.289829][ T8065] __nla_validate_parse: 48 callbacks suppressed [ 91.289845][ T8065] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.583'. [ 91.402805][ T24] usb 8-1: USB disconnect, device number 7 [ 91.404111][ T24] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 91.576185][ T40] audit: type=1400 audit(1774348525.240:499): avc: denied { mounton } for pid=8068 comm="syz.0.584" path="/proc/357/cgroup" dev="proc" ino=22759 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 91.735652][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.587'. [ 91.786863][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.588'. [ 91.821244][ T8079] nbd: socks must be embedded in a SOCK_ITEM attr [ 91.890419][ T8083] netlink: 212 bytes leftover after parsing attributes in process `syz.0.589'. [ 91.915728][ T8083] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 91.974227][ T40] audit: type=1400 audit(1774348525.640:500): avc: denied { getopt } for pid=8095 comm="syz.4.593" lport=18725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.038768][ T8099] netlink: 'syz.0.592': attribute type 1 has an invalid length. [ 92.038780][ T8098] netlink: 'syz.0.592': attribute type 1 has an invalid length. [ 92.041189][ T8099] netlink: 92 bytes leftover after parsing attributes in process `syz.0.592'. [ 92.043984][ T8098] netlink: 92 bytes leftover after parsing attributes in process `syz.0.592'. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 92.235840][ T8119] kvm: pic: single mode not supported [ 92.245107][ T8119] kvm: pic: level sensitive irq not supported [ 92.256213][ T8119] kvm: pic: single mode not supported [ 92.258077][ T8127] vcan0: tx address claim with dlc 0 [ 92.284990][ T8128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.597'. [ 92.287838][ T8128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.597'. [ 92.415206][ T8138] tmpfs: Unknown parameter 'n`_indes' [ 92.733886][ T8151] ipt_ECN: cannot use operation on non-tcp rule [ 93.001693][ T8160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8160 comm=syz.2.615 [ 93.113453][ T8172] program syz.3.619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.167738][ T8174] vlan3: entered allmulticast mode [ 93.170241][ T8174] bond0: entered allmulticast mode [ 93.179411][ T8174] afs: Unknown parameter 'autocq' [ 93.182401][ T5938] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.242292][ T7724] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 93.372989][ T8147] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.375042][ T8147] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 93.379997][ T8147] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.381921][ T8147] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 93.384462][ T7724] usb 7-1: device descriptor read/64, error -71 [ 93.389058][ T8147] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.391183][ T8147] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 93.394060][ T8147] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.395965][ T8147] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 93.633145][ T7724] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 93.667240][ T8186] openvswitch: netlink: Duplicate or invalid key (type 0). [ 93.670380][ T8186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.675353][ T8187] openvswitch: netlink: Duplicate or invalid key (type 0). [ 93.677700][ T8187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.763536][ T7724] usb 7-1: device descriptor read/64, error -71 [ 93.882708][ T7724] usb usb7-port1: attempt power cycle [ 94.232362][ T7724] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 94.256414][ T7724] usb 7-1: device descriptor read/8, error -71 [ 94.351418][ T8216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.632'. [ 94.462592][ T3334] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 94.512526][ T7724] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 94.533031][ T7724] usb 7-1: device descriptor read/8, error -71 [ 94.622456][ T3334] usb 8-1: Using ep0 maxpacket: 8 [ 94.627887][ T3334] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.632086][ T3334] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.637072][ T3334] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.641361][ T3334] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.642446][ T7724] usb usb7-port1: unable to enumerate USB device [ 94.647790][ T3334] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.653907][ T3334] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.861218][ T3334] usb 8-1: GET_CAPABILITIES returned 0 [ 94.863523][ T3334] usbtmc 8-1:16.0: can't read capabilities [ 94.951525][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.640'. [ 95.019172][ T8236] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 95.066374][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 95.069820][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 95.073103][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 95.076060][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 95.079119][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 95.082401][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 95.087282][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 95.090263][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 95.093160][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 95.096123][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 95.099047][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 95.102277][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 95.106002][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 95.109633][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 95.115257][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 95.119066][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 95.150407][ T8240] ip6gre1: entered promiscuous mode [ 95.159925][ T3334] usb 8-1: USB disconnect, device number 8 [ 96.125864][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 96.125880][ T40] audit: type=1400 audit(1774348529.790:514): avc: denied { map } for pid=8266 comm="syz.2.649" path="socket:[24739]" dev="sockfs" ino=24739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 96.283343][ T8273] xt_TPROXY: Can be used only with -p tcp or -p udp [ 96.286562][ T8273] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 96.316042][ T40] audit: type=1400 audit(1774348529.980:515): avc: denied { ioctl } for pid=8274 comm="syz.4.652" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 96.324415][ T40] audit: type=1400 audit(1774348529.990:516): avc: denied { read } for pid=8274 comm="syz.4.652" dev="nsfs" ino=4026533764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 96.331012][ T40] audit: type=1400 audit(1774348529.990:517): avc: denied { open } for pid=8274 comm="syz.4.652" path="net:[4026533764]" dev="nsfs" ino=4026533764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 96.384796][ T8277] netlink: 'syz.4.653': attribute type 2 has an invalid length. [ 96.387222][ T8277] netlink: 'syz.4.653': attribute type 2 has an invalid length. [ 96.471799][ T8281] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.654'. [ 96.482541][ T8281] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 96.488076][ T40] audit: type=1400 audit(1774348530.150:518): avc: denied { ioctl } for pid=8278 comm="syz.4.654" path="socket:[24747]" dev="sockfs" ino=24747 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 96.859199][ T8294] netlink: 'syz.4.657': attribute type 12 has an invalid length. [ 96.861867][ T8294] netlink: 'syz.4.657': attribute type 29 has an invalid length. [ 96.865236][ T8294] netlink: 148 bytes leftover after parsing attributes in process `syz.4.657'. [ 96.867936][ T8294] netlink: 51 bytes leftover after parsing attributes in process `syz.4.657'. [ 96.933097][ T40] audit: type=1400 audit(1774348530.600:519): avc: denied { bind } for pid=8297 comm="syz.4.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.076272][ T8303] devtmpfs: Unknown parameter '({' [ 97.198066][ T8314] syzkaller1: entered promiscuous mode [ 97.199807][ T8314] syzkaller1: entered allmulticast mode [ 97.604990][ T8322] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 97.607619][ T8322] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 97.610814][ T8322] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 97.614866][ T8322] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 97.947382][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.667'. [ 97.995189][ T40] audit: type=1400 audit(1774348531.660:520): avc: denied { watch } for pid=8331 comm="syz.3.668" path="/181/file0" dev="tmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 98.004562][ T8333] binder: 8331:8333 ioctl 8982 200000000200 returned -22 [ 98.006069][ T40] audit: type=1400 audit(1774348531.670:521): avc: denied { watch_sb watch_reads } for pid=8331 comm="syz.3.668" path="/181/file0" dev="tmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.021085][ T40] audit: type=1400 audit(1774348531.680:522): avc: denied { call } for pid=8331 comm="syz.3.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 98.154572][ T40] audit: type=1400 audit(1774348531.820:523): avc: denied { lock } for pid=8345 comm="syz.3.671" path="socket:[22407]" dev="sockfs" ino=22407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.493911][ T8352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.672'. [ 98.565955][ T8358] netlink: 48 bytes leftover after parsing attributes in process `syz.3.674'. [ 98.569665][ T8359] netlink: 48 bytes leftover after parsing attributes in process `syz.3.674'. [ 98.992416][ T1028] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 99.142357][ T1028] usb 8-1: Using ep0 maxpacket: 8 [ 99.145972][ T1028] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 99.149142][ T1028] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.152304][ T1028] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.155630][ T1028] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.158660][ T1028] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.163466][ T1028] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 99.166841][ T1028] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.373372][ T1028] usb 8-1: usb_control_msg returned -32 [ 99.375152][ T1028] usbtmc 8-1:16.0: can't read capabilities [ 99.728848][ T8367] usbtmc 8-1:16.0: INITIATE_ABORT_BULK_OUT returned 3 [ 100.207786][ T8383] netlink: 'syz.2.680': attribute type 1 has an invalid length. [ 100.220108][ T8383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.233182][ T8383] bond1: (slave geneve2): making interface the new active one [ 100.236185][ T8383] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 100.238976][ T155] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 100.242549][ T155] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 100.245439][ T155] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 100.249465][ T155] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 100.297839][ T8392] netlink: 108 bytes leftover after parsing attributes in process `syz.3.683'. [ 100.388994][ T8397] rdma_op ffff8880582861f0 conn xmit_rdma 0000000000000000 [ 100.493504][ T8404] SELinux: failed to load policy [ 100.495541][ T8405] SELinux: failed to load policy [ 100.714817][ T8410] syzkaller0: entered promiscuous mode [ 101.678340][ T8437] netlink: 60 bytes leftover after parsing attributes in process `syz.4.699'. [ 101.685571][ T8437] unsupported nlmsg_type 40 [ 101.749296][ T8446] IPVS: Scheduler module ip_vs_sip not found [ 101.758794][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.701'. [ 101.896851][ T8465] Failed to initialize the IGMP autojoin socket (err -2) [ 101.984697][ T8442] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 101.996904][ T8442] cramfs: wrong magic [ 102.127997][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 102.128014][ T40] audit: type=1400 audit(2000000001.910:529): avc: denied { connect } for pid=8476 comm="syz.3.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 102.140787][ T40] audit: type=1400 audit(2000000001.910:530): avc: denied { read } for pid=8476 comm="syz.3.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 102.293823][ T8483] netlink: 'syz.3.712': attribute type 39 has an invalid length. [ 102.527235][ T40] audit: type=1400 audit(2000000002.310:531): avc: denied { getopt } for pid=8485 comm="syz.4.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.550670][ T40] audit: type=1400 audit(2000000002.330:532): avc: denied { write } for pid=8485 comm="syz.4.713" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.608215][ T8488] bond4 (unregistering): Released all slaves [ 102.755423][ T40] audit: type=1400 audit(2000000002.540:533): avc: denied { accept } for pid=8495 comm="syz.4.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.828918][ T8500] nfs: Unknown parameter '' [ 102.856045][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.719'. [ 102.880946][ T8502] macvlan3: entered promiscuous mode [ 102.913428][ T8505] Failed to initialize the IGMP autojoin socket (err -2) [ 103.019987][ T8509] 9p: Bad value for 'version' [ 103.073538][ T8513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8513 comm=syz.3.723 [ 103.078590][ T8513] netlink: 104 bytes leftover after parsing attributes in process `syz.3.723'. [ 103.346514][ T40] audit: type=1400 audit(2000000003.130:534): avc: denied { wake_alarm } for pid=8535 comm="syz.3.730" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.445971][ T8545] (syz.3.733,8545,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 103.448546][ T8545] (syz.3.733,8545,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 103.451780][ T8545] (syz.3.733,8545,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 103.456943][ T8545] (syz.3.733,8545,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 103.462536][ T6022] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 103.554884][ T8549] NILFS (loop3): device size too small [ 103.559996][ T8549] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5 sclass=netlink_tcpdiag_socket pid=8549 comm=syz.3.734 [ 103.564238][ T8548] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 103.612361][ T6022] usb 9-1: Using ep0 maxpacket: 8 [ 103.615358][ T6022] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.618856][ T6022] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.622793][ T6022] usb 9-1: config 0 interface 0 has no altsetting 0 [ 103.624960][ T6022] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 103.627869][ T6022] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.638246][ T6022] usb 9-1: config 0 descriptor?? [ 104.053786][ T6022] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 104.058507][ T6022] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 104.060872][ T6022] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 104.063405][ T6022] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 104.065615][ T6022] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 104.068176][ T6022] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 104.258198][ T3334] usb 9-1: USB disconnect, device number 8 [ 104.785155][ T40] audit: type=1400 audit(2000000004.570:535): avc: denied { read write } for pid=8564 comm="syz.4.739" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 104.793265][ T40] audit: type=1400 audit(2000000004.570:536): avc: denied { open } for pid=8564 comm="syz.4.739" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 104.807186][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'. [ 104.825167][ T8565] kvm: kvm [8564]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xcd [ 104.856850][ T24] hid-generic 0005:00B6:0009.0008: unknown main item tag 0x0 [ 104.859449][ T24] hid-generic 0005:00B6:0009.0008: unknown main item tag 0x0 [ 104.862059][ T24] hid-generic 0005:00B6:0009.0008: unknown main item tag 0x0 [ 104.865422][ T24] hid-generic 0005:00B6:0009.0008: unknown main item tag 0x0 [ 104.867890][ T24] hid-generic 0005:00B6:0009.0008: unknown main item tag 0x0 [ 104.890262][ T24] hid-generic 0005:00B6:0009.0008: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 104.942946][ T8569] fido_id[8569]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 105.023036][ T8571] /dev/sg0: Can't lookup blockdev [ 105.028150][ T8571] vcan0: tx address claim with dest, not broadcast [ 105.083886][ T40] audit: type=1400 audit(2000000004.870:537): avc: denied { mount } for pid=8570 comm="syz.4.741" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 105.085339][ T8571] netlink: 'syz.4.741': attribute type 1 has an invalid length. [ 105.091324][ T40] audit: type=1400 audit(2000000004.870:538): avc: denied { remount } for pid=8570 comm="syz.4.741" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 105.103890][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 105.499818][ T8611] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 105.510676][ T8611] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.515061][ T8611] bridge_slave_1: left allmulticast mode [ 105.517976][ T8611] bridge_slave_1: left promiscuous mode [ 105.520151][ T8611] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.527519][ T8611] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 105.655317][ T8622] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 105.663626][ T830] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 105.833786][ T830] usb 9-1: Using ep0 maxpacket: 8 [ 105.843238][ T830] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.848509][ T830] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.853102][ T830] usb 9-1: config 0 interface 0 has no altsetting 0 [ 105.855891][ T830] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 105.859692][ T830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.866069][ T830] usb 9-1: config 0 descriptor?? [ 106.282532][ T830] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 106.480467][ T7724] usb 9-1: USB disconnect, device number 9 [ 106.827416][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 106.830291][ T8648] netlink: 'syz.2.761': attribute type 26 has an invalid length. [ 107.010514][ T8656] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 107.182336][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 107.312362][ T24] usb 7-1: device descriptor read/64, error -71 [ 107.462322][ T830] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 107.552516][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 107.623897][ T830] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 107.626664][ T830] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.629969][ T830] usb 9-1: config 0 has no interfaces? [ 107.631937][ T830] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 107.635102][ T830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.639357][ T830] usb 9-1: config 0 descriptor?? [ 107.692365][ T24] usb 7-1: device descriptor read/64, error -71 [ 107.802737][ T24] usb usb7-port1: attempt power cycle [ 107.862521][ T3334] usb 9-1: USB disconnect, device number 10 [ 108.142381][ T24] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 108.174931][ T24] usb 7-1: device descriptor read/8, error -71 [ 108.295086][ T5946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.299620][ T5946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.304385][ T5946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.309534][ T5946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.313447][ T5946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.318774][ T5938] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.322048][ T5938] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.325498][ T5938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.329433][ T5938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.335877][ T5938] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.354175][ T8670] Failed to initialize the IGMP autojoin socket (err -2) [ 108.433984][ T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 108.474498][ T24] usb 7-1: device descriptor read/8, error -71 [ 108.493676][ T8670] chnl_net:caif_netlink_parms(): no params data found [ 108.598659][ T24] usb usb7-port1: unable to enumerate USB device [ 108.609989][ T8670] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.624885][ T8670] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.627282][ T8670] bridge_slave_0: entered allmulticast mode [ 108.629934][ T8670] bridge_slave_0: entered promiscuous mode [ 108.634119][ T8691] Failed to initialize the IGMP autojoin socket (err -2) [ 108.637398][ T8670] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.640281][ T8670] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.643702][ T8670] bridge_slave_1: entered allmulticast mode [ 108.646509][ T8670] bridge_slave_1: entered promiscuous mode [ 108.696574][ T8670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.734591][ T8670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.787480][ T8670] team0: Port device team_slave_0 added [ 108.804448][ T8670] team0: Port device team_slave_1 added [ 108.838294][ T8670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.840569][ T8670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.849243][ T8670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.854153][ T8670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.856570][ T8670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.865819][ T8670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.909948][ T8695] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 108.913185][ T8695] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 108.920015][ T8695] vhci_hcd vhci_hcd.0: Device attached [ 108.952386][ T8670] hsr_slave_0: entered promiscuous mode [ 108.953592][ T8696] vhci_hcd: connection closed [ 108.955693][ T8670] hsr_slave_1: entered promiscuous mode [ 108.956975][ T155] vhci_hcd vhci_hcd.4: stop threads [ 108.957494][ T8670] debugfs: 'hsr0' already exists in 'hsr' [ 108.959346][ T155] vhci_hcd vhci_hcd.4: release socket [ 108.960742][ T8670] Cannot create hsr debugfs directory [ 108.969652][ T155] vhci_hcd vhci_hcd.4: disconnect device [ 109.164113][ T8670] netdevsim netdevsim5 netdevsim0: renamed from eth6 [ 109.172430][ T8670] netdevsim netdevsim5 netdevsim1: renamed from eth7 [ 109.177283][ T8670] netdevsim netdevsim5 netdevsim2: renamed from eth8 [ 109.189453][ T8670] netdevsim netdevsim5 netdevsim3: renamed from eth9 [ 109.209980][ T8670] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.212526][ T8670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.215024][ T8670] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.217284][ T8670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.288196][ T8670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.317679][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.323691][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.348237][ T8670] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.366951][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.369362][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.392475][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.395872][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.638657][ T8670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.662002][ T8726] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.774' resets device [ 109.913516][ T8670] veth0_vlan: entered promiscuous mode [ 109.922239][ T8670] veth1_vlan: entered promiscuous mode [ 109.988882][ T8670] veth0_macvtap: entered promiscuous mode [ 110.012934][ T8670] veth1_macvtap: entered promiscuous mode [ 110.074953][ T8670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.077901][ T8746] ubi31: attaching mtd0 [ 110.080776][ T8746] ubi31 error: ubi_attach_mtd_dev: bad VID header (268435456) or data offsets (268435520) [ 110.102198][ T8670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.116239][ T8670] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 110.125435][ T8670] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 110.134734][ T8670] wireguard: wg0: Could not create IPv4 socket [ 110.138572][ T8670] wireguard: wg1: Could not create IPv4 socket [ 110.152743][ T5689] block nbd0: Connection timed out, retrying (0/3 alive) [ 110.152770][ T8670] wireguard: wg2: Could not create IPv4 socket [ 110.160025][ T5689] block nbd0: Connection timed out, retrying (0/3 alive) [ 110.164615][ T5689] block nbd0: Connection timed out, retrying (0/3 alive) [ 110.167818][ T5689] block nbd0: Connection timed out, retrying (0/3 alive) [ 110.171296][ T5689] block nbd0: Dead connection, failed to find a fallback [ 110.173064][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 110.177146][ T5689] block nbd0: shutting down sockets [ 110.181210][ T5689] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.186098][ T5689] Buffer I/O error on dev nbd0, logical block 3, async page read [ 110.189072][ T5689] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.192112][ T5689] Buffer I/O error on dev nbd0, logical block 2, async page read [ 110.195074][ T5689] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.200070][ T5689] Buffer I/O error on dev nbd0, logical block 1, async page read [ 110.204533][ T5689] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.208672][ T5689] Buffer I/O error on dev nbd0, logical block 0, async page read [ 110.215789][ T5935] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.221444][ T5935] Buffer I/O error on dev nbd0, logical block 0, async page read [ 110.225807][ T5935] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.229860][ T5935] Buffer I/O error on dev nbd0, logical block 1, async page read [ 110.233927][ T5935] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.239395][ T5935] Buffer I/O error on dev nbd0, logical block 2, async page read [ 110.243064][ T5935] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.246639][ T5935] Buffer I/O error on dev nbd0, logical block 3, async page read [ 110.249702][ T5935] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.254169][ T5935] Buffer I/O error on dev nbd0, logical block 0, async page read [ 110.257402][ T5935] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.261671][ T5935] Buffer I/O error on dev nbd0, logical block 1, async page read [ 110.265901][ T5935] ldm_validate_partition_table(): Disk read failed. [ 110.268217][ T5935] Dev nbd0: unable to read RDB block 0 [ 110.271198][ T5935] nbd0: unable to read partition table [ 110.281689][ T8140] ldm_validate_partition_table(): Disk read failed. [ 110.290925][ T8140] Dev nbd0: unable to read RDB block 0 [ 110.295899][ T8140] nbd0: unable to read partition table [ 110.301887][ T8140] Mount JFS Failure: -5 [ 110.305556][ T5935] ldm_validate_partition_table(): Disk read failed. [ 110.308373][ T5935] Dev nbd0: unable to read RDB block 0 [ 110.313995][ T5935] nbd0: unable to read partition table [ 110.332536][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 110.339724][ T10] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.342625][ T1028] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 110.343830][ T10] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.350693][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 110.354750][ T10] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 110.358689][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.364857][ T10] usb 9-1: config 0 descriptor?? [ 110.374638][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 110.374655][ T40] audit: type=1400 audit(2000000010.160:544): avc: denied { bind } for pid=8748 comm="syz.3.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.375438][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'. [ 110.440858][ T40] audit: type=1400 audit(2000000010.220:545): avc: denied { lock } for pid=8750 comm="syz.3.781" path="socket:[25451]" dev="sockfs" ino=25451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 110.455641][ T8751] block device autoloading is deprecated and will be removed. [ 110.512265][ T1028] usb 7-1: Using ep0 maxpacket: 8 [ 110.528187][ T1028] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 110.531899][ T1028] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.543656][ T1028] pvrusb2: Hardware description: Terratec Grabster AV400 [ 110.552913][ T1028] pvrusb2: ********** [ 110.554735][ T1028] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 110.558106][ T1028] pvrusb2: Important functionality might not be entirely working. [ 110.560719][ T1028] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 110.565241][ T1028] pvrusb2: ********** [ 110.750586][ T2489] pvrusb2: Invalid write control endpoint [ 110.773472][ T10] hid_parser_main: 4096 callbacks suppressed [ 110.773493][ T10] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 110.777081][ T2489] pvrusb2: Invalid write control endpoint [ 110.780495][ T2489] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 110.785703][ T10] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 110.788461][ T10] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 110.788971][ T2489] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 110.791588][ T10] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 110.795145][ T2489] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 110.796865][ T87] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.798270][ T10] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 110.798454][ T5689] block nbd1: Connection timed out, retrying (0/3 alive) [ 110.798493][ T5689] block nbd1: Connection timed out, retrying (0/3 alive) [ 110.798516][ T5689] block nbd1: Connection timed out, retrying (0/3 alive) [ 110.798536][ T5689] block nbd1: Connection timed out, retrying (0/3 alive) [ 110.798578][ T5689] block nbd1: Dead connection, failed to find a fallback [ 110.799864][ T5689] block nbd1: shutting down sockets [ 110.800596][ T6186] ldm_validate_partition_table(): Disk read failed. [ 110.800953][ T6186] Dev nbd1: unable to read RDB block 0 [ 110.801390][ T6186] nbd1: unable to read partition table [ 110.803699][ T2489] pvrusb2: Device being rendered inoperable [ 110.807048][ T10] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 110.809700][ T2489] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 110.846761][ T6186] ldm_validate_partition_table(): Disk read failed. [ 110.850071][ T6186] Dev nbd1: unable to read RDB block 0 [ 110.852447][ T2489] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 110.856614][ T2489] pvrusb2: Attached sub-driver cx25840 [ 110.858987][ T2489] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 110.864230][ T2489] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 110.872671][ T6186] nbd1: unable to read partition table [ 110.947431][ T8746] pvrusb2: Attempted to execute control transfer when device not ok [ 110.952769][ T8769] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 110.963444][ T10] usb 7-1: USB disconnect, device number 17 [ 110.972811][ T8742] pvrusb2: Attempted to execute control transfer when device not ok [ 110.977384][ T1028] usb 9-1: USB disconnect, device number 11 [ 111.001517][ T87] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.008245][ T8773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.012658][ T8773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.104934][ T87] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.228688][ T87] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.492515][ T87] bond3 (unregistering): (slave erspan1): Releasing active interface [ 111.495751][ T87] erspan1 (unregistering): left promiscuous mode [ 111.535310][ T8794] input: syz0 as /devices/virtual/input/input10 [ 111.647861][ T87] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 111.657763][ T87] bond0 (unregistering): Released all slaves [ 111.665504][ T87] bond1 (unregistering): Released all slaves [ 111.676922][ T87] bond2 (unregistering): Released all slaves [ 111.688391][ T87] bond3 (unregistering): Released all slaves [ 111.701149][ T87] bond4 (unregistering): Released all slaves [ 111.725966][ T40] audit: type=1400 audit(2000000011.510:546): avc: denied { read } for pid=8813 comm="syz.4.793" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 111.740435][ T40] audit: type=1400 audit(2000000011.520:547): avc: denied { open } for pid=8813 comm="syz.4.793" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 111.970793][ T40] audit: type=1400 audit(2000000011.750:548): avc: denied { read } for pid=8832 comm="syz.2.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.082286][ T5662] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 112.124039][ T8842] binder: 8841:8842 ioctl c0306201 200000000c00 returned -14 [ 112.216820][ T8852] netlink: 104 bytes leftover after parsing attributes in process `syz.3.799'. [ 112.239052][ T87] hsr_slave_0: left promiscuous mode [ 112.247947][ T87] hsr_slave_1: left promiscuous mode [ 112.252325][ T5662] usb 9-1: Using ep0 maxpacket: 8 [ 112.255861][ T87] veth1_macvtap: left promiscuous mode [ 112.258198][ T87] veth0_macvtap: left promiscuous mode [ 112.260128][ T5662] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.260655][ T87] veth1_vlan: left promiscuous mode [ 112.264483][ T5662] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.268060][ T87] veth0_vlan: left promiscuous mode [ 112.269821][ T5662] usb 9-1: config 0 interface 0 has no altsetting 0 [ 112.274156][ T5662] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 112.277028][ T5662] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.282812][ T5662] usb 9-1: config 0 descriptor?? [ 112.312136][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.801'. [ 112.699798][ T5662] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 112.709907][ T5662] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 112.712624][ T5662] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 112.714903][ T5662] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 112.722767][ T5662] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 112.725537][ T5662] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 112.786461][ T40] audit: type=1400 audit(2000000012.570:549): avc: denied { setopt } for pid=8882 comm="syz.3.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 112.875402][ T8890] [U]  [ 112.877345][ T8890] [U] + [ 112.878707][ T8890] [U] $܁P~ƊQrAe`G-Rij笨mA)߀No4gV;uQ` [ 112.886838][ T8890] [U] Wg-u]}FyȘeƮ)>,>f}a&\msOHn'Ä=#$Ǧ&g C.,jP^{"Oiňo;pʪ6qwS_{CWfs+R~qu›ŸNn! [ 112.890709][ T39] usb 9-1: USB disconnect, device number 12 [ 112.894455][ T8890] [U] Zph5Laӝ8H [ 112.898377][ T8890] [U] V)*Gr [ 112.899958][ T8890] [U] g©MD9i^g[&TXd}y^#"Z&|JiYDX~reGiUMNkqGJcӔ0 r088D<U0P9=>ȪU[ƒuW9jl"hZG+EĖ#LY`z2 [ 112.907141][ T8890] [U] }{_S|j\ptژ1b-S4!{9C5->M [ 112.910276][ T8890] [U] UXBH,~nmIM/a [ 112.912836][ T8890] [U] VS6e^ SHk"(*:$}<^YD?rnHEX#X3Ys6 [ 112.916281][ T8890] [U] [ 112.921118][ T8890] [U] 71D%}7G\4'Kp7U,"^|-B g&@bWRY [ 112.925145][ T8890] [U] p~ [ 112.926587][ T8890] [U] hQVOK) ƵZ>uY`XԶޖQtBhvMdR/%F8`yǥY䦈Fؾx@-d֛ 0ʩz;D")tRgiL()d6"BnBf?ӛ,ѧ`'Lq 6t2t@F@p6v]t4NξyRΓvP':J۫ۆE*̣];M4TqB_5pM [ 112.959469][ T8890] [U] _mֱ9KU""^s6rP [ 112.961414][ T8890] [U] ¥U[m j0zOoF|:! /$@RH(Η1K@ǚ/w4|xJ3: [ 112.976734][ T8890] [U] V :p\U 5V"cd:nb3Ob,%ǯe j9>\rCˉiVE<\7;娍+ȏ"IƔ/6FNhgw~xcWö}H6TI؆6aA耹C1v]ba9xT [ 112.982743][ T8890] [U] I\xezW80ܚPfzqi^@O [ 112.984713][ T8890] [U] gڑ/P+ؒb=pYY1gJd!xKTa;PaoFlu 8:!VD G\zwi=)m)o!Җ>08jͻ*( sLQ@0KeVszKP?e/K MRlya?'EtU{R]ֈS$9Ou(ŀ~le/I8# a ?,#p;R{4Hw"X{\\ .KV2$Ēΐ܀6< [ 113.015189][ T8890] [U] q Oulv~-_8?O6$z«eAO_NO/C .byrˋ<[DxҿWWX [ 113.019128][ T8890] [U] ܲ|9$n`i(RǿDtA4o/̈́eV2Bln| :KYW&;l1; [ 113.021928][ T8890] [U] ;JO6P [ 113.025325][ T8908] netlink: 52 bytes leftover after parsing attributes in process `syz.3.808'. [ 113.115959][ T8922] bond3: entered promiscuous mode [ 113.117926][ T8922] 8021q: adding VLAN 0 to HW filter on device bond3 [ 113.158778][ T40] audit: type=1400 audit(2000000012.940:551): avc: denied { accept } for pid=8925 comm="syz.3.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.200717][ T40] audit: type=1400 audit(2000000012.980:552): avc: denied { mount } for pid=8933 comm="syz.3.813" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 113.208867][ T8934] max out of range [ 113.213636][ T40] audit: type=1400 audit(2000000013.000:553): avc: denied { remount } for pid=8933 comm="syz.3.813" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 113.277748][ T13] Bluetooth: hci3: Frame reassembly failed (-90) [ 113.416951][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.818'. [ 113.459394][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.818'. [ 113.800192][ T5290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.804986][ T5290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.806891][ T8986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.822'. [ 113.808353][ T5290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.816824][ T5290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.819574][ T5290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.837674][ T8987] Failed to initialize the IGMP autojoin socket (err -2) [ 113.918130][ T8983] overlayfs: unescaped trailing colons in lowerdir mount option. [ 113.983996][ T8990] netlink: 108 bytes leftover after parsing attributes in process `syz.3.821'. [ 114.312383][ T29] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 114.462532][ T29] usb 9-1: Using ep0 maxpacket: 8 [ 114.465421][ T29] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.468825][ T29] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.471910][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 114.479519][ T29] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 114.482500][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.487536][ T29] usb 9-1: config 0 descriptor?? [ 114.653375][ T9036] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 114.655494][ T9036] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 114.658618][ T9036] vhci_hcd vhci_hcd.0: Device attached [ 114.662101][ T9038] vhci_hcd: connection closed [ 114.663634][ T46] vhci_hcd vhci_hcd.3: stop threads [ 114.667542][ T46] vhci_hcd vhci_hcd.3: release socket [ 114.669669][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 114.897127][ T29] mcp2221 0003:04D8:00DD.000C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 115.096561][ T29] usb 9-1: USB disconnect, device number 13 [ 115.304632][ T29] hid-generic 0000:0002:0009.000D: item fetching failed at offset 7/15 [ 115.311126][ T29] hid-generic 0000:0002:0009.000D: probe with driver hid-generic failed with error -22 [ 115.342367][ T5290] Bluetooth: hci3: command 0x1003 tx timeout [ 115.343474][ T5938] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 115.356709][ T8889] [U] q1n#G4Y›rMnUf[Xi^='ډz;:Q7,E [ 115.647748][ T9086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9086 comm=syz.2.831 [ 115.651456][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9089 comm=syz.2.831 [ 115.657254][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9089 comm=syz.2.831 [ 115.661494][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9089 comm=syz.2.831 [ 115.666937][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9089 comm=syz.2.831 [ 115.671392][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9089 comm=syz.2.831 [ 115.675655][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9089 comm=syz.2.831 [ 115.679618][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9089 comm=syz.2.831 [ 115.683805][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9089 comm=syz.2.831 [ 115.687834][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9089 comm=syz.2.831 [ 115.747660][ T9095] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 115.751648][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 115.751657][ T40] audit: type=1400 audit(2000000015.530:562): avc: denied { create } for pid=9094 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.762306][ T40] audit: type=1400 audit(2000000015.540:563): avc: denied { bind } for pid=9094 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.783655][ T40] audit: type=1400 audit(2000000015.540:564): avc: denied { setopt } for pid=9094 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.792143][ T40] audit: type=1400 audit(2000000015.540:565): avc: denied { accept } for pid=9094 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.811549][ T40] audit: type=1400 audit(2000000015.540:566): avc: denied { write } for pid=9094 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.820132][ T40] audit: type=1400 audit(2000000015.540:567): avc: denied { read } for pid=9094 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.902675][ T5938] Bluetooth: hci4: command tx timeout [ 116.082435][ T9121] 9pnet_virtio: no channels available for device syz [ 116.144043][ T9125] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.148969][ T9125] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.153283][ T9125] netlink: 32 bytes leftover after parsing attributes in process `syz.3.837'. [ 116.289107][ T9134] program syz.2.838 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.292698][ T9134] ata1.00: invalid command format 0 [ 116.293956][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.839'. [ 116.387149][ T9146] netlink: 52 bytes leftover after parsing attributes in process `syz.3.841'. [ 116.399155][ T9146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.406057][ T9146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.412543][ T40] audit: type=1326 audit(2000000016.190:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.2.842" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4cb9c799 code=0x50000 [ 116.425134][ T40] audit: type=1326 audit(2000000016.190:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.2.842" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4cb9c799 code=0x50000 [ 116.434800][ T40] audit: type=1326 audit(2000000016.190:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.2.842" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4cb9c799 code=0x50000 [ 116.441802][ T40] audit: type=1326 audit(2000000016.190:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.2.842" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4cb9c799 code=0x50000 [ 117.039332][ T9178] openvswitch: netlink: EtherType 50a is less than min 600 [ 117.060766][ T9178] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 117.272527][ T9196] netlink: 40 bytes leftover after parsing attributes in process `syz.4.848'. [ 117.550487][ T9224] FAT-fs (sr0): bogus number of reserved sectors [ 117.552913][ T9224] FAT-fs (sr0): Can't find a valid FAT filesystem [ 117.671421][ T9236] tipc: Enabled bearer , priority 0 [ 117.686899][ T9242] tipc: Disabling bearer [ 117.829497][ T9254] fuse: Unknown parameter '' [ 117.933616][ T8987] netdevsim netdevsim5 netdevsim0: renamed from eth10 [ 117.946785][ T8987] netdevsim netdevsim5 netdevsim1: renamed from eth11 [ 117.970056][ T8987] netdevsim netdevsim5 netdevsim2: renamed from eth12 [ 117.978304][ T8987] netdevsim netdevsim5 netdevsim3: renamed from eth13 [ 117.982283][ T5938] Bluetooth: hci4: command tx timeout [ 118.305116][ T9300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.311123][ T9300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.444828][ T8987] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 118.459378][ T8987] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 118.491476][ T8987] wireguard: wg0: Could not create IPv4 socket [ 118.496288][ T8987] wireguard: wg1: Could not create IPv4 socket [ 118.501080][ T8987] wireguard: wg2: Could not create IPv4 socket [ 119.319716][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 119.324229][ T9361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.875'. [ 119.328020][ T9361] netlink: 'syz.4.875': attribute type 7 has an invalid length. [ 119.593741][ T9381] sp0: Synchronizing with TNC [ 119.595779][ T9380] [U] [ 119.707863][ T9392] netlink: 'syz.2.880': attribute type 8 has an invalid length. [ 119.833753][ T9408] CIFS: iocharset name too long [ 120.058006][ T9434] overlayfs: failed to resolve './file0': -2 [ 120.060659][ T9431] netlink: 'syz.4.888': attribute type 11 has an invalid length. [ 120.068150][ T9431] netlink: 44 bytes leftover after parsing attributes in process `syz.4.888'. [ 120.103681][ T9439] input: syz0 as /devices/virtual/input/input13 [ 120.214204][ T9427] syz.4.888 (9427): drop_caches: 2 [ 120.253255][ T9450] netlink: 76 bytes leftover after parsing attributes in process `syz.2.892'. [ 120.554370][ T9480] netlink: 'syz.4.900': attribute type 12 has an invalid length. [ 120.557703][ T9480] netlink: 'syz.4.900': attribute type 29 has an invalid length. [ 120.561014][ T9480] netlink: 148 bytes leftover after parsing attributes in process `syz.4.900'. [ 120.565458][ T9480] netlink: 59 bytes leftover after parsing attributes in process `syz.4.900'. [ 120.572554][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.900'. [ 120.575646][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.900'. [ 120.882682][ T9498] netlink: 84 bytes leftover after parsing attributes in process `syz.4.902'. [ 120.889781][ T9498] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 121.086681][ T9512] netlink: 'syz.4.906': attribute type 21 has an invalid length. [ 121.214046][ T9520] syzkaller0: entered promiscuous mode [ 121.215689][ T9520] syzkaller0: entered allmulticast mode [ 122.528985][ T9578] tmpfs: Bad value for 'mpol' [ 122.659099][ T9592] __nla_validate_parse: 5 callbacks suppressed [ 122.659114][ T9592] netlink: 32 bytes leftover after parsing attributes in process `syz.2.920'. [ 122.665471][ T9590] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.919' resets device [ 122.696588][ T9595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.921'. [ 122.734851][ T40] kauditd_printk_skb: 23006 callbacks suppressed [ 122.734868][ T40] audit: type=1400 audit(2000000022.520:23578): avc: denied { write } for pid=9594 comm="syz.3.922" name="cpuset.effective_cpus" dev="9p" ino=73662631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.830311][ T9602] ------------[ cut here ]------------ [ 122.833318][ T9602] kernel BUG at fs/netfs/iterator.c:248! [ 122.835885][ T9602] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 122.839732][ T9602] CPU: 0 UID: 0 PID: 9602 Comm: syz.3.922 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.844907][ T9602] Tainted: [L]=SOFTLOCKUP [ 122.846986][ T9602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.852260][ T9602] RIP: 0010:netfs_limit_iter+0x100d/0x1100 [ 122.854744][ T9602] Code: ff e9 a4 f4 ff ff 48 89 de 48 c7 c7 e0 c5 ab 8e e8 e8 09 74 fe e9 59 f6 ff ff e8 3e e7 b1 ff e9 6f f6 ff ff e8 f4 58 45 ff 90 <0f> 0b e8 9c e6 b1 ff e9 cd f9 ff ff 4c 89 f6 48 c7 c7 60 c6 ab 8e [ 122.862233][ T9602] RSP: 0018:ffffc90003806d18 EFLAGS: 00010293 [ 122.864646][ T9602] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff82c3791b [ 122.868147][ T9602] RDX: ffff8880328124c0 RSI: ffffffff82c3884c RDI: ffff8880328124c0 [ 122.871321][ T9602] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000005 [ 122.874585][ T9602] R10: 0000000000000003 R11: 0000000000000000 R12: 000000007fffffff [ 122.877801][ T9602] R13: 1ffff92000700da9 R14: ffff8880228fbe60 R15: ffff8880412652c0 [ 122.881113][ T9602] FS: 00007f7fce13e6c0(0000) GS:ffff8880d633f000(0000) knlGS:0000000000000000 [ 122.884039][ T9602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.886363][ T9602] CR2: ffffffffffffff60 CR3: 000000005474b000 CR4: 0000000000352ef0 [ 122.889086][ T9602] Call Trace: [ 122.890174][ T9602] [ 122.891185][ T9602] ? do_raw_spin_lock+0x128/0x260 [ 122.892932][ T9602] ? find_held_lock+0x2b/0x80 [ 122.894585][ T9602] ? __pfx_netfs_limit_iter+0x10/0x10 [ 122.896467][ T9602] ? do_raw_spin_unlock+0x145/0x1e0 [ 122.898294][ T9602] ? _raw_spin_unlock+0x28/0x50 [ 122.900067][ T9602] ? netfs_prepare_write+0x486/0x7a0 [ 122.902153][ T9602] netfs_unbuffered_write+0x25d/0x2080 [ 122.903962][ T9602] netfs_unbuffered_write_iter_locked+0x801/0xab0 [ 122.906018][ T9602] netfs_unbuffered_write_iter+0x40c/0x710 [ 122.907968][ T9602] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 122.909848][ T9602] v9fs_file_write_iter+0xbf/0x100 [ 122.911718][ T9602] __kernel_write_iter+0x2ac/0x920 [ 122.913565][ T9602] ? __pfx___kernel_write_iter+0x10/0x10 [ 122.915576][ T9602] ? kasan_save_stack+0x3f/0x50 [ 122.917206][ T9602] ? kasan_save_stack+0x30/0x50 [ 122.919022][ T9602] ? irqentry_exit+0x1f8/0x670 [ 122.920794][ T9602] ? asm_exc_page_fault+0x26/0x30 [ 122.922659][ T9602] __kernel_write+0xf6/0x140 [ 122.924425][ T9602] ? __pfx___kernel_write+0x10/0x10 [ 122.926407][ T9602] dump_emit+0x21f/0x330 [ 122.927948][ T9602] ? __pfx_dump_emit+0x10/0x10 [ 122.929805][ T9602] elf_core_dump+0x2127/0x3d10 [ 122.931805][ T9602] ? __pfx_elf_core_dump+0x10/0x10 [ 122.933691][ T9602] ? kasan_save_stack+0x3f/0x50 [ 122.935333][ T9602] ? kasan_save_stack+0x30/0x50 [ 122.936859][ T9602] ? __kasan_kmalloc+0xaa/0xb0 [ 122.938354][ T9602] ? __kvmalloc_node_noprof+0x360/0xa00 [ 122.940452][ T9602] ? vfs_coredump+0x2105/0x5570 [ 122.942063][ T9602] ? asm_exc_page_fault+0x26/0x30 [ 122.943724][ T9602] ? vfs_coredump+0x27bc/0x5570 [ 122.945279][ T9602] vfs_coredump+0x27bc/0x5570 [ 122.946929][ T9602] ? __pfx_vfs_coredump+0x10/0x10 [ 122.948622][ T9602] ? __lock_acquire+0x4a5/0x2630 [ 122.950354][ T9602] ? lock_acquire+0x1cf/0x380 [ 122.951993][ T9602] ? is_bpf_text_address+0x8a/0x1a0 [ 122.953792][ T9602] ? bpf_ksym_find+0x128/0x1c0 [ 122.955362][ T9602] ? __kernel_text_address+0xd/0x30 [ 122.957207][ T9602] ? unwind_get_return_address+0x59/0xa0 [ 122.959599][ T9602] ? arch_stack_walk+0xa6/0xf0 [ 122.961627][ T9602] ? __sigqueue_free+0xbe/0x2a0 [ 122.963885][ T9602] ? stack_trace_save+0x8e/0xc0 [ 122.966121][ T9602] ? __pfx_stack_trace_save+0x10/0x10 [ 122.968660][ T9602] ? stack_depot_save_flags+0x27/0x9d0 [ 122.971004][ T9602] ? __lock_acquire+0x4a5/0x2630 [ 122.973137][ T9602] ? proc_coredump_connector+0x2d3/0x4f0 [ 122.975536][ T9602] ? __pfx_proc_coredump_connector+0x10/0x10 [ 122.978208][ T9602] ? rcu_is_watching+0x12/0xc0 [ 122.980214][ T9602] get_signal+0x1f2a/0x21e0 [ 122.982197][ T9602] ? __pfx_get_signal+0x10/0x10 [ 122.983828][ T9602] ? force_sig_fault+0xc3/0x100 [ 122.985388][ T9602] arch_do_signal_or_restart+0x91/0x7a0 [ 122.987191][ T9602] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 122.989389][ T9602] ? __bad_area_nosemaphore+0x320/0x3f0 [ 122.991217][ T9602] irqentry_exit+0x1f8/0x670 [ 122.992717][ T9602] asm_exc_page_fault+0x26/0x30 [ 122.994342][ T9602] RIP: 0033:0x7f7fcd19c7a1 [ 122.995798][ T9602] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 123.002022][ T9602] RSP: 002b:ffffffffffffff60 EFLAGS: 00010217 [ 123.003951][ T9602] RAX: 0000000000000000 RBX: 00007f7fcd415fa0 RCX: 00007f7fcd19c799 [ 123.006509][ T9602] RDX: 0000000000000000 RSI: ffffffffffffff60 RDI: 000000000d006291 [ 123.009307][ T9602] RBP: 00007f7fcd232c99 R08: 0000000000000000 R09: 0000000000000000 [ 123.011852][ T9602] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 123.014312][ T9602] R13: 00007f7fcd416038 R14: 00007f7fcd415fa0 R15: 00007ffc419d7ab8 [ 123.016817][ T9602] [ 123.017836][ T9602] Modules linked in: [ 123.019451][ T9602] ---[ end trace 0000000000000000 ]--- [ 123.025892][ T9602] RIP: 0010:netfs_limit_iter+0x100d/0x1100 [ 123.027807][ T9602] Code: ff e9 a4 f4 ff ff 48 89 de 48 c7 c7 e0 c5 ab 8e e8 e8 09 74 fe e9 59 f6 ff ff e8 3e e7 b1 ff e9 6f f6 ff ff e8 f4 58 45 ff 90 <0f> 0b e8 9c e6 b1 ff e9 cd f9 ff ff 4c 89 f6 48 c7 c7 60 c6 ab 8e [ 123.034033][ T9602] RSP: 0018:ffffc90003806d18 EFLAGS: 00010293 [ 123.036054][ T9602] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff82c3791b [ 123.041774][ T9602] RDX: ffff8880328124c0 RSI: ffffffff82c3884c RDI: ffff8880328124c0 [ 123.046478][ T9602] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000005 [ 123.049033][ T9602] R10: 0000000000000003 R11: 0000000000000000 R12: 000000007fffffff [ 123.051608][ T9602] R13: 1ffff92000700da9 R14: ffff8880228fbe60 R15: ffff8880412652c0 [ 123.060729][ T9602] FS: 00007f7fce13e6c0(0000) GS:ffff8880d643f000(0000) knlGS:0000000000000000 [ 123.063951][ T9602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.066330][ T9602] CR2: 00007fab4add4ff8 CR3: 000000005474b000 CR4: 0000000000352ef0 [ 123.068858][ T9602] Kernel panic - not syncing: Fatal exception [ 123.071493][ T9602] Kernel Offset: disabled [ 123.072921][ T9602] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:35:56 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857a4435 RDI=ffffffff9b4a6b40 RBP=ffffffff9b4a6b00 RSP=ffffc90003806678 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=0000000000000031 R14=0000000000000010 R15=ffffffff857a43d0 RIP=ffffffff857a445f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7fce13e6c0 ffffffff 00c00000 GS =0000 ffff8880d633f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffffffffffffff60 CR3=000000005474b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc419d7fa6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc419d7fa6 00007ffc419d7fac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7fcd23327c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7fcd2332bc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7fcd233420 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7fcd2332ae ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90006700000 RBX=ffff88802b08c000 RCX=ffffffff81e8eafb RDX=1ffff11005611a6a RSI=ffffffff86c85acf RDI=0000000000000016 RBP=0000000000000083 RSP=ffffc900006a0ec0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffffc900006a0ff8 R12=ffffffff90d9aa20 R13=dffffc0000000000 R14=ffff88802b08d350 R15=0000000000000000 RIP=ffffffff86c85af7 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f49c07bd300 ffffffff 00c00000 GS =0000 ffff8880d643f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fab4d94da08 CR3=000000002a7f7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 039c000000020000 0008000400080010 00080000000c0200 0000000000080008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0014010000000000 000800080007000c 00080000000c0000 0194000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 039c000000200000 0002000000100008 0000000000000004 000c001a00100000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03e6000000080004 0000000800080000 0014000000280000 003c000000500000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0064000000780000 008c000000a00000 00b4000000c80000 00e8000001080000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c000000000000 0000000000000000 00e30000000002dc 6c00000000180000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00200000000e0014 000c000000080004 0020000e00000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000039d 0000000200000008 0004000800100008 0000000c02000000 ZMM25=fb5db28cfb5db28c fb5db28cfb5db28c fb5db28cfb5db28c fb5db28cfb5db28c fb5db28cfb5db28c fb5db28cfb5db28c fb5db28cfb5db28c fb5db28cfb5db28c ZMM26=c96db974c96db974 c96db974c96db974 c96db974c96db974 c96db974c96db974 c96db974c96db974 c96db974c96db974 c96db974c96db974 c96db974c96db974 ZMM27=cd6059b1cd6059b1 cd6059b1cd6059b1 cd6059b1cd6059b1 cd6059b1cd6059b1 cd6059b1cd6059b1 cd6059b1cd6059b1 cd6059b1cd6059b1 cd6059b1cd6059b1 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=fc040000fc040000 fc040000fc040000 fc040000fc040000 fc040000fc040000 fc040000fc040000 fc040000fc040000 fc040000fc040000 fc040000fc040000 info registers vcpu 2 CPU#2 RAX=ffffffff916ec4d2 RBX=ffffffff90eb4c60 RCX=dffffc0000000000 RDX=1ffffffff21d698c RSI=0000000000000000 RDI=ffffffff90eb4c20 RBP=ffffffff90eb4c20 RSP=ffffc90004297270 R8 =ffffffff916ec59e R9 =0000000000000000 R10=ffffc90004297320 R11=0000000000000001 R12=ffffffff90eb4ca4 R13=ffffffff8100012f R14=ffffffff90eb4c20 R15=ffffffff90eb4c20 RIP=ffffffff81b817d0 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe536742880 ffffffff 00c00000 GS =0000 ffff8880d653f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fab4cd1d008 CR3=000000003a670000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040008000 Opmask01=0000000000000001 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055abf98ad810 000055abf98ad810 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055abf98ad800 000055abf98ad800 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055abf98ad7f0 000055abf98ad7f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73730c9645e2f833 73730c9645e2f833 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737342 737326d88af85673 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d305b705d392d00 5d392d305b746f6f 625d392d305b6b6c 62630064696b6c62 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d105b505d190d00 5d190d105b544f4f 425d190d105b4b4c 42430044494b4c42 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a72737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a 000055abd16c8cdc 0000000000000000 0000000000000075 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a5f393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33515f4350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000000 RBX=0000000000000031 RCX=ffffffff84f57b21 RDX=ffff888034614980 RSI=ffffffff84f57b2c RDI=ffff888034614980 RBP=00007fff3c7e8aa0 RSP=ffffc90003187b88 R8 =0000000000000006 R9 =00007fff3c7e8ad1 R10=00007ffffffff000 R11=0000000000000000 R12=0000000000000004 R13=00007fff3c7e8ad1 R14=0000000000000040 R15=ffffc90003187d98 RIP=ffffffff8208e179 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3fa8d1f780 ffffffff 00c00000 GS =0000 ffff8880d663f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055ded14d3038 CR3=0000000026887000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fdc10000 Opmask01=0000000000000007 Opmask02=00000000d511000f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fe6fb82aae80adf9 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4ec382484583d4d0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3fa8ef3b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73754d790be1b5df a6217d5282654e3c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 058e41e60e4b56f8 06e19c5cff0ced7c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373616c632f7379 732f000073656972 61646e6f6365735f 65746f6d6f72702f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 56564449460a565c 560a000056404c57 44414b4a4640565f 40514a484a57550a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3701013563538263 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5531010001007fff 9211ff133dd00502 39773b3a3633211c 1a0f0c060379010e ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff 0101910101740050 256d02a31e3e3325 5531010001007fff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9211ff133dd00502 39773b3a3633211c 1a0f0c060379010e 3701013563538263 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000