last executing test programs: 1m28.390629831s ago: executing program 2 (id=146): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@newtaction={0x94, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x80, 0x1, [@m_bpf={0x4c, 0x201, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xfffffffffffffe3c}, {0x4}, {0x4, 0x6, "759cf3b53ae5b3118aad0a"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000b00)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x38, 0x0, &(0x7f0000000a00)=[@acquire, @request_death, @free_buffer, @register_looper, @clear_death], 0x0, 0x0, 0x0}) ioctl$SNDCTL_TMR_TEMPO(r6, 0xc0045405, &(0x7f0000000000)=0xfe) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0xd) set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000080)=0xfffffffb) write$evdev(r7, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 1m28.321922352s ago: executing program 2 (id=150): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x67, "8f1c7c622c55182cf6ebd5a87b9bea3bd5ccb17e43a50a25f727c85959eeecb146017e5ff098859f9dd21788303c4192450f35174e54c824c1f8d5535107946f3c54200ce8b34db126cff1ea944b72a7432ea11a7c68e1a81f57a1306de83b94b0493d89d7ee98"}, &(0x7f0000000080)=0x6f) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r1, 0x4) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r1, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={r1, 0x7, 0x10, 0x6, 0x5}, &(0x7f00000001c0)=0x18) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r3, &(0x7f0000001880)={&(0x7f0000000200), 0xc, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/242, 0xf2}, {&(0x7f0000000340)=""/123, 0x7b}, {&(0x7f00000003c0)=""/45, 0x2d}, {&(0x7f0000000400)=""/155, 0x9b}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001540)=[{0x60, 0x0, 0x0, ""/78}, {0xd8, 0x0, 0x0, ""/198}, {0xb8, 0x0, 0x0, ""/168}, {0x28, 0x0, 0x0, ""/19}, {0x98, 0x0, 0x0, ""/132}, {0x90, 0x0, 0x0, ""/125}], 0x340, 0x10022}, 0x38, 0x40010122) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000018c0)={r1, 0xffff, 0x21, "46c6aaad959632dd8bf3fb52a94eaf70a66c6711dbe49bbc28966adc6c59c10247"}, 0x29) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001900)=0x0) prlimit64(r4, 0xf, &(0x7f0000001940)={0xfffffffffffffffc, 0x8}, &(0x7f0000001980)) readv(r0, &(0x7f0000001ec0)=[{&(0x7f00000019c0)=""/193, 0xc1}, {&(0x7f0000001ac0)=""/82, 0x52}, {&(0x7f0000001b40)=""/109, 0x6d}, {&(0x7f0000001bc0)=""/102, 0x66}, {&(0x7f0000001c40)=""/120, 0x78}, {&(0x7f0000001cc0)=""/47, 0x2f}, {&(0x7f0000001d00)=""/168, 0xa8}, {&(0x7f0000001dc0)=""/63, 0x3f}, {&(0x7f0000001e00)=""/90, 0x5a}, {&(0x7f0000001e80)=""/54, 0x36}], 0xa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001f80), 0x2000, 0x0) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000001fc0)=0x9) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000002000)={0xff}, 0x1) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002040), 0x60202, 0x0) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000002080), 0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000020c0)={r2, 0x2be}, 0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000002100)={r2, 0x77, "0fc9325bb67493700fbd52408b6d544142f9dddfaa3b940badbd5b0210e2d5148225794dd36e94b5df50b5c93ea7e5e33d15ac300ecf580726854468a079f01aeb9b3f42a809fe9a86924dc165cc047f2720e48160a66d37a72c61fb531ae9b6eeaf20c3dfbb3e57446b5ce4365b83a57782bcffdf5152"}, &(0x7f0000002180)=0x7f) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f00000021c0)) ioctl$BLKPBSZGET(r6, 0x127b, &(0x7f0000002200)) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000002280)={0x1, &(0x7f0000002240)=[{0x0, 0x5, 0xfd, 0x400}]}, 0x10) getsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000022c0), &(0x7f0000002300)=0xe) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000002340), 0x115000, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000002380)={'wg2\x00', @local}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r10, 0x84, 0xc, &(0x7f00000023c0)=0x3, 0x4) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) 1m28.321645144s ago: executing program 2 (id=151): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) (async) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r2, &(0x7f0000000040)="3f031c000302140006001e00890000004a1b7880610cc945000088a800008100000081000000", 0x26, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r3, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) (async) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) (async) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) (async) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r1}) close(r1) ioctl$SIOCRSSL2CALL(r5, 0x89e2, &(0x7f0000000380)=@bcast) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) (async) shutdown(r0, 0x0) r6 = open$dir(&(0x7f0000000040)='./file0\x00', 0x4000, 0x90) fcntl$getflags(r6, 0x3) 1m28.261713121s ago: executing program 2 (id=152): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e501000001001f00000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="0100fe0f0a01010200000000000000000000000086dd0000"], 0x38}}, 0x0) r5 = syz_io_uring_setup(0x231c, &(0x7f00000002c0)={0x0, 0x4048, 0x400, 0x3, 0x240}, &(0x7f0000000140), &(0x7f0000000200)) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$sock_linger(r6, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r6, &(0x7f00000072c0)=[{{&(0x7f0000000280)=@xdp={0x2c, 0x6, r7, 0x34}, 0x80, 0x0, 0x0, &(0x7f0000002800)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x30}}], 0x1, 0x8840) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) 1m28.260402344s ago: executing program 2 (id=154): r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) (rerun: 32) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='\\\x00', &(0x7f0000000080)='./file0\x00', r1) (async, rerun: 64) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0)=0x0) (async, rerun: 64) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"dc24fb4cd6301073ba9d36a91e82dce9", r2, r3, {0x5, 0x8}, {0x7, 0x152b5074}, 0x1c, [0x80, 0xa000, 0xffffffffffffff7f, 0x6, 0xffffffffffffffff, 0xe41, 0x8, 0x3, 0xa, 0x100000000, 0x371, 0x8, 0x5, 0x2, 0x1]}) (async) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x24001, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x212002, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000300)={0x7a8, 0xffffff84, 0x2, {0x3, @vbi={0x5, 0x3, 0xffffffff, 0x4f565559, [0x1, 0xfff], [0x1, 0x3], 0x108}}, 0x4}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1) sendmsg$DEVLINK_CMD_SB_GET(r6, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x84, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4c}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$FIOCLEX(r8, 0x5451) mount$afs(&(0x7f00000005c0)=@cell={0x25, 'syz1:', 'syz0', '.readonly'}, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x80, &(0x7f0000000680)={[{@flock_strict}, {@flock_openafs}, {@flock_local}, {}, {@flock_write}, {@dyn}], [{@flag='async'}, {@measure}]}) (async) ioctl$VT_RELDISP(r1, 0x5605) (async) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000700)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000740)) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) getsockname(r9, &(0x7f00000007c0)=@ethernet, &(0x7f0000000840)=0x80) (async) r10 = eventfd2(0x5, 0x80801) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000880)=r10, 0x1) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f00000008c0)='afs\x00', &(0x7f0000000900)='./file0\x00', 0xffffffffffffffff) r11 = dup(r9) (async, rerun: 32) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e) (rerun: 32) ioctl$KVM_CAP_X2APIC_API(r12, 0x4068aea3, &(0x7f0000000940)) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), r5) (async) ioctl$TIOCGSID(r11, 0x5429, &(0x7f0000000a00)) (async, rerun: 32) ioctl$RFKILL_IOC_MAX_SIZE(r11, 0x2, &(0x7f0000000a40)=0x5) (async, rerun: 32) ioctl$F2FS_IOC_DECOMPRESS_FILE(r10, 0xf517, 0x0) 1m28.21132166s ago: executing program 2 (id=156): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0xffffffffffffff81, 0x40) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000200)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000380)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003000000020fc0290780000001ce00003000306907800fa000945f4fff600650005018900030a010102ac1414aa949dd6737f584635a841ade4b97b7ae8e5dada2dda258db2f0f17542af8db8eb8ead9b960e3048d96e562df5c2f4eceab483352941c341220e259d2cf78717f8cb943ad94dbaa6989dd73c9581a43aa5a6caffd31e4e5ea2b0bc225b3f374bfb98125f6f1c47d61c0118cec16888db301dc67ed3a4aa6307302dbb73cacff29ec055a9ecfd0a3ace09c7f6fc36b2f42f672916aaaac87881f00ed89517ff07b7"], 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x4, 0x2, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2e}, @multicast2}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x4, 0x83, 0x58df}) r6 = socket$inet6(0xa, 0xb, 0x7) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000540)={{r6}, "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"}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r9 = dup(r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000020017000000090006"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) write$FUSE_BMAP(r9, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="2c004c03a80f94a365390c78ecb60aa6b9a1df74b3d206d380763775574b43d3e3"]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') socket$inet6_udp(0xa, 0x2, 0x0) 1m24.31096031s ago: executing program 0 (id=224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000007c0)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'erspan0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x780f, 0x80, 0x0, 0xb41c, {{0x4a, 0x4, 0x0, 0x38, 0x128, 0x64, 0x0, 0x9c, 0x2f, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x4c, 0x23, 0x1, 0x2, [{@rand_addr=0x64010101, 0x8}, {@multicast1, 0xc0}, {@multicast1, 0xf}, {@loopback, 0xc1ac}, {@loopback, 0x4}, {@loopback, 0x40}, {@rand_addr=0x64010100, 0x8000}, {@loopback, 0x800}, {@remote, 0x6}]}, @timestamp_prespec={0x44, 0x24, 0x14, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1b}}, {@multicast1, 0x8001}]}, @lsrr={0x83, 0x13, 0xf2, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp={0x44, 0x2c, 0x19, 0x0, 0x7, [0x200, 0xff000, 0x5, 0x7f, 0x0, 0xe, 0x6, 0x0, 0x140, 0x1]}, @noop, @cipso={0x86, 0x61, 0x2, [{0x7, 0x6, "fd1d8ada"}, {0x7, 0x6, "47c0bc66"}, {0x5, 0x8, "7e3c1237ed96"}, {0x6, 0xf, "9a7dafa98406fd0c903c9aed24"}, {0x0, 0xa, "b7fb80f7a2effd4c"}, {0x7, 0x11, "148c9a5678c0882d0a8433ed469de7"}, {0x5, 0x12, "231e2cd6287e631d8b7d900e6d9e2ef3"}, {0x7, 0xb, "836850889a4eff1853"}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0}, &(0x7f00000008c0)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000004c0), 0xc, &(0x7f0000000900)={&(0x7f0000000b00)={0x100, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r11, 0x10e, 0x4, &(0x7f0000000480)=0x4000007, 0x4) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40820, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0) (async, rerun: 64) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13], 0x90}}, 0x0) (async) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@newtaction={0x18, 0x31, 0x3d, 0x500, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async, rerun: 64) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 1m24.241817443s ago: executing program 0 (id=225): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x5f, 0x81, 0x7fff}) r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000140)={0x11, 0x3, 0x0, 0x1, 0xfe, 0x6, @local}, 0x14) llistxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 1m24.23992246s ago: executing program 0 (id=226): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0c"], 0x22) (rerun: 64) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000ac0)=""/62, 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000007c0)=""/196, 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1}}], 0x4, 0x400122a0, 0x0) (async, rerun: 32) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async, rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd3, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 1m24.161352587s ago: executing program 0 (id=227): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a01034b7ca83482d099810a0000010900020073797a31000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x44}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8f}, 0x440c8) r3 = socket$inet6(0xa, 0x3, 0x8) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) read(r3, &(0x7f00000000c0)=""/201, 0xc9) sendmmsg$inet6(r3, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0xe}}], 0x1, 0x0) 1m24.070672773s ago: executing program 0 (id=228): r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x40280, 0xb8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x1ff001, 0x81, 0x7f, 0x24842, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)=0x8000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f00000004c0)=""/187, 0x0, 0x0, 0xc16, r1}, 0x38) 1m24.068915218s ago: executing program 0 (id=229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1m12.565266026s ago: executing program 32 (id=156): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0xffffffffffffff81, 0x40) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000200)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000380)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003000000020fc0290780000001ce00003000306907800fa000945f4fff600650005018900030a010102ac1414aa949dd6737f584635a841ade4b97b7ae8e5dada2dda258db2f0f17542af8db8eb8ead9b960e3048d96e562df5c2f4eceab483352941c341220e259d2cf78717f8cb943ad94dbaa6989dd73c9581a43aa5a6caffd31e4e5ea2b0bc225b3f374bfb98125f6f1c47d61c0118cec16888db301dc67ed3a4aa6307302dbb73cacff29ec055a9ecfd0a3ace09c7f6fc36b2f42f672916aaaac87881f00ed89517ff07b7"], 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x4, 0x2, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2e}, @multicast2}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x4, 0x83, 0x58df}) r6 = socket$inet6(0xa, 0xb, 0x7) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000540)={{r6}, "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"}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r9 = dup(r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000020017000000090006"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) write$FUSE_BMAP(r9, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="2c004c03a80f94a365390c78ecb60aa6b9a1df74b3d206d380763775574b43d3e3"]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') socket$inet6_udp(0xa, 0x2, 0x0) 1m8.989364133s ago: executing program 33 (id=229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 3.838887139s ago: executing program 5 (id=1407): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ipv6={@mcast2, @empty, [0xffffff00, 0xffffffff], [0xff000000, 0xf85145d5c5b3eb8c, 0xffffff00], 'dummy0\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x3a, 0x7f, 0x4, 0x62}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@mh={{0x28}, {'VR'}}, @common=@mh={{0x28}, {"97d0", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xffffffff, 0x800, 0x7}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff], [0xff, 0xff000000, 0x0, 0xff], 'bond_slave_0\x00', 'veth1\x00', {0xff}, {}, 0x32, 0x5a, 0x0, 0x8}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x4}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe, 0x7a6}}}, {{@ipv6={@mcast2, @local, [0x0, 0xff000000, 0xffffffff], [0xffffff00, 0xff, 0xff, 0xff], 'pim6reg0\x00', 'caif0\x00', {0xff}, {0xff}, 0x2b, 0x9, 0x7, 0x2}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x76a, 0x5], 0xfffffe01, 0x9}}, @common=@dst={{0x48}, {0x5, 0x1, 0x0, [0xb2, 0x9, 0x5, 0xe, 0x1, 0x8000, 0x1, 0x5, 0x9, 0x2, 0x8, 0x2, 0x74, 0x4, 0x9461, 0x4], 0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x3, 0x1}, {0x1, 0x0, 0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="d8", 0x1, r1) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0xfffffffffffffa95, 0x12) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r4, 0xa) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mkdirat$cgroup(r2, &(0x7f0000000740)='syz1\x00', 0x1ff) 3.770300152s ago: executing program 5 (id=1409): mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) getdents64(r0, 0x0, 0x11) 3.698938258s ago: executing program 5 (id=1411): setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000000)=0x2) (async) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) (async) r1 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x80, 0x800) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'caif0\x00'}) close(r0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$CDROM_NEXT_WRITABLE(r2, 0x5394, &(0x7f0000000200)) (async) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000280)=@req={0x28, &(0x7f0000000240)={'xfrm0\x00', @ifru_map={0x8, 0x2, 0x0, 0xd, 0x3, 0x7}}}) (async) fallocate(r1, 0x20, 0x8, 0x1f38) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x40010, r1, 0x18e2f000) (async) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x6, &(0x7f0000000300)=0x2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) bind$nfc_llcp(r1, &(0x7f0000000380)={0x27, r3, 0xffffffffffffffff, 0x5, 0x2, 0x7, "8e20af466cbff0066a176146e94966c1f054203c4917ca6b3ad4270f9f45893f84609be88118c9616c827e6e0e120ff858e26bf6bd7d9098384302aedd826a", 0x24}, 0x60) (async) r4 = accept4$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14, 0x800) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000000480)=0xb, 0x4) (async) syz_io_uring_setup(0x68c8, &(0x7f00000004c0)={0x0, 0x7909, 0x8, 0x0, 0x126}, &(0x7f0000000540)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x10c, &(0x7f00000005c0)=0x9, 0x0, 0x4) (async) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r6, 0xc06855c8, &(0x7f0000000640)={0x2, 0x3, {0x52, 0x8001, 0x1ff, {0x1000, 0x81}, {0x101, 0x3}, @ramp={0xff7f, 0x1, {0x80, 0x5, 0x3, 0x8d}}}, {0x55, 0x3, 0x80, {0x8, 0x2}, {0x5, 0x2}, @const={0x6, {0x1ff, 0x4dcc, 0x1ff, 0x6}}}}) (async) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0xe, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x600000d0) (async) r7 = memfd_secret(0x80000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r7) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b00)={&(0x7f0000000840)={0x1298, r8, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x83e9, 0x77}}}}, [@NL80211_ATTR_TX_RATES={0xc0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x5, 0x60, 0x3, 0x5, 0x30, 0x36, 0x12]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x60, 0x48, 0x9, 0x18, 0xc, 0x34]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x3, 0xc, 0x9, 0x48, 0x6c, 0x6c, 0x36, 0x36, 0x4, 0x30, 0x12, 0x1b, 0x5, 0x0, 0x2, 0x5, 0x48, 0x3, 0xc, 0x16, 0x1, 0x4, 0x0, 0x30, 0x1, 0x3, 0x60, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x1, 0x8000, 0xcc, 0xffff, 0xa, 0x8, 0xc15a]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x3, 0x7, 0x9, 0x7ff, 0x6, 0x3ff, 0x661a]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1800, 0x5, 0x200, 0x5, 0x3, 0x8000, 0x4, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x0, 0x2a2, 0xffff, 0x40, 0x4, 0x19]}}]}]}, @NL80211_ATTR_TX_RATES={0x23c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x2, 0x7, 0x8, 0x6, 0x1ff, 0x200]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0x5}, {0x3, 0x2}, {0x0, 0x7}, {0x2, 0x2}, {0x0, 0x6}, {0x3, 0x3}, {0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x24, 0x9, 0x1b, 0x36, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x5, 0x2, 0x1, 0x0, 0xd5, 0xe]}}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa2a, 0x8, 0x726, 0x7, 0x3, 0x9, 0x9, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf776, 0x6, 0x644f, 0x101, 0x7, 0x1, 0x0, 0xfffa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6c, 0x24, 0x18, 0x60, 0x60, 0x36, 0x1, 0x18, 0xb, 0x6, 0x6, 0x16, 0x16, 0x16, 0x5, 0x2, 0x30, 0x12, 0x6, 0x16, 0x18, 0x30, 0x2, 0x1, 0x6, 0x3, 0x6c, 0x6c, 0x1b, 0x3, 0x48, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xd5de, 0x4, 0xc, 0x2, 0x3120, 0x9c, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xffff, 0x0, 0x3, 0x2, 0x9, 0x0, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6e, 0x2, 0xfffe, 0x5, 0xfe00, 0xa, 0x5, 0x8]}}]}, @NL80211_BAND_60GHZ={0x12c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0xfdfa, 0x408e, 0x0, 0x400, 0x1, 0x4f, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x8}, {0x1, 0xa}, {0x0, 0x1}, {0x6}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x3}, {0x3, 0x6}, {0x4, 0x4}, {0x4, 0x1}, {0x2, 0x8}, {0x1, 0x3}, {0x1, 0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x6, 0x8}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x2}, {0x4, 0x7}, {0x1, 0x3}, {0x2, 0x5}, {0x3, 0x6}, {0x2, 0x2}, {0x1, 0x1}, {0x4, 0x2}, {0x0, 0x9}, {0x4, 0x9}, {0x4, 0x8}, {0x7, 0x8}, {0x0, 0x3}, {0x7}, {0x0, 0x4}, {0x7, 0x8}, {0x1, 0x8}, {0x5, 0x3}, {0x1, 0x9}, {0x4, 0x1}, {0x2, 0x9}, {0x0, 0x5}, {0x5}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0x5}, {0x0, 0x3}, {0x2}, {0x1, 0x3}, {0x1, 0x1}, {0x4, 0x8}, {0x7}, {0x3, 0x5}, {0x5, 0xa}, {0x5, 0x9}, {0x3, 0x7}, {0x3, 0x7}, {0x3, 0x7}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0xa}, {0x6}, {0x4, 0x2}, {0x1, 0xa}, {0x4}, {0x3, 0x7}, {0x7, 0x4}, {0x7, 0x9}, {0x4, 0x9}, {0x1, 0xa}, {0x5, 0x9}, {0x2, 0x9}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x0, 0x1}, {0x0, 0x6}, {0x1, 0x7}, {0x6, 0xa}, {0x4, 0xa}, {0x3, 0x5}, {0x0, 0x8}, {0x1, 0x4}, {0x7, 0x8}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0x6}, {0x0, 0x2}, {0x4, 0xa}, {0x5, 0xa}, {0x4, 0x3}, {0x4, 0x7}, {0x2, 0xa}, {0x0, 0x1}, {}, {0x4, 0x2}, {0x1, 0x1}, {0x7, 0xa}, {0x4}, {0x5, 0x3}, {0x2}, {0x0, 0x5}, {0x0, 0x3}, {0x1, 0x5}, {0x6, 0x3}, {0x0, 0x4}, {0x7, 0x7}, {0x4}, {0x1, 0x2}, {0x0, 0x1}, {0x0, 0x7}, {0x6, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x1, 0xc, 0xbbf7, 0xa0e, 0x4, 0x200, 0x87]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x3, 0x1}, {0x1, 0x2}, {0x2, 0x8}, {0x1, 0x5}, {0x7, 0x3}, {0x6, 0x9}, {0x4, 0x7}, {0x4, 0x1}, {0x5, 0x6}, {0x5, 0xa}, {0x1}, {0x5, 0xa}, {0x4, 0x9}, {0x3, 0x5}, {0x0, 0x4}, {0x5, 0x1}, {}, {0x2, 0x6}, {0x0, 0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x5}, {0x2, 0x8}, {0x7, 0x6}, {0x2, 0x3}, {0x1, 0x4}, {0x0, 0x3}, {0x2, 0x5}, {0x7, 0x9}, {0x1, 0x3}, {0x1, 0x7}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x3}, {0x4, 0x7}, {0x7, 0x7}, {0x5, 0x2}, {0x6, 0x5}, {0x1, 0x5}, {0x4}, {0x6, 0x6}, {0x1, 0x4}, {0x5, 0x3}, {0x0, 0x9}, {}, {0x1, 0x5}, {0x7, 0x9}, {0x3, 0x9}, {0x7, 0x1}, {0x0, 0x3}, {0x5, 0x6}, {0x0, 0x8}, {0x7, 0xa}, {0x7}, {0x0, 0x2}, {0x7}, {0x6, 0x4}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x3}, {0x1, 0x3}, {0x1, 0x3}, {0x2, 0x1}, {0x1, 0x9}, {0x2, 0x9}, {0x4, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x401, 0x1, 0x6, 0x3, 0xfff7, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb800, 0xd4e, 0x6, 0x336, 0x3, 0x4, 0x38, 0xfffe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x480, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x9}, {0x0, 0x8}, {0x1, 0x3}, {0x4, 0x3}, {0x2, 0x7}, {0x1, 0x2}, {0x7, 0x5}, {0x1}, {0x5, 0x8}, {0x4, 0x9}, {0x3, 0x3}, {0x6, 0x3}, {0x1, 0x7}, {0x2, 0x1f}, {0x7, 0x7}, {0x6, 0x6}, {0x2, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0x4, 0x3}, {0x0, 0x9}, {0x1, 0x5}, {0x6, 0x5}, {0x1}, {0x1, 0x2}, {0x7}, {0x1, 0x9}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x6, 0x3}, {0x0, 0x7}, {0x4, 0xa}, {0x3}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x5}, {0x4, 0x1}, {0x6, 0x2}, {0x5, 0x6}, {0x5, 0x4}, {0x1, 0xa}, {0x2, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x54f, 0x200, 0xf, 0x5, 0x8, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x3, 0x2, 0x8, 0x3, 0x1000, 0x80, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x1000, 0x91c, 0xfff2, 0xfff, 0x4, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6a98, 0x5, 0x4, 0x7f, 0x9, 0x2, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x23b, 0x54, 0x2, 0x6, 0xdab, 0x0, 0x754a]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3, 0x24, 0x6c, 0x5, 0xc, 0xc, 0x16, 0xb, 0x6, 0x329a3e3eaf890b86, 0x34, 0x16, 0x51]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x3, 0xb7e, 0x1, 0x2, 0x9, 0xff]}}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0x0, 0x1, 0x2, 0xfffd, 0x3, 0xc82]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x36, 0x18, 0x6, 0x1, 0x3, 0xb, 0x36, 0x4, 0x18, 0x9, 0xb, 0xb, 0x16, 0x3c, 0x16, 0x16, 0x6, 0x30, 0x18, 0x18, 0x36, 0x18, 0xb, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0x0, 0x0, 0xebdf, 0x86, 0x400, 0x6a80, 0x5]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6, 0x3, 0x18, 0x24, 0x4, 0x30, 0x30, 0x1, 0x6c, 0x1, 0x5, 0x5, 0x24, 0x3, 0x48, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x1, 0x73, 0x1, 0x4, 0xe51, 0x3, 0xf856]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x3ff, 0xd8c3, 0xe194, 0x6, 0x6, 0x7, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x401, 0x1, 0x101, 0x4, 0x5, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x7, 0x7}, {0x7, 0x7}, {0x5, 0x6}, {0x1, 0x2}, {0x6, 0xa}, {0x1, 0x4}, {0x4, 0x2}, {0x2, 0x9}, {0x4, 0x9}, {0x4, 0x8}, {0x2, 0x3}, {0x2, 0x2}, {0x1, 0x8}, {0x5, 0x2}, {0x2, 0x1}]}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0x2, 0x4, 0x1, 0x1b, 0x1b, 0x1b, 0x30, 0x1a58f462bc1a712c, 0x3, 0x24, 0x5, 0x1befae1f076faa65, 0xb, 0x3, 0x9, 0xc, 0x1b, 0x6c, 0xc, 0x12, 0x18, 0x36, 0x18, 0x5, 0x12, 0x24]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x6}, {0x4, 0x8}, {0x3, 0x3}, {0x1, 0x9}, {0x6, 0x1}, {0x6}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0x6}, {0x1, 0x6}, {0x1, 0x9}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x2}, {0x0, 0x5}, {0x2, 0x8}, {0x7, 0xa}, {0x7, 0x1}, {0x6}, {0x4, 0x9}, {0x0, 0x8}, {0x6, 0x8}, {0x4, 0x4}, {0x1, 0x7}, {0x5, 0x4}, {0x2, 0x6}, {0x6, 0x2}, {0x1, 0x1}, {0x7}, {0x2, 0xa}, {0x4, 0x1}, {0x2, 0x2}, {0x5, 0xa}, {0x7, 0x7}, {}, {0x1, 0x1}, {0x5, 0xa}, {0x6}, {0x1, 0x8}, {0x5, 0x2}, {0x7, 0x4}, {0x7, 0x4}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0x7}, {0x2, 0x9}, {0x2, 0x4}, {0x5, 0x4}, {}, {0x0, 0x9}, {0x3, 0x4}, {0x4, 0xa}, {0x5, 0x2}, {0x4, 0x6}, {0x5, 0x5}, {0x2, 0x5}, {0x6, 0x4}, {0x1, 0x7}, {0x1, 0xa}, {0x4}, {0x6, 0x5}, {}, {0x0, 0x5}, {}, {0x1, 0x6}, {0x4, 0x9}, {0x5, 0x5}, {0x5, 0x2}, {0x4, 0x2}, {0x5, 0x2}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x4ab0, 0x2, 0x168d, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6b8f, 0xc, 0x1, 0xfa0, 0xfff8, 0x7, 0x6, 0xfcce]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0xaee5, 0x2, 0x9, 0x8, 0x7, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x30, 0xb, 0x1b, 0x18]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x3}, {0x0, 0x6}, {0x0, 0x2}, {0x2, 0x10}, {0x6, 0x2}, {0x2}, {0x0, 0x1}, {0x3, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x1, 0xa}, {0x6, 0x1}, {0x6, 0x6}, {0x6, 0x7}, {}, {0x1}, {0x0, 0x4}, {0x6, 0x1}, {0x4, 0xa}, {0x4, 0x9}, {0x5, 0x2}, {0x1, 0x3}, {0x2, 0x3}, {0x1}, {0x7, 0x3}, {0x6, 0x4}, {0x1, 0x9}, {0x4, 0x8}, {0x4, 0x9}, {0x3, 0x6}, {0x0, 0x8}, {0x4, 0xa}, {0x0, 0x1}, {0x5, 0x3}, {0x6, 0x7}, {0x4, 0x6}, {0x7, 0x7}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0x1}, {0x1, 0x8}, {}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xf, 0xc9, 0x5, 0x9, 0x6, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x8, 0x0, 0xffff, 0x9, 0x5, 0x5]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x52e, 0x5, 0x575, 0x1c, 0x7b6, 0x6]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x3d, 0x12, 0x24, 0x4, 0x24, 0x48, 0x4, 0x5, 0x24, 0xc, 0x1b, 0x24, 0x12, 0x60, 0x16, 0x60, 0x4, 0x16, 0x9, 0x157b7c52345ea963, 0x30, 0x48, 0xc, 0x48, 0x63, 0x6c, 0x1b, 0x1, 0xc, 0x3, 0x1b]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x6}, {0x2, 0x5}, {}, {0x5, 0x6}, {0x2, 0x2}, {0x0, 0x8}, {0x0, 0x8}, {}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x1, 0xe}, {0x0, 0x7}, {0x4, 0x4}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0x16, 0x6c, 0x12, 0xb, 0x18, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x8, 0x100, 0x5, 0x6, 0x8000, 0x7ff]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x3, 0x2}, {0x4, 0x6}, {0x4, 0x6}, {0x0, 0x3}, {0x1, 0x5}, {0x4}, {0x2, 0xa}, {0x7, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0xfff7, 0x1, 0x9000, 0x86f, 0x3, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x60, 0x18, 0x16, 0x2, 0x60, 0x2, 0x1, 0x2, 0x48, 0x3, 0x30, 0x60, 0xc, 0x0, 0x36, 0x18, 0x9, 0x48, 0x6c, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x3, 0x2, 0x6c, 0x9, 0x6, 0x60, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x8386, 0x8, 0x9, 0x0, 0x4, 0xfffc]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x81, 0x6, 0xa, 0x1, 0x9, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1, 0x36, 0x66, 0x30, 0x9, 0x5, 0x60, 0xb, 0x60, 0x4, 0x60, 0x60, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x3, 0x7ff, 0x4, 0x7, 0x2, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0xb, 0x0, 0x3, 0x2, 0x24, 0xb, 0x48, 0x48, 0x1, 0x2, 0x18, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x6, 0xd9, 0x200, 0xff, 0xccb, 0x57b]}}]}]}, @NL80211_ATTR_TX_RATES={0x1d4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x6}, {0x7, 0x8}, {0x4, 0x7}, {0x7, 0x1}, {0x7, 0x9}, {0x4, 0x7}, {0x2, 0x8}, {0x1, 0x3}, {0x1}, {0x0, 0x4}, {0x0, 0x8}, {0x3, 0x7}, {0x2, 0x8}, {0x3, 0x4}, {0x7}, {0x2}, {0x1, 0xa}, {0x6, 0xa}, {0x1, 0x4}, {0x1, 0x1}, {0x5, 0x6}, {0x0, 0x9}, {0x5, 0x4}, {0x4, 0x7}, {0x1, 0x7}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0x5, 0x9}, {0x7}, {0x3, 0x8}, {0x1, 0x2}, {0x1, 0x5}, {0x2, 0x5}, {0x1}, {0x1, 0x8}, {0x4, 0xa}, {0x4, 0x4}, {0x7, 0x8}, {0x5, 0x2}, {0x5, 0x7}, {0x5, 0xa}, {0x0, 0x2}, {0x2, 0x5}, {0x6, 0x7}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0x8}, {0x2, 0xa}, {0x4, 0x1}, {0x4, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xb, 0x5, 0xbfb, 0x3, 0x1, 0x9d9, 0x85cf]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x8001, 0x8, 0x5, 0x637, 0x1, 0xca5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0xdc, 0xfffd, 0x4, 0x6, 0xa4d5, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x56, 0x0, 0x1, 0xd4ed, 0x427, 0x8, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x7, 0x8001, 0x5, 0x3, 0x36d, 0x80]}}]}, @NL80211_BAND_5GHZ={0xe4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x8}, {0x7, 0x3}, {0x3, 0x8}, {0x1, 0x3}, {0x6}, {0x7, 0x5}, {0x6, 0xa}, {0x7}, {0x6, 0x2}, {0x3, 0xa}, {}, {0x5, 0x4}, {0x3, 0x1}, {0x1}, {0x1, 0x6}, {0x0, 0x9}, {0x7, 0x4}, {0x6, 0x7}, {0x6, 0x3}, {0x2, 0x3}, {0x1, 0x5}, {0x3}, {0x7, 0x3}, {0x6, 0x9}, {0x3, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x101, 0x6, 0x118e, 0xc, 0x6, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xe, 0x3, 0xbedc, 0x5, 0x5, 0x400, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8e22, 0x0, 0x2866, 0x3, 0x6, 0x6, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd554, 0x5, 0x6, 0x80, 0x5, 0xffff, 0xffff, 0xaf]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x2, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x1, 0x6}, {0x7, 0x5}, {0x2, 0x7}, {0x0, 0x7}, {0x5, 0x3}, {0x4, 0x8}, {0x0, 0x1}, {0x6, 0x7}, {0x4, 0x9}, {0x1, 0x5}, {0x4}, {0x3, 0x3}, {0x6, 0x9}, {0x5, 0x4}, {0x3, 0x5}, {0x4, 0x6}, {0x7}, {0x0, 0x9}, {0x5, 0x5}, {0x2, 0x1}, {0x2, 0x3}, {0x1, 0x3}, {0x3, 0x9}, {0x7, 0x7}, {0x7, 0x9}, {0x1, 0xa}, {0x6, 0x4}, {0x2, 0x7}]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x5}, {0x2}, {0x0, 0x7}, {0x6, 0x9}, {0x5, 0x1}, {0x0, 0x3}, {0x6}, {0x4, 0xa}, {0x3}, {0x0, 0x3}, {0x0, 0x4}, {0x3, 0x2}, {0x1, 0x2}, {0x2, 0x1}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x7}, {0x6, 0x3}, {0x2, 0x2}, {0x7, 0x7}, {0x4, 0x8}, {0x3, 0x8}, {0x2, 0x2}, {0x5, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x3, 0x4}, {0x7, 0x4}, {0x4, 0x6}, {0x2, 0x9}, {0x0, 0x8}, {0x3, 0x2}, {0x1, 0x3}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x7}, {0x4, 0xa}, {0x0, 0x5}, {0x3, 0x3}, {0x7, 0x6}, {0x3, 0x3}, {0x4, 0x9}, {0x4, 0xa}, {0x4, 0x3}, {0x3, 0x4}, {0x5, 0x2}, {0x2, 0x7}, {0x2, 0x7}, {0x2, 0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1, 0x7}, {0x0, 0x8}, {0x3}, {0x7, 0x6}, {0x4, 0x8}, {0x7, 0x1}, {0x3, 0x3}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x2}, {0x0, 0x4}]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xf001, 0x80, 0xfffb, 0x3, 0x51, 0x16, 0x4]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0x9}, {0x6, 0x5}, {0x3, 0x1}, {0x2, 0xa}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x60, 0x1, 0x24, 0x3, 0x36, 0x1, 0x12, 0x4, 0x4, 0x6c, 0x13, 0x9, 0x16, 0x5, 0x16, 0x36, 0x1]}]}]}, @NL80211_ATTR_TX_RATES={0x3b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x5}, {0x2, 0x7}, {0x2, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x4, 0x6, 0x3, 0x400, 0xec1, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4ece6e99696d7198, 0x1b, 0x12, 0x30, 0x1b, 0x1, 0xc, 0x1b, 0x60, 0x1, 0xd, 0x16, 0x30, 0x9, 0xc, 0x24, 0x1b, 0x74, 0x2, 0x5f, 0x48, 0x6c, 0x16, 0x16, 0x1, 0x6c, 0x1b]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xb, 0x7ff, 0x80, 0x7, 0x7, 0x3, 0x1d7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0xc, 0x10, 0x8, 0x9, 0x0, 0x3, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x9, 0x60, 0xb, 0x60, 0x1, 0x12, 0x24, 0x36, 0x9, 0x4, 0x2, 0x5, 0x9, 0x16, 0x3, 0x16, 0x18, 0x48, 0x36, 0x1b, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x80, 0x7, 0x9, 0xfff9, 0xe, 0xee2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2d, 0x606, 0x5, 0x100, 0x100, 0x9b, 0x1, 0xc]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x2}, {0x5, 0x9}, {0x5, 0x2}, {0x4, 0xa}, {0x0, 0x1}, {0x1, 0x9}, {0x1, 0x9}, {0x7, 0x7}, {0x2, 0x3}, {0x5, 0xa}, {0x7, 0x5}, {0x1, 0x9}, {0x7, 0xa}, {0x2, 0x6}, {0x5, 0x5}, {0x0, 0x7}, {0x6, 0x2}, {0x5, 0x9}, {0x6, 0x4}, {0x3, 0x7}, {0x0, 0x5}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0x1}, {0x4, 0x8}, {0x6, 0x1}, {0x5, 0x8}, {0x7, 0x1}, {0x1, 0xa}, {0x2, 0x9}, {0x7, 0x9}, {0x2, 0x2}, {0x0, 0x6}, {0x7, 0x1}, {0x1, 0x6}, {0x3, 0x4}, {0x1, 0xa}, {0x0, 0x5}, {0x5, 0x5}, {0x0, 0x1}, {0x7, 0xa}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xffff, 0xbdc9, 0x10, 0x1, 0x9, 0x3, 0x101]}}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0x8}, {0x0, 0x8}, {0x6, 0x4}, {0x5, 0x7}, {0x3, 0x4}, {0x3, 0x1}, {0x4, 0x4}, {}, {0x1, 0x1}, {0x7, 0x9}, {0x1, 0x2}, {0x3}, {0x6, 0x9}, {0x2, 0xa}, {0x0, 0xa}, {0x1}, {0x5, 0x9}, {0x1, 0xa}, {0x2, 0x8}, {0x5, 0x4}, {0x4, 0x2}, {0x3, 0x1}, {0x6, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x3, 0x3}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x9}, {0x7, 0x6}, {0x7}, {0x6, 0x2}, {0x1, 0x9}, {0x6, 0x7}, {0x0, 0x4}, {0x5, 0x7}, {0x0, 0x9}, {0x3, 0x6}, {0x2, 0x5}, {0x1, 0x3}, {0x3, 0x6}, {0x1, 0x3}, {0x7, 0x2}, {0x0, 0x6}, {0x5}, {0x1, 0x1}, {0x0, 0x6}, {0x1, 0x6}, {0x7, 0x5}, {0x1, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x7, 0x7}, {0x0, 0x6}, {0x5, 0x6}, {0x1, 0x4}, {0x1, 0x8}, {0x4}, {0x1, 0x9}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x7, 0xa}, {0x4, 0x3}, {0x1}, {0x5}, {0x5, 0x7}, {0x6, 0x7}, {0x3, 0x4}, {0x3, 0xa}, {0x7, 0x3}, {0x2, 0x8}, {0x0, 0x8}, {0x3, 0x4}, {0x2, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0x9, 0x8, 0x43, 0x3, 0x3, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcc, 0x7, 0x400, 0x8, 0x4, 0x1, 0xff44, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0x9, 0x5, 0x1, 0xc, 0x9, 0x6, 0x5, 0x18, 0xe, 0xb, 0x9, 0x24, 0x18, 0x24, 0x1, 0xb, 0x24, 0x60, 0x48, 0x60, 0x16, 0x24, 0x60, 0x1, 0xb, 0x18, 0x1, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x1, 0xbdd1, 0x100, 0x6, 0x800, 0x7d5c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0xfffa, 0x6, 0x7ff, 0xf000, 0x9, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x5, 0x1, 0x6c, 0x36, 0x24, 0x6c, 0x2]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x3, 0x6c, 0x30, 0x12, 0x2, 0x5, 0xb, 0x2, 0xb, 0xc, 0x3, 0x6c, 0x6, 0x0, 0x36, 0x30, 0xb, 0x2e, 0x16, 0x2, 0x6, 0x4, 0xb, 0x6, 0x5]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x18, 0x48, 0x6c, 0x18, 0xc, 0x6, 0x9, 0x5, 0x30, 0x4e, 0x36, 0x2, 0x36, 0xc, 0x0, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0xfff7, 0x3, 0xd567, 0x1, 0x3, 0x9caa, 0xfffb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x40, 0x9, 0x4, 0xffff, 0x8001, 0x9, 0xf]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xd, 0x101, 0x8000, 0x7, 0x90b, 0x7, 0x9]}}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x4, 0x1}, {0x2, 0x5}, {0x0, 0x5}, {0x3, 0x4}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x5}, {0x2, 0x9}, {0x0, 0x5}, {0x2, 0x7}, {0x1, 0x7}, {0x4, 0xa}, {0x5}, {0x2, 0x4}, {0x0, 0x6}, {0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x9}, {0x2, 0x1}, {0x0, 0x3}, {0x7, 0x9}, {0x7}, {0x4, 0xa}, {0x3, 0x3}, {0x1, 0x1}, {0x6, 0x5}, {0x0, 0x4}, {0x1, 0x3}, {0x6, 0x6}, {0x5, 0x3}, {0x6, 0x3}, {0x6, 0x4}, {0x6, 0x6}, {0x0, 0xa}, {0x3, 0x8}, {0x6, 0x2}, {0x4, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1}, {0x4, 0x4}, {0x1, 0x8}, {0x0, 0x1}, {0x2, 0x3}, {0x0, 0x9}, {0x3, 0x6}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x3}, {0x7, 0x9}, {0x1}, {0x2, 0x5}, {0x5, 0x9}, {0x2, 0x7}, {0x0, 0x3}, {0x0, 0x4}, {0x2, 0x1}, {0x1, 0x9}, {0x1, 0x7}]}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x4, 0xa}, {0x7, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x18, 0x4, 0x60, 0x30, 0x24, 0x4, 0x2, 0x44, 0x2, 0x16, 0xb, 0x6c, 0x48, 0x48, 0x1b, 0xc, 0x2, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x6, 0x3}, {0x1, 0x1}, {0x3, 0x5}, {0x4, 0x9}, {0x1, 0x3}, {0x1, 0x6}, {0x2, 0x3}, {0x2, 0x9}, {0x1, 0x3}, {0x3, 0x9}, {0x4, 0x9}, {0x7, 0x4}, {0x1, 0x6}, {0x1, 0x8}, {0x5, 0x8}, {0x0, 0x9}, {0x0, 0x7}, {0x0, 0x1}, {0x6, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x3, 0x3}, {0x2, 0x6}, {0x2}, {0x7}, {0x5, 0x9}, {0x6, 0x4}, {0x2, 0x9}, {0x6, 0x4}, {0x0, 0x5}, {0x4, 0x5}, {0x7, 0x9}, {0x6, 0x2}, {0x2, 0x9}, {0x1, 0x2}, {0x3, 0xa}, {0x7, 0xa}, {0x2, 0x7}, {0x2, 0x8}, {0x1, 0x5}, {0x6, 0x4}, {0x2, 0x2}, {0x7, 0x4}, {}, {0x2, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x108, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0xffff, 0x5, 0x6, 0x800, 0x7, 0xeeee, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x5, 0x7, 0x7, 0x9647, 0x8, 0xfffb, 0x80]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x8000, 0x1, 0x3, 0x8, 0x5, 0x9e59]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0xb, 0x16, 0x16, 0x16, 0x0, 0x60, 0x30, 0x60, 0x18, 0x9, 0x30, 0x1]}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x9}, {0x4, 0x7}, {0x2, 0xa}, {0x4, 0x9}, {0x3, 0x8}, {0x6, 0x1}, {0x1, 0x3}, {0x5, 0x5}, {0x1}, {0x4, 0x5}, {0x1}, {0x2, 0x2}, {0x5, 0x5}, {0x1}, {0x6, 0x5}, {0x1, 0x2}, {0x4, 0x8}, {0x0, 0x5}, {0x1, 0x4}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0x9}, {0x4, 0x3}, {0x5, 0x7}, {0x1, 0x8}, {0x1, 0x5}, {0x6, 0x8}, {0x4, 0x7}, {0x6, 0x2}, {0x2, 0x6}, {0x1, 0x5}, {0x5, 0x5}, {0x0, 0x6}, {0x0, 0x2}, {0x2, 0x2}, {0x0, 0x6}, {0x7, 0x3}, {}, {0x0, 0x8}, {0x5, 0x8}, {0x2, 0x4}, {0x4, 0x6}, {0x2, 0x2}, {0x6}, {0x5, 0x7}, {0x0, 0x2}, {0x0, 0x3}, {0x6, 0x8}, {0x0, 0xa}, {0x2}, {0x6, 0x5}, {0x5, 0x9}, {0x0, 0x4}, {0x1, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x4, 0x1}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x4, 0x5}, {0x7, 0xa}, {0x3, 0x8}, {0x2}, {0x5, 0x8}, {0x7, 0x7}, {0x0, 0xa}, {0x0, 0x3}, {0x5, 0x6}, {0x0, 0xa}, {0x5, 0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x24, 0x9, 0x3, 0x30, 0x1b, 0x1, 0xb, 0x2, 0x3, 0x30, 0x3, 0x16, 0x4, 0x0, 0x9, 0x12, 0x16, 0x16, 0x1]}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x1, 0xa, 0x2, 0xff, 0x9, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xcb00, 0x9, 0xfff, 0xfffe, 0x1ff, 0x6, 0x7, 0x7]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9dd1, 0x0, 0x5, 0x1, 0x7, 0x9, 0x93b4, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0x12, 0x0, 0x48, 0x2, 0x3, 0x6c, 0x30, 0x16, 0x1b, 0x1, 0x2, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x414, 0x4, 0x7f, 0xd, 0x9, 0x0, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x2}, {0x6, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x3, 0x5}, {0x4, 0x9}, {0x4, 0x2}, {0x5, 0x3}, {0x2, 0x6}, {0x2, 0x8}, {0x5, 0x1}, {0x5, 0x7}, {0x6, 0x1}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x1}, {0x3, 0xa}, {0x4, 0x6}, {0x6}, {0x0, 0x9}, {0x2, 0x3}, {0x0, 0x4}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0xa, 0xd, 0x2, 0x3, 0x5, 0xb0]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x800, 0x4, 0x3, 0x7000, 0x4, 0x9, 0x1]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0x36, 0x2, 0x16, 0x4, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x53a, 0x5, 0x1, 0x6, 0x0, 0x2]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x9, 0x9, 0x5, 0xdfd, 0x9959, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xf576, 0x1ff, 0x3, 0x6, 0x1, 0x904e]}}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x1}, {0x0, 0xa}, {0x4}, {0x5}, {0x5, 0x2}, {0x3, 0x1}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0xa}, {0x2, 0x7}, {0x3, 0x3}, {0x7, 0x8}, {0x7, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x4}, {0x5, 0x7}, {0x2}, {0x1, 0xa}, {0x7}, {0x7, 0x9}, {0x7}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x7}, {0x0, 0x3}, {0x7, 0x5}, {0x5, 0x9}, {0x0, 0x2}, {0x1, 0xa}, {0x1, 0x2}, {0x2, 0x5}, {}, {0x3, 0x6}, {0x3, 0x8}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7a16, 0x6, 0x7, 0x0, 0x2, 0x5, 0x55fd]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x3, 0xa}, {0x0, 0x4}, {0x1, 0x7}, {0x7, 0x5}, {0x5}, {0x3, 0x9}, {0x1, 0xa}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x8}, {0x6, 0x3}, {0x5, 0xa}, {0x5, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0x18}, {0x6}, {0x6, 0x2}, {0x1, 0x4}, {0x2, 0x1}, {0x0, 0x2}, {0x7, 0x8}, {0x4, 0x8}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x7}, {0x4, 0x7}, {0x7, 0x4}, {0x4, 0x4}, {0x0, 0x5}, {0x0, 0x9}, {0x4}, {0x6}, {0x0, 0xa}, {0x1, 0x4}, {0x2, 0x1}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x3, 0x3}, {}, {}, {0x7, 0x9}, {0x5, 0x7}, {0x0, 0x9}, {0x6, 0x6}, {0x3, 0xa}, {0x0, 0x4}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x1ec, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0x4}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x200, 0x4, 0x1ff, 0x10, 0x9, 0x61c, 0xbc92]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x161e, 0x22f, 0x3, 0x8, 0x8, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xaf, 0x5, 0x5, 0x5, 0x4, 0x5e, 0x6, 0xa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x3, 0x1, 0x5, 0x8, 0x2, 0xf34, 0x3]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x4}, {0x7, 0x9}, {0x4, 0x5}, {0x6, 0x4}, {0x5, 0x6}, {0x4, 0x7}, {0x4, 0x2}, {0x6, 0x6}, {0x5, 0x7}, {0x4, 0x3}, {0x5, 0x4}, {0x5, 0x4}, {0x1}, {0x4, 0x6}, {0x4, 0x7}, {0x2, 0x7}, {0x0, 0x5}, {0x5, 0x3}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0x4}, {0x1, 0x9}, {0x4, 0x1}, {0x7}, {0x3}, {0x0, 0x5}, {0x7, 0x9}, {0x1, 0x1}, {0x2, 0x7}, {0x3, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x6, 0x1}, {0x1, 0x6}, {0x5, 0x9}, {0x6, 0x2}, {0x6, 0x1}, {0x5, 0x9}, {0x0, 0x8}, {0x5, 0xa}, {0x1, 0x4}, {}, {0x5, 0xa}, {0x6, 0x4}, {0x1, 0x5}, {0x1, 0x8}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0x7}, {0x0, 0x6}, {0x4, 0x3}, {0x4, 0x5}, {0x1, 0x2}, {0x2, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xec, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x5, 0x4}, {0x4, 0x9}, {0x2, 0x7}, {0x0, 0x9}, {0x2, 0x8}, {0x1, 0x1}, {0x4, 0x2}, {0x4, 0x2}, {0x2, 0x1}, {0x2, 0x8}, {0x7, 0x5}, {0x0, 0x1e}, {0x0, 0xa}, {0x6}, {0x0, 0x9}, {0x0, 0x7}, {0x5, 0x8}, {0x0, 0x1}, {0x1, 0x9}, {0x3, 0x5}, {0x7, 0x4}, {0x2, 0x8}, {0x3, 0x14}, {0x4, 0x5}, {0x2, 0x5}, {0x2, 0x8}, {0x0, 0x4}, {0x7, 0x5}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x5, 0x6c, 0x48, 0x1b, 0x36, 0x12, 0x6c, 0x30, 0x9, 0x5, 0x4, 0x12, 0xc, 0x30, 0x9, 0x6c, 0x9, 0x6, 0x60, 0x24, 0x24, 0x9, 0x3, 0x12, 0x12, 0x2, 0x9, 0x60, 0x4]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x1a, 0x2, 0x12, 0x1b, 0x12, 0xb, 0xc, 0x5, 0x30, 0x9, 0x30, 0x1b, 0x4, 0x30, 0x16, 0xb, 0x6c, 0x16, 0xc, 0xb]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x4}, {0x4, 0x5}, {0x5, 0x3}, {0x2, 0x1}, {0x7, 0x8}, {0x6, 0x6}, {0x3, 0x9}, {0x1, 0x2}, {0x6, 0x6}, {0x5, 0x8}, {0x0, 0x6}, {0x4, 0x4}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0x5}, {0x1, 0x6}, {0x3, 0x5}, {0x4, 0x9}, {0x5, 0x5}, {0x5, 0x6}, {0x2, 0x2}, {0x5, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x2, 0x8}, {0x3, 0x1}, {0x3, 0x2}, {0x5, 0x6}, {0x2}, {0x4}, {0x7, 0x2}, {0x4, 0x8}, {0x0, 0x9}, {0x7}, {0x1, 0x5}, {0x0, 0x2}, {0x1, 0x4}, {0x2}, {0x0, 0x5}, {0x5, 0x9}, {0x3, 0xa}, {0x4, 0x8}, {0x2, 0x6}, {0x0, 0x5}, {0x0, 0x8}, {0x0, 0x1}, {0x2, 0x3}, {0x5, 0x4}, {0x1}, {0x0, 0x9}, {0x2, 0x6}, {0x0, 0x6}, {0x7, 0x7}, {0x1, 0x3}, {0x2, 0x7}, {0x2, 0x9}, {0x4, 0x2}, {0x2, 0x3}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0xc, 0x24, 0x48, 0x4, 0x6, 0x60, 0x6, 0xb, 0x4, 0x49, 0x983904e5c1b8b873, 0xb, 0xb, 0x48, 0x36, 0x36, 0x9, 0x1, 0x6c, 0x12, 0x48, 0x6c, 0x1f, 0x1b, 0x9, 0x60, 0x16, 0x60, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xbc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0xdb81, 0xdc79, 0x9, 0x4, 0x125, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3ff, 0x80, 0x3, 0x0, 0xc, 0x7ff, 0xf77]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0xfffd, 0x10, 0xce, 0x7ff, 0x81, 0x7ed, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x157, 0xfff7, 0x5, 0x81, 0xa00, 0x7, 0x9]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x4}, {0x3, 0x1}, {0x2, 0x8}, {0x4, 0x2}, {}, {0x7, 0x5}, {0x2, 0x6}, {0x1, 0x8}, {0x3}, {0x1, 0x2}, {0x4, 0x5}, {0x4, 0x6}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x1298}, 0x1, 0x0, 0x0, 0x4000805}, 0x8890) (async) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001b80)={0x0, 0x8, 0x2, 0x5, 0xfffb, 0x10, 0xa, 0x9, {0x0, @in6={{0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xaf1}}, 0x1c, 0x2, 0xe, 0x9, 0xb}}, &(0x7f0000001c40)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000001c80)={r9, 0xff, 0xcd, "03c6e53d432ef31120ff7efc95e72e95a0bf7ae9c8eb12bdcf11f3736592b61ef0d402c42a3ad92fb55d27e4ae27549112fff8d79cda7f8e36dc032da7554bd55b572c5b9e06e593850bc7faf809ccdb5abf01c7180b8d949c3fb0b2a2919d2006231e5987e8086bb3f7ffc3ea0f673ee8f9048231f3965698a81c6343f00a2663a40b10574a8368c9278b7de68c75123c30e9716961dabcd661796bba95161861df74ddf57a0fca6459a69339f147a14a2188a7e7e00a34eab2eb119b6e142a03adb7d92cbd4829e72e5bf902"}, 0xd5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x48, r8, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xffff, 0x53}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x9, @link='syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x840) 3.538268074s ago: executing program 5 (id=1413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0xf4240) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000040)=0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 3.30001989s ago: executing program 5 (id=1421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f004, 0x4}) socket$igmp(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x67) r2 = fsopen(&(0x7f0000000500)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000380)='}\x00', &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') syz_emit_ethernet(0x16, &(0x7f00000011c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000004aa60327cb48f7feb694e653403ca742ddd4c4b000000000000000000000000a57aa42ebfb51cade0c6eba1b074df5a10b7b22255ac9cfa8787f3a0770ded24ceaa9b901d354656815a1b17e99b8bfb77d01bdba1ead93e2560ffb3f73e011418abf342745adb1bdebf9c6b6a700c2a0bdf3498257cc78d5dc583aa05260b5ac3b34de410f0e3dcef4060ae46dd0c755a5672664d92885a6550427ab6982fa4c37757b8d0b5"], 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000039c0)=""/4088, 0xff8}], 0x1, 0xe9, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) close(r6) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f00000014c0)={0xf}) r9 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r9, 0x40184150, &(0x7f0000000240)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000024c0)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, &(0x7f0000000180)}, 0x3}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f0000000200)=""/91, 0x5b}, {&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f0000000380)=""/39, 0x27}, {&(0x7f00000003c0)=""/20, 0x14}, {&(0x7f0000000400)=""/146, 0x92}], 0x7, &(0x7f0000000640)=""/9, 0x9}, 0x9}, {{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000780)=""/207, 0xcf}], 0x1, &(0x7f0000000880)=""/60, 0x3c}, 0x5}, {{&(0x7f00000008c0)=@isdn, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000940)=""/124, 0x7c}, {&(0x7f00000009c0)=""/54, 0x36}, {&(0x7f0000000a00)=""/189, 0xbd}], 0x3}, 0x5}, {{&(0x7f0000000b00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b80)=""/124, 0x7c}, {&(0x7f0000000c40)=""/183, 0xb7}, {&(0x7f0000000d00)=""/39, 0x27}], 0x3, &(0x7f0000000d80)=""/158, 0x9e}, 0x2}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000e40)=""/40, 0x28}, {&(0x7f0000000e80)=""/141, 0x8d}, {&(0x7f0000000f40)=""/133, 0x85}, {&(0x7f0000001000)=""/125, 0x7d}, {&(0x7f0000001080)=""/15, 0xf}, {&(0x7f00000010c0)=""/128, 0x80}, {&(0x7f0000001140)=""/85, 0x55}, {&(0x7f00000026c0)=""/250, 0xfa}, {&(0x7f00000027c0)=""/237, 0xed}], 0x9, &(0x7f0000002980)=""/4096, 0x1000}, 0xfff}, {{&(0x7f0000002240)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002440)=[{&(0x7f00000022c0)=""/17, 0x11}, {&(0x7f0000002300)=""/206, 0xce}, {&(0x7f0000002400)=""/48, 0x30}], 0x3, &(0x7f0000002480)=""/26, 0x1a}, 0x374f6084}], 0x7, 0x2040, &(0x7f0000002680)={0x77359400}) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffd, 0x8}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x700, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 816.756478ms ago: executing program 1 (id=1474): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000200)={'trans=virtio,', {[{@cache_loose}]}}) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x2c00) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) (async) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x181) ftruncate(r1, 0x82081fc) (async, rerun: 64) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) (rerun: 64) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r2, 0x800000) (async) write$uinput_user_dev(r2, &(0x7f00000007c0)={'syz0\x00', {0x7, 0x0, 0xfffb, 0x8001}, 0x3d, [0x3, 0x0, 0x1, 0x6, 0x2, 0x7f, 0x2, 0x7, 0xffffffff, 0x4, 0x7, 0xc, 0x23cf, 0x1, 0x7, 0x0, 0x306, 0x0, 0xffffffff, 0x9, 0x2, 0x6, 0x1, 0x0, 0x6, 0x7, 0x1, 0x0, 0x2, 0xffff, 0xc, 0x6, 0x10001, 0x2, 0x1000000, 0x1, 0x4, 0x8, 0x7, 0x6, 0x660, 0x3, 0xc643ecb1, 0x8, 0x5, 0x3ff, 0x8a1, 0x401, 0x7, 0x6d, 0x5, 0xc, 0x6, 0x249a, 0x6, 0x5a30, 0xe788, 0x8001, 0x4, 0x9, 0xab, 0x7, 0x4, 0x6], [0x200, 0x139, 0x6, 0x271, 0x2, 0x9a9, 0x3, 0x4, 0x5, 0x5, 0x9, 0x10000, 0x10001, 0x8, 0x3ff, 0x0, 0xfff, 0x8, 0x7, 0x8, 0xc, 0x75b1, 0x0, 0x9d, 0x6, 0xb, 0x1, 0x1, 0x16f4, 0x2, 0x400, 0x5, 0x9, 0x953b, 0x8, 0x9, 0x8, 0x1, 0xec2, 0xbd, 0x9, 0xff, 0x6596, 0x8, 0x4, 0x7f, 0xb, 0x98c0, 0x3, 0x9, 0x7, 0x2, 0xf78, 0x9, 0x35ce0cb3, 0x0, 0x8, 0x8, 0x5b0, 0x18b, 0x10, 0x5, 0x3, 0xb], [0x222d, 0xa, 0x2, 0x3, 0x6f083aad, 0x5, 0x0, 0x1, 0xfffffffd, 0x0, 0x7d, 0x8000000, 0x1, 0x1, 0x2, 0x7ff, 0x3, 0x9, 0x1e, 0x3162, 0x800, 0x101, 0x100, 0x0, 0x6, 0x2c, 0x7, 0xfffffff8, 0xffffffff, 0x80000000, 0x3, 0x6, 0x7, 0x0, 0x4e, 0x575b089f, 0xbc3e, 0xfffffffa, 0xfffffff7, 0x9bd6, 0x3, 0x0, 0x9, 0x6, 0x7, 0x7, 0x0, 0x4, 0x401, 0xa55, 0x6, 0x3, 0x0, 0xfff, 0x40000000, 0x5, 0x0, 0x4, 0x7, 0x800, 0xffffffff, 0x81, 0x6, 0xd], [0x25, 0x8000, 0x1, 0x9, 0x3, 0xb, 0x7, 0x10000, 0x5, 0xe47f, 0x117, 0x4, 0x3, 0x3f47, 0x6, 0x8, 0x3, 0x1, 0x0, 0x601f, 0x2, 0x9, 0xd, 0x1, 0x9, 0xff, 0x6, 0x10001, 0x5, 0x2, 0x1000, 0xc, 0x4, 0xd8, 0x2, 0x8, 0x9, 0x2, 0x7fffffff, 0x9, 0x40, 0x0, 0x4, 0x7fff, 0x7, 0x1, 0x3, 0x9, 0x0, 0x8, 0x3, 0x7, 0x1a00000, 0xe72, 0x5, 0x2, 0x1, 0x4, 0xc000000, 0x7fffffff, 0x40, 0x3, 0x2, 0x6]}, 0x45c) 720.284387ms ago: executing program 4 (id=1475): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) r2 = dup3(r1, r0, 0x80000) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r3) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$KVM_CAP_HYPERV_VP_INDEX(r2, 0x4068aea3, &(0x7f0000000100)) 668.611245ms ago: executing program 4 (id=1478): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2e, 0x1, 0x0, 0x1000000, "", [@nested={0x101, 0x3dff, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) pread64(r2, &(0x7f0000000300)=""/227, 0xe3, 0x1) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000480)) 668.313028ms ago: executing program 1 (id=1479): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001600010a00000000fbdbdf25070000001800ca80140006"], 0x2c}}, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/comedi4\x00', 0x10b001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000019c0)={'das16m1\x00', [0xfff, 0x2, 0x0, 0x9, 0x1fc, 0x5, 0x6, 0x80000000, 0x9, 0x5, 0x2, 0x2, 0xee2, 0x2, 0x9d, 0x8, 0x1, 0x401, 0xfffffff6, 0xffffffff, 0x2, 0x3, 0xd, 0x7fffffff, 0x5a, 0xd, 0x7ff, 0x4, 0x1, 0x2, 0xc, 0x5]}) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r5, 0x1}, 0x8) (async) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000004c0)={r6, @in={{0x2, 0xfffe, @empty}}, 0x1, 0x7ffe}, 0x90) (async) r7 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x123f82, 0x0) ioctl$BLKPG(r7, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x7fffffffffffffff, 0xd}}) ioctl$BLKPG(r7, 0x1269, &(0x7f00000001c0)={0x3, 0x0, 0x98, &(0x7f00000000c0)={0x400, 0x1000, 0xd}}) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x1f4, 0xa, 0xfffffffc, 0x81}, 0x9c) r8 = socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x0, 0x40}) (async) brk(0x689d80000000) syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) (async) close(r8) (async) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1a, 0x1, 0x4, &(0x7f0000000840)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000001680)={0x0, 0x0}) recvmmsg(r9, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000080)=""/24, 0x18}, {&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000280)=""/171, 0xab}, {&(0x7f0000000480)=""/45, 0x2d}, {&(0x7f0000000380)=""/201, 0xc9}, {&(0x7f0000000580)=""/114, 0x72}, {&(0x7f0000001900)=""/171, 0xab}, {&(0x7f0000001700)=""/6, 0xfffffffc}, {&(0x7f0000001740)=""/235, 0xeb}], 0x9}, 0x7}, {{&(0x7f0000000740)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000ec0)=[{&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000600)=""/98, 0x62}, {&(0x7f0000001200)=""/58, 0x3a}, {&(0x7f00000008c0)=""/43, 0x2b}, {&(0x7f0000000900)=""/195, 0xc3}, {&(0x7f0000000a00)=""/160, 0xa0}, {&(0x7f0000000ac0)=""/200, 0xc8}, {&(0x7f0000000bc0)=""/218, 0xda}, {&(0x7f0000000cc0)=""/253, 0xfd}, {&(0x7f0000000dc0)=""/240, 0xf0}], 0xa, &(0x7f0000000f80)=""/80, 0x50}, 0x1}, {{&(0x7f0000001000)=@xdp, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001080)=""/166, 0xa6}, {&(0x7f0000001140)=""/102, 0x66}], 0x2}, 0x33af}, {{&(0x7f00000006c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001280)=""/247, 0xf7}, {&(0x7f0000001380)=""/190, 0xbe}], 0x2, &(0x7f0000001480)=""/217, 0xd9}, 0x6}], 0x4, 0x12022, &(0x7f00000016c0)={r10, r11+60000000}) 610.443692ms ago: executing program 4 (id=1481): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x48080, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000100)={0x388, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "6ca64d8013ef90ccfb0917e6baa58b4a6d2015a42b7eb7e15d"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "3835a30c83cb7a30bd0e526bc32310cb6de7a37baa8b00ee3d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa7e1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "22f3e1dcb77d743108dc694d622473869b053139dadacd8291404a0861e6865ecb5742"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xde}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "005593b87ad16ae94fc8c00786c555a8a1473f7e5ac61024f845118b3347"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "ca6abc6e917708752e1a1648c3789321809d091cdae1f232c277f2829cb57814"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xa, 0x3, "5fbf1fce44fb"}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff8a67}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @private2, 0x81}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x14}, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x33e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8ed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x64}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x46c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x388}, 0x1, 0x0, 0x0, 0x20004810}, 0x4040800) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 547.981374ms ago: executing program 3 (id=1483): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x2101, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x40000000, 0x3, 0x8000000, 0x0, "ff0f0000000b000000000013000200"}) (async, rerun: 32) r1 = syz_open_pts(r0, 0x0) (rerun: 32) ioctl$TCXONC(r1, 0x540a, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@random="7199dab04e1b", @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) 469.917905ms ago: executing program 3 (id=1484): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000000ff160000000000000000000000000001000000000d0001007564703a73"], 0x6c}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x0, 0xffe, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x2dc, r4, 0x30, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000006}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf48}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f113133}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff406}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffe3b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x192d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xde8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r10, 0x112, 0x9, &(0x7f0000001740)=0x64, 0x1) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000004d00)={0x2020}, 0x2020) preadv(r11, &(0x7f0000000840)=[{&(0x7f0000000600)=""/54, 0x36}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/251, 0xfb}], 0x3, 0x6, 0x46) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2204880, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x12000, 0x0) ioctl$PIO_UNIMAPCLR(r11, 0x4b68, &(0x7f00000005c0)={0x6, 0xff7f, 0xf}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 380.628562ms ago: executing program 3 (id=1485): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x629a}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x2, 0x5}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x14, r3, 0x1, 0x50bd2b}, 0x14}}, 0x0) 240.560413ms ago: executing program 1 (id=1486): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[], [{@context={'context', 0x3d, 'root'}}]}) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=0x9, 0x8, 0x2) 238.94262ms ago: executing program 5 (id=1487): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) shmdt(0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 238.652023ms ago: executing program 1 (id=1488): mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, &(0x7f0000000100)='barrier') r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000040, 0x0) 238.270599ms ago: executing program 3 (id=1489): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)={0x8040, 0x80, 0x5}, 0x18) (async) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000003200), 0x0, 0x0) mount$fuseblk(&(0x7f0000003140), &(0x7f0000003180)='./file0\x00', &(0x7f00000031c0), 0x800010, &(0x7f0000003300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$FICLONE(r2, 0x40049409, r1) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad000008b9"], 0x125) 170.77266ms ago: executing program 1 (id=1490): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0xc4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x94, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x400, 0x0, 0x1], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x4, 0x3, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7f}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc10}]}]}]}}]}, 0xc4}}, 0x8000) r4 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad78229287960c14898098e516a206000000beef915d5632", 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) 170.421155ms ago: executing program 4 (id=1491): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000036c0), 0x602680, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003800), 0x2, 0x0) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000003840)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r4 = dup3(r3, r2, 0x80000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000003540)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0xf}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000003900)=""/247, 0xf7, 0x0, 0x1d}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000014c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r4, &(0x7f0000003500)={0x18, 0xffffffffffffffda, r5, {0x3}}, 0x18) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) (async) mount$afs(&(0x7f0000003580)=ANY=[@ANYBLOB='\t\x00yz0:syz0.backup\x00'], &(0x7f00000035c0)='./file0/file0\x00', &(0x7f0000003600), 0x2000020, &(0x7f0000003700)=ANY=[@ANYBLOB='dyn,autocell,dyn,flock=local,dyn,flock=openafs,flock=openafs,flock=write,dyn,flock=strict,subj_user=./binderfs/binder0\x00,fscontext=staff_u,euid>', @ANYRESDEC=r6, @ANYBLOB="2c66736d616769633d307830303031303030d8f3b696163f287dc706cff1524b203b3030303030313030302c00"]) (async) r8 = syz_io_uring_setup(0x471b, &(0x7f0000003880)={0x0, 0xcef5, 0x8000, 0x1, 0x8f, 0x0, r4}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) r11 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) r12 = socket(0x10, 0x803, 0x0) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r12) getsockname$packet(r12, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r13, @ANYBLOB="83040500000000102800128008000100677265001c0064bae4230e000200000006000f0044dd3d1172e974a48b58e00e"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendmmsg$inet(r11, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) (async) writev(r8, &(0x7f0000000440)=[{&(0x7f0000000240)="1664dcb2c34c6e456bd9b879e1601556ad57f9b31297adfd5aedd58bc66c57747d305b0acb7ee215203a13b3c2bb13f885aca8b9e8239aeeee5eadb7ac46121a975770537fdfe1804564a336f5d6e2948cd069b073bd4be872776769d058adb04370c1d2f7858d1a17dfa9eb81f0490c0475868889e2c8", 0x77}, {&(0x7f0000000300)="0bb60fef3574d36ac46f409ef09c506c9c0c31cf4f1f913a967c5ffad8889c6c36f3578bac9e5e63efc3ff184d49456f58e450da856cbaa6427aeff4c4766b5c005a7be49db4d974ce88eb5b85078a2b71b3b34cc923767c60bf1149ba94182127cd2f474cb5043f94dddc3b1fa78fd78037f6291f3d82980b838ac8869247cf69eb395d31592060caec7b5bfa86f2e030e8cf", 0x93}, {&(0x7f00000004c0)="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", 0x1000}], 0x3) (async, rerun: 32) getsockopt$X25_QBITINCL(r7, 0x106, 0x1, &(0x7f0000003640), &(0x7f0000003680)=0x4) (async, rerun: 32) io_uring_enter(r8, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) (async, rerun: 32) dup3(r8, r2, 0x0) (async, rerun: 32) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x40078, 0x0) 170.229028ms ago: executing program 3 (id=1492): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d76030000006f2c63616368653d6c6f6f73652c00"]) (async) chdir(&(0x7f0000000280)='./file0\x00') (async, rerun: 64) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x181) (rerun: 64) ftruncate(r0, 0x82081fc) (async) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r1, 0x800000) (async) write$uinput_user_dev(r1, &(0x7f00000007c0)={'syz0\x00', {0x7, 0x0, 0xfffb, 0x8001}, 0x3d, [0x3, 0x3e66, 0x1, 0x6, 0x2, 0x0, 0x2, 0x7, 0xffffffff, 0x4, 0x7, 0xc, 0x23cf, 0x1, 0x7, 0x0, 0x306, 0x0, 0xffffffff, 0x9, 0x2, 0x6, 0x1, 0x0, 0x6, 0x7, 0x1, 0x0, 0x2, 0xffff, 0xc, 0x6, 0x10001, 0x2, 0x1000000, 0x1, 0x4, 0x8, 0x7, 0x6, 0x660, 0x3, 0xc643ecb1, 0x8, 0x5, 0x3ff, 0x8a1, 0x401, 0x7, 0x6d, 0x5, 0xc, 0x6, 0x249a, 0x6, 0x5a30, 0xe788, 0x8001, 0x4, 0x9, 0xab, 0x7, 0x4, 0x6], [0x200, 0x139, 0x6, 0x271, 0x2, 0x9a9, 0x3, 0x4, 0x5, 0x5, 0x9, 0x10000, 0x10001, 0x8, 0x3ff, 0x0, 0xfff, 0x8, 0x7, 0x8, 0xc, 0x75b1, 0x0, 0x9d, 0x6, 0xb, 0x1, 0x1, 0x16f4, 0x2, 0x400, 0x5, 0x9, 0x953b, 0x8, 0x9, 0x8, 0x1, 0xec2, 0xbd, 0x9, 0xff, 0x6596, 0x8, 0x4, 0x7f, 0xb, 0x98c0, 0x3, 0x9, 0x7, 0x2, 0xf78, 0x9, 0x35ce0cb3, 0x0, 0x8, 0x8, 0x5b0, 0x18b, 0x10, 0x5, 0x3, 0xb], [0x222d, 0xa, 0x2, 0x3, 0x6f083aad, 0x5, 0x0, 0x1, 0xfffffffd, 0x0, 0x7d, 0x8000000, 0x1, 0x1, 0x2, 0x7ff, 0x3, 0x9, 0x1e, 0x3162, 0x800, 0x101, 0x100, 0x0, 0x6, 0x2c, 0x7, 0xfffffff8, 0xffffffff, 0x80000000, 0x3, 0x6, 0x7, 0x0, 0x4e, 0x575b089f, 0xbc3e, 0xfffffffa, 0xfffffff7, 0x9bd6, 0x3, 0x0, 0x9, 0x6, 0x7, 0x7, 0x0, 0x4, 0x401, 0xa55, 0x6, 0x3, 0x0, 0xfff, 0x40000000, 0x5, 0x7, 0x4, 0x7, 0x800, 0xffffffff, 0x81, 0x6, 0xd], [0x25, 0x8000, 0x1, 0x9, 0x3, 0xb, 0x7, 0x10000, 0x5, 0xe47f, 0x117, 0x4, 0x3, 0x3f47, 0x6, 0x8, 0x3, 0x1, 0x0, 0x601f, 0x2, 0x9, 0xd, 0x1, 0x9, 0xff, 0x6, 0x10001, 0x5, 0x2, 0x1001, 0xc, 0x4, 0xd8, 0x2, 0x8, 0x9, 0x2, 0x7fffffff, 0x9, 0x40, 0x0, 0x4, 0x7fff, 0x7, 0x1, 0x3, 0x9, 0x0, 0x8, 0x3, 0x7, 0x1a00000, 0xe72, 0x5, 0x2, 0x1, 0x4, 0xc000000, 0x7fffffff, 0x40, 0x3, 0x2, 0x6]}, 0x45c) 169.994079ms ago: executing program 4 (id=1493): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, &(0x7f0000000300)) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) close(r8) (async) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r12, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r12, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r12, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r12, 0x82, 0x5, &(0x7f0000002340)='hello') (async) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x20, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0x9}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0x1, 0x5}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22000004}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 90.629152ms ago: executing program 1 (id=1494): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24000040}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e031bb9ebd7721a0a4dfc9ca60caa0d05fe36580cc284fb721146193fb598944f7c7a8eb962c1908bd689bb420e26fc31c6fae05bab7b6fff778ca436a551e8f7063de7ff704bde3e417eb276926a7d7cb9948983bf19b94657b664ed9791941400360df3106e356", @ANYRES16=r4, @ANYBLOB="000128bd7000fddbdf250c0000002c00018008000300080000000d0001007564703a73797a32000000000d0001007564703a73797a30000000002000068008000100090000000400020008000600030000000800060001000080240009800800010023000000080002000600000008000200070000000800020001000080b40001801c0002800800030003000000080001000300000008000300000080000800030007000000380004001400010002004e24e00000020000000000000000200002000a004e2400000006fc0200000000000000000000000000010500000038000400200001000a004e2400000080ff010000000000000000000000000001590000001400020002004e216401010000000000000000000800030000000000130001006574683a766972745f77696669300000300001802c0004001400010002004e206401010100000000000000001400020002004e216401010000000000000000001800078008000100ffffffff0c0003000600000000000000100007800c00030007000000000000000c00068008000100060000004c00078008000100030000000800010003000000080002000800000008000200000000000c0004007f0000000000000008000100020000000c000400040000000000000008000100000000002c00028008000100050000000800020004000000140003800800020005000000080002000300000004000400"], 0x214}, 0x1, 0x0, 0x0, 0x4044000}, 0x4c804) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380000d8a7a352789b9305e8fffddbdf250214ae0018003880c780040077800400c70200"/56], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x17, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_route(r2, 0x0, 0x2000c811) syz_open_dev$hiddev(0x0, 0x6, 0x2080) r8 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r8, 0x0, 0x0) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r9, 0x80284504, &(0x7f0000000100)=""/101) ioctl$TIOCCBRK(r5, 0x5428) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="050000000000000002004e20ac14142f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002004e22ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000100000000000088e70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001af6b23d0000000000000000000000000000000000000000000000000000000000000002004e22ffffffff00"/784], 0x310) r10 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x4801, 0x20) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r10, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r11, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x24}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1bf}]}, 0x30}, 0x1, 0x0, 0x0, 0x8044}, 0x24044800) sendfile(r10, r0, &(0x7f00000002c0)=0x200, 0x2) 532.69µs ago: executing program 4 (id=1495): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x0, 0x35, 0x0, 0x1, 0x0, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1a852a3ac012"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x64}, 0x94) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) ppoll(&(0x7f0000000400)=[{r3, 0x4000}], 0x1, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x7fffffff, 0x1c594, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x8], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x404}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1496): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002140)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9, 0xffe0}, {0x10, 0xffff}, {0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002140)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9, 0xffe0}, {0x10, 0xffff}, {0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) (async) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f00000010c0)={0xc, {"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", 0x1000}}, 0x1006) vmsplice(r5, &(0x7f0000000540)=[{&(0x7f00000000c0)="af5526f070528aca354e36706986fe5daccfe33936c3531ed9cb87525fffaca556db0df1ce781c7c8af500da7a9dcaccb07eb6337b23", 0x36}, {&(0x7f0000000300)="47e61ac34603a8d98b0a5892a57da631ab21fb80177d79b57baae0aa8823155b3bffe2a7ac8b62a8654e9d98769fec164c2185f2a570991a6481fe60555076752b4e56315b72f507c729e40270aad1c49391a82f94133ec68e87e0936aa63041bf94d56823f6cea4c51eebc72efdeb3bce437b24cd447a358d47eb3589251ad955ab6290cfc1fd2e4295315d58fdc890beb93e0327208007c05e7c8add6f3bbaa213a5994e1f0ae5a3d98b57b63aa8b205657291f16bc780f04811e5f1e4ababd057be5ee96412", 0xc7}, {&(0x7f00000001c0)="e91cb20a39222c5aa6674dab220bc24e28d2ec6d76aa6d6b8eefb85ed78ba4542e432d454b4d9eeb59dc6d82717fe495361228b627e29674eb336554dbdfd3d722b7768d8f0f77075e8263bf4c28b67a0239075fcb1a1823cf335a8f2a72af918beb8ec896609a1c674cea82dc2ac35aca9349044d15a36a9b3eb29adeb4ed73fdbfaf3d88683d1568a6c249fb37b94000132c9acd79677e8b51564b2114db0ad9d66eaea2f9ce", 0xa7}, {&(0x7f0000000400)="478a32c3c7b9958705f3e8eba55f8ba06bd8fe49cf5c8c49367a352d4e5e3c97d646c83284c47027efb3b3195d75f20c90b506f2ce443160ebea2355f2fc2be388f795f95ff35b8b09735425012edd9367e07d4840a17f80c5aacc1cf5ba2786d0b4dac03630ecced8b4eae20a5f076119fc38dcdddc2e152cdbc2c4e2878e1a8ea1a4390eb6e4fc20a18715ff", 0x8d}, {&(0x7f0000000500)="60c33ca678b9d0becb16a38fd70b8b4fcaa316e79dc32c8b8ab451793a1be6d6b19a6fa24fa7eb54c4d1941a50898c5631b73bf956e9c74f3eada262e8ec7b", 0x3f}], 0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x4, 0x52}) kernel console output (not intermixed with test programs): 7836] __nla_validate_parse: 5 callbacks suppressed [ 87.726196][ T7836] netlink: 76 bytes leftover after parsing attributes in process `syz.4.485'. [ 87.763866][ T7902] binder: BINDER_SET_CONTEXT_MGR already set [ 87.766210][ T7902] binder: 7899:7902 ioctl 4018620d 200000000100 returned -16 [ 87.806145][ T7907] binder: 7905:7907 ioctl c018620c 200000000240 returned -22 [ 87.834495][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.508'. [ 87.868872][ T7918] Invalid logical block size (-5) [ 87.897164][ T7923] binder: BINDER_SET_CONTEXT_MGR already set [ 87.899624][ T7923] binder: 7922:7923 ioctl 4018620d 200000000300 returned -16 [ 87.901999][ T7923] binder: BINDER_SET_CONTEXT_MGR already set [ 87.903931][ T7923] binder: 7922:7923 ioctl 4018620d 200000000300 returned -16 [ 87.903967][ T7921] netlink: 36 bytes leftover after parsing attributes in process `syz.1.505'. [ 87.906417][ T7923] binder: BINDER_SET_CONTEXT_MGR already set [ 87.908909][ T7927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.505'. [ 87.911673][ T7927] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.912041][ T7923] binder: 7922:7923 ioctl 4018620d 200000000300 returned -16 [ 87.915656][ T7927] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.991846][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 87.991861][ T40] audit: type=1400 audit(1757251766.559:508): avc: denied { bind } for pid=7928 comm="syz.3.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.027904][ T7929] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.106261][ T7929] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.190438][ T40] audit: type=1400 audit(1757251766.759:509): avc: denied { create } for pid=7939 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 88.191142][ T7929] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.196875][ T40] audit: type=1400 audit(1757251766.759:510): avc: denied { write } for pid=7939 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 88.206591][ T40] audit: type=1400 audit(1757251766.759:511): avc: denied { connect } for pid=7939 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 88.255712][ T40] audit: type=1400 audit(1757251766.819:512): avc: denied { bind } for pid=7949 comm="syz.1.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.275025][ T7929] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.334974][ T7952] netlink: 'syz.4.518': attribute type 2 has an invalid length. [ 88.360557][ T1219] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.380265][ T1143] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.392553][ T1143] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.395149][ T1143] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.433264][ T40] audit: type=1400 audit(1757251766.999:513): avc: denied { watch watch_reads } for pid=7961 comm="syz.3.522" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.598916][ T7968] openvswitch: netlink: Missing key (keys=40, expected=100) [ 88.603590][ T40] audit: type=1400 audit(1757251767.169:514): avc: denied { execute } for pid=7966 comm="syz.1.524" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 88.605584][ T7967] team0: No ports can be present during mode change [ 88.618009][ T7970] batadv_slave_0: left promiscuous mode [ 88.618180][ T40] audit: type=1326 audit(1757251767.189:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.3.525" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe4a18ebe9 code=0x7ffc0000 [ 88.620155][ T7970] batadv_slave_0: left allmulticast mode [ 88.622448][ T7971] netlink: 'syz.3.525': attribute type 2 has an invalid length. [ 88.628497][ T40] audit: type=1326 audit(1757251767.189:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.3.525" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe4a18ebe9 code=0x7ffc0000 [ 88.630946][ T7970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.632505][ T40] audit: type=1326 audit(1757251767.189:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.3.525" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe4a18ebe9 code=0x7ffc0000 [ 88.673982][ T7977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.526'. [ 88.710786][ T7984] ./cgroup: Can't lookup blockdev [ 88.747781][ T7993] netlink: 24 bytes leftover after parsing attributes in process `syz.5.530'. [ 88.848195][ T7999] Invalid logical block size (257) [ 89.057216][ T53] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 89.060307][ T139] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 89.207248][ T139] usb 9-1: Using ep0 maxpacket: 8 [ 89.209043][ T53] usb 10-1: Using ep0 maxpacket: 8 [ 89.213702][ T53] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.220130][ T139] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.224192][ T139] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.228314][ T53] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.232604][ T53] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.236674][ T53] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.242602][ T139] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.246652][ T139] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.254233][ T53] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.258529][ T139] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.260214][ T8035] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 89.262175][ T139] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.263204][ T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.265679][ T8035] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 89.317144][ T8037] netlink: 'syz.1.543': attribute type 4 has an invalid length. [ 89.320393][ T8037] netlink: 152 bytes leftover after parsing attributes in process `syz.1.543'. [ 89.325402][ T8037] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 89.359701][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 89.362914][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 89.449101][ T8049] netlink: 'syz.3.547': attribute type 39 has an invalid length. [ 89.471910][ T139] usb 9-1: usb_control_msg returned -32 [ 89.473962][ T139] usbtmc 9-1:16.0: can't read capabilities [ 89.479003][ T53] usb 10-1: GET_CAPABILITIES returned 0 [ 89.480767][ T53] usbtmc 10-1:16.0: can't read capabilities [ 89.685496][ T34] usb 10-1: USB disconnect, device number 3 [ 90.555435][ T8083] binder: 8082:8083 ioctl c0306201 200000000080 returned -14 [ 90.560182][ T8083] binder: 8082:8083 ioctl c0306201 2000000003c0 returned -14 [ 90.636336][ T8091] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 90.703109][ T8100] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 90.775290][ T8108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=8108 comm=syz.1.566 [ 90.780778][ T8108] program syz.1.566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.028006][ T8119] kvm: pic: non byte write [ 91.137849][ T10] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 91.298418][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 91.303982][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.308888][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.312431][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 91.320494][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.324016][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.335048][ T10] usb 6-1: Manufacturer: á©Ÿ [ 91.336914][ T10] usb 6-1: SerialNumber: syz [ 91.378565][ T8136] batadv_slave_0: entered promiscuous mode [ 91.382382][ T8136] batadv_slave_0: left promiscuous mode [ 91.492395][ T8139] tipc: Started in network mode [ 91.494553][ T8139] tipc: Node identity ac14140f, cluster identity 4711 [ 91.498269][ T8139] tipc: New replicast peer: 255.255.255.255 [ 91.501978][ T8139] tipc: Enabled bearer , priority 10 [ 91.583168][ T8143] 9p: Unknown uid 00000000004294967295 [ 91.746331][ T8117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.751031][ T8117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.768851][ T8117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.773238][ T8117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.781439][ T10] usb 6-1: 0:2 : does not exist [ 91.792195][ T10] usb 6-1: USB disconnect, device number 11 [ 91.813969][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.904116][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.5.578'. [ 92.088787][ T8154] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.579'. [ 92.361913][ T8164] netlink: 32 bytes leftover after parsing attributes in process `syz.5.582'. [ 92.627192][ T29] tipc: Node number set to 2886997007 [ 92.921073][ T8215] random: crng reseeded on system resumption [ 93.016486][ T40] kauditd_printk_skb: 66 callbacks suppressed [ 93.016496][ T40] audit: type=1400 audit(1757254349.570:584): avc: denied { write } for pid=8216 comm="syz.5.601" path="socket:[26077]" dev="sockfs" ino=26077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 93.195285][ T8227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56080 sclass=netlink_route_socket pid=8227 comm=syz.1.604 [ 93.274078][ T8235] overlayfs: statfs failed on './file0' [ 93.274556][ T8236] tmpfs: Unknown parameter '~sEÖä¢ôµ' [ 93.549831][ T8243] kvm: kvm [8242]: vcpu2, guest rIP: 0x912c Unhandled WRMSR(0x11e) = 0xfffffc18 [ 93.552808][ T8243] kvm: kvm [8242]: vcpu2, guest rIP: 0x912f Unhandled WRMSR(0x11e) = 0xfffffc18 [ 93.573395][ T8243] kvm: kvm [8242]: vcpu2, guest rIP: 0x912c Unhandled WRMSR(0x186) = 0xfffffc18 [ 93.576814][ T8243] kvm: kvm [8242]: vcpu2, guest rIP: 0x912f Unhandled WRMSR(0x186) = 0xfffffc18 [ 93.580591][ T8243] kvm: kvm [8242]: vcpu2, guest rIP: 0x912c Unhandled WRMSR(0x187) = 0xfffffc18 [ 93.583505][ T8243] kvm: kvm [8242]: vcpu2, guest rIP: 0x912f Unhandled WRMSR(0x187) = 0xfffffc18 [ 93.877156][ T139] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 94.041689][ T139] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 94.045068][ T139] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.048282][ T139] usb 8-1: Product: syz [ 94.049695][ T139] usb 8-1: Manufacturer: syz [ 94.051229][ T139] usb 8-1: SerialNumber: syz [ 94.056728][ T139] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 94.080220][ T40] audit: type=1400 audit(1757254350.650:585): avc: denied { firmware_load } for pid=24 comm="kworker/2:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 94.098034][ T24] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 94.202040][ T8271] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.288891][ T8276] binfmt_misc: register: failed to install interpreter file ./file0 [ 94.304080][ T839] usb 8-1: USB disconnect, device number 7 [ 94.581903][ T8296] raw_sendmsg: syz.1.623 forgot to set AF_INET. Fix it! [ 94.671983][ T8305] __nla_validate_parse: 5 callbacks suppressed [ 94.671994][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.627'. [ 94.676943][ T8305] netlink: 16 bytes leftover after parsing attributes in process `syz.5.627'. [ 94.779438][ T40] audit: type=1400 audit(1757254351.350:586): avc: denied { getopt } for pid=8308 comm="syz.5.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 94.888265][ T8064] usbtmc 9-1:16.0: usb_control_msg returned -110 [ 94.910702][ T6895] usb 9-1: USB disconnect, device number 5 [ 95.027288][ T40] audit: type=1400 audit(1757254351.590:587): avc: denied { write } for pid=8319 comm="syz.5.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 95.100743][ T40] audit: type=1400 audit(1757254351.670:588): avc: denied { ioctl } for pid=8330 comm="syz.5.637" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 95.103207][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 95.136230][ T24] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 95.140437][ T24] ath9k_htc: Failed to initialize the device [ 95.150841][ T839] usb 8-1: ath9k_htc: USB layer deinitialized [ 95.158183][ T8322] 9pnet_virtio: no channels available for device 127.0.0.1 [ 95.224696][ T40] audit: type=1400 audit(1757254351.790:589): avc: denied { accept } for pid=8338 comm="syz.3.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 95.429275][ T8360] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 95.442951][ T8360] CIFS mount error: No usable UNC path provided in device string! [ 95.442951][ T8360] [ 95.448806][ T8360] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 95.571365][ T8371] netlink: 'syz.1.647': attribute type 21 has an invalid length. [ 95.593705][ T8374] overlayfs: workdir and upperdir must be separate subtrees [ 95.605899][ T8374] syzkaller1: entered promiscuous mode [ 95.609053][ T8374] syzkaller1: entered allmulticast mode [ 95.857989][ T6895] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 95.918224][ T40] audit: type=1400 audit(1757254352.480:590): avc: denied { map } for pid=8396 comm="syz.1.653" path="socket:[27994]" dev="sockfs" ino=27994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.937692][ T8402] netlink: 'syz.1.654': attribute type 25 has an invalid length. [ 95.940133][ T8402] netlink: 'syz.1.654': attribute type 28 has an invalid length. [ 95.968383][ T8405] netlink: 'syz.1.655': attribute type 83 has an invalid length. [ 95.972710][ T8405] netlink: 'syz.1.655': attribute type 21 has an invalid length. [ 96.009228][ T6895] usb 10-1: config 0 has no interfaces? [ 96.012828][ T6895] usb 10-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 96.015808][ T6895] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.019327][ T6895] usb 10-1: Product: syz [ 96.020768][ T6895] usb 10-1: Manufacturer: syz [ 96.022412][ T6895] usb 10-1: SerialNumber: syz [ 96.026005][ T6895] usb 10-1: config 0 descriptor?? [ 96.230464][ T6895] usb 10-1: USB disconnect, device number 4 [ 96.245157][ T8425] netlink: 32 bytes leftover after parsing attributes in process `syz.1.658'. [ 96.875780][ T8459] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 96.878839][ T8459] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 96.882980][ T8459] vhci_hcd vhci_hcd.0: Device attached [ 96.889433][ T8460] vhci_hcd: cannot find a urb of seqnum 6 max seqnum 0 [ 96.894086][ T13] vhci_hcd: stop threads [ 96.895818][ T13] vhci_hcd: release socket [ 96.900152][ T13] vhci_hcd: disconnect device [ 97.440747][ T8500] netlink: 'syz.4.671': attribute type 2 has an invalid length. [ 97.443851][ T8500] netlink: 'syz.4.671': attribute type 1 has an invalid length. [ 97.469530][ T8500] netlink: 16 bytes leftover after parsing attributes in process `syz.4.671'. [ 97.476089][ T8500] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.617042][ T8508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.674'. [ 97.620337][ T8508] netlink: 3 bytes leftover after parsing attributes in process `syz.4.674'. [ 97.664258][ T8511] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 97.683736][ T8516] tmpfs: Unknown parameter '/dev/comedi4' [ 97.745928][ T8528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.752281][ T40] audit: type=1400 audit(1757254354.320:591): avc: denied { getopt } for pid=8525 comm="syz.4.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.764939][ T8529] fuseblk: Bad value for 'user_id' [ 97.766616][ T8529] fuseblk: Bad value for 'user_id' [ 97.767508][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 97.825892][ T8537] /dev/sg0: Can't lookup blockdev [ 97.826094][ T40] audit: type=1400 audit(1757254354.390:592): avc: denied { nlmsg_read } for pid=8535 comm="syz.5.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.846940][ T8540] block nbd4: Attempted send on invalid socket [ 97.851571][ T8540] blk_print_req_error: 27 callbacks suppressed [ 97.851582][ T8540] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 97.857858][ T8540] EXT4-fs (nbd4): unable to read superblock [ 97.868978][ T8536] random: crng reseeded on system resumption [ 97.884707][ T8544] sp0: Synchronizing with TNC [ 97.924468][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 97.930026][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.934914][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.939720][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 97.944805][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 97.948458][ T24] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 97.951110][ T24] usb 6-1: Manufacturer: syz [ 97.953817][ T24] usb 6-1: config 0 descriptor?? [ 98.093839][ T8548] syz.3.689 (8548): drop_caches: 2 [ 98.096637][ T8548] syz.3.689 (8548): drop_caches: 2 [ 98.226376][ T8558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61200 sclass=netlink_route_socket pid=8558 comm=syz.3.692 [ 98.371924][ T24] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 98.378471][ T24] appleir 0003:05AC:8243.0004: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 98.557758][ T40] audit: type=1400 audit(1757254355.130:593): avc: denied { map } for pid=8571 comm="syz.4.696" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.565313][ T40] audit: type=1400 audit(1757254355.130:594): avc: denied { execute } for pid=8571 comm="syz.4.696" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.803749][ T10] usb 6-1: USB disconnect, device number 12 [ 98.850359][ T40] audit: type=1400 audit(1757254355.420:595): avc: denied { create } for pid=8573 comm="syz.5.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 99.309882][ T40] audit: type=1400 audit(1757254355.880:596): avc: denied { read } for pid=8598 comm="syz.5.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.389597][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 99.393985][ T8601] netlink: 5 bytes leftover after parsing attributes in process `syz.1.704'. [ 99.512071][ T40] audit: type=1400 audit(1757254356.080:597): avc: denied { mounton } for pid=8611 comm="syz.1.706" path="mnt:[4026532868]" dev="nsfs" ino=4026532868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 99.606309][ T8617] tls_set_device_offload_rx: netdev not found [ 99.693391][ T8626] netlink: 'syz.4.711': attribute type 1 has an invalid length. [ 99.700462][ T40] audit: type=1400 audit(1757254356.270:598): avc: denied { rename } for pid=8623 comm="syz.3.710" name="file0" dev="9p" ino=35913950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.710174][ T40] audit: type=1400 audit(1757254356.270:599): avc: denied { unlink } for pid=8623 comm="syz.3.710" name="file1" dev="9p" ino=35913951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.730926][ T8626] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 99.736563][ T8626] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 99.780504][ T8635] gretap1: entered promiscuous mode [ 99.783872][ T8635] bond1: (slave gretap1): making interface the new active one [ 99.786713][ T8635] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 99.798271][ T8635] macvlan2: entered promiscuous mode [ 99.799184][ T40] audit: type=1400 audit(1757254356.370:600): avc: denied { name_bind } for pid=8628 comm="syz.1.712" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 99.800570][ T8635] macvlan2: entered allmulticast mode [ 99.810771][ T8635] bond1: entered promiscuous mode [ 99.813187][ T8635] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 99.820648][ T8635] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 99.829850][ T8635] bond1: left promiscuous mode [ 99.877519][ T40] audit: type=1400 audit(1757254356.450:601): avc: denied { bind } for pid=8640 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 99.976073][ T63] Bluetooth: hci0: unexpected event for opcode 0x080e [ 100.079735][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'. [ 100.086971][ T8670] netlink: 32 bytes leftover after parsing attributes in process `syz.1.724'. [ 100.090745][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'. [ 100.313572][ T40] audit: type=1400 audit(1757254356.880:602): avc: denied { create } for pid=8685 comm="syz.4.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 100.333990][ T8689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.342836][ T8689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.401238][ T8694] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 100.404290][ T8694] ref_ctr increment failed for inode: 0x1e8 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888026380000 [ 100.577331][ T839] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 100.741350][ T839] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.746151][ T839] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 100.751276][ T839] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.755127][ T839] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.758209][ T8702] afs: Unknown parameter '' [ 100.763056][ T8688] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 100.769382][ T839] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.841213][ T8707] netlink: 'syz.1.735': attribute type 10 has an invalid length. [ 100.844483][ T8707] team0: Device dummy0 is up. Set it down before adding it as a team port [ 100.969288][ T6895] usb 10-1: USB disconnect, device number 5 [ 101.425209][ T8718] BIDI support in bsg has been removed. [ 101.494701][ T8720] IPVS: persistence engine module ip_vs_pe_s not found [ 101.575859][ T8730] netlink: 'syz.5.742': attribute type 7 has an invalid length. [ 101.578320][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.742'. [ 101.785945][ T8731] netlink: 'syz.4.741': attribute type 10 has an invalid length. [ 101.885615][ T8747] netlink: 172 bytes leftover after parsing attributes in process `syz.3.745'. [ 102.012162][ T8765] geneve2: entered promiscuous mode [ 102.013822][ T8765] geneve2: entered allmulticast mode [ 102.016515][ T1151] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.019606][ T1151] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.022375][ T1151] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.025072][ T1151] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.056784][ T8775] netlink: 'syz.5.751': attribute type 1 has an invalid length. [ 102.089351][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.751'. [ 102.115108][ T8777] hfs: unable to load iocharset "io#harset" [ 102.115368][ T8783] veth0: entered promiscuous mode [ 102.119690][ T8783] veth0: entered allmulticast mode [ 102.125561][ T8777] /dev/sg0: Can't lookup blockdev [ 102.260851][ T8797] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.395108][ T8813] netlink: 24 bytes leftover after parsing attributes in process `syz.5.763'. [ 102.431852][ T8813] ipip1: entered promiscuous mode [ 102.528063][ T8838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.766'. [ 102.531000][ T8838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.766'. [ 102.560787][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 102.565191][ T8842] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 102.569370][ T8842] overlayfs: missing 'lowerdir' [ 102.611046][ T8852] ubi31: attaching mtd0 [ 102.615302][ T8852] ubi31: scanning is finished [ 102.618200][ T8852] ubi31: empty MTD device detected [ 102.619968][ T8842] openvswitch: netlink: Key type 30 is not supported [ 102.727132][ T8852] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 102.729615][ T8852] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 102.732120][ T8852] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 102.734377][ T8852] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 102.738795][ T8852] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 102.741172][ T8852] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 102.744256][ T8852] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 744653661 [ 102.747655][ C2] sr 2:0:0:0: [sr0] tag#21 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 102.752059][ C2] sr 2:0:0:0: [sr0] tag#21 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 102.756645][ T8852] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 102.771571][ T8867] ubi31: background thread "ubi_bgt31d" started, PID 8867 [ 103.057314][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 103.217498][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 103.221818][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.226505][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.230775][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 103.236067][ T10] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 103.239968][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.247861][ T10] usb 6-1: config 0 descriptor?? [ 103.637186][ T839] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 103.656031][ T10] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 103.658387][ T10] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 103.660641][ T10] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 103.662881][ T10] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 103.665121][ T10] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 103.669107][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input11 [ 103.690911][ T10] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 103.693565][ T10] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 103.794893][ T839] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 103.798267][ T839] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.802808][ T839] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.806948][ T839] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 103.811712][ T839] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.816903][ T839] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.820100][ T839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.825122][ T839] usb 9-1: config 0 descriptor?? [ 103.830974][ T8890] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 103.834092][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 103.834145][ T40] audit: type=1400 audit(1757254360.400:616): avc: denied { listen } for pid=8891 comm="syz.3.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.845550][ T40] audit: type=1400 audit(1757254360.400:617): avc: denied { write } for pid=8891 comm="syz.3.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.852266][ T40] audit: type=1400 audit(1757254360.400:618): avc: denied { accept } for pid=8891 comm="syz.3.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.859955][ T8876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.863319][ T8876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.864922][ T40] audit: type=1400 audit(1757254360.430:619): avc: denied { mount } for pid=8895 comm="syz.5.787" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 103.866002][ T8897] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 103.867656][ T8896] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 103.868755][ T1347] usb 6-1: USB disconnect, device number 13 [ 103.874260][ T7551] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 103.878747][ T8896] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 103.882240][ T7551] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 103.894597][ T7551] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 103.898592][ T7551] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 103.939823][ T8896] ipvlan2: entered promiscuous mode [ 103.958872][ T40] audit: type=1400 audit(1757254360.530:620): avc: denied { unmount } for pid=7266 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 104.122941][ T40] audit: type=1400 audit(1757254360.690:621): avc: denied { setattr } for pid=8904 comm="syz.5.790" name="CAN_RAW" dev="sockfs" ino=31796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.256754][ T839] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 104.266289][ T839] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 104.317621][ T40] audit: type=1400 audit(1757254360.880:622): avc: denied { setattr } for pid=8914 comm="syz.5.794" name="SCO" dev="sockfs" ino=29527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.529826][ T8890] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 104.533318][ T8890] overlayfs: missing 'lowerdir' [ 104.536818][ T1347] usb 9-1: USB disconnect, device number 6 [ 104.560896][ T40] audit: type=1400 audit(1757254361.130:623): avc: denied { map } for pid=8927 comm="syz.5.797" path="/proc/458/smaps" dev="proc" ino=31824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 104.568846][ T40] audit: type=1400 audit(1757254361.130:624): avc: denied { execute } for pid=8927 comm="syz.5.797" path="/proc/458/smaps" dev="proc" ino=31824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 104.726873][ T40] audit: type=1400 audit(1757254361.290:625): avc: denied { create } for pid=8944 comm="syz.3.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 104.741581][ T8945] syzkaller1: entered promiscuous mode [ 104.744056][ T8945] syzkaller1: entered allmulticast mode [ 104.842737][ T8962] block nbd3: Attempted send on invalid socket [ 104.845032][ T8962] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 104.849744][ T8962] XFS (nbd3): SB validate failed with error -5. [ 104.894430][ T8971] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 105.028806][ T8977] ucma_write: process 675 (syz.3.811) changed security contexts after opening file descriptor, this is not allowed. [ 105.057435][ T6895] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 105.074149][ T8983] openvswitch: netlink: nsh attr 0 has unexpected len 4 expected 0 [ 105.076684][ T8983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.198195][ T9001] [U]  [ 105.225395][ T6895] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.230742][ T6895] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 105.233944][ T6895] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 105.236803][ T6895] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.242508][ T8960] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 105.243711][ T9008] io-wq is not configured for unbound workers [ 105.254764][ T6895] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 105.374856][ T9006] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 105.493776][ T7551] Process accounting resumed [ 105.506079][ T9032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.511848][ T9032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.807981][ T139] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 105.969971][ T139] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.973148][ T139] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 105.975909][ T139] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 105.978852][ T139] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.982518][ T139] usb 8-1: config 0 descriptor?? [ 105.987314][ T1347] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 105.990005][ T139] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 105.992275][ T139] dvb-usb: bulk message failed: -22 (3/0) [ 105.997842][ T139] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 106.001578][ T139] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 106.003814][ T139] usb 8-1: media controller created [ 106.006752][ T139] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.014132][ T139] dvb-usb: bulk message failed: -22 (6/0) [ 106.016858][ T139] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 106.021458][ T139] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input13 [ 106.026275][ T139] dvb-usb: schedule remote query interval to 150 msecs. [ 106.028895][ T139] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 106.137191][ T1347] usb 9-1: Using ep0 maxpacket: 32 [ 106.141487][ T1347] usb 9-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 130, changing to 11 [ 106.145446][ T1347] usb 9-1: config 1 interface 0 has no altsetting 0 [ 106.149454][ T1347] usb 9-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.40 [ 106.152292][ T1347] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.154822][ T1347] usb 9-1: Product: syz [ 106.156185][ T1347] usb 9-1: Manufacturer: ï“¿ [ 106.158265][ T1347] usb 9-1: SerialNumber: syz [ 106.193601][ T139] dvb-usb: bulk message failed: -22 (1/0) [ 106.196143][ T139] dvb-usb: error while querying for an remote control event. [ 106.231649][ T9069] __nla_validate_parse: 4 callbacks suppressed [ 106.231660][ T9069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.828'. [ 106.236706][ T9069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.828'. [ 106.358488][ T139] dvb-usb: bulk message failed: -22 (1/0) [ 106.360943][ T139] dvb-usb: error while querying for an remote control event. [ 106.428834][ T9081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9081 comm=syz.1.832 [ 106.517436][ T139] dvb-usb: bulk message failed: -22 (1/0) [ 106.519369][ T139] dvb-usb: error while querying for an remote control event. [ 106.523998][ T9087] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 106.526775][ T9087] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.531057][ T9087] vhci_hcd vhci_hcd.0: Device attached [ 106.533077][ T9088] usbip_core: unknown command [ 106.534715][ T9088] vhci_hcd: unknown pdu 167792163 [ 106.536405][ T9088] usbip_core: unknown command [ 106.539293][ T8261] vhci_hcd: stop threads [ 106.540662][ T8261] vhci_hcd: release socket [ 106.542079][ T8261] vhci_hcd: disconnect device [ 106.678720][ T139] dvb-usb: bulk message failed: -22 (1/0) [ 106.680494][ T139] dvb-usb: error while querying for an remote control event. [ 106.838602][ T839] dvb-usb: bulk message failed: -22 (1/0) [ 106.840445][ T839] dvb-usb: error while querying for an remote control event. [ 106.999323][ T839] dvb-usb: bulk message failed: -22 (1/0) [ 107.001713][ T839] dvb-usb: error while querying for an remote control event. [ 107.157170][ T839] dvb-usb: bulk message failed: -22 (1/0) [ 107.159731][ T839] dvb-usb: error while querying for an remote control event. [ 107.165155][ T9102] batadv1: entered promiscuous mode [ 107.317354][ T839] dvb-usb: bulk message failed: -22 (1/0) [ 107.319258][ T839] dvb-usb: error while querying for an remote control event. [ 107.383458][ T9110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8210 sclass=netlink_route_socket pid=9110 comm=syz.1.840 [ 107.400713][ T9110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.840'. [ 107.477244][ T839] dvb-usb: bulk message failed: -22 (1/0) [ 107.479194][ T839] dvb-usb: error while querying for an remote control event. [ 107.637160][ T839] dvb-usb: bulk message failed: -22 (1/0) [ 107.639040][ T839] dvb-usb: error while querying for an remote control event. [ 107.688690][ T9119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.842'. [ 107.735850][ T1347] usbhid 9-1:1.0: can't add hid device: -71 [ 107.738653][ T1347] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 107.743109][ T1347] usb 9-1: USB disconnect, device number 7 [ 107.773756][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 107.777817][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 107.781458][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 107.785179][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 107.795958][ T9122] block nbd1: Attempted send on invalid socket [ 107.799906][ T6031] dvb-usb: bulk message failed: -22 (1/0) [ 107.799935][ T9122] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.802258][ T6031] dvb-usb: error while querying for an remote control event. [ 107.809154][ T9122] block nbd1: Attempted send on invalid socket [ 107.811809][ T9122] I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.815724][ T9122] Mount JFS Failure: -5 [ 107.818080][ T9122] jfs_mount failed w/return code = -5 [ 107.855037][ T29] usb 10-1: USB disconnect, device number 6 [ 107.882033][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.844'. [ 107.944024][ T9132] sctp: [Deprecated]: syz.1.846 (pid 9132) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.944024][ T9132] Use struct sctp_sack_info instead [ 107.957182][ T6031] dvb-usb: bulk message failed: -22 (1/0) [ 107.959511][ T6031] dvb-usb: error while querying for an remote control event. [ 107.982935][ T9132] sctp: [Deprecated]: syz.1.846 (pid 9132) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.982935][ T9132] Use struct sctp_sack_info instead [ 108.117259][ T839] dvb-usb: bulk message failed: -22 (1/0) [ 108.119701][ T839] dvb-usb: error while querying for an remote control event. [ 108.267237][ T6031] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 108.277973][ T839] dvb-usb: bulk message failed: -22 (1/0) [ 108.280113][ T839] dvb-usb: error while querying for an remote control event. [ 108.368967][ T9163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.854'. [ 108.397759][ T6031] usb 6-1: device descriptor read/64, error -71 [ 108.437274][ T839] dvb-usb: bulk message failed: -22 (1/0) [ 108.443684][ T839] dvb-usb: error while querying for an remote control event. [ 108.463013][ T9165] geneve2: entered promiscuous mode [ 108.500556][ T9035] Process accounting resumed [ 108.510268][ T29] usb 8-1: USB disconnect, device number 8 [ 108.531451][ T29] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 108.541608][ T9173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=9173 comm=syz.3.857 [ 108.568407][ T9173] netlink: 'syz.3.857': attribute type 2 has an invalid length. [ 108.659477][ T6031] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 108.693813][ T9189] syz.3.862 (9189): drop_caches: 2 [ 108.797363][ T6031] usb 6-1: device descriptor read/64, error -71 [ 108.881257][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 108.881267][ T40] audit: type=1400 audit(1757254365.450:641): avc: denied { append } for pid=9199 comm="syz.4.864" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.909988][ T6031] usb usb6-port1: attempt power cycle [ 109.054008][ T9219] binder: 9218:9219 ioctl c0306201 200000000040 returned -14 [ 109.228731][ T40] audit: type=1400 audit(1757254365.800:642): avc: denied { write } for pid=9236 comm="syz.4.872" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 109.235705][ T40] audit: type=1400 audit(1757254365.800:643): avc: denied { ioctl } for pid=9236 comm="syz.4.872" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 109.249081][ T6031] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 109.250397][ T6895] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 109.269544][ T6031] usb 6-1: device descriptor read/8, error -71 [ 109.373764][ T9246] Invalid source name [ 109.375516][ T9246] UBIFS error (pid: 9246): cannot open "ubifs", error -22 [ 109.375917][ T9246] netlink: 'syz.5.876': attribute type 10 has an invalid length. [ 109.382531][ T9246] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 109.392130][ T9246] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 109.417393][ T6895] usb 8-1: Using ep0 maxpacket: 32 [ 109.423102][ T6895] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 109.425737][ T6895] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 109.426184][ T40] audit: type=1400 audit(1757254365.990:644): avc: denied { mounton } for pid=9248 comm="syz.5.878" path="/syzcgroup/unified/syz5" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 109.429030][ T6895] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 109.439303][ T6895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.442057][ T40] audit: type=1400 audit(1757254366.010:645): avc: denied { read write } for pid=7266 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.442403][ T6895] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 109.450771][ T40] audit: type=1400 audit(1757254366.010:646): avc: denied { open } for pid=7266 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.450815][ T40] audit: type=1400 audit(1757254366.010:647): avc: denied { ioctl } for pid=7266 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.458560][ T9255] netlink: 'syz.5.879': attribute type 10 has an invalid length. [ 109.478660][ T6895] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.478686][ T6895] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 109.478697][ T6895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.480327][ T6895] usb 8-1: config 0 descriptor?? [ 109.489312][ T9255] batadv0: entered promiscuous mode [ 109.494293][ T9255] batadv0: entered allmulticast mode [ 109.497410][ T9255] bridge0: port 3(batadv0) entered blocking state [ 109.500588][ T9255] bridge0: port 3(batadv0) entered disabled state [ 109.505993][ T9255] bridge0: port 3(batadv0) entered blocking state [ 109.508962][ T9255] bridge0: port 3(batadv0) entered forwarding state [ 109.517206][ T6031] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 109.537623][ T6031] usb 6-1: device descriptor read/8, error -71 [ 109.588335][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 109.591735][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 109.657389][ T6031] usb usb6-port1: unable to enumerate USB device [ 109.696614][ T6895] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 109.707341][ T6895] usb 8-1: USB disconnect, device number 9 [ 109.719546][ T6895] usblp0: removed [ 109.730910][ T9266] netlink: 'syz.4.882': attribute type 39 has an invalid length. [ 109.917426][ T40] audit: type=1400 audit(1757254366.480:648): avc: denied { read } for pid=9270 comm="syz.4.884" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 109.917599][ T9271] sd 0:0:0:0: PR command failed: 1026 [ 109.926119][ T40] audit: type=1400 audit(1757254366.480:649): avc: denied { open } for pid=9270 comm="syz.4.884" path="/121/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 109.927863][ T9271] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 109.937397][ T40] audit: type=1400 audit(1757254366.490:650): avc: denied { ioctl } for pid=9270 comm="syz.4.884" path="/121/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 109.938946][ T9271] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 110.207305][ T6895] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 110.267186][ T34] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 110.327380][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 110.367534][ T6895] usb 8-1: Using ep0 maxpacket: 32 [ 110.371481][ T6895] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 110.375132][ T6895] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 110.378960][ T6895] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 110.382765][ T6895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 110.386769][ T6895] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 110.392004][ T6895] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 110.397902][ T6895] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 110.401714][ T6895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.407924][ T6895] usb 8-1: config 0 descriptor?? [ 110.428927][ T34] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.432856][ T34] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 110.436895][ T34] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 110.440719][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.448944][ T9287] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 110.455746][ T34] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.612925][ T6895] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 110.658916][ T9287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.662039][ T9287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.718026][ T9297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.721844][ T9297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.725894][ T6031] usb 9-1: USB disconnect, device number 8 [ 111.148060][ T9316] loop6: detected capacity change from 0 to 7 [ 111.152750][ T9316] Dev loop6: unable to read RDB block 7 [ 111.154577][ T9316] loop6: AHDI p1 [ 111.155772][ T9316] loop6: partition table partially beyond EOD, truncated [ 111.649216][ T139] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 111.665007][ T9351] Option 'Ô_n'¶tr—1ZQ¥3Œ ¬-Öµ²ÙkÕXÜv~’' to dns_resolver key: bad/missing value [ 111.671034][ T9351] nbd: must specify a device to reconfigure [ 111.798165][ T139] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 111.801306][ T9366] netlink: 'syz.1.907': attribute type 1 has an invalid length. [ 111.802341][ T139] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.806659][ T139] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.810922][ T139] usb 9-1: config 0 interface 0 has no altsetting 0 [ 111.813845][ T139] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.814414][ T9366] netlink: 'syz.1.907': attribute type 1 has an invalid length. [ 111.817247][ T139] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.819754][ T9366] netlink: 'syz.1.907': attribute type 1 has an invalid length. [ 111.823513][ T139] usb 9-1: config 0 interface 0 has no altsetting 0 [ 111.825935][ T9366] netlink: 'syz.1.907': attribute type 1 has an invalid length. [ 111.830234][ T139] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.833721][ T139] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.837377][ T139] usb 9-1: config 0 interface 0 has no altsetting 0 [ 111.840508][ T139] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.843671][ T139] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.848475][ T139] usb 9-1: config 0 interface 0 has no altsetting 0 [ 111.848685][ T9366] netlink: 'syz.1.907': attribute type 1 has an invalid length. [ 111.852090][ T139] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.857638][ T139] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.859429][ T9364] bond2: (slave geneve2): making interface the new active one [ 111.862053][ T139] usb 9-1: config 0 interface 0 has no altsetting 0 [ 111.865511][ T9364] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 111.868673][ T139] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.871099][ T9366] netlink: 'syz.1.907': attribute type 1 has an invalid length. [ 111.873947][ T139] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.881267][ T139] usb 9-1: config 0 interface 0 has no altsetting 0 [ 111.885239][ T139] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.888715][ T139] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.893307][ T139] usb 9-1: config 0 interface 0 has no altsetting 0 [ 111.897782][ T139] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.901531][ T139] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.905998][ T139] usb 9-1: config 0 interface 0 has no altsetting 0 [ 111.911207][ T139] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 111.915062][ T139] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 111.918816][ T139] usb 9-1: Product: syz [ 111.920622][ T139] usb 9-1: Manufacturer: syz [ 111.923343][ T139] usb 9-1: SerialNumber: syz [ 111.928260][ T139] usb 9-1: config 0 descriptor?? [ 111.940724][ T139] yurex 9-1:0.0: USB YUREX device now attached to Yurex #1 [ 111.944721][ T34] hid-generic 0004:0004:0007.0007: item fetching failed at offset 5/9 [ 111.950998][ T34] hid-generic 0004:0004:0007.0007: probe with driver hid-generic failed with error -22 [ 111.972883][ T29] usb 8-1: USB disconnect, device number 10 [ 111.978648][ T29] usblp0: removed [ 112.035220][ T9381] sp0: Synchronizing with TNC [ 112.040076][ T9381] exFAT-fs (nullb0): invalid boot record signature [ 112.043135][ T9381] exFAT-fs (nullb0): failed to read boot sector [ 112.046298][ T9381] exFAT-fs (nullb0): failed to recognize exfat type [ 112.061021][ T9378] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 112.133947][ T9339] nftables ruleset with unbound chain [ 112.166243][ T139] usb 9-1: USB disconnect, device number 9 [ 112.172950][ T139] yurex 9-1:0.0: USB YUREX #1 now disconnected [ 112.216535][ T9395] __nla_validate_parse: 15 callbacks suppressed [ 112.216554][ T9395] netlink: 32 bytes leftover after parsing attributes in process `syz.1.914'. [ 112.414127][ T9405] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 113.319640][ T29] IPVS: starting estimator thread 0... [ 113.407174][ T7551] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 113.407337][ T9439] IPVS: using max 42 ests per chain, 100800 per kthread [ 113.459085][ T9462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.933'. [ 113.462077][ T9462] netlink: 60 bytes leftover after parsing attributes in process `syz.4.933'. [ 113.464937][ T9462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.933'. [ 113.469412][ T9462] netlink: 60 bytes leftover after parsing attributes in process `syz.4.933'. [ 113.472220][ T9462] netlink: 104 bytes leftover after parsing attributes in process `syz.4.933'. [ 113.522490][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.937'. [ 113.561588][ T9482] netlink: 68 bytes leftover after parsing attributes in process `syz.3.940'. [ 113.577970][ T7551] usb 6-1: Using ep0 maxpacket: 16 [ 113.586987][ T7551] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.590893][ T7551] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.594647][ T7551] usb 6-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 113.598950][ T7551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.603852][ T7551] usb 6-1: config 0 descriptor?? [ 113.686243][ T9487] affs: No valid root block on device nullb0 [ 113.967282][ T139] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 114.008104][ T9502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.127130][ T139] usb 8-1: Using ep0 maxpacket: 8 [ 114.129988][ T139] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 114.132547][ T139] usb 8-1: config 179 has no interface number 0 [ 114.134526][ T139] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 114.138398][ T139] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 114.142237][ T139] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 101, changing to 10 [ 114.145773][ T139] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24697, setting to 1024 [ 114.149429][ T139] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 114.153501][ T139] usb 8-1: config 179 interface 65 has no altsetting 0 [ 114.155682][ T139] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 114.158719][ T139] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.173671][ T139] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input15 [ 114.210398][ T7551] usbhid 6-1:0.0: can't add hid device: -71 [ 114.212764][ T7551] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 114.219481][ T7551] usb 6-1: USB disconnect, device number 18 [ 114.227564][ T5362] input input15: unable to receive magic message: -110 [ 114.234388][ T5362] input input15: unable to receive magic message: -32 [ 114.239622][ T5362] input input15: unable to receive magic message: -32 [ 114.243630][ T5362] input input15: unable to receive magic message: -32 [ 114.246834][ T5362] input input15: unable to receive magic message: -32 [ 114.250363][ T5362] input input15: unable to receive magic message: -32 [ 114.305826][ T9517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.951'. [ 114.316511][ T9517] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.320669][ T9517] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.364575][ T9495] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 114.367664][ T40] kauditd_printk_skb: 84 callbacks suppressed [ 114.367672][ T40] audit: type=1400 audit(1757254370.940:735): avc: denied { append } for pid=9494 comm="syz.3.944" name="event4" dev="devtmpfs" ino=3161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 114.375798][ T9495] input input15: unable to receive magic message: -32 [ 114.385919][ T139] usb 8-1: USB disconnect, device number 11 [ 114.386783][ T9517] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.388031][ C2] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 114.391239][ T9517] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.396675][ T40] audit: type=1326 audit(1757254370.960:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.5.939" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2958ebe9 code=0x7fc00000 [ 114.404147][ T40] audit: type=1326 audit(1757254370.960:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.5.939" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2958ebe9 code=0x7fc00000 [ 114.411639][ T40] audit: type=1326 audit(1757254370.960:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.5.939" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2958ebe9 code=0x7fc00000 [ 114.418346][ T40] audit: type=1326 audit(1757254370.960:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.5.939" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2958ebe9 code=0x7fc00000 [ 114.425265][ T40] audit: type=1326 audit(1757254370.960:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.5.939" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2958ebe9 code=0x7fc00000 [ 114.432238][ T40] audit: type=1326 audit(1757254370.960:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.5.939" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2958ebe9 code=0x7fc00000 [ 114.439476][ T40] audit: type=1326 audit(1757254370.960:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.5.939" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2958ebe9 code=0x7fc00000 [ 114.446252][ T40] audit: type=1326 audit(1757254370.960:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.5.939" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2958ebe9 code=0x7fc00000 [ 114.453180][ T40] audit: type=1326 audit(1757254370.960:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.5.939" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2958ebe9 code=0x7fc00000 [ 114.454592][ T9517] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.463717][ T9517] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.514679][ T9520] netlink: 12 bytes leftover after parsing attributes in process `syz.5.952'. [ 114.527399][ T9517] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.531207][ T9517] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.618606][ T8264] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.621432][ T8264] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.635528][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.638157][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.650305][ T8264] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.653748][ T8264] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.674200][ T8264] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.677437][ T8264] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.822560][ T9534] validate_nla: 60 callbacks suppressed [ 114.822571][ T9534] netlink: 'syz.1.955': attribute type 5 has an invalid length. [ 114.911030][ T9541] smc: net device bond0 applied user defined pnetid SYZ0 [ 114.911113][ T9542] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002 [ 115.058362][ T9558] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 115.062225][ T9558] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 115.155901][ T9565] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 115.158933][ T9565] SELinux: failed to load policy [ 115.165529][ T9565] bridge2: entered promiscuous mode [ 115.167466][ T9565] bridge2: entered allmulticast mode [ 115.261892][ T9579] loop6: detected capacity change from 0 to 63 [ 115.268527][ T9579] buffer_io_error: 30 callbacks suppressed [ 115.268542][ T9579] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 115.275588][ T9579] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 115.279543][ T9579] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 115.283088][ T9579] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 115.288262][ T9579] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 115.291792][ T9579] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 115.294773][ T9579] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 115.962709][ T9645] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 115.966175][ T9645] exFAT-fs (nullb0): invalid boot record signature [ 115.968485][ T9645] exFAT-fs (nullb0): failed to read boot sector [ 115.970483][ T9645] exFAT-fs (nullb0): failed to recognize exfat type [ 116.075146][ T9653] netlink: 'syz.5.993': attribute type 1 has an invalid length. [ 116.300083][ T9675] netlink: 'syz.1.998': attribute type 29 has an invalid length. [ 116.312957][ T9675] netlink: 'syz.1.998': attribute type 29 has an invalid length. [ 116.507338][ T139] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 116.666735][ T9699] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 116.673512][ T139] usb 9-1: Using ep0 maxpacket: 16 [ 116.676807][ T139] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 116.680395][ T139] usb 9-1: config 0 has no interface number 0 [ 116.684299][ T139] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 116.689548][ T139] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.692368][ T139] usb 9-1: Product: syz [ 116.693797][ T139] usb 9-1: Manufacturer: syz [ 116.695446][ T139] usb 9-1: SerialNumber: syz [ 116.699397][ T139] usb 9-1: config 0 descriptor?? [ 116.702394][ T139] hub 9-1:0.132: bad descriptor, ignoring hub [ 116.704478][ T139] hub 9-1:0.132: probe with driver hub failed with error -5 [ 116.712593][ T139] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.132/input/input16 [ 116.914073][ T9707] netlink: 'syz.1.1007': attribute type 2 has an invalid length. [ 117.173240][ T139] usb 9-1: USB disconnect, device number 10 [ 117.186882][ T5972] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 117.333419][ T9738] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.338333][ T9740] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.381380][ T9743] bridge3: entered promiscuous mode [ 117.699893][ T9751] netlink: 'syz.4.1021': attribute type 2 has an invalid length. [ 117.755351][ T9753] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 117.759630][ T9753] UDF-fs: Scanning with blocksize 2048 failed [ 117.763268][ T9753] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 117.766134][ T9753] UDF-fs: Scanning with blocksize 4096 failed [ 117.826506][ T9756] pim6reg13: entered allmulticast mode [ 117.988164][ T9767] sp0: Synchronizing with TNC [ 118.167154][ T5972] Bluetooth: hci0: command 0x0419 tx timeout [ 118.167219][ T63] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 118.242661][ T9773] __nla_validate_parse: 7 callbacks suppressed [ 118.242673][ T9773] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1029'. [ 118.322588][ T9776] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 118.332160][ T9776] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 118.334267][ T9776] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.336958][ T9776] vhci_hcd vhci_hcd.0: Device attached [ 118.339700][ T9787] binder: BINDER_SET_CONTEXT_MGR already set [ 118.341601][ T9787] binder: 9784:9787 ioctl 4018620d 2000000000c0 returned -16 [ 118.514724][ T9782] vhci_hcd: connection closed [ 118.516579][ T8264] vhci_hcd: stop threads [ 118.521127][ T8264] vhci_hcd: release socket [ 118.522793][ T8264] vhci_hcd: disconnect device [ 118.577372][ T29] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 118.582636][ T29] usb 39-1: enqueue for inactive port 0 [ 118.647194][ T29] vhci_hcd: vhci_device speed not set [ 119.002755][ T9830] loop3: detected capacity change from 0 to 7 [ 119.007534][ T9830] Dev loop3: unable to read RDB block 7 [ 119.009260][ T9830] loop3: unable to read partition table [ 119.011151][ T9830] loop3: partition table beyond EOD, truncated [ 119.014156][ T9830] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 119.407785][ T6050] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 119.562302][ T9874] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1056'. [ 119.603682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.719495][ T9881] netlink: 'syz.3.1057': attribute type 1 has an invalid length. [ 120.247204][ T63] Bluetooth: hci0: command 0x0419 tx timeout [ 120.409641][ T9909] hsr0: mtu greater than device maximum [ 120.465659][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1066'. [ 120.471217][ T9926] netlink: 284 bytes leftover after parsing attributes in process `syz.5.1066'. [ 120.474332][ T9932] virtio-fs: tag not found [ 120.483850][ T9934] virtio-fs: tag not found [ 120.570868][ T9937] ubi31: detaching mtd0 [ 120.576688][ T9937] ubi31: mtd0 is detached [ 120.617888][ T40] kauditd_printk_skb: 80 callbacks suppressed [ 120.617902][ T40] audit: type=1400 audit(1757254377.190:825): avc: denied { ioctl } for pid=9948 comm="syz.4.1072" path="socket:[37424]" dev="sockfs" ino=37424 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 120.632617][ T40] audit: type=1400 audit(1757254377.200:826): avc: denied { execute } for pid=9940 comm="syz.1.1071" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38919 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 120.701965][ T63] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 120.825952][ T9967] vxlan1: entered promiscuous mode [ 120.828751][ T9967] vxlan1: entered allmulticast mode [ 120.933180][ T9986] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 121.021738][ T9998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1085'. [ 121.080809][ T40] audit: type=1400 audit(1757254377.650:827): avc: denied { read } for pid=10008 comm="syz.3.1089" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 121.091449][ T40] audit: type=1400 audit(1757254377.650:828): avc: denied { open } for pid=10008 comm="syz.3.1089" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 121.126740][T10018] netlink: 'syz.3.1090': attribute type 13 has an invalid length. [ 121.228020][ T40] audit: type=1400 audit(1757254377.800:829): avc: denied { node_bind } for pid=10017 comm="syz.3.1090" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 121.357845][ T40] audit: type=1400 audit(1757254377.930:830): avc: denied { unmount } for pid=5965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 121.390916][ T40] audit: type=1400 audit(1757254377.960:831): avc: denied { create } for pid=10028 comm="syz.1.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 121.397415][ T40] audit: type=1400 audit(1757254377.960:832): avc: denied { getopt } for pid=10028 comm="syz.1.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 121.475016][T10031] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 121.479576][ T40] audit: type=1400 audit(1757254378.050:833): avc: denied { relabelto } for pid=10030 comm="syz.3.1094" name="273" dev="tmpfs" ino=1533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 121.479878][T10031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1094'. [ 121.481564][T10032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1094'. [ 121.481576][T10032] openvswitch: netlink: Flow actions attr not present in new flow. [ 121.492571][ T40] audit: type=1400 audit(1757254378.050:834): avc: denied { associate } for pid=10030 comm="syz.3.1094" name="273" dev="tmpfs" ino=1533 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 121.495066][T10031] openvswitch: netlink: Flow actions attr not present in new flow. [ 121.506199][T10038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1096'. [ 121.766465][T10051] block nbd1: Attempted send on invalid socket [ 121.769844][T10051] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 121.773926][T10051] EXT4-fs (nbd1): unable to read superblock [ 121.881862][T10064] vlan2: entered allmulticast mode [ 121.883494][T10064] veth1: entered allmulticast mode [ 121.972975][T10074] program syz.1.1106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.100799][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1109'. [ 122.109152][T10078] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.170235][T10078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.174941][T10078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.243379][T10080] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 122.253114][ T1151] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.255855][ T1151] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.260360][ T1151] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.263105][ T1151] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.291224][T10089] netlink: 'syz.4.1111': attribute type 21 has an invalid length. [ 122.291224][T10088] netlink: 'syz.4.1111': attribute type 21 has an invalid length. [ 122.291268][T10088] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1111'. [ 122.353931][T10099] syzkaller0: entered promiscuous mode [ 122.355850][T10099] syzkaller0: entered allmulticast mode [ 122.363647][T10097] tipc: Started in network mode [ 122.366618][T10097] tipc: Node identity 3ead50bff0b1, cluster identity 4711 [ 122.370406][T10097] tipc: Enabled bearer , priority 0 [ 122.384106][T10097] tipc: Resetting bearer [ 122.398885][T10097] tipc: Disabling bearer [ 122.591803][T10115] tmpfs: Unknown parameter 'usrquotap1' [ 122.633282][T10119] devpts: Bad value for 'max' [ 122.686880][T10121] use of bytesused == 0 is deprecated and will be removed in the future, [ 122.690545][T10121] use the actual size instead. [ 122.718798][T10125] overlayfs: overlapping lowerdir path [ 122.721420][T10123] overlayfs: overlapping lowerdir path [ 122.758945][T10129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.761404][T10129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.764230][T10129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.766838][T10129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.239086][ T63] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 123.257606][T10171] __nla_validate_parse: 3 callbacks suppressed [ 123.257616][T10171] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1135'. [ 123.356609][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1137'. [ 123.363584][T10180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1137'. [ 123.387404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.410901][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 123.549991][T10193] block nbd5: Send control failed (result -32) [ 123.552662][T10193] block nbd5: Request send failed, requeueing [ 123.559159][ T149] block nbd5: Dead connection, failed to find a fallback [ 123.561594][ T149] block nbd5: shutting down sockets [ 123.563411][ T149] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.567658][T10193] I/O error, dev nbd5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.571729][T10193] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 123.575021][T10193] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.582853][T10193] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 123.589985][T10193] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.594136][T10193] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.631108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.637202][T10193] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 123.640261][T10193] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.643519][T10193] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 123.646759][T10193] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.653379][T10193] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.656618][T10193] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 123.660855][T10193] I/O error, dev nbd5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.663793][T10193] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 123.674775][T10193] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 123.697683][T10193] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 123.701435][T10193] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 123.745947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.997939][T10209] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1143'. [ 124.020211][T10212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=10212 comm=syz.3.1144 [ 124.155059][T10221] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 124.158234][T10221] [U] J"—e:ÀÆ" [ 124.174932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.240842][T10233] overlayfs: missing 'lowerdir' [ 124.254226][T10233] netlink: 814 bytes leftover after parsing attributes in process `syz.1.1150'. [ 124.263074][T10237] team0: Caught tx_queue_len zero misconfig [ 124.298572][T10244] netlink: 'syz.3.1154': attribute type 1 has an invalid length. [ 124.301185][T10244] netlink: 'syz.3.1154': attribute type 1 has an invalid length. [ 124.303856][T10244] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1154'. [ 124.306708][T10244] netlink: 'syz.3.1154': attribute type 1 has an invalid length. [ 124.309512][T10244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1154'. [ 124.346874][T10244] /dev/sg0: Can't lookup blockdev [ 124.449222][T10255] dlm: non-version read from control device 0 [ 124.451762][T10255] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1156'. [ 124.555666][T10267] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 124.557785][T10267] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 124.563107][T10267] vhci_hcd vhci_hcd.0: Device attached [ 124.570171][T10267] vhci_hcd vhci_hcd.0: port 0 already used [ 124.578629][T10267] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 124.581257][T10267] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 124.584565][T10267] vhci_hcd vhci_hcd.0: Device attached [ 124.587849][T10272] vhci_hcd: connection closed [ 124.588085][T10268] vhci_hcd: connection closed [ 124.588153][ T8264] vhci_hcd: stop threads [ 124.593915][ T8264] vhci_hcd: release socket [ 124.595415][ T8264] vhci_hcd: disconnect device [ 124.598284][ T8264] vhci_hcd: stop threads [ 124.599700][ T8264] vhci_hcd: release socket [ 124.601341][ T8264] vhci_hcd: disconnect device [ 124.727560][ T29] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 124.729738][ T63] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 124.734315][ T63] Bluetooth: hci0: Injecting HCI hardware error event [ 124.738631][ T5972] Bluetooth: hci0: hardware error 0x00 [ 124.878772][ T29] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 124.880572][T10284] vivid-000: ================= START STATUS ================= [ 124.881706][ T29] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 124.884117][T10284] vivid-000: Radio HW Seek Mode: [ 124.888314][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 124.889317][T10284] Bounded [ 124.892017][ T29] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 124.893411][T10284] [ 124.893420][T10284] vivid-000: Radio Programmable HW Seek: false [ 124.893445][T10284] vivid-000: RDS Rx I/O Mode: Block I/O [ 124.893465][T10284] vivid-000: Generate RBDS Instead of RDS: false [ 124.893484][T10284] vivid-000: RDS Reception: true [ 124.893503][T10284] vivid-000: RDS Program Type: 0 inactive [ 124.893526][T10284] vivid-000: RDS PS Name: inactive [ 124.893549][T10284] vivid-000: RDS Radio Text: inactive [ 124.893570][T10284] vivid-000: RDS Traffic Announcement: false inactive [ 124.893592][T10284] vivid-000: RDS Traffic Program: false inactive [ 124.893615][T10284] vivid-000: RDS Music: false inactive [ 124.893638][T10284] vivid-000: ================== END STATUS ================== [ 124.900168][T10284] kAFS: No cell specified [ 124.900928][ T29] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 124.932311][ T29] usb 9-1: Product: syz [ 124.934169][ T29] usb 9-1: Manufacturer: syz [ 124.936203][ T29] usb 9-1: SerialNumber: syz [ 124.941506][ T29] usb 9-1: config 0 descriptor?? [ 124.945827][ T29] hub 9-1:0.0: bad descriptor, ignoring hub [ 124.948451][ T29] hub 9-1:0.0: probe with driver hub failed with error -5 [ 124.955065][ T29] usb 9-1: selecting invalid altsetting 0 [ 125.172520][T10292] kAFS: No cell specified [ 125.287280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.543964][T10302] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1167'. [ 125.657238][ T6895] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 125.827355][ T6895] usb 6-1: Using ep0 maxpacket: 8 [ 125.831320][ T54] usb 9-1: USB disconnect, device number 11 [ 125.835726][ T6895] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.849211][ T6895] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 125.859757][ T6895] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.863109][ T6895] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.876743][ T6895] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.880240][ T6895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.997473][ T54] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 126.094885][ T6895] usb 6-1: GET_CAPABILITIES returned 0 [ 126.096676][ T6895] usbtmc 6-1:16.0: can't read capabilities [ 126.101733][T10331] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 126.106125][T10331] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 126.107146][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 126.107160][ T40] audit: type=1400 audit(1757254382.670:850): avc: denied { firmware_load } for pid=10327 comm="syz.5.1168" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 126.160227][ T54] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 126.162821][ T54] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 126.165859][ T54] usb 9-1: config 0 interface 0 has no altsetting 0 [ 126.172133][ T54] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.175003][ T54] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 126.177815][ T54] usb 9-1: Product: syz [ 126.179195][ T54] usb 9-1: Manufacturer: syz [ 126.180657][ T54] usb 9-1: SerialNumber: syz [ 126.183306][ T54] usb 9-1: config 0 descriptor?? [ 126.189650][ T54] hub 9-1:0.0: bad descriptor, ignoring hub [ 126.191576][ T54] hub 9-1:0.0: probe with driver hub failed with error -5 [ 126.195084][ T54] usb 9-1: selecting invalid altsetting 0 [ 126.295704][T10292] usb 6-1: usbtmc_ioctl_clear_out_halt returned -32 [ 126.304686][T10302] binfmt_misc: register: failed to install interpreter file ./file0 [ 126.430222][ T40] audit: type=1400 audit(1757254383.000:851): avc: denied { module_load } for pid=10358 comm="syz.3.1174" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=39591 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 126.444768][T10359] Invalid ELF header magic: != ELF [ 126.476136][T10363] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 126.494317][T10363] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.497548][ T6032] usb 9-1: USB disconnect, device number 12 [ 126.630876][ T40] audit: type=1400 audit(1757254383.200:852): avc: denied { map } for pid=10373 comm="syz.3.1179" path="/dev/vcsa4" dev="devtmpfs" ino=2842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 126.640087][ T40] audit: type=1400 audit(1757254383.210:853): avc: denied { execute } for pid=10373 comm="syz.3.1179" path="/dev/vcsa4" dev="devtmpfs" ino=2842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 126.807337][ T5972] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 126.953597][T10388] overlayfs: failed to resolve './file1': -2 [ 127.024252][ T40] audit: type=1400 audit(1757254383.590:854): avc: denied { read } for pid=10391 comm="syz.4.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.040632][T10392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.046072][ T5972] Bluetooth: hci4: Malformed LE Event: 0x1b [ 127.050046][T10392] macvlan1: entered promiscuous mode [ 127.053497][T10392] ipvlan0: entered promiscuous mode [ 127.056686][T10392] ipvlan0: left promiscuous mode [ 127.059305][T10392] macvlan1: left promiscuous mode [ 127.754864][T10412] netlink: 'syz.3.1190': attribute type 7 has an invalid length. [ 127.762889][T10412] netlink: 'syz.3.1190': attribute type 8 has an invalid length. [ 127.766388][T10412] /dev/sg0: Can't lookup blockdev [ 127.805812][ T40] audit: type=1400 audit(1757254384.370:855): avc: denied { write } for pid=10418 comm="syz.3.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.895270][T10431] binder: 10430:10431 ioctl 4018620d 0 returned -22 [ 127.896137][T10432] binder: 10430:10432 ioctl 4018620d 0 returned -22 [ 127.902441][T10431] binder: 10430:10431 ioctl c0306201 0 returned -14 [ 127.903914][ T5972] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 127.907693][ T5972] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 127.950960][ T40] audit: type=1400 audit(1757254384.520:856): avc: denied { write } for pid=10440 comm="syz.5.1198" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 127.974612][ T40] audit: type=1400 audit(1757254384.540:857): avc: denied { write } for pid=10444 comm="syz.3.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.997424][T10446] Context (ID=0x4d8) not attached to queue pair (handle=0x4d9:0x0) [ 128.041137][ T40] audit: type=1400 audit(1757254384.610:858): avc: denied { getopt } for pid=10448 comm="syz.4.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 128.216602][ T7467] usb 6-1: USB disconnect, device number 19 [ 128.348100][T10459] kvm: pic: non byte write [ 128.720575][T10489] bridge_slave_0: left allmulticast mode [ 128.723202][T10489] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.732478][T10489] bridge_slave_1: left allmulticast mode [ 128.734795][T10489] bridge_slave_1: left promiscuous mode [ 128.737502][T10489] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.743750][T10489] bond0: (slave bond_slave_0): Releasing backup interface [ 128.751926][T10489] bond0: (slave bond_slave_1): Releasing backup interface [ 128.769503][T10489] team0: Port device team_slave_0 removed [ 128.772356][T10493] __nla_validate_parse: 4 callbacks suppressed [ 128.772368][T10493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1212'. [ 128.780498][T10489] team0: Port device team_slave_1 removed [ 128.784652][T10489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.790786][T10489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.795226][T10489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.799734][T10489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.811667][T10489] bond2: (slave geneve2): Releasing active interface [ 128.826387][T10493] team0: Mode changed to "broadcast" [ 128.837808][ T6050] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 128.913843][ T40] audit: type=1400 audit(1757254385.480:859): avc: denied { ioctl } for pid=10501 comm="syz.4.1215" path="socket:[42012]" dev="sockfs" ino=42012 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.918160][T10502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1215'. [ 128.948198][ T6050] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 128.959361][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1216'. [ 128.969811][T10508] 9pnet_virtio: no channels available for device syz [ 129.011455][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 129.067756][ T6895] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 129.098399][T10513] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 129.104764][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'. [ 129.108545][T10513] block device autoloading is deprecated and will be removed. [ 129.112011][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'. [ 129.116116][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'. [ 129.220152][ T6895] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.224576][ T6895] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 129.231301][ T6895] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 129.235096][ T6895] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.239300][T10519] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1219'. [ 129.247958][ T6895] usb 10-1: config 0 descriptor?? [ 129.256266][ T6895] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 129.259634][ T6895] dvb-usb: bulk message failed: -22 (3/0) [ 129.265927][ T6895] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 129.270874][ T6895] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 129.274013][ T6895] usb 10-1: media controller created [ 129.278013][ T6895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.291125][ T6895] dvb-usb: bulk message failed: -22 (6/0) [ 129.293582][ T6895] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 129.309738][ T6895] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input19 [ 129.323741][ T6895] dvb-usb: schedule remote query interval to 150 msecs. [ 129.326705][ T6895] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 129.404651][T10538] overlayfs: missing 'lowerdir' [ 129.434637][T10541] netlink: 'syz.4.1225': attribute type 1 has an invalid length. [ 129.438376][T10541] netlink: 'syz.4.1225': attribute type 4 has an invalid length. [ 129.463427][T10498] netlink: 536 bytes leftover after parsing attributes in process `syz.5.1214'. [ 129.467334][T10498] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1214'. [ 129.477782][ T6895] dvb-usb: bulk message failed: -22 (1/0) [ 129.480108][ T6895] dvb-usb: error while querying for an remote control event. [ 129.547367][ T6895] usb 10-1: USB disconnect, device number 7 [ 129.585900][ T6895] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 130.025626][T10606] binder: 10605:10606 ioctl 40046205 0 returned -22 [ 130.077561][ T6895] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 130.094076][T10609] input: syz0 as /devices/virtual/input/input21 [ 130.227309][ T6895] usb 9-1: Using ep0 maxpacket: 8 [ 130.238679][ T6895] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.241713][ T6895] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.245281][ T6895] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.249145][ T6895] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.253321][ T6895] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.256175][ T6895] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.467027][ T6895] usb 9-1: GET_CAPABILITIES returned 0 [ 130.470220][ T6895] usbtmc 9-1:16.0: can't read capabilities [ 130.669792][ T6050] usb 9-1: USB disconnect, device number 13 [ 130.986245][T10651] XFS (nbd1): no-recovery mounts must be read-only. [ 131.130794][T10653] netlink: 'syz.3.1255': attribute type 1 has an invalid length. [ 131.146373][T10653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.153216][T10653] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.376379][T10657] infiniband syz!: set active [ 131.381558][T10657] infiniband syz!: added team_slave_0 [ 131.420337][T10657] RDS/IB: syz!: added [ 131.422572][T10657] smc: adding ib device syz! with port count 1 [ 131.425166][T10657] smc: ib device syz! port 1 has pnetid [ 132.092279][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 132.092296][ T40] audit: type=1400 audit(1757254388.660:876): avc: denied { setopt } for pid=10694 comm="syz.1.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 132.224132][T10705] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.448814][ T40] audit: type=1400 audit(1757254389.020:877): avc: denied { ioctl } for pid=10715 comm="syz.1.1270" path="socket:[41556]" dev="sockfs" ino=41556 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.500756][T10721] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 132.514229][T10721] kvm: pic: level sensitive irq not supported [ 132.514948][T10721] kvm: pic: non byte read [ 132.524658][T10721] kvm: pic: level sensitive irq not supported [ 132.525085][T10721] kvm: pic: non byte read [ 132.531666][T10721] kvm: pic: level sensitive irq not supported [ 132.532099][T10721] kvm: pic: non byte read [ 132.539929][T10721] kvm: pic: level sensitive irq not supported [ 132.540422][T10721] kvm: pic: non byte read [ 132.548454][T10721] kvm: pic: level sensitive irq not supported [ 132.550352][T10721] kvm: pic: non byte read [ 132.558123][T10721] kvm: pic: level sensitive irq not supported [ 132.558823][T10721] kvm: pic: non byte read [ 132.664660][ T40] audit: type=1400 audit(1757254389.230:878): avc: denied { remount } for pid=10751 comm="syz.3.1279" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 132.740559][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.742639][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.770217][ T40] audit: type=1400 audit(1757254389.340:879): avc: denied { mounton } for pid=10751 comm="syz.3.1279" path="/324/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 132.895286][T10773] overlay: Bad value for 'nfs_export' [ 132.900602][ T40] audit: type=1400 audit(1757254389.470:880): avc: denied { getopt } for pid=10772 comm="syz.4.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 132.900740][T10773] tmpfs: Unknown parameter '0x0000000000000000' [ 133.081403][T10789] fuse: Bad value for 'group_id' [ 133.083034][T10789] fuse: Bad value for 'group_id' [ 133.131913][T10794] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 133.134058][T10794] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 133.136485][T10794] vhci_hcd vhci_hcd.0: Device attached [ 133.141470][T10795] vhci_hcd: connection closed [ 133.141591][ T8263] vhci_hcd: stop threads [ 133.144703][ T8263] vhci_hcd: release socket [ 133.146116][ T8263] vhci_hcd: disconnect device [ 133.232617][T10798] 8021q: adding VLAN 0 to HW filter on device bond4 [ 133.260416][T10798] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 133.270082][T10798] gretap1: entered promiscuous mode [ 133.274898][T10798] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 133.338701][ T1151] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 133.344666][T10806] overlayfs: failed to resolve './file0': -2 [ 133.346806][T10807] overlayfs: failed to resolve './file0': -2 [ 133.448691][ T80] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 133.633234][T10817] block nbd3: Attempted send on invalid socket [ 133.636476][T10817] blk_print_req_error: 3 callbacks suppressed [ 133.636489][T10817] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.645109][T10817] (syz.3.1297,10817,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 133.649734][T10817] (syz.3.1297,10817,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 133.654506][T10817] (syz.3.1297,10817,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 133.659106][T10817] (syz.3.1297,10817,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 133.739093][T10824] syzkaller1: entered promiscuous mode [ 133.741532][T10824] syzkaller1: entered allmulticast mode [ 133.783722][T10826] ip6tnl0: Caught tx_queue_len zero misconfig [ 133.787875][T10826] No control pipe specified [ 133.935391][T10840] bridge: RTM_NEWNEIGH with invalid ether address [ 133.980362][T10844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.988780][T10844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.994416][T10844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.002259][T10844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.010337][T10844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.188389][ T6895] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 134.273757][T10847] Bluetooth: MGMT ver 1.23 [ 134.348894][ T6895] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.353658][ T6895] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.358074][ T6895] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.363614][ T6895] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.367747][ T6895] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.371639][ T6895] usb 9-1: config 0 descriptor?? [ 134.547370][T10849] lo: Caught tx_queue_len zero misconfig [ 134.598677][T10855] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 134.663166][T10861] __nla_validate_parse: 12 callbacks suppressed [ 134.663181][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1314'. [ 134.670144][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1314'. [ 134.670553][T10862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1314'. [ 134.684637][T10861] binder: BINDER_SET_CONTEXT_MGR already set [ 134.687518][T10861] binder: 10860:10861 ioctl 4018620d 2000000000c0 returned -16 [ 134.689540][T10862] binder: BINDER_SET_CONTEXT_MGR already set [ 134.693459][T10862] binder: 10860:10862 ioctl 4018620d 200000000040 returned -16 [ 134.699376][T10861] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 134.739567][T10866] random: crng reseeded on system resumption [ 134.747834][T10866] afs: Unknown parameter ':1ã]"^®„ˆÒ 9mT' [ 134.778634][ T6895] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 134.785786][ T6895] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 134.795937][ T40] audit: type=1400 audit(1757254391.360:881): avc: denied { watch } for pid=10869 comm="syz.1.1317" path="/syzcgroup/unified/syz1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 134.890719][ T5972] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 135.042090][T10840] netlink: 'syz.4.1306': attribute type 1 has an invalid length. [ 135.051554][ T6895] usb 9-1: USB disconnect, device number 14 [ 135.174315][T10896] kernel profiling enabled (shift: 63) [ 135.176274][T10896] profiling shift: 63 too large [ 135.218149][T10904] IPVS: set_ctl: invalid protocol: 108 100.1.1.2:20000 [ 135.220399][T10900] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 135.243438][ T40] audit: type=1400 audit(1757254391.810:882): avc: denied { write } for pid=10903 comm="syz.5.1326" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 135.425673][T10933] ISOFS: Unable to identify CD-ROM format. [ 135.595041][T10951] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.596300][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1342'. [ 135.601389][T10951] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 135.618023][T10953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10953 comm=syz.4.1342 [ 135.629307][T10953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1342'. [ 135.703709][T10951] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.708056][T10951] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 135.785933][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1345'. [ 135.848441][T10951] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.852339][T10951] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 135.882022][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1346'. [ 135.932165][T10951] bond0: (slave netdevsim0): Releasing backup interface [ 135.950189][T10951] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.957192][T10951] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 135.994060][T10977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1350'. [ 136.047845][T10977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1350'. [ 136.098706][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1351'. [ 136.112330][ T8264] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 136.115907][ T8264] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 136.127603][ T80] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 136.130333][ T80] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 136.149082][ T80] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 136.153129][ T80] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 136.163377][ T80] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 136.166876][ T80] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 136.319485][T11002] program syz.4.1358 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.589972][ T40] audit: type=1400 audit(1757254393.160:883): avc: denied { mounton } for pid=11019 comm="syz.4.1363" path="/246/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 136.616237][T11013] netlink: 'syz.1.1361': attribute type 10 has an invalid length. [ 136.620243][T11013] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 136.623190][T11013] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 136.627907][T11013] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 136.743874][T11026] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 136.944868][T11036] netlink: 'syz.1.1367': attribute type 5 has an invalid length. [ 137.072653][T11056] netlink: 'syz.3.1375': attribute type 1 has an invalid length. [ 137.090466][T11056] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.101955][T11056] bond3: (slave geneve3): making interface the new active one [ 137.105236][T11056] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 137.108307][ T80] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.112184][ T80] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.115690][ T80] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.120490][ T80] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.196459][T11068] program syz.3.1378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.358339][T11074] netlink: 'syz.5.1382': attribute type 10 has an invalid length. [ 137.387346][ T53] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 137.410123][T11074] kvm: kvm [11073]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 137.414426][T11074] kvm: kvm [11073]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 137.447531][ T139] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 137.518679][T11083] netlink: 'syz.4.1383': attribute type 7 has an invalid length. [ 137.539843][ T53] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 137.544742][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 137.549786][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 137.554259][ T53] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.559673][ T53] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.563690][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.570139][ T53] usb 6-1: config 0 descriptor?? [ 137.576292][T11061] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.620233][ T139] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 137.630761][ T139] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 137.634321][ T139] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.637642][ T139] usb 8-1: Product: syz [ 137.639491][ T139] usb 8-1: Manufacturer: syz [ 137.641647][ T139] usb 8-1: SerialNumber: syz [ 137.648505][ T139] usb 8-1: config 0 descriptor?? [ 137.698601][T11092] netlink: 'syz.5.1385': attribute type 1 has an invalid length. [ 137.786992][ T40] audit: type=1400 audit(1757254394.350:884): avc: denied { ioctl } for pid=11060 comm="syz.1.1377" path="socket:[43910]" dev="sockfs" ino=43910 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 137.875552][ T40] audit: type=1400 audit(1757254394.440:885): avc: denied { map } for pid=11099 comm="syz.5.1389" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 137.993778][ T53] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 137.996426][ T53] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 137.999116][ T53] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 138.002669][ T53] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 138.005776][ T53] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 138.014721][ T53] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 138.125397][ T40] audit: type=1400 audit(1757254394.690:886): avc: denied { map } for pid=11112 comm="syz.5.1393" path="socket:[42992]" dev="sockfs" ino=42992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 138.237144][ T29] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 138.388875][ T29] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 138.394807][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.398747][ T29] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.403298][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 138.407252][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.411850][ T29] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.415877][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 138.423550][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.427491][ T29] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.431653][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 138.435233][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.439093][ T29] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.443468][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 138.447708][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.451570][ T29] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.456305][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 138.461611][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.464380][ T29] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.467827][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 138.471268][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.474067][ T29] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.478257][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 138.482137][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.484931][ T29] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.490295][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 138.495279][ T29] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 138.498905][ T29] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 138.502796][ T29] usb 9-1: Product: syz [ 138.504580][ T29] usb 9-1: Manufacturer: syz [ 138.506486][ T29] usb 9-1: SerialNumber: syz [ 138.510495][ T29] usb 9-1: config 0 descriptor?? [ 138.522169][ T29] yurex 9-1:0.0: USB YUREX device now attached to Yurex #1 [ 139.330896][ T53] usb 9-1: USB disconnect, device number 15 [ 139.336043][ T53] yurex 9-1:0.0: USB YUREX #1 now disconnected [ 139.528882][T11125] netlink: 'syz.4.1395': attribute type 13 has an invalid length. [ 139.532144][T11125] netlink: 'syz.4.1395': attribute type 17 has an invalid length. [ 139.543338][T11125] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 139.607308][ T5972] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 139.611847][ T5972] Bluetooth: hci4: Injecting HCI hardware error event [ 139.617024][ T63] Bluetooth: hci4: hardware error 0x00 [ 139.850428][T11138] syz.5.1398 (11138): drop_caches: 2 [ 139.852463][T11138] syz.5.1398 (11138): drop_caches: 2 [ 139.855683][T11140] __nla_validate_parse: 10 callbacks suppressed [ 139.855698][T11140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1399'. [ 139.869146][T11140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1399'. [ 139.879408][T11140] netlink: zone id is out of range [ 139.881394][T11140] netlink: zone id is out of range [ 139.884870][T11140] netlink: zone id is out of range [ 139.887829][T11140] netlink: zone id is out of range [ 139.890688][T11140] netlink: zone id is out of range [ 139.892385][T11140] netlink: zone id is out of range [ 139.895399][T11140] netlink: zone id is out of range [ 139.899446][T11140] netlink: zone id is out of range [ 139.901894][T11140] netlink: zone id is out of range [ 140.007202][ T5972] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 140.010480][ T5972] Bluetooth: hci2: Injecting HCI hardware error event [ 140.016228][ T5976] Bluetooth: hci2: hardware error 0x00 [ 140.089082][ T29] usb 6-1: USB disconnect, device number 20 [ 140.102074][T11152] Invalid option length (1048180) for dns_resolver key [ 140.994124][ T34] usb 8-1: USB disconnect, device number 12 [ 141.145656][T11172] kernel profiling enabled (shift: 63) [ 141.149056][T11172] profiling shift: 63 too large [ 141.167627][ T40] audit: type=1400 audit(1757254397.730:887): avc: denied { mount } for pid=11174 comm="syz.5.1409" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 141.174702][ T40] audit: type=1400 audit(1757254397.740:888): avc: denied { mounton } for pid=11174 comm="syz.5.1409" path="/295/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 141.336328][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1412'. [ 141.500531][T11191] overlayfs: failed to resolve './file1': -2 [ 141.505807][T11191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1415'. [ 141.555265][T11195] snd_dummy snd_dummy.0: control 1:96:0:syz1:211 is already present [ 141.687363][ T63] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 141.702391][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 141.869768][T11223] block nbd1: NBD_DISCONNECT [ 141.872997][T11223] block nbd1: Disconnected due to user request. [ 141.876006][T11223] block nbd1: shutting down sockets [ 142.006357][T11233] netlink: 'syz.1.1427': attribute type 3 has an invalid length. [ 142.014660][T11239] loop6: detected capacity change from 0 to 2560 [ 142.018178][T11239] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.021302][T11239] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.024093][T11239] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.026605][T11239] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.029723][T11239] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.032281][T11239] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.034837][T11239] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.037949][T11239] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.040482][T11239] ldm_validate_partition_table(): Disk read failed. [ 142.042627][T11239] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.045040][T11239] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.047998][T11239] Dev loop6: unable to read RDB block 0 [ 142.050096][T11239] loop6: unable to read partition table [ 142.051797][T11243] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 142.055576][T11239] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 142.056675][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1427'. [ 142.056679][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1427'. [ 142.068359][ T5377] ldm_validate_partition_table(): Disk read failed. [ 142.070578][ T5377] Dev loop6: unable to read RDB block 0 [ 142.070601][T11232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11232 comm=syz.1.1427 [ 142.072558][ T5377] loop6: unable to read partition table [ 142.087163][ T5976] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 142.099580][T11247] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 142.212093][ T40] audit: type=1400 audit(1757254398.780:889): avc: denied { read } for pid=11257 comm="syz.1.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 142.237005][T11266] XFS (nullb0): Invalid superblock magic number [ 142.314460][ T40] audit: type=1400 audit(1757254398.880:890): avc: denied { write } for pid=11277 comm="syz.3.1438" name="file0" dev="tmpfs" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 142.323528][ T40] audit: type=1326 audit(1757254398.890:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11279 comm="syz.4.1439" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78be18ebe9 code=0x0 [ 142.365686][ T40] audit: type=1400 audit(1757254398.930:892): avc: denied { create } for pid=11283 comm="syz.3.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 142.429894][T11282] kvm: MWAIT instruction emulated as NOP! [ 142.589453][T11295] fuse: Bad value for 'fd' [ 143.368848][T11332] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1455'. [ 143.537937][T11340] tmpfs: Bad value for 'mpol' [ 143.626946][T11348] netlink: 'syz.3.1459': attribute type 15 has an invalid length. [ 143.630434][T11348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1459'. [ 143.695165][T11351] (syz.3.1460,11351,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 143.698851][T11351] (syz.3.1460,11351,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 143.721781][ T40] audit: type=1400 audit(1757254400.290:893): avc: denied { map } for pid=11352 comm="syz.1.1461" path="socket:[46446]" dev="sockfs" ino=46446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.735366][T11356] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 143.842377][ T40] audit: type=1400 audit(1757254400.410:894): avc: denied { bind } for pid=11363 comm="syz.1.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 143.842960][T11367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1465'. [ 143.864006][T11367] team0: Device gtp0 is of different type [ 143.900584][T11370] netlink: 'syz.3.1466': attribute type 4 has an invalid length. [ 143.915597][T11370] macvtap1: entered allmulticast mode [ 143.919922][T11370] veth0_macvtap: entered allmulticast mode [ 144.163515][ T40] audit: type=1800 audit(1757254400.730:895): pid=11396 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1474" name="bus" dev="tmpfs" ino=2313 res=0 errno=0 [ 144.172559][T11397] bond4: entered promiscuous mode [ 144.172851][T11397] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.223387][T11402] input: syz0 as /devices/virtual/input/input24 [ 144.292288][T11407] netlink: 'syz.4.1478': attribute type 1 has an invalid length. [ 144.402577][T11415] comedi comedi4: comedi_config --init_data is deprecated [ 144.466690][T11423] tipc: Started in network mode [ 144.469406][T11423] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 144.473465][T11423] tipc: Enabling of bearer rejected, failed to enable media [ 144.685471][T11430] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 144.723079][ T40] audit: type=1400 audit(1757254401.290:896): avc: denied { read } for pid=11431 comm="syz.1.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 144.751617][T11439] netlink: 'syz.1.1490': attribute type 3 has an invalid length. [ 144.823998][ T40] audit: type=1800 audit(1757254401.390:897): pid=11450 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1492" name="bus" dev="tmpfs" ino=2171 res=0 errno=0 [ 144.841224][T11448] 9pnet: Could not find request transport: v [ 144.961121][T11463] __nla_validate_parse: 3 callbacks suppressed [ 144.961135][T11463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1496'. [ 144.990510][T11464] ================================================================== [ 144.990520][T11464] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 144.990557][T11464] Write of size 8 at addr ffffc90005291000 by task syz.3.1496/11464 [ 144.990565][T11464] [ 144.990572][T11464] CPU: 1 UID: 0 PID: 11464 Comm: syz.3.1496 Not tainted syzkaller #0 PREEMPT(full) [ 144.990583][T11464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.990590][T11464] Call Trace: [ 144.990594][T11464] [ 144.990598][T11464] dump_stack_lvl+0x116/0x1f0 [ 144.990617][T11464] print_report+0xcd/0x630 [ 144.990628][T11464] ? __virt_addr_valid+0x81/0x610 [ 144.990644][T11464] ? sys_imageblit+0x1a6f/0x1e60 [ 144.990658][T11464] kasan_report+0xe0/0x110 [ 144.990669][T11464] ? sys_imageblit+0x1a6f/0x1e60 [ 144.990685][T11464] sys_imageblit+0x1a6f/0x1e60 [ 144.990701][T11464] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 144.990718][T11464] ? __pfx_sys_imageblit+0x10/0x10 [ 144.990733][T11464] ? find_held_lock+0x2b/0x80 [ 144.990746][T11464] ? __queue_work+0x431/0x1160 [ 144.990757][T11464] ? __queue_work+0x416/0x1160 [ 144.990767][T11464] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 144.990783][T11464] ? queue_work_on+0x12a/0x1f0 [ 144.990794][T11464] ? lockdep_hardirqs_on+0x7c/0x110 [ 144.990811][T11464] ? queue_work_on+0x8b/0x1f0 [ 144.990823][T11464] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 144.990837][T11464] bit_putcs+0x90f/0xde0 [ 144.990853][T11464] ? __pfx_bit_putcs+0x10/0x10 [ 144.990865][T11464] ? __lock_acquire+0xb97/0x1ce0 [ 144.990886][T11464] ? fb_get_color_depth+0x120/0x250 [ 144.990897][T11464] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 144.990911][T11464] ? __pfx_bit_putcs+0x10/0x10 [ 144.990922][T11464] fbcon_putcs+0x384/0x4a0 [ 144.990934][T11464] do_update_region+0x2e6/0x3f0 [ 144.990954][T11464] csi_J+0x545/0xad0 [ 144.990968][T11464] reset_terminal+0x64e/0x770 [ 144.990983][T11464] do_con_write+0x2f9c/0x8280 [ 144.991000][T11464] ? rcu_sync_func+0x10/0x1a0 [ 144.991024][T11464] ? __pfx___mutex_lock+0x10/0x10 [ 144.991042][T11464] ? __pfx_do_con_write+0x10/0x10 [ 144.991060][T11464] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 144.991076][T11464] ? con_write+0x93/0xb0 [ 144.991089][T11464] con_write+0x23/0xb0 [ 144.991101][T11464] n_tty_write+0x41c/0x11e0 [ 144.991118][T11464] ? __pfx_n_tty_write+0x10/0x10 [ 144.991133][T11464] ? rcu_is_watching+0x12/0xc0 [ 144.991147][T11464] ? __pfx_woken_wake_function+0x10/0x10 [ 144.991163][T11464] ? kfree+0x24f/0x4d0 [ 144.991182][T11464] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 144.991199][T11464] ? __pfx_n_tty_write+0x10/0x10 [ 144.991214][T11464] file_tty_write.constprop.0+0x504/0x9b0 [ 144.991228][T11464] vfs_write+0x7d0/0x11d0 [ 144.991239][T11464] ? __pfx_tty_write+0x10/0x10 [ 144.991251][T11464] ? __pfx_vfs_write+0x10/0x10 [ 144.991260][T11464] ? find_held_lock+0x2b/0x80 [ 144.991276][T11464] ksys_write+0x12a/0x250 [ 144.991286][T11464] ? __pfx_ksys_write+0x10/0x10 [ 144.991297][T11464] do_syscall_64+0xcd/0x4c0 [ 144.991311][T11464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.991322][T11464] RIP: 0033:0x7fbe4a18ebe9 [ 144.991330][T11464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.991341][T11464] RSP: 002b:00007fbe4af55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.991351][T11464] RAX: ffffffffffffffda RBX: 00007fbe4a3c6090 RCX: 00007fbe4a18ebe9 [ 144.991357][T11464] RDX: 0000000000001006 RSI: 00002000000010c0 RDI: 000000000000000a [ 144.991363][T11464] RBP: 00007fbe4a211e19 R08: 0000000000000000 R09: 0000000000000000 [ 144.991369][T11464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.991375][T11464] R13: 00007fbe4a3c6128 R14: 00007fbe4a3c6090 R15: 00007fff46fc7518 [ 144.991385][T11464] [ 144.991388][T11464] [ 144.991391][T11464] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90004f91000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 144.991413][T11464] Memory state around the buggy address: [ 144.991418][T11464] ffffc90005290f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 144.991425][T11464] ffffc90005290f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 144.991432][T11464] >ffffc90005291000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 144.991437][T11464] ^ [ 144.991442][T11464] ffffc90005291080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 144.991449][T11464] ffffc90005291100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 144.991454][T11464] ================================================================== [ 144.991475][T11464] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 144.991482][T11464] CPU: 1 UID: 0 PID: 11464 Comm: syz.3.1496 Not tainted syzkaller #0 PREEMPT(full) [ 144.991494][T11464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.991500][T11464] Call Trace: [ 144.991504][T11464] [ 144.991507][T11464] dump_stack_lvl+0x3d/0x1f0 [ 144.991520][T11464] vpanic+0x6e8/0x7a0 [ 144.991536][T11464] ? __pfx_vpanic+0x10/0x10 [ 144.991551][T11464] ? __pfx_vprintk_emit+0x10/0x10 [ 144.991565][T11464] ? sys_imageblit+0x1a6f/0x1e60 [ 144.991580][T11464] panic+0xca/0xd0 [ 144.991594][T11464] ? __pfx_panic+0x10/0x10 [ 144.991609][T11464] ? sys_imageblit+0x1a6f/0x1e60 [ 144.991624][T11464] ? preempt_schedule_common+0x44/0xc0 [ 144.991636][T11464] ? preempt_schedule_thunk+0x16/0x30 [ 144.991651][T11464] ? check_panic_on_warn+0x1f/0xb0 [ 144.991660][T11464] check_panic_on_warn+0xab/0xb0 [ 144.991670][T11464] end_report+0x107/0x170 [ 144.991681][T11464] kasan_report+0xee/0x110 [ 144.991692][T11464] ? sys_imageblit+0x1a6f/0x1e60 [ 144.991709][T11464] sys_imageblit+0x1a6f/0x1e60 [ 144.991724][T11464] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 144.991740][T11464] ? __pfx_sys_imageblit+0x10/0x10 [ 144.991754][T11464] ? find_held_lock+0x2b/0x80 [ 144.991766][T11464] ? __queue_work+0x431/0x1160 [ 144.991777][T11464] ? __queue_work+0x416/0x1160 [ 144.991794][T11464] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 144.991818][T11464] ? queue_work_on+0x12a/0x1f0 [ 144.991834][T11464] ? lockdep_hardirqs_on+0x7c/0x110 [ 144.991847][T11464] ? queue_work_on+0x8b/0x1f0 [ 144.991862][T11464] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 144.991887][T11464] bit_putcs+0x90f/0xde0 [ 144.991905][T11464] ? __pfx_bit_putcs+0x10/0x10 [ 144.991918][T11464] ? __lock_acquire+0xb97/0x1ce0 [ 144.991934][T11464] ? fb_get_color_depth+0x120/0x250 [ 144.991946][T11464] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 144.991958][T11464] ? __pfx_bit_putcs+0x10/0x10 [ 144.991970][T11464] fbcon_putcs+0x384/0x4a0 [ 144.991985][T11464] do_update_region+0x2e6/0x3f0 [ 144.992010][T11464] csi_J+0x545/0xad0 [ 144.992027][T11464] reset_terminal+0x64e/0x770 [ 144.992044][T11464] do_con_write+0x2f9c/0x8280 [ 144.992057][T11464] ? rcu_sync_func+0x10/0x1a0 [ 144.992074][T11464] ? __pfx___mutex_lock+0x10/0x10 [ 144.992087][T11464] ? __pfx_do_con_write+0x10/0x10 [ 144.992099][T11464] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 144.992114][T11464] ? con_write+0x93/0xb0 [ 144.992127][T11464] con_write+0x23/0xb0 [ 144.992140][T11464] n_tty_write+0x41c/0x11e0 [ 144.992157][T11464] ? __pfx_n_tty_write+0x10/0x10 [ 144.992172][T11464] ? rcu_is_watching+0x12/0xc0 [ 144.992184][T11464] ? __pfx_woken_wake_function+0x10/0x10 [ 144.992196][T11464] ? kfree+0x24f/0x4d0 [ 144.992209][T11464] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 144.992222][T11464] ? __pfx_n_tty_write+0x10/0x10 [ 144.992237][T11464] file_tty_write.constprop.0+0x504/0x9b0 [ 144.992251][T11464] vfs_write+0x7d0/0x11d0 [ 144.992261][T11464] ? __pfx_tty_write+0x10/0x10 [ 144.992273][T11464] ? __pfx_vfs_write+0x10/0x10 [ 144.992283][T11464] ? find_held_lock+0x2b/0x80 [ 144.992298][T11464] ksys_write+0x12a/0x250 [ 144.992308][T11464] ? __pfx_ksys_write+0x10/0x10 [ 144.992320][T11464] do_syscall_64+0xcd/0x4c0 [ 144.992334][T11464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.992344][T11464] RIP: 0033:0x7fbe4a18ebe9 [ 144.992351][T11464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.992361][T11464] RSP: 002b:00007fbe4af55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.992370][T11464] RAX: ffffffffffffffda RBX: 00007fbe4a3c6090 RCX: 00007fbe4a18ebe9 [ 144.992377][T11464] RDX: 0000000000001006 RSI: 00002000000010c0 RDI: 000000000000000a [ 144.992383][T11464] RBP: 00007fbe4a211e19 R08: 0000000000000000 R09: 0000000000000000 [ 144.992389][T11464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.992396][T11464] R13: 00007fbe4a3c6128 R14: 00007fbe4a3c6090 R15: 00007fff46fc7518 [ 144.992406][T11464] [ 144.993128][T11464] Kernel Offset: disabled VM DIAGNOSIS: 12:47:20 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff888028fcc880 RSI=ffffffff81608c38 RDI=ffffffff93dbcfe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27b79fc R10=ffffffff93dbcfe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4f2a44c6c0 ffffffff 00c00000 GS =0000 ffff8880d66b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c285c95 CR3=000000001ca91000 CR4=00350ef0 DR0=0000000000000007 DR1=000000000000000b DR2=0000000000000002 DR3=0000000000000009 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000480081 Opmask01=00000000fce002fe Opmask02=00000000fcc00000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f2a44bf90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc93097656 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc93097656 00007ffc9309765c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f29612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f29612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f29612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f29612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f29612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f29612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e72656b2f737973 2f000a6425203a64 656c696166202973 2528657469727700 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b57404e0a565c56 0a000a4100051f41 40494c4443050c56 000d40514c575200 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85646975 RDI=ffffffff9b1150a0 RBP=ffffffff9b115060 RSP=ffffc90003e2ef28 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303963666657 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b115060 R15=ffffffff85646910 RIP=ffffffff8564699f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbe4af556c0 ffffffff 00c00000 GS =0000 ffff8880d67b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000010c0 CR3=0000000027551000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020100001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe4af75bf0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff46fc7a26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff46fc7a26 00007fff46fc7a2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe4a212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe4a212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe4a212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe4a212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe4a212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe4a212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff888021c8a440 RSI=ffffffff81608c38 RDI=ffffffff93dbcfe0 RBP=0000000000000002 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27b79fc R10=ffffffff93dbcfe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880d68b5000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00001ffffffff740 CR3=0000000055b6a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000fce002fe Opmask02=00000000fcc00000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc93097656 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc93097656 00007ffc9309765c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f29612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f29612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f29612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f29612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f29612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f29612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f297974a8 00007f4f297974a0 00007f4f29797498 00007f4f29797470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f2a2fd100 00007f4f29797460 00007f4f29797478 00007f4f297974c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f297974b8 00007f4f297974b0 00007f4f297974a8 00007f4f297974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88801e2a8000 RSI=ffffffff81608c38 RDI=ffffffff93dbcfe0 RBP=0000000000000003 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27b79fc R10=ffffffff93dbcfe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c44e3e4 CR3=00000000619e3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000f8000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe27d68460 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe27d685e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe27d685e6 00007ffe27d685ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78be212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78be212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78be212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78be212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78be212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78be212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000