last executing test programs: 1.61261405s ago: executing program 1 (id=544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r7) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r11) getsockname$packet(r11, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r12, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r12, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0xcc, r8, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf7}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}, 0x1, 0x0, 0x0, 0x20008002}, 0x0) 1.562913837s ago: executing program 1 (id=546): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x0, {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r2, 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x80) 1.503031823s ago: executing program 1 (id=547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x3}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x3}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20001091}, 0x0) 1.390196544s ago: executing program 1 (id=550): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x201, 0x2) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000140)={0x0, 0x0, @pic={0xc, 0xb2, 0x4, 0x0, 0x3, 0x5, 0x2, 0x6, 0x5, 0x2, 0x5, 0x8, 0x9, 0x40, 0x5, 0x2}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11011, r0, 0x2000) read$usbfs(r0, &(0x7f00000000c0)=""/103, 0x67) 1.313023085s ago: executing program 1 (id=551): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x3}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000200)={0xc, r3}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x1c, 0x1c}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000300)={0x18, 0x0, 0x1c, 0x1c}) r4 = eventfd2(0x39, 0x80800) r5 = eventfd2(0x6, 0x80000) inotify_init() socket$igmp(0x2, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r6, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000300)={r4, 0x8, 0x2, r5}) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x22001, &(0x7f0000000180)={'trans=virtio,', {[{@posixacl}], [{@measure}, {@pcr}, {@subj_role={'subj_role', 0x3d, 'bond0\x00'}}, {@appraise}, {@subj_role={'subj_role', 0x3d, '/dev/kvm\x00'}}, {@seclabel}]}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x36a, 0x28000}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xbc52}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000480)={0x0, 0x0, @ioapic={0x8000000, 0xa, 0x1, 0x778278d1, 0x0, [{0x2, 0x0, 0x1, '\x00', 0x9}, {0x7, 0x0, 0x1, '\x00', 0x7}, {0x6, 0x2, 0x5, '\x00', 0x8}, {0x6, 0x81, 0x4, '\x00', 0x8}, {0x7, 0x93, 0x8d, '\x00', 0x6c}, {0x1, 0x2, 0x1, '\x00', 0x5}, {0xd7, 0x2, 0xf5, '\x00', 0x35}, {0x0, 0x5, 0x28, '\x00', 0x4}, {0xb9, 0xd, 0x6, '\x00', 0x7f}, {0x1, 0x3, 0x9, '\x00', 0xe6}, {0x7, 0xf, 0x3a, '\x00', 0x7}, {0xfe, 0x2, 0x2, '\x00', 0xfb}, {0x2, 0x7, 0xe7, '\x00', 0x2}, {0x4, 0x0, 0x1, '\x00', 0x5}, {0x5, 0x3, 0xe7, '\x00', 0x9}, {0x6, 0x4, 0x8, '\x00', 0x7}, {0xbd, 0xc, 0x4, '\x00', 0x6}, {0xb, 0x0, 0x3, '\x00', 0xe}, {0x2, 0xb7, 0x8, '\x00', 0x4}, {0xfb, 0x1, 0x4, '\x00', 0x8}, {0x0, 0x5, 0x1}, {0x5, 0xe4, 0x4, '\x00', 0x8}, {0x9, 0xd4, 0xf7, '\x00', 0x4}, {0x8b, 0x6, 0x5, '\x00', 0x6}]}}) 1.197874336s ago: executing program 1 (id=555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r2 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x800) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0xc) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000003d40)=""/98) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0xa, 0x0, &(0x7f0000000040)) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = syz_usbip_server_init(0x1) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000300000001"], 0x60) sendmsg$inet(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000014c0)="ea766169b6a10609d45de93eafeffce24bc25828a2e1e622eaa991d69aaa2db4712f85ce94a3219ac1ac1b89571db7", 0x2f}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x138}, 0x4004) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)='<', 0x18c, 0x805, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000280)={0xff, 0x0, 0x0, 0x0, 0x4, 0x6b9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x8, 0x7f, 0xfc}]}, 0x10) 1.132835639s ago: executing program 0 (id=556): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = gettid() setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="461b54d299c156063a", 0x9, 0x400c080, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) sendmsg$netlink(r0, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004740)=[{&(0x7f00000022c0)=ANY=[@ANYBLOB="100000030006000000000000eabd3300"], 0x10}], 0x1, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x20}, 0x0) 1.118672264s ago: executing program 0 (id=558): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'sit0\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'sit0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r5 = syz_open_dev$evdev(&(0x7f0000001500), 0x80000000003, 0x161dc2) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) close(r6) syz_open_dev$char_usb(0xc, 0xb4, 0x5) (async) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) write$char_usb(r7, &(0x7f00000000c0)="e2", 0x1) (async) write$char_usb(r7, &(0x7f00000000c0)="e2", 0x1) socket(0x10, 0x80002, 0x0) (async) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r8, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300), 0x6e, &(0x7f0000001400)=[{&(0x7f0000001380)=""/88, 0x58}], 0x1}}], 0x2, 0x24022, 0x0) (async) recvmmsg$unix(r8, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300), 0x6e, &(0x7f0000001400)=[{&(0x7f0000001380)=""/88, 0x58}], 0x1}}], 0x2, 0x24022, 0x0) setsockopt$netrom_NETROM_T1(r8, 0x103, 0x1, &(0x7f00000012c0)=0xe1b, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4100) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000600, r9, &(0x7f0000001280)={0x8, 0x7, 0x0, 0x1}) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$watch_queue(r10, &(0x7f0000000140)=""/4096, 0x1000) (async) read$watch_queue(r10, &(0x7f0000000140)=""/4096, 0x1000) r11 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r11) 442.895058ms ago: executing program 3 (id=562): openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x84081, 0x0) 319.297086ms ago: executing program 3 (id=564): syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x5, 0x0, 0x4}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0xff, 0x2f, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x5, 0x0, 0x4}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0xff, 0x2f, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, 0x0, 0x8000) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) (async) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f00000000c0)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0xffffffffffffffff, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) socket$inet6(0xa, 0x2, 0x3a) (async) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e23, 0x430, @dev={0xfe, 0x80, '\x00', 0x31}, 0x9}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000280)={0x6, 0xe, 0x8, 0x4, 0x681, 0x8000000000000000, 0x100000000a, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x10, 0x5, 0x9, 0x7, 0x5, 0x8, 0xf, 0xfffffffffffffff2, 0x5, 0x80, 0x7, 0x1, 0x6}) (async) clock_adjtime(0x0, &(0x7f0000000280)={0x6, 0xe, 0x8, 0x4, 0x681, 0x8000000000000000, 0x100000000a, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x10, 0x5, 0x9, 0x7, 0x5, 0x8, 0xf, 0xfffffffffffffff2, 0x5, 0x80, 0x7, 0x1, 0x6}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$inet6(0xa, 0x2, 0xffffffff) socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r4) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="00012bbd7000f6dbdf250b0000001a2f96460cf01bd4b7930b9a91174156bedde02794aec894f4a80e1c745a298e14787f8ab62a264485432fc1daaa15c7d3a8f96bd098ead6202cf00200000000000000576e66d1d32d5421005ad4e80db009a05d34c4cdd04554eb00000000ba0000"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) socket$inet_sctp(0x2, 0x1, 0x84) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1e}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xc}, {0x0, 0x4}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xc}, {0x0, 0x4}}}, 0x24}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) 252.984182ms ago: executing program 3 (id=566): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) iopl(0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0x70bd2c, 0x25dfdbff, {0x5}}, 0x14}}, 0x40010) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) 251.408254ms ago: executing program 2 (id=568): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48100, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000001380)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x8, r2, 0x0, 0xa, 0xffd9, &(0x7f0000000180)="d3929d732e4f4959c54874fe90d5a2c28a", 0x4}) r3 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000080)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x4000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffff000, 0x4000}, {0xffffffffffffffff, 0x0, 0x2000, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffffffff0000000}]}) poll(&(0x7f0000000000)=[{r2, 0x1}, {r3, 0x49}], 0x2, 0x7) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x14, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x0, 0x2, 0x0, 0x0, 0x10}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x2, 0x100, @void}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) 182.870785ms ago: executing program 2 (id=569): r0 = socket$netlink(0x10, 0x3, 0x7) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYRES8=r3, @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000200800040000000000"], 0x58}, 0x1, 0x1000000}, 0x24040840) (async) syz_clone(0x80201000, &(0x7f0000000000)="59fa6e1d0eb2fcfc57cd7c60cea7e8e195dc6ee6c28e561d7d960b9a4bf2cefa3e9cb5f484d9a8d2905ab990429316e6a93641def8a995a61ffcdca398561a842f5916ea3f4684ddcbbd93bbb2", 0x4d, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)="232c1015110e3342e79e8524066a05ef3e3e952716a319189d5557c3") 182.503754ms ago: executing program 0 (id=570): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) (async) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x6) (async) socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x26, &(0x7f0000000000)=0x6, 0x19) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c0000002e0001002693d6954abdf0010000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 132.416045ms ago: executing program 2 (id=571): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x13}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x5, 0x4, "e8"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b3a6d727c1"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "30a43ec6153de5ee8d489165cb"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x1000, 0x7}}, './file0\x00'}) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f00000003c0), &(0x7f0000000440)=0x68) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000480)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r1, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x79}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24008040}, 0x84) (async) r6 = syz_open_dev$mouse(&(0x7f0000000600), 0xaf10, 0x840) ioctl$PTP_ENABLE_PPS(r6, 0x40043d04, 0x1) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000780)={'gre0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0xf827, 0x6438d7e5167e9352, 0xfff, 0x5, {{0x19, 0x4, 0x0, 0x6, 0x64, 0x68, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010100, @private=0xa010101, {[@ra={0x94, 0x4}, @cipso={0x86, 0x38, 0x0, [{0x6, 0x7, "2664a10968"}, {0x7, 0x7, "5e7c9f3401"}, {0x5, 0xf, "63e92f2143a1a300cf3713dd66"}, {0x7, 0x10, "bcf32a1e0dfa45ec3dbdb1d5275c"}, {0x6, 0x5, "bfe47d"}]}, @timestamp={0x44, 0xc, 0x5b, 0x0, 0x8, [0x0, 0x7]}, @lsrr={0x83, 0x7, 0xf4, [@local]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, r7, 0x101, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004081}, 0x4080) (async) r9 = openat$audio1(0xffffffffffffff9c, &(0x7f00000008c0), 0x8002, 0x0) (async) ioctl$SIOCNRDECOBS(r3, 0x89e2) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000940), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x80, r10, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x157}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffd6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xc1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000e80)={0x10001, 0x140, 0x0, &(0x7f0000000a80)=[0xb, 0xb4c, 0x10001, 0xffffffff, 0x18fe, 0x2, 0x2, 0x4, 0x9, 0x4, 0x8, 0x2, 0x45f30b05, 0x2, 0x0, 0xffffffff, 0x2, 0xfffffffffffffff8, 0x5, 0xa8d0, 0x4, 0x0, 0x10001000000, 0x0, 0xfffffffffffff800, 0xfffffffffffffffd, 0x8, 0x40, 0x7, 0x9, 0x8000000000000000, 0x1, 0x4, 0x6, 0x7fffffffffffffff, 0xc451, 0x4, 0x80000000, 0xffffffffffffffff, 0x1, 0x7ff, 0x1ff, 0x5, 0xc77896c, 0x90, 0x100000000, 0x40, 0x8, 0x2, 0x1000, 0x4, 0x3, 0x4, 0x3ff, 0x6, 0x81, 0x77, 0x8, 0x8, 0x63, 0x2, 0x4, 0x0, 0x3, 0x100, 0xb3b9, 0x1, 0x4, 0x2, 0xb83, 0x4, 0x8, 0x9, 0xff, 0x800, 0xffffffffffffffff, 0x100000001, 0xf21b, 0x5, 0x8000000000000000, 0x6, 0x100000000000, 0xc217, 0x1, 0x7, 0x6, 0x4000000000, 0x8, 0xfffffffffffffffb, 0xf95, 0x5, 0x1ff, 0x1, 0x80000000, 0x100000000, 0xfffffffffffffffa, 0x1, 0x7fffffff, 0x9, 0x1, 0xfffffffffffffead, 0x1, 0x10001, 0x4, 0x7fffffff, 0x80000001, 0x100000000, 0x6, 0x3, 0x5, 0x5, 0x8, 0x9e, 0x4, 0xfff, 0x1, 0xffffffff, 0x1, 0x200, 0x101, 0x4, 0x1, 0x2, 0x4, 0x8, 0xffffffffffffffcc, 0x10000, 0x7]}) ioctl$sock_qrtr_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000ec0)={'bond_slave_0\x00'}) (async) ioctl$KVM_RESET_DIRTY_RINGS(r6, 0xaec7) recvmsg(r4, &(0x7f0000001100)={&(0x7f0000000f00)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f80)=""/123, 0x7b}], 0x1, &(0x7f0000001040)=""/134, 0x86}, 0x10000) (async) readv(r3, &(0x7f0000001340)=[{&(0x7f0000001140)=""/108, 0x6c}, {&(0x7f00000011c0)=""/116, 0x74}, {&(0x7f0000001240)=""/222, 0xde}], 0x3) (async) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000001380)={'vlan0\x00', @remote}) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001400)=@security={'security\x00', 0xe, 0x4, 0x5d8, 0xffffffff, 0x250, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x540, 0x540, 0x540, 0xffffffff, 0x4, &(0x7f00000013c0), {[{{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1, 0xbe}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffffff, 0xffffffff, 'bridge_slave_1\x00', 'syzkaller0\x00', {}, {0xff}, 0x1, 0x2, 0x43}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xbc, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0x2c8, 0x2f0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x29, 0x0, [{0x0, 0x6, 0x0, 0xa348}, {0x9, 0xc, 0x3, 0x4}, {0x9, 0xa, 0x3, 0xf5}, {0x8000, 0x4c, 0xe, 0x40}, {0x5, 0x80, 0x0, 0x7fff}, {0xe, 0xfc, 0x6, 0xa12}, {0x8, 0x6, 0x0, 0x8000}, {0x2, 0x6f, 0x2, 0xa8b7}, {0x0, 0xfd, 0xdd, 0xd}, {0x3, 0x4, 0x0, 0x2}, {0x5, 0x1, 0x0, 0xa}, {0x3, 0x8, 0x18, 0x8001}, {0x7fff, 0x3, 0x47, 0xe08}, {0x800, 0x6, 0x4, 0x9}, {0x8, 0x1, 0xa, 0x56}, {0x0, 0x7f, 0x4, 0x1}, {0x7, 0xb, 0x6, 0x6}, {0x4, 0xad, 0x40, 0x80000000}, {0x81, 0x1, 0x4b, 0x1}, {0x1, 0x1, 0x7, 0x80}, {0x9, 0x6, 0x7, 0x9e}, {0x0, 0x9, 0x3, 0x1000}, {0x3bed, 0x6, 0x1, 0x4}, {0x4, 0x5, 0xb, 0x6}, {0x7, 0x47, 0xe8, 0x1ff}, {0x7ff, 0x6, 0x8, 0x10000}, {0xfff, 0x7, 0x4}, {0x0, 0x2, 0xa, 0x1ff}, {0x5, 0x3, 0xf}, {0x3, 0x8, 0x5, 0xf1ff}, {0x5, 0xf, 0x51, 0x8001}, {0x2, 0x8, 0x81}, {0x100, 0x8, 0x8, 0x5}, {0xa, 0x80, 0x50, 0x66e6}, {0x1204, 0x9, 0x3, 0x401}, {0x7, 0x80, 0xfb, 0x6}, {0x4, 0x3, 0x46}, {0xa, 0x7, 0x8, 0x4}, {0x9, 0x4, 0x4, 0x2}, {0x5, 0x2, 0x40, 0x7fffffff}, {0x155, 0x8b, 0x88, 0xe}, {0x0, 0x1, 0x4, 0x3}, {0x2, 0x2, 0xa, 0x7}, {0x6, 0x3a, 0x59, 0x7ff}, {0xf94, 0x6, 0x9, 0x1fc0}, {0x6f10, 0x2, 0x8, 0x7}, {0x4, 0x1, 0x9}, {0x80, 0xd, 0x0, 0x7}, {0x1, 0x9, 0x9, 0x4010000}, {0xfffd, 0x3, 0x2, 0x10001}, {0x8, 0xff, 0x9, 0x400}, {0x9, 0x6, 0x2, 0x3}, {0x9, 0x6, 0xff, 0xfffffffc}, {0x5, 0x4, 0x1, 0x3}, {0x9, 0x4, 0x3, 0x7f}, {0x9, 0x4, 0x2, 0x5}, {0x4e, 0x5b, 0x8, 0xc84a}, {0x6, 0x5, 0x6, 0x1}, {0x7f, 0xe, 0xf4, 0x690}, {0x7ff, 0x3f, 0xe}, {0x6, 0x7, 0x1}, {0x9, 0xfd, 0x6, 0xffff8001}, {0x1000, 0x6, 0xd, 0x7fffffff}, {0x0, 0x1b, 0x6, 0x7}], {0x1}}}, @common=@ttl={{0x28}, {0x2, 0xc}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x638) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001a80)={'\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x5c, r7, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000001bc0)=0x7) 121.939468ms ago: executing program 0 (id=572): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0, 0xfffffffffffffc77, 0x0, 0x6, 0x0, 0x10000, @value=r2}, 0x28) r3 = dup(r0) time(&(0x7f0000000140)) write$UHID_INPUT(r3, &(0x7f0000001080)={0xf, {"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", 0x1000}}, 0x1006) 120.90468ms ago: executing program 3 (id=573): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_RETRIES(r1, 0x701, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)) 120.206686ms ago: executing program 3 (id=574): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) r2 = socket$inet6(0xa, 0x3, 0x400) getresuid(&(0x7f00000007c0)=0x0, &(0x7f0000000800), &(0x7f0000000840)) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@multicast2, 0x4e23, 0x4, 0x4e23, 0x5, 0x2, 0xb0, 0xa0, 0x6, 0x0, r3}, {0x5, 0xbe5, 0x7f, 0x8, 0xffffffffffffffff, 0xf, 0x5, 0xcf0}, {0x7fff, 0x3a, 0x7, 0x4}, 0x1, 0x6e6bb7, 0x1, 0x1, 0x1, 0x1}, {{@in6=@private2, 0x4d6, 0x3c}, 0x2, @in6=@loopback, 0x34ff, 0x3, 0x3, 0x7f, 0x80, 0xa1c9, 0x4}}, 0xe8) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000680)={0x9, 0x108, 0xfa00, {r1, 0x9, "8108f3", "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"}}, 0x110) r4 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000100)={0x9, @pix_mp={0x2, 0x10001, 0x20363059, 0x8, 0x1, [{0x2}, {0xffffffff, 0xfffffffb}, {0x81, 0xd16}, {0xf, 0x8a56}, {0x81, 0x9}, {0x0, 0x9}, {0x5, 0x5}, {0x6, 0x1}], 0x6, 0x81, 0x1, 0x0, 0x6}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r4, @ANYBLOB="ff"], 0x20}}, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000980)={0x2, 0x5, 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) socket$packet(0x11, 0xd19c7dc1f5f6ad50, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc9, "0c0200002000"}}}, 0xe) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000005c0)=[{{&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3, 0x4, {0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)="aa81c2c7ae01450fc38585599f1a799866c3a8de63cf88f64450a05f9c45bcec61949170a11c268201a528e854816d5de8aaf5241360a3231181b71dc42abfb4ad56184b71bc623dcdeece3ebf418cfb66ca0c9188e6843dd314c13ddefc8dea599dd887fd7bc582a8c4f8d9650472512196986ab76710e8795503f578d5b4212ad61c", 0x83}, {&(0x7f0000000400)="eda8e794411f4fa7268a9bc8846f5105cf7599494c48cb2c2ab26781d22d3c481396c84a185d59ede165f801c8776c9e8b5d07e275b1c39c094c96124777a042c0ea7fc3e4e6bc0488910c60d0adcdb14090ec2823993802fe95c895cadd44f3163ed51550a15a415143ee3b6897c377c6acfe861f226094b92e810a2d77437c978819812ef5b6c2f1a19c32b1752dc5c458e6cdc7345376f0589a4107d66d48e521758048428be7f27c38b3ac3efc", 0xaf}, {&(0x7f00000004c0)="ecdcd74ad3168734794899ead282fa02ec1cf51ec35795eb075be344547e135c03995b9713262cda33f861122e25b83e46b1ec23cfc6aa3ad60401b71ec76b01dc1c7b1cbc09c05186ac83281592e296bf6bb584f6d09037a9af", 0x5a}], 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="48000000000000000000000081000000b41911e2405f6ec4f0736385be2edb8ced0fb2caac1fa28dfd69e7635fcbf3efc3294d33dd3a59f1a2d839461f5a29190250bf634100000018000000000000000901000000800000c3ca9a1500000000"], 0x60}}], 0x1, 0x0) 72.762847ms ago: executing program 2 (id=575): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) write$P9_RLERROR(r0, &(0x7f0000000000)={0xf, 0x7, 0x2, {0x6, '-/([\'*'}}, 0xf) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0xa000, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 67.885238ms ago: executing program 0 (id=576): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0x3ffe, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000, 0x0, 0xc880}, 0x0) listen(r0, 0x80000001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x54, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:admin_passwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3f}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048804}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xa4, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000011}, 0x20000000) syz_emit_ethernet(0x46, &(0x7f0000000500)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@lsrr={0x83, 0xb, 0xe4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @generic={0x44, 0x2}]}}, {{0xfffc, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x9, 0x61}}}}}}, 0x0) 67.22063ms ago: executing program 3 (id=577): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000940)={'dvmrp0\x00', {0x2, 0x0, @local}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r3, @ANYBLOB="0000faffffff0000340012801101006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x4004850) ioctl$DVD_WRITE_STRUCT(r0, 0x5392, &(0x7f0000000040)=@physical={0x0, 0x1, [{0x5, 0x2, 0x9, 0x9, 0x1, 0x1, 0x3, 0xb, 0x4, 0x1, 0x0, 0x2, 0x10001}, {0x3, 0x5, 0x5, 0x4, 0x1, 0x0, 0x2, 0xc, 0x4, 0x0, 0x5, 0x80000001, 0x1}, {0x4, 0x7, 0x5, 0xc, 0x0, 0x1, 0x2, 0x6, 0x2, 0x1, 0x4974, 0x7, 0x5}, {0x5, 0x0, 0xb, 0xe, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, 0x9, 0xfffffff9, 0x3}]}) 66.977363ms ago: executing program 2 (id=578): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000e27f0000010000a058f74be0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000060006"], 0x4c}}, 0x0) 2.067994ms ago: executing program 0 (id=579): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000000308030000000000000000000100000805000300060000002c00048008000b"], 0x48}, 0x1, 0x0, 0x0, 0x20048}, 0x80) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000e80)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="4400a0874ecf19a4f9a6621f0b8b970bcd028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x7f, 0x7, 0x20, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x10, 0x856, 0x6}}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000280)={@rand_addr, @local, 0x0}, &(0x7f00000002c0)=0xc) (async) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000000)={@remote, r11}, 0x14) (async) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x840) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2c, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x33, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000006c0)={@ipv4={""/10, ""/2, @dev}, 0x0}, &(0x7f0000000700)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000880)={'erspan0\x00', &(0x7f0000000780)={'gretap0\x00', 0x0, 0x700, 0x8000, 0x6, 0x8, {{0x2b, 0x4, 0x0, 0x23, 0xac, 0x67, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x22, 0x2, [{0x0, 0x2}, {0x5, 0x2}, {0x7, 0x6, "0dfd0088"}, {0x7, 0x12, "fd374594cf3b295afd7c26a0ab02673c"}]}, @lsrr={0x83, 0x13, 0x65, [@remote, @empty, @rand_addr=0x64010102, @private=0xa010101]}, @ssrr={0x89, 0xf, 0x78, [@multicast1, @broadcast, @multicast1]}, @timestamp={0x44, 0x18, 0x72, 0x0, 0x7, [0x2, 0x6, 0x8, 0x1, 0xfeae]}, @cipso={0x86, 0x39, 0x0, [{0x5, 0x5, 'N\x002'}, {0x6, 0x9, "8f2bc42414defa"}, {0x5, 0x7, "8791739c20"}, {0x0, 0x11, "f05dffbbea0d048bf91e4edea0330e"}, {0x7, 0xd, "455d28dd6f62d39ca7cb8d"}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x7, 0x6, 0x60, @rand_addr=' \x01\x00', @mcast2, 0x20, 0x40, 0xe806, 0xd32}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e00)={&(0x7f0000000980)={0x47c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r9}, {0x26c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6f}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r19}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r20}}}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) (async) r21 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r21, 0x84, 0x7f, &(0x7f0000000040)="2153c9300980ffff", 0x8) (async) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000002380)={0xc, 0x0, [{0x3, 0x0, 0x6}, {0x5, 0x0, 0x3ff}, {0x3, 0x0, 0x63bf}, {0x5, 0x0, 0x1}, {0xfffffffe}, {0x1ff, 0x0, 0x5}, {0x1, 0x0, 0xe137}, {0x5, 0x0, 0x8}, {0x7, 0x0, 0x9}, {0x1, 0x0, 0x1a}, {0x1, 0x0, 0x1}, {0xe6, 0x0, 0x6}, {0x7, 0x0, 0xf9}, {0x80000000, 0x0, 0x3}, {0x3, 0x0, 0x100000000}, {0xffffffff, 0x0, 0x5}]}) 0s ago: executing program 2 (id=580): r0 = socket$inet6(0xa, 0x802, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x28) write$P9_RCLUNK(r1, &(0x7f0000000040)={0x7, 0x79, 0x2}, 0x7) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="14000000000000001001000002"], 0x30}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r8 = socket(0x10, 0x3, 0x0) close(r7) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = request_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0xfffffffffffffffb) request_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='%&(}]^\x00', r9) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @remote, 0x4b7}, 0x1c) 0s ago: executing program 3 (id=581): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02864c3, &(0x7f0000000100)={&(0x7f0000000240)=[0x0], 0x7f, 0x40a0f6cd7c251320}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf25"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x800, 0x4, 0x24}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000001a40)=ANY=[], 0x17) write$binfmt_script(r5, &(0x7f00000000c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x360, 0x108, 0x288, 0xffffffff, 0x288, 0x1e0, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x22e}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x7f, 0xe, [0x2f, 0x4, 0x3, 0x4, 0x31, 0x2, 0x1, 0x15, 0x21, 0x2c, 0x3e, 0xe, 0x29, 0x3a, 0x0, 0xa], 0x2, 0xd577, 0x300000000000}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @local, @multicast2, @gre_key=0x7, @icmp_id=0x65}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @multicast1, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000400)="e970d6ea0600000000284b6819cd4222f0cc540000007a12e5cdb79f49f1aed79adc3252825a86a526a3501fb1dd8dff3e90d6f5", 0x34}], 0x1) readv(r6, &(0x7f0000000700)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="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"], 0x23c}}, 0x0) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x103000, 0x0) ioctl$DVD_AUTH(r8, 0x5390, &(0x7f0000000000)=@lsc={0x3, 0x0, "51aabcc0b1e1fa82e494"}) r9 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000000c0)=0xd) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:8021' (ED25519) to the list of known hosts. [ 45.790534][ T40] audit: type=1400 audit(1762530552.633:62): avc: denied { name_bind } for pid=5903 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.813772][ T40] audit: type=1400 audit(1762530552.653:63): avc: denied { write } for pid=5904 comm="sh" path="pipe:[4075]" dev="pipefs" ino=4075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.830390][ T40] audit: type=1400 audit(1762530552.673:64): avc: denied { execute } for pid=5904 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.838809][ T40] audit: type=1400 audit(1762530552.673:65): avc: denied { execute_no_trans } for pid=5904 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.861417][ T40] audit: type=1400 audit(1762530554.703:66): avc: denied { mounton } for pid=5904 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.865167][ T5904] cgroup: Unknown subsys name 'net' [ 48.051205][ T5904] cgroup: Unknown subsys name 'cpuset' [ 48.055990][ T5904] cgroup: Unknown subsys name 'rlimit' [ 48.295128][ T5925] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.050850][ T5904] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.520062][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 52.520073][ T40] audit: type=1400 audit(1762530559.353:80): avc: denied { execmem } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.699509][ T40] audit: type=1400 audit(1762530559.543:81): avc: denied { create } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.705924][ T40] audit: type=1400 audit(1762530559.543:82): avc: denied { read write } for pid=5934 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.713971][ T40] audit: type=1400 audit(1762530559.543:83): avc: denied { open } for pid=5934 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.721905][ T40] audit: type=1400 audit(1762530559.543:84): avc: denied { ioctl } for pid=5934 comm="syz-executor" path="socket:[2007]" dev="sockfs" ino=2007 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.772727][ T5937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.776783][ T5937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.777892][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.780002][ T5937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.783570][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.785415][ T5937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.788182][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.790078][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.792959][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.801039][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.803807][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.804986][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.809272][ T40] audit: type=1400 audit(1762530559.643:85): avc: denied { read } for pid=5934 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.809524][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.815512][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.816426][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.819031][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.822834][ T40] audit: type=1400 audit(1762530559.643:86): avc: denied { open } for pid=5934 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.825009][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.825422][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.825865][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.834909][ T40] audit: type=1400 audit(1762530559.643:87): avc: denied { mounton } for pid=5934 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.837588][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.067128][ T40] audit: type=1400 audit(1762530559.903:88): avc: denied { module_request } for pid=5934 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.105348][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 53.187668][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 53.192303][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 53.398910][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.401657][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.404258][ T5934] bridge_slave_0: entered allmulticast mode [ 53.407424][ T5934] bridge_slave_0: entered promiscuous mode [ 53.415172][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.417418][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.419724][ T5947] bridge_slave_0: entered allmulticast mode [ 53.422505][ T5947] bridge_slave_0: entered promiscuous mode [ 53.425963][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.428349][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.430957][ T5947] bridge_slave_1: entered allmulticast mode [ 53.433760][ T5947] bridge_slave_1: entered promiscuous mode [ 53.436570][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.439099][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.442107][ T5934] bridge_slave_1: entered allmulticast mode [ 53.445733][ T5934] bridge_slave_1: entered promiscuous mode [ 53.553941][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 53.588452][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.590862][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.593118][ T5938] bridge_slave_0: entered allmulticast mode [ 53.595873][ T5938] bridge_slave_0: entered promiscuous mode [ 53.636253][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.642329][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.645600][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.648868][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.651910][ T5938] bridge_slave_1: entered allmulticast mode [ 53.655772][ T5938] bridge_slave_1: entered promiscuous mode [ 53.716224][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.722362][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.754186][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.797073][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.827278][ T5934] team0: Port device team_slave_0 added [ 53.872586][ T5947] team0: Port device team_slave_0 added [ 53.875394][ T5934] team0: Port device team_slave_1 added [ 53.884610][ T5938] team0: Port device team_slave_0 added [ 53.889635][ T5947] team0: Port device team_slave_1 added [ 53.948955][ T5938] team0: Port device team_slave_1 added [ 53.989951][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.993631][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.996582][ T5943] bridge_slave_0: entered allmulticast mode [ 54.000849][ T5943] bridge_slave_0: entered promiscuous mode [ 54.005346][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.008269][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.014146][ T5943] bridge_slave_1: entered allmulticast mode [ 54.017789][ T5943] bridge_slave_1: entered promiscuous mode [ 54.052741][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.054953][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.064504][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.068919][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.071092][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.079160][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.130878][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.133589][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.143700][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.148807][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.151072][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.159362][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.164360][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.167978][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.171088][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.179486][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.193779][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.197212][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.201236][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.209667][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.303610][ T5943] team0: Port device team_slave_0 added [ 54.361427][ T5947] hsr_slave_0: entered promiscuous mode [ 54.364153][ T5947] hsr_slave_1: entered promiscuous mode [ 54.368558][ T5943] team0: Port device team_slave_1 added [ 54.375969][ T5934] hsr_slave_0: entered promiscuous mode [ 54.379241][ T5934] hsr_slave_1: entered promiscuous mode [ 54.382096][ T5934] debugfs: 'hsr0' already exists in 'hsr' [ 54.384529][ T5934] Cannot create hsr debugfs directory [ 54.416834][ T5938] hsr_slave_0: entered promiscuous mode [ 54.420056][ T5938] hsr_slave_1: entered promiscuous mode [ 54.422881][ T5938] debugfs: 'hsr0' already exists in 'hsr' [ 54.425259][ T5938] Cannot create hsr debugfs directory [ 54.550942][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.553161][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.561160][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.595328][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.597944][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.605990][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.711247][ T5943] hsr_slave_0: entered promiscuous mode [ 54.713583][ T5943] hsr_slave_1: entered promiscuous mode [ 54.715644][ T5943] debugfs: 'hsr0' already exists in 'hsr' [ 54.717444][ T5943] Cannot create hsr debugfs directory [ 54.849588][ T5946] Bluetooth: hci0: command tx timeout [ 54.858718][ T5946] Bluetooth: hci3: command tx timeout [ 54.858734][ T5942] Bluetooth: hci1: command tx timeout [ 54.938763][ T5946] Bluetooth: hci2: command tx timeout [ 55.010524][ T5938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.020565][ T5938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.026527][ T5938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.040992][ T5938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.090343][ T5943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.098096][ T5943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.106280][ T5943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.111324][ T5943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.159013][ T5947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.167498][ T5947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.173293][ T5947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.180046][ T5947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.236660][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.246765][ T5934] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.256439][ T5934] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.263945][ T5934] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.270877][ T5934] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.298746][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.311311][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.313709][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.327083][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.329419][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.353081][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.380832][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.388525][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.391635][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.407105][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.423164][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.425679][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.448913][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.461821][ T40] audit: type=1400 audit(1762530562.303:89): avc: denied { sys_module } for pid=5938 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.466016][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.470988][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.476189][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.478478][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.507997][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.526713][ T5947] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.530575][ T5947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.559412][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.572905][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.575973][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.587856][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.595680][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.598812][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.647023][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.672424][ T5938] veth0_vlan: entered promiscuous mode [ 55.688354][ T5938] veth1_vlan: entered promiscuous mode [ 55.693753][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.710425][ T5943] veth0_vlan: entered promiscuous mode [ 55.717720][ T5943] veth1_vlan: entered promiscuous mode [ 55.749351][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.751932][ T5947] veth0_vlan: entered promiscuous mode [ 55.757343][ T5938] veth0_macvtap: entered promiscuous mode [ 55.763984][ T5938] veth1_macvtap: entered promiscuous mode [ 55.776788][ T5947] veth1_vlan: entered promiscuous mode [ 55.784803][ T5943] veth0_macvtap: entered promiscuous mode [ 55.792396][ T5943] veth1_macvtap: entered promiscuous mode [ 55.808484][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.824353][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.835309][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.847229][ T88] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.852982][ T88] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.858246][ T5947] veth0_macvtap: entered promiscuous mode [ 55.864929][ T88] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.867723][ T88] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.872351][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.878092][ T5934] veth0_vlan: entered promiscuous mode [ 55.888972][ T5947] veth1_macvtap: entered promiscuous mode [ 55.894037][ T5934] veth1_vlan: entered promiscuous mode [ 55.896396][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.900256][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.915852][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.919784][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.947664][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.973513][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.986992][ T5934] veth0_macvtap: entered promiscuous mode [ 55.993150][ T88] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.998030][ T88] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.002650][ T5934] veth1_macvtap: entered promiscuous mode [ 56.002677][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.007482][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.016401][ T88] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.022288][ T88] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.036198][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.039687][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.060426][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.060484][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.065326][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.080160][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.102295][ T88] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.102690][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.104011][ T5938] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.106186][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.115561][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.122885][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.131204][ T88] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.134825][ T88] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.156035][ T88] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.188427][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.191421][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.237863][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.247596][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.324057][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.326069][ T1147] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.327383][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.330697][ T1147] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.347194][ T1147] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.350743][ T1147] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.383456][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.387602][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.417466][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.420377][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.485799][ T6036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6036 comm=syz.3.4 [ 56.570288][ T6043] evm: overlay not supported [ 56.683062][ T6040] kvm: pic: non byte write [ 56.928871][ T5946] Bluetooth: hci1: command tx timeout [ 56.931263][ T5946] Bluetooth: hci3: command tx timeout [ 56.932557][ T5942] Bluetooth: hci0: command tx timeout [ 57.020590][ T5942] Bluetooth: hci2: command tx timeout [ 57.025207][ T6077] ext2: Unknown parameter 'discards/usb/00#/00#' [ 57.067229][ T6082] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.080271][ T6082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18'. [ 57.083420][ T6082] netlink: 92 bytes leftover after parsing attributes in process `syz.1.18'. [ 57.212468][ T6102] xt_connbytes: Forcing CT accounting to be enabled [ 57.215344][ T6102] Cannot find set identified by id 0 to match [ 57.274010][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.276683][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.283103][ T5942] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 57.283479][ T6111] tmpfs: Cannot disable swap on remount [ 57.324810][ T6117] Zero length message leads to an empty skb [ 57.346553][ T6106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.358013][ T6106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.395422][ T6122] vivid-007: ================= START STATUS ================= [ 57.397891][ T6122] vivid-007: Enable Output Cropping: true [ 57.400950][ T6122] vivid-007: Enable Output Composing: true [ 57.403516][ T6122] vivid-007: Enable Output Scaler: true [ 57.405568][ T6122] vivid-007: Tx RGB Quantization Range: Automatic [ 57.407992][ T6122] vivid-007: Transmit Mode: HDMI [ 57.410584][ T6122] vivid-007: Hotplug Present: 0x00000000 [ 57.412711][ T6122] vivid-007: RxSense Present: 0x00000000 [ 57.414788][ T6122] vivid-007: EDID Present: 0x00000000 [ 57.416531][ T6122] vivid-007: ================== END STATUS ================== [ 57.534304][ T1241] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.537462][ T40] kauditd_printk_skb: 92 callbacks suppressed [ 57.537472][ T40] audit: type=1400 audit(1762530564.373:182): avc: denied { name_bind } for pid=6131 comm="syz.2.35" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 57.537575][ T1241] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.541620][ T40] audit: type=1400 audit(1762530564.373:183): avc: denied { create } for pid=6133 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 57.546740][ T88] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.552537][ T40] audit: type=1400 audit(1762530564.383:184): avc: denied { listen } for pid=6133 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 57.564969][ T88] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.567795][ T40] audit: type=1400 audit(1762530564.383:185): avc: denied { setopt } for pid=6133 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 57.575371][ T40] audit: type=1400 audit(1762530564.383:186): avc: denied { create } for pid=6131 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 57.582107][ T40] audit: type=1400 audit(1762530564.383:187): avc: denied { bind } for pid=6131 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 57.589443][ T40] audit: type=1400 audit(1762530564.383:188): avc: denied { write } for pid=6131 comm="syz.2.35" path="socket:[9114]" dev="sockfs" ino=9114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 57.596961][ T40] audit: type=1400 audit(1762530564.393:189): avc: denied { wake_alarm } for pid=6128 comm="syz.1.37" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.604555][ T40] audit: type=1400 audit(1762530564.443:190): avc: denied { mounton } for pid=6128 comm="syz.1.37" path="/proc/23/task" dev="proc" ino=10667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 57.617736][ T40] audit: type=1400 audit(1762530564.453:191): avc: denied { write } for pid=6135 comm="syz.3.39" name="qat_adf_ctl" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.617958][ T6136] QAT: Invalid ioctl -2144835806 [ 57.860557][ T6158] netlink: 'syz.2.46': attribute type 30 has an invalid length. [ 57.871937][ T6158] bond1: option arp_missed_max: invalid value (0) [ 57.874573][ T6158] bond1: option arp_missed_max: allowed values 1 - 255 [ 57.879401][ T6158] bond1 (unregistering): Released all slaves [ 57.926278][ T6168] ip6t_rpfilter: unknown options [ 58.016021][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 58.018865][ T6177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.50'. [ 58.021632][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 58.024340][ T6177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.50'. [ 58.027253][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 58.030445][ T6177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.50'. [ 58.033820][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 58.037522][ T6177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.50'. [ 58.088242][ T6184] netlink: 'syz.1.53': attribute type 21 has an invalid length. [ 58.191046][ T6201] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 58.196024][ T6201] qnx6: wrong signature (magic) in superblock #1. [ 58.199090][ T6201] qnx6: unable to read the first superblock [ 58.234370][ T6204] bond0: (slave bond_slave_0): Releasing backup interface [ 58.304212][ T6212] netlink: 'syz.1.61': attribute type 4 has an invalid length. [ 58.335788][ T6216] netlink: 'syz.1.63': attribute type 9 has an invalid length. [ 58.344040][ T6216] netlink: 'syz.1.63': attribute type 9 has an invalid length. [ 58.345013][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.349671][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.352501][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.355761][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.513810][ T6225] input: syz1 as /devices/virtual/input/input5 [ 58.594990][ T6236] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 58.603161][ T6236] CIFS mount error: No usable UNC path provided in device string! [ 58.603161][ T6236] [ 58.606402][ T6236] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 58.687753][ T6249] syzkaller0: entered promiscuous mode [ 58.693503][ T6249] syzkaller0: entered allmulticast mode [ 58.737102][ T6254] trusted_key: encrypted_key: key trusted:syz not found [ 59.018718][ T5942] Bluetooth: hci3: command tx timeout [ 59.018751][ T5948] Bluetooth: hci0: command tx timeout [ 59.020385][ T5946] Bluetooth: hci1: command tx timeout [ 59.046358][ T6280] program syz.0.85 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.053215][ T6280] process 'syz.0.85' launched './file0' with NULL argv: empty string added [ 59.088712][ T5948] Bluetooth: hci2: command tx timeout [ 59.126820][ T6294] 9pnet_fd: Insufficient options for proto=fd [ 59.139902][ T6287] comedi: valid board names for 8255 driver are: [ 59.142086][ T6287] 8255 [ 59.142975][ T6287] comedi: valid board names for vmk80xx driver are: [ 59.145479][ T6287] vmk80xx [ 59.146733][ T6287] comedi: valid board names for usbduxsigma driver are: [ 59.149841][ T6287] usbduxsigma [ 59.151301][ T6287] comedi: valid board names for usbduxfast driver are: [ 59.154354][ T6287] usbduxfast [ 59.155682][ T6287] comedi: valid board names for usbdux driver are: [ 59.158307][ T6287] usbdux [ 59.159820][ T6287] comedi: valid board names for ni6501 driver are: [ 59.162129][ T6287] ni6501 [ 59.163061][ T6287] comedi: valid board names for dt9812 driver are: [ 59.165027][ T6287] dt9812 [ 59.166015][ T6287] comedi: valid board names for ni_labpc_cs driver are: [ 59.169534][ T6287] ni_labpc_cs [ 59.170573][ T6287] comedi: valid board names for ni_daq_700 driver are: [ 59.172614][ T6287] ni_daq_700 [ 59.173846][ T6298] capability: warning: `syz.0.90' uses 32-bit capabilities (legacy support in use) [ 59.174267][ T6287] comedi: valid board names for labpc_pci driver are: [ 59.179649][ T6287] labpc_pci [ 59.180850][ T6287] comedi: valid board names for adl_pci9118 driver are: [ 59.183061][ T6287] pci9118dg [ 59.184204][ T6287] pci9118hg [ 59.185233][ T6287] pci9118hr [ 59.186426][ T6287] comedi: valid board names for 8255_pci driver are: [ 59.188751][ T6287] 8255_pci [ 59.189781][ T6287] comedi: valid board names for s526 driver are: [ 59.192345][ T6287] s526 [ 59.193477][ T6287] comedi: valid board names for multiq3 driver are: [ 59.196437][ T6287] multiq3 [ 59.197759][ T6287] comedi: valid board names for pcmuio driver are: [ 59.201160][ T6287] pcmuio48 [ 59.202510][ T6287] pcmuio96 [ 59.203861][ T6287] comedi: valid board names for pcmmio driver are: [ 59.206439][ T6287] pcmmio [ 59.207745][ T6287] comedi: valid board names for pcmda12 driver are: [ 59.210537][ T6287] pcmda12 [ 59.211962][ T6287] comedi: valid board names for pcmad driver are: [ 59.214618][ T6287] pcmad12 [ 59.215961][ T6287] pcmad16 [ 59.217310][ T6287] comedi: valid board names for ni_labpc driver are: [ 59.220836][ T6287] lab-pc-1200 [ 59.222386][ T6287] lab-pc-1200ai [ 59.223912][ T6287] lab-pc+ [ 59.225096][ T6287] comedi: valid board names for atmio16 driver are: [ 59.227694][ T6287] atmio16 [ 59.229629][ T6287] atmio16d [ 59.231060][ T6287] comedi: valid board names for ni_at_ao driver are: [ 59.233849][ T6287] at-ao-6 [ 59.235194][ T6287] at-ao-10 [ 59.236493][ T6287] comedi: valid board names for ni_at_a2150 driver are: [ 59.242336][ T6287] ni_at_a2150 [ 59.243537][ T6287] comedi: valid board names for adq12b driver are: [ 59.244920][ T6304] netlink: 'syz.0.92': attribute type 21 has an invalid length. [ 59.245913][ T6287] adq12b [ 59.250398][ T6287] comedi: valid board names for mpc624 driver are: [ 59.252526][ T6287] mpc624 [ 59.253444][ T6287] comedi: valid board names for c6xdigio driver are: [ 59.255496][ T6287] c6xdigio [ 59.256617][ T6287] comedi: valid board names for aio_iiro_16 driver are: [ 59.259229][ T6287] aio_iiro_16 [ 59.260290][ T6287] comedi: valid board names for aio_aio12_8 driver are: [ 59.262367][ T6287] aio_aio12_8 [ 59.263430][ T6287] aio_ai12_8 [ 59.264482][ T6287] aio_ao12_4 [ 59.265554][ T6287] comedi: valid board names for fl512 driver are: [ 59.267955][ T6287] fl512 [ 59.269120][ T6287] comedi: valid board names for dmm32at driver are: [ 59.271174][ T6287] dmm32at [ 59.272302][ T6287] comedi: valid board names for dt282x driver are: [ 59.274262][ T6287] dt2821 [ 59.275191][ T6287] dt2821-f [ 59.276505][ T6287] dt2821-g [ 59.277860][ T6287] dt2823 [ 59.279330][ T6287] dt2824-pgh [ 59.280434][ T6287] dt2824-pgl [ 59.281503][ T6287] dt2825 [ 59.282462][ T6287] dt2827 [ 59.283411][ T6287] dt2828 [ 59.284352][ T6287] dt2829 [ 59.285274][ T6287] dt21-ez [ 59.286255][ T6287] dt23-ez [ 59.287261][ T6287] dt24-ez [ 59.288250][ T6287] dt24-ez-pgl [ 59.289670][ T6287] comedi: valid board names for dt2817 driver are: [ 59.291696][ T6287] dt2817 [ 59.292645][ T6287] comedi: valid board names for dt2815 driver are: [ 59.294653][ T6287] dt2815 [ 59.295588][ T6287] comedi: valid board names for dt2814 driver are: [ 59.298235][ T6287] dt2814 [ 59.299661][ T6287] comedi: valid board names for dt2811 driver are: [ 59.302333][ T6287] dt2811-pgh [ 59.303747][ T6287] dt2811-pgl [ 59.305158][ T6287] comedi: valid board names for dt2801 driver are: [ 59.307748][ T6287] dt2801 [ 59.309690][ T6287] comedi: valid board names for das6402 driver are: [ 59.312396][ T6287] das6402-12 [ 59.313796][ T6287] das6402-16 [ 59.315261][ T6287] comedi: valid board names for das1800 driver are: [ 59.317961][ T6287] das-1701st [ 59.319470][ T6287] das-1701st-da [ 59.320977][ T6287] das-1702st [ 59.322354][ T6287] das-1702st-da [ 59.323854][ T6287] das-1702hr [ 59.325257][ T6287] das-1702hr-da [ 59.326675][ T6287] das-1701ao [ 59.328105][ T6287] das-1702ao [ 59.331008][ T6287] das-1801st [ 59.332417][ T6287] das-1801st-da [ 59.333890][ T6287] das-1802st [ 59.335276][ T6287] das-1802st-da [ 59.336785][ T6287] das-1802hr [ 59.338196][ T6287] das-1802hr-da [ 59.339779][ T6287] das-1801hc [ 59.341152][ T6287] das-1802hc [ 59.342537][ T6287] das-1801ao [ 59.344004][ T6287] das-1802ao [ 59.345424][ T6287] comedi: valid board names for das800 driver are: [ 59.348093][ T6287] das-800 [ 59.349744][ T6287] cio-das800 [ 59.350949][ T6287] das-801 [ 59.351909][ T6287] cio-das801 [ 59.353256][ T6287] das-802 [ 59.354568][ T6287] cio-das802 [ 59.355723][ T6287] cio-das802/16 [ 59.356865][ T6287] comedi: valid board names for isa-das08 driver are: [ 59.359042][ T6287] isa-das08 [ 59.360500][ T6287] das08-pgm [ 59.361845][ T6287] das08-pgh [ 59.362923][ T6287] das08-pgl [ 59.363976][ T6287] das08-aoh [ 59.364994][ T6287] das08-aol [ 59.366035][ T6287] das08-aom [ 59.367349][ T6287] das08/jr-ao [ 59.369051][ T6287] das08jr-16-ao [ 59.370618][ T6287] pc104-das08 [ 59.372169][ T6287] das08jr/16 [ 59.373571][ T6287] comedi: valid board names for das16m1 driver are: [ 59.376225][ T6287] das16m1 [ 59.377679][ T6287] comedi: valid board names for dac02 driver are: [ 59.380564][ T6287] dac02 [ 59.381798][ T6287] comedi: valid board names for rti802 driver are: [ 59.384504][ T6287] rti802 [ 59.385763][ T6287] comedi: valid board names for rti800 driver are: [ 59.388178][ T6287] rti800 [ 59.389388][ T6287] rti815 [ 59.390315][ T6287] comedi: valid board names for pcm3724 driver are: [ 59.392332][ T6287] pcm3724 [ 59.393316][ T6287] comedi: valid board names for pcl818 driver are: [ 59.395419][ T6287] pcl818l [ 59.396477][ T6287] pcl818h [ 59.397463][ T6287] pcl818hd [ 59.399107][ T6287] pcl818hg [ 59.400144][ T6287] pcl818 [ 59.401531][ T6287] pcl718 [ 59.402508][ T6287] pcm3718 [ 59.403490][ T6287] comedi: valid board names for pcl816 driver are: [ 59.405482][ T6287] pcl816 [ 59.406570][ T6287] pcl814b [ 59.407569][ T6287] comedi: valid board names for pcl812 driver are: [ 59.410896][ T6287] pcl812 [ 59.411854][ T6287] pcl812pg [ 59.413135][ T6287] acl8112pg [ 59.414506][ T6287] acl8112dg [ 59.416073][ T6287] acl8112hg [ 59.417199][ T6287] a821pgl [ 59.418460][ T6287] a821pglnda [ 59.420500][ T6287] a821pgh [ 59.421910][ T6287] a822pgl [ 59.422982][ T6287] a822pgh [ 59.423966][ T6287] a823pgl [ 59.424910][ T6287] a823pgh [ 59.425857][ T6287] pcl813 [ 59.426950][ T6287] pcl813b [ 59.428122][ T6287] acl8113 [ 59.429500][ T6287] iso813 [ 59.430559][ T6287] acl8216 [ 59.431819][ T6287] a826pg [ 59.433058][ T6287] comedi: valid board names for pcl730 driver are: [ 59.435651][ T6287] pcl730 [ 59.436763][ T6287] iso730 [ 59.438034][ T6287] acl7130 [ 59.439618][ T6287] pcm3730 [ 59.440967][ T6287] pcl725 [ 59.442213][ T6287] p8r8dio [ 59.443497][ T6287] acl7225b [ 59.444850][ T6287] p16r16dio [ 59.446203][ T6287] pcl733 [ 59.447435][ T6287] pcl734 [ 59.449656][ T6287] opmm-1616-xt [ 59.451230][ T6287] pearl-mm-p [ 59.452733][ T6287] ir104-pbf [ 59.454084][ T6287] comedi: valid board names for pcl726 driver are: [ 59.456681][ T6287] pcl726 [ 59.457916][ T6287] pcl727 [ 59.459490][ T6287] pcl728 [ 59.460746][ T6287] acl6126 [ 59.462042][ T6287] acl6128 [ 59.463329][ T6287] comedi: valid board names for pcl724 driver are: [ 59.465966][ T6287] pcl724 [ 59.467229][ T6287] pcl722 [ 59.468482][ T6287] pcl731 [ 59.470334][ T6287] acl7122 [ 59.471714][ T6287] acl7124 [ 59.473005][ T6287] pet48dio [ 59.474299][ T6287] pcmio48 [ 59.475562][ T6287] onyx-mm-dio [ 59.476984][ T6287] comedi: valid board names for pcl711 driver are: [ 59.480202][ T6287] pcl711 [ 59.481450][ T6287] pcl711b [ 59.482728][ T6287] acl8112hg [ 59.484153][ T6287] acl8112dg [ 59.485516][ T6287] comedi: valid board names for amplc_pc263 driver are: [ 59.488322][ T6287] pc263 [ 59.490360][ T6287] comedi: valid board names for amplc_pc236 driver are: [ 59.493113][ T6287] pc36at [ 59.494370][ T6287] comedi: valid board names for amplc_dio200 driver are: [ 59.497199][ T6287] pc212e [ 59.498402][ T6287] pc214e [ 59.499711][ T6287] pc215e [ 59.500987][ T6287] pc218e [ 59.502230][ T6287] pc272e [ 59.503950][ T6287] comedi: valid board names for comedi_parport driver are: [ 59.506875][ T6287] comedi_parport [ 59.508419][ T6287] comedi: valid board names for comedi_test driver are: [ 59.511203][ T6287] comedi_test [ 59.512711][ T6287] comedi: valid board names for comedi_bond driver are: [ 59.515525][ T6287] comedi_bond [ 59.827184][ T6359] comedi comedi4: bad chanlist[0]=0x000000e2 chan=226 range length=2 [ 59.846172][ T6362] warning: `syz.3.111' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.977104][ T6367] bridge0: port 3(syz_tun) entered blocking state [ 59.980305][ T6367] bridge0: port 3(syz_tun) entered disabled state [ 59.983097][ T6367] syz_tun: entered allmulticast mode [ 59.985732][ T6367] syz_tun: entered promiscuous mode [ 59.988104][ T6367] bridge0: port 3(syz_tun) entered blocking state [ 59.990350][ T6367] bridge0: port 3(syz_tun) entered forwarding state [ 60.103477][ T6377] sp0: Synchronizing with TNC [ 60.333595][ T6391] netem: change failed [ 60.342320][ T6391] netem: change failed [ 60.395642][ T6396] bpf: Bad value for 'uid' [ 60.522410][ T6405] random: crng reseeded on system resumption [ 60.644498][ T6409] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 60.649562][ T6409] block device autoloading is deprecated and will be removed. [ 60.654981][ T6412] (syz.1.126,6412,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 60.657086][ T6409] loop8: detected capacity change from 0 to 7 [ 60.660777][ T6412] (syz.1.126,6412,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 60.660805][ T6412] (syz.1.126,6412,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 60.660822][ T6412] (syz.1.126,6412,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 60.673771][ T6409] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 60.676636][ T6409] loop8: partition table partially beyond EOD, truncated [ 60.680873][ T6409] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 60.686539][ T6409] loop8: p2 start 956478 is beyond EOD, truncated [ 60.745272][ T6069] udevd[6069]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 60.799207][ T6415] binder: BINDER_SET_CONTEXT_MGR already set [ 60.801178][ T6415] binder: 6414:6415 ioctl 4018620d 200000004a80 returned -16 [ 60.902583][ T6425] ======================================================= [ 60.902583][ T6425] WARNING: The mand mount option has been deprecated and [ 60.902583][ T6425] and is ignored by this kernel. Remove the mand [ 60.902583][ T6425] option from the mount to silence this warning. [ 60.902583][ T6425] ======================================================= [ 61.088868][ T5948] Bluetooth: hci1: command tx timeout [ 61.088879][ T5942] Bluetooth: hci0: command tx timeout [ 61.130906][ T6430] Bluetooth: MGMT ver 1.23 [ 61.217530][ T6436] netlink: 'syz.3.133': attribute type 3 has an invalid length. [ 61.378658][ T6019] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 61.401157][ T1333] cfg80211: failed to load regulatory.db [ 61.519605][ T6019] usb 7-1: device descriptor read/64, error -71 [ 61.591736][ T6451] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 61.597315][ T6451] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 61.600889][ T6451] overlayfs: missing 'lowerdir' [ 61.758705][ T6019] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 61.899236][ T6019] usb 7-1: device descriptor read/64, error -71 [ 61.962989][ T6472] netlink: 'syz.0.144': attribute type 1 has an invalid length. [ 61.985429][ T6472] bond1: (slave geneve2): making interface the new active one [ 61.989520][ T6472] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 61.992993][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 61.995891][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 61.998942][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 62.001777][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 62.008793][ T6019] usb usb7-port1: attempt power cycle [ 62.047298][ T6475] Bluetooth: MGMT ver 1.23 [ 62.122474][ T6475] cdrom: dropping to single frame dma [ 62.227616][ T6485] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 62.232812][ T6485] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 62.358655][ T6019] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 62.379494][ T6019] usb 7-1: device descriptor read/8, error -71 [ 62.572033][ T6490] kvm: pic: non byte write [ 62.576183][ T6490] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1152 (2304 ns) > initial count (1408 ns). Using initial count to start timer. [ 62.628773][ T6019] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 62.649553][ T6019] usb 7-1: device descriptor read/8, error -71 [ 62.770682][ T6019] usb usb7-port1: unable to enumerate USB device [ 62.842017][ T6494] netlink: 'syz.0.152': attribute type 4 has an invalid length. [ 62.844761][ T6494] __nla_validate_parse: 73 callbacks suppressed [ 62.844773][ T6494] netlink: 17 bytes leftover after parsing attributes in process `syz.0.152'. [ 63.069266][ T40] kauditd_printk_skb: 134 callbacks suppressed [ 63.069277][ T40] audit: type=1400 audit(1762530569.903:326): avc: denied { create } for pid=6501 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 63.082115][ T40] audit: type=1400 audit(1762530569.923:327): avc: denied { ioctl } for pid=6501 comm="syz.0.154" path="socket:[11487]" dev="sockfs" ino=11487 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 63.093714][ T40] audit: type=1400 audit(1762530569.923:328): avc: denied { setopt } for pid=6501 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 63.104342][ T40] audit: type=1400 audit(1762530569.943:329): avc: denied { bind } for pid=6503 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.111990][ T40] audit: type=1400 audit(1762530569.943:330): avc: denied { listen } for pid=6503 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.117566][ T6506] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.156'. [ 63.119924][ T40] audit: type=1400 audit(1762530569.943:331): avc: denied { accept } for pid=6503 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.130256][ T40] audit: type=1800 audit(1762530569.953:332): pid=6504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.155" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D21397C26527FC108503 dev="overlay" ino=12778 res=0 errno=0 [ 63.144910][ T40] audit: type=1400 audit(1762530569.983:333): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.162307][ T40] audit: type=1400 audit(1762530570.003:334): avc: denied { setopt } for pid=6507 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.162383][ T6509] IPVS: set_ctl: invalid protocol: 9 127.0.0.1:20003 [ 63.226810][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 63.430587][ T6521] Process accounting resumed [ 63.601526][ T40] audit: type=1400 audit(1762530570.443:335): avc: denied { connect } for pid=6530 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.613760][ T9] hid-generic 0005:0002:5508.0002: item fetching failed at offset 0/1 [ 63.616718][ T9] hid-generic 0005:0002:5508.0002: probe with driver hid-generic failed with error -22 [ 63.785770][ T6541] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 64.011216][ T6547] tipc: Failed to remove unknown binding: 66,1,1/0:1408969149/1408969151 [ 64.014353][ T6547] tipc: Failed to remove unknown binding: 66,1,1/0:1408969149/1408969151 [ 64.078329][ T6554] netlink: 'syz.1.172': attribute type 1 has an invalid length. [ 64.083767][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 64.086708][ T6554] netlink: 'syz.1.172': attribute type 1 has an invalid length. [ 64.095380][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 64.101021][ T6554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=6554 comm=syz.1.172 [ 64.173497][ T6557] netlink: 'syz.0.173': attribute type 8 has an invalid length. [ 64.255237][ T6571] 9pnet_fd: Insufficient options for proto=fd [ 64.281603][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'. [ 64.377652][ T6588] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 64.546574][ T6600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.179'. [ 64.582028][ T6519] Set syz1 is full, maxelem 65536 reached [ 64.694327][ T6620] Cannot find del_set index 4 as target [ 64.707597][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 64.789835][ T6635] mmap: syz.0.195 (6635): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 64.863443][ T6645] netlink: 112 bytes leftover after parsing attributes in process `syz.2.198'. [ 64.867972][ T6645] netlink: 'syz.2.198': attribute type 3 has an invalid length. [ 64.890034][ T6649] fuse: Unknown parameter '' [ 64.891914][ T6649] fuse: Unknown parameter '' [ 64.911847][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 65.015216][ T6668] usb 2-1: USB disconnect, device number 2 [ 65.081527][ T6021] IPVS: starting estimator thread 0... [ 65.155669][ T6682] netlink: 'syz.3.209': attribute type 1 has an invalid length. [ 65.179502][ T6671] IPVS: using max 42 ests per chain, 100800 per kthread [ 65.180957][ T6682] bond1: (slave geneve2): making interface the new active one [ 65.184756][ T6682] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 65.187648][ T1241] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 65.190973][ T1241] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 65.194595][ T1241] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 65.197332][ T1241] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 65.218676][ T1333] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 65.337685][ T46] IPVS: stop unused estimator thread 0... [ 65.348804][ T1333] usb 6-1: device descriptor read/64, error -71 [ 65.388985][ T6021] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.542695][ T6704] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 65.548678][ T6021] usb 5-1: Using ep0 maxpacket: 8 [ 65.552193][ T6021] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 65.554685][ T6021] usb 5-1: config 0 has no interface number 0 [ 65.556581][ T6021] usb 5-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 65.560498][ T6021] usb 5-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 65.564601][ T6021] usb 5-1: config 0 interface 48 has no altsetting 0 [ 65.570139][ T6021] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 65.572891][ T6021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.575356][ T6021] usb 5-1: Product: syz [ 65.576685][ T6021] usb 5-1: Manufacturer: syz [ 65.578167][ T6021] usb 5-1: SerialNumber: syz [ 65.582949][ T6021] usb 5-1: config 0 descriptor?? [ 65.601366][ T1333] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 65.637508][ T6709] netlink: 'syz.3.216': attribute type 11 has an invalid length. [ 65.682418][ T6711] openvswitch: netlink: nsh attribute has 996 unknown bytes. [ 65.684726][ T6711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 65.688683][ T6711] [syz.3.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 65.738798][ T1333] usb 6-1: device descriptor read/64, error -71 [ 65.849942][ T1333] usb usb6-port1: attempt power cycle [ 66.115332][ T6729] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 66.120912][ T6729] bond1 (unregistering): Released all slaves [ 66.188654][ T1333] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 66.209354][ T1333] usb 6-1: device descriptor read/8, error -71 [ 66.448651][ T1333] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 66.469747][ T1333] usb 6-1: device descriptor read/8, error -71 [ 66.578877][ T1333] usb usb6-port1: unable to enumerate USB device [ 67.211511][ T6757] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 67.412825][ T6781] vlan2: entered allmulticast mode [ 67.414567][ T6781] bond0: entered allmulticast mode [ 67.416303][ T6781] bond_slave_0: entered allmulticast mode [ 67.418399][ T6781] bond_slave_1: entered allmulticast mode [ 67.562289][ T6787] loop6: detected capacity change from 0 to 524287999 [ 67.735455][ T6791] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 67.738528][ T6791] SELinux: failed to load policy [ 67.738709][ T5942] Bluetooth: hci3: command 0x0405 tx timeout [ 67.742118][ T6791] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.914561][ T6021] usb 5-1: USB disconnect, device number 2 [ 67.923658][ T6804] tty tty27: ldisc open failed (-12), clearing slot 26 [ 67.971861][ T6814] tmpfs: Unknown parameter 'dont_measure' [ 68.015137][ T6821] syzkaller1: entered promiscuous mode [ 68.017458][ T6821] syzkaller1: entered allmulticast mode [ 68.026535][ T6824] team0: Device gtp0 is of different type [ 68.084649][ T6825] netlink: 'syz.1.253': attribute type 10 has an invalid length. [ 68.087162][ T6825] __nla_validate_parse: 5 callbacks suppressed [ 68.087170][ T6825] netlink: 40 bytes leftover after parsing attributes in process `syz.1.253'. [ 68.093872][ T6825] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 68.097004][ T6825] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 68.101755][ T6825] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 68.140827][ T40] kauditd_printk_skb: 70 callbacks suppressed [ 68.140837][ T40] audit: type=1400 audit(1762530574.983:406): avc: denied { read } for pid=6830 comm="syz.3.255" path="socket:[11828]" dev="sockfs" ino=11828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 68.192773][ T40] audit: type=1400 audit(1762530575.033:407): avc: denied { write } for pid=6830 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 68.199411][ T40] audit: type=1400 audit(1762530575.033:408): avc: denied { read write } for pid=6830 comm="syz.3.255" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.207137][ T40] audit: type=1400 audit(1762530575.033:409): avc: denied { open } for pid=6830 comm="syz.3.255" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.216074][ T40] audit: type=1400 audit(1762530575.033:410): avc: denied { ioctl } for pid=6830 comm="syz.3.255" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.217733][ T6834] usb usb9: usbfs: process 6834 (syz.3.256) did not claim interface 0 before use [ 68.219443][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 68.223265][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 68.223670][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 68.224076][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 68.224432][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 68.224743][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 68.225070][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 68.225508][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 68.250699][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 68.436149][ T6852] fuse: Unknown parameter 'fsuuid' [ 68.475975][ T40] audit: type=1400 audit(1762530575.313:411): avc: denied { mount } for pid=6859 comm="syz.3.264" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.482932][ T6860] pimreg: entered allmulticast mode [ 68.586961][ T40] audit: type=1400 audit(1762530575.423:412): avc: denied { create } for pid=6872 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.593593][ T40] audit: type=1400 audit(1762530575.423:413): avc: denied { connect } for pid=6872 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.625454][ T40] audit: type=1400 audit(1762530575.463:414): avc: denied { create } for pid=6874 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 68.633574][ T6875] openvswitch: netlink: Missing valid actions attribute. [ 68.636018][ T6875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.643530][ T40] audit: type=1400 audit(1762530575.483:415): avc: denied { getopt } for pid=6874 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 68.677517][ T6875] tmpfs: Invalid gid '0x00000000ffffffff' [ 68.687642][ T6880] capability: warning: `syz.2.272' uses deprecated v2 capabilities in a way that may be insecure [ 69.824019][ T6908] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 69.868676][ T53] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 70.028635][ T53] usb 6-1: Using ep0 maxpacket: 16 [ 70.034488][ T53] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 70.037720][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 70.041098][ T53] usb 6-1: Product: syz [ 70.042574][ T53] usb 6-1: Manufacturer: syz [ 70.044050][ T53] usb 6-1: SerialNumber: syz [ 70.047112][ T53] usb 6-1: config 0 descriptor?? [ 70.048638][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 70.048831][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 70.266628][ T6931] can: request_module (can-proto-0) failed. [ 70.266894][ T53] usb 6-1: USB disconnect, device number 6 [ 70.269395][ T5948] Bluetooth: hci1: Malformed LE Event: 0x0d [ 70.297134][ T6931] can: request_module (can-proto-0) failed. [ 70.310511][ T6935] netlink: 'syz.0.289': attribute type 9 has an invalid length. [ 70.313947][ T6935] netlink: 'syz.0.289': attribute type 7 has an invalid length. [ 70.317608][ T6935] netlink: 'syz.0.289': attribute type 8 has an invalid length. [ 70.402126][ T6957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=6957 comm=syz.0.293 [ 70.411677][ T6957] ip6erspan0: entered promiscuous mode [ 70.537952][ T6979] loop6: detected capacity change from 0 to 7 [ 70.542523][ T6979] Dev loop6: unable to read RDB block 7 [ 70.544420][ T6979] loop6: unable to read partition table [ 70.546272][ T6979] loop6: partition table beyond EOD, truncated [ 70.548247][ T6979] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 70.557236][ T6978] netlink: 'syz.2.300': attribute type 2 has an invalid length. [ 70.561653][ T6978] netlink: 'syz.2.300': attribute type 1 has an invalid length. [ 70.565828][ T6978] netlink: 'syz.2.300': attribute type 1 has an invalid length. [ 70.794116][ T6995] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 70.796761][ T6995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 70.890336][ T7009] syz.2.311: attempt to access beyond end of device [ 70.890336][ T7009] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 70.894534][ T7009] gfs2: error -5 reading superblock [ 71.038683][ T5939] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 71.059577][ T7016] netlink: 'syz.1.313': attribute type 1 has an invalid length. [ 71.080719][ T7016] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.084138][ T7016] bond1: (slave bond2): making interface the new active one [ 71.087150][ T7016] bond1: (slave bond2): Enslaving as an active interface with an up link [ 71.103577][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.106451][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.203556][ T7029] netlink: 'syz.0.316': attribute type 5 has an invalid length. [ 71.212777][ T5939] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 71.215976][ T5939] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 71.220913][ T5939] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.225872][ T5939] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 71.230119][ T5939] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 71.236243][ T5939] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 71.241145][ T5939] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 71.245548][ T5939] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.251814][ T5939] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 71.256407][ T5939] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 71.262253][ T5939] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 71.264623][ T5939] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 71.268076][ T5939] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.273362][ T5939] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 71.277991][ T5939] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 71.286098][ T5939] usb 8-1: string descriptor 0 read error: -22 [ 71.289060][ T5939] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 71.292915][ T5939] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.314782][ T5939] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 71.504489][ T5939] usb 8-1: USB disconnect, device number 2 [ 72.402172][ T7099] SELinux: failed to load policy [ 72.460867][ T7109] netlink: 'syz.1.339': attribute type 1 has an invalid length. [ 72.473801][ T7109] 8021q: adding VLAN 0 to HW filter on device bond3 [ 72.480652][ T7109] 8021q: adding VLAN 0 to HW filter on device bond3 [ 72.482956][ T7109] bond3: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 72.486520][ T7109] bond3: (slave ip6_vti0): Error -95 calling set_mac_address [ 73.491753][ T7123] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 73.494881][ T7123] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 73.504505][ T7123] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 73.509499][ T7123] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 73.512086][ T7123] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 73.515676][ T7123] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 73.520335][ T7123] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 73.523011][ T7123] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 73.526736][ T7123] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 73.531017][ T7123] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 73.533974][ T7123] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.539119][ T7123] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.592540][ T7139] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 73.634425][ T7139] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 73.644833][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 73.644844][ T40] audit: type=1400 audit(1762530580.483:459): avc: denied { connect } for pid=7136 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.689260][ T7143] MPI: mpi too large (16392 bits) [ 73.696876][ T40] audit: type=1400 audit(1762530580.533:460): avc: denied { kexec_image_load } for pid=7138 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 73.728834][ T40] audit: type=1400 audit(1762530580.573:461): avc: denied { setopt } for pid=7152 comm="syz.2.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 73.762340][ T40] audit: type=1326 audit(1762530580.603:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.2.351" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a2bd8f6c9 code=0x0 [ 73.925467][ T7154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=7154 comm=syz.2.351 [ 73.995113][ T7160] syz.2.352 uses obsolete (PF_INET,SOCK_PACKET) [ 74.367407][ T40] audit: type=1400 audit(1762530581.203:463): avc: denied { associate } for pid=7168 comm="syz.2.354" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.420394][ T7171] __nla_validate_parse: 66 callbacks suppressed [ 74.420409][ T7171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.356'. [ 74.426817][ T7171] netlink: 40 bytes leftover after parsing attributes in process `syz.2.356'. [ 74.440992][ C3] sr 2:0:0:0: [sr0] tag#4 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 74.445326][ C3] sr 2:0:0:0: [sr0] tag#4 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 74.450981][ T7172] netlink: 'syz.1.355': attribute type 1 has an invalid length. [ 74.460222][ T7171] trusted_key: syz.2.356 sent an empty control message without MSG_MORE. [ 74.478153][ T7172] 8021q: adding VLAN 0 to HW filter on device bond4 [ 74.512621][ T7175] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 74.515511][ T7175] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 74.521849][ T7175] vhci_hcd vhci_hcd.0: Device attached [ 74.524549][ T7176] vhci_hcd: cannot find the pending unlink 7 [ 74.530596][ T40] audit: type=1400 audit(1762530581.373:464): avc: denied { create } for pid=7174 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 74.537276][ T40] audit: type=1400 audit(1762530581.373:465): avc: denied { listen } for pid=7174 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 74.544710][ T7172] bond4: (slave veth3): Enslaving as an active interface with a down link [ 74.554200][ T40] audit: type=1400 audit(1762530581.393:466): avc: denied { setopt } for pid=7174 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 74.556563][ T7172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7172 comm=syz.1.355 [ 74.567871][ T7176] vhci_hcd: connection closed [ 74.569599][ T1144] vhci_hcd: stop threads [ 74.573773][ T1144] vhci_hcd: release socket [ 74.575719][ T1144] vhci_hcd: disconnect device [ 74.628153][ T7180] vlan2: entered allmulticast mode [ 74.631180][ T7180] veth1: entered allmulticast mode [ 74.634004][ T7180] bond4: (slave vlan2): Opening slave failed [ 74.769094][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.897915][ T40] audit: type=1400 audit(1762530581.733:467): avc: denied { accept } for pid=7184 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.908755][ T40] audit: type=1400 audit(1762530581.743:468): avc: denied { setopt } for pid=7184 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.971506][ T7151] kexec: Could not allocate control_code_buffer [ 74.975169][ T7187] : entered promiscuous mode [ 75.185586][ C1] sr 2:0:0:0: [sr0] tag#20 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 75.189987][ C1] sr 2:0:0:0: [sr0] tag#20 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 75.278744][ T6020] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.468768][ T6020] usb 5-1: Using ep0 maxpacket: 32 [ 75.472368][ T6020] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 75.475932][ T6020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.491008][ T6020] usb 5-1: config 0 descriptor?? [ 75.507503][ T6020] as10x_usb: device has been detected [ 75.510123][ T6020] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 75.533986][ T6020] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 75.561228][ T6020] as10x_usb: error during firmware upload part1 [ 75.564387][ T6020] Registered device nBox DVB-T Dongle [ 75.568978][ T5942] Bluetooth: hci3: command 0x0405 tx timeout [ 75.569187][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.569391][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.794535][ T34] usb 5-1: USB disconnect, device number 3 [ 75.820947][ T34] Unregistered device nBox DVB-T Dongle [ 75.826153][ T34] as10x_usb: device has been disconnected [ 75.989698][ T7236] bond2 (unregistering): Released all slaves [ 76.148355][ T7242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.377'. [ 76.152264][ T7242] netlink: 'syz.0.377': attribute type 12 has an invalid length. [ 76.356020][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'. [ 76.470741][ T7252] Mount JFS Failure: -5 [ 76.472721][ T7252] jfs_mount failed w/return code = -5 [ 76.612501][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.387'. [ 76.636221][ T7264] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.660644][ T7264] bond2: (slave batadv1): Opening slave failed [ 76.848690][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 76.989716][ T7283] fuse: Unknown parameter '@8L$Kۍ HID v0.00 Device [syz1] on syz0 [ 81.317763][ T7519] fido_id[7519]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.619145][ T7555] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.921198][ T7575] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 81.985190][ T7581] vivid-007: ================= START STATUS ================= [ 81.987691][ T7581] vivid-007: Generate PTS: true [ 81.989620][ T7581] vivid-007: Generate SCR: true [ 81.991182][ T7581] tpg source WxH: 320x240 (Y'CbCr) [ 81.992878][ T7581] tpg field: 1 [ 81.994024][ T7581] tpg crop: (0,0)/320x240 [ 81.995388][ T7581] tpg compose: (0,0)/320x240 [ 81.996881][ T7581] tpg colorspace: 8 [ 81.998103][ T7581] tpg transfer function: 0/0 [ 81.999747][ T7581] tpg Y'CbCr encoding: 0/0 [ 82.001273][ T7581] tpg quantization: 0/0 [ 82.002679][ T7581] tpg RGB range: 0/2 [ 82.004162][ T7581] vivid-007: ================== END STATUS ================== [ 82.034963][ T7590] Attempt to restore checkpoint with obsolete wellknown handles [ 82.067545][ T7597] tmpfs: Bad value for 'mpol' [ 82.118827][ T7603] netlink: 80 bytes leftover after parsing attributes in process `syz.2.489'. [ 82.154504][ T7600] netlink: 'syz.0.488': attribute type 1 has an invalid length. [ 82.159362][ T7600] netlink: 224 bytes leftover after parsing attributes in process `syz.0.488'. [ 82.402162][ T7644] geneve2: entered promiscuous mode [ 82.404482][ T7644] geneve2: entered allmulticast mode [ 82.407366][ T54] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 82.419597][ T7631] tmpfs: Invalid gid '0x00000000ffffffff' [ 82.422184][ T54] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 82.425130][ T54] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 82.425151][ T54] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 82.529874][ T7629] netlink: 64 bytes leftover after parsing attributes in process `syz.1.492'. [ 82.535035][ T7650] mkiss: ax0: crc mode is auto. [ 82.790364][ T7657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.504'. [ 83.287284][ T7673] (syz.0.511,7673,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 83.292282][ T7673] (syz.0.511,7673,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 83.511190][ T7694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.514018][ T7694] IPv6: NLM_F_CREATE should be set when creating new route [ 83.516346][ T7694] IPv6: NLM_F_CREATE should be set when creating new route [ 83.522431][ T7694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.978209][ T7726] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 83.981919][ T7726] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 83.984910][ T7726] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 83.987897][ T7726] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 84.049929][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 84.049940][ T40] audit: type=1400 audit(1762530590.893:537): avc: denied { read write } for pid=7727 comm="syz.3.525" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 84.061841][ T40] audit: type=1400 audit(1762530590.893:538): avc: denied { open } for pid=7727 comm="syz.3.525" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 84.070393][ T40] audit: type=1400 audit(1762530590.893:539): avc: denied { ioctl } for pid=7727 comm="syz.3.525" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 84.138733][ T7733] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 84.242969][ T7741] netlink: 'syz.2.529': attribute type 10 has an invalid length. [ 84.246755][ T7741] bridge0: port 3(team0) entered disabled state [ 84.249596][ T7741] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.252903][ T7741] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.262883][ T7741] bridge0: port 3(team0) entered blocking state [ 84.265524][ T7741] bridge0: port 3(team0) entered forwarding state [ 84.268656][ T7741] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.271667][ T7741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.274631][ T7741] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.277601][ T7741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.285777][ T7741] bridge0: entered allmulticast mode [ 84.289461][ T7741] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 84.370377][ T40] audit: type=1400 audit(1762530591.203:540): avc: denied { read open } for pid=7760 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.379565][ T40] audit: type=1400 audit(1762530591.213:541): avc: denied { getattr } for pid=7760 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.390301][ T40] audit: type=1400 audit(1762530591.213:542): avc: denied { add_name } for pid=7755 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.397407][ T40] audit: type=1400 audit(1762530591.213:543): avc: denied { create } for pid=7755 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.404765][ T40] audit: type=1400 audit(1762530591.213:544): avc: denied { write } for pid=7755 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb5.link" dev="tmpfs" ino=4419 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.413415][ T40] audit: type=1400 audit(1762530591.213:545): avc: denied { append } for pid=7755 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" dev="tmpfs" ino=4419 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.446618][ T40] audit: type=1400 audit(1762530591.283:546): avc: denied { remove_name } for pid=7767 comm="rm" name="resolv.conf.lapb5.link" dev="tmpfs" ino=4419 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.524830][ T7784] __nla_validate_parse: 5 callbacks suppressed [ 84.524840][ T7784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.542'. [ 84.536224][ T7790] netlink: 32 bytes leftover after parsing attributes in process `syz.1.542'. [ 84.540500][ T7784] netlink: 32 bytes leftover after parsing attributes in process `syz.1.542'. [ 84.597247][ T7799] netlink: 'syz.1.544': attribute type 7 has an invalid length. [ 84.601940][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 84.650476][ T7805] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 84.656609][ T7805] netlink: 'syz.1.546': attribute type 10 has an invalid length. [ 84.660355][ T7805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.665200][ T7805] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 84.719111][ T7810] ipt_ECN: cannot use operation on non-tcp rule [ 84.792974][ T7821] mmap: syz.0.545 (7821) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.835007][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'. [ 84.838003][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'. [ 84.938306][ T7837] XFS (nbd2): no-recovery mounts must be read-only. [ 84.963499][ T7841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7841 comm=syz.0.552 [ 84.968818][ T7841] netlink: 'syz.0.552': attribute type 2 has an invalid length. [ 84.971388][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 85.004078][ T7847] netlink: 'syz.0.554': attribute type 29 has an invalid length. [ 85.007251][ T7847] netlink: 'syz.0.554': attribute type 3 has an invalid length. [ 85.011115][ T7847] netlink: 76 bytes leftover after parsing attributes in process `syz.0.554'. [ 85.027242][ T7853] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 85.029372][ T7853] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.032851][ T7853] vhci_hcd vhci_hcd.0: Device attached [ 85.193772][ T7865] random: crng reseeded on system resumption [ 85.278731][ T6021] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 85.281183][ T53] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 85.329964][ T7868] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 85.332401][ T7868] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 85.334936][ T7868] vhci_hcd vhci_hcd.0: Device attached [ 85.337512][ T7869] vhci_hcd: connection closed [ 85.337621][ T54] vhci_hcd: stop threads [ 85.341618][ T54] vhci_hcd: release socket [ 85.343167][ T54] vhci_hcd: disconnect device [ 85.440383][ T53] usb 6-1: config 0 has no interfaces? [ 85.442377][ T53] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 85.445110][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.450873][ T53] usb 6-1: config 0 descriptor?? [ 85.653989][ T7854] usbip_core: unknown command [ 85.655548][ T7854] vhci_hcd: unknown pdu 0 [ 85.657040][ T7854] usbip_core: unknown command [ 85.660148][ T88] vhci_hcd: stop threads [ 85.661632][ T88] vhci_hcd: release socket [ 85.663949][ T88] vhci_hcd: disconnect device [ 85.718678][ T6021] vhci_hcd: vhci_device speed not set [ 85.780016][ T1333] usb 6-1: USB disconnect, device number 8 [ 85.900732][ T7879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.564'. [ 85.905275][ T7879] IPVS: Error connecting to the multicast addr [ 85.908000][ T7880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.564'. [ 85.911972][ T7880] IPVS: Error connecting to the multicast addr [ 86.230963][ T7928] PM: Enabling pm_trace changes system date and time during resume. [ 86.230963][ T7928] PM: Correct system time has to be restored manually after resume. [ 86.245072][ T7928] tipc: Started in network mode [ 86.246770][ T7928] tipc: Node identity d24965994859, cluster identity 4711 [ 86.249430][ T7928] tipc: Enabled bearer , priority 0 [ 86.253690][ T7928] syzkaller0: entered promiscuous mode [ 86.255983][ T7928] syzkaller0: entered allmulticast mode [ 86.262842][ T7928] tipc: Resetting bearer [ 86.269238][ T7927] tipc: Resetting bearer [ 86.276196][ T7927] tipc: Disabling bearer [ 86.298756][ T7932] ------------[ cut here ]------------ [ 86.301043][ T7932] WARNING: CPU: 1 PID: 7932 at mm/page_alloc.c:5159 __alloc_frozen_pages_noprof+0x309/0x2470 [ 86.305143][ T7932] Modules linked in: [ 86.307299][ T7932] CPU: 1 UID: 0 PID: 7932 Comm: syz.3.581 Not tainted syzkaller #0 PREEMPT(full) [ 86.317067][ T7932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.318045][ T7934] overlay: filesystem on ./bus is read-only [ 86.321871][ T7932] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2470 [ 86.326526][ T7932] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 11 91 4b 09 83 fe 0a 0f 86 0c fe ff ff 80 3d d8 75 52 0e 00 75 0b c6 05 cf 75 52 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 86.334396][ T7932] RSP: 0018:ffffc90004e9f7b8 EFLAGS: 00010246 [ 86.336880][ T7932] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 86.340210][ T7932] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 86.343442][ T7932] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 86.346734][ T7932] R10: 0000000000000015 R11: 0000000000000001 R12: 0000000000040cc0 [ 86.350347][ T7932] R13: 1ffff920009d3f0d R14: ffffffff9ab2e4a4 R15: 0000000000000015 [ 86.353695][ T7932] FS: 00007ff3b5e1c6c0(0000) GS:ffff8880d6b08000(0000) knlGS:0000000000000000 [ 86.357476][ T7932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.360372][ T7932] CR2: 000000110c39599f CR3: 000000004793b000 CR4: 0000000000352ef0 [ 86.363728][ T7932] DR0: 00000000ffff5668 DR1: 0000000000000000 DR2: 00000000ffff00f8 [ 86.367123][ T7932] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 86.370858][ T7932] Call Trace: [ 86.372322][ T7932] [ 86.373623][ T7932] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 86.376131][ T7932] ? is_bpf_text_address+0x94/0x1a0 [ 86.378291][ T7932] ? kernel_text_address+0x8d/0x100 [ 86.380580][ T7932] ? widen_string+0xdc/0x2d0 [ 86.382738][ T7932] ? __kernel_text_address+0xd/0x40 [ 86.385304][ T7932] ? unwind_get_return_address+0x59/0xa0 [ 86.387654][ T7932] ? arch_stack_walk+0xa6/0x100 [ 86.389899][ T7932] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 86.392943][ T7932] ? stack_depot_save_flags+0x29/0x9c0 [ 86.395326][ T7932] ? __lock_acquire+0xb8a/0x1c90 [ 86.397419][ T7932] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.400080][ T7932] ? policy_nodemask+0xea/0x4e0 [ 86.402592][ T7932] alloc_pages_mpol+0x1fb/0x550 [ 86.404608][ T7932] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 86.406357][ T7932] ___kmalloc_large_node+0xed/0x160 [ 86.408021][ T7932] __kmalloc_large_node_noprof+0x1c/0x70 [ 86.409869][ T7932] ? avc_has_extended_perms+0x47c/0x1090 [ 86.411628][ T7932] __kmalloc_noprof.cold+0xc/0x62 [ 86.413311][ T7932] ? drm_syncobj_array_find+0x35/0x3c0 [ 86.415021][ T7932] ? drm_syncobj_array_find+0x35/0x3c0 [ 86.416725][ T7932] ? kasan_quarantine_put+0x10a/0x240 [ 86.418486][ T7932] drm_syncobj_array_find+0x35/0x3c0 [ 86.420304][ T7932] drm_syncobj_wait_ioctl+0x238/0x390 [ 86.422052][ T7932] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 86.424013][ T7932] ? find_held_lock+0x2b/0x80 [ 86.425513][ T7932] ? drm_dev_exit+0x41/0x60 [ 86.426972][ T7932] drm_ioctl_kernel+0x1f4/0x3e0 [ 86.428651][ T7932] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 86.430521][ T7932] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 86.432223][ T7932] drm_ioctl+0x5c9/0xc30 [ 86.433618][ T7932] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 86.435609][ T7932] ? __pfx_drm_ioctl+0x10/0x10 [ 86.437163][ T7932] ? selinux_file_ioctl+0x180/0x270 [ 86.438874][ T7932] ? selinux_file_ioctl+0xb4/0x270 [ 86.440560][ T7932] ? __pfx_drm_ioctl+0x10/0x10 [ 86.442075][ T7932] __x64_sys_ioctl+0x18e/0x210 [ 86.443635][ T7932] do_syscall_64+0xcd/0xfa0 [ 86.445099][ T7932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.446980][ T7932] RIP: 0033:0x7ff3b4f8f6c9 [ 86.448398][ T7932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.454804][ T7932] RSP: 002b:00007ff3b5e1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.457407][ T7932] RAX: ffffffffffffffda RBX: 00007ff3b51e5fa0 RCX: 00007ff3b4f8f6c9 [ 86.460402][ T7932] RDX: 0000200000000100 RSI: 00000000c02864c3 RDI: 0000000000000004 [ 86.462904][ T7932] RBP: 00007ff3b5011f91 R08: 0000000000000000 R09: 0000000000000000 [ 86.465879][ T7932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.468368][ T7932] R13: 00007ff3b51e6038 R14: 00007ff3b51e5fa0 R15: 00007ffde0b4b258 [ 86.470905][ T7932] [ 86.471949][ T7932] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 86.474318][ T7932] CPU: 1 UID: 0 PID: 7932 Comm: syz.3.581 Not tainted syzkaller #0 PREEMPT(full) [ 86.477173][ T7932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.480544][ T7932] Call Trace: [ 86.481607][ T7932] [ 86.482568][ T7932] dump_stack_lvl+0x3d/0x1f0 [ 86.484046][ T7932] vpanic+0x640/0x6f0 [ 86.485316][ T7932] ? __alloc_frozen_pages_noprof+0x309/0x2470 [ 86.487216][ T7932] panic+0xca/0xd0 [ 86.488504][ T7932] ? __pfx_panic+0x10/0x10 [ 86.489927][ T7932] check_panic_on_warn+0xab/0xb0 [ 86.491897][ T7932] __warn+0xf6/0x3c0 [ 86.493277][ T7932] ? __alloc_frozen_pages_noprof+0x309/0x2470 [ 86.495245][ T7932] report_bug+0x3c3/0x580 [ 86.496630][ T7932] ? __alloc_frozen_pages_noprof+0x309/0x2470 [ 86.498613][ T7932] handle_bug+0x184/0x210 [ 86.500071][ T7932] exc_invalid_op+0x17/0x50 [ 86.501535][ T7932] asm_exc_invalid_op+0x1a/0x20 [ 86.503133][ T7932] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2470 [ 86.505343][ T7932] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 11 91 4b 09 83 fe 0a 0f 86 0c fe ff ff 80 3d d8 75 52 0e 00 75 0b c6 05 cf 75 52 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 86.511633][ T7932] RSP: 0018:ffffc90004e9f7b8 EFLAGS: 00010246 [ 86.513580][ T7932] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 86.516066][ T7932] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 86.518527][ T7932] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 86.520996][ T7932] R10: 0000000000000015 R11: 0000000000000001 R12: 0000000000040cc0 [ 86.523444][ T7932] R13: 1ffff920009d3f0d R14: ffffffff9ab2e4a4 R15: 0000000000000015 [ 86.525920][ T7932] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 86.527857][ T7932] ? is_bpf_text_address+0x94/0x1a0 [ 86.529487][ T7932] ? kernel_text_address+0x8d/0x100 [ 86.531120][ T7932] ? widen_string+0xdc/0x2d0 [ 86.532587][ T7932] ? __kernel_text_address+0xd/0x40 [ 86.534219][ T7932] ? unwind_get_return_address+0x59/0xa0 [ 86.535989][ T7932] ? arch_stack_walk+0xa6/0x100 [ 86.537561][ T7932] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 86.539551][ T7932] ? stack_depot_save_flags+0x29/0x9c0 [ 86.541276][ T7932] ? __lock_acquire+0xb8a/0x1c90 [ 86.542846][ T7932] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.544690][ T7932] ? policy_nodemask+0xea/0x4e0 [ 86.546143][ T7932] alloc_pages_mpol+0x1fb/0x550 [ 86.547733][ T7932] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 86.549437][ T7932] ___kmalloc_large_node+0xed/0x160 [ 86.551107][ T7932] __kmalloc_large_node_noprof+0x1c/0x70 [ 86.552890][ T7932] ? avc_has_extended_perms+0x47c/0x1090 [ 86.554657][ T7932] __kmalloc_noprof.cold+0xc/0x62 [ 86.556260][ T7932] ? drm_syncobj_array_find+0x35/0x3c0 [ 86.558036][ T7932] ? drm_syncobj_array_find+0x35/0x3c0 [ 86.559749][ T7932] ? kasan_quarantine_put+0x10a/0x240 [ 86.561449][ T7932] drm_syncobj_array_find+0x35/0x3c0 [ 86.563121][ T7932] drm_syncobj_wait_ioctl+0x238/0x390 [ 86.564813][ T7932] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 86.566663][ T7932] ? find_held_lock+0x2b/0x80 [ 86.568200][ T7932] ? drm_dev_exit+0x41/0x60 [ 86.569636][ T7932] drm_ioctl_kernel+0x1f4/0x3e0 [ 86.571168][ T7932] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 86.573026][ T7932] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 86.574683][ T7932] drm_ioctl+0x5c9/0xc30 [ 86.576014][ T7932] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 86.577868][ T7932] ? __pfx_drm_ioctl+0x10/0x10 [ 86.579382][ T7932] ? selinux_file_ioctl+0x180/0x270 [ 86.581039][ T7932] ? selinux_file_ioctl+0xb4/0x270 [ 86.582650][ T7932] ? __pfx_drm_ioctl+0x10/0x10 [ 86.584181][ T7932] __x64_sys_ioctl+0x18e/0x210 [ 86.585701][ T7932] do_syscall_64+0xcd/0xfa0 [ 86.587141][ T7932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.589002][ T7932] RIP: 0033:0x7ff3b4f8f6c9 [ 86.590413][ T7932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.596363][ T7932] RSP: 002b:00007ff3b5e1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.598991][ T7932] RAX: ffffffffffffffda RBX: 00007ff3b51e5fa0 RCX: 00007ff3b4f8f6c9 [ 86.601478][ T7932] RDX: 0000200000000100 RSI: 00000000c02864c3 RDI: 0000000000000004 [ 86.603954][ T7932] RBP: 00007ff3b5011f91 R08: 0000000000000000 R09: 0000000000000000 [ 86.606418][ T7932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.608913][ T7932] R13: 00007ff3b51e6038 R14: 00007ff3b51e5fa0 R15: 00007ffde0b4b258 [ 86.611388][ T7932] [ 86.613026][ T7932] Kernel Offset: disabled [ 86.614397][ T7932] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:49:53 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff888029aa1992 RCX=0000000000000000 RDX=0000000000000000 RSI=1ffff11005354401 RDI=ffff888029aa2330 RBP=ffffc900038ffda0 RSP=ffffc900038ffc20 R8 =0000000000000004 R9 =0000000000004002 R10=0000000000004002 R11=0000000000000001 R12=0000000000000004 R13=00000000516f887e R14=ffff888029aa1980 R15=ffff88803a9819f0 RIP=ffffffff89cb7f96 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f622e946300 ffffffff 00c00000 GS =0000 ffff8880d6a08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f11cc9156c0 CR3=000000003362a000 CR4=00352ef0 DR0=000000002cc5a689 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555616a16a0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555616af038 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb623b7d20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555616a44cc 00005555616a4210 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555616aa018 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01c71000080049f4 006d766b2f766564 2f01ffffffffffff ffffed080680032a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010000c0e72d600 0400000800018004 001000080c49f400 6d766b2f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff040fffff ffffffff040fffff ffffffff04001000 0fffffffffffff04 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b010000000000e08 060c100008015180 0000000e08062010 0004014fda0fffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 013e800010000008 0004100006013e8a 00080007b8820800 040169ea0310000d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100005b88208 000100000c080606 011e9a07b8820800 06100004013e8000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000000800041000 06013e8a00080007 b8820800040169ea 0310000db0100000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000e08060c1000 080151800000000e 080620100004014f da0fffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040fffffffffffff 040fffffffffffff 040010000fffffff ffffff040010000c ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85297f35 RDI=ffffffff9add8780 RBP=ffffffff9add8740 RSP=ffffc90004e9f120 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9add8740 R15=ffffffff85297ed0 RIP=ffffffff85297f5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff3b5e1c6c0 ffffffff 00c00000 GS =0000 ffff8880d6b08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c39599f CR3=000000004793b000 CR4=00352ef0 DR0=00000000ffff5668 DR1=0000000000000000 DR2=00000000ffff00f8 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3b5013050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3b501305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3b5013057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3b501306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3b50130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff3b50131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000032647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000011475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a5426c0 RCX=ffffffff81b100e1 RDX=ffff888028d80000 RSI=ffffffff81b100bb RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90006057878 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=ffffed100d4a84d9 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff81b100bd RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9a2cd0df98 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555616a16a0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555616af038 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb623b7d20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555616b0c25 00005555616afee0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555616aa018 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 100008004bb60033 537974742f766564 2f01ffffffffffff ffffe90804800334 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800010000000806 060127f406080002 800300040001b0c8 80080004800401c7 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8004038004028004 08015796005e5d7d 28262501ffffffff 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03fc020010030a04 8800080302b8c404 8400040314040000 0300000012080604 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001ffff ffffffffffffe508 1403028002001203 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0138100000040100 0000080606010492 12ee0800300302f6 02002e0300000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001ffffffffffff ffffe50814030280 0200120303fc0200 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10030a0488000803 02b8c40484000403 1404000003000000 1208060480040380 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0402800408015796 005e5d7d28262501 ffffffffffffffff f108048003000200 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffffffff81ff618e RCX=ffffc900063f63cc RDX=1ffff92000c7ec98 RSI=ffffffff8da05d92 RDI=ffffffff81ff618e RBP=ffffc900063f64c0 RSP=ffffc900063f6450 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=000000000000f501 R12=ffffffff81a80530 R13=ffffc900063f6538 R14=0000000000000000 R15=ffff888053f9a480 RIP=ffffffff81858dcd RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9a2cced6c0 ffffffff 00c00000 GS =0000 ffff8880d6d08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f11cbdb2d58 CR3=000000002e610000 CR4=00352ef0 DR0=00000000ffff5668 DR1=0000000000000000 DR2=00000000ffff00f8 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffff7fff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 0000560f1c4b0760 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faca1bf1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1b1e591c1f1f1f4d 155b5a5f4146155c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c52e292074138977 2f2f2f2a4fdeea25 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 637461775f646461 5f796669746f6e69 00000002ffffffff 00007ffca8000031 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000211 000000007766736c 6d2c312c3061722c 4134316b2c332c31 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73616c632f737b62 2f002f7302045c1f 145f1e2c1f0c1758 324d420959400342 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff6f7f7f7f7fff7f effe6fff7ff7fd7f 7f7f7f7f7f7f7f7f 7f7f7f6f7f6f7ff3 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c01060f43363530 000000053070380a 0000000000000051 0030322f6e653a00 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a 0000000000000001 0000310f1c262c00 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000