last executing test programs: 59.935984661s ago: executing program 1 (id=2): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) r7 = io_uring_setup(0x12a5, &(0x7f0000000300)={0x0, 0xbf9b, 0x0, 0x1, 0x32f}) io_uring_register$IORING_UNREGISTER_RING_FDS(r7, 0x15, &(0x7f0000004880)=[{0x8, 0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000005c0)=""/103, 0x67}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f0000000740)=""/186, 0xba}, {&(0x7f0000000800)=""/122, 0x7a}, {&(0x7f0000000880)=""/187, 0xbb}, {&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000940)=""/231, 0xe7}], &(0x7f0000000180)=[0x3, 0x6, 0xa, 0x8, 0x1, 0x7, 0x41a]}, {0x2, 0x1, 0x0, &(0x7f0000000380)=[{&(0x7f0000000ac0)=""/189, 0xbd}, {&(0x7f0000000b80)=""/215, 0xd7}], &(0x7f0000000540)=[0x4, 0x2, 0x89, 0x3, 0x4, 0xf87]}, {0x1, 0x1, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001300)=""/4096, 0x1000}], &(0x7f0000000cc0)=[0xfffffffffffffffc, 0x5]}, {0x6, 0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000d00)=""/254, 0xfe}, {&(0x7f0000000e00)=""/255, 0xff}, {&(0x7f0000000f00)=""/63, 0x3f}, {&(0x7f0000000f40)=""/182, 0xb6}, {&(0x7f0000001000)=""/152, 0x98}, {&(0x7f0000002300)=""/4096, 0x1000}], &(0x7f0000001140)=[0x4, 0x7, 0x10001, 0x9, 0x6]}, {0x3, 0x1, 0x0, &(0x7f0000001280)=[{&(0x7f0000001180)=""/96, 0x60}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000001200)=""/80, 0x50}], &(0x7f0000004300)=[0x800, 0x100, 0xa6]}, {0x7, 0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f0000004340)=""/188, 0xbc}, {&(0x7f0000004400)=""/108, 0x6c}, {&(0x7f0000004480)=""/27, 0x1b}, {&(0x7f00000044c0)=""/225, 0xe1}, {&(0x7f00000045c0)=""/43, 0x2b}, {&(0x7f0000004600)=""/193, 0xc1}, {&(0x7f0000004700)=""/171, 0xab}], &(0x7f0000004840)=[0x800, 0x800]}], 0x6) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) syz_emit_ethernet(0x15e, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) 59.775220666s ago: executing program 1 (id=11): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000006a0083130000000000000000040000000000000008000e"], 0x20}}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 64) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x200000000, {0x0, 0x0, 0x3}, 0xfe}, 0x18) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) (async) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x13}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = syz_open_dev$evdev(&(0x7f00000012c0), 0x1, 0x0) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000001300)=""/30) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r6, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x0, 0x0}, 0x8) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150039502630e614f27a"], 0x15) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x40004) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r7, 0x3) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r9, 0x4) (async) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) 44.608932571s ago: executing program 32 (id=11): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000006a0083130000000000000000040000000000000008000e"], 0x20}}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 64) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x200000000, {0x0, 0x0, 0x3}, 0xfe}, 0x18) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) (async) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x13}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = syz_open_dev$evdev(&(0x7f00000012c0), 0x1, 0x0) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000001300)=""/30) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r6, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x0, 0x0}, 0x8) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150039502630e614f27a"], 0x15) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x40004) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r7, 0x3) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r9, 0x4) (async) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) 3.143155872s ago: executing program 2 (id=988): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x12002, 0x22008}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x6}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0107000000000000000052"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800103afffe8000000000000000000000000000bbff02000000309ee2752fbd53000000000000000000000000000186039078000000000000000000000000f6a0a8b8b0eb7d1b48283ae419000e4abb0b4d8b5660f63ff59f38d53763495f713dc60c9b3929df80edf0cf2dffa2dedd7c5dc8a4ff0d8c2b9c7d9251"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x40002) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) io_setup(0x3675a9a8, 0x0) 2.466305724s ago: executing program 2 (id=1002): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='module_request\x00', r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r2, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendfile(r0, r2, &(0x7f0000000300)=0x1ff, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) open_tree(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000140)=@ethtool_stats}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r3, 0x0, 0x5) socketpair(0x0, 0x4, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000c8c8a5a242a0972794f6b707401d9af3d70bd4a76bee0013000100feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0620000000030000140003006261746164763000000000000000000024001a8020000a8014000700ff0200000000000000000000000000010500080000000000"], 0x58}}, 0x0) dup3(r6, r7, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r10, 0xc0a85322, &(0x7f0000000100)={{0x0, 0xfa}}) tkill(0x0, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r8}, 0x10) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.39595608s ago: executing program 2 (id=1003): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x49, 0x0, &(0x7f0000000680)="755bb05395201ad875a81f08fbf73c46403cbcf9922ed5e124d4576314b9d703e2270ea77e8be9b7d6a78d90f5cd95c2293b2397fd6fbb743e63ffe5e2e2d924e7f40180f4b1704f0f", 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0xfffffc6f) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000000)={0x3, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "acd0c4c8999fd7e5"}, 0x6}}]}, 0x2c}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x404c816}, 0x0) 2.286184647s ago: executing program 2 (id=1004): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x302, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r2, 0x200, 0x70bd2b, 0x1, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x9}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r2, 0x200, 0x70bd2b, 0x1, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x9}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1040}], 0x50, 0x0, &(0x7f0000001040)="da87028ce8f3ca1a8ed796a4b7d8d2c9fae24f6ab26d2c7da6311953231b65d528b0fc7e9f4ccf006f1688a6e162debba0871a17caf95c893d445be103f7b12b45d45a445b052cf5bc51dfa16d4f7a7d"}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x203, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x9, 0x10000000, 0x0, 0x20}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 2.226364673s ago: executing program 2 (id=1005): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ftruncate(r1, 0x9) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "64f9ff", 0x20, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1={0xff, 0x3}}, @jumbo]}]}}}}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r3, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40d0}, 0x880) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x7) r4 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_ep_read(r4, 0x3, 0x1000, &(0x7f0000001080)=""/4096) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xe9) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5"], 0x6c}}, 0x0) 1.206832098s ago: executing program 3 (id=1025): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x49a9b079eaa85132, 0x1, 0x6, 0x7, {{0x7, 0x4, 0x0, 0x4, 0x1c, 0x68, 0x0, 0x8, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x28}, {[@rr={0x7, 0x7, 0x50, [@local]}]}}}}}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1d, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf5f0, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0xd6, &(0x7f0000000380)=""/214, 0x40f00, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x0, 0x2, 0x1, 0x800}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000500)=[{0x2, 0x4, 0x10, 0x6}, {0x5, 0x1, 0x2, 0xa}, {0x0, 0x1, 0xe, 0x7}], 0x10, 0x1}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x5, 0x0, 0x1039, 0x2, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000840), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000880)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x19, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x101}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @exit, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xb4, &(0x7f0000000080)=""/180, 0x41000, 0x20, '\x00', r0, @fallback=0x1c, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r3, 0x0, &(0x7f00000008c0)=[0x1, r4, r5, r6, r7, r8, r9], 0x0, 0x10, 0x2e0c}, 0x94) preadv(r5, &(0x7f0000000a40)=[{&(0x7f00000009c0)=""/25, 0x19}, {&(0x7f0000000a00)=""/11, 0xb}], 0x2, 0x2, 0x6) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004) syz_io_uring_setup(0x763c, &(0x7f0000000a80)={0x0, 0x3120, 0x10000, 0x2, 0x363}, &(0x7f0000000b00), &(0x7f0000000b40)) r10 = syz_open_dev$audion(&(0x7f0000000b80), 0x7, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'ip6tnl0\x00', r0, 0x4, 0x4, 0x80, 0x9, 0x13, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x700, 0x1, 0x2, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000dc0)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', r0, 0x20, 0x7, 0x400, 0x0, {{0x1e, 0x4, 0x1, 0x9, 0x78, 0x66, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@ra={0x94, 0x4, 0x1}, @noop, @ssrr={0x89, 0x7, 0x75, [@multicast1]}, @end, @lsrr={0x83, 0xb, 0x51, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp_prespec={0x44, 0x4c, 0x89, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0xb}, 0x401}, {@rand_addr=0x64010101, 0xa}, {@multicast2, 0x1000}, {@remote, 0x2}, {@multicast2, 0xfffffff7}, {@private=0xa010101, 0x23ad}, {@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0xb}, 0xcca}]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r10, &(0x7f0000000f40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xfc, r11, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004000) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f0000000f80)={0x6, 0x3d3, 0x6, 0x2}, 0x10) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000fc0)={r9, 0x2, 0x400, "d71bda"}) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000001000)='/proc/asound/card2/oss_mixer\x00', 0x801, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r9, 0xc0189377, &(0x7f0000001040)={{0x1, 0x1, 0x18, r8, {0x0, 0x7ff}}, './file0\x00'}) ioctl$BLKGETSIZE64(r14, 0x80081272, &(0x7f0000001080)) accept$alg(r10, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000001100)={{0x1, 0x1, 0x18, r4, {0x1}}, './file1\x00'}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001140)=@o_path={&(0x7f00000010c0)='./file0\x00', r8, 0x4000, r15}, 0x18) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f00000011c0), r15) sendmsg$TIPC_NL_MON_GET(r14, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xbc, r16, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x41) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000001340)={0x81, 0x0, 0x1}) 1.155563495s ago: executing program 3 (id=1027): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002740)={'vlan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000280)="f4416eb4e8d263afa99fefa788a8684c88a8", 0x12, 0x0, &(0x7f0000002780)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @broadcast}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r5, 0x1, 0x3ffc, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x4}]}, 0x34}}, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB=','], 0x8) write(r1, &(0x7f0000000040)="090000000100df", 0x7) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60, 0x4000}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20010, 0x284a0}}}}}}]}, 0x50}, 0x1, 0xd, 0x0, 0xfc81b6e8fc9641e8}, 0x0) 1.065983694s ago: executing program 0 (id=1029): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r1 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)='X\x00', 0x2}], 0x1) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) open_by_handle_at(r3, &(0x7f0000001bc0)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYRES16=r0, @ANYRES16=r2, @ANYRES16=r3], 0xc0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x1, 0x0) fchdir(r4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x48, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8141, 0x0) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r12 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r9, 0x541c, &(0x7f00000000c0)) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r13, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x2000007, 0x1}) sendmsg$kcm(r13, &(0x7f0000000380)={&(0x7f00000004c0)=@sco, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)="7ef39e4080709667184060f788502e3bd50ac54bd7a7065ec8a37bc435dd1b5973027a186d6dc07d17626c8e4b348e1b556c1c3010c03da283569cd33283108dca7bf07e46a412c06c647fb509054baa5d2854f14547b420181f28c5df48d6a4ea5a83657c89cedff4fdf5551ddd1e9e10b708a7bedae1f24aa23d4a5b6a5a1b9102ee687d3492c9b0c7752a45123b444ef527a4f75d6b229737315cbefe876cbe47f04cc143490cc0540d2b4a98ce60e1a9520a8cc58f", 0xb7}, {&(0x7f0000000600)="9dca40c2f26fdc3eb990a6dbc6734f9bb353c352687b088e4f4a7882990ca5416de805c13b4a9f69c5765b634cd72bd59ee14522e280cfa842fe906d8992d586d8fc4b33bb9f9c817a09aef54eee2bb41ad499ebed17aeeb211d2ea329f3a63d89e88cfe11b4eced9d9e6e5537b648ebcd5af9fc63beccaf026abf1305617ea8a01390", 0x83}, {&(0x7f00000006c0)="11e777af1f1d48515246343062105567427ad4d88d7a4ddc2d9905c635dff332c7d5a964aa03096c86668c9e321fc3965e8f609a62eaeb1317258e8af364cf58aa0e9303a91616dc125b372f85142ec6fc03ffabcd2201d1c5b090208fa8bb26fd9106eb230d856000ef20335f5dfe30bf58128d7e07fc7caeeb7b9367c7c31b679aae4b04f82d904d53d63e30d9a4bba613f79260aedd1816184ad898df9328b3d61bd3aae38ce14721f1c647a4c64073395cfa92c72ecac06dd926e26a4a7058281b3d31e270e6c74adcd40bcb0a419e098010da16de7619007fb11edcd4f5", 0xe0}, {&(0x7f0000000180)="d0e4f7244312baf452cdb6f9b2d3e9eb776c8430396f745b6a7d", 0x1a}], 0x4, &(0x7f00000007c0)=[{0xc8, 0x88, 0xfffffeff, "92c50613ecda288c9fdf9348f2c7d0903cc7d35be0bb554823e2661d8e908e17641ac83c8d21810cb061d210012ac17b4d793698d8a8cd072367027684b3d9be817f25c5c73ea4c3e7b99932ae2e6ab396a2f941ed814650dfe26e3644659a25db53184e52824b32d72e9e7f28b4007c3602e88b42be8e164ce6f179a34098708565d4d270416c25e6eb78338b9d32a98af435bd947b75c6f2788edf8b4290ebd424e11edb7a123115062418797dafc4cf11858864861e"}, {0xb8, 0x10d, 0x3bc4800, "02c01cf06a65141c97fe3ae77f589927eca08a2d11cd5443038657dc840eac93537e04c98580a3fa140900981b985f47dbb95c5c0e0e56a18d600b6725bd7096452ad5eeb87a019fa1723262878df5881eda8d0b4762c660bc7e5376be7cfde9f9711689a4a6761c8d281806b6da2c8fd64467aabede5c23bedf0b45e59a4267e00c84e5ab169744af3762910c3d775dc20c380bdf67df917b08fde47316c50ec19ebb10073c0b9b"}, {0x50, 0x118, 0x6, "44b4040cc6e71f3fcc6078ebdd21780260fe16082d34fd40de10e26673ea823cc2fdd36aba2346d850f138bd404897c8c43d3e70abd138a6fb217324"}, {0x10, 0x1, 0x610}, {0xf0, 0x104, 0x8, "9a6100eb82cc32c6c8f738a130506a4440a444f53bb9e1fa77eaf9d6c9b8a0455ca5ec2296ae0bb29fe25677df5f4bea7746eb9edb4974d17793f20f0a841ccae735380cd7d0648f40faa179b6109d38954f0c6aacb3d16b089ecf9ffc51a60bc714e53d907313d8d94ce2e11db5294398f844d286dbecf0a1519914077dd61e1a48daaf555c86b7eb73e2aaf83e27eaff854ed7753d757de76504fca29f81fda73870cd42db58c42e6c0e31a304d99e97ca22ff93e14aa80f79c3ddb00f54b52fcd42359875653920b8e444df05d682cae2ecb67d65a3d8210a"}, {0x1010, 0x112, 0x0, "e9d192deb90490287a36fa82a30ad1ad8cbf4a74f66ff9754e54f52fc83829130fab8b129c2908500b2cd2261b33d18550569ea208341d1e8ca883f5e2724dceea70777575ecb1ec4e58982b87ec90c14678cce62db2136c7d0377c567270abaaf60d1d85896d1cee3f9a4ea630bf3e9d704eb0fc3e9fd6296a77a024cb2e60ba5933329052f8b70292963745f0a186b946cf722856c9f60e5e73ba9e7920d4dd31ef78550e92d5271638be575bbd53abbbc81442882b80c7fe6f7a2ec9e27c10ad7c503737083de8aade7e4c408f4ee21b999d5c218657f472ca87f15b3574b189a9725d59f4f07445acd3312538b2241de5bff7c8798f1c9c5b0ed190f9123180f72e0507fcd430a46b55d8c945076b7cd44a9a4c7c52ee48a3e368d3f83eabaa7ad422a23be36ba035901f5af5868e0702377efbda10ab10a43db535030126461390516f2b759e1897ceeb005b9251fdca935b6be8479b18b9609d7592537bc68ebf1accbd2c9e28417b0714534cdbb803e6cca5dbb0c2765d43e4b63f676b50acab307fb8a2eb200ebbba690a721c5868dab14fe055529c96fbf194c2daf1aa01e9704dce47fc031d1b2efd231e89747f06e1842f837d68d2e731aadc8ad0b1f4cc23fc9fb6f1d1c1e8df1f909d375db43cda2430f7f2f31b8aef8a945846235927222a5f98335707041785986de26048a39776eb457841b79e77bec02e17ec79646735e329130f0b0af7268e706608d8d5946547c6fe38b435d95fc61925210927215b2f96933bd29d501af3f17cc0450bdbbee006e450eb988cf38e4f1de45a9432fd401810f878c0dbd3f06ae78083a5a104dc4f22fd7357ec31ebfa2f6b2ba633946e7ffb0ab0e3a13a806b2f606dce260a640211ed8b3e0e99a5844784793db95d2aec739f98cf0721de947cd54add2e8241a16d636f5cd2ef35f92923cfc0397c5eb53adc2f5f6acaa0d7427e7864c491748618337f639d9fa8de149681f4805e911db317a78917e0e97a0b1f62f0fac3c2b9116981f6b3fd704af67a80448fc2db439a992a518b91115d9f15a5717dfc105de6b701a58d385a659fc1d8adb22a4c025bb1001eea35127bd9e000cbec92c6bb17828929c4e9929f1de269100c9c933061ccb6f086589eb834cebe5558a7b324195db3c3e8959fa57b16329255c0bf545c91242cbdb5b5a25cf394525cbc8c6ca46c074a61d4f631fbdeae88adadd91cf39e534c112139576703a5b5e2bff75cc89eee29b7a9793c15aa34807051fdcfa2477daa98f410339b59bbe839836dd5fd17cd4df41a3304da80659c4c59f7dfba05324a5d2e8187e6e3c72b3c21c3f9cdf44cbcc50d2e1cadd13d833171be12be69be8687e0ec8486188d4e9a6c0f6384106b9c3f474854cab7caa360b376ade920153c5fbe7f9c935f45319470282dd031852bf64e7c02f7910f15cf4c341c50f3c23092a046e3da0ed8ca21d1bdb97b3e9831b9b6bfe32ddeac34b87c49b89ce97b58395576d9ecc21f33344d8496337d57a68b1aa0e4eb9de5e08fa84ff67b1061cb5970f37215c3b9da09410627a6142f9bdb8dd3dd9ed6680b884fd5af6bbf76fe60f0456c3ac4b442fde564c745b7d42c9be74a6e78702ad70112468a889b3c3e34ab9ae5fc5aa6103f5068e2109dd00a9e17432e17e5fdfed579ab8ede65e89921f4851a855e36169118a92acd2d5d1e8c4928a0f31299fabf9aa1bef48ed7fde755784d8d0b9f539d9573d0003997bd103d753408ff4646abc54882f32cdf62ce1ddbb52a1584e925b254d411487ce82b95b7a8b0632f8ebde33562fa0f80fff69725be716005c3a733d25c5fd0676fc04b8e5b8a6c036918c2ff60c122b7a022a330cb0290df96f87b356b121ed02f55b9906d447d16af060f812f2f6ddee3379c68400a911f63ec9ff626ad8cc5ef03a3e68343ee617c04455351e8a62309c0fdf9bdbdafa2449e4f0aed31f4d93be8038f634ea3e4c0df8115d693fcb85a753aaf8f2d26d5738ec4365fe83c6f14d3c45115fc3efd0bd0fea4c57344ba9db053c9a021bc384aab61e65ffad5b05a6e182670f933e6d3b46a259cc920797e4fb5909fb4a8c88caab6e76a5dd2a89f9760818de7b19c1fb58b6526178dd420b12061008dc4d77fca19ab35aab06ad38cf112a6458fa1c1432d821ee94392da16ad2dae9c778e5bb081dcf36746bc560d14b3c38fbef33735655680b60e66ef50bcc0047407baadc5282673812ccef6e77af80b72cd34304a6f292e8b275b3fedc54633cc99beab1f3e2d6150b489c531a3af6fe109a6dea020bc572a7fbd589f4a97b0921cb8935db20ece9070e7ecc080e1278c59d45ac0e7f7a7d6ad4d12815eed7c255de7190e64175943fb933375262f8b1d1317552bcebaa1704a07b885c74666e9b609065ce7265ad9a2d0961b9431688689c7c09a7101420f61d4114ab3746145ad76d4c919317b449d4d05558a14090fef8fd99ee1316ff58a10ed4b22467de89dc1db601e6d85c3f7887248045e88f67bc3bcf9759879ab93599cd8021b98047b9642e9ec485f4c36521f133f5e10b126624df65240c1724f34a3ab755230df2f1280dcb94566ca5dbb771cd5e0c903ba4e56630dbb2990509f8d04c320221107a659e2af433a77081f76c5957df696fc287c9e44912760d1b4706c576210cfe6dd5e12727d0c3781df8d941da6122c9575d1564d22cff148211a90015be3b85bf0dcc6065319c6a6dca2cc21cc31f94c0ced188f8346b722dedadfed662a2c2c76f3f511f5583e36391b6c6c5a8a555b221d5ba0490ef0fcaca1941541ef1828de661fa56e3336e89dcc24da16c3152a6e5665eeefd577fcf7c23ff519413fe5630e9dc54119ac64aee4b19c4832acd5a9a2ca14d3e0ca8e8548d611a480452ec66f2edfc5935f5bedc7a50e7314dbeb5f4abd1f79117fb5a4a1d4a3cf02c979b31cf4edbc9ea42adedc042cf339f26b3ec80c31ef6ce49e8e6ca78dd66e9deb3a18600e3355da0b341c8e176975b1c2d8e98774be2c7e09e22623e3340a7e1557d8fe6b48087e1d27b185102af1dfc32e02c36903330a9e71303a54221a29d7333b098cb0a3ecb03f1885980ccea0fc9c4b3bef24ee3121d6ba78125598cbb7e71c2b45e0d3fb30e8008e7f4d4733d2fb2714a1791fc7eb9ec866042cec971dee7fdf5a6ed98fe8e97d32753cde48ec839f5e075d34e083fb2f1b02564c20fc337cba7d3833c11b306ce86f802654473a8edd5876c163b42d24bbf80321f8b5ebf689e06fbd83ab14a0dd077a3b1a1cff60e03021d4f5337d387b296fb8c252c01863ee9acdbeccbb0a2be8bcdef24943520e264db228b50819fe4aaadbd7c446aee679b7a3547d10c660f616dcea6198339e0887dee923980c2ea9bf7de15805b2d5dfd3fa62d028f5657203f530e0534e3b3f3cca47a2c0d326e750fa10e243facc08cfcd90c6158e061b2d25d4783da638b4a641048c4d43dba5ba1dd657568eea8f299bf650a8ac5fe618ec84f4247560cc7d41b5bfb15467e0901d3e01211da991bdb0a1a76932e60c1659820cef34bcf22a5011a0f3797e8e58f53a39b94995a12113ebbd26c740e7344f882de95bfc4dc3ef56aff6105a4e99ac52db4b3fa0c2b0b4f7accf99911672687d1ad33796c2ef60aa204cb8b62ee69263e8730f165e7368bd92ff920291ec84e330a9260753b402caa68efb0f4539ecb45547e1174f4ffa26c7a9b9b6468d57b1717700b3ca5a8221e9b5e6d815765c0ba0c0c703639be73ad6eb4d1a91be8b594092b2d25ee143b01771fda93484cd6ee3fd482be7dde0e5167ec4f02a2143655fba403cbb65b45c1f32bd1bec89cb010e90ada47c0a705c48a8db5b352b6be0af40de03a8aba7a5d886cc8f93e08701ecdd12e0a8c4eb6edd61467482d27fd05c13f476acd4b85f12d7939708264030b547e8b17da6071050b979017b5cf9e1d684f538ba9f5235b277aed996700ff76f3a0491ed11cf204ea0748f9795cd7f5df26fe129e278909665359dce0319766b9aa291f5ac7f5983ad8f2df30d2f7ee787c116639353fcb8b21aa468de0d7116ad63a33f87852e0b13676a9f6b8e23fee425499e00b3be43fc65b1b968760dad67f0f12377de2d469a92fe52509068fb11b0f73538811aa80f66767a5a70de196906a16d1c90107b21ade656137716b235fb7e79a9f695fd307d1fab05f917abfea0c9f45eca217ce593b322b9642ca9322ea63c5af3a3f454c7750aa30cb3f66216add7a31e77cecdfc4e93991167552b08522d630c8e2fa0982dc58cf3621456e00d466a658e64a0ddbec42dfab86e5b809d67ceba935d94852ebb99235148656f74625685b2de5ed784e28305042be49ac10f3ed77ed19318652fa4c3dea06b9bf19eda942009c94b31b417852665a057a4bc55ce104cfd1c0d86f8476938312d7237777f11238ff301e8a8662b5a6299a1672eee25141b6db5f43bce596f2e84e7fa4308507ded9d7c2411e590e0e4fec3e094220e7a0f50b1e4f4b478ebfa281f6aade6241a3a11f8530f3db1774f605a657fd7469f6620e31032d7dc6ea35d4ace73c0ce4fb6e6b3acf2c76a8ebcb26b147680b3d763cdb9398eb504fd604582422385ca9f316f5923860c5d56a934659f2b5325f9cc7720c360f80564ad56f0200e58230cf4a0b24f18e2431c64839b730ac684b121ccca388f3f09491c000ca7d81af33c28ffca4a2789d2921669182009fc5e399aee7b657984e1d14ed54385ea9da4d028079b379f751fe2a4e248d65739b6f79d605367f4583a6e5e61c54ac3761ed9c5fe975a80ea1dee3d69e80199bd3198c2599981f8afd5656ef486c3264f2cd588aaf54bb1bb2c5bcf0faeda72e3aec5a37b5b8f3d98513b8376f4605feda5abf92d53cf14639c00ad008ba2ceaaaed634ee7ad66070545edae2afd1ea9de26a06c0b05eae66c6b083ecfb5b822214baa568902c230064d28fbde5d2e2a3d74e6a521009c9f7a016be678acad34e2dc9f5a7e9b3a46425b65d5aa1723f3bce47a7b2cd444a87ba3b502bd09a26a445538a044bc848209e41bd2e77fa4d2c336a54d4ff739cbbd84b77b23c579b7c0f47f3adfa7d56eb7034a8c440bb3e71cb2c25e9820486d0ea1cd990f2a69278cd557845cd183af19966c2b238a33bd59e67d55c247162acb695fefbc983f556c3b35ef4ba308dd222835da1cc3e974c8b9070574c1c86fcdbba003003b59aa520bfededcaaa0f806b87f7c09e796e92ed6810e53f730453fdf18338335a2e602aa2c806a44c067dabcd2e2f37f321efce2ed936d7233c8bdab6f88c59cec00fb1fdc7bcc4fc2d07d5e5357be74e53d2a00258218cb211b3e159c1539e79f4f12dd6af2c4704be42d3aa3ecdd228a0f75867dbfe0ae8e155eb7526b7b0115975db34789ad3001c16e65d989afa446af4e3fc3a3da14e8fa2bf5af42832fe7af103a7280e1e7e38a1b948810a046fed661b40a75cd18089a43229790e536c1e647b87a356acf30c9c358773c9c0f0feb585b2062a94e60a8e1dfdfa6e253379b086c024af84a3a06bf5c295fb9391aee882fca3294ee1ba506438ec65c1d62ae576268eebccc59178ce1a8f43b5fe434f8548c779255a2f2f73007a3096f5a3259a8ac8645d23db4ec24c534872f6c04d49f0a16f613536246bd9370620d1a06378908862b8cfd301f139bb7f5f701decd53a98ccf876a7495394f4e4465a21f2a8537da3a0ca5a62ef74d0c5b3ee57aaad2703f2eb5b785a4"}, {0xe8, 0x10d, 0x2, "656d46b5945b4b657c6999abf4bdfd20538f97166d2d76a4a83f67c667faf9964da69c44ef4753f08ea0b2592524f6e094817d865d8c867a00bc4d7ae1b3000e8810075e4bf6a9f742a8082a7dcbc133a609af77ab6c795b34453f7a544190fc651e2dd16a8cfcb2c6258726fbd1adba51413116f88a77d84d2533f1dae30869aad9695cd2a951d0d2d210047e6119c0010f043a68b9597ab81fa587700a4fd9e9491605bb89635b2b2e3d2cb418d7fd6fce5bfd081d4b1481cdc785d940098e56b9fef0758a7b98b0334b81e3bf3e8e7c47f4fbca"}], 0x13c8}, 0x4040000) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000040)=0xf) writev(r12, &(0x7f0000000140)=[{&(0x7f0000000300)="0045b8ee308c1522f0606c482852d110bd71743454ece7a8e3e9973a08e40c8280ba9c808bda388d7dbec366ca5916c3f5871cc4c48ca8844e42b68197a397332a3233", 0x43}], 0x1) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x2, 0x1000, @empty}, 0x1c) socket$inet6_icmp(0xa, 0x2, 0x3a) 976.247777ms ago: executing program 2 (id=1031): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={r3, @in={{0x2, 0x4e20, @multicast2}}, [0x9, 0xd283, 0x7, 0x1, 0x4, 0xdc, 0x3, 0x4, 0x1, 0x9a, 0x5, 0x99b, 0x10, 0x81, 0x830e]}, &(0x7f0000000300)=0x100) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={r3, 0x1ff}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={r3, 0x5, 0x7, 0x73}, &(0x7f0000000080)=0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r5, @ANYRES32=r5, @ANYBLOB, @ANYRESDEC=r2], 0x2c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000640), 0x4) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000b88ae4ef00000001000000080005"], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000100)=[0xfffffffe]) connect$inet6(r0, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x902, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='powernv_throttle\x00', r11, 0x0, 0x9}, 0x18) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) write$RDMA_USER_CM_CMD_MIGRATE_ID(r10, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) r13 = dup2(r0, r12) sendmmsg$unix(r13, &(0x7f0000008380), 0x400000000000174, 0x4008890) 904.467935ms ago: executing program 3 (id=1034): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x101440) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:hald_sonypic_exec_t:s0\x00', 0x29, 0x3) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f00000000c0)={0x8, 0x1, 0x2}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x7fffffffffffffff, 0x210601) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000180)={r2, 0x9, {0x0, 0x0, 0x0, 0x1, 0x81, 0x0, 0x0, 0x13, 0x8, "218a4ebf7da3951d4b96e3ec09549379fc7195ce8987f28bee39c5c6a6240aa941e9a738ecab8fb23b6cce5d9fedca02e7852c85f63d837aa2340f83ee74d1ac", "28b886e73be2aad989d78abd38328c1ac5db23c1d2289e0b683010d37ac9ad9409e3fd90e45b993f7e296e7dd795855e9fac42f8fbee13e7de383b6611ce0e16", "dcf25d719129744f225e55e5a602bc6cfedf94aff21f9a8e99bfaa0b90e1166d", [0x2, 0x3]}}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000002c0)=0x3, 0x4) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000003c0)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/114, 0x72}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000400)={0x0, 0x0, {0x5, 0x4, 0x63ad, 0x80000000}}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000440)={0x0, 0x6}) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x10e45e) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000480)=[0x4, 0x7b4]) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000500)={0x3, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000600)={r3, 0x6, &(0x7f0000000540)=[0x9, 0x8, 0xd, 0x8d7c, 0x4, 0x4], &(0x7f0000000580)=[0x2, 0x7, 0x6, 0x8], &(0x7f00000005c0)=[0x5, 0xa7, 0x5, 0x6, 0x0, 0x76, 0x1]}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000640)={0x2, 0xf3, "addae06ab47868796862a164323e1db7e56163dcd7ce6275679caf13d6132ea6c05b23352087197f150061e0635941a5afa4c79f7ef03b64d0642d2053d7e859d3112a28250967f9a74df3028158f5be42d35fde87d8563ee0d883081ed22030c2efea91a4a6dc961b2ad3e06228df0414e395e5636538a7b8e31d271af826ca9f0d6cc951782250e57bdbbf8f59c5eae407f55398a187fb37ff5a16f9f458ed32688bd3c41e55e17e1dbc465b17eb9fe319b1d746a24301f6de3080ac40a807f1100afc1236cd4fa297e020d836fe436a9358754266d14ce021fd30f146a29320fac0afd263446a339cf9ca11609c50de4568"}) ioctl$SIOCRSACCEPT(r1, 0x89e3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz0\x00', 0x1ff) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r1, 0x4068aea3, &(0x7f0000000780)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x158, 0xc0, 0x220, 0x340, 0xc0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000800), {[{{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'macvtap0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x2f, 0x3, 0x10}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x14}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x27}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x4, 0x1}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x5, @loopback, 0x4e24}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 0x903b, 0xb, [0x10, 0x36, 0x18, 0x10, 0x2, 0x3d, 0x4, 0x34, 0x5, 0x11, 0x5, 0x2e, 0x1f, 0x3d, 0x25, 0x3b], 0x0, 0xd, 0x1ff}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000d80)=@fd={0x0, 0x5, 0x4, 0x100, 0x2, {0x0, 0xea60}, {0x1, 0x2, 0x7, 0x0, 0x5, 0x9e, "8654685a"}, 0x10, 0x4, {}, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000e00)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000e40)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000f00)={&(0x7f0000000e80)=[r4, r5], &(0x7f0000000ec0)=[0x100000001, 0x6, 0x3, 0x4], 0x3, 0x2, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) pread64(r6, &(0x7f0000000f40)=""/32, 0x20, 0x0) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000f80), 0x8240, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r7, 0xc4c03d09, &(0x7f0000000fc0)={0x9}) 904.105918ms ago: executing program 3 (id=1035): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf250300000028"], 0x113c}}, 0x8004) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000400)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000540)={&(0x7f0000812000/0x1000)=nil, &(0x7f0000624000/0x2000)=nil, 0x1000, 0x3, 0x2}) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f00000002c0)) ftruncate(r2, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) madvise(&(0x7f0000c65000/0x1000)=nil, 0x1000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) ptrace(0x10, r5) ptrace(0x11, r5) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "7817765dc5914c3d", "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", "58a190f0", "2a1e833e7af32011"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace389ff5c0", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d054", "29a78ab9b0a4e8ae"}, 0x38) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x541c, &(0x7f0000000000)) 846.064053ms ago: executing program 4 (id=1036): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0xd8) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xc8) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 845.498947ms ago: executing program 0 (id=1037): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) rt_sigqueueinfo(0x0, 0x1, &(0x7f0000001180)={0x2f, 0xe0, 0xffff0001}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xff92, 0x0, 0x1, 0x80000000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x0, 0xfffffffe, @vifc_lcl_addr=@loopback, @private=0xffffffff}, 0x10) 746.340397ms ago: executing program 0 (id=1038): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) r1 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x7, &(0x7f0000003040)={0x0, "f4e1a230b44f44eaa65e405b747aa95df8c02c12eb4eaf00"}}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000000)={&(0x7f0000000040)=[r2], 0x0, 0x200000000005, 0x1, 0xc}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) (async) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) (async) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x7, &(0x7f0000003040)={0x0, "f4e1a230b44f44eaa65e405b747aa95df8c02c12eb4eaf00"}}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000000)={&(0x7f0000000040)=[r2], 0x0, 0x200000000005, 0x1, 0xc}) (async) 745.623025ms ago: executing program 0 (id=1039): mlockall(0x3) capset(0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0xa5}, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x54}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c81, 0xffffffffffffffb6) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/177) 624.409897ms ago: executing program 4 (id=1040): socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r0}, 0x18) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x285}], 0x1, 0x9) r1 = syz_io_uring_setup(0x2066, &(0x7f0000000780)={0x0, 0xddb4, 0x80, 0x3, 0x2ec}, &(0x7f0000000580), &(0x7f0000000800)) r2 = syz_io_uring_setup(0x3fed, &(0x7f00000006c0)={0x0, 0x30a3, 0x8, 0x100, 0x0, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bind$alg(r4, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x4, "07000f00007eaba9a208000000706de400000000000000000000008000", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010100000000000000000a0000041000020073797a310000000008"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x800, 0x0, 0x0, 0x0, 0x2}, {@in, 0x0, 0x32}, @in=@local, {0x3, 0x6}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x158}}, 0x0) setsockopt$sock_void(r10, 0x1, 0x0, 0x0, 0x0) 513.978719ms ago: executing program 4 (id=1041): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x5c, 0x0, 0x10ada85e65c25359, 0x8000, 0x8000000, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x11}}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x22}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x90}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x94}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8c}]}]}]}, 0x5c}}, 0x0) r3 = dup(r2) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000080)=0xf4240) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x438080, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x15) ioctl$IMDELTIMER(r4, 0x80044941, &(0x7f00000000c0)=0x1) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r5, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x81}) 405.799084ms ago: executing program 4 (id=1042): r0 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x3c, &(0x7f00000000c0), 0x1, 0x0, 0x4d, 0x40044}}], 0x30, 0x4) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50) ioctl$TCSETA(0xffffffffffffffff, 0x8910, 0x0) (async) ioctl$TCSETA(0xffffffffffffffff, 0x8910, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, 0x0) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4004084, 0x0, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x4004084, 0x0, 0x0) 306.034514ms ago: executing program 0 (id=1043): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) write$P9_RLINK(r3, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) ioctl$SNDCTL_SEQ_CTRLRATE(r3, 0xc0045103, &(0x7f0000000240)=0x1000) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@timestamp_addr={0x44, 0x4, 0x59, 0x1, 0x3}]}}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$igmp(0x2, 0x3, 0x2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) (async) write$P9_RLINK(r3, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) (async) ioctl$SNDCTL_SEQ_CTRLRATE(r3, 0xc0045103, &(0x7f0000000240)=0x1000) (async) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35bda", 0x7) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) (async) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@timestamp_addr={0x44, 0x4, 0x59, 0x1, 0x3}]}}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) (async) 301.388235ms ago: executing program 4 (id=1044): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x18970}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x18970}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) 1.339951ms ago: executing program 4 (id=1045): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="bad00466b80600000066ef66b8010000000f01d9baf80c66b806588e8766efbafc0ced65660f3882156736360ff4e8baf80c66b81c35548766efbafc0c66b80300000066ef0f218d0f01cf0f01c9baf80c66b8a0c33d8e66efbafc0c66b8828e000066ef", 0x64}], 0x1, 0x75, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161042, 0x91) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) (async) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r6 = dup(r4) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r6, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) (async) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000140)=ANY=[], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',posixacl']) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r7 = socket$isdn(0x22, 0x3, 0x26) setsockopt$MISDN_TIME_STAMP(r7, 0x0, 0x1, &(0x7f0000000080), 0x4) (async) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 683.435µs ago: executing program 0 (id=1046): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r3 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@deltclass={0x5c, 0x29, 0x300, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0x1}, {0xa, 0xa}, {0x0, 0xa}}, [@tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x80, 0x5}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xf}}}, @tclass_kind_options=@c_cake={0x9}]}, 0x5c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x300}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xffffffffffffffe3}}, 0x0) (async, rerun: 64) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001580)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (rerun: 64) 432.127µs ago: executing program 3 (id=1047): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000b78717cfd7b01d32ed581fb5c071ee556ec8610dfd6e1b06d7330055e2ffffffabb6618f214d3cf52e9f0296891921b5513f330fbce768080eb79e3b872d1b851a20d24bdf4a9cbe09", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000200"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="98000000090000000000000003000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002c85000000060000009500"/88], &(0x7f0000000100)='GPL\x00', 0x5, 0xe5, &(0x7f0000000140)=""/229, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x1, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r1], 0x0, 0x10, 0xfffffffb}, 0x94) setsockopt$MRT_TABLE(r0, 0x0, 0xd1, &(0x7f0000000000)=0xffffffff, 0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="ad43000000000100000006"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) 0s ago: executing program 3 (id=1048): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x63, '\x00', 0x0, @xdp}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000042404001c002b80080003001900000008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r1, @ANYBLOB="080fa274c178c0f655f0e087f40100101b00000000001e566a3a957e7a33470667c27da7946a595e15f16ffd423e87bdd121b04f04592fe4e4622d661c7cda697195cd301dc727450efe1fa289d2c42c05a2ba08ae9be0a7644c63374d023380e0fef314ace5b6f160184cd8c2833f1d790202d8a58a1f26004822459930738ab156d7d0b79537fa5117b2655a3773f62d1f885474862d3570a5ebb06224f6f168944e8955a9602ca0fb1840818723d9a1b2bd14c0f98a576f5726789330eb1fca2f253153f93601da42450b526bb4fb9d8ad86d761b460c35b90fb69b09b76154a4d6d5cefb7dc9381a"], 0x44}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)='westwood\x00', 0x9) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="01000000020000000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000020000c019000000776a548fc1e00c5189b84b9f6851d824b77d7da6c176a20ea682dd876624013b8aff6408ab26530913fcc9e6f297e6c9b612c4182e0d118ec3c9b1d8a914f9e9"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1}}], 0x1, 0x2040000, 0x0) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000280)={&(0x7f0000000200)=[{0x0, 0x0, 0x1, &(0x7f0000000540)="82"}], 0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) timer_create(0x1, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x258a, 0x33, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xc0, 0x3, [{{0x9, 0x4, 0x0, 0x79, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x80, 0x80, 0x1, {0x22, 0x3bf}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x8, 0xf8}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x9, 0x3, 0x38, 0x10, 0x68}, 0x24, &(0x7f0000000440)={0x5, 0xf, 0x24, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x7fffffa, 0xf00f, 0x6, [0xc0, 0x30, 0xff0000, 0xc000]}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x100c}}]}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000100)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) kernel console output (not intermixed with test programs): tman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.504881][ T5983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.563018][ T5987] hsr_slave_0: entered promiscuous mode [ 53.567828][ T5987] hsr_slave_1: entered promiscuous mode [ 53.570761][ T5987] debugfs: 'hsr0' already exists in 'hsr' [ 53.573107][ T5987] Cannot create hsr debugfs directory [ 53.673417][ T5983] hsr_slave_0: entered promiscuous mode [ 53.676066][ T5983] hsr_slave_1: entered promiscuous mode [ 53.678241][ T5983] debugfs: 'hsr0' already exists in 'hsr' [ 53.679978][ T5983] Cannot create hsr debugfs directory [ 53.823872][ T5989] Bluetooth: hci1: command tx timeout [ 53.904224][ T5989] Bluetooth: hci3: command tx timeout [ 53.904253][ T63] Bluetooth: hci2: command tx timeout [ 53.904592][ T5976] Bluetooth: hci0: command tx timeout [ 53.914058][ T5974] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.927084][ T5974] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.936883][ T5974] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.955072][ T5974] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.980935][ T5972] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.987659][ T5972] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.994030][ T5972] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.998284][ T5972] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.052445][ T5987] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.059128][ T5987] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.063248][ T5987] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.069111][ T5987] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.147156][ T5983] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.155400][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.160448][ T5983] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.167714][ T5983] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.177152][ T5983] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.187444][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.217666][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.223914][ T5974] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.239041][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.242070][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.248529][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.251481][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.262986][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.265288][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.270300][ T5987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.276143][ T217] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.278496][ T217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.321128][ T5987] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.334267][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.337199][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.354606][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.356851][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.390483][ T40] audit: type=1400 audit(1756655827.318:89): avc: denied { sys_module } for pid=5974 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.399166][ T5983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.431739][ T5983] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.440806][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.443070][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.449527][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.451811][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.472487][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.523392][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.559068][ T5974] veth0_vlan: entered promiscuous mode [ 54.572598][ T5987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.581235][ T5974] veth1_vlan: entered promiscuous mode [ 54.586564][ T5972] veth0_vlan: entered promiscuous mode [ 54.593302][ T5972] veth1_vlan: entered promiscuous mode [ 54.610683][ T5974] veth0_macvtap: entered promiscuous mode [ 54.615875][ T5974] veth1_macvtap: entered promiscuous mode [ 54.639426][ T5972] veth0_macvtap: entered promiscuous mode [ 54.646806][ T5972] veth1_macvtap: entered promiscuous mode [ 54.652208][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.660399][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.666774][ T5983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.682489][ T5987] veth0_vlan: entered promiscuous mode [ 54.686981][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.689948][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.697474][ T5987] veth1_vlan: entered promiscuous mode [ 54.700581][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.703365][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.708265][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.724694][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.735273][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.741589][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.745139][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.754950][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.771436][ T5983] veth0_vlan: entered promiscuous mode [ 54.794661][ T5983] veth1_vlan: entered promiscuous mode [ 54.803899][ T5987] veth0_macvtap: entered promiscuous mode [ 54.823615][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.827066][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.827391][ T5987] veth1_macvtap: entered promiscuous mode [ 54.843261][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.847095][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.856057][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.859384][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.867086][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.870241][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.879793][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.891748][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.898014][ T5983] veth0_macvtap: entered promiscuous mode [ 54.902611][ T5983] veth1_macvtap: entered promiscuous mode [ 54.909452][ T82] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.910645][ T5972] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.919584][ T82] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.925619][ T82] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.947767][ T82] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.953737][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.954345][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 54.958876][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 54.962009][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 54.966744][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 54.968911][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 54.971108][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 54.971577][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.973223][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 54.978665][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 54.980826][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 54.982975][ T82] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.984636][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 54.988504][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 54.989224][ T82] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.991178][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 54.995724][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 54.997865][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 54.999976][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 55.002159][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 55.002765][ T82] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.005103][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 55.007819][ T82] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.009947][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 55.014886][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 55.017050][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 55.019145][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 55.021268][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 55.023884][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 55.026100][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 55.028192][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 55.030327][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 55.030650][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.032407][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 55.037764][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 55.039818][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 55.039836][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.041901][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 55.046791][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 55.050036][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 55.053117][ T6060] binder: 6059:6060 ioctl c018620c 200000000000 returned -22 [ 55.074773][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.078139][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.118095][ T6064] netlink: 187244 bytes leftover after parsing attributes in process `syz.3.5'. [ 55.131702][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.137546][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.162875][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.166553][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.193529][ T2300] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.202496][ T6076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8'. [ 55.205933][ T6076] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8'. [ 55.220734][ T6076] evm: overlay not supported [ 55.241588][ T6078] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'. [ 55.328541][ T6074] process 'syz.2.7' launched './file0' with NULL argv: empty string added [ 55.346586][ T2300] usb 5-1: Using ep0 maxpacket: 8 [ 55.349397][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 55.349869][ T6092] vcan0: tx drop: invalid da for name 0x0000000200000000 [ 55.351911][ T2300] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 55.351936][ T2300] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 55.351948][ T2300] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 55.351961][ T2300] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 55.351973][ T2300] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.351993][ T2300] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 55.352004][ T2300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.376613][ T6092] vcan0 (unregistering): tx drop: invalid da for name 0x0000000200000000 [ 55.379299][ T6092] vcan0 (unregistering): tx drop: invalid da for name 0x0000000200000000 [ 55.381852][ T6092] vcan0 (unregistering): tx drop: invalid da for name 0x0000000200000000 [ 55.384636][ T6092] vcan0 (unregistering): tx drop: invalid da for name 0x0000000200000000 [ 55.387619][ T6092] vcan0 (unregistering): tx drop: invalid da for name 0x0000000200000000 [ 55.390436][ T6092] vcan0 (unregistering): tx drop: invalid da for name 0x0000000200000000 [ 55.393205][ T6092] vcan0 (unregistering): tx drop: invalid da for name 0x0000000200000000 [ 55.396409][ T6092] vcan0 (unregistering): tx drop: invalid da for name 0x0000000200000000 [ 55.399614][ T6092] vcan0 (unregistering): tx drop: invalid da for name 0x0000000200000000 [ 55.400281][ T6095] netlink: 'syz.3.12': attribute type 1 has an invalid length. [ 55.405707][ T6095] NCSI netlink: No device for ifindex 0 [ 55.441296][ T6104] binder_alloc: 6103: binder_alloc_buf, no vma [ 55.515572][ T6110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16'. [ 55.518379][ T6110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16'. [ 55.563744][ T2300] usb 5-1: usb_control_msg returned -32 [ 55.565625][ T2300] usbtmc 5-1:16.0: can't read capabilities [ 55.634808][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 55.681213][ T6125] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 55.700288][ T6125] syz.2.21 uses obsolete (PF_INET,SOCK_PACKET) [ 55.723597][ T6043] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 55.874679][ T6043] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 55.878470][ T6043] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 55.881220][ T6043] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 55.884599][ T6043] usb 8-1: config 0 interface 0 has no altsetting 0 [ 55.887517][ T6043] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 55.891071][ T6043] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 55.895885][ T63] Bluetooth: hci1: command tx timeout [ 55.895942][ T6043] usb 8-1: config 0 interface 0 has no altsetting 0 [ 55.899504][ T6043] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 55.903857][ T6043] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 55.907296][ T6043] usb 8-1: config 0 interface 0 has no altsetting 0 [ 55.910184][ T6043] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 55.912937][ T6043] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 55.916582][ T6043] usb 8-1: config 0 interface 0 has no altsetting 0 [ 55.917058][ T6126] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 55.919418][ T6043] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 55.924157][ T6043] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 55.928622][ T6043] usb 8-1: config 0 interface 0 has no altsetting 0 [ 55.928808][ T6058] bridge1: entered promiscuous mode [ 55.932187][ T6043] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 55.933826][ T6058] bridge1: entered allmulticast mode [ 55.936328][ T6043] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 55.941296][ T6043] usb 8-1: config 0 interface 0 has no altsetting 0 [ 55.945031][ T6043] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 55.948226][ T6043] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 55.949353][ T9] usb 5-1: USB disconnect, device number 2 [ 55.951574][ T6043] usb 8-1: config 0 interface 0 has no altsetting 0 [ 55.957038][ T6043] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 55.959998][ T6043] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 55.963193][ T6043] usb 8-1: config 0 interface 0 has no altsetting 0 [ 55.967121][ T6043] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 55.970696][ T6043] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 55.973896][ T63] Bluetooth: hci0: command tx timeout [ 55.974513][ T6043] usb 8-1: Product: syz [ 55.975374][ T5989] Bluetooth: hci3: command tx timeout [ 55.975399][ T5989] Bluetooth: hci2: command tx timeout [ 55.981168][ T6043] usb 8-1: Manufacturer: syz [ 55.982573][ T6043] usb 8-1: SerialNumber: syz [ 55.986507][ T6043] usb 8-1: config 0 descriptor?? [ 55.994537][ T6043] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 56.300901][ T6128] sg_write: data in/out 10438218/1 bytes for SCSI command 0x6b-- guessing data in; [ 56.300901][ T6128] program syz.3.14 not setting count and/or reply_len properly [ 56.481064][ T6130] snd_dummy snd_dummy.0: control 1:96:0:syz0:211 is already present [ 56.521313][ T40] kauditd_printk_skb: 138 callbacks suppressed [ 56.521325][ T40] audit: type=1400 audit(1756655829.448:228): avc: denied { setattr } for pid=6131 comm="syz.0.23" name="CAN_J1939" dev="sockfs" ino=9558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.531229][ T40] audit: type=1400 audit(1756655829.448:229): avc: denied { lock } for pid=6131 comm="syz.0.23" path="socket:[9558]" dev="sockfs" ino=9558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.551930][ T40] audit: type=1400 audit(1756655829.478:230): avc: denied { create } for pid=6133 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.558877][ T40] audit: type=1400 audit(1756655829.478:231): avc: denied { setopt } for pid=6133 comm="syz.0.24" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.589487][ T40] audit: type=1400 audit(1756655829.518:232): avc: denied { mount } for pid=6135 comm="syz.0.25" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.597367][ T6136] ip6erspan0: entered promiscuous mode [ 56.632812][ T6140] netlink: 830 bytes leftover after parsing attributes in process `syz.0.26'. [ 56.666817][ T6143] netlink: 4228 bytes leftover after parsing attributes in process `syz.0.27'. [ 56.670105][ T6143] openvswitch: netlink: Flow key attr not present in new flow. [ 56.676187][ T6144] tmpfs: Unknown parameter 'nr_i|odes' [ 56.678649][ T6143] tmpfs: Unknown parameter 'nr_i|odes' [ 57.179913][ T6153] warning: `syz.2.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.332428][ T40] audit: type=1400 audit(1756655830.258:233): avc: denied { create } for pid=6157 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.339094][ T40] audit: type=1400 audit(1756655830.258:234): avc: denied { read } for pid=6157 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.454873][ T40] audit: type=1400 audit(1756655830.388:235): avc: denied { create } for pid=6162 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.462156][ T40] audit: type=1400 audit(1756655830.388:236): avc: denied { connect } for pid=6162 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.512168][ T6165] usb usb8: usbfs: process 6165 (syz.2.35) did not claim interface 0 before use [ 57.517386][ T40] audit: type=1400 audit(1756655830.448:237): avc: denied { mounton } for pid=6164 comm="syz.2.35" path="/15/file0" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.517418][ T6165] 9pnet_fd: Insufficient options for proto=fd [ 57.532697][ T6165] NILFS (nbd2): device size too small [ 57.547763][ T6147] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 57.553982][ T6147] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 57.560089][ T6147] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 57.564749][ T6167] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 57.565139][ T6147] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.567639][ T6167] overlayfs: missing 'lowerdir' [ 57.572254][ T6147] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.580472][ T6147] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.584951][ T6147] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 57.587535][ T6147] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 57.595775][ T6147] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 57.599049][ T6147] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 57.601060][ T6147] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 57.605530][ T6147] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 57.641980][ T6171] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 57.649106][ T6171] cramfs: wrong magic [ 58.213730][ C2] usb 8-1: yurex_control_callback - control failed: -2 [ 58.469380][ T6188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6188 comm=syz.0.44 [ 58.863940][ T63] Bluetooth: hci0: command 0x0419 tx timeout [ 59.169666][ T6205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.252298][ T5978] usb 8-1: USB disconnect, device number 2 [ 59.257257][ T5978] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 59.265844][ T6207] overlayfs: failed to set uuid (15/file0, err=-1); falling back to uuid=null. [ 59.269877][ T6207] overlayfs: failed to verify upper root origin [ 59.522609][ T6232] Zero length message leads to an empty skb [ 59.583548][ T63] Bluetooth: hci1: command 0x0419 tx timeout [ 59.654055][ T63] Bluetooth: hci3: command 0x0419 tx timeout [ 59.654334][ T5976] Bluetooth: hci2: command 0x0419 tx timeout [ 59.720058][ T6252] netlink: 'syz.0.62': attribute type 21 has an invalid length. [ 59.728732][ T6252] CUSE: unknown device info "" [ 59.730307][ T6252] CUSE: zero length info key specified [ 59.732342][ T6252] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.765383][ T6259] mmap: syz.0.65 (6259) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.835511][ T6259] netlink: 'syz.0.65': attribute type 7 has an invalid length. [ 59.841900][ T6259] : entered promiscuous mode [ 59.994239][ T6281] capability: warning: `syz.0.67' uses 32-bit capabilities (legacy support in use) [ 60.150825][ T6301] block nbd0: NBD_DISCONNECT [ 60.247995][ T5976] Bluetooth: hci1: unexpected event for opcode 0x200b [ 60.359767][ T6332] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 60.446950][ T6338] netlink: 'syz.0.79': attribute type 1 has an invalid length. [ 60.490071][ T6340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32512 sclass=netlink_route_socket pid=6340 comm=syz.3.81 [ 60.933790][ T5976] Bluetooth: hci0: command 0x0419 tx timeout [ 60.935612][ T6349] virtio-fs: tag not found [ 61.251670][ T6384] netlink: 'syz.3.94': attribute type 1 has an invalid length. [ 61.256620][ T6384] __nla_validate_parse: 12 callbacks suppressed [ 61.256630][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 61.283519][ T5976] Bluetooth: hci3: unexpected event for opcode 0xab49 [ 61.299607][ T6400] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.98'. [ 61.316531][ T6403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.99'. [ 61.320044][ T6403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.99'. [ 61.396047][ T6421] capability: warning: `syz.3.103' uses deprecated v2 capabilities in a way that may be insecure [ 61.493781][ T6431] netlink: 256 bytes leftover after parsing attributes in process `syz.0.105'. [ 61.497342][ T6431] unsupported nlmsg_type 40 [ 61.498959][ T6424] netlink: 72 bytes leftover after parsing attributes in process `syz.2.102'. [ 61.529930][ T40] kauditd_printk_skb: 82 callbacks suppressed [ 61.529941][ T40] audit: type=1400 audit(1756655834.458:320): avc: denied { create } for pid=6433 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 61.580753][ T6439] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.585929][ T40] audit: type=1400 audit(1756655834.518:321): avc: denied { ioctl } for pid=6436 comm="syz.0.108" path="socket:[9778]" dev="sockfs" ino=9778 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.639885][ T40] audit: type=1400 audit(1756655834.568:322): avc: denied { create } for pid=6442 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 61.651149][ T40] audit: type=1400 audit(1756655834.568:323): avc: denied { execute } for pid=6442 comm="syz.3.110" path="/28/cpu.stat" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.702083][ T40] audit: type=1400 audit(1756655834.628:324): avc: denied { read } for pid=6440 comm="syz.2.109" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 61.713837][ T40] audit: type=1400 audit(1756655834.628:325): avc: denied { open } for pid=6440 comm="syz.2.109" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 61.725006][ T40] audit: type=1400 audit(1756655834.658:326): avc: denied { create } for pid=6454 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 61.735441][ T5976] Bluetooth: hci2: command 0x0419 tx timeout [ 61.738461][ T40] audit: type=1400 audit(1756655834.668:327): avc: denied { getopt } for pid=6454 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 61.811507][ T6465] netlink: 277 bytes leftover after parsing attributes in process `syz.3.118'. [ 61.840422][ T6467] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 61.847049][ T6470] veth1_to_batadv: entered promiscuous mode [ 61.904040][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.906327][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.908276][ T40] audit: type=1400 audit(1756655834.838:328): avc: denied { create } for pid=6476 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 61.908482][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.915113][ T40] audit: type=1400 audit(1756655834.838:329): avc: denied { name_bind } for pid=6475 comm="syz.0.121" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 61.917753][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.925325][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.927548][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.929729][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.932192][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.934428][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.936534][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.938688][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.940868][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.943030][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.945236][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.947361][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.949490][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.951680][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.953889][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.956033][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.958160][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.960269][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.962401][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.964563][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.967194][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.969512][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.971839][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.974234][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.976465][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.978667][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.980780][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.982926][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.985192][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.988269][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.991041][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.996511][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 61.999352][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.002186][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.008380][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.011219][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.020219][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.022496][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.032053][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.034315][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.036695][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.038858][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.041057][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.043281][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.045497][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.047669][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.049888][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.052447][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.054906][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.057239][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.059428][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.061649][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.063899][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.066100][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.068252][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.070395][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.072545][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.074766][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.076888][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.079007][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.081119][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.083232][ T5976] Bluetooth: hci0: unexpected event for opcode 0x080d [ 62.128633][ T6495] netlink: 'syz.2.124': attribute type 30 has an invalid length. [ 62.215905][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'. [ 62.239241][ T6504] netlink: 27 bytes leftover after parsing attributes in process `syz.0.126'. [ 62.247801][ T6504] dvmrp1: entered allmulticast mode [ 62.299155][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.128'. [ 62.303667][ T6506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6506 comm=syz.3.127 [ 62.345364][ T6514] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 62.349943][ T6514] batadv_slave_1: entered promiscuous mode [ 62.354103][ T6516] netlink: 'syz.2.130': attribute type 1 has an invalid length. [ 62.355882][ T6513] batadv_slave_1: left promiscuous mode [ 62.409517][ T6516] bond1: (slave geneve3): making interface the new active one [ 62.419474][ T6516] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 62.423099][ T82] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 62.423741][ T6516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6516 comm=syz.2.130 [ 62.428918][ T82] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 62.429844][ T6516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=6516 comm=syz.2.130 [ 62.432532][ T82] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 62.440420][ T82] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 62.443732][ T6516] bond1: entered promiscuous mode [ 62.445358][ T6516] geneve3: entered promiscuous mode [ 62.447083][ T6516] bond1: entered allmulticast mode [ 62.448696][ T6516] geneve3: entered allmulticast mode [ 62.450967][ T6516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.463380][ T6525] 9pnet_virtio: no channels available for device syz [ 62.852371][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.467391][ T6572] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 63.813519][ T5976] Bluetooth: hci2: command 0x0419 tx timeout [ 63.886681][ T6579] vxcan1 speed is unknown, defaulting to 1000 [ 63.886805][ T6578] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 63.889786][ T6579] vxcan1 speed is unknown, defaulting to 1000 [ 63.894587][ T6579] vxcan1 speed is unknown, defaulting to 1000 [ 63.975182][ T6043] vxcan1 speed is unknown, defaulting to 1000 [ 63.975731][ T6579] infiniband syz2: set active [ 63.978795][ T6579] infiniband syz2: added vxcan1 [ 63.999406][ T6579] RDS/IB: syz2: added [ 64.000971][ T6579] smc: adding ib device syz2 with port count 1 [ 64.002938][ T6579] smc: ib device syz2 port 1 has pnetid [ 64.005795][ T841] vxcan1 speed is unknown, defaulting to 1000 [ 64.007970][ T6579] vxcan1 speed is unknown, defaulting to 1000 [ 64.089535][ T6579] vxcan1 speed is unknown, defaulting to 1000 [ 64.185158][ T6579] vxcan1 speed is unknown, defaulting to 1000 [ 64.291144][ T6579] vxcan1 speed is unknown, defaulting to 1000 [ 64.405701][ T6587] overlayfs: failed to resolve './file1': -2 [ 64.441086][ T6589] netlink: 'syz.2.154': attribute type 1 has an invalid length. [ 64.455495][ T6589] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.466220][ T6589] bond2: (slave ip6gretap1): making interface the new active one [ 64.469816][ T6589] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 64.576688][ T6592] fuse: Bad value for 'user_id' [ 64.578907][ T6592] fuse: Bad value for 'user_id' [ 65.504035][ T5978] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 65.627116][ T6625] No source specified [ 65.656061][ T5978] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 65.658691][ T5978] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 65.661648][ T5978] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 65.664512][ T5978] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 65.667749][ T5978] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 65.672459][ T5978] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 65.681031][ T5978] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 65.683873][ T5978] usb 8-1: Product: syz [ 65.685225][ T5978] usb 8-1: Manufacturer: syz [ 65.697965][ T5978] cdc_wdm 8-1:1.0: skipping garbage [ 65.699573][ T5978] cdc_wdm 8-1:1.0: skipping garbage [ 65.702342][ T5978] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 65.704240][ T5978] cdc_wdm 8-1:1.0: Unknown control protocol [ 65.893581][ T5976] Bluetooth: hci2: command 0x0419 tx timeout [ 65.899971][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 65.974926][ T5976] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 65.978557][ T5976] Bluetooth: hci0: Injecting HCI hardware error event [ 65.982042][ T5976] Bluetooth: hci0: hardware error 0x00 [ 66.102764][ T5978] usb 8-1: USB disconnect, device number 3 [ 66.657209][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 66.657221][ T40] audit: type=1400 audit(1756655839.588:374): avc: denied { read } for pid=6645 comm="syz.3.173" path="socket:[15903]" dev="sockfs" ino=15903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.786412][ T6660] tmpfs: Unknown parameter 'usrquonode_hardlimit' [ 66.815898][ T6656] binder: 6651:6656 ioctl 80044945 200000000200 returned -22 [ 66.842205][ T6670] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 66.845793][ T40] audit: type=1400 audit(1756655839.788:375): avc: denied { mount } for pid=6669 comm="syz.0.180" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.893181][ T6674] vlan1: entered promiscuous mode [ 66.895358][ T6674] vlan1: entered allmulticast mode [ 66.897202][ T6674] veth0_vlan: entered allmulticast mode [ 66.899100][ T6674] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 66.929518][ T40] audit: type=1400 audit(1756655839.858:376): avc: denied { setattr } for pid=6677 comm="syz.0.183" name="NETLINK" dev="sockfs" ino=13189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.980858][ T40] audit: type=1400 audit(1756655839.908:377): avc: denied { ioctl } for pid=6680 comm="syz.0.184" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13196 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 67.003268][ T40] audit: type=1400 audit(1756655839.918:378): avc: denied { create } for pid=6680 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 67.128079][ T6690] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 67.154405][ T6692] fuse: Bad value for 'fd' [ 67.185323][ T6694] erofs (device nbd0): cannot find valid erofs superblock [ 67.722918][ T6715] syzkaller1: entered promiscuous mode [ 67.724835][ T6715] syzkaller1: entered allmulticast mode [ 67.728906][ T6715] 9pnet_rdma: rdma_create_trans (6715): problem binding to privport: 13 [ 67.929360][ T40] audit: type=1400 audit(1757180128.862:379): avc: denied { create } for pid=6718 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.964451][ T40] audit: type=1400 audit(1757180128.902:380): avc: denied { setopt } for pid=6718 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.970345][ T40] audit: type=1400 audit(1757180128.902:381): avc: denied { getopt } for pid=6718 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.053644][ T5976] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 68.147206][ T40] audit: type=1400 audit(1757180129.080:382): avc: denied { write } for pid=6723 comm="syz.2.199" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 68.196019][ T6728] __nla_validate_parse: 4 callbacks suppressed [ 68.196035][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'. [ 68.202221][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.201'. [ 68.205758][ T6728] netlink: 'syz.2.201': attribute type 18 has an invalid length. [ 68.239989][ T6732] netlink: 'syz.0.203': attribute type 1 has an invalid length. [ 68.242358][ T6732] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.203'. [ 68.423208][ T40] audit: type=1400 audit(1757180129.342:383): avc: denied { read write } for pid=6741 comm="syz.0.206" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 68.510774][ T6749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.209'. [ 68.513742][ T6749] team0: invalid flags given to default FDB implementation [ 68.720307][ T6755] bridge1: entered promiscuous mode [ 68.721977][ T6755] bridge1: entered allmulticast mode [ 68.835698][ T6759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6759 comm=syz.2.214 [ 68.971160][ T6765] afs: Unknown parameter '' [ 69.103372][ T6777] netlink: zone id is out of range [ 69.106493][ T6777] netlink: zone id is out of range [ 69.120464][ T6777] netlink: set zone limit has 4 unknown bytes [ 69.155191][ T6785] binder: 6784:6785 ioctl c0306201 200000000080 returned -14 [ 69.168081][ T6043] IPVS: starting estimator thread 0... [ 69.212403][ T6791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.224'. [ 69.215404][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.224'. [ 69.252458][ T6792] uprobe: syz.0.225:6792 failed to unregister, leaking uprobe [ 69.281346][ T6789] IPVS: using max 43 ests per chain, 103200 per kthread [ 69.436504][ T6812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.231'. [ 69.439369][ T6813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.231'. [ 69.631458][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 69.796708][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 69.799704][ T9] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 69.802279][ T9] usb 7-1: config 0 has no interface number 0 [ 69.804292][ T9] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 69.807644][ T9] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 69.811276][ T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 69.814677][ T9] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 69.818840][ T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 69.821732][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.825868][ T9] usb 7-1: config 0 descriptor?? [ 69.831593][ T9] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 70.564282][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.567601][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.570747][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.574563][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.577668][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.599455][ T6835] vxcan1 speed is unknown, defaulting to 1000 [ 70.786697][ T6835] chnl_net:caif_netlink_parms(): no params data found [ 70.853633][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.856118][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.858777][ T6835] bridge_slave_0: entered allmulticast mode [ 70.861609][ T6835] bridge_slave_0: entered promiscuous mode [ 70.865894][ T6835] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.869115][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.871971][ T6835] bridge_slave_1: entered allmulticast mode [ 70.876614][ T6835] bridge_slave_1: entered promiscuous mode [ 70.915072][ T6835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.919967][ T6835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.953221][ T6835] team0: Port device team_slave_0 added [ 70.956766][ T6835] team0: Port device team_slave_1 added [ 70.994720][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.997278][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.005184][ T6835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.011805][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.013972][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.021740][ T6835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.060331][ T6835] hsr_slave_0: entered promiscuous mode [ 71.063998][ T6835] hsr_slave_1: entered promiscuous mode [ 71.066048][ T6835] debugfs: 'hsr0' already exists in 'hsr' [ 71.067802][ T6835] Cannot create hsr debugfs directory [ 71.199207][ T6835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.204194][ T6835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.209012][ T6835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.213697][ T6835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.237987][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.239'. [ 71.241252][ T6850] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 71.271071][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.273596][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.300870][ T6835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.327375][ T6835] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.340103][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.343125][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.347651][ T6856] binder: BINDER_SET_CONTEXT_MGR already set [ 71.352362][ T6856] binder: 6855:6856 ioctl 4018620d 2000000000c0 returned -16 [ 71.352899][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.358090][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.412902][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 71.498148][ T6835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.595721][ T841] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.670489][ T6835] veth0_vlan: entered promiscuous mode [ 71.677558][ T6835] veth1_vlan: entered promiscuous mode [ 71.697286][ T6835] veth0_macvtap: entered promiscuous mode [ 71.701650][ T6835] veth1_macvtap: entered promiscuous mode [ 71.710602][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.718058][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.723071][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.728016][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.731284][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.734357][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.752626][ T841] usb 5-1: Using ep0 maxpacket: 16 [ 71.755521][ T841] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 71.758084][ T841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.761779][ T841] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.765785][ T841] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 71.768641][ T841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.773703][ T841] usb 5-1: config 0 descriptor?? [ 71.776109][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.778611][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.785547][ T841] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input7 [ 71.794916][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 71.794924][ T40] audit: type=1400 audit(1757180132.625:426): avc: denied { read } for pid=5365 comm="acpid" name="js0" dev="devtmpfs" ino=2994 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.803916][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.806495][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.806537][ T40] audit: type=1400 audit(1757180132.625:427): avc: denied { open } for pid=5365 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2994 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.815959][ T40] audit: type=1400 audit(1757180132.625:428): avc: denied { ioctl } for pid=5365 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2994 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.828579][ T40] audit: type=1400 audit(1757180132.655:429): avc: denied { mounton } for pid=6835 comm="syz-executor" path="/syzkaller.J0upP0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 71.851892][ T6876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.856790][ T6876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.861348][ T6876] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 71.866175][ T6876] exFAT-fs (nullb0): invalid boot record signature [ 71.868198][ T6876] exFAT-fs (nullb0): failed to read boot sector [ 71.870684][ T6876] exFAT-fs (nullb0): failed to recognize exfat type [ 71.875365][ T6876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.879386][ T6876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.886776][ T6876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.893548][ T40] audit: type=1400 audit(1757180132.713:430): avc: denied { name_connect } for pid=6875 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 72.037377][ T6886] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.040355][ T6886] MINIX-fs: unable to read superblock [ 72.048007][ T6062] usb 5-1: USB disconnect, device number 3 [ 72.071938][ T6888] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20003 [ 72.075447][ T40] audit: type=1400 audit(1757180132.889:431): avc: denied { open } for pid=6887 comm="syz.4.247" path="/dev/ttyqc" dev="devtmpfs" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 72.082811][ T40] audit: type=1400 audit(1757180132.908:432): avc: denied { ioctl } for pid=6887 comm="syz.4.247" path="/dev/ptyqd" dev="devtmpfs" ino=140 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 72.088567][ T5365] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 72.172265][ T2300] usb 7-1: USB disconnect, device number 2 [ 72.175420][ T2300] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 72.662515][ T63] Bluetooth: hci4: command tx timeout [ 72.674153][ T40] audit: type=1400 audit(1757180133.484:433): avc: denied { map } for pid=6902 comm="syz.0.253" path="socket:[17544]" dev="sockfs" ino=17544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.684495][ T40] audit: type=1400 audit(1757180133.484:434): avc: denied { read } for pid=6902 comm="syz.0.253" path="socket:[17544]" dev="sockfs" ino=17544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.693958][ T40] audit: type=1400 audit(1757180133.484:435): avc: denied { setopt } for pid=6902 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.821554][ T6912] netlink: 'syz.0.255': attribute type 39 has an invalid length. [ 72.834700][ T6909] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.834743][ T6908] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 73.313349][ T6929] kvm: user requested TSC rate below hardware speed [ 73.323188][ T6929] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 73.371268][ T6933] __nla_validate_parse: 6 callbacks suppressed [ 73.371279][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 73.378859][ T6933] vxcan1: tx address claim with different name [ 73.481793][ T6935] netlink: 36 bytes leftover after parsing attributes in process `syz.2.263'. [ 73.501669][ T6937] block device autoloading is deprecated and will be removed. [ 73.578441][ T6959] : renamed from wg2 (while UP) [ 73.761258][ T6973] netlink: 'syz.3.276': attribute type 142 has an invalid length. [ 73.906093][ T6984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.909461][ T6984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.998148][ T6976] trusted_key: syz.4.275 sent an empty control message without MSG_MORE. [ 74.091777][ T6999] binder: BINDER_SET_CONTEXT_MGR already set [ 74.093644][ T6999] binder: 6998:6999 ioctl 4018620d 2000000000c0 returned -16 [ 74.099033][ T6999] binder: BINDER_SET_CONTEXT_MGR already set [ 74.100917][ T6999] binder: 6998:6999 ioctl 4018620d 200000000040 returned -16 [ 74.104854][ T6999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.282'. [ 74.108685][ T6999] netlink: 'syz.0.282': attribute type 2 has an invalid length. [ 74.111044][ T6999] netlink: 44 bytes leftover after parsing attributes in process `syz.0.282'. [ 74.178458][ T7014] netlink: 'syz.4.286': attribute type 4 has an invalid length. [ 74.178727][ T7015] netlink: 'syz.4.286': attribute type 4 has an invalid length. [ 74.184790][ T7014] netlink: 'syz.4.286': attribute type 4 has an invalid length. [ 74.186195][ T7015] netlink: 'syz.4.286': attribute type 4 has an invalid length. [ 74.189049][ T7014] netlink: 'syz.4.286': attribute type 4 has an invalid length. [ 74.191668][ T7015] netlink: 'syz.4.286': attribute type 4 has an invalid length. [ 74.193374][ T7014] netlink: 'syz.4.286': attribute type 4 has an invalid length. [ 74.195633][ T7015] netlink: 'syz.4.286': attribute type 4 has an invalid length. [ 74.333302][ T7018] infiniband syz!: set active [ 74.334787][ T7018] infiniband syz!: added team_slave_0 [ 74.364457][ T7018] RDS/IB: syz!: added [ 74.365827][ T7018] smc: adding ib device syz! with port count 1 [ 74.367777][ T7018] smc: ib device syz! port 1 has pnetid [ 74.388311][ T7032] netlink: 108 bytes leftover after parsing attributes in process `syz.3.292'. [ 74.398509][ T7031] syzkaller1: entered promiscuous mode [ 74.400058][ T7031] syzkaller1: entered allmulticast mode [ 74.441770][ T7031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=7031 comm=syz.0.291 [ 74.493870][ T7036] binder_alloc: 7035: binder_alloc_buf, no vma [ 74.595264][ T7047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.298'. [ 74.710375][ T840] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 74.790475][ T63] Bluetooth: hci4: command tx timeout [ 74.831498][ T839] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 74.867828][ T840] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 74.871009][ T840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.874364][ T840] usb 5-1: Product: syz [ 74.876066][ T840] usb 5-1: Manufacturer: syz [ 74.877871][ T840] usb 5-1: SerialNumber: syz [ 74.964308][ T7063] tty tty2: ldisc open failed (-12), clearing slot 1 [ 75.001172][ T839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.004503][ T839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.008154][ T839] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.012637][ T839] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.015548][ T839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.019401][ T839] usb 8-1: config 0 descriptor?? [ 75.117510][ T7079] overlayfs: conflicting options: nfs_export=on,index=off [ 75.260247][ T7087] Bluetooth: MGMT ver 1.23 [ 75.440661][ T839] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 75.702210][ T2300] usb 8-1: USB disconnect, device number 4 [ 75.862386][ T63] Bluetooth: hci1: command 0x0419 tx timeout [ 76.626498][ T7122] ***************************************************** [ 76.626604][ T7124] orangefs_devreq_write_iter: failed to copy head. [ 76.627810][ T7123] orangefs_devreq_write_iter: failed to copy head. [ 76.631670][ T7122] ORANGEFS Device Error: You cannot open the device file [ 76.634726][ T7122] [ 76.634726][ T7122] /dev/pvfs2-req more than once. Please make sure that [ 76.634726][ T7122] there are no [ 76.637925][ T7122] instances of a program using this device [ 76.637925][ T7122] currently running. (You must verify this!) [ 76.648480][ T7122] For example, you can use the lsof program as follows: [ 76.651325][ T7122] 'lsof | grep pvfs2-req' (run this as root) [ 76.653778][ T7122] open_access_count = 1 [ 76.655605][ T7122] ***************************************************** [ 76.915694][ T63] Bluetooth: hci4: command tx timeout [ 77.420225][ T7136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=7136 comm=syz.2.326 [ 77.428300][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.2.326'. [ 77.462202][ T840] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 77.466511][ T840] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 77.470106][ T840] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 77.525527][ T840] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 77.536376][ T840] usb 5-1: USB disconnect, device number 4 [ 77.550587][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 77.550597][ T40] audit: type=1400 audit(1757180138.252:466): avc: denied { connect } for pid=7140 comm="syz.4.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.559545][ T40] audit: type=1400 audit(1757180138.252:467): avc: denied { module_load } for pid=7140 comm="syz.4.328" path="/31/bus" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 77.608697][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.330'. [ 77.620845][ T59] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.620954][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.330'. [ 77.624385][ T59] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.631323][ T59] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.635709][ T59] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.706130][ T7167] team0: Device veth1_vlan is up. Set it down before adding it as a team port [ 77.713832][ T40] audit: type=1400 audit(1757180138.409:468): avc: denied { setopt } for pid=7163 comm="syz.2.334" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.735895][ T40] audit: type=1400 audit(1757180138.429:469): avc: denied { write } for pid=7160 comm="syz.4.333" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 77.774063][ T7175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.337'. [ 77.810592][ T40] audit: type=1400 audit(1757180138.517:470): avc: denied { create } for pid=7176 comm="syz.4.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.818030][ T40] audit: type=1400 audit(1757180138.517:471): avc: denied { connect } for pid=7176 comm="syz.4.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.825748][ T40] audit: type=1400 audit(1757180138.517:472): avc: denied { write } for pid=7176 comm="syz.4.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.838173][ T7184] ======================================================= [ 77.838173][ T7184] WARNING: The mand mount option has been deprecated and [ 77.838173][ T7184] and is ignored by this kernel. Remove the mand [ 77.838173][ T7184] option from the mount to silence this warning. [ 77.838173][ T7184] ======================================================= [ 77.854337][ T40] audit: type=1400 audit(1757180138.557:473): avc: denied { create } for pid=7183 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 77.867603][ T40] audit: type=1400 audit(1757180138.567:474): avc: denied { sys_admin } for pid=7183 comm="syz.0.340" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 77.901249][ T40] audit: type=1400 audit(1757180138.606:475): avc: denied { watch } for pid=7187 comm="syz.2.341" path="/113/file0" dev="tmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.960518][ T7192] Process accounting resumed [ 77.971625][ T63] Bluetooth: hci1: command 0x0419 tx timeout [ 78.061737][ T7207] bridge: RTM_NEWNEIGH with invalid ether address [ 78.767519][ T7232] Falling back ldisc for ttyS3. [ 78.794408][ T7241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.806857][ T7241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.029110][ T63] Bluetooth: hci4: command tx timeout [ 79.216103][ T7256] validate_nla: 60 callbacks suppressed [ 79.216119][ T7256] netlink: 'syz.0.360': attribute type 2 has an invalid length. [ 79.221529][ T7256] __nla_validate_parse: 2 callbacks suppressed [ 79.221541][ T7256] netlink: 132 bytes leftover after parsing attributes in process `syz.0.360'. [ 79.348148][ T7266] netlink: 'syz.2.364': attribute type 29 has an invalid length. [ 79.350741][ T7267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.364'. [ 79.439201][ T7280] overlayfs: failed to clone upperpath [ 80.085667][ T63] Bluetooth: hci1: command 0x0419 tx timeout [ 81.166045][ T7321] usb usb8: usbfs: process 7321 (syz.4.381) did not claim interface 0 before use [ 81.319194][ T7332] 9pnet_virtio: no channels available for device syz [ 81.708589][ T29] cfg80211: failed to load regulatory.db [ 81.756431][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.389'. [ 81.865781][ T7349] syz.2.390 uses old SIOCAX25GETINFO [ 81.909962][ T7362] Invalid source name [ 81.911524][ T7362] UBIFS error (pid: 7362): cannot open "ubifs", error -22 [ 81.989048][ T7364] netlink: 44 bytes leftover after parsing attributes in process `syz.2.395'. [ 81.994900][ T7364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.395'. [ 81.997809][ T7364] netlink: 'syz.2.395': attribute type 7 has an invalid length. [ 82.000239][ T7364] netlink: 'syz.2.395': attribute type 8 has an invalid length. [ 82.002847][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 82.141102][ T7372] netlink: 68 bytes leftover after parsing attributes in process `syz.4.397'. [ 82.154743][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.398'. [ 82.537693][ T7398] netlink: 'syz.2.404': attribute type 1 has an invalid length. [ 82.623950][ T7401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.404'. [ 82.627449][ T7401] bond3: entered promiscuous mode [ 82.629161][ T7401] bond3: entered allmulticast mode [ 82.631046][ T7401] 8021q: adding VLAN 0 to HW filter on device bond3 [ 82.727541][ T7403] netlink: 36 bytes leftover after parsing attributes in process `syz.4.405'. [ 82.775064][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 82.775080][ T40] audit: type=1400 audit(1757185299.424:503): avc: denied { write } for pid=7407 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.871878][ T7413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.880733][ T7413] bond0: (slave bond1): Enslaving as an active interface with an up link [ 83.173642][ T40] audit: type=1326 audit(1757185299.824:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7432 comm="syz.3.415" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f591398ebe9 code=0x0 [ 83.691620][ T40] audit: type=1400 audit(1757185300.334:505): avc: denied { mounton } for pid=7459 comm="syz.4.424" path="/59/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 84.019010][ T40] audit: type=1800 audit(1757185300.664:506): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.425" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 84.086878][ T7466] syzkaller1: entered promiscuous mode [ 84.088823][ T7466] syzkaller1: entered allmulticast mode [ 84.226388][ T7468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.684824][ T40] audit: type=1400 audit(1757185301.334:507): avc: denied { ioctl } for pid=7486 comm="syz.2.433" path="socket:[18261]" dev="sockfs" ino=18261 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.850035][ T7497] __nla_validate_parse: 1 callbacks suppressed [ 84.850045][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 84.858205][ T7497] bridge_slave_1: left allmulticast mode [ 84.860221][ T7497] bridge_slave_1: left promiscuous mode [ 84.869270][ T7497] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.882700][ T7497] bridge_slave_0: left allmulticast mode [ 84.884789][ T7497] bridge_slave_0: left promiscuous mode [ 84.887179][ T7497] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.913642][ T40] audit: type=1400 audit(1757185301.564:508): avc: denied { create } for pid=7496 comm="syz.4.435" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 84.921716][ T40] audit: type=1400 audit(1757185301.564:509): avc: denied { mounton } for pid=7496 comm="syz.4.435" path="/64/file0" dev="tmpfs" ino=368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 84.931199][ T40] audit: type=1400 audit(1757185301.574:510): avc: denied { ioctl } for pid=7496 comm="syz.4.435" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 85.155643][ T40] audit: type=1400 audit(1757185301.804:511): avc: denied { unlink } for pid=6835 comm="syz-executor" name="file0" dev="tmpfs" ino=368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 85.263144][ T7512] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.440'. [ 86.258085][ T40] audit: type=1400 audit(1757185302.904:512): avc: denied { ioctl } for pid=7513 comm="syz.4.441" path="socket:[21803]" dev="sockfs" ino=21803 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.643986][ T7526] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 87.002226][ T840] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 87.090815][ T7542] vxcan1 speed is unknown, defaulting to 1000 [ 87.142261][ T63] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 87.163379][ T840] usb 9-1: Using ep0 maxpacket: 16 [ 87.169138][ T840] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.172749][ T840] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.175742][ T840] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 87.179649][ T840] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 87.182607][ T840] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.188151][ T840] usb 9-1: config 0 descriptor?? [ 87.367660][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.452'. [ 87.492019][ T7570] netlink: 'syz.3.457': attribute type 1 has an invalid length. [ 87.512372][ T7570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.597685][ T840] HID 045e:07da: Invalid code 65791 type 1 [ 87.606783][ T840] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:045E:07DA.0003/input/input12 [ 87.631211][ T840] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 87.669845][ T7587] syz_tun: entered promiscuous mode [ 87.674098][ T7587] batadv_slave_0: entered promiscuous mode [ 87.708583][ T7589] bridge: RTM_NEWNEIGH with invalid ether address [ 87.840921][ T7595] netlink: 56 bytes leftover after parsing attributes in process `syz.2.464'. [ 87.854910][ T840] usb 9-1: USB disconnect, device number 2 [ 88.171339][ T7597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7597 comm=syz.0.465 [ 88.176971][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 88.176981][ T40] audit: type=1400 audit(1757185304.824:520): avc: denied { write } for pid=7596 comm="syz.0.465" path="socket:[21901]" dev="sockfs" ino=21901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 88.178359][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.465'. [ 88.244348][ T40] audit: type=1400 audit(1757185304.894:521): avc: denied { ioctl } for pid=7603 comm="syz.0.467" path="socket:[21909]" dev="sockfs" ino=21909 ioctlcmd=0xb101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.275809][ T40] audit: type=1400 audit(1757185304.924:522): avc: denied { getopt } for pid=7607 comm="syz.0.468" lport=35730 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 88.283299][ T40] audit: type=1400 audit(1757185304.924:523): avc: denied { execmem } for pid=7607 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 88.424459][ T7616] block nbd4: Attempted send on invalid socket [ 88.427096][ T7616] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 88.431828][ T7616] XFS (nbd4): SB validate failed with error -5. [ 88.640896][ T40] audit: type=1400 audit(1757185305.284:524): avc: denied { map } for pid=7638 comm="syz.2.477" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 88.678811][ T7644] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.479'. [ 88.685630][ T7645] input: syz1 as /devices/virtual/input/input13 [ 88.687797][ T7645] input: failed to attach handler leds to device input13, error: -6 [ 88.691143][ T7637] syzkaller0: entered promiscuous mode [ 88.694810][ T7637] syzkaller0: entered allmulticast mode [ 88.700433][ T40] audit: type=1400 audit(1757185305.344:525): avc: denied { read write } for pid=7642 comm="syz.4.478" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 88.706451][ T9] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0 [ 88.709197][ T40] audit: type=1400 audit(1757185305.344:526): avc: denied { open } for pid=7642 comm="syz.4.478" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 88.711925][ T9] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0 [ 88.720910][ T9] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0 [ 88.724887][ T9] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0 [ 88.727184][ T9] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0 [ 88.729601][ T9] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0 [ 88.731976][ T9] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0 [ 88.733069][ T7648] netlink: 'syz.2.480': attribute type 21 has an invalid length. [ 88.735588][ T9] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0 [ 88.737410][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 88.740217][ T9] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0 [ 88.744589][ T7648] netlink: 'syz.2.480': attribute type 21 has an invalid length. [ 88.746160][ T9] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0 [ 88.750397][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 88.758663][ T9] hid-generic 000C:0007:000C.0004: hidraw1: HID v14.24 Device [syz1] on syz0 [ 88.782611][ T7652] syz.2.481 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 88.789510][ T7650] fido_id[7650]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.822997][ T40] audit: type=1400 audit(1757185305.464:527): avc: denied { getopt } for pid=7656 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.839684][ T7659] vxcan1 speed is unknown, defaulting to 1000 [ 88.879051][ T40] audit: type=1400 audit(1757185305.524:528): avc: denied { setcheckreqprot } for pid=7664 comm="syz.4.486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 88.885415][ T7665] SELinux: syz.4.486 (7665) set checkreqprot to 1. This is no longer supported. [ 88.928147][ T40] audit: type=1400 audit(1757185305.574:529): avc: denied { setopt } for pid=7668 comm="syz.2.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 89.210777][ T7694] fuse: Bad value for 'fd' [ 89.213956][ T7694] netlink: 48 bytes leftover after parsing attributes in process `syz.3.493'. [ 89.281796][ T7699] netlink: 'syz.3.495': attribute type 12 has an invalid length. [ 89.284954][ T7684] /dev/sr0: Can't open blockdev [ 90.036146][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.501'. [ 90.103591][ T7719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.502'. [ 90.107897][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.206332][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 90.209261][ T7726] netlink: 40 bytes leftover after parsing attributes in process `syz.0.505'. [ 90.215800][ T7726] 9pnet_virtio: no channels available for device syz [ 90.409854][ T7734] overlayfs: failed to resolve './file0': -2 [ 90.566464][ T7748] loop7: detected capacity change from 0 to 524255232 [ 90.614021][ T7748] netlink: 48 bytes leftover after parsing attributes in process `syz.4.513'. [ 90.620386][ T7748] netlink: 'syz.4.513': attribute type 11 has an invalid length. [ 90.625639][ T7748] 9p: Unknown access argument 18446744073709551615: -34 [ 90.824063][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 91.081738][ T7780] program syz.2.525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.170945][ T7789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.028108][ T7822] netlink: 72 bytes leftover after parsing attributes in process `syz.4.539'. [ 92.115672][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.540'. [ 92.196061][ T7833] netlink: 'syz.0.543': attribute type 13 has an invalid length. [ 92.206696][ T7833] gretap0: refused to change device tx_queue_len [ 92.208889][ T7833] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 92.219665][ T7830] vxcan1 speed is unknown, defaulting to 1000 [ 92.492113][ T7843] could not allocate digest TFM handle blake2s-256-x86 [ 92.666710][ T7857] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.551'. [ 92.911172][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 92.979739][ T7889] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 93.186096][ T7897] vxcan1 speed is unknown, defaulting to 1000 [ 93.267763][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 93.267774][ T40] audit: type=1400 audit(1757185309.914:544): avc: denied { append } for pid=7909 comm="syz.3.566" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 93.268084][ T7910] program syz.3.566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.294925][ T7891] vxcan1 speed is unknown, defaulting to 1000 [ 93.368058][ T7918] block nbd3: Attempted send on invalid socket [ 93.370195][ T7918] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.374641][ T7919] tty tty1: ldisc open failed (-12), clearing slot 0 [ 93.375597][ T7918] block nbd3: Attempted send on invalid socket [ 93.379452][ T7918] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.379522][ T7918] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 93.386480][ T7918] block nbd3: Attempted send on invalid socket [ 93.388496][ T7918] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.391906][ T7918] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 93.395029][ T7918] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 93.397417][ T7918] UDF-fs: Scanning with blocksize 512 failed [ 93.400152][ T7918] block nbd3: Attempted send on invalid socket [ 93.402251][ T7918] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.405626][ T7918] block nbd3: Attempted send on invalid socket [ 93.407551][ T7918] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.410516][ T7918] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 93.415768][ T7918] block nbd3: Attempted send on invalid socket [ 93.417724][ T7918] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.420714][ T7918] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 93.423673][ T7918] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 93.426033][ T7918] UDF-fs: Scanning with blocksize 1024 failed [ 93.428214][ T7918] block nbd3: Attempted send on invalid socket [ 93.430148][ T7918] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.433151][ T7918] block nbd3: Attempted send on invalid socket [ 93.435066][ T7918] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.437944][ T7918] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 93.440839][ T7918] block nbd3: Attempted send on invalid socket [ 93.443411][ T7918] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.446572][ T7918] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 93.449583][ T7918] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 93.452002][ T7918] UDF-fs: Scanning with blocksize 2048 failed [ 93.454484][ T7918] block nbd3: Attempted send on invalid socket [ 93.456494][ T7918] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.459397][ T7918] block nbd3: Attempted send on invalid socket [ 93.461300][ T7918] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.464370][ T7918] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 93.467519][ T7918] block nbd3: Attempted send on invalid socket [ 93.469750][ T7918] I/O error, dev nbd3, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.474912][ T7918] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 93.477873][ T7918] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 93.480278][ T7918] UDF-fs: Scanning with blocksize 4096 failed [ 93.482384][ T7918] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 93.519518][ T7924] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.523011][ T7924] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.782216][ T5976] Bluetooth: hci4: command 0x0405 tx timeout [ 94.062157][ T1998] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 94.222494][ T1998] usb 9-1: Using ep0 maxpacket: 32 [ 94.231438][ T1998] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 94.235722][ T1998] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.240292][ T1998] usb 9-1: config 0 descriptor?? [ 94.246728][ T1998] as10x_usb: device has been detected [ 94.249543][ T1998] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 94.263895][ T1998] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 94.285515][ T40] audit: type=1400 audit(1757185310.934:545): avc: denied { firmware_load } for pid=1998 comm="kworker/0:4" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 94.286447][ T1998] as10x_usb: error during firmware upload part1 [ 94.296108][ T1998] Registered device nBox DVB-T Dongle [ 94.446992][ T840] usb 9-1: USB disconnect, device number 3 [ 94.449709][ T40] audit: type=1400 audit(1757185311.094:546): avc: denied { read } for pid=7966 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.466243][ T840] Unregistered device nBox DVB-T Dongle [ 94.467185][ T840] as10x_usb: device has been disconnected [ 94.470776][ T40] audit: type=1400 audit(1757185311.114:547): avc: denied { accept } for pid=7968 comm="syz.3.585" laddr=fe80::f lport=55808 faddr=::ffff:224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 94.483928][ T7971] ntfs3(sr0): Primary boot signature is not NTFS. [ 94.486366][ T7971] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 94.521359][ T7967] ipip0: entered promiscuous mode [ 94.524899][ T40] audit: type=1400 audit(1757185311.174:548): avc: denied { getopt } for pid=7966 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.674434][ T7981] netem: invalid attributes len -22 [ 94.676071][ T7981] netem: change failed [ 94.678357][ T40] audit: type=1400 audit(1757185311.324:549): avc: denied { write } for pid=7980 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.688735][ T5976] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 94.825052][ T7986] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 95.236243][ T8003] __nla_validate_parse: 6 callbacks suppressed [ 95.236255][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'. [ 95.290924][ T8003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.594'. [ 95.294879][ T8003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.594'. [ 95.327173][ T40] audit: type=1400 audit(1757185311.974:550): avc: denied { connect } for pid=8010 comm="syz.0.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.356670][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'. [ 95.376607][ T8019] I/O error, dev loop4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.386348][ T8019] qnx4: unable to read the superblock [ 95.390831][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'. [ 95.398532][ T8024] ubi31: attaching mtd0 [ 95.407437][ T8024] ubi31: scanning is finished [ 95.409003][ T8024] ubi31: empty MTD device detected [ 95.461341][ T40] audit: type=1400 audit(1757185312.104:551): avc: denied { mount } for pid=8030 comm="syz.0.604" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 95.474204][ T40] audit: type=1400 audit(1757185312.124:552): avc: denied { read } for pid=8023 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.480286][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 95.500444][ T8024] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 95.503084][ T8024] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 95.505486][ T8024] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 95.507708][ T8024] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 95.510037][ T8024] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 95.512246][ T8024] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 95.514774][ T8024] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4078200741 [ 95.517956][ T8024] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 95.523326][ T8037] ubi31: background thread "ubi_bgt31d" started, PID 8037 [ 95.580116][ T40] audit: type=1400 audit(1757185312.224:553): avc: denied { mount } for pid=8038 comm="syz.0.607" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 95.749036][ T8047] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.752171][ T8047] block device autoloading is deprecated and will be removed. [ 95.787082][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 95.830510][ T8052] binder: 8051:8052 ioctl c0306201 200000000680 returned -14 [ 96.512212][ T6062] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 96.591092][ T8083] syzkaller1: entered promiscuous mode [ 96.593338][ T8083] syzkaller1: entered allmulticast mode [ 96.605115][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.621'. [ 96.608885][ T8079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.621'. [ 96.612948][ T8079] netlink: 'syz.4.621': attribute type 18 has an invalid length. [ 96.690021][ T6062] usb 7-1: Invalid ep0 maxpacket: 32 [ 96.693500][ T8095] netlink: 'syz.0.626': attribute type 7 has an invalid length. [ 96.696334][ T8095] netlink: 36 bytes leftover after parsing attributes in process `syz.0.626'. [ 96.699912][ T8095] netlink: 'syz.0.626': attribute type 7 has an invalid length. [ 96.722513][ T8100] overlay: filesystem on ./bus not supported as upperdir [ 96.727047][ T8103] 9pnet_virtio: no channels available for device syz [ 96.729648][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 96.822270][ T6062] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 96.883113][ T6043] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 96.907906][ T8127] syz_tun: entered allmulticast mode [ 96.913574][ T8127] pimreg: entered allmulticast mode [ 96.920144][ T8126] syz_tun: left allmulticast mode [ 96.982894][ T6062] usb 7-1: Invalid ep0 maxpacket: 32 [ 96.986038][ T6062] usb usb7-port1: attempt power cycle [ 97.033749][ T6043] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 97.036392][ T6043] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.040136][ T6043] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 97.043120][ T6043] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 97.045618][ T6043] usb 9-1: Manufacturer: syz [ 97.048232][ T6043] usb 9-1: config 0 descriptor?? [ 97.092209][ T6043] rc_core: IR keymap rc-hauppauge not found [ 97.094100][ T6043] Registered IR keymap rc-empty [ 97.096779][ T6043] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 97.100672][ T6043] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input15 [ 97.254003][ T29] usb 9-1: USB disconnect, device number 4 [ 97.333592][ T6062] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 97.362658][ T6062] usb 7-1: Invalid ep0 maxpacket: 32 [ 97.494517][ T6062] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 97.515338][ T6062] usb 7-1: Invalid ep0 maxpacket: 32 [ 97.517507][ T6062] usb usb7-port1: unable to enumerate USB device [ 97.855759][ T8151] 9pnet_virtio: no channels available for device syz [ 98.581362][ T8176] trusted_key: encrypted_key: insufficient parameters specified [ 98.628357][ T8176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=8176 comm=syz.0.652 [ 98.799830][ T8180] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 98.828828][ T8182] overlayfs: failed to clone upperpath [ 99.080321][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 99.080332][ T40] audit: type=1400 audit(1757185315.724:570): avc: denied { getopt } for pid=8203 comm="syz.0.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.107007][ T8208] openvswitch: netlink: Flow actions attr not present in new flow. [ 99.347129][ T40] audit: type=1400 audit(1757185315.994:571): avc: denied { append } for pid=8229 comm="syz.2.672" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.355543][ T40] audit: type=1400 audit(1757185315.994:572): avc: denied { map } for pid=8229 comm="syz.2.672" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.365423][ T40] audit: type=1400 audit(1757185315.994:573): avc: denied { execute } for pid=8229 comm="syz.2.672" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.401198][ T8232] tipc: Enabling of bearer rejected, media not registered [ 99.406065][ T8232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=8232 comm=syz.0.673 [ 99.407824][ T40] audit: type=1400 audit(1757185316.054:574): avc: denied { read } for pid=8233 comm="syz.4.674" path="socket:[24917]" dev="sockfs" ino=24917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 99.461540][ T8234] openvswitch: netlink: Key type 16144 is out of range max 32 [ 99.513464][ T40] audit: type=1804 audit(1757185316.164:575): pid=8245 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.677" name="/newroot/188/file0" dev="tmpfs" ino=1033 res=1 errno=0 [ 100.009474][ T8274] futex_wake_op: syz.3.686 tries to shift op by 32; fix this program [ 100.048969][ T8278] binder: 8277:8278 ioctl c018620c 200000000000 returned -22 [ 100.365666][ T8323] binder: 8322:8323 ioctl c0306201 200000000080 returned -14 [ 100.382771][ T8325] __nla_validate_parse: 10 callbacks suppressed [ 100.382781][ T8325] netlink: 52 bytes leftover after parsing attributes in process `syz.4.695'. [ 100.437410][ T8334] overlayfs: overlapping lowerdir path [ 100.437575][ T40] audit: type=1400 audit(1757185317.084:576): avc: denied { mount } for pid=8331 comm="syz.2.697" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 100.465136][ T40] audit: type=1400 audit(1757185317.114:577): avc: denied { unmount } for pid=5987 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 100.477197][ T40] audit: type=1400 audit(1757185317.124:578): avc: denied { accept } for pid=8337 comm="syz.0.698" lport=123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.510862][ T40] audit: type=1400 audit(1757185317.154:579): avc: denied { ioctl } for pid=8342 comm="syz.0.700" path="socket:[25104]" dev="sockfs" ino=25104 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.742194][ T8359] overlayfs: failed to clone upperpath [ 100.784519][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 100.818437][ T8374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.844627][ T8379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.712'. [ 100.988096][ T8402] 9pnet_fd: Insufficient options for proto=fd [ 101.136367][ T8417] netlink: 64 bytes leftover after parsing attributes in process `syz.0.726'. [ 101.155852][ T8419] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 101.250126][ T8423] netlink: 40 bytes leftover after parsing attributes in process `syz.3.729'. [ 101.430589][ T5976] Bluetooth: hci4: unexpected subevent 0x0e length: 30 > 15 [ 101.435357][ T5976] Bluetooth: hci4: Unable to find connection for dst 00:00:00:ff:ff:ff sid 0x00 [ 101.530934][ T8442] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 101.564291][ T8442] vxcan1 speed is unknown, defaulting to 1000 [ 101.770614][ T5978] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 102.094172][ T8456] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 102.172384][ T840] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 102.322706][ T840] usb 7-1: Using ep0 maxpacket: 8 [ 102.325859][ T840] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.329583][ T840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.333382][ T840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.337154][ T840] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.342187][ T840] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.345739][ T840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.555769][ T840] usb 7-1: usb_control_msg returned -71 [ 102.558005][ T840] usbtmc 7-1:16.0: can't read capabilities [ 102.567169][ T840] usb 7-1: USB disconnect, device number 7 [ 102.752264][ T5976] Bluetooth: hci4: command 0x0405 tx timeout [ 102.762833][ T8470] netlink: 'syz.0.744': attribute type 21 has an invalid length. [ 102.765353][ T8470] netlink: 156 bytes leftover after parsing attributes in process `syz.0.744'. [ 102.768073][ T8473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.869840][ T8487] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000004 [ 102.895300][ T8488] 9p: Unknown access argument 18446744073709551615: -34 [ 102.985159][ T8495] sctp: [Deprecated]: syz.0.754 (pid 8495) Use of int in maxseg socket option. [ 102.985159][ T8495] Use struct sctp_assoc_value instead [ 102.989357][ T8493] netlink: 'syz.3.753': attribute type 1 has an invalid length. [ 102.995214][ T8493] netlink: 500 bytes leftover after parsing attributes in process `syz.3.753'. [ 102.999937][ T8493] vxcan1 speed is unknown, defaulting to 1000 [ 103.033537][ T8503] tmpfs: Bad value for 'mpol' [ 103.088239][ T8507] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8507 comm=syz.2.757 [ 103.128270][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'. [ 103.131001][ T8514] netlink: 'syz.3.759': attribute type 30 has an invalid length. [ 103.139043][ T8309] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.143736][ T8309] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.146675][ T8309] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.149380][ T8309] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.354596][ T8526] netlink: 20 bytes leftover after parsing attributes in process `syz.0.763'. [ 103.357386][ T8526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.763'. [ 103.370636][ T8530] netlink: 'syz.3.764': attribute type 7 has an invalid length. [ 103.370646][ T8531] netlink: 'syz.3.764': attribute type 7 has an invalid length. [ 103.507415][ T8546] bridge_slave_0: left allmulticast mode [ 103.509344][ T8546] bridge_slave_0: left promiscuous mode [ 103.511484][ T8546] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.516313][ T8546] bridge_slave_1: left allmulticast mode [ 103.518153][ T8546] bridge_slave_1: left promiscuous mode [ 103.519994][ T8546] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.527848][ T8546] bond0: (slave bond_slave_0): Releasing backup interface [ 103.536371][ T8551] program syz.3.771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.553131][ T8541] netlink: 'syz.0.767': attribute type 10 has an invalid length. [ 103.564325][ T8546] bond0: (slave bond_slave_1): Releasing backup interface [ 103.609464][ T8546] team0: Port device team_slave_0 removed [ 103.615196][ T8546] team0: Port device team_slave_1 removed [ 103.618484][ T8546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.620853][ T8546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.624463][ T8546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.626904][ T8546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.692743][ T8541] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 103.753496][ T8593] netlink: 'syz.0.779': attribute type 21 has an invalid length. [ 103.790734][ T8301] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.794604][ T8301] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.797439][ T8301] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.800304][ T8301] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.872947][ T6062] libceph: connect (1)[c::]:6789 error -101 [ 103.875079][ T6062] libceph: mon0 (1)[c::]:6789 connect error [ 103.930816][ T6062] libceph: connect (1)[b::]:6789 error -101 [ 103.935328][ T6062] libceph: mon0 (1)[b::]:6789 connect error [ 104.075449][ T8637] geneve2: entered allmulticast mode [ 104.115415][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 104.115426][ T40] audit: type=1326 audit(1757185320.764:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.4.791" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476d8ebe9 code=0x7ffc0000 [ 104.125686][ T40] audit: type=1326 audit(1757185320.764:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.4.791" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476d8ebe9 code=0x7ffc0000 [ 104.133268][ T40] audit: type=1326 audit(1757185320.764:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.4.791" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8476d8ebe9 code=0x7ffc0000 [ 104.144252][ T40] audit: type=1326 audit(1757185320.764:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.4.791" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476d8ebe9 code=0x7ffc0000 [ 104.147055][ T6062] libceph: connect (1)[c::]:6789 error -101 [ 104.153963][ T6062] libceph: mon0 (1)[c::]:6789 connect error [ 104.154152][ T40] audit: type=1326 audit(1757185320.764:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.4.791" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476d8ebe9 code=0x7ffc0000 [ 104.163514][ T40] audit: type=1326 audit(1757185320.764:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.4.791" exe="/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8476d8ebe9 code=0x7ffc0000 [ 104.170630][ T40] audit: type=1326 audit(1757185320.764:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.4.791" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476d8ebe9 code=0x7ffc0000 [ 104.178115][ T40] audit: type=1326 audit(1757185320.764:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.4.791" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476d8ebe9 code=0x7ffc0000 [ 104.185574][ T40] audit: type=1326 audit(1757185320.764:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.4.791" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8476d8ebe9 code=0x7ffc0000 [ 104.192693][ T40] audit: type=1326 audit(1757185320.764:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.4.791" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476d8ebe9 code=0x7ffc0000 [ 104.194480][ T6062] libceph: connect (1)[b::]:6789 error -101 [ 104.201660][ T6062] libceph: mon0 (1)[b::]:6789 connect error [ 104.221716][ T8653] can0: slcan on ttyS3. [ 104.491907][ T8620] ceph: No mds server is up or the cluster is laggy [ 104.492057][ T8609] ceph: No mds server is up or the cluster is laggy [ 104.567404][ T8674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8674 comm=syz.2.801 [ 105.094982][ T8741] ./cgroup: Can't lookup blockdev [ 105.115771][ T8652] can0 (unregistered): slcan off ttyS3. [ 105.269334][ T8764] overlayfs: failed to clone upperpath [ 105.528306][ T63] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 105.600818][ T8810] __nla_validate_parse: 5 callbacks suppressed [ 105.600830][ T8810] netlink: 60 bytes leftover after parsing attributes in process `syz.3.842'. [ 105.627267][ T8815] raw_sendmsg: syz.3.844 forgot to set AF_INET. Fix it! [ 106.152465][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.853'. [ 106.155348][ T8850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.853'. [ 106.158104][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.853'. [ 106.160643][ T8850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.853'. [ 106.163353][ T8850] netlink: 104 bytes leftover after parsing attributes in process `syz.2.853'. [ 106.513808][ T8855] netlink: 6 bytes leftover after parsing attributes in process `syz.3.855'. [ 106.590253][ T8860] vxcan1 speed is unknown, defaulting to 1000 [ 106.649101][ T8866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.857'. [ 106.651818][ T8866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.857'. [ 106.731987][ T8872] genirq: Flags mismatch irq 35. 00200000 (pcmmio) vs. 00200000 (eth1) [ 106.766772][ T8875] kvm: kvm [8874]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000050) = 0x0 [ 106.829760][ T8882] tmpfs: Unknown parameter '' [ 107.027372][ T8891] pimreg: entered allmulticast mode [ 107.123675][ T8896] program syz.2.866 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.126922][ T8896] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 107.130965][ T8896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.679598][ T8905] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 107.682307][ T8905] SELinux: failed to load policy [ 107.777677][ T8912] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.779816][ T8912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.819185][ T5978] vxcan1 speed is unknown, defaulting to 1000 [ 107.904830][ T8922] hpfs: Bad magic ... probably not HPFS usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 108.234033][ T8934] overlayfs: conflicting options: userxattr,metacopy=on [ 108.256078][ T8936] 9pnet_virtio: no channels available for device syz [ 108.302438][ T8938] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.882'. [ 108.305109][ T8938] netlink: zone id is out of range [ 108.306607][ T8938] netlink: zone id is out of range [ 108.308145][ T8938] netlink: zone id is out of range [ 108.309613][ T8938] netlink: get zone limit has 8 unknown bytes [ 108.642163][ T5978] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 108.761368][ T840] IPVS: starting estimator thread 0... [ 108.802174][ T5978] usb 9-1: Using ep0 maxpacket: 16 [ 108.806095][ T5978] usb 9-1: config 1 interface 0 altsetting 139 bulk endpoint 0x1 has invalid maxpacket 64 [ 108.809015][ T5978] usb 9-1: config 1 interface 0 altsetting 139 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.813710][ T5978] usb 9-1: config 1 interface 0 has no altsetting 0 [ 108.817821][ T5978] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 108.820535][ T5978] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.823011][ T5978] usb 9-1: Product: syz [ 108.824270][ T5978] usb 9-1: Manufacturer: syz [ 108.825671][ T5978] usb 9-1: SerialNumber: syz [ 108.829101][ T8955] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 108.831426][ T8955] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 108.852329][ T8965] IPVS: using max 42 ests per chain, 100800 per kthread [ 109.109390][ T8968] batman_adv: batadv0: Adding interface: gretap1 [ 109.117369][ T8968] batman_adv: batadv0: Interface activated: gretap1 [ 109.175937][ T8290] tipc: Subscription rejected, illegal request [ 109.179691][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 109.179701][ T40] audit: type=1400 audit(1757185325.874:648): avc: denied { setopt } for pid=8980 comm="syz.0.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.304802][ T63] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 109.308606][ T8997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8997 comm=syz.0.900 [ 109.340789][ T5978] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 139 proto 1 vid 0x04B8 pid 0x0202 [ 109.354699][ T5978] usb 9-1: USB disconnect, device number 5 [ 109.361808][ T5978] usblp0: removed [ 109.474769][ T9017] netlink: 'syz.0.906': attribute type 11 has an invalid length. [ 109.477747][ T9017] netlink: 'syz.0.906': attribute type 13 has an invalid length. [ 109.512523][ T9019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9019 comm=syz.0.907 [ 109.516768][ T9019] netlink: 'syz.0.907': attribute type 1 has an invalid length. [ 109.524809][ T9021] input: syz0 as /devices/virtual/input/input16 [ 109.532035][ T40] audit: type=1400 audit(1757185326.224:649): avc: denied { map } for pid=9004 comm="syz.2.902" path="/dev/bus/usb/005/001" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 109.538102][ T9019] bond4: (slave geneve3): making interface the new active one [ 109.542672][ T9019] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 109.545370][ T8307] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.547986][ T8307] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.550576][ T8307] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.555476][ T9019] bond4: entered promiscuous mode [ 109.556981][ T9019] geneve3: entered promiscuous mode [ 109.558639][ T9019] bond4: entered allmulticast mode [ 109.560143][ T9019] geneve3: entered allmulticast mode [ 109.563750][ T9019] 8021q: adding VLAN 0 to HW filter on device bond4 [ 109.566137][ T8307] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.578110][ T9023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9023 comm=syz.4.908 [ 109.666704][ T9037] tipc: Started in network mode [ 109.668674][ T9037] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 109.671875][ T9037] tipc: Enabling of bearer rejected, failed to enable media [ 109.866547][ T9056] can: request_module (can-proto-4) failed. [ 109.871092][ T9056] netlink: 'syz.0.920': attribute type 4 has an invalid length. [ 109.915420][ T9058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=9058 comm=syz.4.918 [ 110.030315][ T9067] tipc: Started in network mode [ 110.034224][ T9067] tipc: Node identity ac1414aa, cluster identity 4711 [ 110.037215][ T9067] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 110.039429][ T9067] tipc: Enabled bearer , priority 10 [ 110.173446][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 110.214767][ T9073] openvswitch: netlink: Tunnel attr 16370 out of range max 16 [ 110.312222][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 110.452207][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 110.480037][ T9081] netlink: 'syz.3.927': attribute type 1 has an invalid length. [ 110.488628][ T40] audit: type=1400 audit(1757185327.184:650): avc: denied { lock } for pid=9087 comm="syz.0.930" path="socket:[30001]" dev="sockfs" ino=30001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 110.500851][ T9093] netlink: 'syz.2.931': attribute type 10 has an invalid length. [ 110.507727][ T9095] netlink: 'syz.3.932': attribute type 10 has an invalid length. [ 110.508283][ T9096] netlink: 'syz.3.932': attribute type 10 has an invalid length. [ 110.518774][ T9093] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 110.528992][ T9095] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 110.565589][ T9104] vcan1: entered allmulticast mode [ 110.631826][ T9119] trusted_key: encrypted_key: insufficient parameters specified [ 110.663178][ T9124] netlink: 'syz.2.941': attribute type 10 has an invalid length. [ 110.666578][ T9124] __nla_validate_parse: 9 callbacks suppressed [ 110.666590][ T9124] netlink: 40 bytes leftover after parsing attributes in process `syz.2.941'. [ 110.704290][ T9126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41744 sclass=netlink_route_socket pid=9126 comm=syz.0.942 [ 110.726679][ T9132] bridge2: entered promiscuous mode [ 110.795024][ T40] audit: type=1400 audit(1757185327.494:651): avc: denied { setopt } for pid=9143 comm="syz.2.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 110.804679][ T40] audit: type=1400 audit(1757185327.504:652): avc: denied { ioctl } for pid=9143 comm="syz.2.949" path="socket:[30033]" dev="sockfs" ino=30033 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 110.851641][ T9157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.953'. [ 110.854437][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 110.881525][ T40] audit: type=1400 audit(1757185327.574:653): avc: denied { append } for pid=9159 comm="syz.3.954" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 110.884407][ T9160] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 110.893119][ T9160] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 110.900141][ T40] audit: type=1400 audit(1757185327.594:654): avc: denied { read } for pid=9165 comm="syz.4.956" path="socket:[29397]" dev="sockfs" ino=29397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.944260][ T9180] 9pnet_virtio: no channels available for device syz [ 110.948561][ T9180] netlink: 'syz.2.960': attribute type 2 has an invalid length. [ 110.965181][ T9182] affs: No valid root block on device sr0 [ 110.986826][ T9189] hsr_slave_0: left promiscuous mode [ 110.989334][ T9189] hsr_slave_1: left promiscuous mode [ 111.033843][ T5977] tipc: Node number set to 2886997162 [ 111.053506][ T9199] misc userio: Begin command sent, but we're already running [ 111.148334][ T9199] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 111.153780][ T9203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.968'. [ 111.156466][ T9203] tipc: Invalid UDP bearer configuration [ 111.156507][ T9203] tipc: Enabling of bearer rejected, failed to enable media [ 111.169616][ T9203] vxcan1 speed is unknown, defaulting to 1000 [ 111.478609][ T40] audit: type=1400 audit(1757185328.174:655): avc: denied { shutdown } for pid=9223 comm="syz.0.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 111.591843][ T9242] SELinux: Context 9'?OG ??oExɜMG WG|=|=)-k{,ܐ@a) [ 111.591843][ T9242] 6đ73 t#ԗೝ"O [ 111.591843][ T9242] -)ORٰʙr|O>C'/o oglh|# (}Š is not valid (left unmapped). [ 111.594536][ T40] audit: type=1400 audit(1757185328.294:656): avc: denied { setopt } for pid=9241 comm="syz.3.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 111.602209][ T9242] SELinux: Context Ϭ is not valid (left unmapped). [ 111.608288][ T9242] SELinux: Context (z}|9A\IS'A"xb v6#Ma7WTa04C>g^ă*x`9 \QeƯ 5\c@#ǝ= Ʈ(;O is not valid (left unmapped). [ 111.614859][ T9242] SELinux: Context 7=0fV>[ Im0ur\#?K䂡$Kt m*g 80ff7< is not valid (left unmapped). [ 111.687262][ T9246] kvm: user requested TSC rate below hardware speed [ 111.977594][ T9257] netlink: 212288 bytes leftover after parsing attributes in process `syz.4.985'. [ 112.154010][ T9274] tmpfs: Unknown parameter '' [ 112.165262][ T40] audit: type=1400 audit(1757185328.864:657): avc: denied { mount } for pid=9273 comm="syz.3.991" name="/" dev="configfs" ino=3093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 112.211852][ T9279] netlink: 536 bytes leftover after parsing attributes in process `syz.4.992'. [ 112.215800][ T9279] netlink: 32 bytes leftover after parsing attributes in process `syz.4.992'. [ 112.311165][ T9289] fuse: Bad value for 'fd' [ 112.347745][ T63] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 112.602418][ T53] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 112.753282][ T53] usb 9-1: Using ep0 maxpacket: 8 [ 112.756721][ T53] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 112.760860][ T53] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 112.764503][ T53] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.767903][ T53] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.771881][ T53] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.774598][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.819557][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1004'. [ 112.819584][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1004'. [ 112.897629][ T9317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=9317 comm=syz.2.1005 [ 112.905822][ T9317] sp0: Synchronizing with TNC [ 112.980195][ T53] usb 9-1: GET_CAPABILITIES returned 0 [ 112.981940][ T53] usbtmc 9-1:16.0: can't read capabilities [ 113.062612][ C1] net_ratelimit: 8 callbacks suppressed [ 113.062624][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 113.142321][ T1998] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 113.208212][ T9295] netlink: 132 bytes leftover after parsing attributes in process `syz.4.999'. [ 113.279077][ T9330] vxcan1 speed is unknown, defaulting to 1000 [ 113.295726][ T53] usb 9-1: USB disconnect, device number 6 [ 113.298091][ T1998] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 113.301083][ T1998] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.303786][ T1998] usb 7-1: Product: syz [ 113.305245][ T1998] usb 7-1: Manufacturer: syz [ 113.306690][ T1998] usb 7-1: SerialNumber: syz [ 113.453791][ T9338] overlayfs: missing 'lowerdir' [ 113.522502][ T9317] sp0: Found TNC [ 113.526937][ T9316] [U] ` [ 113.574937][ T1998] rtl8150 7-1:1.0: couldn't reset the device [ 113.576961][ T1998] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 113.587428][ T1998] usb 7-1: USB disconnect, device number 8 [ 113.616319][ T9354] vxcan1 speed is unknown, defaulting to 1000 [ 113.656261][ T9356] 9pnet_fd: Insufficient options for proto=fd [ 113.836956][ T9364] SELinux: Context system_u:object_r:initrc_exec_t:s0 is not valid (left unmapped). [ 114.017814][ T9397] batman_adv: batadv0: Adding interface: team0 [ 114.019975][ T9397] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.028580][ T9397] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 114.031349][ T9400] Bluetooth: MGMT ver 1.23 [ 114.112227][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 114.212826][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 114.212837][ T40] audit: type=1400 audit(1757185330.914:663): avc: denied { bind } for pid=9405 comm="syz.0.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 114.216948][ T9416] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 114.224465][ T40] audit: type=1400 audit(1757185330.924:664): avc: denied { relabelto } for pid=9415 comm="syz.3.1034" name="card8" dev="devtmpfs" ino=3229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_sonypic_exec_t:s0" [ 114.236554][ T40] audit: type=1400 audit(1757185330.924:665): avc: denied { associate } for pid=9415 comm="syz.3.1034" name="card8" dev="devtmpfs" ino=3229 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_sonypic_exec_t:s0" [ 114.328699][ T9424] pimreg: entered allmulticast mode [ 114.349729][ T9425] qrtr: Invalid version 0 [ 114.402235][ T5977] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 114.563472][ T5977] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.567544][ T5977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 114.570798][ T5977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 114.573829][ T5977] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 114.578708][ T5977] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 114.581672][ T5977] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 114.585014][ T5977] usb 7-1: Manufacturer: syz [ 114.590199][ T5977] usb 7-1: config 0 descriptor?? [ 114.862329][ T5977] rc_core: IR keymap rc-hauppauge not found [ 114.864496][ T5977] Registered IR keymap rc-empty [ 114.866080][ T5977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 114.885277][ T5977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 114.902930][ T5977] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 114.907292][ T5977] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input18 [ 114.914262][ T5977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 114.932480][ T5977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 114.952225][ T5977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 114.972162][ T5977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 114.986494][ T9455] syz_tun: entered allmulticast mode [ 114.992285][ T5977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 115.012255][ T5977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 115.032416][ T5977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 115.052258][ T5977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 115.072162][ T5977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 115.102231][ T5977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 115.125785][ T5977] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 115.129074][ T5977] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 115.142173][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 115.146161][ T5977] usb 7-1: USB disconnect, device number 9 [ 115.159394][ T9458] ------------[ cut here ]------------ [ 115.161846][ T9458] WARNING: CPU: 0 PID: 9458 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 115.166143][ T9458] Modules linked in: [ 115.168088][ T9458] CPU: 0 UID: 0 PID: 9458 Comm: syz.4.1045 Not tainted syzkaller #0 PREEMPT(full) [ 115.173521][ T9458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.177914][ T9458] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 115.180670][ T9458] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 3f fd 81 09 83 fe 0a 0f 86 0a fe ff ff 80 3d ee af 7e 0e 00 75 0b c6 05 e5 af 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 115.188644][ T9458] RSP: 0018:ffffc90006cb77f0 EFLAGS: 00010246 [ 115.191140][ T9458] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 115.194246][ T9458] RDX: 0000000000000000 RSI: 000000000000002a RDI: 0000000000040d40 [ 115.196895][ T9458] RBP: 000000000000002a R08: 0000000000000005 R09: 0000000000000009 [ 115.199336][ T9458] R10: 000000000000002a R11: 0000000000000000 R12: 0000000000040d40 [ 115.201858][ T9458] R13: 1ffff92000d96f13 R14: ffffffff9ae7ca24 R15: 000000000000002a [ 115.204420][ T9458] FS: 00007f8477c596c0(0000) GS:ffff8880d66b8000(0000) knlGS:0000000000000000 [ 115.207213][ T9458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.209270][ T9458] CR2: 00007f8477c16f98 CR3: 000000005d620000 CR4: 0000000000352ef0 [ 115.211653][ T9458] Call Trace: [ 115.212957][ T9458] [ 115.213968][ T9458] ? do_syscall_64+0xcd/0x4c0 [ 115.215394][ T9458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.217564][ T9458] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 115.219485][ T9458] ? kasan_quarantine_put+0x10a/0x240 [ 115.221140][ T9458] ? lockdep_hardirqs_on+0x7c/0x110 [ 115.223237][ T9458] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 115.225434][ T9458] ? policy_nodemask+0xea/0x4e0 [ 115.226990][ T9458] alloc_pages_mpol+0x1fb/0x550 [ 115.228658][ T9458] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 115.230311][ T9458] ? v9fs_fid_get_acl+0x7a/0x120 [ 115.231834][ T9458] ___kmalloc_large_node+0xed/0x160 [ 115.233816][ T9458] ? v9fs_fid_get_acl+0x7a/0x120 [ 115.235503][ T9458] __kmalloc_large_node_noprof+0x1c/0x70 [ 115.237287][ T9458] __kmalloc_noprof.cold+0xc/0x61 [ 115.238793][ T9458] ? __pfx_iget5_locked+0x10/0x10 [ 115.240293][ T9458] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 115.242464][ T9458] v9fs_fid_get_acl+0x7a/0x120 [ 115.244019][ T9458] v9fs_get_acl+0xee/0x530 [ 115.245518][ T9458] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 115.247214][ T9458] v9fs_mount+0x4fd/0xa90 [ 115.248528][ T9458] ? __pfx_v9fs_mount+0x10/0x10 [ 115.250052][ T9458] ? cap_capable+0xb3/0x250 [ 115.251456][ T9458] ? __pfx_v9fs_mount+0x10/0x10 [ 115.253352][ T9458] legacy_get_tree+0x109/0x220 [ 115.254974][ T9458] vfs_get_tree+0x8b/0x340 [ 115.256357][ T9458] path_mount+0x1513/0x2000 [ 115.257754][ T9458] ? __pfx_path_mount+0x10/0x10 [ 115.259221][ T9458] ? kmem_cache_free+0x2d1/0x4d0 [ 115.260751][ T9458] ? putname+0x154/0x1a0 [ 115.262022][ T9458] ? putname+0x154/0x1a0 [ 115.263410][ T9458] ? __x64_sys_mount+0x28d/0x310 [ 115.265140][ T9458] __x64_sys_mount+0x28d/0x310 [ 115.266611][ T9458] ? __pfx___x64_sys_mount+0x10/0x10 [ 115.268260][ T9458] do_syscall_64+0xcd/0x4c0 [ 115.269663][ T9458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.271436][ T9458] RIP: 0033:0x7f8476d8ebe9 [ 115.273386][ T9458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.279546][ T9458] RSP: 002b:00007f8477c59038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.282048][ T9458] RAX: ffffffffffffffda RBX: 00007f8476fc5fa0 RCX: 00007f8476d8ebe9 [ 115.284682][ T9458] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 115.287071][ T9458] RBP: 00007f8476e11e19 R08: 0000200000000580 R09: 0000000000000000 [ 115.289523][ T9458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.291904][ T9458] R13: 00007f8476fc6038 R14: 00007f8476fc5fa0 R15: 00007ffe1303b908 [ 115.294789][ T9458] [ 115.295914][ T9458] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 115.298182][ T9458] CPU: 0 UID: 0 PID: 9458 Comm: syz.4.1045 Not tainted syzkaller #0 PREEMPT(full) [ 115.300953][ T9458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.304757][ T9458] Call Trace: [ 115.305907][ T9458] [ 115.306824][ T9458] dump_stack_lvl+0x3d/0x1f0 [ 115.308258][ T9458] vpanic+0x6e8/0x7a0 [ 115.309520][ T9458] ? __pfx_vpanic+0x10/0x10 [ 115.310954][ T9458] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 115.312820][ T9458] panic+0xca/0xd0 [ 115.314000][ T9458] ? __pfx_panic+0x10/0x10 [ 115.315438][ T9458] ? check_panic_on_warn+0x1f/0xb0 [ 115.317017][ T9458] check_panic_on_warn+0xab/0xb0 [ 115.318716][ T9458] __warn+0xf6/0x3c0 [ 115.320021][ T9458] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 115.321980][ T9458] report_bug+0x3c3/0x580 [ 115.323390][ T9458] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 115.325355][ T9458] handle_bug+0x184/0x210 [ 115.326806][ T9458] exc_invalid_op+0x17/0x50 [ 115.328274][ T9458] asm_exc_invalid_op+0x1a/0x20 [ 115.329827][ T9458] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 115.331955][ T9458] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 3f fd 81 09 83 fe 0a 0f 86 0a fe ff ff 80 3d ee af 7e 0e 00 75 0b c6 05 e5 af 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 115.337818][ T9458] RSP: 0018:ffffc90006cb77f0 EFLAGS: 00010246 [ 115.339692][ T9458] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 115.342246][ T9458] RDX: 0000000000000000 RSI: 000000000000002a RDI: 0000000000040d40 [ 115.345150][ T9458] RBP: 000000000000002a R08: 0000000000000005 R09: 0000000000000009 [ 115.347919][ T9458] R10: 000000000000002a R11: 0000000000000000 R12: 0000000000040d40 [ 115.350726][ T9458] R13: 1ffff92000d96f13 R14: ffffffff9ae7ca24 R15: 000000000000002a [ 115.353536][ T9458] ? do_syscall_64+0xcd/0x4c0 [ 115.355217][ T9458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.357374][ T9458] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 115.359640][ T9458] ? kasan_quarantine_put+0x10a/0x240 [ 115.361563][ T9458] ? lockdep_hardirqs_on+0x7c/0x110 [ 115.363324][ T9458] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 115.365450][ T9458] ? policy_nodemask+0xea/0x4e0 [ 115.367108][ T9458] alloc_pages_mpol+0x1fb/0x550 [ 115.368799][ T9458] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 115.370588][ T9458] ? v9fs_fid_get_acl+0x7a/0x120 [ 115.372272][ T9458] ___kmalloc_large_node+0xed/0x160 [ 115.374100][ T9458] ? v9fs_fid_get_acl+0x7a/0x120 [ 115.375889][ T9458] __kmalloc_large_node_noprof+0x1c/0x70 [ 115.377911][ T9458] __kmalloc_noprof.cold+0xc/0x61 [ 115.379729][ T9458] ? __pfx_iget5_locked+0x10/0x10 [ 115.381491][ T9458] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 115.383546][ T9458] v9fs_fid_get_acl+0x7a/0x120 [ 115.385304][ T9458] v9fs_get_acl+0xee/0x530 [ 115.386899][ T9458] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 115.388881][ T9458] v9fs_mount+0x4fd/0xa90 [ 115.390418][ T9458] ? __pfx_v9fs_mount+0x10/0x10 [ 115.392167][ T9458] ? cap_capable+0xb3/0x250 [ 115.393753][ T9458] ? __pfx_v9fs_mount+0x10/0x10 [ 115.395299][ T9458] legacy_get_tree+0x109/0x220 [ 115.397002][ T9458] vfs_get_tree+0x8b/0x340 [ 115.398575][ T9458] path_mount+0x1513/0x2000 [ 115.400212][ T9458] ? __pfx_path_mount+0x10/0x10 [ 115.401943][ T9458] ? kmem_cache_free+0x2d1/0x4d0 [ 115.403712][ T9458] ? putname+0x154/0x1a0 [ 115.405247][ T9458] ? putname+0x154/0x1a0 [ 115.406740][ T9458] ? __x64_sys_mount+0x28d/0x310 [ 115.408479][ T9458] __x64_sys_mount+0x28d/0x310 [ 115.409957][ T9458] ? __pfx___x64_sys_mount+0x10/0x10 [ 115.411534][ T9458] do_syscall_64+0xcd/0x4c0 [ 115.412874][ T9458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.414611][ T9458] RIP: 0033:0x7f8476d8ebe9 [ 115.415992][ T9458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.421669][ T9458] RSP: 002b:00007f8477c59038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.424131][ T9458] RAX: ffffffffffffffda RBX: 00007f8476fc5fa0 RCX: 00007f8476d8ebe9 [ 115.426490][ T9458] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 115.428902][ T9458] RBP: 00007f8476e11e19 R08: 0000200000000580 R09: 0000000000000000 [ 115.431266][ T9458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.433631][ T9458] R13: 00007f8476fc6038 R14: 00007f8476fc5fa0 R15: 00007ffe1303b908 [ 115.435972][ T9458] [ 115.437605][ T9458] Kernel Offset: disabled [ 115.438904][ T9458] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:58:08 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643ab5 RDI=ffffffff9b1120a0 RBP=ffffffff9b112060 RSP=ffffc90006cb7160 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9b112060 R15=ffffffff85643a50 RIP=ffffffff85643adf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8477c596c0 ffffffff 00c00000 GS =0000 ffff8880d66b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8477c16f98 CR3=000000005d620000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000bfdfdfdf Opmask03=0000000000000000 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005632443d69b0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005632443c82b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005632443c0f60 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73732541374d8383 7373254152f556c3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737273737326 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 332e746567646167 2f332e6364755f79 6d6d75642f6d726f 6674616c702f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355420033382f33 30322f30383d4550 0000003135313431 3d4d554e51455300 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c3e216f5f5a0033 1f415643173d3675 2f732531717d7b6e 780e14080300074e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7e7e7f7f7f7b7f7b 3f7f7f777f7d777f 7f7f7f7f7f7f7f7f 7e7f5f5f1b7f376f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 44006b3d454d3d45 5000323531340030 4d554e513d450037 0035353134313d49 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000370033312f33 30002f3031000030 0000003135310031 0035303034313d00 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000000 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8df4409e RDI=ffffffff8c162980 RBP=0000000000000001 RSP=ffffc900036df840 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b9403dd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4edb8a5880 ffffffff 00c00000 GS =0000 ffff8880d67b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8477c38d58 CR3=0000000050de9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080102110 Opmask01=0000000000000000 Opmask02=000000007fefdeef Opmask03=0000000000000000 Opmask04=000000000000fcfe Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 616c702f73656369 7665642f7379732f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d726f6674616c70 2f73656369766564 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005632445bcc28 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005632443c5fa0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4edb1f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffff00ffffff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffff0000000000ff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464325620580c94 64643256203f1d54 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 64643256203f1d5c 64643256203f1d5c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 317475706e692f30 63722f63722f302e 303a312d372f312d 372f376273752f32 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38317475706e692f 3063722f63722f30 2e303a312d372f31 2d372f376273752f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e6463685f796d 6d75642f6d726f66 74616c702f736563 697665642f737973 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000065676e616863 0000000000000021 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73616c632f737973 2f004a141b034710 79732f002f6d6555 7379736275732f73 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7fff7f73ff7f7bff 6f7f7f577b7fff7c 7f7f7f7b7f7ffff7 7f7f7f6f7d7ffff3 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563244183610 0000000000000041 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563227183603 0000000000000021 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001711c9 RBX=0000000000000002 RCX=ffffffff8b93fc29 RDX=0000000000000000 RSI=ffffffff8de50a30 RDI=ffffffff8c162980 RBP=ffffed1003bd7910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801debc880 R14=ffffffff90ab5290 R15=0000000000000000 RIP=ffffffff8b93e78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007feb5a68af98 CR3=000000005b6f5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=000000000000003f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee3c0ec76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee3c0ec76 00007ffee3c0ec7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb59812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb59812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb59812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb59812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb59812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb59812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb599974a8 00007feb599974a0 00007feb59997498 00007feb59997470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb5a4fd100 00007feb59997460 00007feb59997478 00007feb599974c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb599974b8 00007feb599974b0 00007feb599974a8 00007feb599974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=0000000000000003 RCX=ffffc90004d40001 RDX=ffffc90004d3fa60 RSI=ffffffff8c162900 RDI=ffffffff8c162940 RBP=0000000000000001 RSP=ffffc90004d3f8c0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=00000000000061ee R12=ffffc90004d3fa08 R13=ffffc90004d3f9b8 R14=ffffc90004d3fa58 R15=ffffc90004d3f9ec RIP=ffffffff8b9403d3 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007feb5a68b6c0 ffffffff 00c00000 GS =0000 ffff8880d69b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007feb5a66ad58 CR3=000000005b6f5000 CR4=00352ef0 DR0=0000000000000007 DR1=000000000000000b DR2=0000000000000002 DR3=0000000000000009 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=000000000000003f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee3c0ec76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee3c0ec76 00007ffee3c0ec7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb59812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb59812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb59812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb59812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb59812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb59812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb599974a8 00007feb599974a0 00007feb59997498 00007feb59997470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb5a4fd100 00007feb59997460 00007feb59997478 00007feb599974c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb599974b8 00007feb599974b0 00007feb599974a8 00007feb599974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000