last executing test programs: 1m2.4119878s ago: executing program 0 (id=608): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x200}}, './file1\x00'}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xa0d}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3f8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x4c}}, 0x24008004) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000300)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf25020202401400020077673100000000000000000000000000090003007379e72e907200000900010073797a3100000000"], 0x40}, 0x1, 0x40030000000000, 0x0, 0x40004}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="8d0000008000"}) renameat2(r0, &(0x7f0000000080)='./file1\x00', r0, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x725}, 0x1c) 1m2.242648063s ago: executing program 0 (id=609): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f00000002c0)) fchmod(r0, 0x80) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0xae, 0x7, 0x8, 0x28000000000000, 0x2, 0xffffffffffffffff, 0x8921, 0x2, 0x1, 0xd, 0x800, 0xb8, 0x5, 0x9, 0x33e]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r2, 0x6d3}, 0x8) 1m2.144306566s ago: executing program 0 (id=612): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x54, r5, 0xfe12482fe0801d67, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0xa7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4880}, 0x7494df9db3e7cfc3) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) 1m1.754562491s ago: executing program 0 (id=615): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1b, 0xa, 0x0, "001e2974ea7e3406e2d701be4a6886ce4fb12589bf80d73ae100867a392f08d8", 0x47504a4d}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x5a, 0xa, 0x2, "3258ae1e008faa00000000000000000000000000000100000000271e00000020", 0x48524742}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000400)=0xe8) clock_settime(0x8d71ca88fffffffd, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x20, 0x700, 0x97, 0x313f, {{0x19, 0x4, 0x0, 0x1, 0x64, 0x67, 0x0, 0x66, 0x0, 0x0, @private=0xa010102, @local, {[@rr={0x7, 0x17, 0x5e, [@local, @local, @empty, @private=0xa010100, @loopback]}, @lsrr={0x83, 0x1b, 0xd, [@broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x34}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xd5, 0x0, 0x0, [0x9]}, @lsrr={0x83, 0xb, 0x8a, [@local, @empty]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=@delchain={0x68, 0x65, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0x5, 0x1}, {0x3, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x8e, 0xe0}}, @TCA_CHAIN={0x8, 0xb, 0x9f}, @filter_kind_options=@f_bpf={{0x8}, {0x24, 0x2, [@TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}, @TCA_CHAIN={0x8, 0xb, 0xd}]}, 0x68}, 0x1, 0x0, 0x0, 0x820}, 0xc000) r6 = getgid() mount$bpf(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000600), 0x1004480, &(0x7f0000000640)={[{@uid={'uid', 0x3d, r3}}, {@mode={'mode', 0x3d, 0x6}}, {@gid={'gid', 0x3d, r6}}], [{@appraise}, {@euid_gt={'euid>', r3}}]}) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) write$binfmt_register(r7, &(0x7f00000006c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x2, 0x3a, '\x00', 0x3a, '+', 0x3a, '', 0x3a, [0x46, 0xc]}, 0x24) 1m1.164982327s ago: executing program 0 (id=617): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 1m0.824382487s ago: executing program 0 (id=619): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="c92d31973afefe3a3dbf750e077611f511c83c42c7a08cccbe06462199980986db6d059c360b7cedc99c027f91e4345fe923dc37a467cb6e41144b8ced746dd2e807d2167f2c9e71e1542a4fe21a8f79fb67c0cec59cb9475cf88399252bded9996c890857c9292c415ca3910e5544cea2bacf15e3acd9e60bba10cae93b8dbb374b0f2b5526c5f0a419254ae0e59330297445beb1ce30b4679c86b2bf048c352e9843b849acfb93040ec0129e4ff799921007cfd9e5fa69b7a55d4c52674faafe8cadea7cdfb60b66173f206f54ed42060ab9", 0xd3}, {&(0x7f0000000240)="6e43a717733bb59e900f593170cc234854826da37dbfc0b9089e036a1ab7258b3e67008ab219a5ea59269cda7d8e89659def62c9c1274444b2b2b8ab74a342ac3cedbe9d1ebb245a91bf89495d3256bb5d13ba5aeb862acfa83ecdb86f61fe2f8399279af384d5a1a73dec1a252989739af694b61e38e00f3073897294ff8c03e484", 0x82}, {&(0x7f00000001c0)="32ef32ec88baae9cf4495bb57d0435f8980d4dddc6a671c521cab5b6b14faa922b9d2e4adf0bf95220306ba738e320dfb29ca618befee04cc9b7204554", 0x3d}, {&(0x7f00000003c0)="393452266e72837d76523b93f3058ea810a4a337482f98cbf724a0f773f8efcecd29350729158fdc0d3fb9112583d2ed3865d29651ceac12a0430132c0f127763fb80a5655483bed305f3cdd3a650cffe2aba5aff5aec41fc7243834a4789bcf1227c124ce26bb2ab2a36148dcb67b7c79b2f6cdd92774c6365c154bc4acaafda7d5753f831a6ad2eeae7f6ab1b3518010cbc1d1df12198ba8800f15ae3824ad6eb190ca24ba421a13f96d89ddfa89b3c7626c2c2e", 0xb5}, {&(0x7f0000000600)}], 0x5, 0x200, 0x0) 1m0.73041916s ago: executing program 32 (id=619): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="c92d31973afefe3a3dbf750e077611f511c83c42c7a08cccbe06462199980986db6d059c360b7cedc99c027f91e4345fe923dc37a467cb6e41144b8ced746dd2e807d2167f2c9e71e1542a4fe21a8f79fb67c0cec59cb9475cf88399252bded9996c890857c9292c415ca3910e5544cea2bacf15e3acd9e60bba10cae93b8dbb374b0f2b5526c5f0a419254ae0e59330297445beb1ce30b4679c86b2bf048c352e9843b849acfb93040ec0129e4ff799921007cfd9e5fa69b7a55d4c52674faafe8cadea7cdfb60b66173f206f54ed42060ab9", 0xd3}, {&(0x7f0000000240)="6e43a717733bb59e900f593170cc234854826da37dbfc0b9089e036a1ab7258b3e67008ab219a5ea59269cda7d8e89659def62c9c1274444b2b2b8ab74a342ac3cedbe9d1ebb245a91bf89495d3256bb5d13ba5aeb862acfa83ecdb86f61fe2f8399279af384d5a1a73dec1a252989739af694b61e38e00f3073897294ff8c03e484", 0x82}, {&(0x7f00000001c0)="32ef32ec88baae9cf4495bb57d0435f8980d4dddc6a671c521cab5b6b14faa922b9d2e4adf0bf95220306ba738e320dfb29ca618befee04cc9b7204554", 0x3d}, {&(0x7f00000003c0)="393452266e72837d76523b93f3058ea810a4a337482f98cbf724a0f773f8efcecd29350729158fdc0d3fb9112583d2ed3865d29651ceac12a0430132c0f127763fb80a5655483bed305f3cdd3a650cffe2aba5aff5aec41fc7243834a4789bcf1227c124ce26bb2ab2a36148dcb67b7c79b2f6cdd92774c6365c154bc4acaafda7d5753f831a6ad2eeae7f6ab1b3518010cbc1d1df12198ba8800f15ae3824ad6eb190ca24ba421a13f96d89ddfa89b3c7626c2c2e", 0xb5}, {&(0x7f0000000600)}], 0x5, 0x200, 0x0) 38.751505256s ago: executing program 3 (id=294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x43000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0xc, 0x0, 0x0, 0xc03d, 0xfffffffffffffffd}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x0, 0x0, 0x30, 0x0, [{@local}, {}, {@private}]}}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r4, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000280)=""/79, 0x4f}], 0x3) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x5, 0x39676c, 0x3224c8}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c00000000201010200000000000000000300000108000340000000041c0010800800024000000007080003400000000808000240000000030c001980"], 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 35.351466747s ago: executing program 4 (id=812): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x800) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x82000, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r3 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x22, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) close(r1) syz_usb_disconnect(r2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000540)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8d, "cbdb9b8fb25779"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001540)={r4, 0x3}) 33.922940847s ago: executing program 4 (id=818): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x2b, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000105362000140000102030109022d0001010700060904008001030100000921020001012275070905810300040704060b05020320000701388a55f1e85b681c535a22404a75ef64d5c4c89ad9ab9d2e6c5daae0f9bb4004ca396f098e817d2b75e509495dc54673975089a185ed006cdba81617d7cc2f383c265bcf380ce1d39bc489771e3d29f465d0eed4551c4d81edc70dd3b368042edca4d8de3d158473e846ac9ca4"], &(0x7f0000000640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x9e, 0x17, 0x1, 0x10, 0x45}, 0x134, &(0x7f0000000680)=ANY=[@ANYBLOB="050f34010303100ac21003c3aac28dc3768c49dab0547165e14d5f6691709b5eba56c9b7b174fa92b435b5808dd7c8d2f7792ce7fd07504e740da5f098fd6393cb3b6f89baa2bb6953a764eaba7044c4058103eea3ffa53f45d91afad86842661a6b7f645335f9b212e1215fa61340be66a522eefa4d23c444e479dea849dfd37b3c7148298814c9b4d7ce5386e883b6b5e0a899858870279478b1dac6aacb59108399b8a6b0a9cfb97eed52c3406e88f1ad13dd884a6e7c4e43bc7dba5b587eeb27024d6a1003bf87b2da0662a04df9185efd62d8357933d63f72116977aa00f5eca32cb1d58725f208b1ce73c1e71509ee776c3b80157f7a6dfab013608648a6057672634cb23af04161a5743c87428ec4ec3fdce2f199cf7096beea0f492a6b53fd1fbb0f6242def7f5306b4c00000000000000000000000000000000a27077baeaaa176ff57fc2f1a7ed844d7ced880ff62575218789ea4feddb95364bbdc1e3e0d060d5f21eeddec7667712cc8838249bac"], 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc04}}, {0x1c, &(0x7f0000000380)=@string={0x1c, 0x3, "72a5c88656df434f2110ae245cb7f764f2419797ff46e55fc0d7"}}, {0xeb, &(0x7f0000000540)=@string={0xeb, 0x3, "b4103f3a2984be7c3f377cf5f30a326cd5cd21bc686d51ef9da51b3b5c5126935b8d6dae370fc8f606c611b38ac36921887a253744cb46719ebebccb1a42c4bb834a0f17ce618fb410f308d5cb109c2edb11b5b9b74bf71a2c9f433bd77160fb4efcfdc065f96861c00d3bf5d6dcc2bde26fe108ff658f44472f643c102164df2ba3c117925c3804e2459c255bfcbb6b742363f8de2f883be846d39956a6db67acafc500b5ca16f79a03ef1feada9f7da5c41ba20925eede59e9ae5f371852ba5acc74d7c17dc52f78a2f0288fe4c291ce8127a289092c0e132b5f9f71ea8a506825e4fb46d34c829c"}}]}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000180)={@local}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@hyper}) close_range(r1, r1, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) pipe(&(0x7f00000001c0)) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000002000/0x2000)=nil) r5 = syz_open_dev$hiddev(&(0x7f0000000040), 0x7ff, 0x4c0041) r6 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="40005200060010", @ANYRESOCT=r5, @ANYBLOB="265eb22f1759e4a701427d4f1e7b0c8695e56979a967dd0ced6caf20aca8ec144044bb71bab7d3de78c305e28281786cf6759e7738e1d19d5f88124a91907b88da389edc2eab9f81750667abdea8dc9dc66d3f95e93ee462455e13b28df0c7ec717aebc2b65a6fce3dff07fb9dea817112ad9a32fa9d80cd7eb148ffb3f5159aa0f66f826323adeb164d9437a290e9f5d97fb5074bc7d60d604a391c4d23496b9ba32dc7"], 0x24}}, 0x0) r8 = fcntl$dupfd(r5, 0x406, r5) madvise(&(0x7f00004b4000/0x2000)=nil, 0x2000, 0x13) ioctl$HIDIOCGPHYS(r8, 0x80404812, &(0x7f0000000000)) 33.014437825s ago: executing program 4 (id=825): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x19}, 0x1c, 0x0, 0x0, &(0x7f0000002680)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000013c0)="8cc3b3df84eef7496ca0b4fe12", 0xd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000500)="6245192bf82f9ddb", 0x8}, {0x0}], 0x2}}], 0x3, 0x28048085) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000000)={0xfffeffff}) sendmmsg$sock(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}}], 0x2, 0x40080) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x5000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$SOUND_MIXER_READ_CAPS(r3, 0x80044dfc, &(0x7f0000000080)) 32.842189537s ago: executing program 4 (id=827): r0 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) (async) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r2, 0xedaa7000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8, 0xffff, 0xc0, 0x1, 0x9d, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x1, @void, @value, @void, @value}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000580)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\xfb\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^\xbb\x06\xc92\x01\xd92\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8v\x10\xe1R \x9a^\xdfqpc\x00\x00\x00\x00\x00\x00&>\x94\x882\x1c_j\x15{ \xf08\xdf\x84\xe64{4\x81\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xa3=\xab\xf1\xf5\r\xb6\f\xfcS9\xae.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/', 0x0) r3 = fcntl$getown(r0, 0x9) sched_setscheduler(r3, 0x0, &(0x7f0000000100)=0x9) 32.784588882s ago: executing program 4 (id=828): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) read(r2, &(0x7f0000000040)=""/71, 0x47) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000003080101000000000000000003000009050003003a0000003c000480080002400000000008000240df05007b08000240000007ff08000240000000330800014000000000080001400000000508000140000000c10500030084"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x50}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x46, 0x0, &(0x7f0000001a80)) madvise(&(0x7f00008cf000/0x1000)=nil, 0x1000, 0x64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000180)=""/222, 0xde}, {&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f0000000000)=""/94, 0x5e}, {&(0x7f00000003c0)=""/196, 0xc4}, {&(0x7f00000004c0)=""/230, 0xe6}, {&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000005c0)=""/105, 0x69}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/160, 0xa0}], 0xa, 0x3, 0x0) 32.567958105s ago: executing program 4 (id=829): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) r1 = syz_io_uring_setup(0xd55, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) io_uring_enter(r1, 0x14, 0xb9c, 0x3, 0x0, 0xffffffd5) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_pedit={0xf00, 0xd, 0x0, 0x0, {{0xa}, {0xe84, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x7, 0xd6e, 0x0, 0x8, 0x1}, 0x1, 0x9, [{0xe, 0x2, 0x8, 0x7, 0x5d2d, 0xfffffff8}, {0x3e4, 0x5, 0x5, 0x4, 0x3, 0x4}, {0x40, 0x4, 0x80000000, 0x314, 0x8, 0x9}, {0x5, 0x9, 0x6, 0x0, 0x5, 0xe}]}, [{0x80, 0x400, 0x669, 0x2, 0x0, 0x17}, {0x4, 0xc5, 0x3, 0x1, 0x9, 0xfff}, {0x7f, 0x5, 0x0, 0x7, 0x1, 0x3}, {0x18, 0x0, 0x3, 0x44c, 0x6, 0x5}, {0x0, 0x200, 0x441, 0x8, 0x2}, {0xa5f0, 0x5, 0x2, 0x7, 0xf8c4, 0x14467d65}, {0x8, 0xa0bf, 0xf5, 0x1, 0x90, 0x89b}, {0x1, 0x8, 0x10001, 0x7f, 0x9, 0xc}, {0x3, 0xb, 0x6, 0x4, 0x2, 0x40}, {0x2, 0xfffff34b, 0xfffffffa, 0x7829, 0x3, 0x7}, {0xffff68e9, 0x7, 0x5, 0x0, 0xa1}, {0x9a, 0x8, 0xffffffff, 0x3, 0x8, 0x1}, {0x1, 0x5, 0xfffffff9, 0x6, 0x7, 0xd3c}, {0x4, 0xa7, 0x9, 0x8, 0x8, 0x2}, {0x3, 0x7ff, 0x5, 0x6, 0x5, 0x2}, {0x5, 0xa780, 0x6, 0xfffff66c, 0xfe, 0x88f}, {0x3, 0xba2, 0x73, 0xfffffff7, 0x3aa9, 0x3ff}, {0x1, 0x2, 0xe, 0x10, 0x7ff, 0x7}, {0x10, 0x81, 0x6, 0xbc60, 0x3, 0x4}, {0x8, 0x5, 0x8, 0x1, 0x9, 0x1}, {0x10000, 0x6, 0x0, 0x8, 0x7, 0x8001}, {0x4, 0x6, 0x6, 0x0, 0xd, 0x6}, {0x9, 0x9, 0xb, 0x9, 0x9}, {0x4, 0x6, 0xae9, 0x4, 0x7, 0x53}, {0x6, 0x80000000, 0x91, 0x7f, 0x7, 0x8d4a}, {0x0, 0x9, 0x401d, 0xb5eb, 0x0, 0xa}, {0x8, 0x5, 0x10, 0x80000000, 0xffffffff, 0xffffffff}, {0x1, 0xca67, 0xf2f3, 0x5, 0x8, 0x3}, {0xfff, 0x7f, 0xfffffffe, 0xd, 0x4, 0x6}, {0x80000001, 0x400, 0xffa, 0x2, 0x80000001, 0x8b8}, {0xffffffff, 0x4, 0x3, 0xb6f}, {0x41, 0x4, 0x2, 0x5222, 0x0, 0x68de}, {0x0, 0xc, 0x9, 0xc, 0x7, 0xf}, {0x1b38, 0x10000, 0x7f03, 0x81, 0xc, 0x4}, {0x2, 0xac57, 0xfffffff8, 0x0, 0x5, 0x40}, {0x2f, 0x6, 0x9, 0xfffffffb, 0x4, 0x81}, {0xb, 0x49, 0x8000, 0x101, 0x6, 0xd9}, {0x9, 0x6, 0x0, 0x5, 0x0, 0x5}, {0x4, 0x8, 0x5, 0xb22b, 0xd, 0x3}, {0x3, 0xffffffff, 0x1ff, 0x6, 0xa, 0x40}, {0x9, 0x3, 0x4, 0x8000, 0x5, 0x2096}, {0x20, 0x3d54, 0x5, 0x7, 0xe59, 0x7fff}, {0x3, 0x7fff, 0x6, 0x9}, {0x8, 0x8f, 0x4, 0x0, 0xe, 0x52}, {0x8, 0x4a, 0x5, 0x8, 0x848, 0x3}, {0x0, 0x2, 0x4, 0xfffff081, 0x4, 0x9}, {0x8, 0x5, 0xff, 0x1, 0x800}, {0xbb, 0x8, 0xc34, 0x49cfac7, 0x5, 0xffff643f}, {0x10001, 0x1, 0xf170, 0x12d4, 0x80000001, 0x3}, {0x2000, 0x5, 0x1000, 0x40, 0x7, 0x4}, {0x8, 0x5, 0x7fff, 0x4, 0x5b, 0xfffffffc}, {0x2, 0x6, 0x10001, 0x400, 0x5, 0x7}, {0x6, 0x8, 0x0, 0xb740, 0x7, 0x2}, {0xfffff36d, 0x5, 0x0, 0x1, 0xfffffffd, 0x8}, {0x9, 0x0, 0x2, 0x1, 0x7, 0x6}, {0x4, 0xfff, 0x7, 0x31e0, 0xfffffff8, 0x7ff}, {0x80000001, 0x8001, 0x48f82105, 0x1, 0x7fff, 0x8}, {0x2, 0x9b0, 0xf73, 0x6f, 0x1, 0x7}, {0x3, 0xfffff20e, 0x5348, 0x10, 0x2, 0x3}, {0x400, 0x3b30ff7, 0xa905, 0x9, 0x4}, {0x1ff, 0xe, 0x9020, 0x1c59eaa7, 0x1}, {0x5, 0x3, 0x7, 0xcb, 0x5, 0x7}, {0x8001, 0x4, 0x1, 0x4, 0x3}, {0x0, 0x8, 0x800, 0xeb, 0x8, 0x5}, {0x4, 0xfffffffd, 0x2, 0x0, 0x4, 0xfffffffb}, {0x0, 0x5, 0x9, 0xd, 0x5, 0xfffffff7}, {0x1bc8, 0x100, 0x9, 0x7fff, 0x6, 0x6}, {0x8, 0x4, 0x1, 0x401, 0x2, 0x6}, {0x4ad0, 0x2, 0xfffffff7, 0x80000001, 0x10000, 0x4}, {0x2, 0x40, 0x81, 0x0, 0xffffff81}, {0x0, 0x6, 0x100, 0x98, 0x9, 0x81}, {0x0, 0x274c1e98, 0x7ff, 0xff, 0x400, 0x2}, {0x9, 0x2, 0x7, 0x5, 0x4, 0x3f84}, {0x28, 0x8001, 0x80000001, 0x9, 0x6, 0x9}, {0x3, 0x7, 0x8240, 0x401, 0x6, 0x8}, {0xd0, 0x8, 0x97ef, 0x8a3b, 0x7, 0x9}, {0x2, 0x6, 0x8, 0x8df, 0x0, 0x8}, {0x0, 0x6, 0x200, 0x9, 0x28, 0x9}, {0x3, 0x5, 0xd, 0x6, 0x7, 0x3}, {0x0, 0x3f7a5f00, 0x6, 0x7fff, 0x10000, 0x1}, {0x80, 0x81, 0x9, 0x9, 0x3, 0xffffffff}, {0x10000, 0x6, 0x4, 0x7, 0x10000, 0x3}, {0x2, 0x9, 0xfffffffc, 0xfffffe01, 0x800, 0x80}, {0x8, 0x504, 0xbda7, 0x0, 0xfff, 0x1dab}, {0x2, 0x3ff, 0x1, 0x2, 0x80, 0x7ed4}, {0x5, 0x6, 0xe26f, 0x100, 0x4, 0x4}, {0x1, 0x2, 0x39d, 0x3ff, 0x97b3}, {0xfffffb81, 0xae, 0x4, 0x7201, 0x0, 0x9}, {0x10000, 0x8, 0x3dd, 0x3, 0x7e, 0x4}, {0x5, 0xfffffffe, 0x2, 0x6, 0x800, 0x9000000}, {0x7f, 0x9b, 0x1000, 0x9, 0xb, 0x9739}, {0x0, 0x8001, 0x3, 0x8, 0x1200, 0x2}, {0x80000001, 0x8001, 0x6, 0x4, 0x6, 0xe57}, {0x80, 0x3, 0xfff, 0x9, 0x8, 0x936f}, {0x1000, 0x0, 0x1, 0xffff, 0x3, 0x9}, {0x401, 0xf1, 0xe1c, 0x10, 0x200000, 0x93a}, {0xe, 0xffffffff, 0x4, 0x80000001, 0x1, 0x4}, {0x1, 0x3, 0x1, 0x400, 0x100, 0x1000}, {0x8, 0x0, 0x6, 0x0, 0x6, 0x1}, {0x9, 0x9, 0x4, 0x0, 0xee, 0x3}, {0x5e6c, 0x8, 0x80d5, 0x9, 0x9, 0x1}, {0x3, 0x9, 0xf, 0xc9b, 0x2, 0x7fff}, {0x81, 0x9, 0x3, 0x80000000, 0x8, 0x6}, {0x5, 0x0, 0x1, 0x5, 0x1ff, 0x7ff}, {0x2, 0x8, 0x0, 0x6, 0x8, 0x4}, {0x8, 0x7, 0x2f, 0x401, 0x3, 0x5}, {0x200, 0x4, 0x28, 0x10001, 0x8, 0x1}, {0x9, 0x1, 0x1000, 0x5, 0x8, 0x2}, {0x32, 0x6, 0x7ff, 0x10, 0x6, 0x7fffffff}, {0x4c, 0x0, 0x0, 0xffff8001, 0x8, 0x9f95}, {0x8, 0x2, 0x2a99, 0x1, 0x0, 0x6}, {0x7, 0xe6d, 0x7, 0xa0, 0xb, 0x8}, {0x5, 0x27a8, 0x6, 0xa, 0xfffffff7, 0x40}, {0x401, 0xffffffff, 0x7ff, 0x5, 0x9, 0x4}, {0xff68, 0xff, 0xc, 0x9, 0x374, 0x5}, {0xcf, 0x1, 0x8, 0x6, 0x4, 0x8}, {0x8, 0x6f2, 0x3, 0x80000000, 0x4f15, 0x3}, {0x7, 0xffff, 0x2, 0x200, 0x5, 0x9}, {0x0, 0x5, 0x6, 0x5, 0x1, 0x80}, {0xfffffffa, 0x3, 0x7, 0x1, 0x2, 0x5}, {0xfffffffb, 0xe9, 0x8, 0x7f, 0x2, 0x8}, {0x3, 0x1, 0x1, 0x8, 0x0, 0x5}, {0x6, 0x5, 0x5, 0x9, 0x5, 0x4}, {0x40, 0x81, 0x544, 0xb, 0x0, 0x2}, {0x5ed98c94, 0xfffffffc, 0x80, 0x73, 0x6d00, 0x3ff}, {0x9, 0x800, 0x2, 0x0, 0xff, 0x28000}, {0x8, 0xd, 0x1, 0x40, 0x5, 0xc284}, {0xfc0, 0x6, 0x5, 0x81, 0x9, 0x1}], [{0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x676bb7410c67f3e9}, {0x7, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x1}, {0x4}, {0x7, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x4}, {}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x3}, {0x4}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x2, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x0, 0x1}, {}, {0x1}], 0x1}}]}, {0x53, 0x6, "a0528f420a5d5fb61820d194d1cefa86a232aabe7b7db46c89286fe5cb6fe3058028bbf69816c3515b758e8773859f6129a56a800b3ba9c18d61c15b2e432aa3542f0165641ed8bfa392ec449181b5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xf18}}, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x2b, @loopback}}}, 0x30) 32.533603202s ago: executing program 33 (id=829): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) r1 = syz_io_uring_setup(0xd55, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) io_uring_enter(r1, 0x14, 0xb9c, 0x3, 0x0, 0xffffffd5) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_pedit={0xf00, 0xd, 0x0, 0x0, {{0xa}, {0xe84, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x7, 0xd6e, 0x0, 0x8, 0x1}, 0x1, 0x9, [{0xe, 0x2, 0x8, 0x7, 0x5d2d, 0xfffffff8}, {0x3e4, 0x5, 0x5, 0x4, 0x3, 0x4}, {0x40, 0x4, 0x80000000, 0x314, 0x8, 0x9}, {0x5, 0x9, 0x6, 0x0, 0x5, 0xe}]}, [{0x80, 0x400, 0x669, 0x2, 0x0, 0x17}, {0x4, 0xc5, 0x3, 0x1, 0x9, 0xfff}, {0x7f, 0x5, 0x0, 0x7, 0x1, 0x3}, {0x18, 0x0, 0x3, 0x44c, 0x6, 0x5}, {0x0, 0x200, 0x441, 0x8, 0x2}, {0xa5f0, 0x5, 0x2, 0x7, 0xf8c4, 0x14467d65}, {0x8, 0xa0bf, 0xf5, 0x1, 0x90, 0x89b}, {0x1, 0x8, 0x10001, 0x7f, 0x9, 0xc}, {0x3, 0xb, 0x6, 0x4, 0x2, 0x40}, {0x2, 0xfffff34b, 0xfffffffa, 0x7829, 0x3, 0x7}, {0xffff68e9, 0x7, 0x5, 0x0, 0xa1}, {0x9a, 0x8, 0xffffffff, 0x3, 0x8, 0x1}, {0x1, 0x5, 0xfffffff9, 0x6, 0x7, 0xd3c}, {0x4, 0xa7, 0x9, 0x8, 0x8, 0x2}, {0x3, 0x7ff, 0x5, 0x6, 0x5, 0x2}, {0x5, 0xa780, 0x6, 0xfffff66c, 0xfe, 0x88f}, {0x3, 0xba2, 0x73, 0xfffffff7, 0x3aa9, 0x3ff}, {0x1, 0x2, 0xe, 0x10, 0x7ff, 0x7}, {0x10, 0x81, 0x6, 0xbc60, 0x3, 0x4}, {0x8, 0x5, 0x8, 0x1, 0x9, 0x1}, {0x10000, 0x6, 0x0, 0x8, 0x7, 0x8001}, {0x4, 0x6, 0x6, 0x0, 0xd, 0x6}, {0x9, 0x9, 0xb, 0x9, 0x9}, {0x4, 0x6, 0xae9, 0x4, 0x7, 0x53}, {0x6, 0x80000000, 0x91, 0x7f, 0x7, 0x8d4a}, {0x0, 0x9, 0x401d, 0xb5eb, 0x0, 0xa}, {0x8, 0x5, 0x10, 0x80000000, 0xffffffff, 0xffffffff}, {0x1, 0xca67, 0xf2f3, 0x5, 0x8, 0x3}, {0xfff, 0x7f, 0xfffffffe, 0xd, 0x4, 0x6}, {0x80000001, 0x400, 0xffa, 0x2, 0x80000001, 0x8b8}, {0xffffffff, 0x4, 0x3, 0xb6f}, {0x41, 0x4, 0x2, 0x5222, 0x0, 0x68de}, {0x0, 0xc, 0x9, 0xc, 0x7, 0xf}, {0x1b38, 0x10000, 0x7f03, 0x81, 0xc, 0x4}, {0x2, 0xac57, 0xfffffff8, 0x0, 0x5, 0x40}, {0x2f, 0x6, 0x9, 0xfffffffb, 0x4, 0x81}, {0xb, 0x49, 0x8000, 0x101, 0x6, 0xd9}, {0x9, 0x6, 0x0, 0x5, 0x0, 0x5}, {0x4, 0x8, 0x5, 0xb22b, 0xd, 0x3}, {0x3, 0xffffffff, 0x1ff, 0x6, 0xa, 0x40}, {0x9, 0x3, 0x4, 0x8000, 0x5, 0x2096}, {0x20, 0x3d54, 0x5, 0x7, 0xe59, 0x7fff}, {0x3, 0x7fff, 0x6, 0x9}, {0x8, 0x8f, 0x4, 0x0, 0xe, 0x52}, {0x8, 0x4a, 0x5, 0x8, 0x848, 0x3}, {0x0, 0x2, 0x4, 0xfffff081, 0x4, 0x9}, {0x8, 0x5, 0xff, 0x1, 0x800}, {0xbb, 0x8, 0xc34, 0x49cfac7, 0x5, 0xffff643f}, {0x10001, 0x1, 0xf170, 0x12d4, 0x80000001, 0x3}, {0x2000, 0x5, 0x1000, 0x40, 0x7, 0x4}, {0x8, 0x5, 0x7fff, 0x4, 0x5b, 0xfffffffc}, {0x2, 0x6, 0x10001, 0x400, 0x5, 0x7}, {0x6, 0x8, 0x0, 0xb740, 0x7, 0x2}, {0xfffff36d, 0x5, 0x0, 0x1, 0xfffffffd, 0x8}, {0x9, 0x0, 0x2, 0x1, 0x7, 0x6}, {0x4, 0xfff, 0x7, 0x31e0, 0xfffffff8, 0x7ff}, {0x80000001, 0x8001, 0x48f82105, 0x1, 0x7fff, 0x8}, {0x2, 0x9b0, 0xf73, 0x6f, 0x1, 0x7}, {0x3, 0xfffff20e, 0x5348, 0x10, 0x2, 0x3}, {0x400, 0x3b30ff7, 0xa905, 0x9, 0x4}, {0x1ff, 0xe, 0x9020, 0x1c59eaa7, 0x1}, {0x5, 0x3, 0x7, 0xcb, 0x5, 0x7}, {0x8001, 0x4, 0x1, 0x4, 0x3}, {0x0, 0x8, 0x800, 0xeb, 0x8, 0x5}, {0x4, 0xfffffffd, 0x2, 0x0, 0x4, 0xfffffffb}, {0x0, 0x5, 0x9, 0xd, 0x5, 0xfffffff7}, {0x1bc8, 0x100, 0x9, 0x7fff, 0x6, 0x6}, {0x8, 0x4, 0x1, 0x401, 0x2, 0x6}, {0x4ad0, 0x2, 0xfffffff7, 0x80000001, 0x10000, 0x4}, {0x2, 0x40, 0x81, 0x0, 0xffffff81}, {0x0, 0x6, 0x100, 0x98, 0x9, 0x81}, {0x0, 0x274c1e98, 0x7ff, 0xff, 0x400, 0x2}, {0x9, 0x2, 0x7, 0x5, 0x4, 0x3f84}, {0x28, 0x8001, 0x80000001, 0x9, 0x6, 0x9}, {0x3, 0x7, 0x8240, 0x401, 0x6, 0x8}, {0xd0, 0x8, 0x97ef, 0x8a3b, 0x7, 0x9}, {0x2, 0x6, 0x8, 0x8df, 0x0, 0x8}, {0x0, 0x6, 0x200, 0x9, 0x28, 0x9}, {0x3, 0x5, 0xd, 0x6, 0x7, 0x3}, {0x0, 0x3f7a5f00, 0x6, 0x7fff, 0x10000, 0x1}, {0x80, 0x81, 0x9, 0x9, 0x3, 0xffffffff}, {0x10000, 0x6, 0x4, 0x7, 0x10000, 0x3}, {0x2, 0x9, 0xfffffffc, 0xfffffe01, 0x800, 0x80}, {0x8, 0x504, 0xbda7, 0x0, 0xfff, 0x1dab}, {0x2, 0x3ff, 0x1, 0x2, 0x80, 0x7ed4}, {0x5, 0x6, 0xe26f, 0x100, 0x4, 0x4}, {0x1, 0x2, 0x39d, 0x3ff, 0x97b3}, {0xfffffb81, 0xae, 0x4, 0x7201, 0x0, 0x9}, {0x10000, 0x8, 0x3dd, 0x3, 0x7e, 0x4}, {0x5, 0xfffffffe, 0x2, 0x6, 0x800, 0x9000000}, {0x7f, 0x9b, 0x1000, 0x9, 0xb, 0x9739}, {0x0, 0x8001, 0x3, 0x8, 0x1200, 0x2}, {0x80000001, 0x8001, 0x6, 0x4, 0x6, 0xe57}, {0x80, 0x3, 0xfff, 0x9, 0x8, 0x936f}, {0x1000, 0x0, 0x1, 0xffff, 0x3, 0x9}, {0x401, 0xf1, 0xe1c, 0x10, 0x200000, 0x93a}, {0xe, 0xffffffff, 0x4, 0x80000001, 0x1, 0x4}, {0x1, 0x3, 0x1, 0x400, 0x100, 0x1000}, {0x8, 0x0, 0x6, 0x0, 0x6, 0x1}, {0x9, 0x9, 0x4, 0x0, 0xee, 0x3}, {0x5e6c, 0x8, 0x80d5, 0x9, 0x9, 0x1}, {0x3, 0x9, 0xf, 0xc9b, 0x2, 0x7fff}, {0x81, 0x9, 0x3, 0x80000000, 0x8, 0x6}, {0x5, 0x0, 0x1, 0x5, 0x1ff, 0x7ff}, {0x2, 0x8, 0x0, 0x6, 0x8, 0x4}, {0x8, 0x7, 0x2f, 0x401, 0x3, 0x5}, {0x200, 0x4, 0x28, 0x10001, 0x8, 0x1}, {0x9, 0x1, 0x1000, 0x5, 0x8, 0x2}, {0x32, 0x6, 0x7ff, 0x10, 0x6, 0x7fffffff}, {0x4c, 0x0, 0x0, 0xffff8001, 0x8, 0x9f95}, {0x8, 0x2, 0x2a99, 0x1, 0x0, 0x6}, {0x7, 0xe6d, 0x7, 0xa0, 0xb, 0x8}, {0x5, 0x27a8, 0x6, 0xa, 0xfffffff7, 0x40}, {0x401, 0xffffffff, 0x7ff, 0x5, 0x9, 0x4}, {0xff68, 0xff, 0xc, 0x9, 0x374, 0x5}, {0xcf, 0x1, 0x8, 0x6, 0x4, 0x8}, {0x8, 0x6f2, 0x3, 0x80000000, 0x4f15, 0x3}, {0x7, 0xffff, 0x2, 0x200, 0x5, 0x9}, {0x0, 0x5, 0x6, 0x5, 0x1, 0x80}, {0xfffffffa, 0x3, 0x7, 0x1, 0x2, 0x5}, {0xfffffffb, 0xe9, 0x8, 0x7f, 0x2, 0x8}, {0x3, 0x1, 0x1, 0x8, 0x0, 0x5}, {0x6, 0x5, 0x5, 0x9, 0x5, 0x4}, {0x40, 0x81, 0x544, 0xb, 0x0, 0x2}, {0x5ed98c94, 0xfffffffc, 0x80, 0x73, 0x6d00, 0x3ff}, {0x9, 0x800, 0x2, 0x0, 0xff, 0x28000}, {0x8, 0xd, 0x1, 0x40, 0x5, 0xc284}, {0xfc0, 0x6, 0x5, 0x81, 0x9, 0x1}], [{0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x676bb7410c67f3e9}, {0x7, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x1}, {0x4}, {0x7, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x4}, {}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x3}, {0x4}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x2, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x0, 0x1}, {}, {0x1}], 0x1}}]}, {0x53, 0x6, "a0528f420a5d5fb61820d194d1cefa86a232aabe7b7db46c89286fe5cb6fe3058028bbf69816c3515b758e8773859f6129a56a800b3ba9c18d61c15b2e432aa3542f0165641ed8bfa392ec449181b5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xf18}}, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x2b, @loopback}}}, 0x30) 31.130216725s ago: executing program 3 (id=294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x43000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0xc, 0x0, 0x0, 0xc03d, 0xfffffffffffffffd}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x0, 0x0, 0x30, 0x0, [{@local}, {}, {@private}]}}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r4, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000280)=""/79, 0x4f}], 0x3) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x5, 0x39676c, 0x3224c8}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c00000000201010200000000000000000300000108000340000000041c0010800800024000000007080003400000000808000240000000030c001980"], 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 23.814240857s ago: executing program 3 (id=294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x43000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0xc, 0x0, 0x0, 0xc03d, 0xfffffffffffffffd}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x0, 0x0, 0x30, 0x0, [{@local}, {}, {@private}]}}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r4, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000280)=""/79, 0x4f}], 0x3) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x5, 0x39676c, 0x3224c8}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c00000000201010200000000000000000300000108000340000000041c0010800800024000000007080003400000000808000240000000030c001980"], 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 16.454376845s ago: executing program 3 (id=294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x43000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0xc, 0x0, 0x0, 0xc03d, 0xfffffffffffffffd}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x0, 0x0, 0x30, 0x0, [{@local}, {}, {@private}]}}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r4, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000280)=""/79, 0x4f}], 0x3) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x5, 0x39676c, 0x3224c8}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c00000000201010200000000000000000300000108000340000000041c0010800800024000000007080003400000000808000240000000030c001980"], 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 9.582694277s ago: executing program 5 (id=970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x20, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote, {[@hopopts={0x2f, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @enc_lim, @ra={0x5, 0x2, 0x453}, @jumbo={0xc2, 0x4, 0xc}, @ra={0x5, 0x2, 0x80}]}]}}}}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "d0c09ca8c9a044d18c1f59d1ed624a358f39cfc467329fec437c907e0ca7779ca8c0c2d26abf36f064770a70a88130dfa112562f1ad75b59c390ca9d280872fb", 0x40}, 0x48, 0xffffffffffffffff) keyctl$read(0xb, r3, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001400a59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="1408000000020000000001000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 9.51362678s ago: executing program 5 (id=973): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'macsec0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e00010000000000002f000000000000000000000000000a0040"], 0xb8}}, 0x0) 9.429754045s ago: executing program 5 (id=975): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r1, 0x56ba086bbc4650b1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x24}}, 0x20000084) 9.06410469s ago: executing program 5 (id=979): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x44}}, 0x4008080) 9.057359387s ago: executing program 3 (id=294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x43000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0xc, 0x0, 0x0, 0xc03d, 0xfffffffffffffffd}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x0, 0x0, 0x30, 0x0, [{@local}, {}, {@private}]}}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r4, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000280)=""/79, 0x4f}], 0x3) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x5, 0x39676c, 0x3224c8}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c00000000201010200000000000000000300000108000340000000041c0010800800024000000007080003400000000808000240000000030c001980"], 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 7.504135858s ago: executing program 5 (id=982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$selinux_status(0xffffff9c, &(0x7f0000000bc0), 0x0, 0x0) read(r1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8402, 0x0) ioctl$SOUND_MIXER_INFO(r5, 0x805c4d65, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r8, &(0x7f0000002240)={0x2020}, 0x2020) writev(r8, &(0x7f0000002140)=[{&(0x7f0000000040)='T01\n', 0x4}, {&(0x7f0000000080)="37c870ef0c000000e20ecbf61fc3", 0xe}], 0x2) setsockopt$packet_int(r7, 0x107, 0x13, &(0x7f0000000000)=0x8, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002540)=@newtfilter={0x1230, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x1200, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x16157}, @TCA_FLOW_XOR={0x8, 0x7, 0xffff}, @TCA_FLOW_EMATCHES={0x11dc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3e8c}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8000, 0x3, 0xc0}, {0x80, 0x2, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfc00}}, @TCA_EMATCH_TREE_LIST={0x1198, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0x8, 0x0, 0x400}, "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"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8, 0x1, 0x1e}, {0x0, 0x3, 0x5, 0x6, 0x3, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1000, 0x1, 0x8000}, {0x9, 0x4, 0x2, 0x5, 0x7, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x104, 0x1, 0x0, 0x0, {{0x81, 0x0, 0x5f8}, "7f398f4f2342432ba8f2bf715bc3887b0f7cacac4eb0a0974b5b949eda347ec4a2f24c6509832e1b524a80429589ef738fc48ecf8cc69ad07af355337ed2b03e0a62b0b683b2487c72147ca16ba59b7f4db6b7b872b6536b28165a38cbdcf058157748b18451a362e28a15c713a05152e3af96a2932fdfe83233a6e9a50164fb760cb4ed4ea50d652c9c154e167d73495d66d049f56f8b068d6d6489a99e5fc04863cc2ff018fd48e09237eb492072161b317d803573b308d677a60182ade8cf93d83d5da6a29650b069b717f75c77109118894da1bd6eed891d2cbb1c1c0757357393db4949e0fe4aa256fa90ad9d34ccbb771237cfb6b1"}}, @TCF_EM_IPT={0x54, 0x2, 0x0, 0x0, {{0x8, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x3d, 0x5, "1d4f53b3b1cc83df924a748e2643b7105d75b635b2a945bfd4b27ef99bcd79298020f264fab9bb48869f7018011c35a0014f65fb1c2f42e8e3"}]}}]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MODE={0x8}]}}]}, 0x1230}, 0x1, 0x0, 0x0, 0x80}, 0x800) 7.182880329s ago: executing program 5 (id=988): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x44041) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x6a) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000004c0), r3) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc891}, 0x8000) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x44, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x44}, 0x4, 0x700000000000000}, 0x8850) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r6, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\xc1&*-)\x00'}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '\'*\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8040) 3.29359461s ago: executing program 1 (id=1008): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioperm(0x0, 0x3, 0x4) munlock(&(0x7f0000e4a000/0x1000)=nil, 0x1000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x44}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000800000000bb060004404e1f000005000700880000005587ddb77e97da7817807682651cc8b488636ea51d941bc60fb72c4201c259066d"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000008c0)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000000a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f, @void, @value}, 0x94) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x1fd, {0x0, 0xa}, {0x1}, @const={0x0, {0x1, 0x8, 0x4, 0x881}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 2.683824692s ago: executing program 2 (id=1010): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) read$rfkill(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000580)=""/233, 0xe9}, {&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f0000000380)=""/62, 0x3e}, {&(0x7f0000000680)=""/185, 0xb9}], 0x4, 0xc002a0, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="668e00", @ANYRESDEC=r0, @ANYBLOB="010000000003ffdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="b8000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=r1, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES64=0x0, @ANYRESDEC=r0], 0xd4}, 0x1, 0xf000}, 0x8800) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'lo\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000280)=0x4) 2.593843865s ago: executing program 2 (id=1011): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x368, 0x258, 0x258, 0x368, 0x258, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0x0, 0x0, 0xff], [0x0, 0xffffff00], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x138, 0x1a0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@unspec=@rateest={{0x68}, {'veth1_vlan\x00', 'veth0\x00', 0x24, 0x3, 0x8, 0x2, 0x39, 0x80000001, {0x8001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xe, 0xb, 0xc, 0xc07, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1c8, 0x0, {}, [@common=@srh1={{0x90}, {0xff, 0x6, 0x4, 0xf6, 0x8, @mcast1, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff000000, 0x80800000], [0xff, 0xffffff00, 0x0, 0xffffff00], [0xffffffff, 0x0, 0xffffff00, 0xffffff00], 0x450, 0x18}}, @common=@icmp6={{0x28}, {0x0, "e1f6", 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x8000, 0x7, 0x18d, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffff9c, 0xc0406619, &(0x7f0000000a40)={@desc={0x1, 0x0, @desc3}}) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffff9c, 0xc0406619, &(0x7f0000000a40)={@desc={0x1, 0x0, @desc3}}) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r5, 0x3, 0x0, @val=@iter={0x0}}, 0x20) (async) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r5, 0x3, 0x0, @val=@iter={0x0}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r6, r3, 0x4, r3}, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) (async) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001240)={0xffffffffffffffff, 0x20, &(0x7f0000001200)={&(0x7f00000010c0)=""/159, 0x9f, 0x0, &(0x7f0000001180)=""/94, 0x5e}}, 0x10) r12 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r12, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) (async) readlinkat(r12, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x16, 0x18, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb1}, [@call={0x85, 0x0, 0x0, 0x39}, @generic={0x5, 0xc, 0x8, 0x8001, 0x101}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @generic={0x9, 0xc, 0x8, 0x6, 0x40}, @exit, @ldst={0x3, 0x3, 0x3, 0x4, 0x3, 0xfffffffffffffffc}]}, &(0x7f0000000b80)='GPL\x00', 0x7fffffff, 0x55, &(0x7f0000000fc0)=""/85, 0x41100, 0x24, '\x00', r10, @flow_dissector=0x11, r5, 0x8, &(0x7f0000001040)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000001080)={0x5, 0x6, 0xc, 0x8}, 0x10, r11, r12, 0x9, &(0x7f0000001280), &(0x7f00000012c0)=[{0x2, 0x4, 0x0, 0x2}, {0x2, 0x4, 0x4, 0x3}, {0x3, 0x1, 0x1}, {0x3, 0x2, 0x5, 0x1}, {0x0, 0x2, 0xb, 0x3}, {0x3, 0x2, 0xd}, {0x0, 0x5, 0x0, 0x4}, {0x4, 0x3, 0x2, 0x8}, {0x4, 0x5, 0x8, 0x6}], 0x10, 0x7, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x200, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}) sendmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x1, @multicast1}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="942a063e3525f21411ba218f5c1c8315bd56b807022ab323351dcd85e5f638c4b0f330a59e3fcf5f6742da3bd9d6b48b5712453c52fb9e53dc604b5eec05dfcc988b37f440ea2721d9a9b5206766e06c15bf1c1f20d414", 0x57}, {&(0x7f0000000000)="61ae4d496fcd9a08e1e4ac9f5d5a5ef1b43828a63011a3906cebc0da4055ce4f641441499a217c8c009004b50bf8f91fea47c1af686a6a7a9b6f9f8ad55d45", 0x3f}], 0x2, &(0x7f0000000280)=[{0x50, 0x10c, 0x9, "67ccbbe5d29485d445f3fc223b491fbba1a6800eeac03352499c4f797b040421dbf6ec3f817329bb1d5dc4d6940078708390746ef9bfb57031ab5f7b"}, {0x10, 0x113, 0x101}], 0x60}}, {{&(0x7f0000000300)=@pptp={0x18, 0x2, {0x3, @rand_addr=0x64010100}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="4604101137fd4e60d49d286b0b0a4d1aef6fab4d15da5502dd43962f9d09a27c34ea7d45e549651661d4cfd04215ee83aa4361f969e35c02e27882bbc8a5f343b07b8289c65c3cc0f1b10777158c703cb7ac9bd41f04e4142cb3dc0c965c2ddf98f684e286061410457abd43d87cc0d0a7b7a0ecfed60a284c2a6fa0e6bef89f2d0afc65abc33dd3e7aaf5bbe7539ada5590453eb2b184cfdac70542befaac9bba92527568fa5bfd54b4112c29451931a4f7b1204b7d42711a843ac706bf4469b7ec6d277d3458762e26afe2301993225d3c094678fb254d4f1042045fc8a74622aa4965c58b73c3440ced157ff1d2", 0xef}, {&(0x7f0000000480)="ed22470d4bd94e60c9dae5810c075dd37adc8d03b9d9cc0a68871b1d7039d7abbe17d2b0f78a4468e5cbd0e13090cf69520a461afd78cf68d40de0695ba04b37fb72fb5007001a546cc56bfa3122f1088f7fc98b6e0c9c347cb2ee1ec92dedf6d75be0ffda94541cb845ac3b7f844e72cd2b303c87fad1826be30ec0105014b6c40ac77d3fd8c139aa63e2174c2038e991dcc5d58b95805f70acf2e15c4b7c8d56", 0xa1}, {&(0x7f0000000540)="a20a6c72e1e9fbd17bbbb3fe4565a51891f0e499e32462930f2a93f9f401c2b16a29985c95f6d8c8a2739095acea48f2ae5315abf12688e0ff993706518168c7ce79f3bb273fe7e6248b1b7d27510727638fb7caabb2a3ea9d058b5bd2d77ecd1f2c8af6732578bc599f98a87482a81b523ed6719b12f9a023b3876cbe3b0fe04c562846866c8c3df96725172d31418ece544e1afce6444065c1053e6312bfb74ba8d74ba730ecf1f5472c58c602fcef7d", 0xb1}, {&(0x7f0000000600)="f3cefd97952a9626aaa829296acd2ed15f4dc4d80e0f31fe070f592f60af317c87c44ff9556ef4f9bfe305863e653d68b109edb13c453b92fbaa532c93a0ad900aec78d09af76499e2fbc022d76d0e021b3951e6250dc7fe171db88e7194bb73e9f7766c0e33674ed365698a2cbda3c1a57a819073a72117db7a07d6c2afa355a06d7299994a2b3182aac0521afa7e844cd7e480802ca4336cfd44a69ab523e8760e9382c07a1c60bbd9028bf73d57bc0c69ad4f8558", 0xb6}, {&(0x7f00000006c0)="3ad1daca74e09c229c6a92eefd964ac8c0ffea8c6dc31039a2d13e09daa0f4933c6f67577b7dd729b6851f5f57a32f5da62d66db1d64911e5caeec87886b4ea3289d337b90b4c5602622bfcdb8e91a7a0d0f47c8cc2e9c91d8500a9ef3fe110237ace20237d896587a6a3412e6bbef15dac050b9a417164857a6808a25d8460306fd02fe0dce127592734951887c3704f6fa5b2daef5195575e7aaf38bfff318ab862e2f73a28ab40a571b1312039f59f81d9222c6b074b89532f5f05da5357904a1f184fe400fa5b43a92e0885de521", 0xd0}, {&(0x7f00000007c0)="af83e84eb88285bfb9d133bc0d487f4ce79a5aee303fb941ccfcbafb8fbeaee7b0072705d171e00f3e737961c660f1947bdcd73ae16efdbc7a18528cdf92ec3b0363d07692fa65", 0x47}, {&(0x7f0000000840)="93433410b2ad3ea219b436c183d0d840e0f276fc033de14a36a417119caaaa7bd4cb8064ce90f592e71043c2464cf112e33d2522f5bd5f058628ead9e37b5e66605d9c222862869e3ecaaf8b7973bd2660bc4d1218f9392a7d5e02e4b8649b38fde82156688ea408bf13fc8c980b418f633c58c3be49abd6597542628368", 0x7e}, {&(0x7f00000008c0)="423a01e578290165e9e8530d7dd48ab2a99c42d4f1fc5d4401d778e3662a45100baeb2277d4254423838078f8864e45665187f8ae057c166f218926677d71c1a598f75d08be75c14f23a31531fb61d6a16b7cd6a57baf69d75278225de4e93fad219474d207b6c7a11fc47deef42a6c14cc72feb1e521f9d7db563fe70639b302e06e769afeba6b870e40593fe5831af15edf563cca8bd26658c1a4103fd7c744defbba29ef30432adb3aa935d24c7dc8fa483f0c5ce4d4ef47af012cba489f1b478f7fcc03140a2a8c4556bd178f5b0291e9b0db5cf49af786d80c9824d5d1bf4", 0xe1}], 0x8, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x180}}], 0x2, 0x20000084) openat$fuse(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) (async) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r13, &(0x7f0000000c80)={0x28, 0x2, 0x0, {0x6, 0x10001, 0xf}}, 0x28) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x10000, 0x20000000, 0x7, 0x80}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 2.391891755s ago: executing program 2 (id=1012): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x4bc, 0x8}}, 0x30) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) read$FUSE(r1, &(0x7f0000002100)={0x2020}, 0x2020) r3 = syz_open_dev$usbmon(&(0x7f0000000280), 0x7, 0x0) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) lseek(r4, 0x10001, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000005640)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='workqueue_activate_work\x00', r5}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) 2.391478368s ago: executing program 1 (id=1013): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000240)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4C\x80\x00\x00\x00\x00\x00\xa9t\xa24>X@\rq@\xf2\xe9[\x05N\xb1\x84\xea\x91^%A\xf5\x9e\x13TdT\xc6^p\xcc#P\x04\x06\xae\xeb\x7f;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\a`\xf0\xc728\xfc\xfc\x1c1?\x86\xac\xd4\f\x00\x00\x00\x00\x00\x80\f\xed{u[\xbd\x9d^\xffj\xa0\x14\xb7\xb6\x8b\x1d*1\xe8\xb0\x00\x00\x00\x00\x00\x00\t\x00\x003F\xf1 \x17-\x964C?]\xdfe;\xc0w\xad\xef\xa3r\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\x8c\xcd\b\xb5U\xec\x85\x9b\xe4Q>\xed\xdf\xdf\a\xd0lg\x13\r\x8c:s3\xd7s\xef\xb3\x9f#\x15$\x97I\xf0LC\xfc\xe7\xdf\x86\x9d\xd3[i\x1b|{4)\xd8\xa2\xb8\x8f\xa2\x84_k\xe5\xf0\x05a2)\x8d\xec\xf0(!\xf0\xb5-e+><\xc8X\xdaNz,u\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf5\x1a5\x8c\xa6\xfbq\xa9\x87\x9f\xe1\xfa\xb5\x92\xb1\x00\x00\x00\x00\xd6\xce\xab\x1d%\xb0\xaa\xed\x10\xe9Z\"\x7f\xb2\xde\x00\x00\x00\x00\x00y\xd8\xdf\xc8R\x8b0Bs\x95N\xfa\x02\xe9\xf6\xa20\f1L\v\xdf8W{P\xab\x82\x84\xf0w\x9c\t\xf8\x85\x98S)M*\x88\xf8\xbaC\xa2\xf8\xc3\xe0\xb2)\xf8\x9da%\xd7\x8c\x03\xa9\xb6\x15\x8c\xdd\xaf\xeb\xfa\x1bV\x1c\fJ\xe6n\x19\x94\xea\xb7\xcc\x12q\x06\xbab\xda\xfa\xf7\xe4\x85U:\x1e\xeaC\x9b\xa5\xbb:\xe8\x04\xd9\xb2|\x85\a\x93\xa1a\r\xf0R\x8f\xac\xbc]\xc6\x1a\x86RK\xb3\x95\xbaz\xb7I\a\xd6j,pI\xb07\xc4\x82G\xd2u\x8a\xfc\x10\xffs5\xfd\x99\xdc\x9e\xdf\x86\x11~0+\xa7\x11\x13\xbb5\xc8\x8aW\xfd{\xe1QN\xef\xce~k7\xd9\x02\xac#n\xc3\xdd\x9a\xdaeJ7\x9f5\xae4\x9aoJ\xdcZf\xd4\x7f\x01}\'\x1f\x8e\xee_Q\xb4\xad@\x1a(>\x88\xd2F\x14r\x8c\x1aq@n6~1WP\xc8\xb5\x82\x02*\xcf\x95I\xc01\"\x8c_\x8d\xcb-X\x1f:bOmgTC\xe16\xef\xed\x87\xe42\b\xe5)\x99\x1dt\x17\x8d\xdc\xc2\aL\xb9\x90\xdc~\xf4\x12eXR\x89\x14E\x06\xeb<\x1b-\x955\xb4U\xceN\xf4\xb4l\xd5\xd0\xbfc\xa0\xb4{\xa9\\JL@tW\xa8\xf5\x8b\x9a\x9cF\xf5\xe0\xf4\xeeR#\x16r\x80\x91]c\x99\xd0o\x81b.\x82\xcf4\x01j\xe8\xaf[\xc1\b\xc5@n\x8a(qC\x16\x9e\xf8\x11l\xdbLM\xf9\xb7\xd1\xd5\xa1^\xcb=X\xe56\xc4FW\x0f\xe3\xe0\xa0\xb5JBE\xb5F(\t\xd8\x87\xf7\x92id\x8b\xcf\x846Z\x00\x80\x94\x999\xc2\xc7_\xb0\x02\xcb\xa2k\nB\x8a\'s95\x93Z\xf0\xf1\x9d\n\xf1$N\x03\f\x04Z\xfeX6\xf1\xe0\x95\x80(AV\x91\xd8\xa3\xc4?\xebhh|\xe0\xad2#\xcdF\xd8\x89akF\x05\xb5r6Ueh\x03\x82\x91@\xba\x84\xf5\x84\xaa\x1fZ\x11\n\xb9Y\xba;\xf27\xb9\xd3e1\xe5\xf9\xb3\xeb\x82V\x12\xebO\x02\x81\xd0\xfc1\xf5\x9c|\xfc\x1e_\x00\xa7\x89\x9e\xbe@\xcd\a\x82\xa8`\xa4e\xb7\xb8d\xb45>\xd5o\x1a[d\x04t\xb9\xc2Q T]j~\xa5\x12Lo\xfbP\x1fH*\xe5\a|\x1c/\xc3\x84\x01.F6\xba+\x90/\xc5\xc7\x95Tu\xacH\xbd\xb8\xe9\x04\xe6\xaf\xe7\xa6\x10\xb6\xde', 0x7) fcntl$addseals(r1, 0x409, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000003, 0x11, r1, 0x0) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000180), 0x200040, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x100003}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r4, 0x17, 0x0, @void}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 2.26409695s ago: executing program 1 (id=1014): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x20a0}, 0x10) write(r3, &(0x7f0000000680)="240000001e005f", 0x7) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) dup2(r0, r0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7e) 2.263723571s ago: executing program 2 (id=1015): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000004, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 2.063972042s ago: executing program 1 (id=1016): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x3, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x9}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x8}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x6}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x4004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) r3 = openat$ptp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000280)={0x11}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept$alg(r4, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = gettid() sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r5, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1.93432401s ago: executing program 2 (id=1017): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x800) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x82000, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000540)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8d, "cbdb9b8fb25779"}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001540)={r3, 0x3}) 1.643872623s ago: executing program 3 (id=294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x43000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0xc, 0x0, 0x0, 0xc03d, 0xfffffffffffffffd}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x0, 0x0, 0x30, 0x0, [{@local}, {}, {@private}]}}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r4, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000280)=""/79, 0x4f}], 0x3) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x5, 0x39676c, 0x3224c8}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c00000000201010200000000000000000300000108000340000000041c0010800800024000000007080003400000000808000240000000030c001980"], 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 7.021841ms ago: executing program 1 (id=1018): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'macsec0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000002f00000000000000000000000a0040"], 0xb8}}, 0x0) 6.336328ms ago: executing program 2 (id=1019): openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000003590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r2 = socket(0x840000000002, 0x3, 0xff) r3 = fanotify_init(0x4, 0x0) r4 = dup(r2) fanotify_mark(r3, 0x201, 0x20, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x18a3c85) r6 = socket$alg(0x26, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r7 = accept$alg(r6, 0x0, 0x0) sendfile(r7, r5, 0x0, 0x5) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r8, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f00000000c0)=[0x6, 0xb], 0x2) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) 0s ago: executing program 1 (id=1020): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x8000000001) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x6) (async) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) kernel console output (not intermixed with test programs): ting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 132.710236][ T58] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 132.714321][ T8390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.716730][ T8390] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 132.720687][ T8390] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 132.731877][ T58] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 132.735124][ T58] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 132.737725][ T58] usb 7-1: Product: syz [ 132.739094][ T58] usb 7-1: SerialNumber: syz [ 132.754107][ T58] usb 7-1: config 0 descriptor?? [ 132.766517][ T58] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 132.769557][ T58] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input11 [ 132.806852][ T8393] erspan0: entered allmulticast mode [ 132.816274][ T8393] bond2: (slave erspan0): making interface the new active one [ 132.819071][ T8393] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 132.845938][ T1140] tipc: Disabling bearer [ 132.852434][ T1140] tipc: Left network mode [ 132.881174][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.884207][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.971115][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 133.049748][ T8399] fuse: Unknown parameter '"H6¾Uÿšgroup [ 133.049748][ T8399] ÷UðŒ4‰%(¹?Ù”®m"c§¢êŽíÂB00000000000000000000' [ 133.277939][ T1140] hsr_slave_0: left promiscuous mode [ 133.281613][ T1140] hsr_slave_1: left promiscuous mode [ 133.285224][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.288009][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.324391][ T1140] veth1_macvtap: left promiscuous mode [ 133.326221][ T1140] veth1_vlan: left promiscuous mode [ 133.327911][ T1140] veth0_vlan: left promiscuous mode [ 133.427113][ T8418] netlink: 40 bytes leftover after parsing attributes in process `syz.1.643'. [ 133.491041][ T8419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.573025][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.641750][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.984508][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 134.046933][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 134.173741][ T5286] Bluetooth: hci1: command tx timeout [ 134.346281][ T1140] wg0 (unregistering): left allmulticast mode [ 134.624529][ T66] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 134.651655][ T40] kauditd_printk_skb: 1314 callbacks suppressed [ 134.651667][ T40] audit: type=1400 audit(1747807173.827:20567): avc: denied { read } for pid=5648 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 134.670111][ T40] audit: type=1400 audit(1747807173.827:20568): avc: denied { read } for pid=5648 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 134.678538][ T40] audit: type=1400 audit(1747807173.847:20569): avc: denied { search } for pid=5648 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.688156][ T40] audit: type=1400 audit(1747807173.847:20570): avc: denied { search } for pid=5648 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.697106][ T40] audit: type=1400 audit(1747807173.847:20571): avc: denied { search } for pid=5648 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.706089][ T40] audit: type=1400 audit(1747807173.847:20572): avc: denied { read } for pid=5648 comm="dhcpcd" name="n148" dev="tmpfs" ino=3814 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.715195][ T40] audit: type=1400 audit(1747807173.847:20573): avc: denied { read open } for pid=5648 comm="dhcpcd" path="/run/udev/data/n148" dev="tmpfs" ino=3814 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.741700][ T40] audit: type=1400 audit(1747807173.847:20574): avc: denied { getattr } for pid=5648 comm="dhcpcd" path="/run/udev/data/n148" dev="tmpfs" ino=3814 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.750519][ T40] audit: type=1400 audit(1747807173.917:20575): avc: denied { unmount } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 134.755400][ T8285] veth0_vlan: entered promiscuous mode [ 134.767414][ T40] audit: type=1400 audit(1747807173.947:20576): avc: denied { execute } for pid=8425 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 134.785755][ T8285] veth1_vlan: entered promiscuous mode [ 134.843895][ T8285] veth0_macvtap: entered promiscuous mode [ 134.857745][ T8285] veth1_macvtap: entered promiscuous mode [ 134.897997][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.916392][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.925686][ T8285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.928441][ T8285] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.931111][ T8285] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.933971][ T8285] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.997249][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.000934][ T5941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.001359][ T1140] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.004535][ T5941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.010299][ T5941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.013688][ T5941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.085768][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.088329][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.151571][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.154300][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.270083][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 135.273414][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 135.275643][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 135.277954][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 135.280174][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 135.282476][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 135.284819][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 135.287117][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 135.289528][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 135.291682][ C3] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 135.294603][ T6004] usb 7-1: USB disconnect, device number 9 [ 135.313206][ T6004] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 135.409082][ T8431] chnl_net:caif_netlink_parms(): no params data found [ 135.447654][ T8443] fuse: Bad value for 'fd' [ 135.582575][ T8451] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=8451 comm=syz.4.646 [ 135.599670][ T8451] syz.4.646: attempt to access beyond end of device [ 135.599670][ T8451] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 135.623209][ T8451] syz.4.646: attempt to access beyond end of device [ 135.623209][ T8451] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 135.659958][ T1140] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.700502][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.712947][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.715266][ T8431] bridge_slave_0: entered allmulticast mode [ 135.717875][ T8431] bridge_slave_0: entered promiscuous mode [ 135.730322][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.737637][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.740368][ T8431] bridge_slave_1: entered allmulticast mode [ 135.743257][ T8431] bridge_slave_1: entered promiscuous mode [ 135.803312][ T1140] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.872136][ T8431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.885388][ T8431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.964052][ T1140] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.977422][ T8431] team0: Port device team_slave_0 added [ 135.988113][ T8431] team0: Port device team_slave_1 added [ 136.011043][ T8473] sctp: [Deprecated]: syz.4.654 (pid 8473) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.011043][ T8473] Use struct sctp_sack_info instead [ 136.039554][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.041752][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.051611][ T8431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.061064][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.064778][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.075301][ T8431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.093140][ T66] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 136.125730][ T8476] fuse: Bad value for 'fd' [ 136.156280][ T8431] hsr_slave_0: entered promiscuous mode [ 136.158500][ T8431] hsr_slave_1: entered promiscuous mode [ 136.160764][ T8431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.172804][ T8431] Cannot create hsr debugfs directory [ 136.192913][ T834] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 136.252945][ T5286] Bluetooth: hci1: command tx timeout [ 136.266196][ T66] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 136.269601][ T66] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 136.282580][ T66] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 136.285434][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.303083][ T8461] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 136.308601][ T66] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 136.376589][ T834] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 136.402628][ T834] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.406454][ T834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 136.411004][ T834] usb 7-1: SerialNumber: syz [ 136.558595][ T66] usb 6-1: USB disconnect, device number 17 [ 136.579661][ T1140] bridge_slave_1: left allmulticast mode [ 136.581985][ T1140] bridge_slave_1: left promiscuous mode [ 136.592031][ T5942] udevd[5942]: failed to send result of seq 25410 to main daemon: Connection refused [ 136.602749][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.604299][ T7729] udevd[7729]: failed to send result of seq 25407 to main daemon: Transport endpoint is not connected [ 136.621129][ T1140] bridge_slave_0: left allmulticast mode [ 136.625857][ T1140] bridge_slave_0: left promiscuous mode [ 136.627741][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.657956][ T6583] udevd[6583]: failed to send result of seq 25130 to main daemon: Transport endpoint is not connected [ 136.662070][ T7727] udevd[7727]: failed to send result of seq 25220 to main daemon: Transport endpoint is not connected [ 136.709043][ T8471] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.717659][ T834] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 136.724281][ T834] usb 7-1: USB disconnect, device number 10 [ 136.913582][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.917752][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.921398][ T1140] bond0 (unregistering): Released all slaves [ 137.053457][ T5286] Bluetooth: hci3: command tx timeout [ 137.288507][ T1140] hsr_slave_0: left promiscuous mode [ 137.294022][ T1140] hsr_slave_1: left promiscuous mode [ 137.299837][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.309933][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.318202][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.321315][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.367295][ T1140] veth1_macvtap: left promiscuous mode [ 137.369088][ T1140] veth0_macvtap: left promiscuous mode [ 137.370811][ T1140] veth1_vlan: left promiscuous mode [ 137.372483][ T1140] veth0_vlan: left promiscuous mode [ 137.432362][ T8490] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2834047395 (22672379160 ns) > initial count (8751802360 ns). Using initial count to start timer. [ 137.440667][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.659'. [ 137.856783][ T8511] fuse: Bad value for 'fd' [ 138.121716][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 138.187853][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 138.790772][ T8528] openvswitch: netlink: Tunnel attr 7947 out of range max 16 [ 139.007371][ T8431] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 139.015888][ T8431] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 139.018324][ T8540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.673'. [ 139.025345][ T8543] fuse: Bad value for 'fd' [ 139.033085][ T8431] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 139.035320][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'. [ 139.133106][ T5286] Bluetooth: hci3: command tx timeout [ 139.177420][ T8532] team0: Port device team_slave_0 removed [ 139.192700][ T8431] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 139.208380][ T8549] bridge0: entered promiscuous mode [ 139.210574][ T8549] macvlan2: entered promiscuous mode [ 139.353032][ T1140] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.356812][ T1140] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.382697][ T6217] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.434802][ T8431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.460299][ T8431] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.472084][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.474421][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.492362][ T1204] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.494733][ T1204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.564246][ T8569] netlink: 40 bytes leftover after parsing attributes in process `syz.2.680'. [ 139.638233][ T8577] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_0, syncid = 0, id = 0 [ 139.653210][ T40] kauditd_printk_skb: 1828 callbacks suppressed [ 139.653221][ T40] audit: type=1400 audit(1747807178.837:22405): avc: denied { read } for pid=8575 comm="syz.4.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.663397][ T8576] tipc: Started in network mode [ 139.665001][ T8576] tipc: Node identity 8, cluster identity 4711 [ 139.666917][ T8576] tipc: Node number set to 8 [ 139.668424][ T40] audit: type=1400 audit(1747807178.847:22406): avc: denied { write } for pid=8575 comm="syz.4.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.676149][ T40] audit: type=1400 audit(1747807178.847:22407): avc: denied { create } for pid=8574 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.682359][ T40] audit: type=1400 audit(1747807178.847:22408): avc: denied { write } for pid=8574 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.685474][ T8576] nbd: must specify at least one socket [ 139.690060][ T40] audit: type=1400 audit(1747807178.847:22409): avc: denied { search } for pid=8573 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.696911][ T40] audit: type=1400 audit(1747807178.847:22410): avc: denied { search } for pid=8573 comm="rm" name="dhcpcd" dev="tmpfs" ino=1898 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.703939][ T40] audit: type=1400 audit(1747807178.847:22411): avc: denied { map_create } for pid=8578 comm="syz.2.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 139.710248][ T40] audit: type=1400 audit(1747807178.847:22412): avc: denied { search } for pid=8573 comm="rm" name="hook-state" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.737327][ T40] audit: type=1400 audit(1747807178.847:22414): avc: denied { map_read map_write } for pid=8578 comm="syz.2.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 139.751671][ T40] audit: type=1400 audit(1747807178.847:22413): avc: denied { getattr } for pid=8573 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.lapb7.link" dev="tmpfs" ino=3897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.882886][ T6217] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.885409][ T6217] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.077743][ T8431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.150040][ T8431] veth0_vlan: entered promiscuous mode [ 140.197144][ T8431] veth1_vlan: entered promiscuous mode [ 140.239933][ T8431] veth0_macvtap: entered promiscuous mode [ 140.248057][ T8431] veth1_macvtap: entered promiscuous mode [ 140.270591][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.281964][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.292222][ T8431] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.296720][ T8431] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.300090][ T8431] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.307785][ T8431] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.473466][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.475939][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.520089][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.523233][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.624874][ T8632] program syz.2.694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.634178][ T8632] program syz.2.694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.643073][ T8632] program syz.2.694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.650292][ T8632] program syz.2.694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.667243][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.695'. [ 140.724775][ T8642] fuse: Bad value for 'fd' [ 140.777859][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 140.780755][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.698'. [ 140.785008][ T8644] netlink: 'syz.1.698': attribute type 15 has an invalid length. [ 140.815610][ T8647] macsec1: entered promiscuous mode [ 141.039349][ T8660] kernel read not supported for file /policy (pid: 8660 comm: syz.2.703) [ 141.166076][ T8667] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 141.187434][ T8666] netlink: 248 bytes leftover after parsing attributes in process `syz.2.706'. [ 141.206563][ T8666] netlink: 240 bytes leftover after parsing attributes in process `syz.2.706'. [ 141.209953][ T8666] netlink: 240 bytes leftover after parsing attributes in process `syz.2.706'. [ 141.335369][ T8677] netlink: 'syz.1.708': attribute type 8 has an invalid length. [ 141.415450][ T8680] ip6tnl3: entered promiscuous mode [ 141.417178][ T8680] ip6tnl3: entered allmulticast mode [ 141.421395][ T8684] fuse: Bad value for 'fd' [ 141.662414][ T8696] loop6: detected capacity change from 0 to 63 [ 141.936965][ T8712] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=193 sclass=netlink_xfrm_socket pid=8712 comm=syz.1.717 [ 141.970077][ T8720] 9pnet_virtio: no channels available for device syz [ 141.974815][ T8720] 9pnet_virtio: no channels available for device syz [ 141.983697][ T8715] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 141.994082][ T8715] binder: 8713:8715 ioctl 4018aebd 2000000001c0 returned -22 [ 142.030853][ T8725] fuse: Bad value for 'fd' [ 142.216014][ T1149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.513518][ T6035] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 142.671866][ T6035] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 142.676596][ T6035] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 142.680671][ T6035] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.685420][ T6035] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.700822][ T8738] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 142.711480][ T6035] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 142.960409][ T66] usb 9-1: USB disconnect, device number 2 [ 143.293875][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.371824][ T8760] pim6reg1: entered promiscuous mode [ 143.374067][ T8760] pim6reg1: entered allmulticast mode [ 143.398272][ T8760] vxfs: WRONG superblock magic 00000000 at 1 [ 143.401698][ T8760] vxfs: WRONG superblock magic 00000000 at 8 [ 143.404686][ T8760] vxfs: can't find superblock. [ 143.415479][ T8760] Invalid source name [ 143.417067][ T8760] UBIFS error (pid: 8760): cannot open "./file0", error -22 [ 143.438878][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.446523][ T5941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.450109][ T5941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.458054][ T5941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.460961][ T5941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.573375][ T8772] fuse: Bad value for 'fd' [ 143.634127][ T1149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.772308][ T1149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.851533][ T8781] trusted_key: syz.4.733 sent an empty control message without MSG_MORE. [ 143.876277][ T8779] UHID_CREATE from different security context by process 664 (syz.2.732), this is not allowed. [ 143.881956][ T8779] program syz.2.732 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.894346][ T1149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.906708][ T8764] chnl_net:caif_netlink_parms(): no params data found [ 143.997719][ T8764] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.000004][ T8764] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.004725][ T8764] bridge_slave_0: entered allmulticast mode [ 144.007351][ T8764] bridge_slave_0: entered promiscuous mode [ 144.018066][ T8764] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.020385][ T8764] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.022857][ T8764] bridge_slave_1: entered allmulticast mode [ 144.025755][ T8764] bridge_slave_1: entered promiscuous mode [ 144.081746][ T8764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.088711][ T8764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.145071][ T8764] team0: Port device team_slave_0 added [ 144.159063][ T8764] team0: Port device team_slave_1 added [ 144.159594][ T8806] fuse: Bad value for 'fd' [ 144.197305][ T1149] bridge_slave_1: left allmulticast mode [ 144.199111][ T1149] bridge_slave_1: left promiscuous mode [ 144.200938][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.207283][ T1149] bridge_slave_0: left allmulticast mode [ 144.209069][ T1149] bridge_slave_0: left promiscuous mode [ 144.211014][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.506852][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.510843][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.514430][ T1149] bond0 (unregistering): Released all slaves [ 144.534571][ T8764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.536770][ T8764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.547558][ T8764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.566152][ T8764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.568439][ T8764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.577027][ T8764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.660675][ T8764] hsr_slave_0: entered promiscuous mode [ 144.663265][ T8764] hsr_slave_1: entered promiscuous mode [ 144.665758][ T8764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.665894][ T40] kauditd_printk_skb: 2528 callbacks suppressed [ 144.665904][ T40] audit: type=1400 audit(1747807183.847:24943): avc: denied { read write } for pid=5937 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.668096][ T8764] Cannot create hsr debugfs directory [ 144.680048][ T40] audit: type=1400 audit(1747807183.847:24944): avc: denied { read write open } for pid=5937 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.691451][ T40] audit: type=1400 audit(1747807183.847:24945): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.702882][ T40] audit: type=1400 audit(1747807183.867:24946): avc: denied { ioctl } for pid=8818 comm="syz.4.741" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.710477][ T40] audit: type=1400 audit(1747807183.887:24947): avc: denied { search } for pid=8821 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.719957][ T40] audit: type=1400 audit(1747807183.887:24948): avc: denied { search } for pid=8821 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1898 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.728625][ T40] audit: type=1400 audit(1747807183.887:24949): avc: denied { search } for pid=8821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.735864][ T834] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 144.740656][ T40] audit: type=1400 audit(1747807183.887:24950): avc: denied { search } for pid=8821 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.749035][ T40] audit: type=1400 audit(1747807183.927:24952): avc: denied { ioctl } for pid=8818 comm="syz.4.741" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.753707][ T8823] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 144.757299][ T40] audit: type=1400 audit(1747807183.927:24951): avc: denied { search } for pid=8825 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.758461][ T8823] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 144.759656][ T8823] vhci_hcd vhci_hcd.0: Device attached [ 144.774947][ T8823] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 144.777045][ T8823] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 144.779446][ T8823] vhci_hcd vhci_hcd.0: Device attached [ 144.797887][ T8827] vhci_hcd: connection closed [ 144.797995][ T8829] vhci_hcd: connection closed [ 144.798063][ T46] vhci_hcd: stop threads [ 144.802705][ T46] vhci_hcd: release socket [ 144.804219][ T46] vhci_hcd: disconnect device [ 144.805937][ T46] vhci_hcd: stop threads [ 144.807404][ T46] vhci_hcd: release socket [ 144.809299][ T46] vhci_hcd: disconnect device [ 144.873203][ T1149] hsr_slave_0: left promiscuous mode [ 144.878402][ T1149] hsr_slave_1: left promiscuous mode [ 144.880557][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.885976][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.888980][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.891259][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.918529][ T834] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.921135][ T1149] veth1_macvtap: left promiscuous mode [ 144.921854][ T834] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 144.924519][ T1149] veth0_macvtap: left promiscuous mode [ 144.928491][ T1149] veth1_vlan: left promiscuous mode [ 144.930190][ T1149] veth0_vlan: left promiscuous mode [ 144.932918][ T834] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 144.936581][ T834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.958715][ T8820] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 144.964283][ T834] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 145.215554][ T6217] usb 9-1: USB disconnect, device number 3 [ 145.293636][ T8848] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 145.546279][ T5941] Bluetooth: hci3: command tx timeout [ 145.722741][ T5941] Bluetooth: hci2: Invalid connection link type handle 0x00c8 [ 145.801310][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 145.880471][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 146.482620][ T8879] smc: net device sit0 applied user defined pnetid SYZ2 [ 146.568430][ T8888] __nla_validate_parse: 3 callbacks suppressed [ 146.568442][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 146.616220][ T8893] syzkaller1: entered promiscuous mode [ 146.618028][ T8893] syzkaller1: entered allmulticast mode [ 146.624387][ T8893] new mount options do not match the existing superblock, will be ignored [ 146.633989][ T8893] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 146.829035][ T8903] netlink: 'syz.1.763': attribute type 12 has an invalid length. [ 146.880042][ T8908] netlink: 64 bytes leftover after parsing attributes in process `syz.2.765'. [ 146.889318][ T8908] netlink: 'syz.2.765': attribute type 7 has an invalid length. [ 146.894774][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'. [ 146.945257][ T8764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 146.946349][ T8905] afs: Unknown parameter 'dDç<Îò•oוóGyn' [ 146.954859][ T8764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 146.974204][ T8764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 146.982047][ T8764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 147.104442][ T8905] Falling back ldisc for ttyS3. [ 147.107788][ T8764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.134561][ T8764] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.144592][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.146749][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.157646][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.160372][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.312593][ T6035] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 147.443026][ T6035] usb 7-1: device descriptor read/64, error -71 [ 147.622703][ T5941] Bluetooth: hci3: command tx timeout [ 147.648122][ T8764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.723511][ T8764] veth0_vlan: entered promiscuous mode [ 147.747193][ T8764] veth1_vlan: entered promiscuous mode [ 147.830630][ T8764] veth0_macvtap: entered promiscuous mode [ 147.832686][ T6035] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 147.838893][ T8764] veth1_macvtap: entered promiscuous mode [ 147.866734][ T8764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.880000][ T8764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.891966][ T8764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.896163][ T8764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.898828][ T8764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.901440][ T8764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.972909][ T6035] usb 7-1: device descriptor read/64, error -71 [ 147.991502][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.000889][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.039588][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.041993][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.082738][ T6035] usb usb7-port1: attempt power cycle [ 148.172244][ T8948] netlink: 200 bytes leftover after parsing attributes in process `syz.4.770'. [ 148.442603][ T6035] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 148.473995][ T6035] usb 7-1: device descriptor read/8, error -71 [ 148.491096][ T8959] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 148.523155][ T8962] netlink: 'syz.4.773': attribute type 21 has an invalid length. [ 148.525656][ T8962] netlink: 156 bytes leftover after parsing attributes in process `syz.4.773'. [ 148.712736][ T6035] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 148.735176][ T6035] usb 7-1: device descriptor read/8, error -71 [ 148.745321][ T8967] netlink: 144 bytes leftover after parsing attributes in process `syz.4.774'. [ 148.751596][ T8967] netlink: 16 bytes leftover after parsing attributes in process `syz.4.774'. [ 148.842711][ T6035] usb usb7-port1: unable to enumerate USB device [ 148.873751][ T8975] tun0: tun_chr_ioctl cmd 1074025675 [ 148.875631][ T8975] tun0: persist disabled [ 148.877428][ T8974] tun0: tun_chr_ioctl cmd 1074025675 [ 148.879216][ T8974] tun0: persist enabled [ 148.886760][ T8974] fuse: Unknown parameter 'batadv_slave_1' [ 148.903635][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.776'. [ 149.044826][ T8981] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 149.070530][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.780'. [ 149.073854][ T8983] bridge_slave_1: left allmulticast mode [ 149.075595][ T8983] bridge_slave_1: left promiscuous mode [ 149.077527][ T8983] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.090150][ T8983] bridge_slave_0: left allmulticast mode [ 149.091927][ T8983] bridge_slave_0: left promiscuous mode [ 149.096439][ T8983] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.375946][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.780'. [ 149.676124][ T40] kauditd_printk_skb: 2422 callbacks suppressed [ 149.676136][ T40] audit: type=1400 audit(1747807188.857:27375): avc: denied { name_bind } for pid=9004 comm="syz.1.784" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 149.687310][ T40] audit: type=1400 audit(1747807188.857:27376): avc: denied { node_bind } for pid=9004 comm="syz.1.784" saddr=255.255.255.255 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 149.765217][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.790163][ T40] audit: type=1400 audit(1747807188.967:27377): avc: denied { name_bind } for pid=9004 comm="syz.1.784" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 149.796961][ T40] audit: type=1400 audit(1747807188.967:27378): avc: denied { node_bind } for pid=9004 comm="syz.1.784" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 149.821959][ T40] audit: type=1400 audit(1747807188.997:27379): avc: denied { read write } for pid=5937 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.829273][ T40] audit: type=1400 audit(1747807188.997:27380): avc: denied { read write open } for pid=5937 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.837024][ T40] audit: type=1400 audit(1747807188.997:27381): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.945178][ T40] audit: type=1400 audit(1747807189.127:27382): avc: denied { sys_admin } for pid=9010 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 149.951709][ T40] audit: type=1400 audit(1747807189.127:27383): avc: denied { sys_admin } for pid=9010 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 149.960278][ T40] audit: type=1400 audit(1747807189.127:27384): avc: denied { sys_admin } for pid=9010 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 150.854787][ T9000] Set syz1 is full, maxelem 65536 reached [ 150.876559][ T9016] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=9016 comm=syz.1.785 [ 150.959895][ T5286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.965964][ T5286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.972185][ T5286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.976674][ T5286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.980101][ T5286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.191648][ T9021] chnl_net:caif_netlink_parms(): no params data found [ 151.285107][ T9021] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.287421][ T9021] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.289717][ T9021] bridge_slave_0: entered allmulticast mode [ 151.292308][ T9021] bridge_slave_0: entered promiscuous mode [ 151.297137][ T9021] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.299369][ T9021] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.301577][ T9021] bridge_slave_1: entered allmulticast mode [ 151.304167][ T9021] bridge_slave_1: entered promiscuous mode [ 151.339925][ T9021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.348859][ T9021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.406168][ T9021] team0: Port device team_slave_0 added [ 151.410914][ T9021] team0: Port device team_slave_1 added [ 151.448750][ T9021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.450847][ T9021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.459188][ T9021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.464968][ T9021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.467269][ T9021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.476724][ T9021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.522753][ T9021] hsr_slave_0: entered promiscuous mode [ 151.525121][ T9021] hsr_slave_1: entered promiscuous mode [ 151.527476][ T9021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.529751][ T9021] Cannot create hsr debugfs directory [ 151.581283][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.648203][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.718064][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.737660][ T9057] overlay: ./file0 is not a directory [ 151.782620][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 151.864283][ T9056] bridge2: entered promiscuous mode [ 151.866248][ T9056] bridge2: entered allmulticast mode [ 151.894238][ T13] bridge_slave_1: left allmulticast mode [ 151.896127][ T13] bridge_slave_1: left promiscuous mode [ 151.897971][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.910032][ T13] bridge_slave_0: left allmulticast mode [ 151.911943][ T13] bridge_slave_0: left promiscuous mode [ 151.914101][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.214401][ T9077] xt_hashlimit: size too large, truncated to 1048576 [ 152.254811][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.261695][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.278281][ T13] bond0 (unregistering): Released all slaves [ 152.465589][ T9082] bond1: entered promiscuous mode [ 152.467207][ T9082] bond1: entered allmulticast mode [ 152.469015][ T9082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.606158][ T13] hsr_slave_0: left promiscuous mode [ 152.609394][ T13] hsr_slave_1: left promiscuous mode [ 152.611844][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.617425][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.620194][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.622449][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.652700][ T13] veth1_macvtap: left promiscuous mode [ 152.657518][ T13] veth0_macvtap: left promiscuous mode [ 152.659394][ T13] veth1_vlan: left promiscuous mode [ 152.662339][ T13] veth0_vlan: left promiscuous mode [ 152.930323][ T9108] syz.1.807: attempt to access beyond end of device [ 152.930323][ T9108] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 152.935646][ T9108] SQUASHFS error: Failed to read block 0x0: -5 [ 152.937689][ T9108] unable to read squashfs_super_block [ 153.063494][ T5286] Bluetooth: hci3: command tx timeout [ 153.391685][ T13] team0 (unregistering): Port device team_slave_1 removed [ 153.466491][ T13] team0 (unregistering): Port device team_slave_0 removed [ 154.060410][ T9021] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 154.068546][ T9021] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 154.075639][ T9021] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 154.083379][ T9021] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 154.208707][ T9021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.238848][ T9021] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.254869][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.257353][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.292454][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.295604][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.522576][ T6217] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 154.683763][ T6217] usb 6-1: Using ep0 maxpacket: 8 [ 154.686832][ T40] kauditd_printk_skb: 1362 callbacks suppressed [ 154.686843][ T40] audit: type=1400 audit(1747807193.867:28747): avc: denied { ioctl } for pid=9144 comm="syz.1.816" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.692029][ T6217] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 154.702306][ T6217] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 154.702601][ T40] audit: type=1400 audit(1747807193.867:28748): avc: denied { ioctl } for pid=9144 comm="syz.1.816" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.709391][ T6217] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 154.712291][ T40] audit: type=1400 audit(1747807193.867:28749): avc: denied { ioctl } for pid=9144 comm="syz.1.816" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.712320][ T40] audit: type=1400 audit(1747807193.867:28750): avc: denied { ioctl } for pid=9144 comm="syz.1.816" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.722675][ T6217] usb 6-1: config 250 has no interface number 0 [ 154.742797][ T6217] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 154.743774][ T40] audit: type=1400 audit(1747807193.867:28751): avc: denied { ioctl } for pid=9144 comm="syz.1.816" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.750155][ T6217] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 154.762926][ T6217] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 154.763985][ T40] audit: type=1400 audit(1747807193.877:28752): avc: denied { ioctl } for pid=9144 comm="syz.1.816" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.767754][ T6217] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 154.777197][ T6217] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 154.781940][ T6217] usb 6-1: config 250 interface 228 has no altsetting 0 [ 154.784206][ T40] audit: type=1400 audit(1747807193.927:28753): avc: denied { sys_module } for pid=9154 comm="syz.4.818" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 154.784232][ T40] audit: type=1400 audit(1747807193.927:28754): avc: denied { module_request } for pid=9154 comm="syz.4.818" kmod="bridge0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 154.784255][ T40] audit: type=1400 audit(1747807193.937:28755): avc: denied { read } for pid=9165 comm="syz.2.820" dev="nsfs" ino=4026533043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 154.784277][ T40] audit: type=1400 audit(1747807193.937:28756): avc: denied { read open } for pid=9165 comm="syz.2.820" path="net:[4026533043]" dev="nsfs" ino=4026533043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 154.830772][ T6217] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 154.833828][ T6217] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 154.836525][ T6217] usb 6-1: Product: syz [ 154.837897][ T6217] usb 6-1: SerialNumber: syz [ 154.851108][ T9021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.851127][ T6217] hub 6-1:250.228: bad descriptor, ignoring hub [ 154.862816][ T6217] hub 6-1:250.228: probe with driver hub failed with error -5 [ 154.910421][ T9021] veth0_vlan: entered promiscuous mode [ 154.928729][ T9021] veth1_vlan: entered promiscuous mode [ 154.973808][ T9021] veth0_macvtap: entered promiscuous mode [ 154.981500][ T9021] veth1_macvtap: entered promiscuous mode [ 155.005817][ T9021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.014427][ T9021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.028551][ T9021] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.032043][ T9021] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.036139][ T9021] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.039568][ T9021] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.058216][ T6217] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 18 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 155.132864][ T5286] Bluetooth: hci3: command tx timeout [ 155.134683][ T1204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.137103][ T1204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.186085][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.189119][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.372693][ T3340] usb 6-1: USB disconnect, device number 18 [ 155.378843][ T3340] usblp0: removed [ 155.712710][ T3340] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 155.802708][ T5796] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 155.864105][ T1204] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.872968][ T3340] usb 6-1: Using ep0 maxpacket: 8 [ 155.881276][ T3340] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 155.886138][ T3340] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 155.888761][ T3340] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 155.891784][ T3340] usb 6-1: config 250 has no interface number 0 [ 155.894157][ T3340] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 155.897835][ T3340] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 155.901045][ T3340] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 155.905398][ T3340] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 155.908553][ T3340] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 155.913455][ T3340] usb 6-1: config 250 interface 228 has no altsetting 0 [ 155.920930][ T3340] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 155.925068][ T3340] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 155.927777][ T3340] usb 6-1: Product: syz [ 155.929095][ T3340] usb 6-1: SerialNumber: syz [ 155.937746][ T3340] hub 6-1:250.228: bad descriptor, ignoring hub [ 155.939862][ T3340] hub 6-1:250.228: probe with driver hub failed with error -5 [ 155.974553][ T5796] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.978463][ T5796] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 155.985929][ T5796] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.989738][ T5796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.999726][ T9196] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 156.005885][ T5796] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 156.045163][ T1204] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.081400][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.085846][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.089087][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.092040][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.096120][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.148971][ T3340] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 19 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 156.157269][ T9146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.159972][ T9146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.169933][ T1204] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.173571][ T3340] usb 6-1: USB disconnect, device number 19 [ 156.180830][ T3340] usblp0: removed [ 156.249498][ T834] usb 7-1: USB disconnect, device number 15 [ 156.289115][ T1204] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.386171][ T9208] chnl_net:caif_netlink_parms(): no params data found [ 156.500413][ T9208] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.502927][ T9208] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.505221][ T9208] bridge_slave_0: entered allmulticast mode [ 156.507902][ T9208] bridge_slave_0: entered promiscuous mode [ 156.518261][ T9208] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.521151][ T9208] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.524121][ T9208] bridge_slave_1: entered allmulticast mode [ 156.526736][ T9208] bridge_slave_1: entered promiscuous mode [ 156.765940][ T1204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.770335][ T1204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.774477][ T1204] bond0 (unregistering): Released all slaves [ 156.847550][ T1204] bond1 (unregistering): Released all slaves [ 156.856153][ T9208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.869225][ T9208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.929541][ T9208] team0: Port device team_slave_0 added [ 156.931682][ T1204] tipc: Left network mode [ 156.940726][ T9208] team0: Port device team_slave_1 added [ 156.963219][ T1204] IPVS: stopping master sync thread 8577 ... [ 156.995374][ T9208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.997581][ T9208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.007323][ T9208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.014632][ T9208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.016821][ T9208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.025642][ T9208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.036540][ T9227] __nla_validate_parse: 64 callbacks suppressed [ 157.036550][ T9227] netlink: 48 bytes leftover after parsing attributes in process `syz.1.832'. [ 157.039748][ T9226] netlink: 830 bytes leftover after parsing attributes in process `syz.2.833'. [ 157.088969][ T9208] hsr_slave_0: entered promiscuous mode [ 157.091221][ T9208] hsr_slave_1: entered promiscuous mode [ 157.094843][ T9208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.097248][ T9208] Cannot create hsr debugfs directory [ 157.171052][ T9229] (syz.2.833,9229,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 157.175351][ T9229] (syz.2.833,9229,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 157.182637][ T1204] hsr_slave_0: left promiscuous mode [ 157.187333][ T1204] hsr_slave_1: left promiscuous mode [ 157.189380][ T1204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.191731][ T1204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.197098][ T1204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.199887][ T1204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.237384][ T1204] veth1_macvtap: left promiscuous mode [ 157.239233][ T1204] veth0_macvtap: left promiscuous mode [ 157.241031][ T1204] veth1_vlan: left promiscuous mode [ 157.242824][ T1204] veth0_vlan: left promiscuous mode [ 157.869530][ T1204] team0 (unregistering): Port device team_slave_1 removed [ 157.941170][ T1204] team0 (unregistering): Port device team_slave_0 removed [ 158.176901][ T5286] Bluetooth: hci1: command tx timeout [ 158.548059][ T9244] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 158.550469][ T9244] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 158.555442][ T9244] vhci_hcd vhci_hcd.0: Device attached [ 158.568008][ T9244] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 158.570549][ T9244] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 158.578505][ T9244] vhci_hcd vhci_hcd.0: Device attached [ 158.609689][ T9247] vhci_hcd: connection closed [ 158.609981][ T1155] vhci_hcd: stop threads [ 158.611374][ T9245] vhci_hcd: connection closed [ 158.612062][ T1155] vhci_hcd: release socket [ 158.622783][ T1155] vhci_hcd: disconnect device [ 158.626115][ T1155] vhci_hcd: stop threads [ 158.627951][ T1155] vhci_hcd: release socket [ 158.629837][ T1155] vhci_hcd: disconnect device [ 158.644164][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.649035][ T5941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.655623][ T5941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.665290][ T5941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.669408][ T5941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.797218][ T9255] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 158.799955][ T9255] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 158.803312][ T9255] vhci_hcd vhci_hcd.0: Device attached [ 158.808322][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.839'. [ 158.811632][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.839'. [ 158.838949][ T9208] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 158.842454][ T9256] vhci_hcd: connection closed [ 158.846468][ T1149] vhci_hcd: stop threads [ 158.847517][ T9208] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 158.848467][ T1149] vhci_hcd: release socket [ 158.848482][ T1149] vhci_hcd: disconnect device [ 158.861528][ T9208] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 158.891131][ T9208] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 159.009773][ T9249] chnl_net:caif_netlink_parms(): no params data found [ 159.069511][ T9208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.102653][ T9249] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.104994][ T9249] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.107308][ T9249] bridge_slave_0: entered allmulticast mode [ 159.109961][ T9249] bridge_slave_0: entered promiscuous mode [ 159.116303][ T9249] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.118600][ T9249] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.120854][ T9249] bridge_slave_1: entered allmulticast mode [ 159.124146][ T9249] bridge_slave_1: entered promiscuous mode [ 159.153065][ T834] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 159.174657][ T9249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.179141][ T9208] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.210083][ T1204] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.220185][ T9249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.266521][ T9249] team0: Port device team_slave_0 added [ 159.278830][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.281110][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.286137][ T9249] team0: Port device team_slave_1 added [ 159.309109][ T834] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 159.312728][ T834] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 159.315773][ T834] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 159.318572][ T834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.322460][ T1204] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.333487][ T9263] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 159.338749][ T834] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 159.365750][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.368556][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.373857][ T9249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.376131][ T9249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.384735][ T9249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.391101][ T9249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.393369][ T9249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.401502][ T9249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.426203][ T1204] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.470358][ T9249] hsr_slave_0: entered promiscuous mode [ 159.472812][ T9249] hsr_slave_1: entered promiscuous mode [ 159.547131][ T1204] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.580292][ T834] usb 7-1: USB disconnect, device number 16 [ 159.712938][ T1204] bridge_slave_1: left allmulticast mode [ 159.714870][ T1204] bridge_slave_1: left promiscuous mode [ 159.716845][ T1204] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.721186][ T1204] bridge_slave_0: left allmulticast mode [ 159.723214][ T1204] bridge_slave_0: left promiscuous mode [ 159.725193][ T1204] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.732430][ T40] kauditd_printk_skb: 1130 callbacks suppressed [ 159.732440][ T40] audit: type=1400 audit(1747807198.907:29887): avc: denied { sys_module } for pid=9208 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 159.741987][ T40] audit: type=1400 audit(1747807198.907:29888): avc: denied { module_request } for pid=9208 comm="syz-executor" kmod="nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 159.802416][ T40] audit: type=1400 audit(1747807198.977:29889): avc: denied { read write } for pid=5937 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.814877][ T40] audit: type=1400 audit(1747807198.997:29890): avc: denied { read write open } for pid=5937 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.831178][ T40] audit: type=1400 audit(1747807198.997:29891): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.856764][ T40] audit: type=1400 audit(1747807199.037:29892): avc: denied { read } for pid=9277 comm="syz.1.843" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 159.866266][ T40] audit: type=1400 audit(1747807199.037:29893): avc: denied { read open } for pid=9277 comm="syz.1.843" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 159.879398][ T40] audit: type=1400 audit(1747807199.037:29894): avc: denied { ioctl } for pid=9277 comm="syz.1.843" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 159.893754][ T40] audit: type=1400 audit(1747807199.037:29895): avc: denied { create } for pid=9277 comm="syz.1.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 159.902355][ T40] audit: type=1400 audit(1747807199.037:29896): avc: denied { create } for pid=9277 comm="syz.1.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 160.116969][ T1204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.122050][ T1204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.125895][ T1204] bond0 (unregistering): Released all slaves [ 160.252661][ T5286] Bluetooth: hci1: command tx timeout [ 160.414534][ T9208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.487821][ T1204] hsr_slave_0: left promiscuous mode [ 160.490142][ T1204] hsr_slave_1: left promiscuous mode [ 160.492284][ T1204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.494972][ T1204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.514098][ T1204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.517331][ T1204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.562086][ T1204] veth1_macvtap: left promiscuous mode [ 160.564583][ T1204] veth0_macvtap: left promiscuous mode [ 160.567005][ T1204] veth1_vlan: left promiscuous mode [ 160.569292][ T1204] veth0_vlan: left promiscuous mode [ 160.742636][ T5286] Bluetooth: hci3: command tx timeout [ 160.953191][ T9303] netlink: 'syz.2.846': attribute type 1 has an invalid length. [ 160.956130][ T9303] netlink: 'syz.2.846': attribute type 4 has an invalid length. [ 160.958567][ T9303] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.846'. [ 161.038677][ T9308] netlink: 'syz.2.848': attribute type 10 has an invalid length. [ 161.298990][ T1204] team0 (unregistering): Port device team_slave_1 removed [ 161.367327][ T1204] team0 (unregistering): Port device team_slave_0 removed [ 162.045842][ T9249] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.059186][ T9249] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 162.074363][ T9249] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 162.093304][ T9249] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 162.122272][ T9317] netlink: 'syz.1.849': attribute type 1 has an invalid length. [ 162.125901][ T9316] netlink: 'syz.1.849': attribute type 1 has an invalid length. [ 162.320057][ T9249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.332607][ T5286] Bluetooth: hci1: command tx timeout [ 162.349666][ T9249] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.360976][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.363299][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.375017][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.377016][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.853'. [ 162.377310][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.532615][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 162.546862][ T9208] veth0_vlan: entered promiscuous mode [ 162.571484][ T9208] veth1_vlan: entered promiscuous mode [ 162.665002][ T9208] veth0_macvtap: entered promiscuous mode [ 162.683532][ T9208] veth1_macvtap: entered promiscuous mode [ 162.690981][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 162.699589][ T9] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 162.706679][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.709665][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.728465][ T9325] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 162.738529][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 162.745002][ T9208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.763798][ T9208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.773015][ T9208] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.775827][ T9208] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.778509][ T9208] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.781210][ T9208] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.812695][ T5286] Bluetooth: hci3: command tx timeout [ 162.879651][ T1204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.882224][ T1204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.911613][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.914922][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.007856][ T834] usb 7-1: USB disconnect, device number 17 [ 163.137711][ T9249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.222728][ T9249] veth0_vlan: entered promiscuous mode [ 163.236307][ T9249] veth1_vlan: entered promiscuous mode [ 163.275882][ T9249] veth0_macvtap: entered promiscuous mode [ 163.283804][ T9249] veth1_macvtap: entered promiscuous mode [ 163.306230][ T9344] netlink: 'syz.1.854': attribute type 1 has an invalid length. [ 163.309288][ T9249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.319687][ T9249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.329176][ T9249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.331925][ T9249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.338501][ T9249] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.341296][ T9249] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.393015][ T59] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 163.434435][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.437294][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.469121][ T1204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.472990][ T1204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.543121][ T59] usb 10-1: Using ep0 maxpacket: 32 [ 163.560281][ T59] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 163.563678][ T59] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 163.567127][ T59] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 163.570373][ T59] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 163.575770][ T59] usb 10-1: config 0 interface 0 has no altsetting 0 [ 163.598653][ T59] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 163.602081][ T59] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 163.610155][ T59] usb 10-1: Product: syz [ 163.611827][ T59] usb 10-1: Manufacturer: syz [ 163.616651][ T59] usb 10-1: SerialNumber: syz [ 163.622754][ T59] usb 10-1: config 0 descriptor?? [ 163.631469][ T9349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.856'. [ 163.631896][ T59] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 163.641774][ T59] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 163.834623][ T59] usb 10-1: USB disconnect, device number 2 [ 163.839241][ T59] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 163.862045][ T9358] loop4: detected capacity change from 0 to 524255232 [ 164.006395][ T9364] x_tables: duplicate underflow at hook 1 [ 164.047770][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.830'. [ 164.050612][ T9355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.830'. [ 164.414192][ T5286] Bluetooth: hci1: command tx timeout [ 164.692325][ T1204] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.741909][ T40] kauditd_printk_skb: 1863 callbacks suppressed [ 164.741922][ T40] audit: type=1400 audit(1747807203.917:31760): avc: denied { create } for pid=9390 comm="syz.5.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.750005][ T40] audit: type=1400 audit(1747807203.927:31761): avc: denied { prog_load } for pid=9390 comm="syz.5.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 164.758777][ T40] audit: type=1400 audit(1747807203.927:31762): avc: denied { bpf } for pid=9390 comm="syz.5.866" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 164.767008][ T40] audit: type=1400 audit(1747807203.937:31763): avc: denied { read write } for pid=9390 comm="syz.5.866" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.775658][ T40] audit: type=1400 audit(1747807203.937:31764): avc: denied { read write open } for pid=9390 comm="syz.5.866" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.783529][ T40] audit: type=1400 audit(1747807203.937:31765): avc: denied { ioctl } for pid=9390 comm="syz.5.866" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.791261][ T40] audit: type=1400 audit(1747807203.937:31766): avc: denied { ioctl } for pid=9390 comm="syz.5.866" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.800078][ T40] audit: type=1400 audit(1747807203.937:31767): avc: denied { ioctl } for pid=9390 comm="syz.5.866" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.810518][ T40] audit: type=1400 audit(1747807203.937:31768): avc: denied { ioctl } for pid=9390 comm="syz.5.866" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.819113][ T40] audit: type=1400 audit(1747807203.947:31769): avc: denied { search } for pid=9388 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.002777][ T5995] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 165.172855][ T5995] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 165.177293][ T5995] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 165.181280][ T5995] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 165.185141][ T5995] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.202891][ T9391] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 165.210894][ T5995] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 165.397797][ T1204] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.466786][ T5995] usb 10-1: USB disconnect, device number 3 [ 165.964199][ T1204] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.977153][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.868'. [ 166.027653][ T9400] netlink: 36 bytes leftover after parsing attributes in process `syz.2.869'. [ 166.032821][ T1204] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.034880][ T9404] netlink: 'syz.1.868': attribute type 1 has an invalid length. [ 166.073971][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.079147][ T5941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.083994][ T5941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.089437][ T5941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.092218][ T5941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.249417][ T9412] xt_hashlimit: size too large, truncated to 1048576 [ 166.330972][ T1204] bridge_slave_1: left allmulticast mode [ 166.333618][ T1204] bridge_slave_1: left promiscuous mode [ 166.337455][ T1204] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.352177][ T1204] bridge_slave_0: left allmulticast mode [ 166.354016][ T1204] bridge_slave_0: left promiscuous mode [ 166.355797][ T1204] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.399958][ T9423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.455138][ T9427] fuse: Bad value for 'fd' [ 166.565331][ T9432] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 166.575745][ T9432] CIFS mount error: No usable UNC path provided in device string! [ 166.575745][ T9432] [ 166.580001][ T9432] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 166.642927][ T9434] openvswitch: netlink: IP tunnel TTL not specified. [ 166.756890][ T1204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.762689][ T1204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.767829][ T1204] bond0 (unregistering): Released all slaves [ 166.778386][ T9438] netlink: 44 bytes leftover after parsing attributes in process `syz.2.879'. [ 166.781133][ T9438] netlink: 'syz.2.879': attribute type 6 has an invalid length. [ 166.783958][ T9438] netlink: 'syz.2.879': attribute type 5 has an invalid length. [ 166.786297][ T9438] netlink: 'syz.2.879': attribute type 4 has an invalid length. [ 166.795629][ T9405] chnl_net:caif_netlink_parms(): no params data found [ 166.901051][ T9456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=9456 comm=syz.2.881 [ 166.974937][ T9405] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.977755][ T9405] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.980615][ T9405] bridge_slave_0: entered allmulticast mode [ 166.985132][ T9405] bridge_slave_0: entered promiscuous mode [ 166.989067][ T9405] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.991337][ T9405] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.996137][ T9405] bridge_slave_1: entered allmulticast mode [ 166.998809][ T9405] bridge_slave_1: entered promiscuous mode [ 167.021605][ T9464] openvswitch: netlink: Duplicate or invalid key (type 0). [ 167.024239][ T9464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.054060][ T9405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.114164][ T9405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.118403][ T9470] fuse: Bad value for 'fd' [ 167.167850][ T9405] team0: Port device team_slave_0 added [ 167.184268][ T1204] hsr_slave_0: left promiscuous mode [ 167.186561][ T1204] hsr_slave_1: left promiscuous mode [ 167.188670][ T1204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.191025][ T1204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.199662][ T1204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.202027][ T1204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.236946][ T1204] veth1_macvtap: left promiscuous mode [ 167.238795][ T1204] veth0_macvtap: left promiscuous mode [ 167.240883][ T1204] veth1_vlan: left promiscuous mode [ 167.242767][ T1204] veth0_vlan: left promiscuous mode [ 167.515380][ T6004] IPVS: starting estimator thread 0... [ 167.541573][ T9486] overlay: ./file0 is not a directory [ 167.560455][ T9492] program syz.2.889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.612778][ T9488] IPVS: using max 42 ests per chain, 100800 per kthread [ 167.999194][ T1204] team0 (unregistering): Port device team_slave_1 removed [ 168.080630][ T1204] team0 (unregistering): Port device team_slave_0 removed [ 168.174197][ T5941] Bluetooth: hci3: command tx timeout [ 168.415424][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 168.633171][ T9405] team0: Port device team_slave_1 added [ 168.726159][ T9405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.728387][ T9405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.736842][ T9405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.743250][ T9405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.745436][ T9405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.753941][ T9405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.805527][ T9405] hsr_slave_0: entered promiscuous mode [ 168.807763][ T9405] hsr_slave_1: entered promiscuous mode [ 169.044355][ T9515] xt_hashlimit: size too large, truncated to 1048576 [ 169.212697][ T59] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 169.294359][ T9405] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 169.300932][ T9405] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 169.309158][ T9405] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 169.318850][ T9405] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 169.387246][ T59] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.391171][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 169.396485][ T59] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 169.399969][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.412696][ T59] usb 7-1: config 0 descriptor?? [ 169.424055][ T59] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 169.426624][ T59] dvb-usb: bulk message failed: -22 (3/0) [ 169.435824][ T59] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 169.439941][ T59] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 169.444881][ T59] usb 7-1: media controller created [ 169.448473][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.462407][ T9405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.467171][ T59] dvb-usb: bulk message failed: -22 (6/0) [ 169.469402][ T59] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 169.474477][ T59] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input13 [ 169.484545][ T59] dvb-usb: schedule remote query interval to 150 msecs. [ 169.487261][ T59] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 169.497122][ T9405] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.506210][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.508490][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.517396][ T1204] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.520029][ T1204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.638222][ T834] usb 7-1: USB disconnect, device number 18 [ 169.653136][ T6004] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 169.661111][ T834] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 169.791983][ T40] kauditd_printk_skb: 665 callbacks suppressed [ 169.791995][ T40] audit: type=1400 audit(1747807208.967:32435): avc: denied { module_request } for pid=9405 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 169.804740][ T40] audit: type=1400 audit(1747807208.987:32436): avc: denied { ioctl } for pid=9520 comm="syz.5.898" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.808556][ T6004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 169.814149][ T40] audit: type=1400 audit(1747807208.987:32437): avc: denied { ioctl } for pid=9520 comm="syz.5.898" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.816732][ T6004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 169.823778][ T40] audit: type=1400 audit(1747807208.987:32438): avc: denied { ioctl } for pid=9520 comm="syz.5.898" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.827198][ T6004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 169.834383][ T40] audit: type=1400 audit(1747807208.987:32439): avc: denied { ioctl } for pid=9520 comm="syz.5.898" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.839256][ T6004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 169.844548][ T40] audit: type=1400 audit(1747807208.987:32440): avc: denied { ioctl } for pid=9520 comm="syz.5.898" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.844598][ T40] audit: type=1400 audit(1747807208.997:32441): avc: denied { ioctl } for pid=9520 comm="syz.5.898" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.864151][ T40] audit: type=1400 audit(1747807209.037:32442): avc: denied { ioctl } for pid=9520 comm="syz.5.898" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.865188][ T6004] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 169.871915][ T40] audit: type=1400 audit(1747807209.037:32443): avc: denied { ioctl } for pid=9520 comm="syz.5.898" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.878150][ T6004] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.882331][ T40] audit: type=1400 audit(1747807209.037:32444): avc: denied { ioctl } for pid=9520 comm="syz.5.898" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.886591][ T6004] usb 10-1: Product: syz [ 169.894298][ T6004] usb 10-1: Manufacturer: syz [ 169.895658][ T6004] usb 10-1: SerialNumber: syz [ 169.901733][ T6004] usb 10-1: config 0 descriptor?? [ 169.968937][ T9524] xt_l2tp: unknown flags: 17 [ 169.996159][ T9405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.052800][ T9405] veth0_vlan: entered promiscuous mode [ 170.065543][ T9405] veth1_vlan: entered promiscuous mode [ 170.104686][ T9405] veth0_macvtap: entered promiscuous mode [ 170.111939][ T9405] veth1_macvtap: entered promiscuous mode [ 170.121514][ T6004] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 170.133982][ T9405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.143027][ T9405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.150906][ T9405] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.154137][ T9405] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.156833][ T9405] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.159766][ T9405] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.216245][ T1204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.219548][ T1204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.239439][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.241712][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.252736][ T5941] Bluetooth: hci3: command tx timeout [ 170.337930][ T9530] netlink: 'syz.2.900': attribute type 1 has an invalid length. [ 170.340216][ T9530] netlink: 'syz.2.900': attribute type 4 has an invalid length. [ 170.342381][ T9530] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.900'. [ 170.351072][ T59] usb 10-1: USB disconnect, device number 4 [ 170.646555][ T9541] tipc: Started in network mode [ 170.648168][ T9541] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 170.650439][ T9541] tipc: Enabled bearer , priority 0 [ 170.812838][ T59] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 170.938057][ T9556] /dev/sg0: Can't lookup blockdev [ 170.972707][ T59] usb 10-1: Using ep0 maxpacket: 32 [ 170.982443][ T59] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 170.986926][ T59] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 170.989630][ T59] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 170.992432][ T59] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 171.000301][ T59] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 171.005966][ T59] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 171.010085][ T59] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 171.016452][ T59] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.025134][ T59] usb 10-1: config 0 descriptor?? [ 171.238737][ T59] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 171.245063][ T59] usb 10-1: USB disconnect, device number 5 [ 171.249735][ T59] usblp0: removed [ 171.552654][ T59] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 171.642755][ T834] tipc: Node number set to 11578026 [ 171.702756][ T9566] QAT: Invalid ioctl 1342215192 [ 171.703172][ T59] usb 10-1: Using ep0 maxpacket: 32 [ 171.712760][ T59] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 171.716321][ T59] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 171.719136][ T59] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 171.721935][ T9566] input: syz0 as /devices/virtual/input/input14 [ 171.724235][ T59] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 171.727258][ T59] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 171.730283][ T59] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 171.734667][ T59] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 171.737541][ T59] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.744504][ T59] usb 10-1: config 0 descriptor?? [ 171.924530][ T9570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.910'. [ 171.971135][ T59] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 171.984894][ T59] usb 10-1: USB disconnect, device number 6 [ 171.991095][ T59] usblp0: removed [ 172.011022][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.388762][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.471149][ T5941] Bluetooth: hci1: hardware error 0x07 [ 173.584170][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.615714][ T5943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.621779][ T5943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.626111][ T5943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.630043][ T5943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.634315][ T5943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.645987][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.805308][ T12] bridge_slave_1: left allmulticast mode [ 173.807726][ T12] bridge_slave_1: left promiscuous mode [ 173.810219][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.838817][ T12] bridge_slave_0: left allmulticast mode [ 173.840624][ T12] bridge_slave_0: left promiscuous mode [ 173.842455][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.245928][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.251832][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.257352][ T12] bond0 (unregistering): Released all slaves [ 174.278156][ T9593] chnl_net:caif_netlink_parms(): no params data found [ 174.427462][ T9593] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.430536][ T9593] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.432232][ T9640] netlink: 48 bytes leftover after parsing attributes in process `syz.2.926'. [ 174.433732][ T9593] bridge_slave_0: entered allmulticast mode [ 174.441619][ T9593] bridge_slave_0: entered promiscuous mode [ 174.449827][ T9593] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.452194][ T9593] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.456440][ T9593] bridge_slave_1: entered allmulticast mode [ 174.459134][ T9593] bridge_slave_1: entered promiscuous mode [ 174.535629][ T9644] netlink: 'syz.2.928': attribute type 1 has an invalid length. [ 174.537134][ T9593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.545464][ T9593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.547256][ T9646] netlink: 'syz.2.928': attribute type 1 has an invalid length. [ 174.586966][ T9593] team0: Port device team_slave_0 added [ 174.597248][ T9593] team0: Port device team_slave_1 added [ 174.603805][ T12] hsr_slave_0: left promiscuous mode [ 174.606228][ T12] hsr_slave_1: left promiscuous mode [ 174.608219][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.610505][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.616163][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.618883][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.628945][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'. [ 174.640197][ T12] veth1_macvtap: left promiscuous mode [ 174.641990][ T12] veth0_macvtap: left promiscuous mode [ 174.644182][ T12] veth1_vlan: left promiscuous mode [ 174.645935][ T12] veth0_vlan: left promiscuous mode [ 174.690527][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'. [ 174.954538][ T40] kauditd_printk_skb: 728 callbacks suppressed [ 174.954552][ T40] audit: type=1400 audit(1747807214.137:33173): avc: denied { read write } for pid=9208 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.964211][ T40] audit: type=1400 audit(1747807214.137:33174): avc: denied { read write open } for pid=9208 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.972020][ T40] audit: type=1400 audit(1747807214.137:33175): avc: denied { ioctl } for pid=9208 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.026760][ T40] audit: type=1400 audit(1747807214.207:33176): avc: denied { append } for pid=9653 comm="syz.5.930" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 175.034423][ T40] audit: type=1400 audit(1747807214.207:33177): avc: denied { append open } for pid=9653 comm="syz.5.930" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 175.042592][ T40] audit: type=1400 audit(1747807214.207:33178): avc: denied { create } for pid=9653 comm="syz.5.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.048656][ T40] audit: type=1400 audit(1747807214.207:33179): avc: denied { read } for pid=9653 comm="syz.5.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.196922][ T40] audit: type=1400 audit(1747807214.377:33180): avc: denied { shutdown } for pid=9653 comm="syz.5.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.208218][ T40] audit: type=1400 audit(1747807214.387:33181): avc: denied { create } for pid=9653 comm="syz.5.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 175.215771][ T40] audit: type=1400 audit(1747807214.387:33182): avc: denied { write } for pid=9653 comm="syz.5.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 175.316125][ T12] team0 (unregistering): Port device team_slave_1 removed [ 175.381253][ T12] team0 (unregistering): Port device team_slave_0 removed [ 175.543492][ T5941] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 175.612600][ T5941] Bluetooth: hci2: command 0x0406 tx timeout [ 175.613597][ T5943] Bluetooth: hci0: command 0x0406 tx timeout [ 175.692645][ T68] Bluetooth: hci3: command tx timeout [ 175.905575][ T9593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.907782][ T9593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.915854][ T9593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.922183][ T9593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.924662][ T9593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.942114][ T9593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.949064][ T9658] fuse: Bad value for 'fd' [ 176.011374][ T9593] hsr_slave_0: entered promiscuous mode [ 176.014356][ T9593] hsr_slave_1: entered promiscuous mode [ 176.024670][ T9660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9660 comm=syz.2.933 [ 176.049800][ T9661] delete_channel: no stack [ 176.194187][ T9672] batadv_slave_0: entered promiscuous mode [ 176.235682][ T68] Bluetooth: hci2: Unable to find connection for big 0x00 [ 176.254300][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.936'. [ 176.305752][ T9679] program syz.1.937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.332103][ T9680] netlink: 108 bytes leftover after parsing attributes in process `syz.2.938'. [ 176.476577][ T9671] batadv_slave_0: left promiscuous mode [ 176.696508][ T9693] netlink: 'syz.5.940': attribute type 1 has an invalid length. [ 176.699831][ T9693] netlink: 248 bytes leftover after parsing attributes in process `syz.5.940'. [ 176.721996][ T9593] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 176.730690][ T9593] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 176.745346][ T9593] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 176.757222][ T9593] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.824225][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'. [ 176.875257][ T9704] fuse: Bad value for 'fd' [ 176.882264][ T9593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.915867][ T9593] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.931919][ T1204] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.934215][ T1204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.953861][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.957268][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.019374][ T9710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.945'. [ 177.443587][ T9593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.509921][ T9593] veth0_vlan: entered promiscuous mode [ 177.527038][ T9593] veth1_vlan: entered promiscuous mode [ 177.576578][ T9593] veth0_macvtap: entered promiscuous mode [ 177.587832][ T9593] veth1_macvtap: entered promiscuous mode [ 177.614351][ T9593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.625964][ T9593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.638178][ T9593] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.640976][ T9593] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.644504][ T9593] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.647304][ T9593] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.717817][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.720310][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.748609][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.751855][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.772702][ T68] Bluetooth: hci3: command tx timeout [ 177.775908][ T9752] fuse: Bad value for 'fd' [ 177.804158][ T9747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.174760][ T9782] fuse: Bad value for 'fd' [ 178.547949][ T9799] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 178.737516][ T9800] netlink: 24 bytes leftover after parsing attributes in process `syz.5.968'. [ 178.740264][ T9800] netlink: 24 bytes leftover after parsing attributes in process `syz.5.968'. [ 178.962421][ T9817] fuse: Bad value for 'fd' [ 179.418846][ T9841] netlink: 'syz.5.979': attribute type 8 has an invalid length. [ 179.438341][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.732617][ T6035] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 179.897886][ T6035] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.901345][ T6035] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 179.904510][ T6035] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 179.907333][ T6035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.917682][ T9843] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 179.922970][ T6035] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.127396][ T40] kauditd_printk_skb: 822 callbacks suppressed [ 180.127414][ T40] audit: type=1400 audit(1747807219.307:34005): avc: denied { read append } for pid=9842 comm="syz.1.981" name="midi3" dev="devtmpfs" ino=3103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.132483][ T6035] usb 6-1: USB disconnect, device number 20 [ 180.142691][ T40] audit: type=1400 audit(1747807219.307:34006): avc: denied { read append open } for pid=9842 comm="syz.1.981" path="/dev/midi3" dev="devtmpfs" ino=3103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.330233][ T40] audit: type=1400 audit(1747807219.507:34007): avc: denied { read write } for pid=5934 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.340255][ T40] audit: type=1400 audit(1747807219.517:34008): avc: denied { read write open } for pid=5934 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.351943][ T40] audit: type=1400 audit(1747807219.517:34009): avc: denied { ioctl } for pid=9842 comm="syz.1.981" path=2F6465762F6D69646933202864656C6574656429 dev="devtmpfs" ino=3103 ioctlcmd=0x9412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.360433][ T40] audit: type=1400 audit(1747807219.517:34010): avc: denied { ioctl } for pid=5934 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.805730][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.857046][ T40] audit: type=1400 audit(1747807220.037:34011): avc: denied { read write } for pid=5937 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.864892][ T40] audit: type=1400 audit(1747807220.037:34012): avc: denied { read write open } for pid=5937 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.872727][ T40] audit: type=1400 audit(1747807220.037:34013): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.899330][ T40] audit: type=1400 audit(1747807220.077:34014): avc: denied { execute } for pid=9845 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 181.039586][ T5286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.047340][ T5286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.048269][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.050494][ T5286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.056279][ T5286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.060042][ T5286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.162783][ T29] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 181.180012][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.336122][ T29] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 181.344730][ T29] usb 6-1: config index 0 descriptor too short (expected 65412, got 72) [ 181.347671][ T13] bridge_slave_1: left allmulticast mode [ 181.349580][ T13] bridge_slave_1: left promiscuous mode [ 181.352050][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.356303][ T29] usb 6-1: config index 1 descriptor too short (expected 65412, got 72) [ 181.359795][ T13] bridge_slave_0: left allmulticast mode [ 181.361873][ T29] usb 6-1: config index 2 descriptor too short (expected 65412, got 72) [ 181.362188][ T13] bridge_slave_0: left promiscuous mode [ 181.369517][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.372135][ T29] usb 6-1: config index 3 descriptor too short (expected 65412, got 72) [ 181.379018][ T29] usb 6-1: config index 4 descriptor too short (expected 65412, got 72) [ 181.386762][ T29] usb 6-1: config index 5 descriptor too short (expected 65412, got 72) [ 181.394859][ T29] usb 6-1: config index 6 descriptor too short (expected 65412, got 72) [ 181.400694][ T29] usb 6-1: config index 7 descriptor too short (expected 65412, got 72) [ 181.412857][ T29] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 181.415831][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.418843][ T29] usb 6-1: Product: syz [ 181.420592][ T29] usb 6-1: Manufacturer: syz [ 181.422155][ T29] usb 6-1: SerialNumber: syz [ 181.445535][ T29] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 181.514326][ T9284] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 181.656683][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.662685][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.667340][ T13] bond0 (unregistering): Released all slaves [ 181.679429][ T9855] chnl_net:caif_netlink_parms(): no params data found [ 181.701978][ T9873] fuse: Bad value for 'fd' [ 181.763178][ T9855] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.766359][ T9855] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.769356][ T9855] bridge_slave_0: entered allmulticast mode [ 181.773708][ T9855] bridge_slave_0: entered promiscuous mode [ 181.779895][ T9855] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.782799][ T9855] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.785837][ T9855] bridge_slave_1: entered allmulticast mode [ 181.789266][ T9855] bridge_slave_1: entered promiscuous mode [ 181.843071][ T9855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.848978][ T9855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.897131][ T9855] team0: Port device team_slave_0 added [ 181.922164][ T9855] team0: Port device team_slave_1 added [ 181.956609][ T9855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.959256][ T9855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.967404][ T9855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.973822][ T9855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.976038][ T9855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.984191][ T9855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.992205][ T13] hsr_slave_0: left promiscuous mode [ 181.994553][ T13] hsr_slave_1: left promiscuous mode [ 181.997471][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.999911][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.002898][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.006037][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.031824][ T13] veth1_macvtap: left promiscuous mode [ 182.034550][ T13] veth0_macvtap: left promiscuous mode [ 182.036355][ T13] veth1_vlan: left promiscuous mode [ 182.038029][ T13] veth0_vlan: left promiscuous mode [ 182.192756][ T6035] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 182.362194][ T6035] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 182.367008][ T6035] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 182.371213][ T6035] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 182.374552][ T6035] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.383745][ T9884] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 182.388542][ T6035] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 182.429921][ T59] usb 6-1: USB disconnect, device number 21 [ 182.585566][ T9284] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 182.588571][ T9284] ath9k_htc: Failed to initialize the device [ 182.592627][ T59] usb 6-1: ath9k_htc: USB layer deinitialized [ 182.605977][ T834] usb 7-1: USB disconnect, device number 19 [ 182.691552][ T13] team0 (unregistering): Port device team_slave_1 removed [ 182.796614][ T13] team0 (unregistering): Port device team_slave_0 removed [ 183.133243][ T5286] Bluetooth: hci3: command tx timeout [ 183.165828][ T9888] Process accounting resumed [ 183.427827][ T9855] hsr_slave_0: entered promiscuous mode [ 183.430885][ T9855] hsr_slave_1: entered promiscuous mode [ 183.492693][ T9284] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 183.668690][ T9284] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 183.673833][ T9284] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.676472][ T9284] usb 6-1: Product: syz [ 183.678062][ T9284] usb 6-1: Manufacturer: syz [ 183.679635][ T9284] usb 6-1: SerialNumber: syz [ 183.686981][ T9284] usb 6-1: config 0 descriptor?? [ 183.901073][ T9893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.904085][ T9893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.912604][ T9911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.915442][ T9911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.916980][ T9912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.921752][ T9912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.926697][ T6035] usb 6-1: USB disconnect, device number 22 [ 183.977394][ T9914] fuse: Bad value for 'fd' [ 184.075600][ T9855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 184.081264][ T9855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 184.088986][ T9855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 184.095157][ T9855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 184.190814][ T9855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.219933][ T9855] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.231941][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.234289][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.247939][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.250767][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.492696][ T59] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 184.660094][ T59] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 184.664174][ T59] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 184.667340][ T59] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 184.670835][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.688053][ T9920] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.696448][ T59] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 184.727400][ T9928] openvswitch: netlink: IPv4 tunnel dst address is zero [ 184.749303][ T9855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.798368][ T9855] veth0_vlan: entered promiscuous mode [ 184.814508][ T9855] veth1_vlan: entered promiscuous mode [ 184.852828][ T9855] veth0_macvtap: entered promiscuous mode [ 184.860384][ T9855] veth1_macvtap: entered promiscuous mode [ 184.885054][ T9855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.893834][ T9855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.901979][ T9855] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.906734][ T9855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.909471][ T9855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.910805][ T59] usb 7-1: USB disconnect, device number 20 [ 184.912288][ T9855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.982162][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.985112][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.004952][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.007617][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.133052][ T40] kauditd_printk_skb: 596 callbacks suppressed [ 185.133062][ T40] audit: type=1400 audit(1747807224.307:34611): avc: denied { read write open } for pid=5937 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 185.144952][ T40] audit: type=1400 audit(1747807224.317:34612): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 185.187462][ T40] audit: type=1400 audit(1747807224.367:34613): avc: denied { read write } for pid=9939 comm="syz.1.1008" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 185.195603][ T40] audit: type=1400 audit(1747807224.367:34614): avc: denied { read write open } for pid=9939 comm="syz.1.1008" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 185.204404][ T40] audit: type=1400 audit(1747807224.367:34615): avc: denied { ioctl } for pid=9939 comm="syz.1.1008" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 185.212706][ T40] audit: type=1400 audit(1747807224.367:34616): avc: denied { ioctl } for pid=9939 comm="syz.1.1008" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 185.221071][ T40] audit: type=1400 audit(1747807224.367:34617): avc: denied { ioctl } for pid=9939 comm="syz.1.1008" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 185.229516][ T40] audit: type=1400 audit(1747807224.377:34618): avc: denied { ioctl } for pid=9939 comm="syz.1.1008" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 185.237681][ T40] audit: type=1400 audit(1747807224.377:34619): avc: denied { ioctl } for pid=9939 comm="syz.1.1008" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 185.246979][ T40] audit: type=1400 audit(1747807224.377:34620): avc: denied { ioctl } for pid=9939 comm="syz.1.1008" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 185.266982][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1008'. [ 185.270391][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1008'. [ 185.699191][ T9944] fuse: Bad value for 'fd' [ 186.149128][ T9957] usb usb9: usbfs: process 9957 (syz.2.1012) did not claim interface 0 before use [ 186.271702][ T9965] SELinux: ebitmap: truncated map [ 186.278625][ T9965] SELinux: failed to load policy [ 186.369586][ T9966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.376085][ T9966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.380555][ T9966] bond0 (unregistering): Released all slaves [ 186.401334][ T9970] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 186.772632][ T6035] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 186.828833][ T1204] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.932748][ T6035] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.937201][ T6035] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 186.941085][ T6035] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.944942][ T6035] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.961371][ T9973] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 186.969669][ T6035] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 187.176238][ T834] usb 7-1: USB disconnect, device number 21 [ 188.145995][ T1204] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.349628][ T1204] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.435908][ T9978] fuse: Bad value for 'fd' [ 188.466642][ T1204] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.517306][ T9983] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI [ 188.521880][ T9983] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 188.525654][ T9983] CPU: 1 UID: 0 PID: 9983 Comm: syz.1.1020 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 188.529879][ T9983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 188.533613][ T9983] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 188.535471][ T9983] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 7a 2b 5d f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 188.542492][ T9983] RSP: 0018:ffffc900037efbf0 EFLAGS: 00010293 [ 188.544737][ T9983] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff885e1a2a [ 188.547662][ T9983] RDX: ffff8880248c8000 RSI: ffffffff885e1a76 RDI: 0000000000000005 [ 188.550787][ T9983] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 188.550840][ T5943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 188.553692][ T9983] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900037efd88 [ 188.553701][ T9983] R13: ffffc900037efd88 R14: 0000000000000001 R15: ffff888038502000 [ 188.553709][ T9983] FS: 00007f4bb50006c0(0000) GS:ffff8880d6ada000(0000) knlGS:0000000000000000 [ 188.553731][ T9983] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.556269][ T5943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 188.558423][ T9983] CR2: 00007f4bb4ffff98 CR3: 00000000226e5000 CR4: 0000000000352ef0 [ 188.562001][ T5943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 188.564452][ T9983] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 188.564462][ T9983] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 188.564470][ T9983] Call Trace: [ 188.564474][ T9983] [ 188.564480][ T9983] ? __pfx_bcsp_recv+0x10/0x10 [ 188.564497][ T9983] hci_uart_tty_receive+0x251/0x7e0 [ 188.564514][ T9983] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 188.564529][ T9983] tty_ioctl+0x580/0x1610 [ 188.576572][ T5943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 188.578415][ T9983] ? __pfx_tty_ioctl+0x10/0x10 [ 188.578432][ T9983] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 188.578453][ T9983] ? hook_file_ioctl_common+0x145/0x410 [ 188.580089][ T5943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 188.580746][ T9983] ? selinux_file_ioctl+0x180/0x270 [ 188.599593][ T9983] ? selinux_file_ioctl+0xb4/0x270 [ 188.601137][ T9983] ? __pfx_tty_ioctl+0x10/0x10 [ 188.602597][ T9983] __x64_sys_ioctl+0x190/0x200 [ 188.604047][ T9983] do_syscall_64+0xcd/0x260 [ 188.605440][ T9983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.607277][ T9983] RIP: 0033:0x7f4bb418e969 [ 188.608695][ T9983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.614667][ T9983] RSP: 002b:00007f4bb5000038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.617263][ T9983] RAX: ffffffffffffffda RBX: 00007f4bb43b6160 RCX: 00007f4bb418e969 [ 188.619762][ T9983] RDX: 0000200000000180 RSI: 0000000000005412 RDI: 0000000000000003 [ 188.622174][ T9983] RBP: 00007f4bb4210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 188.624550][ T9983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.627317][ T9983] R13: 0000000000000001 R14: 00007f4bb43b6160 R15: 00007ffde30481a8 [ 188.629852][ T9983] [ 188.630831][ T9983] Modules linked in: [ 188.632328][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.634868][ T9983] ---[ end trace 0000000000000000 ]--- [ 188.637051][ T9983] RIP: 0010:bcsp_recv+0x10a/0x17f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 188.638689][ T9983] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 7a 2b 5d f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 188.649722][ T9983] RSP: 0018:ffffc900037efbf0 EFLAGS: 00010293 [ 188.651879][ T9983] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff885e1a2a [ 188.655610][ T9983] RDX: ffff8880248c8000 RSI: ffffffff885e1a76 RDI: 0000000000000005 [ 188.658223][ T9983] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 188.660875][ T9983] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900037efd88 [ 188.664567][ T9983] R13: ffffc900037efd88 R14: 0000000000000001 R15: ffff888038502000 [ 188.668277][ T9983] FS: 00007f4bb50006c0(0000) GS:ffff8880d69da000(0000) knlGS:0000000000000000 [ 188.672345][ T9983] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.676055][ T9983] CR2: 00007f391a2e5000 CR3: 00000000226e5000 CR4: 0000000000352ef0 [ 188.678724][ T9983] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 188.681439][ T9983] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 188.685945][ T9983] Kernel panic - not syncing: Fatal exception [ 188.688467][ T9983] Kernel Offset: disabled [ 188.689914][ T9983] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:00:27 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=dffffc0000000000 RCX=1ffffffff35676bc RDX=1ffff110046a2bac RSI=0000000000000004 RDI=ffffffff9aca4948 RBP=ffffffff9aca4948 RSP=ffffc900044575d0 R8 =0000000000000000 R9 =fffffbfff210a5c2 R10=ffffffff90852e17 R11=0000000000000001 R12=dffffc0000000000 R13=ffffffff9aca4948 R14=000000000000018b R15=0000000000000200 RIP=ffffffff819871f5 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f72d11fd6c0 ffffffff 00c00000 GS =0000 ffff8880d69da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000001d2000 CR3=0000000050022000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff228b5010 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72d0411a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72d0411a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72d0411a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72d0411aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72d0411b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72d0411c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f9bf5 RDI=ffffffff9adfe5a0 RBP=ffffffff9adfe560 RSP=ffffc900037ef5f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9adfe560 R15=ffffffff854f9b90 RIP=ffffffff854f9c1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4bb50006c0 ffffffff 00c00000 GS =0000 ffff8880d6ada000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4bb4ffff98 CR3=00000000226e5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000014 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb4211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb4211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb4211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb4211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb4211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb4211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb4383488 00007f4bb4383480 00007f4bb4383478 00007f4bb4383450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb4eed100 00007f4bb4383440 00007f4bb4383458 00007f4bb43834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb4383498 00007f4bb4383490 00007f4bb4383488 00007f4bb4383480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000fc ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffea000149d800 RCX=0000000000000300 RDX=ffffea000149d800 RSI=ffff888000000000 RDI=ffff888052760d00 RBP=0000000000002dc2 RSP=ffffc900042bf850 R8 =0000160000000000 R9 =0000000000000000 R10=ffffed100a4ec000 R11=dffffc0000000000 R12=ffffea000149d840 R13=0000000000000000 R14=0000000000000000 R15=0000000000000001 RIP=ffffffff8b6c022b RFL=00010246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555879ae500 ffffffff 00c00000 GS =0000 ffff8880d6bda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f39197b5f40 CR3=000000005dd7a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f391a2ed100 00007f3919783440 00007f3919783458 00007f39197834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000d2dbc RBX=0000000000000003 RCX=ffffffff8b6d3419 RDX=ffffed100d4e65be RSI=ffffffff8bf4a220 RDI=ffffffff8191adf1 RBP=ffffed1003b5e000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801daf0000 R14=ffffffff90852e10 R15=0000000000000000 RIP=ffffffff8b6d1caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4bb5000d58 CR3=000000004c78d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde3048530 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb4211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb4211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb4211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb4211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb4211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb4211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000fc ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000fc ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000