last executing test programs: 23.731256882s ago: executing program 3 (id=149): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003958aeeffffffcdbdf250000ef6d", @ANYRES32=r1, @ANYBLOB="216100000000000014001400726f7365300000000000000000000000280016802400018014000b"], 0x5c}}, 0x4000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@host, 0x81}, 0x1, 0x1, 0x4}) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000224e00000000", 0x58}], 0x1) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f00000003c0)={0x0, 0x6}) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f00000003c0)={0x0, 0x6}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x102, 0x1cc) sendfile(r6, r6, 0x0, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2e00}, [@RTA_PRIORITY={0x8, 0x1e, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000003e000701fcfffffffddbdf25027c0000044036800c0001"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) ioctl$BLKDISCARD(r6, 0x1277, &(0x7f0000000240)=0x401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r3, 0x0, 0x5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r3, 0x0, 0x5}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r9, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) (async) pread64(r9, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r9, 0xc0305602, &(0x7f0000000140)={0x0, 0xfffffffd, 0x2019, 0x1}) 23.642045832s ago: executing program 3 (id=150): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x3) (async) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000000c0)=""/199, &(0x7f0000000000)=0xc7) (async) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000000c0)=""/199, &(0x7f0000000000)=0xc7) 23.639330254s ago: executing program 3 (id=152): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="120189008000", 0x0, 0x0, 0x4, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4000, 0xd4) read$qrtrtun(r1, &(0x7f00000003c0)=""/4096, 0x1000) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r1, 0x21, &(0x7f00000000c0)={0x0, 0xc026, 0x20000, 0x2, 0x3ac}, 0x1) r2 = socket(0x2, 0x80805, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000080)={0x6, @pix={0x4, 0x5, 0x31363553, 0x0, 0x7fff, 0x4, 0x1, 0x3, 0x0, 0x3, 0x0, 0x1}}) keyctl$KEYCTL_WATCH_KEY(0x3, r3, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000001340), 0x4008000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x9, 0x1, 0x1, "6106007722366cce3d00e7bfeb8cace586d84a500000000800", 0x30314247}) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x5, 0x9a38, 0x0, 0x8, 0x5, 0x9, 0x1e3, 0xf900, r8}, 0x20) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r9, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@initdev, @in6=@private1}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) 23.568467998s ago: executing program 3 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x8) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r1, 0x9, 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000080)=0x4) rmdir(&(0x7f0000000100)='./control\x00') 23.461252381s ago: executing program 3 (id=156): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 23.160090234s ago: executing program 3 (id=159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000011) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x48e}, @NFULA_CFG_MODE={0xa, 0x2, {0xffffffff, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0xf75f, 0x1}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xf5b9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x851}, 0x40810) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa0, 0xb, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}}]}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fffffff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x989}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3ff}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000c40}, 0x80450) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000440)={0xf97cff8c, 0x8, 'SE Linux', "fe11f2621c7e29bdcdc605395e074176b06fd72f533c6c3988f866abbef23f2af8884f6da65d47e2101066041c30ec8dad78731b0ef7e5350cd935af29c9f85bddc2bf6f2ba38cc7c660f9c0fa17f1506ecbadaa3addfef12832342812796e89d8f6f5792a7bf5b4ef02f56aa5f466e9e6f414bb7019107de0280587b9c258a95f9f9af6a9130be7e7300942277521ecfd0b750f0ff70f2356fdab3e6a21943c0d6c52df1acdbc282fb132c602aead"}, 0xbf) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb0, 0x0, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_LABELS_MASK={0x1c, 0x17, [0x8, 0x6, 0x9, 0x5, 0x8, 0x2]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x78, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x26}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2c000054}, 0x40060) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000680)=0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1c8, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x8001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xffffffff}, {0xc, 0x90, 0xffffffffffff868e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xff}, {0xc, 0x90, 0x80000001}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000fc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000a80)={0x4c8, r6, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x58}}}}, [@NL80211_ATTR_TX_RATES={0xd4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x8, 0x1, 0x6, 0x6, 0x0, 0x8001, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x9, 0xc, 0xb, 0x1b, 0x30, 0x30, 0x48, 0x60, 0x60, 0x30, 0x2d, 0xc, 0x30, 0x6c, 0x1, 0x16, 0x12, 0x1, 0x48, 0x3, 0x3, 0x18, 0x24, 0x0, 0x6, 0x6, 0x6, 0x60, 0x6c, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfff, 0x3, 0xb6, 0x11a, 0x0, 0xd6d, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0xa}, {0x0, 0x9}, {0x7, 0x2}, {0x7, 0x1}, {0x2}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x5}, {0x7, 0x9}, {0x3, 0x9}, {0x3, 0x8}, {}, {0x3, 0x4}, {0x4, 0x8}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x5}, {0x0, 0x5}, {0x7, 0x7}, {0x6, 0x9}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x30, 0x6, 0x5, 0x0, 0x60, 0x9, 0x6, 0x1, 0x3, 0x6b, 0xb, 0x1c, 0x1b, 0x6c, 0x4, 0xe, 0x60, 0x16, 0x6, 0x3, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x80, 0x2, 0x9, 0x6, 0x0, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0x138, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc593, 0xfff, 0x7ff, 0x6, 0x7ff, 0x10, 0x2, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1e3, 0x691, 0x786, 0x9, 0x0, 0x2, 0x7, 0x9d1c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x6, 0x5, 0x6715, 0x2, 0x0, 0xff26]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x8, 0x4, 0x0, 0x8, 0x3, 0x400, 0x3ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xdd, 0x9, 0xa, 0x4, 0x81, 0x8, 0xbc, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xffff, 0x4, 0x7, 0x6, 0x4, 0x7, 0x10]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0xa}, {0x4, 0x2}, {0x2, 0xa}, {0x0, 0x7}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x3}, {0x2, 0x5}, {0x3, 0x2}, {0x3, 0x3}, {0x7, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x400, 0x4, 0x4, 0x1, 0xfffb, 0x9, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x400, 0x8, 0x7, 0xfffa, 0x8, 0x3]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x36, 0x48, 0x48, 0x60]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1}, {0x6, 0x2}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x4}, {0x1, 0x7}, {0x6, 0x1}, {0x0, 0x6}, {0x6, 0x6}, {0x5, 0x9}, {0x7, 0xa}, {0x0, 0xa}, {0x6, 0x9}, {0x0, 0x1}, {0x0, 0x5}, {0x6, 0x8}, {0x5, 0x5}, {0x0, 0x9}, {0x3, 0x6}, {0x1, 0x3}, {0x5}, {0x4, 0x1}, {0x1, 0x2}, {0x5, 0x3}, {0x6, 0xa}, {0x7, 0x2}, {}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x7}, {0x0, 0x8}, {0x6, 0x5}, {0x7}, {0x1}, {0x2, 0x4}, {0x6, 0x2}, {0x5, 0x2}, {0x0, 0x5}, {0x6, 0x6}, {0x4, 0x8}, {0x1, 0x2}, {0x3, 0x9}, {0x7, 0x7}, {0x5, 0x5}, {0x3, 0x4}, {0x1, 0x4}, {0x6, 0x8}, {0x6, 0x2}, {0x0, 0x9}, {0x2, 0x8}, {0x5, 0x1}, {0x5, 0x6}, {0x6, 0x4}, {0x1}, {0x0, 0x5}, {0x0, 0x4}, {0x0, 0x4}, {0x7, 0x7}, {0x5, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0xf00, 0xfffc, 0x4, 0x4, 0x4, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x184, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x36, 0x48, 0x30, 0x9, 0x3, 0x4, 0x1, 0x18, 0x16, 0x3, 0x6c, 0x1b, 0xc, 0x1b, 0xc, 0x12, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbdcf, 0xf9c, 0x5, 0x3, 0x7, 0x8, 0x8, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x4, 0x0, 0xb, 0x1, 0x48, 0x60, 0x3, 0x36, 0x4, 0x1, 0x48, 0x48, 0x48, 0x3, 0x1, 0x2, 0x60, 0x3, 0x2, 0x2, 0x24, 0x16, 0xc, 0x2, 0x6e, 0xc, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0x7}, {0x5, 0x6}, {0x4, 0x5}, {0x6, 0x1}, {0x2, 0x5}, {0x0, 0xa}, {0x5, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x4, 0x4}, {0x5, 0x8}, {0x2, 0x8}, {0x1, 0x1}, {0x5, 0x3}, {0x3, 0x8}, {0x7, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0xa}, {0x2, 0x8}, {0x4}, {0x1, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x9}, {0x3, 0x1}, {0x4, 0xa}, {0x7}, {0x3, 0x6}, {0x6, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x3, 0x5, 0x0, 0x5, 0xfff7, 0x2]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x401, 0x4, 0x5, 0x5, 0x7, 0x8, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x9}, {0x0, 0x7}, {0x1, 0x6}, {0x6, 0x2}, {0x0, 0x7}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x9}, {0x6, 0x5}, {0x1, 0x3}, {0x2, 0x4}, {0x3, 0x3}, {0x3, 0x5}, {0x3, 0x4}, {0x4, 0x4}, {0x7, 0x7}, {0x4, 0x9}, {0x0, 0xa}, {0x7, 0x3}, {0x4, 0x9}, {0x2, 0x1}, {0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x7}, {0x2, 0x6}, {0x0, 0x7}, {0x4, 0x1}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0xa}, {0x2, 0x3}, {0x3, 0x9}, {0x5, 0x5}, {0x0, 0xa}, {0x2, 0x5}, {0x2, 0xa}, {0x7, 0x7}, {0x1, 0x4}, {0x7, 0x9}, {0x1}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0x5}, {0x2, 0x4}, {0x4, 0xa}, {0x7}, {0x3, 0x1}, {0x7, 0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x0, 0x7}, {0x4, 0x3}, {0x3, 0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x3}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4f5, 0x1691, 0x1c0, 0x9, 0x6, 0x4, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0x60, 0xb, 0x2, 0x1, 0x48, 0x18, 0x16, 0x5, 0x9, 0x60, 0x48, 0x3, 0x9]}]}]}, @NL80211_ATTR_TX_RATES={0x110, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9d, 0x80, 0x200, 0x7fff, 0x4, 0x0, 0x6, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x5, 0x2, 0x6, 0x810e, 0x8, 0xd, 0x2]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0x1b, 0x2, 0x30]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x12, 0x6, 0x24, 0x36, 0x24, 0x6, 0x36, 0xc, 0x12, 0x12, 0x18, 0x2, 0x60, 0x16, 0x1b, 0x3, 0x4, 0x48, 0xb, 0x48, 0x4, 0x24, 0xc, 0x1b, 0x6c, 0x18, 0x6, 0x2, 0xb]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0x4, 0x48, 0x60, 0xc, 0x60, 0x0, 0xc, 0xc, 0x30, 0x16, 0x24, 0x36, 0x24, 0x60, 0x6c, 0x6c, 0xb, 0xc, 0x76, 0x18, 0x36, 0x18, 0x6b, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x98, 0x6, 0x2, 0xab1e, 0x0, 0x6, 0x2, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x6, 0x2}, {0x5, 0xa}, {0x2, 0x5}, {0x5, 0x1}, {0x7, 0x5}, {0x4, 0x7}, {0x1, 0x7}, {0x4}, {0x3, 0x1}, {0x4, 0x2}]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x0, 0x5, 0x4, 0xffff, 0x200, 0x7fff, 0x3]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x5, 0x2}, {0x2, 0x7}, {0x3, 0x4}, {0x1, 0x1}, {0x6, 0x6}, {0x4}, {0x1, 0xa}, {0x2, 0x7}, {0x2, 0x5}, {0x7, 0x8}, {0x1, 0x4}, {0x0, 0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x7, 0x9}, {0x0, 0x6}, {0x0, 0x3}, {0x3, 0x7}, {0x2, 0x4}, {0x1, 0x1}, {0x0, 0x5}, {0x7, 0x2}, {0x2, 0x7}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x4, 0x8}, {0x0, 0x1}, {0x1, 0x3}, {0x5, 0x9}, {0x2, 0x4}, {0x6, 0x2}, {0x5, 0x2}, {0x1, 0x5}, {0x1, 0xa}, {0x1, 0x1}, {0x1}, {0x0, 0xa}, {0x6, 0xa}, {0x3, 0x4}, {0x1, 0x4}, {0x7, 0x6}, {0x2, 0x6}, {0x4, 0xa}, {0x3, 0x2}, {0x5, 0x2}, {0x3, 0x6}, {0x0, 0x7}, {0x3, 0x1}, {0x7, 0x9}, {0x5}, {0x3, 0xa}, {0x5, 0x7}, {0x1, 0x3}, {0x1, 0x4}, {0x3, 0x9}, {0x0, 0x7}, {0x4, 0x1}, {0x2, 0x8}]}]}]}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x840}, 0x8801) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001040), r4) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x50, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe7d}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x408cc) sendmsg$kcm(r1, &(0x7f00000015c0)={&(0x7f0000001180)=@isdn={0x22, 0x8, 0x51, 0x7, 0x1e}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001200)="f7a4f1f5d974fd", 0x7}, {&(0x7f0000001240)="6e287ccca7a72b74005c97e138a23e3aa9dd097cdff2fc92858daa706cf822c42e3f243f", 0x24}, {&(0x7f0000001280)="b573b7fa7573d4f0903ebfb2d85a41b0d9b4bcd68af9b93fca43cf2dbcd94035d5d6f4e524c5be8489ac4e915ba888445af995b26ed042c6e690121a45fd32287a5942ebc0cc", 0x46}, {&(0x7f0000001300)="3fc2fdf7faec9394d4d72885455e74a4768870ee3c296217e6763b7bbcfd66768106824c536327d2da1f512ae17c49d1eed3396b7a55dc987830076e1d666b844a9b881fc156833fe05fce9279dff26a1dae71675a9af4be72e4c68018e935d119deea8d771f80b8ca5c5a2272c122bcb47b4d45e5fcefef677624c158ce675de3f3e5a10e38a8dd94336ac4f7305fc468abdb140c8589e06f2812a4ed6d48f4d81cee82cdccc4275e25f74ea05df05c5c2e320d975344e50e953429006cc8aec65eb7fda514c3ad4fd1e25b89fff2a043031a22503c86c326c1417e08015715c48b", 0xe2}], 0x4, &(0x7f0000001440)=[{0x60, 0x118, 0x7, "1ad232c15f8f7c8e4dc6c466d26efadc8a060fcfad63602a72310d99dc3a5b5fbf87f48b3b119afdca5e0020af8ac0c3dcf74369dabe40caa7bc880c3d8bcf1c809bf8d39c73a72f889bc8"}, {0x10, 0x0, 0x9}, {0xe8, 0x118, 0x1, "636aec8e9fb0adceafa01c5a163e33a06df654d385988d3c8972a18cf2defc7db4a1589d5b683399ae5d2575b9c245a520143c9623fb6f5c2adafd5a51f71e7ec3c02250447723b1c4ee61a33102c92eb8ac2b3293d80b72466ad79359d034ea789c347e567aa8f402e6096ea0c17ea05589ad47a0f2ec880f33a22fccb130a2c701823cf08f59424f16cb8ad273c21504b12fea2a48e177b9ff353e628026c63d4057ee8dafe5b1e71a8b85e4bbbb9f7f5497b125bef1150a39be32bc88979c3901ca0d161563d71824e8a4e18a6d781b1197e2"}], 0x158}, 0x440048c5) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r9, 0x0, 0x488, &(0x7f0000001600)={{0x1, @dev={0xac, 0x14, 0x14, 0x22}, 0x4e21, 0x2, 'sh\x00', 0x4, 0x80000001, 0x36}, {@empty, 0x4e22, 0x0, 0x400, 0xf, 0x6a800000}}, 0x44) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x6c, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x64}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x5e7}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x81}}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2004c080}, 0x80c1) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x40, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x13}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x6004050}, 0x804) socket$kcm(0x29, 0x5, 0x0) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r10, 0x4b47, &(0x7f00000018c0)={0x1, 0x2c, 0x1}) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001940), r4) r12 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000001980), 0x1090c0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x3c, r11, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r12}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r12, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 23.100406287s ago: executing program 32 (id=159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000011) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x48e}, @NFULA_CFG_MODE={0xa, 0x2, {0xffffffff, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0xf75f, 0x1}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xf5b9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x851}, 0x40810) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa0, 0xb, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}}]}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fffffff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x989}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3ff}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000c40}, 0x80450) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000440)={0xf97cff8c, 0x8, 'SE Linux', "fe11f2621c7e29bdcdc605395e074176b06fd72f533c6c3988f866abbef23f2af8884f6da65d47e2101066041c30ec8dad78731b0ef7e5350cd935af29c9f85bddc2bf6f2ba38cc7c660f9c0fa17f1506ecbadaa3addfef12832342812796e89d8f6f5792a7bf5b4ef02f56aa5f466e9e6f414bb7019107de0280587b9c258a95f9f9af6a9130be7e7300942277521ecfd0b750f0ff70f2356fdab3e6a21943c0d6c52df1acdbc282fb132c602aead"}, 0xbf) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb0, 0x0, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_LABELS_MASK={0x1c, 0x17, [0x8, 0x6, 0x9, 0x5, 0x8, 0x2]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x78, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x26}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2c000054}, 0x40060) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000680)=0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1c8, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x8001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xffffffff}, {0xc, 0x90, 0xffffffffffff868e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xff}, {0xc, 0x90, 0x80000001}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000fc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000a80)={0x4c8, r6, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x58}}}}, [@NL80211_ATTR_TX_RATES={0xd4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x8, 0x1, 0x6, 0x6, 0x0, 0x8001, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x9, 0xc, 0xb, 0x1b, 0x30, 0x30, 0x48, 0x60, 0x60, 0x30, 0x2d, 0xc, 0x30, 0x6c, 0x1, 0x16, 0x12, 0x1, 0x48, 0x3, 0x3, 0x18, 0x24, 0x0, 0x6, 0x6, 0x6, 0x60, 0x6c, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfff, 0x3, 0xb6, 0x11a, 0x0, 0xd6d, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0xa}, {0x0, 0x9}, {0x7, 0x2}, {0x7, 0x1}, {0x2}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x5}, {0x7, 0x9}, {0x3, 0x9}, {0x3, 0x8}, {}, {0x3, 0x4}, {0x4, 0x8}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x5}, {0x0, 0x5}, {0x7, 0x7}, {0x6, 0x9}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x30, 0x6, 0x5, 0x0, 0x60, 0x9, 0x6, 0x1, 0x3, 0x6b, 0xb, 0x1c, 0x1b, 0x6c, 0x4, 0xe, 0x60, 0x16, 0x6, 0x3, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x80, 0x2, 0x9, 0x6, 0x0, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0x138, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc593, 0xfff, 0x7ff, 0x6, 0x7ff, 0x10, 0x2, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1e3, 0x691, 0x786, 0x9, 0x0, 0x2, 0x7, 0x9d1c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x6, 0x5, 0x6715, 0x2, 0x0, 0xff26]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x8, 0x4, 0x0, 0x8, 0x3, 0x400, 0x3ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xdd, 0x9, 0xa, 0x4, 0x81, 0x8, 0xbc, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xffff, 0x4, 0x7, 0x6, 0x4, 0x7, 0x10]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0xa}, {0x4, 0x2}, {0x2, 0xa}, {0x0, 0x7}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x3}, {0x2, 0x5}, {0x3, 0x2}, {0x3, 0x3}, {0x7, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x400, 0x4, 0x4, 0x1, 0xfffb, 0x9, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x400, 0x8, 0x7, 0xfffa, 0x8, 0x3]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x36, 0x48, 0x48, 0x60]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1}, {0x6, 0x2}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x4}, {0x1, 0x7}, {0x6, 0x1}, {0x0, 0x6}, {0x6, 0x6}, {0x5, 0x9}, {0x7, 0xa}, {0x0, 0xa}, {0x6, 0x9}, {0x0, 0x1}, {0x0, 0x5}, {0x6, 0x8}, {0x5, 0x5}, {0x0, 0x9}, {0x3, 0x6}, {0x1, 0x3}, {0x5}, {0x4, 0x1}, {0x1, 0x2}, {0x5, 0x3}, {0x6, 0xa}, {0x7, 0x2}, {}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x7}, {0x0, 0x8}, {0x6, 0x5}, {0x7}, {0x1}, {0x2, 0x4}, {0x6, 0x2}, {0x5, 0x2}, {0x0, 0x5}, {0x6, 0x6}, {0x4, 0x8}, {0x1, 0x2}, {0x3, 0x9}, {0x7, 0x7}, {0x5, 0x5}, {0x3, 0x4}, {0x1, 0x4}, {0x6, 0x8}, {0x6, 0x2}, {0x0, 0x9}, {0x2, 0x8}, {0x5, 0x1}, {0x5, 0x6}, {0x6, 0x4}, {0x1}, {0x0, 0x5}, {0x0, 0x4}, {0x0, 0x4}, {0x7, 0x7}, {0x5, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0xf00, 0xfffc, 0x4, 0x4, 0x4, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x184, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x36, 0x48, 0x30, 0x9, 0x3, 0x4, 0x1, 0x18, 0x16, 0x3, 0x6c, 0x1b, 0xc, 0x1b, 0xc, 0x12, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbdcf, 0xf9c, 0x5, 0x3, 0x7, 0x8, 0x8, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x4, 0x0, 0xb, 0x1, 0x48, 0x60, 0x3, 0x36, 0x4, 0x1, 0x48, 0x48, 0x48, 0x3, 0x1, 0x2, 0x60, 0x3, 0x2, 0x2, 0x24, 0x16, 0xc, 0x2, 0x6e, 0xc, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0x7}, {0x5, 0x6}, {0x4, 0x5}, {0x6, 0x1}, {0x2, 0x5}, {0x0, 0xa}, {0x5, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x4, 0x4}, {0x5, 0x8}, {0x2, 0x8}, {0x1, 0x1}, {0x5, 0x3}, {0x3, 0x8}, {0x7, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0xa}, {0x2, 0x8}, {0x4}, {0x1, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x9}, {0x3, 0x1}, {0x4, 0xa}, {0x7}, {0x3, 0x6}, {0x6, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x3, 0x5, 0x0, 0x5, 0xfff7, 0x2]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x401, 0x4, 0x5, 0x5, 0x7, 0x8, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x9}, {0x0, 0x7}, {0x1, 0x6}, {0x6, 0x2}, {0x0, 0x7}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x9}, {0x6, 0x5}, {0x1, 0x3}, {0x2, 0x4}, {0x3, 0x3}, {0x3, 0x5}, {0x3, 0x4}, {0x4, 0x4}, {0x7, 0x7}, {0x4, 0x9}, {0x0, 0xa}, {0x7, 0x3}, {0x4, 0x9}, {0x2, 0x1}, {0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x7}, {0x2, 0x6}, {0x0, 0x7}, {0x4, 0x1}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0xa}, {0x2, 0x3}, {0x3, 0x9}, {0x5, 0x5}, {0x0, 0xa}, {0x2, 0x5}, {0x2, 0xa}, {0x7, 0x7}, {0x1, 0x4}, {0x7, 0x9}, {0x1}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0x5}, {0x2, 0x4}, {0x4, 0xa}, {0x7}, {0x3, 0x1}, {0x7, 0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x0, 0x7}, {0x4, 0x3}, {0x3, 0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x3}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4f5, 0x1691, 0x1c0, 0x9, 0x6, 0x4, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0x60, 0xb, 0x2, 0x1, 0x48, 0x18, 0x16, 0x5, 0x9, 0x60, 0x48, 0x3, 0x9]}]}]}, @NL80211_ATTR_TX_RATES={0x110, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9d, 0x80, 0x200, 0x7fff, 0x4, 0x0, 0x6, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x5, 0x2, 0x6, 0x810e, 0x8, 0xd, 0x2]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0x1b, 0x2, 0x30]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x12, 0x6, 0x24, 0x36, 0x24, 0x6, 0x36, 0xc, 0x12, 0x12, 0x18, 0x2, 0x60, 0x16, 0x1b, 0x3, 0x4, 0x48, 0xb, 0x48, 0x4, 0x24, 0xc, 0x1b, 0x6c, 0x18, 0x6, 0x2, 0xb]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0x4, 0x48, 0x60, 0xc, 0x60, 0x0, 0xc, 0xc, 0x30, 0x16, 0x24, 0x36, 0x24, 0x60, 0x6c, 0x6c, 0xb, 0xc, 0x76, 0x18, 0x36, 0x18, 0x6b, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x98, 0x6, 0x2, 0xab1e, 0x0, 0x6, 0x2, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x6, 0x2}, {0x5, 0xa}, {0x2, 0x5}, {0x5, 0x1}, {0x7, 0x5}, {0x4, 0x7}, {0x1, 0x7}, {0x4}, {0x3, 0x1}, {0x4, 0x2}]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x0, 0x5, 0x4, 0xffff, 0x200, 0x7fff, 0x3]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x5, 0x2}, {0x2, 0x7}, {0x3, 0x4}, {0x1, 0x1}, {0x6, 0x6}, {0x4}, {0x1, 0xa}, {0x2, 0x7}, {0x2, 0x5}, {0x7, 0x8}, {0x1, 0x4}, {0x0, 0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x7, 0x9}, {0x0, 0x6}, {0x0, 0x3}, {0x3, 0x7}, {0x2, 0x4}, {0x1, 0x1}, {0x0, 0x5}, {0x7, 0x2}, {0x2, 0x7}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x4, 0x8}, {0x0, 0x1}, {0x1, 0x3}, {0x5, 0x9}, {0x2, 0x4}, {0x6, 0x2}, {0x5, 0x2}, {0x1, 0x5}, {0x1, 0xa}, {0x1, 0x1}, {0x1}, {0x0, 0xa}, {0x6, 0xa}, {0x3, 0x4}, {0x1, 0x4}, {0x7, 0x6}, {0x2, 0x6}, {0x4, 0xa}, {0x3, 0x2}, {0x5, 0x2}, {0x3, 0x6}, {0x0, 0x7}, {0x3, 0x1}, {0x7, 0x9}, {0x5}, {0x3, 0xa}, {0x5, 0x7}, {0x1, 0x3}, {0x1, 0x4}, {0x3, 0x9}, {0x0, 0x7}, {0x4, 0x1}, {0x2, 0x8}]}]}]}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x840}, 0x8801) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001040), r4) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x50, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe7d}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x408cc) sendmsg$kcm(r1, &(0x7f00000015c0)={&(0x7f0000001180)=@isdn={0x22, 0x8, 0x51, 0x7, 0x1e}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001200)="f7a4f1f5d974fd", 0x7}, {&(0x7f0000001240)="6e287ccca7a72b74005c97e138a23e3aa9dd097cdff2fc92858daa706cf822c42e3f243f", 0x24}, {&(0x7f0000001280)="b573b7fa7573d4f0903ebfb2d85a41b0d9b4bcd68af9b93fca43cf2dbcd94035d5d6f4e524c5be8489ac4e915ba888445af995b26ed042c6e690121a45fd32287a5942ebc0cc", 0x46}, {&(0x7f0000001300)="3fc2fdf7faec9394d4d72885455e74a4768870ee3c296217e6763b7bbcfd66768106824c536327d2da1f512ae17c49d1eed3396b7a55dc987830076e1d666b844a9b881fc156833fe05fce9279dff26a1dae71675a9af4be72e4c68018e935d119deea8d771f80b8ca5c5a2272c122bcb47b4d45e5fcefef677624c158ce675de3f3e5a10e38a8dd94336ac4f7305fc468abdb140c8589e06f2812a4ed6d48f4d81cee82cdccc4275e25f74ea05df05c5c2e320d975344e50e953429006cc8aec65eb7fda514c3ad4fd1e25b89fff2a043031a22503c86c326c1417e08015715c48b", 0xe2}], 0x4, &(0x7f0000001440)=[{0x60, 0x118, 0x7, "1ad232c15f8f7c8e4dc6c466d26efadc8a060fcfad63602a72310d99dc3a5b5fbf87f48b3b119afdca5e0020af8ac0c3dcf74369dabe40caa7bc880c3d8bcf1c809bf8d39c73a72f889bc8"}, {0x10, 0x0, 0x9}, {0xe8, 0x118, 0x1, "636aec8e9fb0adceafa01c5a163e33a06df654d385988d3c8972a18cf2defc7db4a1589d5b683399ae5d2575b9c245a520143c9623fb6f5c2adafd5a51f71e7ec3c02250447723b1c4ee61a33102c92eb8ac2b3293d80b72466ad79359d034ea789c347e567aa8f402e6096ea0c17ea05589ad47a0f2ec880f33a22fccb130a2c701823cf08f59424f16cb8ad273c21504b12fea2a48e177b9ff353e628026c63d4057ee8dafe5b1e71a8b85e4bbbb9f7f5497b125bef1150a39be32bc88979c3901ca0d161563d71824e8a4e18a6d781b1197e2"}], 0x158}, 0x440048c5) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r9, 0x0, 0x488, &(0x7f0000001600)={{0x1, @dev={0xac, 0x14, 0x14, 0x22}, 0x4e21, 0x2, 'sh\x00', 0x4, 0x80000001, 0x36}, {@empty, 0x4e22, 0x0, 0x400, 0xf, 0x6a800000}}, 0x44) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x6c, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x64}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x5e7}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x81}}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2004c080}, 0x80c1) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x40, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x13}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x6004050}, 0x804) socket$kcm(0x29, 0x5, 0x0) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r10, 0x4b47, &(0x7f00000018c0)={0x1, 0x2c, 0x1}) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001940), r4) r12 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000001980), 0x1090c0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x3c, r11, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r12}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r12, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.589263486s ago: executing program 2 (id=410): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x64, 0x4, 0x368, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'veth0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x5c, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x200408c0) 3.489098777s ago: executing program 2 (id=411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x98, r1, 0x1, 0x20000001, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x4f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x62}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x333}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x244}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}]]}, 0x98}, 0x1, 0x0, 0x0, 0x94}, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000200)=0x8000000) recvmsg$unix(r4, &(0x7f00000018c0)={&(0x7f0000000000), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000140)=""/107, 0x6b}, {&(0x7f00000001c0)=""/184, 0xb8}, {&(0x7f0000000300)=""/31, 0x1f}, {&(0x7f00000004c0)=""/152, 0x98}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/220, 0xdc}, {&(0x7f0000000340)=""/89, 0x59}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000001680)=""/38, 0x26}], 0x9, &(0x7f0000001780)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}, 0x11) 3.360860497s ago: executing program 2 (id=415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x15c, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x1}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x12c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x128, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x15}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7ff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x44, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9c43}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xd3}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}]}]}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)) 3.201672802s ago: executing program 2 (id=421): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x3c}}, 0x0) 3.201114118s ago: executing program 2 (id=423): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x40045109, &(0x7f0000001280)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000002c0)="660f3a42db1cba210066b8a63cfcae66efbaf80c66b82689638666efbafc0cec0fb62bb849008ec80f09ba2101ec650fbef50fc7ac09000f20d86635080000000f22d8", 0x43}], 0x1, 0x52, 0x0, 0x5a) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f00000000c0)=0x4) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.960255521s ago: executing program 2 (id=432): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000440)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x8a}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x10}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x5b01, 0x0) 2.470625471s ago: executing program 4 (id=444): lsm_get_self_attr(0x67, &(0x7f0000000340)={0x0, 0x0, 0x94, 0x74, ""/116}, &(0x7f0000000100)=0x94, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000001480)={0x2108, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_MODES={0x20f4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '(+-$).\'}/$\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xda38}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',+-/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x50}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '--*[)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_MASK={0x46, 0x5, "7512f49e196e2b29e505064b0d254f065ada7de1c725d15447f4660eb18fcd593c5ed66f46afcd2cb91a446984d7f45343c687d48ca4f9d873bc80e6fb013435a04d"}]}]}, 0x2108}, 0x1, 0x0, 0x0, 0x4000080}, 0x811) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r7) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="099c8d9358f737d7c70c0c165039eb555836eb905b0446fd6886f170836f347d8d8cc8ca2d972b4a66869edb9a5d0916abc9d07a85848877479857a94b4a000000000000", @ANYRES16=r8, @ANYBLOB="07ef28bd70000000000008000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x7}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$netlink(r1, &(0x7f0000000980)={&(0x7f0000000700)=@kern={0x10, 0x0, 0x0, 0x2000005}, 0xc, &(0x7f0000000940)=[{&(0x7f0000000740)={0x1e0, 0x1d, 0x1, 0x70bd2a, 0x25dfdbff, "", [@typed={0x14, 0x118, 0x0, 0x0, @ipv6=@remote}, @nested={0x9d, 0x44, 0x0, 0x1, [@generic="c998f987400b97f4096b7562dc6dde43a6b0b5b32c8d2613d914c7c6f559983463c4d188d830fc92f2eb9ffbdd9cc6a8174c4e7c02433c5f39c1077239b8edfda06c8498f102f4efc2432d463d2241665ee099c3bdd062e80a7d240086cbe2e6a106ee07ed88a76a8923bdc8d8ab0c9c9d574fd2a0e00af0bd585ec20cc83839aa05b07a1cde5110290b17c66f52e4992b09d8410a", @nested={0x4, 0x6e}]}, @nested={0x119, 0x19, 0x0, 0x1, [@typed={0x8, 0x4d, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x95}, @generic="46fcda4d3344fe13c4b33b053ecd046dce1a33882884186346652c3f4c505958abf0fad008840211ae9c00affbaa560564f5aee5bc00e46599a18bdae5b140dc7bc22b4cf0d4cea70f12d7e331abfc57aff41964fc3e1dae47f05a27d05b6edb197d57d18c72506dba8eff55d4ad11a214bbcd", @nested={0x4, 0x23}, @generic="69edb50e119c8358c49164d71b09b1d5e14b5628144486809976efaa7c6497b480402809ffa5e73de86d32b4e699226ce7547c7b5719671fa50d3b6114b7b7891aa4184eefa1f1145a1044bec34a0d8296d6d47976451bb71d4c88cf6075e86ea55b913876959e740a468f29dd688da827a22398c173a243b8a6d3008756083e14c41ff29793eb52e24583c93f14", @nested={0x4, 0x115}]}]}, 0x1e0}], 0x1, 0x0, 0x0, 0x2400c845}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x5c0, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x528, 0x2a8, 0x2a8, 0x528, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0xff, 0xffffff00, 'veth0_virt_wifi\x00', 'netdevsim0\x00', {0xff}, {}, 0x1}, 0x40000, 0x3f8, 0x458, 0x0, {0x0, 0x5803}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@rand_addr=0x64010102, [0xff000000, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff000000, 0x0, 0xffffff00], 0x4d6, 0x0, 0x1, 0x1, 0x4, 0xc}, {@ipv4=@empty, [0xff, 0xffffffff, 0xff000000, 0xffffffff], @ipv4=@broadcast, [0xffffffff, 0xffffffff, 0x0, 0xff000000], 0x4d6, 0x3506, 0x0, 0x1, 0x2, 0xd}, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffff00, 0xffffff00, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], 0x4d2, 0x0, 0x8c, 0x1, 0xa, 0x2}, {@ipv6=@mcast1, [0xff, 0xff, 0xffff00, 0xffffff00], @ipv6=@private2, [0x0, 0xff, 0xff, 0xffffff00], 0x4d2, 0x0, 0x67, 0x1, 0x18, 0x10}], 0x1, 0x84}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @fd}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 0xff47, 0x4, [0x2a, 0x10, 0x6, 0x2c, 0x10, 0x3e, 0x7, 0x12, 0x32, 0x1, 0x21, 0xb, 0x3b, 0x1e, 0x2e, 0x1e], 0x1, 0x8000, 0x8000}}}, {{@ip={@remote, @multicast2, 0xffffff00, 0x0, 'virt_wifi0\x00', 'caif0\x00', {}, {0xff}, 0xd1b6c305b1e83769, 0x3, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1, 0x5, 0x3, 0x4, 0x1], 0x6, 0x4}, {0x0, [0x1, 0x1, 0x1, 0x0, 0x6, 0x4], 0x2, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x620) 2.22957835s ago: executing program 4 (id=449): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\\\\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f0000000100)=0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0x1d, r7, &(0x7f0000000240)=""/112, 0x349b7f55) r8 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r8, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, 0x0, r8}, &(0x7f0000002440)=""/4096, 0x1000, &(0x7f00000001c0)={&(0x7f0000000180)={'crc32-pclmul\x00'}, &(0x7f0000000400)="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", 0xfa}) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x2004, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x80000001, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0xffff, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x8000, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x409, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xb, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r9, 0x5501) readv(r9, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004dfa00480066000004069078ac1414bbac1414aa441c0db3e000000200000004ac14144100000002ffffffff000000050703c0004e214e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0x0) mlock(&(0x7f0000289000/0x2000)=nil, 0x2000) ioctl$CDROMSEEK(0xffffffffffffffff, 0x5316, &(0x7f0000000000)={0x80, 0x3, 0x0, 0x4, 0x7, 0x5}) 1.339845678s ago: executing program 4 (id=457): mount$nfs4(&(0x7f00000001c0)='\x00', &(0x7f0000000240)='.\x00', &(0x7f00000003c0), 0x200000, 0x0) r0 = getuid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x400, 0x0) syz_io_uring_setup(0x1838, &(0x7f0000000040)={0x0, 0x5787, 0x10, 0x0, 0x296}, &(0x7f00000000c0), &(0x7f0000000140)=0x0) r3 = io_uring_setup(0x669, &(0x7f00000002c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_LINKAT={0x27, 0x64, 0x0, r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', r1, 0x1400, 0x1, {0x0, r4}}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x8, 0x7f, 0xb5c}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000007, 0x12, r5, 0x100000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x11, r1, 0x10000000) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r0, 0x0) 1.270972662s ago: executing program 4 (id=458): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x74]}}]}) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) 1.140251239s ago: executing program 4 (id=459): socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x10000000000, 0x0, 0x9, 0x0, 0x1, 0x9}, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) write$dsp(r3, 0x0, 0xfffffe59) 640.573464ms ago: executing program 1 (id=466): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x4000, 0x4a30e3daf6237c72}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000140)={{r1}, r2, 0x2, @inherit={0x60, &(0x7f00000000c0)={0x1, 0x3, 0x5, 0x3, {0x0, 0x1, 0x5c4, 0x7f, 0xaad9}, [0x28c5, 0x3, 0xd]}}, @subvolid=0x2}) syz_open_dev$sg(&(0x7f0000001140), 0x7, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000011c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001180), 0x111, 0xc}}, 0x20) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000001240)={0x6, 0x6, 0x3, 0xe4, 0xb, 0x1}) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000001280)={{r1}, "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"}) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002280), 0x441, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000022c0)={0x0}) ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f0000002400)={r5, 0x1, &(0x7f0000002300)=[0x5], &(0x7f0000002340)=[0x9, 0x9], 0x51, 0x3, 0x3, &(0x7f0000002380)=[0x9, 0x7fffffff, 0x2], &(0x7f00000023c0)=[0xa8, 0x2]}) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000002500)={0x3, 0x80, 0x9d, &(0x7f0000002440)=""/157}) bind$rds(r0, &(0x7f0000002540)={0x2, 0x4e24, @broadcast}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$sndpcmp(&(0x7f0000002580), 0x7, 0x296000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r7, 0xc0984124, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000026c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f00000027c0)={&(0x7f0000002680), 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x1c, r8, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000002800)) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000002840), &(0x7f0000002880)=0x4) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000028c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002900), 0x106, 0x2}}, 0x20) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000002980), r11) r12 = syz_io_uring_setup(0x56ac, &(0x7f00000029c0)={0x0, 0xf5c0, 0x80, 0x1, 0x2fb}, &(0x7f0000002a40), &(0x7f0000002a80)) io_uring_enter(r12, 0x4578, 0xe65a, 0x4, &(0x7f0000002ac0)={[0xffffffffffffffff]}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002b40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002b00), 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000002c00)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xb7d, @rand_addr=' \x01\x00', 0x9}}}, 0x30) 571.330282ms ago: executing program 1 (id=467): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x8, 0x5, 0x8, 0xfffffffd, 0x5, '\x00', "037ec42b", "8000", "0100", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "006a9cc1f000", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000040)={0xe0, 0x80000000, 0x7, 0xffff, 0x8, 0xe, "1efcff00", 0x0, 0x0, 0x0, 0xa, 0x7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8acc0", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000140)=0x4) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r5 = syz_open_pts(r4, 0x101) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x8, 0x5, 0x8, 0xfffffffd, 0x5, '\x00', "037ec42b", "8000", "0100", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "006a9cc1f000", "cf6cce2296b3f853e224c4e0"]}) (async) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000040)={0xe0, 0x80000000, 0x7, 0xffff, 0x8, 0xe, "1efcff00", 0x0, 0x0, 0x0, 0xa, 0x7}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8acc0", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) (async) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000140)=0x4) (async) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) (async) syz_open_pts(r4, 0x101) (async) dup3(r5, r4, 0x0) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 341.46882ms ago: executing program 0 (id=471): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400002, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20282, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_emit_ethernet(0x200000, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000000)="36f2f00fb074000f22c164f0fe8c996366b9800000c00f326635000400000f300f79aec6960f01c4ea4c006c00ba4300b0ceee2626f087bafaff36660f388008", 0x40}], 0x1, 0x51, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000140)) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x180, 0xffffff80, 0x178, 0x0, 0x178, 0x2a0, 0x230, 0x258, 0x2a0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x138, 0x180, 0x12, {0x959f1400}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@multicast1}}, @common=@unspec=@limit={{0x48}, {0x0, 0x412}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'geneve1\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (rerun: 64) 209.086252ms ago: executing program 1 (id=472): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x2400c800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x6, 0x0}, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="150a00180000000061116400000000004d3f75a50000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0xffffffffffffffcd) 208.777632ms ago: executing program 4 (id=473): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x4}, {0xc}}}, 0x24}}, 0x40004) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x400000f4, 0x0, 0x401}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r6, 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x40, &(0x7f0000000500)={[{@mode}], [{@fowner_eq}]}) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getchain={0x2c, 0x66, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff1}, {0xb, 0x5}, {0xa, 0x2}}, [{0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) 206.254341ms ago: executing program 0 (id=474): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x68850) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x1, 0x2, "fcd1ca9a0967216a"}}}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0xcc, 0x4) 205.847597ms ago: executing program 1 (id=475): r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x400) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x38, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@generic="12ccbd379ce6cd69"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0xfffffffffffffffd, {0x1, 0x0, 0x4}, 0xff}, 0x18) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f00000002c0)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f384", 0x6}], 0x1}, 0x48005) ioctl$RTC_WKALM_RD(r0, 0x40187013, &(0x7f0000000440)) 205.688935ms ago: executing program 0 (id=476): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (rerun: 64) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) (async, rerun: 32) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (rerun: 32) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r3, 0x40103e05, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 119.747489ms ago: executing program 1 (id=477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'netpci0\x00', 0x1000}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0x4) 119.510433ms ago: executing program 0 (id=478): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000030a010400000000010000010900030073797a32000004000c00024000000000000000010900010073797a3000000000140000001100010000000000000000000000000a"], 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x48080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0x2, 0xd7b7}) 1.149041ms ago: executing program 1 (id=479): r0 = socket$alg(0x26, 0x5, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x8208200) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) r2 = accept4(r0, 0x0, 0x0, 0x80800) (rerun: 64) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) (async) setreuid(0xee01, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r5, &(0x7f0000000780)=""/185, 0xb9, 0x3c) (async) syz_emit_ethernet(0x32, &(0x7f0000000140)={@remote, @random="50a245d5cde0", @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x3, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x700, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply}}}}, 0x0) 255.041µs ago: executing program 0 (id=480): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x15, 0x10, 0x8}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000000fff0000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000c500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 0s ago: executing program 0 (id=481): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000280)=0x0) io_submit(r1, 0x2, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x1, r0, 0x0, 0x0, 0xe9d0}]) (async) io_submit(r1, 0x2, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x1, r0, 0x0, 0x0, 0xe9d0}]) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xb0281, 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x2180, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0xf7d) (async) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0xf7d) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000040000000400fc800c00018008"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendto$inet(r5, 0x0, 0x0, 0x44800, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x1000}, &(0x7f00000000c0)=0x8) ioctl$COMEDI_INSNLIST(r3, 0x8010640b, &(0x7f0000000000)={0x66666666666659a, &(0x7f0000000080)}) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="66ba6100b875d4c65eef660f388146c70f01cac4c23d3e85000001000f35c4e18d5436f20f01f9202066f08321bf2e3e0f30c4e3f1cf02a8", 0x38}], 0x1, 0x80, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="66ba6100b875d4c65eef660f388146c70f01cac4c23d3e85000001000f35c4e18d5436f20f01f9202066f08321bf2e3e0f30c4e3f1cf02a8", 0x38}], 0x1, 0x80, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x80, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) listen(r7, 0xfffffff8) (async) listen(r7, 0xfffffff8) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000080)=0x38cd) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000080)=0x38cd) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="98000000031d0101000000000000a7c4c76e39937407010073797a30000000000c000340000000000000f1a608000540000000032400078008000140ffff7fff0800024000000003080002400000000708000140000000030900010073797a31000000000900010073797a31000000000c00034000000000000000ec08000540000000000c00064000000000000000040800054000000002"], 0x98}, 0x1, 0x0, 0x0, 0x20004081}, 0x1) (async) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="98000000031d0101000000000000a7c4c76e39937407010073797a30000000000c000340000000000000f1a608000540000000032400078008000140ffff7fff0800024000000003080002400000000708000140000000030900010073797a31000000000900010073797a31000000000c00034000000000000000ec08000540000000000c00064000000000000000040800054000000002"], 0x98}, 0x1, 0x0, 0x0, 0x20004081}, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:9664' (ED25519) to the list of known hosts. [ 45.041668][ T40] audit: type=1400 audit(1752736704.496:62): avc: denied { name_bind } for pid=5881 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.067561][ T40] audit: type=1400 audit(1752736704.516:63): avc: denied { write } for pid=5882 comm="sh" path="pipe:[6170]" dev="pipefs" ino=6170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.085504][ T40] audit: type=1400 audit(1752736704.536:64): avc: denied { execute } for pid=5882 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.095492][ T40] audit: type=1400 audit(1752736704.536:65): avc: denied { execute_no_trans } for pid=5882 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.350523][ T40] audit: type=1400 audit(1752736706.806:66): avc: denied { mounton } for pid=5882 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.353025][ T5882] cgroup: Unknown subsys name 'net' [ 47.544251][ T5882] cgroup: Unknown subsys name 'cpuset' [ 47.550113][ T5882] cgroup: Unknown subsys name 'rlimit' [ 47.844440][ T5936] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.631933][ T5882] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.743064][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.743101][ T40] audit: type=1400 audit(1752736711.196:80): avc: denied { execmem } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.953868][ T40] audit: type=1400 audit(1752736711.406:81): avc: denied { create } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.960092][ T40] audit: type=1400 audit(1752736711.406:82): avc: denied { read write } for pid=5948 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.967328][ T40] audit: type=1400 audit(1752736711.406:83): avc: denied { open } for pid=5948 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.975743][ T40] audit: type=1400 audit(1752736711.426:84): avc: denied { ioctl } for pid=5948 comm="syz-executor" path="socket:[7199]" dev="sockfs" ino=7199 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.008747][ T5959] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.008814][ T5961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.011954][ T5959] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.016238][ T5959] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.018228][ T5960] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.019256][ T5959] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.020225][ T5961] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.021967][ T5961] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.022295][ T5960] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.022852][ T5960] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.023795][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.024029][ T5960] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.029983][ T40] audit: type=1400 audit(1752736711.476:85): avc: denied { read } for pid=5949 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.030714][ T5959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.031551][ T5961] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.032252][ T40] audit: type=1400 audit(1752736711.476:86): avc: denied { open } for pid=5949 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.032293][ T5961] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.034797][ T5959] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.036851][ T40] audit: type=1400 audit(1752736711.476:87): avc: denied { mounton } for pid=5949 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.046004][ T5959] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.070696][ T5959] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.074616][ T5959] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.077506][ T5959] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.222852][ T40] audit: type=1400 audit(1752736711.676:88): avc: denied { module_request } for pid=5949 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.287924][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 52.346475][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 52.371009][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 52.525043][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.527727][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.531040][ T5949] bridge_slave_0: entered allmulticast mode [ 52.535142][ T5949] bridge_slave_0: entered promiscuous mode [ 52.580822][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.583206][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.585789][ T5949] bridge_slave_1: entered allmulticast mode [ 52.588366][ T5949] bridge_slave_1: entered promiscuous mode [ 52.685708][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.688520][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.691614][ T5951] bridge_slave_0: entered allmulticast mode [ 52.695459][ T5951] bridge_slave_0: entered promiscuous mode [ 52.699972][ T5963] chnl_net:caif_netlink_parms(): no params data found [ 52.708251][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.714543][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.717519][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.722529][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.725548][ T5948] bridge_slave_0: entered allmulticast mode [ 52.729362][ T5948] bridge_slave_0: entered promiscuous mode [ 52.733923][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.736186][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.738784][ T5951] bridge_slave_1: entered allmulticast mode [ 52.742054][ T5951] bridge_slave_1: entered promiscuous mode [ 52.778808][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.782069][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.785207][ T5948] bridge_slave_1: entered allmulticast mode [ 52.789052][ T5948] bridge_slave_1: entered promiscuous mode [ 52.839882][ T5949] team0: Port device team_slave_0 added [ 52.843278][ T5949] team0: Port device team_slave_1 added [ 52.868886][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.875502][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.982376][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.984570][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.992831][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.998577][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.004190][ T5951] team0: Port device team_slave_0 added [ 53.009245][ T5951] team0: Port device team_slave_1 added [ 53.027022][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.029213][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.037668][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.043137][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.130387][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.132570][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.134766][ T5963] bridge_slave_0: entered allmulticast mode [ 53.137397][ T5963] bridge_slave_0: entered promiscuous mode [ 53.140504][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.142677][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.144844][ T5963] bridge_slave_1: entered allmulticast mode [ 53.147442][ T5963] bridge_slave_1: entered promiscuous mode [ 53.187178][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.189418][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.197958][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.219491][ T5949] hsr_slave_0: entered promiscuous mode [ 53.222811][ T5949] hsr_slave_1: entered promiscuous mode [ 53.227962][ T5948] team0: Port device team_slave_0 added [ 53.230853][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.233744][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.245641][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.273573][ T5948] team0: Port device team_slave_1 added [ 53.296075][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.344995][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.379175][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.381595][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.389686][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.434730][ T5963] team0: Port device team_slave_0 added [ 53.437084][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.439168][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.447030][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.475666][ T5963] team0: Port device team_slave_1 added [ 53.507178][ T5951] hsr_slave_0: entered promiscuous mode [ 53.510259][ T5951] hsr_slave_1: entered promiscuous mode [ 53.513854][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.516447][ T5951] Cannot create hsr debugfs directory [ 53.543711][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.545867][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.554670][ T5963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.629608][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.633030][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.643833][ T5963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.654526][ T5948] hsr_slave_0: entered promiscuous mode [ 53.656739][ T5948] hsr_slave_1: entered promiscuous mode [ 53.658797][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.661261][ T5948] Cannot create hsr debugfs directory [ 53.804796][ T5963] hsr_slave_0: entered promiscuous mode [ 53.807128][ T5963] hsr_slave_1: entered promiscuous mode [ 53.809276][ T5963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.811987][ T5963] Cannot create hsr debugfs directory [ 54.041731][ T5949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.064575][ T5949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.071978][ T5949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.089695][ T5949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.100908][ T5309] Bluetooth: hci2: command tx timeout [ 54.103405][ T5959] Bluetooth: hci1: command tx timeout [ 54.103410][ T5309] Bluetooth: hci0: command tx timeout [ 54.109330][ T5951] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.116423][ T5951] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.130611][ T5951] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.135090][ T5951] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.173226][ T5948] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.183726][ T5948] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.188223][ T5948] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.190035][ T5959] Bluetooth: hci3: command tx timeout [ 54.195700][ T5948] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.267140][ T5963] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.273554][ T5963] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.280273][ T5963] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.288813][ T5963] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.317250][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.362913][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.371390][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.389827][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.392184][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.396499][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.398933][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.410612][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.426237][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.429283][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.449363][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.452657][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.469611][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.489999][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.500717][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.523394][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.525662][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.529647][ T40] audit: type=1400 audit(1752736713.976:89): avc: denied { sys_module } for pid=5949 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.537255][ T5963] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.547998][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.550322][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.554222][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.556476][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.575267][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.578433][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.655317][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.688332][ T5949] veth0_vlan: entered promiscuous mode [ 54.694891][ T5949] veth1_vlan: entered promiscuous mode [ 54.708709][ T5949] veth0_macvtap: entered promiscuous mode [ 54.714932][ T5949] veth1_macvtap: entered promiscuous mode [ 54.734951][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.746196][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.753758][ T5949] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.757408][ T5949] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.764677][ T5949] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.768125][ T5949] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.776234][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.811614][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.820854][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.881563][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.884199][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.903020][ T5951] veth0_vlan: entered promiscuous mode [ 54.920331][ T5963] veth0_vlan: entered promiscuous mode [ 54.924377][ T5948] veth0_vlan: entered promiscuous mode [ 54.927863][ T5951] veth1_vlan: entered promiscuous mode [ 54.935854][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.938435][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.944434][ T5948] veth1_vlan: entered promiscuous mode [ 54.950532][ T5963] veth1_vlan: entered promiscuous mode [ 54.972961][ T5951] veth0_macvtap: entered promiscuous mode [ 54.983706][ T5949] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.991323][ T5963] veth0_macvtap: entered promiscuous mode [ 54.996211][ T5951] veth1_macvtap: entered promiscuous mode [ 55.003886][ T5948] veth0_macvtap: entered promiscuous mode [ 55.007565][ T5963] veth1_macvtap: entered promiscuous mode [ 55.015840][ T5948] veth1_macvtap: entered promiscuous mode [ 55.024696][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.042180][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.046210][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.054546][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.058008][ T5951] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.058058][ T6037] sctp: [Deprecated]: syz.0.1 (pid 6037) Use of int in max_burst socket option deprecated. [ 55.058058][ T6037] Use struct sctp_assoc_value instead [ 55.063210][ T5951] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.070485][ T5951] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.074049][ T5951] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.081118][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.088549][ T5963] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.092636][ T5963] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.096094][ T5963] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.099640][ T5963] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.106188][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.130720][ T5948] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.133652][ T5948] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.136803][ T5948] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.140738][ T5948] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.163661][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.167043][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.204227][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.206691][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.222633][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.225533][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.243928][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.247219][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.295611][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.298929][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.305053][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.308464][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.604289][ T6067] syz.3.9 uses obsolete (PF_INET,SOCK_PACKET) [ 55.860571][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.961452][ T6107] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 55.966822][ T6110] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_batadv, syncid = 4, id = 0 [ 56.015485][ T6107] ALSA: mixer_oss: invalid index 100000 [ 56.016748][ T24] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 56.022467][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 56.027416][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 56.032587][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 56.037296][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 56.042761][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 56.046454][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.051150][ T24] usb 7-1: config 0 descriptor?? [ 56.054453][ T6064] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 56.087764][ T6118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.25'. [ 56.157599][ T6125] Bluetooth: MGMT ver 1.23 [ 56.180352][ T5959] Bluetooth: hci0: command tx timeout [ 56.180362][ T5309] Bluetooth: hci1: command tx timeout [ 56.180385][ T5309] Bluetooth: hci2: command tx timeout [ 56.260388][ T5309] Bluetooth: hci3: command tx timeout [ 56.370014][ T5953] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 56.525638][ T5309] Bluetooth: hci2: Malformed LE Event: 0x0d [ 56.527106][ T6123] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 56.540254][ T5953] usb 8-1: unable to get BOS descriptor or descriptor too short [ 56.546655][ T5953] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 56.549696][ T5953] usb 8-1: can't read configurations, error -71 [ 56.576169][ T6144] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6144 comm=syz.0.35 [ 56.593836][ T6144] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1001 sclass=netlink_tcpdiag_socket pid=6144 comm=syz.0.35 [ 56.667972][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 56.670136][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 56.676406][ T24] usb 7-1: USB disconnect, device number 2 [ 56.682022][ T6150] xt_l2tp: missing protocol rule (udp|l2tpip) [ 56.783541][ T40] kauditd_printk_skb: 94 callbacks suppressed [ 56.783555][ T40] audit: type=1400 audit(1752736716.236:184): avc: denied { unmount } for pid=5963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 56.816405][ T40] audit: type=1400 audit(1752736716.266:185): avc: denied { create } for pid=6155 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.827546][ T40] audit: type=1400 audit(1752736716.266:186): avc: denied { bind } for pid=6155 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.833456][ T40] audit: type=1400 audit(1752736716.266:187): avc: denied { write } for pid=6155 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.862294][ T6156] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 56.865810][ T40] audit: type=1400 audit(1752736716.316:188): avc: denied { relabelto } for pid=6155 comm="syz.1.39" name="5" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 56.867684][ T6156] tipc: Started in network mode [ 56.874210][ T40] audit: type=1400 audit(1752736716.316:189): avc: denied { associate } for pid=6155 comm="syz.1.39" name="5" dev="tmpfs" ino=40 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 56.875752][ T6156] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 56.887213][ T6156] tipc: Enabled bearer , priority 10 [ 56.901632][ T40] audit: type=1400 audit(1752736716.356:190): avc: denied { remove_name } for pid=5963 comm="syz-executor" name="binderfs" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 56.910023][ T40] audit: type=1400 audit(1752736716.356:191): avc: denied { rmdir } for pid=5963 comm="syz-executor" name="5" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 56.956077][ T40] audit: type=1400 audit(1752736716.406:192): avc: denied { setopt } for pid=6160 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.963964][ T40] audit: type=1400 audit(1752736716.416:193): avc: denied { read } for pid=6160 comm="syz.0.42" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 57.109524][ T6172] 9pnet_virtio: no channels available for device syz [ 57.147091][ T6179] overlay: Unknown parameter 'smackfshat' [ 57.199867][ T6017] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.282359][ T6197] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 57.329930][ T6017] usb 6-1: device descriptor read/64, error -71 [ 57.456152][ T6206] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.536638][ T6194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6194 comm=syz.2.51 [ 57.579870][ T6017] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 57.619876][ T5953] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 57.672758][ T6217] warning: `syz.2.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.711479][ T6017] usb 6-1: device descriptor read/64, error -71 [ 57.761686][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'. [ 57.771280][ T5953] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 57.778369][ T5953] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.783561][ T5953] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 57.786912][ T5953] usb 8-1: SerialNumber: syz [ 57.820685][ T6017] usb usb6-port1: attempt power cycle [ 57.842749][ T6235] random: crng reseeded on system resumption [ 57.881052][ T6039] tipc: Node number set to 4269801488 [ 57.908523][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 57.917863][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 57.999101][ T5953] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 58.010489][ T5953] usb 8-1: USB disconnect, device number 3 [ 58.169928][ T6017] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 58.190581][ T6017] usb 6-1: device descriptor read/8, error -71 [ 58.259888][ T5309] Bluetooth: hci0: command tx timeout [ 58.260028][ T5959] Bluetooth: hci1: command tx timeout [ 58.271025][ T5959] Bluetooth: hci2: command tx timeout [ 58.339960][ T5959] Bluetooth: hci3: command tx timeout [ 58.406456][ T6248] netlink: 340 bytes leftover after parsing attributes in process `syz.2.69'. [ 58.429929][ T6017] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 58.450976][ T6017] usb 6-1: device descriptor read/8, error -71 [ 58.458071][ T6251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.70'. [ 58.562208][ T6017] usb usb6-port1: unable to enumerate USB device [ 58.572691][ T6257] kvm: pic: non byte write [ 58.575147][ T6257] kvm: pic: non byte write [ 58.578593][ T6257] process 'syz.0.73' launched '/dev/fd/8' with NULL argv: empty string added [ 58.685071][ T6276] ucma_write: process 67 (syz.3.76) changed security contexts after opening file descriptor, this is not allowed. [ 58.821346][ T6284] nbd: nbd0 already in use [ 58.865519][ T6292] netlink: 24 bytes leftover after parsing attributes in process `syz.2.81'. [ 58.868341][ T6292] openvswitch: netlink: Flow key attr not present in new flow. [ 59.052465][ T6300] netlink: 'syz.2.85': attribute type 10 has an invalid length. [ 59.056466][ T6300] hsr_slave_0: left promiscuous mode [ 59.058550][ T6300] hsr_slave_1: left promiscuous mode [ 59.240032][ T836] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 59.391275][ T836] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 59.393987][ T836] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 59.397119][ T836] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 59.399881][ T836] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 59.403179][ T836] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 59.407721][ T836] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 59.410605][ T836] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 59.413032][ T836] usb 8-1: Product: syz [ 59.414269][ T836] usb 8-1: Manufacturer: syz [ 59.418308][ T836] cdc_wdm 8-1:1.0: skipping garbage [ 59.420019][ T836] cdc_wdm 8-1:1.0: skipping garbage [ 59.424186][ T836] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 59.426073][ T836] cdc_wdm 8-1:1.0: Unknown control protocol [ 59.777995][ T6314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6314 comm=syz.0.89 [ 59.907627][ T6322] netlink: 'syz.0.92': attribute type 1 has an invalid length. [ 59.989434][ T6328] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.349978][ T5959] Bluetooth: hci0: command tx timeout [ 60.350374][ T5309] Bluetooth: hci2: command tx timeout [ 60.351720][ T63] Bluetooth: hci1: command tx timeout [ 60.419855][ T5309] Bluetooth: hci3: command tx timeout [ 60.478197][ T6359] xt_TPROXY: Can be used only with -p tcp or -p udp [ 60.478413][ T6360] xt_TPROXY: Can be used only with -p tcp or -p udp [ 60.539874][ T6354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6354 comm=syz.1.100 [ 60.590922][ T6360] 9p: Unknown access argument 18446744073709551615: -34 [ 60.713732][ T6376] netlink: 'syz.2.107': attribute type 21 has an invalid length. [ 60.716286][ T6376] netlink: 156 bytes leftover after parsing attributes in process `syz.2.107'. [ 60.721278][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.107'. [ 60.726865][ T6376] netlink: 'syz.2.107': attribute type 4 has an invalid length. [ 60.944095][ T6388] bridge_slave_0: left allmulticast mode [ 60.945982][ T6388] bridge_slave_0: left promiscuous mode [ 60.948458][ T6388] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.954748][ T6388] bridge_slave_1: left allmulticast mode [ 60.956581][ T6388] bridge_slave_1: left promiscuous mode [ 60.958453][ T6388] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.961329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.976442][ T6388] bond0: (slave bond_slave_0): Releasing backup interface [ 60.982533][ T6388] bond0: (slave bond_slave_1): Releasing backup interface [ 60.994658][ T6388] team0: Port device team_slave_0 removed [ 61.001217][ T6388] team0: Port device team_slave_1 removed [ 61.003687][ T6388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.006119][ T6388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.010172][ T6388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.012631][ T6388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.076550][ T6395] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 61.208914][ T6398] ptm ptm56: ldisc open failed (-12), clearing slot 56 [ 61.826337][ T40] kauditd_printk_skb: 97 callbacks suppressed [ 61.826347][ T40] audit: type=1400 audit(1752736721.276:291): avc: denied { write } for pid=6408 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.834357][ T40] audit: type=1400 audit(1752736721.276:292): avc: denied { bind } for pid=6408 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.845112][ T40] audit: type=1400 audit(1752736721.276:293): avc: denied { watch } for pid=6408 comm="syz.1.118" path="/19/control" dev="tmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.908881][ T40] audit: type=1400 audit(1752736721.356:294): avc: denied { create } for pid=6414 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 61.915652][ T40] audit: type=1400 audit(1752736721.356:295): avc: denied { write } for pid=6414 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 61.937977][ T5953] usb 8-1: USB disconnect, device number 4 [ 61.975740][ T6421] macvlan0: entered promiscuous mode [ 61.977560][ T6421] macvlan0: entered allmulticast mode [ 61.979273][ T6421] veth1_vlan: entered allmulticast mode [ 62.009360][ T40] audit: type=1400 audit(1752736721.456:296): avc: denied { ioctl } for pid=6424 comm="syz.1.126" path="socket:[10590]" dev="sockfs" ino=10590 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.010710][ T6425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.019679][ T40] audit: type=1400 audit(1752736721.466:297): avc: denied { setopt } for pid=6420 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.073387][ T40] audit: type=1400 audit(1752736721.526:298): avc: denied { read } for pid=6427 comm="syz.1.127" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 62.081783][ T40] audit: type=1400 audit(1752736721.526:299): avc: denied { open } for pid=6427 comm="syz.1.127" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 62.089197][ T40] audit: type=1400 audit(1752736721.526:300): avc: denied { ioctl } for pid=6427 comm="syz.1.127" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 62.751117][ T6453] bond1: entered promiscuous mode [ 62.788482][ T6457] binder: BINDER_SET_CONTEXT_MGR already set [ 62.791085][ T6457] binder: 6455:6457 ioctl 4018620d 2000000000c0 returned -16 [ 62.816194][ T6461] capability: warning: `syz.1.136' uses deprecated v2 capabilities in a way that may be insecure [ 62.997257][ T6479] netlink: 32 bytes leftover after parsing attributes in process `syz.3.141'. [ 63.004731][ T6479] xfrm1: entered allmulticast mode [ 63.053326][ T6483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6483 comm=syz.3.141 [ 63.075766][ T6482] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.142'. [ 63.088797][ T6486] netem: invalid attributes len -22 [ 63.091225][ T6486] netem: change failed [ 63.125937][ T6490] overlayfs: conflicting options: userxattr,metacopy=on [ 63.236289][ T6500] lo: entered promiscuous mode [ 63.238090][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.149'. [ 63.241199][ T6500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 63.251443][ T6501] openvswitch: netlink: Key type 30 is not supported [ 63.805099][ T1179] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.861109][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.873864][ T1179] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.972549][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 63.976318][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 63.976411][ T6530] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 63.984695][ T6530] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 64.033814][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 64.036603][ T1179] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.040613][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 64.045154][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 64.049128][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.049399][ T5959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.054063][ T6523] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.056951][ T5959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.058839][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 64.060912][ T5959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.066185][ T5959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.069236][ T5959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.102568][ T1179] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.161831][ T6554] netlink: 'syz.2.166': attribute type 2 has an invalid length. [ 64.164345][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.166'. [ 64.196895][ T6557] Zero length message leads to an empty skb [ 64.260277][ T1179] bridge_slave_1: left allmulticast mode [ 64.262468][ T1179] bridge_slave_1: left promiscuous mode [ 64.264749][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.270940][ T1179] bridge_slave_0: left allmulticast mode [ 64.272873][ T1179] bridge_slave_0: left promiscuous mode [ 64.275198][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.398148][ T24] usb 5-1: USB disconnect, device number 2 [ 64.482049][ T6575] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1814518830 (232258410240 ns) > initial count (2458284544 ns). Using initial count to start timer. [ 64.514713][ T1179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.519332][ T1179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.523090][ T1179] bond0 (unregistering): Released all slaves [ 64.540810][ T6542] chnl_net:caif_netlink_parms(): no params data found [ 64.636101][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.638481][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.641282][ T6542] bridge_slave_0: entered allmulticast mode [ 64.642641][ T1179] IPVS: stopping master sync thread 6110 ... [ 64.644086][ T6542] bridge_slave_0: entered promiscuous mode [ 64.679023][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.682590][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.684999][ T6542] bridge_slave_1: entered allmulticast mode [ 64.688358][ T6542] bridge_slave_1: entered promiscuous mode [ 64.730013][ T6542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.736276][ T6542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.773064][ T6592] pim6reg1: entered promiscuous mode [ 64.777183][ T6592] pim6reg1: entered allmulticast mode [ 64.809192][ T5959] Bluetooth: hci3: unexpected subevent 0x1a length: 28 > 6 [ 64.829479][ T6542] team0: Port device team_slave_0 added [ 64.875753][ T6542] team0: Port device team_slave_1 added [ 64.917163][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.919604][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.927689][ T6542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.933985][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.936453][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.945162][ T6542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.988050][ T1179] hsr_slave_0: left promiscuous mode [ 64.990796][ T1179] hsr_slave_1: left promiscuous mode [ 64.993338][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.995723][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.998497][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.000997][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.019092][ T1179] veth1_macvtap: left promiscuous mode [ 65.021222][ T1179] veth0_macvtap: left promiscuous mode [ 65.023018][ T1179] veth1_vlan: left allmulticast mode [ 65.024778][ T1179] veth1_vlan: left promiscuous mode [ 65.026490][ T1179] veth0_vlan: left promiscuous mode [ 65.551114][ T1179] team0 (unregistering): Port device team_slave_1 removed [ 65.621717][ T1179] team0 (unregistering): Port device team_slave_0 removed [ 66.022880][ T6542] hsr_slave_0: entered promiscuous mode [ 66.025684][ T6542] hsr_slave_1: entered promiscuous mode [ 66.027716][ T6542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.030137][ T6542] Cannot create hsr debugfs directory [ 66.101718][ T5959] Bluetooth: hci2: command tx timeout [ 66.243983][ T6542] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.248310][ T6542] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.254545][ T6542] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.258720][ T6542] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.312222][ T6542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.322119][ T6542] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.327560][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.330525][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.333230][ T6650] 9p: Unknown uid 00000000004294967295 [ 66.342905][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.345148][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.455678][ T6542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.578529][ T6542] veth0_vlan: entered promiscuous mode [ 66.584298][ T6542] veth1_vlan: entered promiscuous mode [ 66.599202][ T6542] veth0_macvtap: entered promiscuous mode [ 66.600976][ T53] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.608804][ T6542] veth1_macvtap: entered promiscuous mode [ 66.615057][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 66.618241][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.628922][ T6687] bond2: entered allmulticast mode [ 66.632056][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.636623][ T6542] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.639352][ T6542] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.642634][ T6542] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.645342][ T6542] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.688037][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.690808][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.709174][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.712638][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.760018][ T53] usb 7-1: Using ep0 maxpacket: 16 [ 66.767200][ T53] usb 7-1: config 2 has an invalid interface number: 187 but max is 2 [ 66.772460][ T53] usb 7-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 66.775373][ T53] usb 7-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 66.778050][ T53] usb 7-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 66.781273][ T53] usb 7-1: config 2 has an invalid interface number: 90 but max is 2 [ 66.784148][ T53] usb 7-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 66.787496][ T53] usb 7-1: config 2 has 2 interfaces, different from the descriptor's value: 3 [ 66.790557][ T53] usb 7-1: config 2 has no interface number 0 [ 66.792545][ T53] usb 7-1: config 2 has no interface number 1 [ 66.795040][ T53] usb 7-1: config 2 interface 187 altsetting 8 endpoint 0x3 has invalid maxpacket 72, setting to 64 [ 66.798665][ T53] usb 7-1: config 2 interface 187 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 66.802381][ T53] usb 7-1: config 2 interface 187 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 66.805693][ T53] usb 7-1: config 2 interface 187 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 66.809085][ T53] usb 7-1: config 2 interface 187 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 66.813198][ T53] usb 7-1: config 2 interface 187 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 66.817542][ T53] usb 7-1: config 2 interface 187 altsetting 8 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 66.823825][ T53] usb 7-1: config 2 interface 187 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 66.828430][ T53] usb 7-1: config 2 interface 187 altsetting 8 endpoint 0x5 has an invalid bInterval 255, changing to 7 [ 66.833042][ T53] usb 7-1: config 2 interface 187 altsetting 8 endpoint 0xD has invalid wMaxPacketSize 0 [ 66.836322][ T53] usb 7-1: config 2 interface 187 altsetting 8 has an endpoint descriptor with address 0x7F, changing to 0xF [ 66.839989][ T53] usb 7-1: config 2 interface 187 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 66.843429][ T53] usb 7-1: config 2 interface 187 altsetting 8 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 66.847454][ T53] usb 7-1: config 2 interface 90 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 66.851915][ T53] usb 7-1: config 2 interface 187 has no altsetting 0 [ 66.854302][ T53] usb 7-1: config 2 interface 90 has no altsetting 0 [ 66.858040][ T53] usb 7-1: New USB device found, idVendor=0fe9, idProduct=b307, bcdDevice=8a.08 [ 66.861381][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.864237][ T53] usb 7-1: Product: ј [ 66.865633][ T53] usb 7-1: Manufacturer: à¡  [ 66.867098][ T53] usb 7-1: SerialNumber: 蒘㉱ܼ쵈î¹åŠá‰³á¢œîµ·â—äªî”¥ë…²ì²ªâªä¦è¨„᧧渠ᷓ똴딲뀮ꋃ벵ë”ãá©ç©„킾Ȕ滙ꡲí„ꀗ簥㨥렀섾腴稟ã…მ︒皟Ù鄢뀾⎱閉䈇᷋㔟딫䲇뗃䱕æ´ë£à¼¤à¹»äŒ¶ï¨å¼¯à«¸â ”䊟èŽå²˜ï¸€î–€ê‹»á·î¬¶è«é¬§è—¿è…¦ë¸¨å¹¦æˆŽ [ 66.890005][ T10] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 66.975311][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 66.975354][ T40] audit: type=1400 audit(1752736726.426:356): avc: denied { rename } for pid=6703 comm="syz.4.188" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 67.031488][ T40] audit: type=1400 audit(1752736726.486:357): avc: denied { ioctl } for pid=6717 comm="syz.4.189" path="socket:[13099]" dev="sockfs" ino=13099 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.044114][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.047962][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 67.049883][ T40] audit: type=1400 audit(1752736726.496:358): avc: denied { read } for pid=6717 comm="syz.4.189" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 67.051763][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 67.061248][ T40] audit: type=1400 audit(1752736726.496:359): avc: denied { open } for pid=6717 comm="syz.4.189" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 67.061294][ T40] audit: type=1400 audit(1752736726.496:360): avc: denied { ioctl } for pid=6717 comm="syz.4.189" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 67.067716][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 67.092051][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 67.094894][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 67.097339][ T10] usb 6-1: Manufacturer: syz [ 67.097922][ T6722] syz.0.190: attempt to access beyond end of device [ 67.097922][ T6722] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 67.101488][ T10] usb 6-1: config 0 descriptor?? [ 67.104234][ T6722] EXT4-fs (nbd0): unable to read superblock [ 67.104252][ T53] usb 7-1: USB disconnect, device number 3 [ 67.107680][ T40] audit: type=1400 audit(1752736726.556:361): avc: denied { getopt } for pid=6717 comm="syz.4.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.172887][ T40] audit: type=1400 audit(1752736726.626:362): avc: denied { write } for pid=6726 comm="syz.0.192" lport=48350 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 67.173518][ T6730] xt_socket: unknown flags 0x50 [ 67.185443][ T40] audit: type=1400 audit(1752736726.636:363): avc: denied { create } for pid=6729 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 67.205434][ T6733] binder: 6732:6733 ioctl c0306201 200000000380 returned -14 [ 67.236154][ T6740] kvm: user requested TSC rate below hardware speed [ 67.249317][ T40] audit: type=1400 audit(1752736726.696:364): avc: denied { append } for pid=6738 comm="syz.0.195" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 67.249471][ T6740] usb usb1: usbfs: process 6740 (syz.0.195) did not claim interface 0 before use [ 67.262631][ T6740] tipc: Started in network mode [ 67.264246][ T6740] tipc: Node identity ac1414aa, cluster identity 4711 [ 67.266740][ T6740] tipc: Enabled bearer , priority 10 [ 67.269187][ T6740] tipc: Enabled bearer , priority 0 [ 67.349804][ T10] rc_core: IR keymap rc-hauppauge not found [ 67.353113][ T10] Registered IR keymap rc-empty [ 67.355316][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 67.372223][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 67.389603][ T6756] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3450576530 (441673795840 ns) > initial count (225373694080 ns). Using initial count to start timer. [ 67.390954][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 67.403653][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input5 [ 67.410105][ T40] audit: type=1400 audit(1752736726.856:365): avc: denied { read } for pid=5344 comm="acpid" name="event4" dev="devtmpfs" ino=2887 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.411397][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 67.429847][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 67.441153][ T6758] nbd: couldn't find a device at index -1605786504 [ 67.449905][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 67.469833][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 67.489872][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 67.509973][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 67.530206][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 67.549853][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 67.569852][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 67.589863][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 67.610859][ T10] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 67.614475][ T10] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 67.621782][ T10] usb 6-1: USB disconnect, device number 6 [ 67.622947][ T6770] ªªªªªª: renamed from lo (while UP) [ 67.658434][ T6772] program syz.0.201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.731385][ T6778] tmpfs: Unknown parameter 'grpquopa_in_hardZimit' [ 67.735434][ T6777] netlink: 32 bytes leftover after parsing attributes in process `syz.0.203'. [ 67.872221][ T6783] infiniband syz1: set active [ 67.874963][ T6783] infiniband syz1: added syz_tun [ 67.898675][ T6783] RDS/IB: syz1: added [ 67.900340][ T6783] smc: adding ib device syz1 with port count 1 [ 67.902469][ T6783] smc: ib device syz1 port 1 has pnetid [ 68.048324][ T6791] can: request_module (can-proto-0) failed. [ 68.180160][ T5959] Bluetooth: hci2: command tx timeout [ 68.198368][ T6806] program syz.1.211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.200823][ T6807] program syz.1.211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.259802][ T5953] tipc: Node number set to 2886997162 [ 68.395185][ T6822] gfs2: gfs2 mount does not exist [ 68.596712][ T6839] tmpfs: Unknown parameter '18446744073709551615' [ 69.861770][ T5959] Bluetooth: hci0: command 0x0c1a tx timeout [ 69.861828][ T6786] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 70.270045][ T5959] Bluetooth: hci2: command tx timeout [ 70.800877][ T6786] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.807031][ T6786] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.811273][ T6786] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 70.813897][ T6786] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.817547][ T6786] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.822382][ T6786] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 70.825109][ T6786] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.830162][ T6786] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.834559][ T6786] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 70.837188][ T6786] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.841702][ T6786] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 71.044834][ T6881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.233'. [ 71.047707][ T6881] netlink: 'syz.4.233': attribute type 7 has an invalid length. [ 71.050765][ T6881] netlink: 'syz.4.233': attribute type 8 has an invalid length. [ 71.053643][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.233'. [ 71.087122][ T6874] kvm: MONITOR instruction emulated as NOP! [ 71.094596][ T6874] netlink: 'syz.1.230': attribute type 4 has an invalid length. [ 71.108005][ T6874] binder: 6872:6874 ioctl c00c620f 200000000400 returned -22 [ 71.116639][ T6874] pim6reg: entered allmulticast mode [ 71.120361][ T6874] pim6reg: left allmulticast mode [ 71.136210][ T6887] trusted_key: encrypted_key: insufficient parameters specified [ 71.146522][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.149373][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.168503][ T6892] xt_hashlimit: size too large, truncated to 1048576 [ 71.271432][ T6900] dvmrp1: entered allmulticast mode [ 71.298788][ T6903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.239'. [ 71.427163][ T6927] batadv_slave_1: entered promiscuous mode [ 71.429673][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'. [ 71.433231][ T6927] tipc: Resetting bearer [ 71.507475][ T6927] tipc: Disabling bearer [ 71.518456][ T6927] team0 (unregistering): Port device team_slave_0 removed [ 71.525852][ T6927] team0 (unregistering): Port device team_slave_1 removed [ 71.543346][ T6934] netlink: 'syz.4.248': attribute type 1 has an invalid length. [ 71.546034][ T6934] netlink: 224 bytes leftover after parsing attributes in process `syz.4.248'. [ 71.600041][ T5953] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 71.769889][ T5953] usb 7-1: config index 0 descriptor too short (expected 31, got 27) [ 71.773531][ T5953] usb 7-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.777827][ T5953] usb 7-1: config 1 interface 0 has no altsetting 0 [ 71.784067][ T5953] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 71.788196][ T5953] usb 7-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 71.792973][ T5953] usb 7-1: Product: syz [ 71.794839][ T5953] usb 7-1: Manufacturer: syz [ 71.796475][ T5953] usb 7-1: SerialNumber: syz [ 71.837778][ T6951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.251'. [ 71.883661][ T6953] netlink: 52 bytes leftover after parsing attributes in process `syz.4.252'. [ 71.950365][ T5959] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.257931][ T6926] batadv_slave_1: left promiscuous mode [ 72.271747][ T6039] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 72.404825][ T6972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.406015][ T5953] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 72.407775][ T6972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.418083][ T24] usb 7-1: USB disconnect, device number 4 [ 72.428564][ T24] usblp0: removed [ 72.439894][ T6039] usb 9-1: Using ep0 maxpacket: 32 [ 72.442820][ T6039] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 72.447871][ T6039] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 72.451008][ T6039] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 72.453615][ T6039] usb 9-1: Product: syz [ 72.454946][ T6039] usb 9-1: Manufacturer: syz [ 72.456425][ T6039] usb 9-1: SerialNumber: syz [ 72.459889][ T6039] usb 9-1: config 0 descriptor?? [ 72.462749][ T6957] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 72.466224][ T6039] hub 9-1:0.0: bad descriptor, ignoring hub [ 72.468095][ T6039] hub 9-1:0.0: probe with driver hub failed with error -5 [ 72.490103][ T952] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 72.639815][ T952] usb 6-1: Using ep0 maxpacket: 16 [ 72.642694][ T952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 72.647630][ T952] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 72.651082][ T952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.653816][ T952] usb 6-1: Product: syz [ 72.655212][ T952] usb 6-1: Manufacturer: syz [ 72.656650][ T952] usb 6-1: SerialNumber: syz [ 72.659925][ T952] usb 6-1: config 0 descriptor?? [ 72.664044][ T952] hub 6-1:0.0: bad descriptor, ignoring hub [ 72.666408][ T952] hub 6-1:0.0: probe with driver hub failed with error -5 [ 72.672210][ T952] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input6 [ 72.770559][ T5953] usb 9-1: USB disconnect, device number 2 [ 72.831316][ T5959] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.864920][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 72.864929][ T40] audit: type=1400 audit(1752736732.316:392): avc: denied { write } for pid=6966 comm="syz.1.257" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 72.899965][ T5309] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.900066][ T5959] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.976011][ T40] audit: type=1400 audit(1752736732.426:393): avc: denied { unmount } for pid=5963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.071352][ T40] audit: type=1400 audit(1752736732.526:394): avc: denied { write } for pid=6987 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 73.147449][ T40] audit: type=1400 audit(1752736732.596:395): avc: denied { getopt } for pid=6992 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 73.189985][ T6996] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 73.324958][ T40] audit: type=1400 audit(1752736732.776:396): avc: denied { append } for pid=7002 comm="syz.2.266" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 73.325814][ T7003] loop6: detected capacity change from 0 to 63 [ 73.342713][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.345596][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.348840][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.352702][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.355464][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.481666][ T7010] nfs4: Bad value for 'source' [ 73.554705][ T40] audit: type=1400 audit(1752736733.006:397): avc: denied { create } for pid=7013 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.661346][ T40] audit: type=1400 audit(1752736733.116:398): avc: denied { append } for pid=7019 comm="syz.2.271" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 73.671688][ T40] audit: type=1400 audit(1752736733.116:399): avc: denied { read write } for pid=7019 comm="syz.2.271" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 73.682079][ T40] audit: type=1400 audit(1752736733.116:400): avc: denied { open } for pid=7019 comm="syz.2.271" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 73.690961][ T40] audit: type=1400 audit(1752736733.116:401): avc: denied { create } for pid=7019 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.874379][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 74.029938][ T5959] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.121117][ T24] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 74.292012][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.296059][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 74.306464][ T24] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 74.316573][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 74.322447][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 74.327649][ T24] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 74.331525][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.347594][ T7027] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 74.355101][ T24] hub 7-1:1.0: bad descriptor, ignoring hub [ 74.357571][ T24] hub 7-1:1.0: probe with driver hub failed with error -5 [ 74.364434][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 74.366117][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 74.372952][ T24] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 74.375008][ T24] cdc_wdm 7-1:1.0: Unknown control protocol [ 74.464874][ T7056] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 74.478437][ T7056] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 74.585527][ T7061] fuse: Bad value for 'fd' [ 74.645596][ T7065] binder: 7060:7065 ioctl c0306201 200000000640 returned -22 [ 74.909873][ T5959] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.980761][ T5959] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.980793][ T5309] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.117813][ T7027] usb 7-1: reset low-speed USB device number 5 using dummy_hcd [ 75.126886][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 75.132064][ T7084] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 75.143498][ T7084] netlink: 120 bytes leftover after parsing attributes in process `syz.0.290'. [ 75.399874][ T7027] usb 7-1: device descriptor read/64, error -71 [ 75.594186][ T7107] unsupported nlmsg_type 40 [ 75.623888][ T7109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.630888][ T7109] x_tables: ip_tables: MASQUERADE target: only valid in nat table, not macvlan0 [ 75.656663][ T7114] netlink: 'syz.4.298': attribute type 10 has an invalid length. [ 75.659113][ T7114] dummy0: entered promiscuous mode [ 75.663623][ T7114] bridge0: port 3(dummy0) entered blocking state [ 75.666015][ T7114] bridge0: port 3(dummy0) entered disabled state [ 75.668107][ T7114] dummy0: entered allmulticast mode [ 75.672098][ T7114] bridge0: port 3(dummy0) entered blocking state [ 75.674485][ T7114] bridge0: port 3(dummy0) entered forwarding state [ 75.720425][ T7123] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !å¯fIZEô¿¹ô,ô =©ÜÝ$)²% Ä‚L [ 75.782819][ T7027] usb 7-1: reset low-speed USB device number 5 using dummy_hcd [ 75.902477][ T7139] sp0: Synchronizing with TNC [ 75.924491][ T7142] netlink: 'syz.4.306': attribute type 1 has an invalid length. [ 75.937996][ T7142] tipc: Started in network mode [ 75.940449][ T7142] tipc: Node identity 46b7838c9334, cluster identity 4711 [ 75.943524][ T7142] tipc: Enabled bearer , priority 0 [ 75.949430][ T7141] tipc: Disabling bearer [ 76.059883][ T7027] usb 7-1: device descriptor read/64, error -71 [ 76.148581][ T7169] sd 0:0:0:0: PR command failed: 1026 [ 76.152259][ T7169] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 76.154456][ T7169] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 76.232756][ T7181] netlink: 'syz.4.312': attribute type 2 has an invalid length. [ 76.235588][ T7181] __nla_validate_parse: 5 callbacks suppressed [ 76.235596][ T7181] netlink: 51 bytes leftover after parsing attributes in process `syz.4.312'. [ 76.246758][ T10] usb 6-1: USB disconnect, device number 7 [ 76.270485][ T7182] block device autoloading is deprecated and will be removed. [ 76.352200][ T7187] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7187 comm=syz.0.317 [ 76.392421][ T7187] netlink: 'syz.0.317': attribute type 4 has an invalid length. [ 76.450504][ T7027] usb 7-1: reset low-speed USB device number 5 using dummy_hcd [ 76.480699][ T7027] usb 7-1: device descriptor read/8, error -71 [ 76.765111][ T7213] input: syz1 as /devices/virtual/input/input7 [ 76.880503][ T7027] usb 7-1: reset low-speed USB device number 5 using dummy_hcd [ 76.980936][ T5309] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.986067][ T7220] trusted_key: syz.1.324 sent an empty control message without MSG_MORE. [ 77.032818][ T5309] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 77.059909][ T5309] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.061082][ T5959] Bluetooth: hci3: command 0x0c1a tx timeout [ 77.081950][ T7235] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=7235 comm=syz.4.329 [ 77.114694][ T5959] Bluetooth: hci1: Malformed Event: 0x2f [ 77.166950][ T7244] sp0: Synchronizing with TNC [ 77.519293][ T7267] kvm: kvm [7261]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 77.526435][ T7267] kvm: kvm [7261]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 77.547420][ T7267] kvm: kvm [7261]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 77.570755][ T7267] kvm: kvm [7261]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 77.574538][ T7267] kvm: kvm [7261]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 77.592082][ T7267] kvm_intel: kvm [7261]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 78.008767][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 78.008821][ T40] audit: type=1400 audit(1752736737.456:436): avc: denied { mount } for pid=7319 comm="syz.1.341" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 78.052002][ T40] audit: type=1400 audit(1752736737.506:437): avc: denied { open } for pid=7319 comm="syz.1.341" path="/dev/ptyq6" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 78.059645][ T40] audit: type=1400 audit(1752736737.506:438): avc: denied { ioctl } for pid=7319 comm="syz.1.341" path="/dev/ptyq6" dev="devtmpfs" ino=133 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 78.074849][ T40] audit: type=1400 audit(1752736737.526:439): avc: denied { remount } for pid=7319 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 78.101711][ T40] audit: type=1400 audit(1752736737.556:440): avc: denied { unmount } for pid=5963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 78.138415][ T7329] vivid-001: disconnect [ 78.143621][ T7328] vivid-001: reconnect [ 78.197916][ T7341] netlink: 9 bytes leftover after parsing attributes in process `syz.0.346'. [ 78.203042][ T7341] 0·: renamed from hsr0 (while UP) [ 78.206530][ T7341] 0·: entered allmulticast mode [ 78.208086][ T7341] hsr_slave_0: entered allmulticast mode [ 78.210703][ T7341] hsr_slave_1: entered allmulticast mode [ 78.212086][ T40] audit: type=1400 audit(1752736737.666:441): avc: denied { associate } for pid=7330 comm="syz.4.344" name="cpu.stat" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.212723][ T7341] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 78.222748][ T40] audit: type=1400 audit(1752736737.676:442): avc: denied { append } for pid=7330 comm="syz.4.344" path="/57/file0/cpu.stat" dev="9p" ino=36047879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.236793][ T40] audit: type=1400 audit(1752736737.686:443): avc: denied { map } for pid=7330 comm="syz.4.344" path="/57/file0/cpu.stat" dev="9p" ino=36047879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.245247][ T40] audit: type=1400 audit(1752736737.686:444): avc: denied { execute } for pid=7330 comm="syz.4.344" path="/57/file0/cpu.stat" dev="9p" ino=36047879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.298626][ T7355] 9pnet_virtio: no channels available for device syz [ 78.331783][ T40] audit: type=1400 audit(1752736737.786:445): avc: denied { setopt } for pid=7350 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 78.406782][ T7364] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 78.686280][ T7393] overlayfs: missing 'lowerdir' [ 78.690890][ T7393] overlayfs: missing 'lowerdir' [ 78.702582][ T7393] overlayfs: missing 'lowerdir' [ 78.705660][ T7393] overlayfs: missing 'lowerdir' [ 78.707765][ T7393] overlayfs: missing 'lowerdir' [ 78.727975][ T7393] overlayfs: missing 'lowerdir' [ 78.731162][ T7393] overlayfs: missing 'lowerdir' [ 78.733252][ T7393] overlayfs: missing 'lowerdir' [ 78.736610][ T7393] overlayfs: missing 'lowerdir' [ 78.738580][ T7393] overlayfs: missing 'lowerdir' [ 78.740821][ T7393] overlayfs: missing 'lowerdir' [ 78.743083][ T7393] overlayfs: missing 'lowerdir' [ 78.744975][ T7393] overlayfs: missing 'lowerdir' [ 78.746877][ T7393] overlayfs: missing 'lowerdir' [ 78.748672][ T7393] overlayfs: missing 'lowerdir' [ 78.754125][ T7393] overlayfs: missing 'lowerdir' [ 78.756911][ T7393] overlayfs: missing 'lowerdir' [ 78.759301][ T7393] overlayfs: missing 'lowerdir' [ 78.761559][ T7393] overlayfs: missing 'lowerdir' [ 78.763614][ T7393] overlayfs: missing 'lowerdir' [ 78.765603][ T7393] overlayfs: missing 'lowerdir' [ 78.767702][ T7393] overlayfs: missing 'lowerdir' [ 78.771558][ T7393] overlayfs: missing 'lowerdir' [ 78.774892][ T7393] overlayfs: missing 'lowerdir' [ 78.777960][ T7393] overlayfs: missing 'lowerdir' [ 78.780741][ T7393] overlayfs: missing 'lowerdir' [ 78.783323][ T7393] overlayfs: missing 'lowerdir' [ 78.785948][ T7393] overlayfs: missing 'lowerdir' [ 78.788501][ T7393] overlayfs: missing 'lowerdir' [ 78.791512][ T7393] overlayfs: missing 'lowerdir' [ 78.794733][ T7393] overlayfs: missing 'lowerdir' [ 78.796756][ T7393] overlayfs: missing 'lowerdir' [ 78.798708][ T7393] overlayfs: missing 'lowerdir' [ 78.801029][ T7393] overlayfs: missing 'lowerdir' [ 78.803093][ T7393] overlayfs: missing 'lowerdir' [ 78.805113][ T7393] overlayfs: missing 'lowerdir' [ 78.807709][ T7393] overlayfs: missing 'lowerdir' [ 78.809595][ T7393] overlayfs: missing 'lowerdir' [ 78.813076][ T7393] overlayfs: missing 'lowerdir' [ 78.815603][ T7393] overlayfs: missing 'lowerdir' [ 78.817502][ T7393] overlayfs: missing 'lowerdir' [ 78.819401][ T7393] overlayfs: missing 'lowerdir' [ 78.821498][ T7393] overlayfs: missing 'lowerdir' [ 78.823851][ T7393] overlayfs: missing 'lowerdir' [ 78.825871][ T7393] overlayfs: missing 'lowerdir' [ 78.827681][ T7393] overlayfs: missing 'lowerdir' [ 78.829518][ T7393] overlayfs: missing 'lowerdir' [ 78.833035][ T7393] overlayfs: missing 'lowerdir' [ 78.835300][ T7393] overlayfs: missing 'lowerdir' [ 78.837415][ T7393] overlayfs: missing 'lowerdir' [ 78.839229][ T7393] overlayfs: missing 'lowerdir' [ 78.841650][ T7393] overlayfs: missing 'lowerdir' [ 78.844877][ T7393] overlayfs: missing 'lowerdir' [ 78.847180][ T7393] overlayfs: missing 'lowerdir' [ 78.848951][ T7393] overlayfs: missing 'lowerdir' [ 78.851252][ T7393] overlayfs: missing 'lowerdir' [ 78.853856][ T7393] overlayfs: missing 'lowerdir' [ 78.856461][ T7393] overlayfs: missing 'lowerdir' [ 78.858953][ T7393] overlayfs: missing 'lowerdir' [ 78.862725][ T7393] overlayfs: missing 'lowerdir' [ 78.865411][ T7393] overlayfs: missing 'lowerdir' [ 78.868006][ T7393] overlayfs: missing 'lowerdir' [ 78.871448][ T7393] overlayfs: missing 'lowerdir' [ 78.973564][ T7406] syzkaller1: entered promiscuous mode [ 78.975365][ T7406] syzkaller1: entered allmulticast mode [ 78.992431][ T7406] kvm: user requested TSC rate below hardware speed [ 79.012345][ T7406] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 79.015945][ T7406] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 79.268723][ T7415] netlink: 40 bytes leftover after parsing attributes in process `syz.1.362'. [ 79.281365][ T7416] 8021q: adding VLAN 0 to HW filter on device bond3 [ 79.293263][ T7409] /dev/sr0: Can't open blockdev [ 79.325615][ T7421] Invalid ELF header type: 0 != 1 [ 79.420097][ T7422] tmpfs: Bad value for 'mpol' [ 79.589869][ T6004] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 79.719862][ T6004] usb 6-1: device descriptor read/64, error -71 [ 79.763013][ T7451] netlink: 88 bytes leftover after parsing attributes in process `syz.4.369'. [ 79.766764][ T7451] netlink: 48 bytes leftover after parsing attributes in process `syz.4.369'. [ 79.806868][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'. [ 79.822420][ T7465] netlink: 'syz.4.372': attribute type 1 has an invalid length. [ 79.824904][ T7465] netlink: 'syz.4.372': attribute type 2 has an invalid length. [ 79.828479][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.372'. [ 79.969904][ T6004] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 80.057810][ T7480] afs: Unknown parameter 'dyninderfs/binder0' [ 80.060133][ T7480] binder: BINDER_SET_CONTEXT_MGR already set [ 80.062201][ T7480] binder: 7479:7480 ioctl 4018620d 200000000240 returned -16 [ 80.100508][ T6004] usb 6-1: device descriptor read/64, error -71 [ 80.210030][ T6004] usb usb6-port1: attempt power cycle [ 80.396539][ T7498] batadv_slave_1: entered promiscuous mode [ 80.405794][ T7497] batadv_slave_1: left promiscuous mode [ 80.439927][ T5997] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 80.470855][ T7502] netlink: 68 bytes leftover after parsing attributes in process `syz.0.385'. [ 80.559923][ T6004] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 80.584177][ T6004] usb 6-1: device descriptor read/8, error -71 [ 80.599900][ T5997] usb 9-1: Using ep0 maxpacket: 8 [ 80.603481][ T5997] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 80.605832][ T5997] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 80.609582][ T5997] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 80.613781][ T5997] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.617485][ T5997] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 80.621081][ T5997] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 80.624607][ T5997] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 80.629152][ T5997] usb 9-1: config 168 interface 0 has no altsetting 0 [ 80.639874][ T5997] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 80.642372][ T5997] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 80.645894][ T5997] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 80.650028][ T5997] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.653683][ T5997] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 80.657085][ T5997] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 80.660809][ T5997] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 80.664959][ T5997] usb 9-1: config 168 interface 0 has no altsetting 0 [ 80.668872][ T5997] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 80.671756][ T5997] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 80.675266][ T5997] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 80.678939][ T5997] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.682666][ T5997] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 80.686421][ T5997] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 80.691029][ T5997] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 80.695543][ T5997] usb 9-1: config 168 interface 0 has no altsetting 0 [ 80.702608][ T5997] usb 9-1: string descriptor 0 read error: -22 [ 80.704660][ T5997] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 80.707501][ T5997] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.830487][ T6004] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 80.861257][ T6004] usb 6-1: device descriptor read/8, error -71 [ 80.989849][ T6004] usb usb6-port1: unable to enumerate USB device [ 81.266190][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'. [ 81.272982][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.276744][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.394295][ T60] cfg80211: failed to load regulatory.db [ 81.930552][ T7532] netlink: 76 bytes leftover after parsing attributes in process `syz.0.391'. [ 81.940353][ T7027] usb 7-1: device descriptor read/8, error -110 [ 82.050530][ T7027] cdc_wdm 7-1:1.0: Error autopm - -16 [ 82.050662][ T24] usb 7-1: USB disconnect, device number 5 [ 82.060632][ T5997] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 82.060713][ T7494] cdc_wdm 7-1:1.0: Error autopm - -16 [ 82.112045][ T5997] usb 9-1: USB disconnect, device number 3 [ 82.161586][ T7494] tipc: New replicast peer: 255.255.255.255 [ 82.164724][ T7494] tipc: Enabled bearer , priority 10 [ 82.188152][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.382'. [ 82.192097][ T7494] tipc: Disabling bearer [ 82.194380][ T7541] ======================================================= [ 82.194380][ T7541] WARNING: The mand mount option has been deprecated and [ 82.194380][ T7541] and is ignored by this kernel. Remove the mand [ 82.194380][ T7541] option from the mount to silence this warning. [ 82.194380][ T7541] ======================================================= [ 82.210831][ T7541] devtmpfs: Cannot change global quota limit on remount [ 82.324669][ T7547] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.332916][ T7547] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.412989][ T7540] delete_channel: no stack [ 82.600140][ T7566] netlink: 'syz.4.397': attribute type 7 has an invalid length. [ 82.698150][ T7572] netlink: 'syz.1.400': attribute type 1 has an invalid length. [ 82.710327][ T7572] 8021q: adding VLAN 0 to HW filter on device bond4 [ 82.780032][ T7574] gretap1: entered promiscuous mode [ 82.786136][ T7574] bond4: (slave gretap1): making interface the new active one [ 82.790784][ T7574] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 82.802300][ T7572] macvlan2: entered promiscuous mode [ 82.805127][ T7572] macvlan2: entered allmulticast mode [ 82.807301][ T7572] bond4: entered promiscuous mode [ 82.809297][ T7572] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 82.811916][ T7572] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 82.817226][ T7572] bond4: left promiscuous mode [ 83.013975][ T7576] fuse: Invalid rootmode [ 83.017208][ T7577] fuse: Invalid rootmode [ 83.172428][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 83.172442][ T40] audit: type=1400 audit(1752736742.626:475): avc: denied { read } for pid=7592 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 83.173900][ T7593] netlink: 'syz.0.405': attribute type 3 has an invalid length. [ 83.184788][ T7593] netlink: 'syz.0.405': attribute type 1 has an invalid length. [ 83.187258][ T7593] netlink: 192 bytes leftover after parsing attributes in process `syz.0.405'. [ 83.191557][ T7593] NCSI netlink: No device for ifindex 0 [ 83.390535][ T40] audit: type=1400 audit(1752736742.836:476): avc: denied { compute_member } for pid=7603 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 83.431854][ T7608] ip6t_REJECT: ECHOREPLY is not supported [ 83.644070][ T40] audit: type=1400 audit(1752736743.096:477): avc: denied { write } for pid=7629 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 83.724243][ T7647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.420'. [ 83.727557][ T7647] netlink: 'syz.4.420': attribute type 7 has an invalid length. [ 83.732963][ T7647] netlink: 'syz.4.420': attribute type 8 has an invalid length. [ 83.736431][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'. [ 83.737175][ T7642] netlink: 'syz.0.418': attribute type 39 has an invalid length. [ 83.820160][ T7659] Context (ID=0x1) not attached to queue pair (handle=0x1:0x2) [ 83.824155][ T40] audit: type=1400 audit(1752736743.276:478): avc: denied { append } for pid=7658 comm="syz.4.424" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.831540][ T7659] comedi comedi3: comedi_config --init_data is deprecated [ 83.856650][ T5959] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 83.872602][ T7657] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.968210][ T5959] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 84.042332][ T7687] syz.0.429: attempt to access beyond end of device [ 84.042332][ T7687] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 84.047827][ T7687] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32 [ 84.114947][ T40] audit: type=1400 audit(1752736743.566:479): avc: denied { read } for pid=7692 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.172108][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.433'. [ 84.172169][ T7702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.180815][ T40] audit: type=1400 audit(1752736743.626:480): avc: denied { shutdown } for pid=7692 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.195626][ T7691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=7691 comm=syz.4.433 [ 84.199453][ T7691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=7691 comm=syz.4.433 [ 84.207960][ T7691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=7691 comm=syz.4.433 [ 84.244895][ T7705] : entered promiscuous mode [ 84.270872][ T5953] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 84.288580][ T7707] overlayfs: missing 'workdir' [ 84.296063][ T40] audit: type=1400 audit(1752736743.746:481): avc: denied { setopt } for pid=7706 comm="syz.4.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.419925][ T5953] usb 7-1: device descriptor read/64, error -71 [ 84.429100][ T7722] overlayfs: failed to clone lowerpath [ 84.507850][ T7730] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 84.574750][ T7732] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 84.660954][ T5953] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 84.745623][ T40] audit: type=1400 audit(1752736744.196:482): avc: denied { execute } for pid=7748 comm="syz.4.449" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.753607][ T7750] netlink: 100 bytes leftover after parsing attributes in process `syz.0.448'. [ 84.800608][ T5953] usb 7-1: device descriptor read/64, error -71 [ 84.805699][ T7754] trusted_key: encrypted_key: insufficient parameters specified [ 84.823595][ T7754] input: syz1 as /devices/virtual/input/input8 [ 84.848960][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'. [ 84.852987][ T7755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.451'. [ 84.855777][ T7755] netlink: 'syz.0.451': attribute type 18 has an invalid length. [ 84.894665][ T7762] bond0: entered promiscuous mode [ 84.896351][ T7762] bond_slave_0: entered promiscuous mode [ 84.898269][ T7762] bond_slave_1: entered promiscuous mode [ 84.903062][ T7762] batadv0: entered promiscuous mode [ 84.905668][ T7762] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 84.908835][ T7762] bond0: left promiscuous mode [ 84.910072][ T5953] usb usb7-port1: attempt power cycle [ 84.911147][ T7762] bond_slave_0: left promiscuous mode [ 84.914047][ T7762] bond_slave_1: left promiscuous mode [ 84.916298][ T7762] batadv0: left promiscuous mode [ 84.946262][ T7763] netlink: 'syz.0.452': attribute type 1 has an invalid length. [ 85.038462][ T7765] xt_hashlimit: size too large, truncated to 1048576 [ 85.092529][ T40] audit: type=1400 audit(1752736744.546:483): avc: denied { watch_sb watch_reads } for pid=7764 comm="syz.0.453" path="/131/file0" dev="tmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.270134][ T5953] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 85.290598][ T5953] usb 7-1: device descriptor read/8, error -71 [ 85.529833][ T5953] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 85.550381][ T5953] usb 7-1: device descriptor read/8, error -71 [ 85.644068][ T7779] nfs4: Bad value for 'source' [ 85.648344][ T40] audit: type=1400 audit(1752736745.096:484): avc: denied { append } for pid=7778 comm="syz.4.457" name="pfkey" dev="proc" ino=4026533888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 85.662735][ T5953] usb usb7-port1: unable to enumerate USB device [ 85.703766][ T7781] pimreg: entered allmulticast mode [ 85.707454][ T7781] pimreg: left allmulticast mode [ 86.099978][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 86.285776][ T7802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64512 sclass=netlink_route_socket pid=7802 comm=syz.1.465 [ 86.477045][ T7815] netlink: 'syz.0.469': attribute type 9 has an invalid length. [ 86.637137][ T7826] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 86.642447][ T7826] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 86.647599][ T7826] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 86.653484][ T7826] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 86.658943][ T7826] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 86.667884][ T7826] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 86.673142][ T7826] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 86.678176][ T7826] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 86.683289][ T7826] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 86.688448][ T7826] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 86.750430][ T7830] __nla_validate_parse: 1 callbacks suppressed [ 86.750446][ T7830] netlink: 172 bytes leftover after parsing attributes in process `syz.1.472'. [ 86.812935][ T7837] openvswitch: netlink: IP tunnel dst address not specified [ 86.818372][ T7837] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 86.875417][ T7846] netlink: 36 bytes leftover after parsing attributes in process `syz.0.478'. [ 87.028939][ T7860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.481'. [ 87.033841][ T7860] ------------[ cut here ]------------ [ 87.036182][ T7860] WARNING: CPU: 1 PID: 7860 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 87.040917][ T7860] Modules linked in: [ 87.045105][ T7860] CPU: 1 UID: 0 PID: 7860 Comm: syz.0.481 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 87.050877][ T7860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.055307][ T7860] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 87.058089][ T7860] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d da fb 7b 0e 00 75 0b c6 05 d1 fb 7b 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 87.066551][ T7860] RSP: 0018:ffffc9000352f908 EFLAGS: 00010246 [ 87.069098][ T7860] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 87.072840][ T7860] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000000000040dc0 [ 87.076129][ T7860] RBP: 0000000fffffe010 R08: 0000000000000007 R09: 0000000000000000 [ 87.079391][ T7860] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000018 [ 87.083167][ T7860] R13: 1ffff920006a5f36 R14: 0000000fffffe010 R15: 0000000000000018 [ 87.086462][ T7860] FS: 00007f2a1f8bf6c0(0000) GS:ffff8880d6813000(0000) knlGS:0000000000000000 [ 87.090392][ T7860] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.093230][ T7860] CR2: 00007f2a1f87cd58 CR3: 000000005db93000 CR4: 0000000000352ef0 [ 87.096588][ T7860] Call Trace: [ 87.098014][ T7860] [ 87.099279][ T7860] ? __pfx_stack_trace_save+0x10/0x10 [ 87.101594][ T7860] ? stack_depot_save_flags+0x28/0xa40 [ 87.103809][ T7860] ? __lock_acquire+0xb8a/0x1c90 [ 87.105767][ T7860] ? __lock_acquire+0xb8a/0x1c90 [ 87.107740][ T7860] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 87.110372][ T7860] ? __mutex_trylock_common+0xe9/0x250 [ 87.112615][ T7860] ? __lock_acquire+0xb8a/0x1c90 [ 87.114653][ T7860] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 87.117016][ T7860] __alloc_pages_noprof+0xb/0x1b0 [ 87.119135][ T7860] ___kmalloc_large_node+0x84/0x1e0 [ 87.121477][ T7860] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 87.123782][ T7860] __kmalloc_large_node_noprof+0x1c/0x70 [ 87.126063][ T7860] __kmalloc_noprof.cold+0xc/0x61 [ 87.128114][ T7860] comedi_unlocked_ioctl+0x1757/0x2e90 [ 87.130493][ T7860] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 87.132969][ T7860] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 87.135343][ T7860] ? do_vfs_ioctl+0x523/0x1a60 [ 87.137295][ T7860] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 87.139614][ T7860] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 87.143013][ T7860] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 87.145716][ T7860] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 87.148388][ T7860] ? hook_file_ioctl_common+0x145/0x410 [ 87.150758][ T7860] ? selinux_file_ioctl+0x180/0x270 [ 87.152967][ T7860] ? selinux_file_ioctl+0xb4/0x270 [ 87.155137][ T7860] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 87.157585][ T7860] __x64_sys_ioctl+0x18e/0x210 [ 87.159602][ T7860] do_syscall_64+0xcd/0x4c0 [ 87.161670][ T7860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.164128][ T7860] RIP: 0033:0x7f2a1e98e929 [ 87.166050][ T7860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.174022][ T7860] RSP: 002b:00007f2a1f8bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.177480][ T7860] RAX: ffffffffffffffda RBX: 00007f2a1ebb5fa0 RCX: 00007f2a1e98e929 [ 87.180824][ T7860] RDX: 0000200000000000 RSI: 000000008010640b RDI: 0000000000000005 [ 87.184100][ T7860] RBP: 00007f2a1ea10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 87.187372][ T7860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.191055][ T7860] R13: 0000000000000000 R14: 00007f2a1ebb5fa0 R15: 00007fff3bb64178 [ 87.194471][ T7860] [ 87.195811][ T7860] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.198825][ T7860] CPU: 1 UID: 0 PID: 7860 Comm: syz.0.481 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 87.203575][ T7860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.207916][ T7860] Call Trace: [ 87.209103][ T7860] [ 87.210045][ T7860] dump_stack_lvl+0x3d/0x1f0 [ 87.211551][ T7860] panic+0x71c/0x800 [ 87.212788][ T7860] ? __pfx_panic+0x10/0x10 [ 87.214187][ T7860] ? show_trace_log_lvl+0x29b/0x3e0 [ 87.215774][ T7860] ? check_panic_on_warn+0x1f/0xb0 [ 87.217336][ T7860] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 87.219152][ T7860] check_panic_on_warn+0xab/0xb0 [ 87.220680][ T7860] __warn+0xf6/0x3c0 [ 87.221918][ T7860] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 87.223810][ T7860] report_bug+0x3c3/0x580 [ 87.225182][ T7860] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 87.227101][ T7860] handle_bug+0x184/0x210 [ 87.228483][ T7860] exc_invalid_op+0x17/0x50 [ 87.229914][ T7860] asm_exc_invalid_op+0x1a/0x20 [ 87.231448][ T7860] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 87.233539][ T7860] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d da fb 7b 0e 00 75 0b c6 05 d1 fb 7b 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 87.239411][ T7860] RSP: 0018:ffffc9000352f908 EFLAGS: 00010246 [ 87.241296][ T7860] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 87.243729][ T7860] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000000000040dc0 [ 87.246171][ T7860] RBP: 0000000fffffe010 R08: 0000000000000007 R09: 0000000000000000 [ 87.248617][ T7860] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000018 [ 87.251054][ T7860] R13: 1ffff920006a5f36 R14: 0000000fffffe010 R15: 0000000000000018 [ 87.253516][ T7860] ? __pfx_stack_trace_save+0x10/0x10 [ 87.255185][ T7860] ? stack_depot_save_flags+0x28/0xa40 [ 87.256887][ T7860] ? __lock_acquire+0xb8a/0x1c90 [ 87.258431][ T7860] ? __lock_acquire+0xb8a/0x1c90 [ 87.259981][ T7860] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 87.261954][ T7860] ? __mutex_trylock_common+0xe9/0x250 [ 87.263641][ T7860] ? __lock_acquire+0xb8a/0x1c90 [ 87.265174][ T7860] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 87.266915][ T7860] __alloc_pages_noprof+0xb/0x1b0 [ 87.268504][ T7860] ___kmalloc_large_node+0x84/0x1e0 [ 87.270127][ T7860] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 87.271886][ T7860] __kmalloc_large_node_noprof+0x1c/0x70 [ 87.273689][ T7860] __kmalloc_noprof.cold+0xc/0x61 [ 87.275272][ T7860] comedi_unlocked_ioctl+0x1757/0x2e90 [ 87.276979][ T7860] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 87.278814][ T7860] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 87.280631][ T7860] ? do_vfs_ioctl+0x523/0x1a60 [ 87.282127][ T7860] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 87.283704][ T7860] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 87.285720][ T7860] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 87.287736][ T7860] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 87.289857][ T7860] ? hook_file_ioctl_common+0x145/0x410 [ 87.291610][ T7860] ? selinux_file_ioctl+0x180/0x270 [ 87.293251][ T7860] ? selinux_file_ioctl+0xb4/0x270 [ 87.294867][ T7860] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 87.296692][ T7860] __x64_sys_ioctl+0x18e/0x210 [ 87.298202][ T7860] do_syscall_64+0xcd/0x4c0 [ 87.299638][ T7860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.301522][ T7860] RIP: 0033:0x7f2a1e98e929 [ 87.302924][ T7860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.308838][ T7860] RSP: 002b:00007f2a1f8bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.311441][ T7860] RAX: ffffffffffffffda RBX: 00007f2a1ebb5fa0 RCX: 00007f2a1e98e929 [ 87.313898][ T7860] RDX: 0000200000000000 RSI: 000000008010640b RDI: 0000000000000005 [ 87.316352][ T7860] RBP: 00007f2a1ea10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 87.318790][ T7860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.321234][ T7860] R13: 0000000000000000 R14: 00007f2a1ebb5fa0 R15: 00007fff3bb64178 [ 87.323696][ T7860] [ 87.325485][ T7860] Kernel Offset: disabled [ 87.326866][ T7860] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:19:06 Registers: info registers vcpu 0 CPU#0 RAX=00000000000e6255 RBX=0000000000000000 RCX=ffffffff8b885c99 RDX=0000000000000000 RSI=ffffffff8de32e3f RDI=ffffffff8c158f60 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a98750 R15=0000000000000000 RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6713000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f65409f5f98 CR3=0000000051e83000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf5fc6d10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6542c11c7a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6542c11c87 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6542c11c81 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6542c11c95 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6542c11d1b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6542c11df9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff93e1cce8 RBX=00000000000211c1 RCX=00000000ff65ebb2 RDX=ad4f904bafa113a6 RSI=0000000027af9dd9 RDI=ffff88802c645410 RBP=ffff88802c644880 RSP=ffffc900006a0580 R8 =ad4f904bafa113a6 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=ffff88802c645370 R13=ffff88802c645410 R14=000000007773d985 R15=0000000000000003 RIP=ffffffff8198706a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2a1f8bf6c0 ffffffff 00c00000 GS =0000 ffff8880d6813000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2a1f87cd58 CR3=000000005db93000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a1ea11c7a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a1ea11c87 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a1ea11c81 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a1ea11c95 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a1ea11d1b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a1ea11df9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a1eb86488 00007f2a1eb86480 00007f2a1eb86478 00007f2a1eb86450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a1f6ed100 00007f2a1eb86440 00007f2a1eb86458 00007f2a1eb864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a1eb86498 00007f2a1eb86490 00007f2a1eb86488 00007f2a1eb86480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff88801e29c880 RBX=ffff88801dad0000 RCX=ffffffff815cdbf5 RDX=ffff888029334880 RSI=ffffffff815cdc33 RDI=ffff88801e29c880 RBP=ffffc90005fd7bc0 RSP=ffffc90005fd7ba0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffff88801e29c880 R14=ffff888029334880 R15=ffff88806a63a2c0 RIP=ffffffff8189eb3f RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6913000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2a1f87bf98 CR3=000000004f587000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe08a50d90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1fc011c7a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1fc011c87 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1fc011c81 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1fc011c95 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1fc011d1b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1fc011df9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000080 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000080 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000046 RBX=ffff888024ddafa8 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8de0d975 RDI=ffffffff8c158f60 RBP=ffffffff8e5c4e00 RSP=ffffc9000336f410 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff888024dda440 R13=0000000000000001 R14=00000000ffffffff R15=0000000000000003 RIP=ffffffff8b885168 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f65439296c0 ffffffff 00c00000 GS =0000 ffff8880d6a13000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f65409d5d58 CR3=000000003969a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000001041000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e65696c635f73 666e2f74656e2f73 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fd1fcc19e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8361f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff00ff000000ff 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737332 011c1e161e5e4344 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373267343411f73 431e161e035c1810 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fd1fcae480 000055fd1fcc19e0 000055fd1fcc0690 000055fd1fcad7d0 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 061b74d90bd16945 000055f8401a4361 0000000000000021 0000000000000032 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000009a11 0000000000000000 30326c6c696b6600 306d656d702f6b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000