last executing test programs: 35.070967217s ago: executing program 0 (id=484): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r1 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000140)={0x1, "c5c2a91e002b1b80000000003d5eff0010ffffffe70000ffe700", 0x1, 0x7, 0x4, 0x200, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r5 = io_uring_setup(0x5ea4, &(0x7f0000019080)={0x0, 0xdf4, 0x8000, 0x0, 0x29a, 0x0, r4}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) writev(r4, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) setsockopt$ax25_int(r7, 0x101, 0xa, &(0x7f0000000080)=0x23fd, 0x4) sync_file_range(r6, 0x0, 0x0, 0x3) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r9, 0x1, 0x70bd2b, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc03064ca, &(0x7f0000000380)={&(0x7f0000000000)=[r10, r10], &(0x7f0000000340)=[0x100000020], 0x400000000009608, 0x2, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r11, 0xc0145401, &(0x7f0000000000)={{0x3, 0x2, 0xfffffffd, 0x2}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) 34.130648972s ago: executing program 0 (id=490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001a"]) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x148}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 34.068083937s ago: executing program 0 (id=492): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300031e0000002cbd7000fddbdf2502000900080000001c00000000000000030006006c00000002004e22e0000002000000000000000002000100000000000000060c020000e0030005002b00000002004e20ffffffff0000000000000000120008000804"], 0xf0}, 0x1, 0x7}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=ANY=[@ANYBLOB="2c0000003d00070128bd700000004000037c0000180037801300030071a83c14d6bbe919632e076d342900"], 0x2c}}, 0x400c0) syz_emit_ethernet(0x1b, &(0x7f0000000000)={@multicast, @broadcast, @val={@void}, {@llc_tr={0x11, {@llc={0x2, 0x0, "b3", "9edd1930bed4"}}}}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 33.911856288s ago: executing program 0 (id=495): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22300, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4004}], 0x1) r4 = syz_socket_connect_nvme_tcp() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0xfff8}]}]}]}, 0x74}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x4ffe6, 0x0) write(r6, &(0x7f00000000c0)="08b0c33c94f6e23c084c183c3cb6cdc46232d44d51446e745714af7003c5d7c97eb9b0ce2a783f0bfef01182f1a34befcd0b743d3f3be6b9252a342b03eba4b7c71d67167876169dc1759a8c1120237008247db2ef3f384ae19e6c773df2e16778", 0x61) openat$cgroup_ro(r6, &(0x7f0000000080)='memory.events.local\x00', 0x0, 0x0) close_range(r4, r2, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 32.98131747s ago: executing program 0 (id=510): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x88fb, @gre={{0x5, 0x4, 0x2, 0x1, 0x58, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x81, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x6, 0x2, 0x1, 0x1, 0x6, 0x4}, 0x1, {0x500c}}}, {0x8, 0x22eb, 0x4, {{0xe, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x4, 0xf9}, 0x2, {0x1, 0x9, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f0000000000)='./file1/file0\x00') r4 = open$dir(&(0x7f0000000240)='./file1\x00', 0x688000, 0x49) execveat(r4, &(0x7f0000000280)='./file0\x00', &(0x7f00000005c0)={[&(0x7f00000002c0)='(\x00', &(0x7f0000000300)=':((\x00', &(0x7f0000000340)='\x00', &(0x7f00000003c0)='+,\x00', &(0x7f0000000440)='autofs\x00', &(0x7f0000000480)='autofs\x00', &(0x7f00000004c0)='\\\'^(^&#\\$-.\\\x00', &(0x7f0000000500)='+g{]\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='autofs\x00']}, &(0x7f0000000700)={[&(0x7f0000000640)='&\x00', &(0x7f0000000680)='\'*\x00', &(0x7f00000006c0)='\x00']}, 0x1000) setpgid(0x0, 0x0) setpgid(0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) 32.931044844s ago: executing program 0 (id=511): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xa, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x33}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x48010}, 0x40) (async) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x7fffffffffffffff, 0x4}}, 0x30) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x3, 0x10000) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r0, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044091}, 0x60085) chmod(&(0x7f0000000440)='./file0\x00', 0x136) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000480)) (async, rerun: 64) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000500)) (async, rerun: 64) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000600), 0x80, 0x0) write$vga_arbiter(r3, &(0x7f0000000640), 0xf) (async) r4 = openat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x40, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f00000006c0), 0x596bc06841436a29, 0x0) writev(r5, &(0x7f0000000800)=[{&(0x7f0000000700)="f7d26adfc08d06080d5f4cd5d8a05c9786fd7fae344f2a61834f9978f9cc7ca9cc22ed2f11bc215e549a848c20b2cd63d15dd81337e79d1d81a7d6dbf010c40b84510c39f66a9ba981d93adadf5f00c962a16f6f629c2b1fb4327c6e67acda678e7fa8f8cf082af6f623d354ca2056b41ab7d56dd69705133bd6d1d4175cb439f54235f0f402891f2d8d401a1fef5ca17401b7f42b9599a81f168129b47696132b3a02a0c6ee145706a342776267f44e4112731120bb24772174e3188f2b3541488cc4671b5fe4d6ef006b89a4415c8102af73af2bbda7149d2d0408b6244c022d38abf46f7d9f6052dcc90d6f4c", 0xee}], 0x1) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) read$eventfd(r2, &(0x7f0000000840), 0x8) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r6, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async, rerun: 32) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), r2) (rerun: 32) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x98, r7, 0x0, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000bc0), r2) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r8, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) (async) recvmmsg(r4, &(0x7f0000008bc0)=[{{&(0x7f0000000d00)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/214, 0xd6}, {&(0x7f0000001e80)=""/156, 0x9c}, {&(0x7f0000001f40)=""/107, 0x6b}], 0x4, &(0x7f0000002000)=""/8, 0x8}, 0x1fc000}, {{&(0x7f0000002040)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000002540)=[{&(0x7f00000020c0)=""/163, 0xa3}, {&(0x7f0000002180)=""/167, 0xa7}, {&(0x7f0000002240)=""/240, 0xf0}, {&(0x7f0000002340)=""/136, 0x88}, {&(0x7f0000002400)=""/39, 0x27}, {&(0x7f0000002440)=""/226, 0xe2}], 0x6}, 0xfa1}, {{&(0x7f00000025c0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)=""/241, 0xf1}, {&(0x7f0000002840)=""/20, 0x14}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/178, 0xb2}, {&(0x7f0000003940)=""/32, 0x20}, {&(0x7f0000003980)=""/162, 0xa2}, {&(0x7f0000003a40)=""/211, 0xd3}], 0x8, &(0x7f0000003bc0)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f0000005e00)=[{&(0x7f0000004bc0)=""/236, 0xec}, {&(0x7f0000004cc0)=""/11, 0xb}, {&(0x7f0000004d00)=""/166, 0xa6}, {&(0x7f0000004dc0)=""/4096, 0x1000}, {&(0x7f0000005dc0)=""/42, 0x2a}], 0x5, &(0x7f0000005e80)=""/4096, 0x1000}}, {{&(0x7f0000006e80)=@ieee802154, 0x80, &(0x7f0000008100)=[{&(0x7f0000006f00)=""/57, 0x39}, {&(0x7f0000006f40)=""/4096, 0x1000}, {&(0x7f0000007f40)=""/162, 0xa2}, {&(0x7f0000008000)=""/110, 0x6e}, {&(0x7f0000008080)=""/76, 0x4c}], 0x5, &(0x7f0000008180)=""/165, 0xa5}, 0x2}, {{&(0x7f0000008240)=@nfc_llcp, 0x80, &(0x7f0000008440)=[{&(0x7f00000082c0)=""/3, 0x3}, {&(0x7f0000008300)=""/253, 0xfd}, {&(0x7f0000008400)=""/55, 0x37}], 0x3, &(0x7f0000008480)=""/207, 0xcf}}, {{&(0x7f0000008580)=@phonet, 0x80, &(0x7f0000008a40)=[{&(0x7f0000008600)=""/98, 0x62}, {&(0x7f0000008680)=""/122, 0x7a}, {&(0x7f0000008700)=""/135, 0x87}, {&(0x7f00000087c0)=""/199, 0xc7}, {&(0x7f00000088c0)=""/39, 0x27}, {&(0x7f0000008900)=""/186, 0xba}, {&(0x7f00000089c0)=""/98, 0x62}], 0x7, &(0x7f0000008ac0)=""/226, 0xe2}, 0x3}], 0x7, 0x40, &(0x7f0000008d80)={0x0, 0x989680}) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000008ec0)={0x0, &(0x7f0000008dc0)="8c00be4a16985b84f06bdffb06debdf8e3510b072745ce689569f87d2d79e3be1fb1d5e9e7a34d38b3e1390024e68e00ab5b2d9d8d58ae5233f5f3090fa133768ac6d530541e4a2703d26ed537f02700081f4c2a3996ecb7ff64c85509e99ccd5770fabc88e3855eed4a0867199c8cf42aee45fa15db992a2f33f6fa4dcd03444121a07d941a5a398c1c94d2b455d8496fd3c5722f29f5d460db4a7fca4db320288ca656a82756928b4b25573511c0ec8acbc23ec140f8362c5f0d6ec15f1fc8566c432fa7ddb8e7bc40694645040f4aac889c6e0e3174b7d9044db4d9f6ccf6fdc79b987761803e7852", 0xea}) (async) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000009000)={'broute\x00', 0x0, 0x3, 0x81, [0xc6a5, 0x1, 0x3ff, 0x6, 0x7, 0x5], 0x2, &(0x7f0000008f00)=[{}, {}], &(0x7f0000008f40)=""/129}, &(0x7f0000009080)=0x78) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000009100)=@o_path={&(0x7f00000090c0)='./file0\x00', 0x0, 0x0, r2}, 0x18) (async, rerun: 64) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000009140)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000093c0)={'syztnl1\x00', &(0x7f0000009340)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x1, 0xbd, 0x76, @remote, @mcast1, 0x8, 0x780, 0x80000000, 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000094c0)={0x18, 0x18, &(0x7f00000091c0)=@raw=[@map_fd={0x18, 0xc, 0x1, 0x0, r2}, @jmp={0x5, 0x1, 0x3, 0x3, 0x2, 0x8, 0x8}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @map_val={0x18, 0x6, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0xffff4e55}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @map_val={0x18, 0x4, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000009280)='GPL\x00', 0x2e5, 0x43, &(0x7f00000092c0)=""/67, 0x41000, 0x26, '\x00', r11, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000009400)=[r2, r2, r2, r4], &(0x7f0000009440)=[{0x8, 0x3, 0x2, 0x3}, {0x1, 0x2, 0xe, 0x9}, {0x2, 0x4, 0xe}, {0x0, 0x3, 0x7, 0x2}, {0x4, 0x1, 0x0, 0x6}, {0x4, 0x3, 0xf, 0x6}, {0x1, 0x4, 0x7, 0x1}, {0x1, 0x1, 0xe, 0x6}], 0x10, 0x800}, 0x94) 17.939055363s ago: executing program 32 (id=511): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xa, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x33}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x48010}, 0x40) (async) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x7fffffffffffffff, 0x4}}, 0x30) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x3, 0x10000) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r0, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044091}, 0x60085) chmod(&(0x7f0000000440)='./file0\x00', 0x136) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000480)) (async, rerun: 64) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000500)) (async, rerun: 64) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000600), 0x80, 0x0) write$vga_arbiter(r3, &(0x7f0000000640), 0xf) (async) r4 = openat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x40, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f00000006c0), 0x596bc06841436a29, 0x0) writev(r5, &(0x7f0000000800)=[{&(0x7f0000000700)="f7d26adfc08d06080d5f4cd5d8a05c9786fd7fae344f2a61834f9978f9cc7ca9cc22ed2f11bc215e549a848c20b2cd63d15dd81337e79d1d81a7d6dbf010c40b84510c39f66a9ba981d93adadf5f00c962a16f6f629c2b1fb4327c6e67acda678e7fa8f8cf082af6f623d354ca2056b41ab7d56dd69705133bd6d1d4175cb439f54235f0f402891f2d8d401a1fef5ca17401b7f42b9599a81f168129b47696132b3a02a0c6ee145706a342776267f44e4112731120bb24772174e3188f2b3541488cc4671b5fe4d6ef006b89a4415c8102af73af2bbda7149d2d0408b6244c022d38abf46f7d9f6052dcc90d6f4c", 0xee}], 0x1) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) read$eventfd(r2, &(0x7f0000000840), 0x8) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r6, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async, rerun: 32) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), r2) (rerun: 32) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x98, r7, 0x0, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000bc0), r2) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r8, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) (async) recvmmsg(r4, &(0x7f0000008bc0)=[{{&(0x7f0000000d00)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/214, 0xd6}, {&(0x7f0000001e80)=""/156, 0x9c}, {&(0x7f0000001f40)=""/107, 0x6b}], 0x4, &(0x7f0000002000)=""/8, 0x8}, 0x1fc000}, {{&(0x7f0000002040)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000002540)=[{&(0x7f00000020c0)=""/163, 0xa3}, {&(0x7f0000002180)=""/167, 0xa7}, {&(0x7f0000002240)=""/240, 0xf0}, {&(0x7f0000002340)=""/136, 0x88}, {&(0x7f0000002400)=""/39, 0x27}, {&(0x7f0000002440)=""/226, 0xe2}], 0x6}, 0xfa1}, {{&(0x7f00000025c0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)=""/241, 0xf1}, {&(0x7f0000002840)=""/20, 0x14}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/178, 0xb2}, {&(0x7f0000003940)=""/32, 0x20}, {&(0x7f0000003980)=""/162, 0xa2}, {&(0x7f0000003a40)=""/211, 0xd3}], 0x8, &(0x7f0000003bc0)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f0000005e00)=[{&(0x7f0000004bc0)=""/236, 0xec}, {&(0x7f0000004cc0)=""/11, 0xb}, {&(0x7f0000004d00)=""/166, 0xa6}, {&(0x7f0000004dc0)=""/4096, 0x1000}, {&(0x7f0000005dc0)=""/42, 0x2a}], 0x5, &(0x7f0000005e80)=""/4096, 0x1000}}, {{&(0x7f0000006e80)=@ieee802154, 0x80, &(0x7f0000008100)=[{&(0x7f0000006f00)=""/57, 0x39}, {&(0x7f0000006f40)=""/4096, 0x1000}, {&(0x7f0000007f40)=""/162, 0xa2}, {&(0x7f0000008000)=""/110, 0x6e}, {&(0x7f0000008080)=""/76, 0x4c}], 0x5, &(0x7f0000008180)=""/165, 0xa5}, 0x2}, {{&(0x7f0000008240)=@nfc_llcp, 0x80, &(0x7f0000008440)=[{&(0x7f00000082c0)=""/3, 0x3}, {&(0x7f0000008300)=""/253, 0xfd}, {&(0x7f0000008400)=""/55, 0x37}], 0x3, &(0x7f0000008480)=""/207, 0xcf}}, {{&(0x7f0000008580)=@phonet, 0x80, &(0x7f0000008a40)=[{&(0x7f0000008600)=""/98, 0x62}, {&(0x7f0000008680)=""/122, 0x7a}, {&(0x7f0000008700)=""/135, 0x87}, {&(0x7f00000087c0)=""/199, 0xc7}, {&(0x7f00000088c0)=""/39, 0x27}, {&(0x7f0000008900)=""/186, 0xba}, {&(0x7f00000089c0)=""/98, 0x62}], 0x7, &(0x7f0000008ac0)=""/226, 0xe2}, 0x3}], 0x7, 0x40, &(0x7f0000008d80)={0x0, 0x989680}) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000008ec0)={0x0, &(0x7f0000008dc0)="8c00be4a16985b84f06bdffb06debdf8e3510b072745ce689569f87d2d79e3be1fb1d5e9e7a34d38b3e1390024e68e00ab5b2d9d8d58ae5233f5f3090fa133768ac6d530541e4a2703d26ed537f02700081f4c2a3996ecb7ff64c85509e99ccd5770fabc88e3855eed4a0867199c8cf42aee45fa15db992a2f33f6fa4dcd03444121a07d941a5a398c1c94d2b455d8496fd3c5722f29f5d460db4a7fca4db320288ca656a82756928b4b25573511c0ec8acbc23ec140f8362c5f0d6ec15f1fc8566c432fa7ddb8e7bc40694645040f4aac889c6e0e3174b7d9044db4d9f6ccf6fdc79b987761803e7852", 0xea}) (async) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000009000)={'broute\x00', 0x0, 0x3, 0x81, [0xc6a5, 0x1, 0x3ff, 0x6, 0x7, 0x5], 0x2, &(0x7f0000008f00)=[{}, {}], &(0x7f0000008f40)=""/129}, &(0x7f0000009080)=0x78) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000009100)=@o_path={&(0x7f00000090c0)='./file0\x00', 0x0, 0x0, r2}, 0x18) (async, rerun: 64) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000009140)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000093c0)={'syztnl1\x00', &(0x7f0000009340)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x1, 0xbd, 0x76, @remote, @mcast1, 0x8, 0x780, 0x80000000, 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000094c0)={0x18, 0x18, &(0x7f00000091c0)=@raw=[@map_fd={0x18, 0xc, 0x1, 0x0, r2}, @jmp={0x5, 0x1, 0x3, 0x3, 0x2, 0x8, 0x8}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @map_val={0x18, 0x6, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0xffff4e55}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @map_val={0x18, 0x4, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000009280)='GPL\x00', 0x2e5, 0x43, &(0x7f00000092c0)=""/67, 0x41000, 0x26, '\x00', r11, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000009400)=[r2, r2, r2, r4], &(0x7f0000009440)=[{0x8, 0x3, 0x2, 0x3}, {0x1, 0x2, 0xe, 0x9}, {0x2, 0x4, 0xe}, {0x0, 0x3, 0x7, 0x2}, {0x4, 0x1, 0x0, 0x6}, {0x4, 0x3, 0xf, 0x6}, {0x1, 0x4, 0x7, 0x1}, {0x1, 0x1, 0xe, 0x6}], 0x10, 0x800}, 0x94) 1.41520793s ago: executing program 4 (id=966): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r1, 0x1fffffffd, 0x2) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000280)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff9000/0x4000)=nil) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x9, 0x0, '\x00', {0x0, @bt={0x1, 0x4, 0x1, 0x2, 0x4, 0x9, 0x5, 0x9, 0x9, 0xe428, 0x7, 0x1, 0x9, 0xa0000, 0x10, 0x20, {0x81, 0xa}, 0xd, 0x3}}}) 1.338468124s ago: executing program 4 (id=969): ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) (async, rerun: 32) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000080)={0x4, @output={0x1000, 0x1, {0x2}, 0xd7ec, 0x5}}) (async, rerun: 32) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x404002, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) (async, rerun: 64) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfc, 0x4000000}, 0xc) (async, rerun: 64) ioctl$KVM_GET_TSC_KHZ_cpu(r0, 0xaea3) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r2, 0x300000c, 0x30, r0, 0x0) (async) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0xa, 0x4}) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000240)=@ccm_128={{0x303}, "cad04c656a6e8eab", "6c70d15efed5b2f50b13ab6e3f5e4f91", "f0bc92b3", "d185859b5a8c24ec"}, 0x28) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000280)=0x424, 0x4) (async) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000002c0)={0x3, 0x50424752, 0x5, 0x2, 0x1, @stepwise={{0x8000, 0x5}, {0x0, 0xf0e7}, {0x8f6, 0x1d82c}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0xc5, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (async) fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in=@loopback, @in=@loopback, 0x4e22, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x0, 0x10, r3, r4}, {0x6b7, 0x3, 0x7, 0x4, 0x7, 0x1ff, 0x1477, 0x6}, {0x87, 0x8, 0x400, 0x6}, 0x1, 0x6e6bb1, 0x0, 0x1, 0x2, 0x3}, {{@in6=@remote, 0x4d3, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x3506, 0x4, 0x3, 0x0, 0x101, 0x10000, 0xd3}}, 0xe8) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000780)={0x0, {0x0, 0xc}}) (rerun: 64) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000007c0)=0x7f) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000800)={0x7, "562af831e629a39265d4d4c5d6d3adeb4ef54cfa155e46990a6dc2c4f1b6c881", 0x3, 0x3, 0x1, 0x800, 0x10801, 0x4}) (async) ioctl$BSG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000880)=0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@setlink={0x28, 0x13, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x2000, 0x8013}, [@IFLA_PROTO_DOWN={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4004010) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000009c0)=0xb) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r0, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000a40)=[0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x29, &(0x7f0000000ac0)=[{}], 0x8, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000d40)={'batadv_slave_1\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000dc0)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000f80)={&(0x7f0000000d00), 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x11c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40001}, 0x41) (async) connect$vsock_stream(r0, &(0x7f0000000fc0)={0x28, 0x0, 0x2710}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001000)={'pimreg1\x00', {0x2, 0x4e24, @broadcast}}) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x26000840}, 0x4008084) 1.337411306s ago: executing program 2 (id=971): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b43318", 0x3c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r3, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/153, 0x99}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1.33676645s ago: executing program 4 (id=972): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) memfd_create(&(0x7f0000000140)='-\t:\xfd\xff\xff\xff\xff\xff\a\x00\x00\x00SP\xb3\xc9\x9c\x9d\xd2\x1f,\xc6\xea/\x9d\x0f0KR\xc8\xe3,<$P\x91\x1fj_\xa35\x86\xe5\xechCGz\'\xa9\xb3\x86\r&\"\xff\xc8\x13\xc3e\xdf\x1bh\x031\xda\x1bNG\xac\xf3O\x02\x83\x96\x00\xfc\x00\x00\x00\x00\x00', 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)="11212ea03e44a0f8cbcd", 0xa}, 0x1, 0x0, 0x0, 0x24008011}, 0x8000) recvmmsg(r1, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0xc000, 0x1, 0x323}, 0x0, 0x0) 1.266801098s ago: executing program 4 (id=974): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000140), &(0x7f0000000200)=0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000000)={@val={0xa}, @val={0x1, 0x0, 0x81, 0x6, 0xe, 0x400}, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f1d, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x54) 1.265951241s ago: executing program 2 (id=975): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x183400, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_delvlan={0x3c, 0x71, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0xc, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x69}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0xc0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x78, 0x10, 0x503, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1244c}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}, @IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa0100fe}, @IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010102}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x2d616b45}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x5}, @IFLA_VTI_FWMARK={0x8, 0x6, 0xe}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_IKEY={0x8, 0x2, 0x9}]]}}}]}, 0x78}}, 0x0) r2 = semget$private(0x0, 0x6, 0x3b1) setuid(0xee00) semop(r2, &(0x7f00000000c0)=[{}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@datasec={0x2, 0x0, 0x0, 0xf, 0x2, [], "25ff"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "b8b3"}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x38, 0x0, 0x1}, 0x20) 1.171465233s ago: executing program 2 (id=977): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e040a260c"], 0x7) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28000}, 0x40) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x686702, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (async) syz_emit_ethernet(0x3e, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.171285506s ago: executing program 4 (id=978): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r0], 0x184}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0xffff, 0x3231564e, 0x0, [0x2], [0x2000, 0x0, 0xc7], [0x7fffffff, 0x3, 0x0, 0x2], [0x43e, 0x0, 0x0, 0x200]}) 1.169621839s ago: executing program 2 (id=979): timer_create(0x0, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) request_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000300)='syzkaller0\x00', 0x0) clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) timer_delete(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1214c2, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 1.109919789s ago: executing program 4 (id=981): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d6115017e02f825b0039ae1e66caba57d437a2aea7ab9a77433a9e7d7efec73cf2b1d735d88c008b5461d9f6c085bcd1017a84cf09cd30d2ebef3458059d0797545f9a9389f02b1449eb6710cee269a13976d9915cde3505fa5436635343d8f07fd39f0215d67fb9029eadd4999aa0bea327754a9d5b55ac832b9ba9b98928c8155a24a542f56173a7e0a8b3dca150268b512ffe2e", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4c000}, 0x40085) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000)=0x46, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="11022dbd7000ffdbdf252100000009001f00706879310000000005002000000000000c00050002"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000fe0100a5a5090001"], 0x2c}}, 0x2044) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f00000005c0)={0x1, 0x1, 0x1000, 0x96, &(0x7f0000000440)="7202ecbd343d4686200d3ef22a268b5470d0952c370b72dc5f4274f3f1f6478e83873180d180edc8613d80f0faa90fbb37cce3160056ac0110a6b9879d833593a5feb1b60d18b134b3d67b10fcab7d48c8c1b16406b9fdf3aa3d344ecc30e76395b369a6500887ec10413f44420651e236127a133ab213c65c8685de4a3cbc27ebc4e28ef75b7e55a7e611bf927922c682d2a659cce3", 0x87, 0x0, &(0x7f0000000500)="137d257f021b5874aa28ec2cf5da81318550b4de83e35b035ba2a8132489b76d2d565d9fe70346c0974316b3c1eb1285e13b5506f6281b691d724d27ebadd778ff956f4a8745d66a9378e4e617d5f3dead5ba9a2e5c0d7340159df72c68632833b2b6293e31bcc8e5ade22d2d75cf8c0f0175500dcb627e2504d3b20c88b284643b33d4634d6bc"}) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000180)={0xffffffff, {{0xa, 0x4e20, 0x7, @mcast2, 0x8}}}, 0x88) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 943.934084ms ago: executing program 3 (id=982): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r1, 0x50483}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x13}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x5c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000580)={0x2, 0x4e5c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="480000000000000000000000070000009404000044346571ac986a06631e0101000000050a01010200000009ac1414aa80000001ac14141000000005e000000100000000e0000001"], 0x48}}], 0x1, 0x44080) 943.09932ms ago: executing program 3 (id=983): ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a010300000000000000000100000908000240000000050900010073797a300000000028000000000a03000000000000000000010000090900010073797a30000000000800024000000007140000001000010000000000000000000000000a5c912c8b97b85ee5"], 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x800) 881.717271ms ago: executing program 3 (id=985): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@sg0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000000)='usrquota') 880.671376ms ago: executing program 3 (id=986): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000005580)={0x3e8c, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x3da4, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xc}]}}}, {0x166c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1660, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xa0, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_CMP_DATA={0x140, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6f, 0x1, "ee2402cb4277d4bd5c38871899c5e01451be36d4107a3b950caab5160186fa143eb696c3dd0e55d77488f1e3cb4517ab07c7e7f4f0d4eb6b41dd6e341ddc14f71146b2e04a844945cb8972db8fbf7c55da38efdac5702c3901ef90c9203e6a3d5f960c012202cf5a1b4520"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0x230, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6f, 0x1, "cf17e31dd664d47c58f880ea21dc81b5a76d0779726cbaa84985134295683aa1e6a66d007b9205832a880f93f10c01001cdc4af64d4aae105fe8ccc738a2f4243cb76bff4058d0e794dd4a378c60a7547913b4df3e08006c9172e4e7e2e04b430d0f9bb09accea181b16f8"}, @NFTA_DATA_VALUE={0xb0, 0x1, "cf40af7677bd2a948c1418743fa5bbf5a340c3ff97a29ad4aefeeccdf11ba342d8a1c088bbc97faacabe0a0108aad9b09a87a1107d6b31ad0d4245d345165ab3e71f37007175c4224d2946b119fc75fb9a4b05864e333401ef1a89f27248d1f234743efca5c65ca707d328cbfe9e4dc9bb2a084524107764c675b9591e0d6d61bb75801eff9edc3b06061e96f9110b60ddd1eac57fefe89e3dcc0b95ef211936128fb7db339c5b94f2be60fe"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_DATA={0x122c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xd2, 0x1, "0c7cfe6dfa9d23f02765bab93f2b3f6fdc95583473347a8dfd0d166104ac27bc918cfaab554bde821f9d194037c7298c08a43629fad3e5971b845fec72262a9425b94b1a2959452313f0df39022dc13f47eb80514178ed2732aaed8d46f7c9cad017ca3eca388b0cc7ea3664ab8dc8b3d79f6b09e5259e51388ab87f4a7df8a6f4033a98a32b8408cc7ef409ca3b1e9a43b2063dd94b556d467a0e8b5949eb5d36e7969722193370562d261e4bd33a6e667e839df239f6aa72f52460beea4202c728aa0e531e1e9de7d47749e7cc"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x400}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x59, 0x1, "2afe8b088960395b589d408e19b80694b74f3e2c099d89515cb6f0263a22ab1116f8e610b8334ab5031cacfc81b1075d6ac8684b3887ee152b245b1e95f67553b074734e873d1082b9e5e3ed8f10c0c674406f213f"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x26d4, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x26c4, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x18c, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_RANGE_TO_DATA={0x100, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdd, 0x1, "59ad161a82c584a23cd7d94fbf8caaebe19a4eca04f38f2f77f6b39b737bd22b34518cda814160b540e5bf735b5f31fe15086861a2bd55825bebdbd5ef4fa4cd4c67c45bdbe2c78b266eb440eb86d5f8b8b27ae252133f99a82ff6745809f615618ed283184df4cce25c33e9997da31e709f0ae1bc7abb438d8e2afcd3f334faf0adca079b0ee956f3cc36203387bfaa2e6f32fe35ee00b1abac633a2c3b0de3f149a00f95c7d8aebbd583c7a49eadd477fbd30b63de5a2cbc9269fde44bfcd8394ebc2edea46bc54e2bf260b63764479d60cf69f1988c5fe9"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_RANGE_FROM_DATA={0x1c4, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc3, 0x1, "5105d9452bcb43f277e829aeee52faed0453a9dda94fd338b7ef85e25a80d11e2968cbdd8a50c6534bcf1ad30dde6588cefd5192989aff8824c8748a33457f15129696524e6e07ac14d2d19278b659a21275b605e43d93824a7b893f03c2aff3bc5ce18e6685df6973f63a832726a301e2f6e7959c75cc48b430e34ad35129c924d25dc7ea70966ca7b2c83f182ad9f78077632eccb6bcaa30c6ddb39668400335e900cada0076f2184ab02d530a975bfe3f5b1cb70c98d8393daccf211a87"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x4a, 0x1, "1ab3557fecdaff613eb1ebb8574c15d7e90c0e801b7827dd5dca2647f3d80da68647ea3a86a0d696c717d05b3c5b2431249f0b5080fafa01f18d8fc01bbe6c1b872659bac766"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x4b, 0x1, "c519ed15614dee59b13f5ac9cb81de6829fe58f9bf511cb36b4d19ca4ee3e05c9998d71b398f2648566ba17cbd73130524a60605e67ddaf02ff5c54db473544e8974fdbc97cf4b"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000004}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_FROM_DATA={0x2258, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xdf, 0x1, "46e7959f9022dfa73416feb85d03f531e404f110756aac8e08f61550281b3b59e857f50539a92ac00077516db73101999a3a6a7ef6ac8b79bfb5c318f620fe1243518ba0a756c51a16f542f4f76eff0e9715768debc58f7746f8e9980961523d9cb44cdce4ad32843bd9b4da4253b9d997430a6f1ff0de3759f81e94f1aceb119e893129dac34085572b242ebb57cd7b2db17b480005b76111cace4ea93fb6a1956bfff876dc8c3f1232a0b2b1d3d88a25e4d4f94a3e0e681bda8839be7c8afb4069cca5ba2b82b34669e2d43eb841fc55940153bb95e6d6494067"}, @NFTA_DATA_VALUE={0x1004, 0x1, "a6466fe67edd14c740a6bbf02d986c1e379262d8dafd016af235c7bad1def7f65c03b776f8fa360abc7b0a8c6507a129344147deebebab28137f28b6b5fdb58200b85c5e8e35fa72e952aee9003674e80e9f4c70da25e733137c7613bd37e717752a9a73bcf93fed14044d8cf4dc95e18f96de657a7efeb24584489896ba6a001f6618c4ef9a400e810e6e3d0ffb3a2cf5d823341235f27c067e7024d609b6b093f03b725aadd24b7e32e2b0758ab7bdd5bc91b471b20f244a409d4634526d2572e910f42d785e21dfaf5c4220f0fa5605a8fa62ba003c1bf5f57c085c9f65d8ead3ffface019e45ab954b25054113b6772b4435122fa3411926fa459c2fe7dfc55bc95e4e85961d3e82de64380e227a0260bdf7791e7fd65935afb7d93af25043391bc454aebdd54e31c677b7b00912b05ed7ed14677a0cd07a18d361dd3dd855a9e356a78ea6cad93314443560dce4218bfade4e2551012289ff4d5b1d7d79bb275e8c052990f7a11486ee63a1e51d6789d2b9ee64a07432877c3fccd0237d762e26004522b314b1fde14b8ec79e6ff230db82717ea23623d2368a7868e49122fa11cc5fd23569ce7336a22670a4f11b11e7e7fdd46c870f962902ae87ce09497663e87a8bc805663e380b4643e9829bffd5d684a4be570b77b8bd955e8daea2e18ca8943f3c16cfcf37d0c13537a9e359f2f0d8065b97644087f81017e09de7a00608769787ce6648e25213185c995b0d5bcf16b09761eb8c2c1d1bdaa48e7afbd79a84b931b2760be6838f645fd7253c845ad3bcc9975d87f04202b3f072de55190270c8ade4eea4b8d1155d33d2daa965793d7ed7e632758d31018ba1832a917278bb62ec92a7dd7a2de6c83cb40c1dff39890694832d69cf57cc5b9742211effcab3256e5df03d13e2476df958bebe0d11ecf04bc694dab49748434a9f284e8e6ab86cf08b88d2bb36c1ed51f3316f6becf1470649e64487f3d90e871a1bb684a4e13dc1808b5d221edf44685e9f28dbde66793e0e8aaed6cfc6b14409e8b3c4c570c4b2406579b5c8b9d08a8287c5169fdd86bb429440f40eda78e6ca9a1fcb4d9daa52d9c946f1fc82c8d5b559785577bb86bcd20f038f16a4803dcf826c02894874d1761148cf4c0e1530aa36755d929ac0d426a7f3134322f53c49aa2437535c7202752da9acf6831669679e238b2b321409c70ae8ea5501fc3cf82da407b3ffd49c156910dac5402306a3e4e888eb973b3945c757945368d8197fee28e254e847dce2b4f3e18708d56d48a0f90c14322e313fd8091174c085464f01a214b49f92bb25faa81fe9f724286b2b222ddc8f0a6d1215881f17543e670c1a90fb7015823ea85e6c32ea95bf2cefa3ee6f730881b2f407089defee02c1df8dc6282101198df00c6cf9659664213639c436364313fad6129c042d319d61ad7c9991757213f089b5cbe31a7f7e6902dc8206c9210932616ff3499f8351d21f2bbd60cf02838b2210480ed65a8e02d8cf5742862d07cbddeec90664aa9bc4d28cc31df2d1d6d7a4f5dfc3d578599f20a39d141059b70966b6b4a1bd0d64b35007a52b02c3b9e3700fed3afd6e5d95980689741d63963587a1962df5a0e5b1809fbb820da5c8edb051aeda24b7c7b03ebc7382b511b2de3a6aa536e33af8484c9db9fb7ddddf121fe390db26d1f35720f8661b51337779ee9b87da207498a852fd9d9be93f7c9c15f08fb606df90f3732a1ac98577aa056b112ec4fe462d014d0ea3b9239877dfa3311beae45ce85a7f9d9ad715124ce021cac00342a8e1044985c72eefa2349f83a9cdd2c51b8290931ce78583bc785dd6cd3cbebd29069885b86126e707e28abebf921228e4ecaf7247079cc749409216d1e717d5879e97eb8c941cb34ae0473056a392bf34351d4b98a262fa788d186ce4e9ed9e4e5f243a3f6feab2bbab90d3ada7b12486e2190dc85c1ce7887f8bf3739f03df7eab2d18040812bc91350d46d070e23c0bd08fe7f5fd4e1ccd7aef94a364f1fd19f4115a63f3c6df2814280ce3179bbaf9a35fe76f29e52d91e7a61d08cee6dc230eec84c5ff191a25cf8ce3fe754d1a437a3c8c3b8589322478c1646d84e31edef80fe29b0c6fb1cc548cba5ff3b5ccd4b475a2461bb8eb52cab6b7ad4290ab6aa2375b21b24f77a7ce72dacae9a9fb66d04c2f6cb2a3bef91046b40bc9e42604828faa2318589b06fb21bb430027547c55f63b7327d52f69b9d691c75c81002aa5cb3d3870289de0d6309e82cb4cae3aa8d5d0afc3ca60c644b659cc5bd1c35c96e29ae52a18d40e6916cd37c7046c1cb76101bc46380bbbed0d00c7f7473575580145cb292c1f6a14a29c3b82755e6d8084fc6f468e3fc35d12fb10d6d58dd7d0a31bab12ef20f3a51ee473673a6a57b915b5f778031f96317bdec185d4a81eadf4678c9b2ba8e77457b60a42cc543ab9a6f20e391d7db15b572e792c6bedfff4fbdc48bd922efb1128121347a89be68e37cc551ec18064ab8ef75f95d6efc51c00125c429895ca64e99a488869619ec2c32fc23d0482ee21bc0d61a5091e940f2349cc089be23a96263644c1cfc4b6f7f5b9c5ed9dd0450b6733e908fe6d817ea205df2c4b6ea6485d08adb141dee9852569d710853beac1f8fb5e850df58f3ef25a98ddb26d9465c75f279f20ec46ed29fe826aadd54d6b40e40af6852d73b53d1962e32e40ee46accc93d91f2b2125cb484d67f07560fd2a73845257fdfd046b10908cf9d8200b8e699fa39609c2f51c3bbe0d0d68ad0b1103ce610688ca7cf35424e22abecb2705288572a95b8b38babcc3a982b3287367ca550e214a0067d1aafa20f6afb3bea2279f5c6877bd8fdcf0d996da60a9eaa6cc770545c28ff7e99abf1bfdea948cb7720efa4fd0932504703c41702a7d7182f1682e658d708b46892edb5829517b04bb83aebf4c99d19b5ecf563abf5bfcfb93bb28e0aebdc6d991c5349f6a24d2c6c6269fd5d322f621e92097189d385dff0a4b3d5dab8020e0471b26872d095c9cc3e4088174c6dc6e5e0d3b9cac7ddb1ad3280cc6246ed5984d17db05b3d16e2683e4324a02826af1b141381397f9c5d7732815da4ad0ed6203b87604d14c919bac3ed10191a5d2d51ad35bedc01dd6655bc47166f29fa5900165d6e21bd1c3d948cbd2cd22402b7db09b5deee6acd828cc20cca71fb48c7d85e6f0c9edc7ca10a24dcb6c8fca846441f18860ba0cc6bab2fe74ea404761aa8703c8b6ce06c7ce1a34b1709c7ca5ade113c33b941b0f6a78f7e3a36d7e878c900c67ea579ed5288d3435839f46167d55c24c590985a9a97ee7ee9cbf4195ade41c628535d1840e0edb64c3c63cf4932faf87b50315b2c9265cfd8f9af022097d2cb92de20222f84893b59efc6d444fa28420a9764ec66afd68ee261683ea263a66a81ed642a3125f95f8d17d1c648e5d3ab4ab4bbf38a1108be39fcb80256fd0de8ca6bae057cd852569f3c3cff6563a133eb1ef92448dfa324bc790d0972c6df886c88125e4368dfbe55dace0c9a4126b13ac2f8711a7e43e500041d87d45e094c99ddc2c58a4bca540f8c8447fd5cbedd66529eaf23e95f5a4c869943694f5ceeb6180c59a305955947dad35639d6995113063d917cb9d7b3a3a3a1970f9d1c33d8206bb2038efeaa03e2ea538444f3a8e1a13cb06a07d9b567f830718c17875b9fb0dc727d049db5066594f1d85867bf7c32e2077508614202753be268f534aac71498fcc25d721abce22bff49345bf9ce3aa5485146076f8420f87b4cd7e7edd49fbf15381edac283bc0e71f48f690a16879d23d36cd8775a68e44f6f55392d91fcf1d86ffc7b061b6c2c2a10f9067f62ade17e06119c2821574e3b03d72619b6bba4b2f087102b3bf8e6d3ef63aa99532455c40b85f9ac10acc817816bbee71c77d9eae948c16885283abca2e8618a76197a204cbccd1808ac9b5a7838e41f1a8b2bb869e7c66f7366d3c6a516850bbab7e572af6f5cbbc871d52c564033f772d0227b35f9670495d7a659620942eb2232edee4ed58bc92c0f3bb23be2a40037ce2dedba9ed4808e54a086c59b301d57307d481dacebdc590adbaf9a5894f32c5c9f6ee91853884bda3f86b07a21686408c59f9441cbac4194caa4b859facaaf4827f7c124896fa988925040990cad8e6cfa49bd169dc48e87c559403655816d73afde14c11314b3be382d725a4da47dd3482e7ac5bc43ffba7e5cb1f3b4994d92c000f28f5ce617e83b93353c1920a11b980b52d706029ca437893795de2c86c74e96e9f4d576b3f26310fd6517099bc86b53fbe206fb654d3a81b9a0d13bf6241ee7089f036c5435abf0ce296ccf2e13bf74880d1c82e87060569d74aee193cd1638db8f1da296967e7f6d8d016eca7b413cf979ee7708a36f7aa77b55ecb8f4f8782a09398b55b057291eeab01a52d67d51c709f9110727a819d61289e625639a204db30633b72c61158623a9b7f969fe0c18c0dc072bed613f23ccbe0998cfcad92e92fbdf9f3bf84ee9bbf2ec7bdbf881ffaae9f157ea0a2e77c7f49c5e5aef675e4acb942a2379adb1b7e5d1c44f7b14e676032589ff909122a70514c916c01a7bfce079361bb9b7811ded72d3f2db115709fed1170053886b1d29edc06020c02a3d9999be9b162c1890afe4b413fb21f3c26c3fdf9831c2763682b8f69da0db5076e8226781674b8ac02033d9d792250894b734c3a270bfc7e433237ad2d6affba828587bcf544fca381e0205f99121cec52b2e4f5eadffdb1c641dd694562a85bae2739f336002631905dbf623154524f7213237e11adf620309daa58e8ed7398d796c87eafe4d205b2e34ae1ad6499f9a6ecea58c58c755ba2b2c882bd534058fc561dec246d34876b7e03c76ae09beba6c27decafe34319dbc3aaaa9b9b310c42b78560860cfc9a7e55bdcdba2fd144a2724af05d3140656ab022e63ae643d49fe4effc976511b441f691d9ea6645c47a9321df0b072117bd89ccafbfaac35d0799869b950a42167caa85abab9ede6b7f2281183f466526e220d6853f20fe316d72ffe07c5a42cb3eaf08c3ecc1b910ccad7ecd5de294f3f697dc699e894a4558adf1cff35a5ebe114e43f12ee397701aab4fcb3488bd5986494c954808b16944bdf10b27fab64f2260fe641f8421c9cb647b0d9c529a33444fbf0151a1dd438637577e3d1d8f8dec227ee54f306d4560051dce8418bc1df4cb201c443a1c8ad4cf56513fbb6445718f597d958ceade3f6ce153e4cfe4e9e5360d534fed802e835b1d835f40d2ee1b81f0117fb70cd09e5329ffe1236d2438e0abf670be0b01a7dde41001b5947b00ea46c2c6fc72509412a3c60f8aa1dc94da828e867c5075827386e064faa2e14685468c38dea472fd1c18263d7c87c160429033a220838b25c1c5b9b21b61e483fe64cd378e885f64c611f9ea8e85b21d8a4075c4938087175f0f3969d6f372cb23d70a1bb3fae933691df708790c305ced5546fe31867109b695002df512c758d28b8b476844d82d42b775284e5e1e7ab1c9d871d48b904bf1dd928154fe9d3781ed3923a12b29b7d2727e89399cd2bf24d0ab4f4eeaf0cae8c2131380bb3dfd152aba2e60276e3db8c540313d6d2b874ff89fdf3de89906796017530b007546a5993ea7a13df241a7da2e305560028cc5d9d8fff250e46666d2d9e3b429200883c2585a09b8b2ee9136a99c7710362dc86c041507546ea6b2fec73343110d5a98a2ed6e2267f637006036c4a7137ea4"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0x95, 0xd, 0x1, 0x0, "f51be3bbd855b76492afae49bb92454ad681c58bf4cdc9245c8386c6e5ea4fa36a0e80e608741b1bd03f3bbd01940c6fd8357a015bfe45ea0ba154b348099d782b241804952bd2e17b057d86b590d0f94296cb722e40c9224eea7552e2a2ae3aff0a7ecc091fa7da201bf6397982aeb84a5d12724ac2020f58f678a23c91f553bb53c00dcae2fb1c05dec73c5de7c59c96"}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x392b}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x3e8c}, 0x1, 0x0, 0x0, 0x404c050}, 0x24000000) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "688d33f2"}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000340)={0x60000, 0x0, [0x3, 0x4, 0x4, 0x81, 0x5, 0x6, 0x7, 0x3]}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r5, &(0x7f0000000c80)={&(0x7f0000000a40)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x80, 0x0}, 0x4040044) (async) sendmsg(r5, &(0x7f0000000c80)={&(0x7f0000000a40)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x80, 0x0}, 0x4040044) 700.474525ms ago: executing program 3 (id=987): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="2361d647fbf7740e8e9cf31d1f6eeaf68c969bc93cf2d1f70c38ec7e32e0380497ff37436eb3b38928f86643a7ba7b1c8eb0f50f47b12afc3357d09a1832ac10eead0fb0337c455e628f2b2d4b6c8188b1e99cba32ca3e448b7b65c4d6c3876506a65c038e2639de711a59ab62dc8f2b4bef99a15d", 0x75}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2, 0x80805, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007000c00000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)={0x0, @aes128, 0x0, @desc2}) sendto$packet(r2, &(0x7f00000000c0)="a6bea8a120e5f8320c30ce50869c", 0xe, 0x48810, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="e6883490c5fc"}, 0x14) 678.802083ms ago: executing program 3 (id=988): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)={0x38, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xc}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xf8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8801) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) 675.655852ms ago: executing program 1 (id=989): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x402, 0x90) (async) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000006180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0x0, 0x0, {0xf7ffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = fspick(r2, &(0x7f0000000440)='./file0/file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000480)='\x00', &(0x7f00000004c0)='],/-.5/,)*V\x00', 0x0) read$FUSE(r1, &(0x7f0000008180)={0x2020}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x29, 0x2, 0x406001, 0x6, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, 0x7fffffff}}, 0x50) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r4, 0x929, 0x7) (async) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) (async) ioctl$SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, &(0x7f0000000380)) (async) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x1ff, 0x100) ppoll(&(0x7f0000000240), 0x0, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xa5]}, 0x8) 569.995667ms ago: executing program 1 (id=990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000040)=0xbd, &(0x7f0000000180)=0x2) (async) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@iv={0x60, 0x117, 0x2, 0x49, "50895b857450cc27c035c772cf1a3640e2dc0d3c290491542488fbc1b5d6028d7029be95f34230e6f63c0aefd960a5220e37747b24934f4da3a8324f987dadbf808fb22d4d7822d6d4"}], 0x60, 0x8040}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@empty, @empty, @void, {@arp={0x806, @generic={0x304, 0x8906, 0x6, 0x4, 0x3, @broadcast, "ab7309fd", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, "785321db"}}}}, 0x0) recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/93, 0x5d}], 0x1}, 0x2002) clock_getres(0x5, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) (async) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x8, "07bbfe1b9c5ad2888187a9223e00", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{}]}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x40000011) 460.120128ms ago: executing program 1 (id=991): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) sendmsg$kcm(r0, 0x0, 0x40000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth0\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "e55971277418921583c74b99353b9d55d90908b6ea7cafd3188b931053629563", "d2e91e1188a3a6208b5e013818b75a932a2934e7cb5f9bcc53167b323a69eacb", "94d16db71df3a371c4f2294565f888dbc7a32ab04fa38b3c82a67f05ef87e88f", "3e19aa35f2f7b5d3a59b86ed9f130f0574c90f48b2a5c02c6465aebcda9a59f9", "558434d9000000000000000032419ef5e600e100000000000000000000e5ff00", "6b29a0ff0d9f919c93b5a267", 0x10, 0x44, 0x7ffbffff, 0x5, 0x8}}) (async, rerun: 32) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @netrom, @remote, @netrom, @bcast, @rose, @bcast, @null]}, &(0x7f00000000c0)=0x48) (rerun: 32) getpeername$netrom(r3, &(0x7f0000000100)={{0x3, @null}, [@rose, @remote, @default, @bcast, @default, @default, @default, @bcast]}, &(0x7f0000000180)=0x48) 459.554413ms ago: executing program 1 (id=992): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x25dfdbfe, {}, [@CGW_MOD_OR={0x15, 0x2, {{{0x2, 0x1, 0x1}, 0x2, 0x7, 0x0, 0x0, "b90316a140a9f4f2"}, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x64044050}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x1, 0xf3, 0x2, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x31}, 0x700, 0x40, 0x5, 0xdb9a}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', r2, 0x29, 0x4, 0x3, 0x2, 0x4e, @local, @mcast1, 0x10, 0x40, 0x0, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000) epoll_create1(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc040ff0b, &(0x7f0000000180)) write$selinux_validatetrans(r5, 0x0, 0x7b) 268.421789ms ago: executing program 1 (id=993): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x20}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xffffffffffffff25, r0, 0x80000}) sendmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="7578dec2e67e9163241d0974d96ad6a12a30b88b8437cf96f227bce9bfe0d50169be23898eb9f16c955182aeb25e954f68", 0x31}, {&(0x7f00000000c0)="7beb16f2bd", 0x5}, {&(0x7f0000000100)="b17fa66cb354d8cfa8c59819573159887104304daeba9045f2c96c53d67e6bbe9794900700b9bcac16360cedec0a73745e4ea79bfff336e9308b31c6bc8d867d815514fb66c57f444c9b93c8961c6b4725f1b7fe20a5eaedf236af00dee34c302239de2abbc4b39e821bf12fba32424e53a2c24d9473997306838ee8370d8349ec27abd13ec68a1f06f222efcf71acee7fc895ab88cb81724cb9c36af9f8d900cc2624112c7418c00c", 0xa9}, {&(0x7f00000001c0)="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", 0xfd}], 0x4, &(0x7f0000000300)=[{0xa8, 0x112, 0x0, "cf2663ffa735d3d28fb9e32d0c510f7c6d4a4e108e4846c344f51ef3003b746c01bf43cce8babb8b2b92b2bf3dfae96df3b562da0057268c00317f0a4debd1d3111147486c457565360c2a595a13e1a80cf5ff587d355f82c2f8bc491062c0d48a7649210175c42c176d7187f0189a25f48d065d00128c6969f57da40b8111a53f1dea85c9fa3da497b835329352a4e749656507b6514c26"}, {0x50, 0x11, 0x0, "b1a9269dc6769039a3e50c2581f3eefeea1df0686281b18bd3b3f1833792eeb0ef00c12045ea6035ee6f57768178ebecbf2b74ebaa0fe7a95231575457457a"}, {0x60, 0x108, 0x8, "f1b6b60f23b21d138c8638fe1c3f4e606ea16ae42868679a3133e9010707e98eb547f56593375142542f61681621e25ca57ba0c4a9ef73cedcf8c555ca0c301cc9c53f01ff8c07b165bcb82b6779ab"}], 0x158}, 0x1) 267.848621ms ago: executing program 2 (id=994): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) socket$vsock_stream(0x28, 0x1, 0x28) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000100)={0x0, 0x500, &(0x7f0000000740)={&(0x7f0000019140)={0x54, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xffff}, {0x8, 0x15, 0x10}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004809}, 0x20008000) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0xf4, r4, 0x8, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x844}, 0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r7 = socket$kcm(0x10, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xe) open$dir(&(0x7f00000003c0)='./file0\x00', 0x400, 0x113) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 267.475846ms ago: executing program 1 (id=995): r0 = socket$inet(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) r3 = accept4$vsock_stream(r2, 0x0, 0x0, 0x80800) recvfrom$inet_nvme(r2, &(0x7f0000000000)=""/207, 0xcf, 0x0, 0x0, 0x0) readahead(r3, 0x3, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000200)={0x0, 0xc, 0x0, "f934d54fe9691861d45d30b8b4798ec5963606bed2309d47a4eb118c04fe9496", 0x31384142}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xfff6, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x9}]}}]}, 0xac}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000100)=0x1, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205647, &(0x7f0000000000)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0xfffffffc, '\x00', @string=&(0x7f0000000080)=0x11}}) sendto$inet6(r7, 0x0, 0x0, 0x48051, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @empty, 0xfffffffd}, 0x1c) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x1c, r9, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x10) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}}, 0x80) 0s ago: executing program 2 (id=996): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8, 0xffff, 0xc0, 0x1, 0x9d, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x1}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffd, 0x8}) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x102, 0x1cc) sendfile(r5, r5, 0x0, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x60388}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0x0, 0x2, {{0x11, 0x4, 0x3, 0x35, 0x6b, 0x66, 0x0, 0x2, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x42}, {[@rr={0x7, 0x0, 0x78, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @timestamp={0x44, 0x0, 0xee, 0x0, 0x8, [0x2]}, @rr={0x7, 0x13, 0x6, [@broadcast, @rand_addr=0x64010100, @multicast2, @multicast2]}]}}}}}) ioctl$FBIOBLANK(r0, 0x4611, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', r7, 0x10, 0x10, 0x8001, 0x1ff, {{0x2a, 0x4, 0x2, 0x32, 0xa8, 0x68, 0x0, 0x93, 0x29, 0x0, @empty, @multicast1, {[@generic={0x82, 0x3, 'T'}, @timestamp_prespec={0x44, 0x14, 0x48, 0x3, 0x7, [{@loopback, 0xfffffffd}, {@broadcast, 0x3}]}, @timestamp_addr={0x44, 0x3c, 0xbc, 0x1, 0xf, [{@multicast1, 0xa8bb}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@empty, 0x800}, {@private=0xa010100, 0x5}, {@rand_addr=0x64010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x3ff}, {@rand_addr=0x64010102, 0xff}]}, @cipso={0x86, 0x15, 0x3, [{0x5, 0xf, "c8d873f82aee86cfde671bf6db"}]}, @lsrr={0x83, 0x2b, 0x66, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @local, @local, @remote, @dev={0xac, 0x14, 0x14, 0x44}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x36}]}]}}}}}) kernel console output (not intermixed with test programs): has no altsetting 0 [ 73.486018][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.489754][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.495398][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 73.499594][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.504287][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.508910][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 73.513114][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.517401][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.523182][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 73.527430][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.530772][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.534827][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 73.537852][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.541448][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.545428][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 73.548537][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.551853][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.555671][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 73.567127][ T24] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 73.570346][ T24] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 73.573357][ T24] usb 8-1: Product: syz [ 73.574925][ T24] usb 8-1: Manufacturer: syz [ 73.576486][ T24] usb 8-1: SerialNumber: syz [ 73.581479][ T24] usb 8-1: config 0 descriptor?? [ 73.589240][ T24] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 73.801126][ T53] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 73.952812][ T53] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 73.955917][ T53] usb 7-1: config 0 has no interface number 0 [ 73.958172][ T53] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 73.962200][ T53] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 73.965394][ T53] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 73.968496][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.973455][ T53] usb 7-1: config 0 descriptor?? [ 73.979209][ T53] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 74.182170][ T24] usb 7-1: USB disconnect, device number 4 [ 74.456097][ T6502] netlink: 'syz.0.115': attribute type 2 has an invalid length. [ 74.459147][ T6502] netlink: 244 bytes leftover after parsing attributes in process `syz.0.115'. [ 74.621218][ T5977] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.623353][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 74.624111][ T6076] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 74.630300][ T6076] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 74.718495][ T6511] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 74.736559][ T6511] CUSE: unknown device info "&b%ZW)3\my " [ 74.739129][ T6514] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.739360][ T6511] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 74.739375][ T6511] CUSE: DEVNAME unspecified [ 74.930277][ T6537] netlink: 36 bytes leftover after parsing attributes in process `syz.0.126'. [ 74.931487][ T6538] netlink: 36 bytes leftover after parsing attributes in process `syz.0.126'. [ 74.933575][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 74.939130][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 75.161083][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 75.311067][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 75.315273][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 75.317583][ T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 75.321079][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.326271][ T24] usb 7-1: config 0 descriptor?? [ 75.545217][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 75.547313][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 75.562707][ T24] usb 7-1: USB disconnect, device number 5 [ 75.655467][ T6576] capability: warning: `syz.1.136' uses 32-bit capabilities (legacy support in use) [ 75.843934][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803b180000: rx timeout, send abort [ 75.893026][ T1339] usb 8-1: USB disconnect, device number 2 [ 75.920762][ T1339] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 76.281016][ T34] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 76.344543][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803b180800: rx timeout, send abort [ 76.348174][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803b180000: abort rx timeout. Force session deactivation [ 76.452784][ T34] usb 7-1: Invalid ep0 maxpacket: 16 [ 76.462343][ T6636] random: crng reseeded on system resumption [ 76.581401][ T6644] cgroup: Unknown subsys name 'uid' [ 76.600993][ T34] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 76.628059][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.630734][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.642423][ T6655] zonefs (nbd1) ERROR: Not a zoned block device [ 76.656304][ T6657] xfrm0 speed is unknown, defaulting to 1000 [ 76.660240][ T6657] xfrm0 speed is unknown, defaulting to 1000 [ 76.665616][ T6657] xfrm0 speed is unknown, defaulting to 1000 [ 76.673443][ T6657] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 76.683753][ T6657] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 76.701127][ T5977] Bluetooth: hci2: command 0x0c1a tx timeout [ 76.703296][ T6076] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 76.704670][ T6657] xfrm0 speed is unknown, defaulting to 1000 [ 76.705227][ T6076] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 76.715366][ T6657] xfrm0 speed is unknown, defaulting to 1000 [ 76.718611][ T6657] xfrm0 speed is unknown, defaulting to 1000 [ 76.724056][ T6657] xfrm0 speed is unknown, defaulting to 1000 [ 76.771059][ T34] usb 7-1: Invalid ep0 maxpacket: 16 [ 76.772502][ T6663] __nla_validate_parse: 4 callbacks suppressed [ 76.772523][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 76.773183][ T34] usb usb7-port1: attempt power cycle [ 76.816595][ T6663] Bluetooth: MGMT ver 1.23 [ 76.848054][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803b180800: abort rx timeout. Force session deactivation [ 77.121090][ T34] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 77.151507][ T34] usb 7-1: Invalid ep0 maxpacket: 16 [ 77.219350][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 77.219366][ T40] audit: type=1400 audit(1756443716.994:352): avc: denied { write } for pid=6675 comm="syz.3.166" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.229226][ T40] audit: type=1400 audit(1756443716.994:353): avc: denied { map } for pid=6675 comm="syz.3.166" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.291174][ T34] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 77.321948][ T34] usb 7-1: Invalid ep0 maxpacket: 16 [ 77.326384][ T34] usb usb7-port1: unable to enumerate USB device [ 77.366520][ T6679] netlink: 84 bytes leftover after parsing attributes in process `syz.1.167'. [ 77.569651][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 77.672998][ T6693] team0: Port device team_slave_0 removed [ 77.867065][ T40] audit: type=1400 audit(1756443717.644:354): avc: denied { accept } for pid=6699 comm="syz.1.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.951183][ T6705] netlink: 112 bytes leftover after parsing attributes in process `syz.1.173'. [ 78.085684][ T40] audit: type=1400 audit(1756443717.864:355): avc: denied { setopt } for pid=6711 comm="syz.0.175" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.108419][ T40] audit: type=1400 audit(1756443717.884:356): avc: denied { write } for pid=6720 comm="syz.3.177" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 78.153588][ T6724] vivid-007: ================= START STATUS ================= [ 78.156835][ T6724] vivid-007: Enable Output Cropping: true [ 78.158871][ T6724] vivid-007: Enable Output Composing: true [ 78.162699][ T6724] vivid-007: Enable Output Scaler: true [ 78.165526][ T6724] vivid-007: Tx RGB Quantization Range: Automatic [ 78.168036][ T6724] vivid-007: Transmit Mode: HDMI [ 78.169927][ T6724] vivid-007: Hotplug Present: 0x00000000 [ 78.173379][ T6724] vivid-007: RxSense Present: 0x00000000 [ 78.175856][ T6724] vivid-007: EDID Present: 0x00000000 [ 78.177499][ T6724] vivid-007: ================== END STATUS ================== [ 78.178294][ T40] audit: type=1400 audit(1756443717.954:357): avc: denied { ioctl } for pid=6725 comm="syz.1.179" path="socket:[13883]" dev="sockfs" ino=13883 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 78.265006][ T6732] xfrm0 speed is unknown, defaulting to 1000 [ 78.367466][ T6740] [U] v3f"S/4:XTzWtlW= [ 78.369767][ T6740] [U] J"e:" [ 78.782208][ T6076] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 78.782337][ T5977] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.784215][ T6076] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 78.950621][ T40] audit: type=1400 audit(1756443718.724:358): avc: denied { append } for pid=6747 comm="syz.0.187" name="qrtr-tun" dev="devtmpfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.981096][ T40] audit: type=1400 audit(1756443718.754:359): avc: denied { ioctl } for pid=6749 comm="syz.1.188" path="socket:[12081]" dev="sockfs" ino=12081 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 79.047784][ T6754] netlink: 'syz.1.190': attribute type 1 has an invalid length. [ 79.109191][ T40] audit: type=1400 audit(1756443718.884:360): avc: denied { ioctl } for pid=6760 comm="syz.0.194" path="/dev/uhid" dev="devtmpfs" ino=1296 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.140917][ T40] audit: type=1400 audit(1756443718.914:361): avc: denied { accept } for pid=6763 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.142658][ T6764] sctp: Trying to GSO but underlying device doesn't support it. [ 79.276409][ T6777] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6777 comm=syz.1.199 [ 79.283564][ T6777] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6777 comm=syz.1.199 [ 79.298695][ T6776] netlink: 248 bytes leftover after parsing attributes in process `syz.3.200'. [ 79.330049][ T6782] ======================================================= [ 79.330049][ T6782] WARNING: The mand mount option has been deprecated and [ 79.330049][ T6782] and is ignored by this kernel. Remove the mand [ 79.330049][ T6782] option from the mount to silence this warning. [ 79.330049][ T6782] ======================================================= [ 79.372924][ T6782] sctp: [Deprecated]: syz.1.202 (pid 6782) Use of int in max_burst socket option. [ 79.372924][ T6782] Use struct sctp_assoc_value instead [ 79.388232][ T6782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=6782 comm=syz.1.202 [ 79.424141][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.203'. [ 79.440578][ T6771] xfrm0 speed is unknown, defaulting to 1000 [ 79.499082][ T6784] xfrm0 speed is unknown, defaulting to 1000 [ 79.551719][ T6804] Illegal XDP return value 4294967274 on prog (id 21) dev N/A, expect packet loss! [ 79.590381][ T6810] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 79.592896][ T6810] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 79.598972][ T6810] vhci_hcd vhci_hcd.0: Device attached [ 79.603552][ T6804] netlink: 68 bytes leftover after parsing attributes in process `syz.1.206'. [ 79.609645][ T6813] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8) [ 79.611873][ T6813] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.614551][ T6813] vhci_hcd vhci_hcd.0: Device attached [ 79.620618][ T6813] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(13) [ 79.623220][ T6813] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 79.625935][ T6810] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10) [ 79.628311][ T6810] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 79.631258][ T6813] vhci_hcd vhci_hcd.0: Device attached [ 79.631943][ T6810] vhci_hcd vhci_hcd.0: Device attached [ 79.637593][ T6817] vhci_hcd: connection closed [ 79.638234][ T6811] vhci_hcd: connection closed [ 79.639561][ T6814] vhci_hcd: connection closed [ 79.641055][ T6816] vhci_hcd: connection closed [ 79.643835][ T12] vhci_hcd: stop threads [ 79.647516][ T12] vhci_hcd: release socket [ 79.649190][ T12] vhci_hcd: disconnect device [ 79.652526][ T12] vhci_hcd: stop threads [ 79.654328][ T12] vhci_hcd: release socket [ 79.656663][ T12] vhci_hcd: disconnect device [ 79.659380][ T12] vhci_hcd: stop threads [ 79.660767][ T12] vhci_hcd: release socket [ 79.662466][ T12] vhci_hcd: disconnect device [ 79.665012][ T12] vhci_hcd: stop threads [ 79.666438][ T12] vhci_hcd: release socket [ 79.667941][ T12] vhci_hcd: disconnect device [ 79.736904][ T6826] vlan0: entered promiscuous mode [ 79.745968][ T6826] team0: Port device vlan0 added [ 79.750680][ T6826] tipc: Started in network mode [ 79.753329][ T6826] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 79.756923][ T6826] tipc: Enabled bearer , priority 0 [ 79.962775][ T6832] netlink: 'syz.2.213': attribute type 21 has an invalid length. [ 79.968114][ T6832] netlink: 156 bytes leftover after parsing attributes in process `syz.2.213'. [ 80.201097][ T6846] netlink: 'syz.0.217': attribute type 4 has an invalid length. [ 80.475240][ T6873] overlay: Bad value for 'metacopy' [ 80.571651][ T6880] nbd: must specify an index to disconnect [ 80.718954][ T6888] fuse: Bad value for 'fd' [ 80.718954][ T6887] fuse: Bad value for 'fd' [ 80.790958][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 80.875112][ T6081] tipc: Node number set to 11578026 [ 80.921679][ T6900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.927989][ T6900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.098741][ T6906] Can't find a SQUASHFS superblock on nullb0 [ 81.151316][ T839] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 81.303355][ T839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.308838][ T839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.313724][ T839] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 81.318791][ T839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.330837][ T839] usb 6-1: config 0 descriptor?? [ 81.394572][ T6919] ptm ptm27: ldisc open failed (-12), clearing slot 27 [ 81.537639][ T839] usbhid 6-1:0.0: can't add hid device: -71 [ 81.540186][ T839] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 81.547686][ T839] usb 6-1: USB disconnect, device number 2 [ 81.589214][ T6933] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 81.604107][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 81.758976][ T6945] 9pnet_fd: Insufficient options for proto=fd [ 81.794320][ C2] ata1: illegal qc_active transition (00000000->00400000) [ 82.006472][ T6965] usb usb8: usbfs: process 6965 (syz.0.246) did not claim interface 0 before use [ 82.115395][ T1114] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 82.125005][ T1114] ata1.00: configured for UDMA/100 [ 82.261059][ T53] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.404429][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 82.404444][ T40] audit: type=1400 audit(1756443722.184:389): avc: denied { execute } for pid=6979 comm="syz.1.249" path=2F6D656D66643AFD0F6D33232F202864656C6574656429 dev="hugetlbfs" ino=13223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 82.416116][ T40] audit: type=1400 audit(1756443722.184:390): avc: denied { ioctl } for pid=6979 comm="syz.1.249" path="socket:[14168]" dev="sockfs" ino=14168 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 82.435281][ T53] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 82.438919][ T53] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 82.444185][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.449832][ T53] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 82.453971][ T53] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 82.457396][ T53] usb 5-1: Product: syz [ 82.459448][ T53] usb 5-1: Manufacturer: syz [ 82.462590][ T53] usb 5-1: SerialNumber: syz [ 82.466222][ T53] usb 5-1: config 0 descriptor?? [ 82.470083][ T53] hub 5-1:0.0: bad descriptor, ignoring hub [ 82.472734][ T53] hub 5-1:0.0: probe with driver hub failed with error -5 [ 82.477748][ T53] usb 5-1: selecting invalid altsetting 0 [ 82.893118][ T40] audit: type=1400 audit(1756443722.674:391): avc: denied { connect } for pid=6993 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.037163][ T7000] ksmbd: Unknown IPC event: 1, ignore. [ 83.158319][ T40] audit: type=1400 audit(1756443722.934:392): avc: denied { unmount } for pid=5969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 83.183197][ T40] audit: type=1400 audit(1756443722.964:393): avc: denied { name_bind } for pid=7005 comm="syz.1.256" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 83.244270][ T40] audit: type=1400 audit(1756443723.024:394): avc: denied { connect } for pid=7010 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.268563][ T40] audit: type=1400 audit(1756443723.024:395): avc: denied { write } for pid=7010 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.277922][ T40] audit: type=1400 audit(1756443723.034:396): avc: denied { ioctl } for pid=7010 comm="syz.1.257" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 83.315279][ T7016] ufs: You didn't specify the type of your ufs filesystem [ 83.315279][ T7016] [ 83.315279][ T7016] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 83.315279][ T7016] [ 83.315279][ T7016] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 83.328004][ T7016] ufs: ufstype=old is supported read-only [ 83.331859][ T7016] block nbd1: Attempted send on invalid socket [ 83.334548][ T7016] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.373492][ T6965] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 83.536724][ T6965] usb 5-1: device firmware changed [ 83.547994][ T5994] usb 5-1: USB disconnect, device number 3 [ 83.549238][ T7021] comedi: valid board names for 8255 driver are: [ 83.554933][ T7021] 8255 [ 83.556255][ T7021] comedi: valid board names for vmk80xx driver are: [ 83.558649][ T7021] vmk80xx [ 83.559776][ T7021] comedi: valid board names for usbduxsigma driver are: [ 83.562398][ T7021] usbduxsigma [ 83.563514][ T7021] comedi: valid board names for usbduxfast driver are: [ 83.565923][ T7021] usbduxfast [ 83.567244][ T7021] comedi: valid board names for usbdux driver are: [ 83.569447][ T7021] usbdux [ 83.570693][ T7021] comedi: valid board names for ni6501 driver are: [ 83.573660][ T7021] ni6501 [ 83.574884][ T7021] comedi: valid board names for dt9812 driver are: [ 83.577702][ T7021] dt9812 [ 83.578731][ T7021] comedi: valid board names for ni_labpc_cs driver are: [ 83.581043][ T7021] ni_labpc_cs [ 83.582138][ T7021] comedi: valid board names for ni_daq_700 driver are: [ 83.584374][ T7021] ni_daq_700 [ 83.585421][ T7021] comedi: valid board names for labpc_pci driver are: [ 83.589921][ T7021] labpc_pci [ 83.591504][ T7021] comedi: valid board names for adl_pci9118 driver are: [ 83.594463][ T7021] pci9118dg [ 83.595830][ T7021] pci9118hg [ 83.597169][ T7021] pci9118hr [ 83.598611][ T7021] comedi: valid board names for 8255_pci driver are: [ 83.602215][ T7021] 8255_pci [ 83.603533][ T7021] comedi: valid board names for s526 driver are: [ 83.606072][ T7021] s526 [ 83.607251][ T7021] comedi: valid board names for multiq3 driver are: [ 83.610154][ T7021] multiq3 [ 83.612212][ T7021] comedi: valid board names for pcmuio driver are: [ 83.615452][ T7021] pcmuio48 [ 83.616791][ T7021] pcmuio96 [ 83.618189][ T7021] comedi: valid board names for pcmmio driver are: [ 83.621036][ T7021] pcmmio [ 83.622228][ T7021] comedi: valid board names for pcmda12 driver are: [ 83.624698][ T7021] pcmda12 [ 83.625776][ T7021] comedi: valid board names for pcmad driver are: [ 83.628152][ T7021] pcmad12 [ 83.629215][ T7021] pcmad16 [ 83.630322][ T7021] comedi: valid board names for ni_labpc driver are: [ 83.633182][ T7021] lab-pc-1200 [ 83.634692][ T7021] lab-pc-1200ai [ 83.636283][ T7021] lab-pc+ [ 83.637594][ T7021] comedi: valid board names for atmio16 driver are: [ 83.640537][ T7021] atmio16 [ 83.641977][ T7021] atmio16d [ 83.643291][ T7021] comedi: valid board names for ni_at_ao driver are: [ 83.645998][ T7021] at-ao-6 [ 83.647254][ T7021] at-ao-10 [ 83.648612][ T7021] comedi: valid board names for ni_at_a2150 driver are: [ 83.654369][ T7021] ni_at_a2150 [ 83.656380][ T7021] comedi: valid board names for adq12b driver are: [ 83.659525][ T7021] adq12b [ 83.660979][ T7021] comedi: valid board names for mpc624 driver are: [ 83.663636][ T7021] mpc624 [ 83.665046][ T7021] comedi: valid board names for c6xdigio driver are: [ 83.667993][ T7021] c6xdigio [ 83.669494][ T7021] comedi: valid board names for aio_iiro_16 driver are: [ 83.673809][ T7021] aio_iiro_16 [ 83.675463][ T7021] comedi: valid board names for aio_aio12_8 driver are: [ 83.679753][ T7021] aio_aio12_8 [ 83.682216][ T7021] aio_ai12_8 [ 83.683670][ T7021] aio_ao12_4 [ 83.685329][ T7021] comedi: valid board names for fl512 driver are: [ 83.687962][ T7021] fl512 [ 83.689434][ T7021] comedi: valid board names for dmm32at driver are: [ 83.693116][ T7021] dmm32at [ 83.694094][ T5994] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 83.694755][ T7021] comedi: valid board names for dt282x driver are: [ 83.700712][ T7021] dt2821 [ 83.702069][ T7021] dt2821-f [ 83.703388][ T7021] dt2821-g [ 83.704889][ T7021] dt2823 [ 83.706297][ T7021] dt2824-pgh [ 83.707791][ T7021] dt2824-pgl [ 83.709224][ T7021] dt2825 [ 83.710483][ T7021] dt2827 [ 83.712106][ T7021] dt2828 [ 83.713748][ T7021] dt2829 [ 83.714991][ T7021] dt21-ez [ 83.716296][ T7021] dt23-ez [ 83.717711][ T7021] dt24-ez [ 83.719008][ T7021] dt24-ez-pgl [ 83.720438][ T7021] comedi: valid board names for dt2817 driver are: [ 83.724025][ T7021] dt2817 [ 83.725415][ T7021] comedi: valid board names for dt2815 driver are: [ 83.728823][ T7021] dt2815 [ 83.730551][ T7021] comedi: valid board names for dt2814 driver are: [ 83.734254][ T7021] dt2814 [ 83.735703][ T7021] comedi: valid board names for dt2811 driver are: [ 83.738524][ T7021] dt2811-pgh [ 83.739983][ T7021] dt2811-pgl [ 83.741752][ T7021] comedi: valid board names for dt2801 driver are: [ 83.744541][ T7021] dt2801 [ 83.745991][ T7021] comedi: valid board names for das6402 driver are: [ 83.749272][ T7021] das6402-12 [ 83.751151][ T7021] das6402-16 [ 83.752745][ T7021] comedi: valid board names for das1800 driver are: [ 83.755640][ T7021] das-1701st [ 83.757067][ T7021] das-1701st-da [ 83.758647][ T7021] das-1702st [ 83.760113][ T7021] das-1702st-da [ 83.761831][ T7021] das-1702hr [ 83.763288][ T7021] das-1702hr-da [ 83.765376][ T7021] das-1701ao [ 83.767283][ T7021] das-1702ao [ 83.769325][ T7021] das-1801st [ 83.771853][ T7021] das-1801st-da [ 83.773500][ T7021] das-1802st [ 83.774985][ T7021] das-1802st-da [ 83.776620][ T7021] das-1802hr [ 83.778122][ T7021] das-1802hr-da [ 83.779959][ T7021] das-1801hc [ 83.781716][ T7021] das-1802hc [ 83.783452][ T7021] das-1801ao [ 83.785078][ T7021] das-1802ao [ 83.786782][ T7021] comedi: valid board names for das800 driver are: [ 83.790019][ T7021] das-800 [ 83.791825][ T7021] cio-das800 [ 83.793423][ T7021] das-801 [ 83.794928][ T7021] cio-das801 [ 83.796858][ T7021] das-802 [ 83.798382][ T7021] cio-das802 [ 83.799924][ T7021] cio-das802/16 [ 83.801685][ T7021] comedi: valid board names for isa-das08 driver are: [ 83.804048][ T7021] isa-das08 [ 83.805094][ T7021] das08-pgm [ 83.806260][ T7021] das08-pgh [ 83.807320][ T7021] das08-pgl [ 83.808445][ T7021] das08-aoh [ 83.809912][ T7021] das08-aol [ 83.811103][ T7021] das08-aom [ 83.812356][ T7021] das08/jr-ao [ 83.813461][ T7021] das08jr-16-ao [ 83.814705][ T7021] pc104-das08 [ 83.815845][ T7021] das08jr/16 [ 83.817163][ T7021] comedi: valid board names for das16m1 driver are: [ 83.819571][ T7021] das16m1 [ 83.821045][ T7021] comedi: valid board names for dac02 driver are: [ 83.823125][ T7021] dac02 [ 83.824239][ T7021] comedi: valid board names for rti802 driver are: [ 83.826383][ T7021] rti802 [ 83.827537][ T7021] comedi: valid board names for rti800 driver are: [ 83.829643][ T7021] rti800 [ 83.830569][ T7021] rti815 [ 83.831587][ T7021] comedi: valid board names for pcm3724 driver are: [ 83.833587][ T7021] pcm3724 [ 83.834558][ T7021] comedi: valid board names for pcl818 driver are: [ 83.836720][ T7021] pcl818l [ 83.837766][ T7021] pcl818h [ 83.838749][ T7021] pcl818hd [ 83.839749][ T7021] pcl818hg [ 83.840822][ T7021] pcl818 [ 83.841903][ T7021] pcl718 [ 83.842889][ T7021] pcm3718 [ 83.844136][ T7021] comedi: valid board names for pcl816 driver are: [ 83.846493][ T7021] pcl816 [ 83.847653][ T7021] pcl814b [ 83.848639][ T7021] comedi: valid board names for pcl812 driver are: [ 83.851138][ T7021] pcl812 [ 83.852120][ T7021] pcl812pg [ 83.853140][ T7021] acl8112pg [ 83.854059][ T5994] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 83.854299][ T7021] acl8112dg [ 83.857181][ T5994] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 83.858434][ T7021] acl8112hg [ 83.858445][ T7021] a821pgl [ 83.864063][ T5994] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.865104][ T7021] a821pglnda [ 83.868774][ T5994] usb 5-1: string descriptor 0 read error: -22 [ 83.869898][ T7021] a821pgh [ 83.872508][ T5994] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 83.873369][ T7021] a822pgl [ 83.877109][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 83.878404][ T7021] a822pgh [ 83.878413][ T7021] a823pgl [ 83.878417][ T7021] a823pgh [ 83.883767][ T5994] usb 5-1: config 0 descriptor?? [ 83.884367][ T7021] pcl813 [ 83.887088][ T5994] hub 5-1:0.0: bad descriptor, ignoring hub [ 83.888147][ T7021] pcl813b [ 83.888154][ T7021] acl8113 [ 83.888158][ T7021] iso813 [ 83.890242][ T5994] hub 5-1:0.0: probe with driver hub failed with error -5 [ 83.891887][ T7021] acl8216 [ 83.891900][ T7021] a826pg [ 83.891911][ T7021] comedi: valid board names for pcl730 driver are: [ 83.895366][ T5994] usb 5-1: selecting invalid altsetting 0 [ 83.896643][ T7021] pcl730 [ 83.904972][ T7021] iso730 [ 83.906028][ T7021] acl7130 [ 83.907207][ T7021] pcm3730 [ 83.908428][ T7021] pcl725 [ 83.909583][ T7021] p8r8dio [ 83.910730][ T7021] acl7225b [ 83.912231][ T7021] p16r16dio [ 83.913532][ T7021] pcl733 [ 83.914593][ T7021] pcl734 [ 83.915889][ T7021] opmm-1616-xt [ 83.917097][ T7021] pearl-mm-p [ 83.918168][ T7021] ir104-pbf [ 83.919288][ T7021] comedi: valid board names for pcl726 driver are: [ 83.921677][ T7021] pcl726 [ 83.922888][ T7021] pcl727 [ 83.924135][ T7021] pcl728 [ 83.925384][ T7021] acl6126 [ 83.927297][ T7021] acl6128 [ 83.928721][ T7021] comedi: valid board names for pcl724 driver are: [ 83.931530][ T7021] pcl724 [ 83.932791][ T7021] pcl722 [ 83.933997][ T7021] pcl731 [ 83.935219][ T7021] acl7122 [ 83.936529][ T7021] acl7124 [ 83.937881][ T7021] pet48dio [ 83.939466][ T7021] pcmio48 [ 83.941662][ T7021] onyx-mm-dio [ 83.943086][ T7021] comedi: valid board names for pcl711 driver are: [ 83.945880][ T7021] pcl711 [ 83.947098][ T7021] pcl711b [ 83.948518][ T7021] acl8112hg [ 83.950167][ T7021] acl8112dg [ 83.951460][ T7021] comedi: valid board names for amplc_pc263 driver are: [ 83.953564][ T7021] pc263 [ 83.954608][ T7021] comedi: valid board names for amplc_pc236 driver are: [ 83.957093][ T7021] pc36at [ 83.958362][ T7021] comedi: valid board names for amplc_dio200 driver are: [ 83.961713][ T7021] pc212e [ 83.962978][ T7021] pc214e [ 83.964318][ T7021] pc215e [ 83.965343][ T7021] pc218e [ 83.966357][ T7021] pc272e [ 83.967323][ T7021] comedi: valid board names for comedi_parport driver are: [ 83.969844][ T7021] comedi_parport [ 83.971241][ T7021] comedi: valid board names for comedi_test driver are: [ 83.974225][ T7021] comedi_test [ 83.975459][ T7021] comedi: valid board names for comedi_bond driver are: [ 83.977572][ T7021] comedi_bond [ 84.022076][ T7029] netlink: 'syz.2.264': attribute type 1 has an invalid length. [ 84.049887][ T7029] bond2: (slave geneve2): making interface the new active one [ 84.053429][ T7029] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 84.056477][ T1148] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 84.060344][ T1148] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 84.065161][ T1148] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 84.070392][ T1148] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 84.098734][ T40] audit: type=1400 audit(1756443723.874:397): avc: denied { ioctl } for pid=7031 comm="syz.2.265" path="socket:[16482]" dev="sockfs" ino=16482 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.111087][ T40] audit: type=1400 audit(1756443723.874:398): avc: denied { getopt } for pid=7031 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.191328][ T54] usb 5-1: USB disconnect, device number 4 [ 84.295610][ T7039] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.636214][ T7070] dlm: non-version read from control device 0 [ 84.646477][ T7070] netlink: 64 bytes leftover after parsing attributes in process `syz.2.275'. [ 84.705857][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'. [ 84.821907][ T7084] netlink: 10 bytes leftover after parsing attributes in process `syz.1.279'. [ 84.825649][ T7085] netlink: 10 bytes leftover after parsing attributes in process `syz.1.279'. [ 84.850149][ T7086] netlink: 168 bytes leftover after parsing attributes in process `syz.0.280'. [ 85.198101][ T7090] netlink: 'syz.3.281': attribute type 1 has an invalid length. [ 85.225640][ T7089] veth3: entered promiscuous mode [ 85.235843][ T7090] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 85.273658][ T7095] xfrm0: mtu greater than device maximum [ 85.417761][ T7110] block nbd2: shutting down sockets [ 85.701078][ T5994] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 85.829205][ T7141] NILFS (loop3): device size too small [ 85.871016][ T5994] usb 7-1: Invalid ep0 maxpacket: 16 [ 86.013602][ T5994] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 86.082317][ T24] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 86.093407][ T7154] netlink: 96 bytes leftover after parsing attributes in process `syz.0.300'. [ 86.098316][ T7153] netlink: 96 bytes leftover after parsing attributes in process `syz.0.300'. [ 86.171035][ T5994] usb 7-1: Invalid ep0 maxpacket: 16 [ 86.173247][ T5994] usb usb7-port1: attempt power cycle [ 86.236002][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.251215][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.265048][ T24] usb 8-1: New USB device found, idVendor=0868, idProduct=1001, bcdDevice=68.1b [ 86.265075][ T24] usb 8-1: New USB device strings: Mfr=148, Product=249, SerialNumber=3 [ 86.265093][ T24] usb 8-1: Product: syz [ 86.265105][ T24] usb 8-1: Manufacturer: syz [ 86.265144][ T24] usb 8-1: SerialNumber: syz [ 86.267557][ T24] usb 8-1: config 0 descriptor?? [ 86.407678][ T7176] netlink: 'syz.1.308': attribute type 13 has an invalid length. [ 86.541181][ T5994] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 86.551905][ T53] usb 8-1: USB disconnect, device number 3 [ 86.563149][ T5994] usb 7-1: Invalid ep0 maxpacket: 16 [ 86.701984][ T5994] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 86.721907][ T5994] usb 7-1: Invalid ep0 maxpacket: 16 [ 86.725012][ T5994] usb usb7-port1: unable to enumerate USB device [ 86.871998][ T1332] cfg80211: failed to load regulatory.db [ 86.944977][ T7203] batadv_slave_1: entered promiscuous mode [ 87.107684][ T7217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.322'. [ 87.129560][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'. [ 87.156844][ T7224] program syz.3.325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.162341][ T7224] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 87.168242][ T7224] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 87.246941][ T7229] netlink: 'syz.3.326': attribute type 7 has an invalid length. [ 87.268060][ T7229] : entered promiscuous mode [ 87.297301][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 87.338641][ T7240] netlink: 'syz.0.331': attribute type 5 has an invalid length. [ 87.339823][ T7235] max out of range [ 87.412792][ T40] kauditd_printk_skb: 89 callbacks suppressed [ 87.412808][ T40] audit: type=1400 audit(1756443727.184:488): avc: denied { read } for pid=7244 comm="syz.1.333" name="file1" dev="9p" ino=35913838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.426829][ T40] audit: type=1400 audit(1756443727.194:489): avc: denied { open } for pid=7244 comm="syz.1.333" path="/102/file0/file1" dev="9p" ino=35913838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.437033][ T40] audit: type=1400 audit(1756443727.204:490): avc: denied { unmount } for pid=7244 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 87.444867][ T40] audit: type=1400 audit(1756443727.204:491): avc: denied { write } for pid=7244 comm="syz.1.333" path="socket:[17515]" dev="sockfs" ino=17515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.529224][ T7248] 9pnet: Found fid 0 not clunked [ 87.576869][ T40] audit: type=1400 audit(1756443727.354:492): avc: denied { read } for pid=7242 comm="syz.0.332" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.586823][ T40] audit: type=1400 audit(1756443727.354:493): avc: denied { open } for pid=7242 comm="syz.0.332" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.600392][ T40] audit: type=1400 audit(1756443727.354:494): avc: denied { ioctl } for pid=7242 comm="syz.0.332" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.642985][ T7255] team0: Device vlan2 is already an upper device of the team interface [ 87.755223][ T40] audit: type=1326 audit(1756443727.534:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7260 comm="syz.1.336" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc437b8ebe9 code=0x0 [ 87.766075][ T40] audit: type=1400 audit(1756443727.544:496): avc: denied { create } for pid=7262 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 87.776706][ T40] audit: type=1400 audit(1756443727.544:497): avc: denied { bind } for pid=7262 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 87.860327][ T7268] netlink: 'syz.0.339': attribute type 12 has an invalid length. [ 87.935350][ T7270] random: crng reseeded on system resumption [ 88.078241][ T7277] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 88.194441][ T7284] kvm: user requested TSC rate below hardware speed [ 88.713577][ T6859] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 88.721336][ T7327] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 88.799646][ T7339] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 89.053806][ T7356] netlink: 'syz.2.368': attribute type 14 has an invalid length. [ 89.080108][ T7358] new mount options do not match the existing superblock, will be ignored [ 89.126354][ T7360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=7360 comm=syz.2.370 [ 89.182264][ T7366] fuseblk: Bad value for 'fd' [ 89.383032][ T7373] 8021q: adding VLAN 0 to HW filter on device bond3 [ 89.694446][ T7393] __nla_validate_parse: 6 callbacks suppressed [ 89.694460][ T7393] netlink: 196 bytes leftover after parsing attributes in process `syz.2.380'. [ 89.703716][ T7393] netlink: 196 bytes leftover after parsing attributes in process `syz.2.380'. [ 89.707580][ T7393] netlink: 19 bytes leftover after parsing attributes in process `syz.2.380'. [ 90.172990][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'. [ 90.256614][ T7439] team0: Port device vlan0 removed [ 90.611020][ T839] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 90.761100][ T839] usb 5-1: Using ep0 maxpacket: 32 [ 90.808549][ T7451] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.397'. [ 90.869585][ T839] usb 5-1: unable to get BOS descriptor or descriptor too short [ 90.872432][ T839] usb 5-1: too many configurations: 45, using maximum allowed: 8 [ 90.876449][ T839] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 90.879041][ T839] usb 5-1: can't read configurations, error -71 [ 90.891733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.966182][ T7469] overlayfs: maximum fs stacking depth exceeded [ 91.011894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 91.026371][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'. [ 91.029816][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'. [ 91.036886][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'. [ 91.040614][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'. [ 91.051231][ T6081] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 91.094473][ T7481] overlayfs: statfs failed on './file0' [ 91.204846][ T6081] usb 7-1: config 2 has an invalid interface number: 5 but max is 0 [ 91.208364][ T6081] usb 7-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 91.216680][ T6081] usb 7-1: config 2 has no interface number 0 [ 91.220309][ T6081] usb 7-1: config 2 interface 5 altsetting 236 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 91.224113][ T6081] usb 7-1: config 2 interface 5 altsetting 236 has a duplicate endpoint with address 0x6, skipping [ 91.227896][ T6081] usb 7-1: config 2 interface 5 altsetting 236 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 91.231672][ T6081] usb 7-1: config 2 interface 5 altsetting 236 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 91.235219][ T6081] usb 7-1: config 2 interface 5 altsetting 236 has an invalid descriptor for endpoint zero, skipping [ 91.238883][ T6081] usb 7-1: config 2 interface 5 has no altsetting 0 [ 91.244277][ T6081] usb 7-1: New USB device found, idVendor=19d2, idProduct=1270, bcdDevice=1f.64 [ 91.247192][ T6081] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.249688][ T6081] usb 7-1: Product: syz [ 91.251174][ T6081] usb 7-1: Manufacturer: 摋 [ 91.253192][ T6081] usb 7-1: SerialNumber: syz [ 91.305139][ T7525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=114 sclass=netlink_audit_socket pid=7525 comm=syz.1.407 [ 91.445286][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'. [ 91.450503][ T7530] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.471804][ T7467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.477883][ T7467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.526550][ T6081] usb 7-1: USB disconnect, device number 14 [ 91.723556][ T7557] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 91.800696][ T7559] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 91.808978][ T7559] libceph: resolve '40' (ret=-3): failed [ 91.855673][ T7559] xfrm0 speed is unknown, defaulting to 1000 [ 91.940399][ T7569] vivid-002: ================= START STATUS ================= [ 91.945468][ T7569] vivid-002: Radio HW Seek Mode: Bounded [ 91.947397][ T7569] vivid-002: Radio Programmable HW Seek: false [ 91.950542][ T7569] vivid-002: RDS Rx I/O Mode: Block I/O [ 91.952533][ T7569] vivid-002: Generate RBDS Instead of RDS: false [ 91.954535][ T7569] vivid-002: RDS Reception: true [ 91.956143][ T7569] vivid-002: RDS Program Type: 0 inactive [ 91.958090][ T7569] vivid-002: RDS PS Name: inactive [ 91.960146][ T7569] vivid-002: RDS Radio Text: inactive [ 91.963754][ T7569] vivid-002: RDS Traffic Announcement: false inactive [ 91.966703][ T7569] vivid-002: RDS Traffic Program: false inactive [ 91.969003][ T7569] vivid-002: RDS Music: false inactive [ 91.971035][ T7569] vivid-002: ================== END STATUS ================== [ 92.135209][ T7595] ip6gretap1: entered promiscuous mode [ 92.137945][ T7595] ip6gretap1: entered allmulticast mode [ 92.178760][ T7598] fuse: blksize only supported for fuseblk [ 92.189427][ T7603] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7603 comm=syz.2.430 [ 92.197882][ T7604] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 92.202382][ T7603] IPVS: stopping backup sync thread 7604 ... [ 92.218130][ T7606] usb usb8: usbfs: process 7606 (syz.1.432) did not claim interface 0 before use [ 92.389531][ T7623] 8021q: adding VLAN 0 to HW filter on device bond4 [ 92.430296][ T40] kauditd_printk_skb: 126 callbacks suppressed [ 92.430312][ T40] audit: type=1400 audit(1756443732.204:624): avc: denied { mount } for pid=7626 comm="syz.1.436" name="/" dev="autofs" ino=16317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 92.442502][ T40] audit: type=1400 audit(1756443732.214:625): avc: denied { read } for pid=7626 comm="syz.1.436" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 92.449486][ T40] audit: type=1400 audit(1756443732.214:626): avc: denied { open } for pid=7626 comm="syz.1.436" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 92.457073][ T40] audit: type=1400 audit(1756443732.214:627): avc: denied { ioctl } for pid=7626 comm="syz.1.436" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 92.467052][ T40] audit: type=1400 audit(1756443732.234:628): avc: denied { unmount } for pid=5969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 92.716959][ T40] audit: type=1400 audit(1756443732.494:629): avc: denied { setopt } for pid=7642 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.933955][ T7649] could not allocate digest TFM handle hmac(sha384-neon) [ 92.941078][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 92.977959][ T40] audit: type=1400 audit(1756443732.754:630): avc: denied { ioctl } for pid=7644 comm="syz.0.443" path="socket:[16334]" dev="sockfs" ino=16334 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.995217][ T7658] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 93.021138][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 93.111927][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 93.119097][ T24] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 93.124032][ T24] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 93.126863][ T24] usb 6-1: Product: syz [ 93.128281][ T24] usb 6-1: Manufacturer: syz [ 93.129804][ T24] usb 6-1: SerialNumber: syz [ 93.134028][ T24] usb 6-1: config 0 descriptor?? [ 93.232643][ T40] audit: type=1400 audit(1756443733.014:631): avc: denied { append } for pid=7668 comm="syz.2.450" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 93.240708][ T40] audit: type=1400 audit(1756443733.014:632): avc: denied { connect } for pid=7668 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.249326][ T40] audit: type=1400 audit(1756443733.014:633): avc: denied { accept } for pid=7668 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.372187][ T54] usb 6-1: USB disconnect, device number 3 [ 93.509795][ T7691] fuse: Bad value for 'fd' [ 93.902606][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.181237][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 94.333506][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.336423][ T10] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 94.340221][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.344257][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 94.352176][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 94.359053][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.362162][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.364887][ T10] usb 6-1: Product: syz [ 94.366483][ T10] usb 6-1: Manufacturer: syz [ 94.380201][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 94.383068][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 94.387522][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 94.389551][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 94.603127][ T7724] Can't find a SQUASHFS superblock on nullb0 [ 94.901707][ T7755] netlink: 'syz.0.478': attribute type 11 has an invalid length. [ 94.998700][ T7770] netlink: 'syz.3.482': attribute type 4 has an invalid length. [ 95.172504][ T24] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 95.219469][ T7782] 9p filesystem being mounted at /102/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 95.227693][ T839] usb 6-1: USB disconnect, device number 4 [ 95.283415][ T7783] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 95.324052][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 95.326792][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 95.331461][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.336569][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 95.342237][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 95.348094][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 95.351309][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 95.357015][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.361996][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 95.366528][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 95.372483][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 95.376231][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 95.381142][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.385877][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 95.389755][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 95.398111][ T24] usb 7-1: string descriptor 0 read error: -22 [ 95.400946][ T24] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 95.404774][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.419350][ T24] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 95.773474][ T7786] 9pnet_virtio: no channels available for device syz [ 95.927667][ T7793] ubi0: attaching mtd0 [ 95.930705][ T7793] ubi0 error: ubi_attach_mtd_dev: bad VID header (37978) or data offsets (38042) [ 95.993031][ T7799] program syz.0.490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.403003][ T7841] mmap: syz.1.503 (7841) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.538261][ T7845] __nla_validate_parse: 2 callbacks suppressed [ 96.538276][ T7845] netlink: 32 bytes leftover after parsing attributes in process `syz.3.504'. [ 96.545970][ T7845] netlink: 32 bytes leftover after parsing attributes in process `syz.3.504'. [ 96.579118][ T7845] team0: Device veth1_vlan is up. Set it down before adding it as a team port [ 96.718950][ T7853] input: syz1 as /devices/virtual/input/input7 [ 96.778539][ T7858] random: crng reseeded on system resumption [ 96.790764][ T7857] netlink: 'syz.1.507': attribute type 7 has an invalid length. [ 96.803094][ T7857] : entered promiscuous mode [ 97.710758][ T7872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.513'. [ 97.953555][ T839] usb 7-1: USB disconnect, device number 15 [ 97.981404][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 97.981427][ T40] audit: type=1400 audit(3512887727.756:691): avc: denied { create } for pid=7874 comm="syz.2.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 97.995816][ T40] audit: type=1400 audit(3512887727.766:692): avc: denied { bind } for pid=7874 comm="syz.2.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 98.060829][ T7883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.518'. [ 98.108650][ T7888] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7888 comm=syz.2.517 [ 98.387273][ T7913] 9p filesystem being mounted at /120/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 98.394420][ T40] audit: type=1400 audit(3512887728.176:693): avc: denied { add_name } for pid=7912 comm="syz.2.525" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.402480][ T40] audit: type=1400 audit(3512887728.176:694): avc: denied { create } for pid=7912 comm="syz.2.525" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 98.410298][ T40] audit: type=1400 audit(3512887728.176:695): avc: denied { associate } for pid=7912 comm="syz.2.525" name="cpuacct.usage_sys" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 98.417996][ T40] audit: type=1400 audit(3512887728.186:696): avc: denied { append } for pid=7912 comm="syz.2.525" path="/120/file0/cpuacct.usage_sys" dev="9p" ino=35913970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.426027][ T40] audit: type=1400 audit(3512887728.186:697): avc: denied { lock } for pid=7912 comm="syz.2.525" path="/120/file0/cpuacct.usage_sys" dev="9p" ino=35913970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.436057][ T40] audit: type=1400 audit(3512887728.186:698): avc: denied { mounton } for pid=7912 comm="syz.2.525" path="/120/file0/file0" dev="9p" ino=35913830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.443566][ T40] audit: type=1400 audit(3512887728.196:699): avc: denied { mount } for pid=7912 comm="syz.2.525" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 98.450750][ T40] audit: type=1400 audit(3512887728.226:700): avc: denied { mount } for pid=7914 comm="syz.3.526" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 98.633635][ T7922] kvm: pic: non byte read [ 98.638316][ T7922] kvm: pic: level sensitive irq not supported [ 98.638726][ T7922] kvm: pic: non byte read [ 98.645746][ T7922] kvm: pic: level sensitive irq not supported [ 98.646079][ T7922] kvm: pic: non byte read [ 98.651991][ T7922] kvm: pic: level sensitive irq not supported [ 98.652317][ T7922] kvm: pic: non byte read [ 98.658928][ T7922] kvm: pic: level sensitive irq not supported [ 98.659290][ T7922] kvm: pic: non byte read [ 98.667269][ T7922] kvm: pic: level sensitive irq not supported [ 98.667738][ T7922] kvm: pic: non byte read [ 98.676713][ T7922] kvm: pic: level sensitive irq not supported [ 98.677165][ T7922] kvm: pic: non byte read [ 98.683087][ T7922] kvm: pic: level sensitive irq not supported [ 98.687302][ T7922] kvm: pic: non byte read [ 98.693970][ T7922] kvm: pic: level sensitive irq not supported [ 98.694363][ T7922] kvm: pic: non byte read [ 98.797756][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 98.800846][ T7934] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 98.803758][ T7934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.919666][ T7938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=7938 comm=syz.2.532 [ 98.955192][ T7944] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 98.980518][ T7946] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 99.068531][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 99.072570][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.537'. [ 99.075892][ T7948] netlink: 'syz.3.537': attribute type 6 has an invalid length. [ 99.089575][ T7953] usb usb8: usbfs: process 7953 (syz.2.539) did not claim interface 0 before use [ 99.099780][ T7953] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 99.398570][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 99.401512][ T7969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.543'. [ 99.404461][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 99.482992][ T7976] capability: warning: `syz.2.545' uses deprecated v2 capabilities in a way that may be insecure [ 99.492427][ T839] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 99.493117][ T7977] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 99.672359][ T839] usb 8-1: not running at top speed; connect to a high speed hub [ 99.677378][ T839] usb 8-1: config 9 has an invalid interface number: 201 but max is 3 [ 99.682015][ T839] usb 8-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 99.685800][ T839] usb 8-1: config 9 has an invalid interface number: 44 but max is 3 [ 99.689522][ T839] usb 8-1: config 9 has 2 interfaces, different from the descriptor's value: 4 [ 99.694179][ T839] usb 8-1: config 9 has no interface number 0 [ 99.696685][ T839] usb 8-1: config 9 has no interface number 1 [ 99.699963][ T839] usb 8-1: config 9 interface 201 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 99.705814][ T839] usb 8-1: config 9 interface 201 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 99.711572][ T839] usb 8-1: config 9 interface 201 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.716016][ T839] usb 8-1: config 9 interface 44 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 99.721357][ T839] usb 8-1: config 9 interface 44 altsetting 1 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 99.726587][ T839] usb 8-1: config 9 interface 44 altsetting 1 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 99.731637][ T839] usb 8-1: config 9 interface 44 altsetting 1 endpoint 0xA has invalid maxpacket 2047, setting to 64 [ 99.737600][ T839] usb 8-1: config 9 interface 44 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 99.742893][ T839] usb 8-1: config 9 interface 44 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 99.747912][ T839] usb 8-1: config 9 interface 44 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 99.752668][ T839] usb 8-1: config 9 interface 44 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 99.757802][ T839] usb 8-1: config 9 interface 44 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 99.762354][ T839] usb 8-1: config 9 interface 44 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 99.767308][ T839] usb 8-1: config 9 interface 201 has no altsetting 0 [ 99.770977][ T839] usb 8-1: config 9 interface 44 has no altsetting 0 [ 99.778480][ T839] usb 8-1: New USB device found, idVendor=19d2, idProduct=0015, bcdDevice=1e.99 [ 99.783637][ T839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.789958][ T839] usb 8-1: Product: 戲˅牨셻앚쌕倮揼䢳ꀐ衖⨏庉 [ 99.789983][ T839] usb 8-1: Manufacturer: 〉 [ 99.789998][ T839] usb 8-1: SerialNumber: ⠊ [ 100.022053][ T839] option 8-1:9.201: GSM modem (1-port) converter detected [ 100.045177][ T839] usb 8-1: USB disconnect, device number 4 [ 100.049573][ T839] option 8-1:9.201: device disconnected [ 101.020985][ T5977] Bluetooth: hci0: command tx timeout [ 101.406826][ T8047] kvm: emulating exchange as write [ 101.551043][ T6081] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 101.596357][ T8056] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 101.713660][ T6081] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.718875][ T6081] usb 7-1: config 0 has no interfaces? [ 101.724106][ T6081] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 101.727958][ T6081] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.732077][ T6081] usb 7-1: Product: syz [ 101.734855][ T6081] usb 7-1: Manufacturer: syz [ 101.737113][ T6081] usb 7-1: SerialNumber: syz [ 101.741193][ T6081] usb 7-1: config 0 descriptor?? [ 102.146924][ T8072] __nla_validate_parse: 4 callbacks suppressed [ 102.146946][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.572'. [ 102.178544][ T840] usb 7-1: USB disconnect, device number 16 [ 102.206978][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.572'. [ 102.211999][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.572'. [ 102.216785][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.572'. [ 102.223725][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 102.228032][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.572'. [ 102.233415][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.572'. [ 102.237852][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.572'. [ 102.241370][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.572'. [ 102.244575][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.572'. [ 102.247976][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.572'. [ 102.510148][ T8085] syz.3.575: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 102.521065][ T8085] CPU: 1 UID: 0 PID: 8085 Comm: syz.3.575 Not tainted syzkaller #0 PREEMPT(full) [ 102.521090][ T8085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.521101][ T8085] Call Trace: [ 102.521107][ T8085] [ 102.521114][ T8085] dump_stack_lvl+0x16c/0x1f0 [ 102.521164][ T8085] warn_alloc+0x248/0x3a0 [ 102.521193][ T8085] ? __pfx_warn_alloc+0x10/0x10 [ 102.521218][ T8085] ? __vcalloc_noprof+0x4d/0x80 [ 102.521236][ T8085] ? __vmalloc_node_noprof+0xad/0xf0 [ 102.521264][ T8085] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 102.521289][ T8085] ? __pfx___mutex_trylock_common+0x10/0x10 [ 102.521322][ T8085] ? __vcalloc_noprof+0x4d/0x80 [ 102.521348][ T8085] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 102.521372][ T8085] ? __pfx___mutex_lock+0x10/0x10 [ 102.521407][ T8085] ? __vcalloc_noprof+0x4d/0x80 [ 102.521425][ T8085] __vmalloc_node_noprof+0xad/0xf0 [ 102.521450][ T8085] ? __vcalloc_noprof+0x4d/0x80 [ 102.521473][ T8085] __vcalloc_noprof+0x4d/0x80 [ 102.521493][ T8085] kvm_set_memslot+0xee3/0x1380 [ 102.521520][ T8085] ? kasan_save_track+0x14/0x30 [ 102.521540][ T8085] kvm_set_memory_region+0xebc/0x1680 [ 102.521575][ T8085] ? __pfx_kvm_set_memory_region+0x10/0x10 [ 102.521607][ T8085] kvm_vm_ioctl+0x151b/0x4000 [ 102.521635][ T8085] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 102.521676][ T8085] ? kasan_quarantine_put+0x10a/0x240 [ 102.521693][ T8085] ? lockdep_hardirqs_on+0x7c/0x110 [ 102.521716][ T8085] ? find_held_lock+0x2b/0x80 [ 102.521738][ T8085] ? tomoyo_path_number_perm+0x295/0x580 [ 102.521766][ T8085] ? tomoyo_path_number_perm+0x18d/0x580 [ 102.521791][ T8085] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 102.521812][ T8085] ? __handle_mm_fault+0x5a8/0x2a50 [ 102.521847][ T8085] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.521887][ T8085] ? hook_file_ioctl_common+0x145/0x410 [ 102.521912][ T8085] ? selinux_file_ioctl+0x180/0x270 [ 102.521936][ T8085] ? selinux_file_ioctl+0xb4/0x270 [ 102.521962][ T8085] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 102.521980][ T8085] __x64_sys_ioctl+0x18b/0x210 [ 102.522010][ T8085] do_syscall_64+0xcd/0x4c0 [ 102.522032][ T8085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.522050][ T8085] RIP: 0033:0x7fd10bf8ebe9 [ 102.522065][ T8085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.522082][ T8085] RSP: 002b:00007fd10cead038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.522100][ T8085] RAX: ffffffffffffffda RBX: 00007fd10c1b6090 RCX: 00007fd10bf8ebe9 [ 102.522111][ T8085] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000004 [ 102.522123][ T8085] RBP: 00007fd10c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 102.522133][ T8085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.522144][ T8085] R13: 00007fd10c1b6128 R14: 00007fd10c1b6090 R15: 00007fffca63bb58 [ 102.522169][ T8085] [ 102.522176][ T8085] Mem-Info: [ 102.628096][ T8085] active_anon:12819 inactive_anon:0 isolated_anon:0 [ 102.628096][ T8085] active_file:5704 inactive_file:49879 isolated_file:0 [ 102.628096][ T8085] unevictable:1769 dirty:105 writeback:0 [ 102.628096][ T8085] slab_reclaimable:12381 slab_unreclaimable:72416 [ 102.628096][ T8085] mapped:25236 shmem:2396 pagetables:1361 [ 102.628096][ T8085] sec_pagetables:308 bounce:0 [ 102.628096][ T8085] kernel_misc_reclaimable:0 [ 102.628096][ T8085] free:445121 free_pcp:18312 free_cma:0 [ 102.642658][ T8085] Node 0 active_anon:51276kB inactive_anon:0kB active_file:22816kB inactive_file:199312kB unevictable:3540kB isolated(anon):0kB isolated(file):0kB mapped:100944kB dirty:420kB writeback:0kB shmem:6048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15152kB pagetables:5248kB sec_pagetables:1232kB all_unreclaimable? no Balloon:0kB [ 102.653209][ T8085] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 102.663567][ T8085] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 102.673897][ T8085] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 102.676288][ T8085] Node 0 DMA32 free:169852kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:51276kB inactive_anon:0kB active_file:22816kB inactive_file:199312kB unevictable:3540kB writepending:420kB present:2080628kB managed:1263488kB mlocked:108kB bounce:0kB free_pcp:55304kB local_pcp:15300kB free_cma:0kB [ 102.688000][ T8085] lowmem_reserve[]: 0 0 0 0 0 [ 102.689561][ T8085] Node 1 Normal free:1595272kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:17992kB local_pcp:3144kB free_cma:0kB [ 102.699882][ T8085] lowmem_reserve[]: 0 0 0 0 0 [ 102.701864][ T8085] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 102.706679][ T8085] Node 0 DMA32: 439*4kB (UM) 325*8kB (UME) 152*16kB (UME) 302*32kB (UME) 23*64kB (UME) 141*128kB (UME) 37*256kB (ME) 14*512kB (UM) 7*1024kB (UM) 8*2048kB (UME) 23*4096kB (UM) = 170372kB [ 102.712796][ T8085] Node 1 Normal: 22*4kB (UME) 38*8kB (UME) 28*16kB (UME) 30*32kB (UME) 20*64kB (UME) 11*128kB (UME) 4*256kB (UME) 3*512kB (UM) 1*1024kB (E) 1*2048kB (M) 387*4096kB (M) = 1595272kB [ 102.719307][ T8085] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 102.723246][ T8085] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 102.726266][ T8085] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 102.729467][ T8085] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 102.732546][ T8085] 57974 total pagecache pages [ 102.734292][ T8085] 0 pages in swap cache [ 102.736596][ T8085] Free swap = 124996kB [ 102.738219][ T8085] Total swap = 124996kB [ 102.739759][ T8085] 1048443 pages RAM [ 102.741172][ T8085] 0 pages HighMem/MovableOnly [ 102.742745][ T8085] 283258 pages reserved [ 102.744124][ T8085] 0 pages cma reserved [ 102.977769][ T8103] No control pipe specified [ 103.135777][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 103.135788][ T40] audit: type=1400 audit(3512887732.916:730): avc: denied { watch watch_reads } for pid=8108 comm="syz.3.583" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.136824][ T8109] process 'syz.3.583' launched '/dev/fd/8' with NULL argv: empty string added [ 103.153057][ T40] audit: type=1400 audit(3512887732.926:731): avc: denied { execute_no_trans } for pid=8108 comm="syz.3.583" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.247339][ T40] audit: type=1400 audit(3512887733.026:732): avc: denied { read } for pid=5361 comm="acpid" name="event4" dev="devtmpfs" ino=3139 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 103.254492][ T40] audit: type=1400 audit(3512887733.026:733): avc: denied { open } for pid=5361 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3139 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 103.262634][ T40] audit: type=1400 audit(3512887733.026:734): avc: denied { ioctl } for pid=5361 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3139 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 103.370182][ T8123] netlink: 'syz.1.588': attribute type 29 has an invalid length. [ 103.375830][ T40] audit: type=1400 audit(3512887733.156:735): avc: denied { write } for pid=8122 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.382140][ T8124] netlink: ct family unspecified [ 103.386419][ T8124] openvswitch: netlink: Actions may not be safe on all matching packets [ 103.442968][ T8129] gretap0: entered promiscuous mode [ 103.446810][ T8129] gretap0: left promiscuous mode [ 103.645074][ T40] audit: type=1400 audit(3512887733.426:736): avc: denied { name_bind } for pid=8135 comm="syz.3.592" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 103.731171][ T8146] block nbd1: Attempted send on invalid socket [ 103.733854][ T8146] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.737678][ T8146] (syz.1.595,8146,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 103.740539][ T8146] (syz.1.595,8146,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 103.743483][ T8146] (syz.1.595,8146,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 103.746492][ T8146] (syz.1.595,8146,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 103.752403][ T8147] block nbd1: Attempted send on invalid socket [ 103.757484][ T8147] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.763174][ T8147] (syz.1.595,8147,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 103.765893][ T8147] (syz.1.595,8147,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 103.768268][ T8147] (syz.1.595,8147,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 103.771085][ T8147] (syz.1.595,8147,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 103.809603][ T8151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=8151 comm=syz.1.596 [ 103.871606][ T40] audit: type=1400 audit(3512887733.656:737): avc: denied { getopt } for pid=8150 comm="syz.1.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.091278][ T6081] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 104.246586][ T6081] usb 8-1: not running at top speed; connect to a high speed hub [ 104.250811][ T6081] usb 8-1: config 53 has an invalid interface number: 163 but max is 1 [ 104.256468][ T6081] usb 8-1: config 53 contains an unexpected descriptor of type 0x1, skipping [ 104.260709][ T6081] usb 8-1: config 53 has an invalid interface number: 128 but max is 1 [ 104.264027][ T6081] usb 8-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 104.267229][ T6081] usb 8-1: config 53 has no interface number 0 [ 104.269357][ T6081] usb 8-1: config 53 has no interface number 1 [ 104.273703][ T6081] usb 8-1: config 53 interface 163 altsetting 126 endpoint 0xD has invalid wMaxPacketSize 0 [ 104.275258][ T8177] trusted_key: syz.1.600 sent an empty control message without MSG_MORE. [ 104.277025][ T6081] usb 8-1: config 53 interface 163 altsetting 126 has an invalid descriptor for endpoint zero, skipping [ 104.277043][ T6081] usb 8-1: config 53 interface 163 altsetting 126 has a duplicate endpoint with address 0x5, skipping [ 104.277056][ T6081] usb 8-1: config 53 interface 163 altsetting 126 has a duplicate endpoint with address 0x5, skipping [ 104.277069][ T6081] usb 8-1: config 53 interface 163 altsetting 126 endpoint 0x7 has invalid maxpacket 1423, setting to 64 [ 104.277083][ T6081] usb 8-1: config 53 interface 163 altsetting 126 has a duplicate endpoint with address 0x7, skipping [ 104.277106][ T6081] usb 8-1: config 53 interface 128 altsetting 183 has a duplicate endpoint with address 0x7, skipping [ 104.277119][ T6081] usb 8-1: config 53 interface 128 altsetting 183 has a duplicate endpoint with address 0x2, skipping [ 104.277130][ T6081] usb 8-1: config 53 interface 128 altsetting 183 has a duplicate endpoint with address 0x8, skipping [ 104.277143][ T6081] usb 8-1: config 53 interface 128 altsetting 183 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 104.277156][ T6081] usb 8-1: config 53 interface 128 altsetting 183 has 4 endpoint descriptors, different from the interface descriptor's value: 16 [ 104.277171][ T6081] usb 8-1: config 53 interface 163 has no altsetting 0 [ 104.277181][ T6081] usb 8-1: config 53 interface 128 has no altsetting 0 [ 104.283174][ T6081] usb 8-1: New USB device found, idVendor=1199, idProduct=9062, bcdDevice=42.16 [ 104.330662][ T6081] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.333727][ T6081] usb 8-1: Product: ࠬ [ 104.338607][ T6081] usb 8-1: Manufacturer: п [ 104.340178][ T6081] usb 8-1: SerialNumber:   [ 104.346214][ T6081] usb 8-1: rejected 1 configuration due to insufficient available bus power [ 104.353837][ T6081] usb 8-1: no configuration chosen from 1 choice [ 104.390448][ T8188] random: crng reseeded on system resumption [ 104.398078][ T8188] Restarting kernel threads ... [ 104.402218][ T8188] Done restarting kernel threads. [ 104.405891][ T40] audit: type=1400 audit(3512887734.186:738): avc: denied { create } for pid=8187 comm="syz.1.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 104.409878][ T8188] netlink: 'syz.1.602': attribute type 7 has an invalid length. [ 104.416260][ T8188] netlink: 'syz.1.602': attribute type 8 has an invalid length. [ 104.420243][ T40] audit: type=1400 audit(3512887734.196:739): avc: denied { ioctl } for pid=8187 comm="syz.1.602" path="socket:[23633]" dev="sockfs" ino=23633 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 104.580869][ T8204] tipc: Resetting bearer [ 104.589117][ T8204] tipc: Resetting bearer [ 104.712340][ T8216] loop0: Can't mount, would change RO state [ 104.737053][ T8220] block nbd1: Attempted send on invalid socket [ 104.739875][ T8220] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.743269][ T8220] (syz.1.612,8220,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 104.745673][ T8220] (syz.1.612,8220,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 104.748311][ T8220] (syz.1.612,8220,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 104.754021][ T8220] (syz.1.612,8220,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 104.755237][ T8222] netlink: 'syz.2.613': attribute type 20 has an invalid length. [ 104.795846][ T8225] sctp: [Deprecated]: syz.1.614 (pid 8225) Use of int in max_burst socket option. [ 104.795846][ T8225] Use struct sctp_assoc_value instead [ 104.805566][ T8225] ref_ctr_offset mismatch. inode: 0x3ca offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 105.304354][ T8242] program syz.1.621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.309866][ T8242] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 105.366135][ T8244] input: syz0 as /devices/virtual/input/input10 [ 105.645533][ T8248] tipc: Enabling of bearer rejected, failed to enable media [ 105.662220][ T8248] lo speed is unknown, defaulting to 1000 [ 105.665720][ T8248] lo speed is unknown, defaulting to 1000 [ 105.668966][ T8248] lo speed is unknown, defaulting to 1000 [ 105.680848][ T8248] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 105.701184][ T8248] lo speed is unknown, defaulting to 1000 [ 105.705693][ T8248] lo speed is unknown, defaulting to 1000 [ 105.710367][ T8248] lo speed is unknown, defaulting to 1000 [ 105.713821][ T8249] netlink: 'syz.1.624': attribute type 10 has an invalid length. [ 105.714574][ T8248] lo speed is unknown, defaulting to 1000 [ 105.726514][ T8249] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 105.730284][ T1339] lo speed is unknown, defaulting to 1000 [ 105.734935][ T1339] syz2: Port: 1 Link DOWN [ 105.774232][ T8248] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8212 sclass=netlink_xfrm_socket pid=8248 comm=syz.1.624 [ 106.158267][ T8269] 9p filesystem being mounted at /155/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 106.318501][ T6852] Bluetooth: hci4: Frame reassembly failed (-84) [ 106.833864][ T1332] usb 8-1: USB disconnect, device number 5 [ 106.855699][ T8280] ubi31: attaching mtd0 [ 106.868454][ T8280] ubi31: scanning is finished [ 106.875470][ T8280] ubi31: empty MTD device detected [ 106.899481][ T8286] netlink: 'syz.1.635': attribute type 18 has an invalid length. [ 106.935979][ T8280] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 106.936025][ T8280] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 106.936042][ T8280] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 106.936059][ T8280] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 106.936080][ T8280] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 106.936096][ T8280] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 106.936114][ T8280] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1398721243 [ 106.936134][ T8280] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 106.936814][ T8291] ubi31: background thread "ubi_bgt31d" started, PID 8291 [ 107.043580][ T8310] kvm: user requested TSC rate below hardware speed [ 107.067473][ T8313] Bluetooth: Invalid esc byte 0xf7 [ 107.653332][ T8340] __nla_validate_parse: 18 callbacks suppressed [ 107.653350][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'. [ 107.759323][ T8344] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3889405060 (497843847680 ns) > initial count (482886417536 ns). Using initial count to start timer. [ 108.031109][ T1339] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 108.197315][ T1339] usb 6-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 108.206395][ T1339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.211439][ T1339] usb 6-1: config 0 descriptor?? [ 108.381441][ T5326] Bluetooth: hci4: command 0x1003 tx timeout [ 108.386032][ T5977] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 108.630789][ T1339] usbhid 6-1:0.0: can't add hid device: -71 [ 108.637124][ T1339] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 108.650486][ T1339] usb 6-1: USB disconnect, device number 5 [ 108.905813][ T1124] sr 2:0:0:0: [sr0] tag#18 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 108.910527][ T1124] sr 2:0:0:0: [sr0] tag#18 Sense Key : Illegal Request [current] [ 108.914358][ T1124] sr 2:0:0:0: [sr0] tag#18 Add. Sense: Invalid command operation code [ 108.917614][ T1124] sr 2:0:0:0: [sr0] tag#18 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 108.920662][ T1124] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 108.924997][ T1124] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 109.036492][ T8360] ipvlan2: entered promiscuous mode [ 109.038865][ T8360] bridge0: port 3(ipvlan2) entered blocking state [ 109.041124][ T8360] bridge0: port 3(ipvlan2) entered disabled state [ 109.043280][ T8360] ipvlan2: entered allmulticast mode [ 109.045080][ T8360] bridge0: entered allmulticast mode [ 109.048040][ T8360] ipvlan2: left allmulticast mode [ 109.049697][ T8360] bridge0: left allmulticast mode [ 109.089069][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 109.089088][ T40] audit: type=1400 audit(3512887738.866:750): avc: denied { create } for pid=8359 comm="syz.3.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.227459][ T40] audit: type=1400 audit(3512887739.006:751): avc: denied { block_suspend } for pid=8365 comm="syz.1.657" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.277101][ T40] audit: type=1400 audit(3512887739.056:752): avc: denied { create } for pid=8367 comm="syz.3.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 109.284319][ T40] audit: type=1400 audit(3512887739.056:753): avc: denied { getopt } for pid=8367 comm="syz.3.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 109.290855][ T40] audit: type=1400 audit(3512887739.056:754): avc: denied { create } for pid=8367 comm="syz.3.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 109.298547][ T40] audit: type=1400 audit(3512887739.056:755): avc: denied { write } for pid=8367 comm="syz.3.658" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 109.426937][ T40] audit: type=1400 audit(3512887739.206:756): avc: denied { getopt } for pid=8373 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.517346][ T8396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.665'. [ 109.523095][ T8396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.665'. [ 109.537806][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 109.540147][ T8402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.667'. [ 109.542281][ T8400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.666'. [ 109.681448][ T40] audit: type=1400 audit(3512887739.466:757): avc: denied { getopt } for pid=8416 comm="syz.1.671" lport=34150 faddr=::ffff:172.30.0.2 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 109.709149][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.672'. [ 109.739890][ T8420] 8021q: adding VLAN 0 to HW filter on device bond5 [ 109.745517][ T8420] bond4: (slave bond5): Enslaving as an active interface with an up link [ 109.749950][ T8420] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1540 sclass=netlink_tcpdiag_socket pid=8420 comm=syz.1.672 [ 109.755192][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'. [ 109.758583][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'. [ 109.764536][ T8420] bond4 (unregistering): (slave bond5): Releasing backup interface [ 109.769958][ T8420] bond4 (unregistering): Released all slaves [ 110.049362][ T40] audit: type=1400 audit(3512887739.826:758): avc: denied { write } for pid=8428 comm="syz.3.675" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 110.114101][ T8438] netlink: 100 bytes leftover after parsing attributes in process `syz.1.679'. [ 110.156408][ T40] audit: type=1400 audit(3512887739.936:759): avc: denied { write } for pid=8441 comm="syz.1.681" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 110.204455][ T8444] XFS (nbd3): no-recovery mounts must be read-only. [ 110.223752][ T8447] overlay: ./file0 is not a directory [ 110.309474][ T8451] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 110.313836][ T8451] overlayfs: overlapping lowerdir path [ 110.334063][ T8453] x_tables: ip_tables: udp match: only valid for protocol 17 [ 110.713721][ T8483] geneve2: entered promiscuous mode [ 110.874075][ T8493] blktrace: Concurrent blktraces are not allowed on sg0 [ 110.895245][ T8495] netlink: 'syz.3.701': attribute type 21 has an invalid length. [ 110.907780][ T8495] nbd: must specify at least one socket [ 111.034050][ T8506] 9pnet_virtio: no channels available for device syz [ 111.204834][ T8513] autofs: Unknown parameter '' [ 111.858643][ T8531] 9p filesystem being mounted at /187/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 111.859689][ T8529] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 111.865972][ T8531] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 111.866115][ T8529] block device autoloading is deprecated and will be removed. [ 111.885596][ T8524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.890336][ T8524] batadv_slave_0: entered promiscuous mode [ 112.024125][ T8542] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 112.028648][ T8542] overlayfs: missing 'lowerdir' [ 112.252902][ T8562] netlink: 'syz.3.723': attribute type 1 has an invalid length. [ 112.327631][ T5326] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.336590][ T5326] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.340393][ T5326] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.346465][ T5326] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.350401][ T5326] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.360697][ T5977] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.366760][ T5977] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.370649][ T5977] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.375514][ T5977] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.378968][ T5977] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.422042][ T8570] xfrm0 speed is unknown, defaulting to 1000 [ 112.426277][ T8570] lo speed is unknown, defaulting to 1000 [ 112.508882][ T8633] netlink: 'syz.3.728': attribute type 3 has an invalid length. [ 112.516814][ T8633] /dev/sg0: Can't lookup blockdev [ 112.533761][ T8633] MINIX-fs: blocksize too small for device [ 112.604900][ T8570] chnl_net:caif_netlink_parms(): no params data found [ 112.757456][ T8570] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.768640][ T8570] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.771795][ T8570] bridge_slave_0: entered allmulticast mode [ 112.775484][ T8570] bridge_slave_0: entered promiscuous mode [ 112.781045][ T8570] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.783858][ T8570] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.786538][ T8570] bridge_slave_1: entered allmulticast mode [ 112.789571][ T8570] bridge_slave_1: entered promiscuous mode [ 112.910378][ T8570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.950043][ T8570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.023730][ T9201] __nla_validate_parse: 6 callbacks suppressed [ 113.023782][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.742'. [ 113.028836][ T9201] netlink: 3 bytes leftover after parsing attributes in process `syz.3.742'. [ 113.034267][ T8570] team0: Port device team_slave_0 added [ 113.041499][ T8570] team0: Port device team_slave_1 added [ 113.084772][ T9331] kernel profiling enabled (shift: 6) [ 113.132879][ T8570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.134329][ T9331] netlink: 32 bytes leftover after parsing attributes in process `syz.3.744'. [ 113.136305][ T8570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.151178][ T8570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.158565][ T9397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=9397 comm=syz.1.745 [ 113.170084][ T9350] devtmpfs: Cannot change global quota limit on remount [ 113.178327][ T8570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.181004][ T8570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.189686][ T8570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.281194][ T8570] hsr_slave_0: entered promiscuous mode [ 113.283966][ T8570] hsr_slave_1: entered promiscuous mode [ 113.286491][ T8570] debugfs: 'hsr0' already exists in 'hsr' [ 113.288416][ T8570] Cannot create hsr debugfs directory [ 113.348954][ T9624] netlink: 36 bytes leftover after parsing attributes in process `syz.1.749'. [ 113.430509][ T9701] openvswitch: netlink: IPv6 tunnel dst address is zero [ 113.543025][ T8570] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.547845][ T8570] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.554659][ T8570] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.559701][ T8570] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.614012][ T8570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.630320][ T8570] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.640702][ T6842] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.644283][ T6842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.654184][ T6842] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.656633][ T6842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.792033][ T8570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.004385][ T8570] veth0_vlan: entered promiscuous mode [ 114.012741][ T8570] veth1_vlan: entered promiscuous mode [ 114.038981][ T8570] veth0_macvtap: entered promiscuous mode [ 114.043990][ T8570] veth1_macvtap: entered promiscuous mode [ 114.054485][ T8570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.066662][ T8570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.073252][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.076765][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.081713][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.084582][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.124434][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.127496][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.143844][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.146601][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.154671][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 114.154685][ T40] audit: type=1400 audit(3512887743.936:790): avc: denied { mounton } for pid=8570 comm="syz-executor" path="/syzkaller.mqyUfN/syz-tmp" dev="sda1" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 114.166526][ T40] audit: type=1400 audit(3512887743.936:791): avc: denied { mounton } for pid=8570 comm="syz-executor" path="/syzkaller.mqyUfN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 114.174948][ T40] audit: type=1400 audit(3512887743.936:792): avc: denied { mounton } for pid=8570 comm="syz-executor" path="/syzkaller.mqyUfN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=25770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 114.185974][ T40] audit: type=1400 audit(3512887743.946:793): avc: denied { mounton } for pid=8570 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 114.194463][ T40] audit: type=1400 audit(3512887743.946:794): avc: denied { mounton } for pid=8570 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 114.259896][ T9835] xfrm0 speed is unknown, defaulting to 1000 [ 114.262889][ T9835] lo speed is unknown, defaulting to 1000 [ 114.277961][ T9844] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 114.325935][ T40] audit: type=1326 audit(3512887744.106:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.4.759" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f6c58ebe9 code=0x0 [ 114.461125][ T5326] Bluetooth: hci2: command tx timeout [ 114.497849][ T9879] overlayfs: missing 'workdir' [ 114.497862][ T9877] blktrace: Concurrent blktraces are not allowed on sg0 [ 114.536439][ T9883] netlink: 'syz.3.765': attribute type 1 has an invalid length. [ 114.603550][ T9888] netlink: 52 bytes leftover after parsing attributes in process `syz.3.767'. [ 114.607363][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.767'. [ 114.612449][ T9888] tipc: MTU too low for tipc bearer [ 114.646709][ T40] audit: type=1400 audit(3512887744.426:796): avc: denied { map } for pid=9887 comm="syz.3.767" path="socket:[26874]" dev="sockfs" ino=26874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.657015][ T40] audit: type=1400 audit(3512887744.426:797): avc: denied { read accept } for pid=9887 comm="syz.3.767" path="socket:[26874]" dev="sockfs" ino=26874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 115.097805][ T9932] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 115.108136][ T9932] cramfs: wrong magic [ 115.120823][ T9932] evm: overlay not supported [ 115.194672][ T9941] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 115.214957][ T9945] netlink: 'syz.2.779': attribute type 10 has an invalid length. [ 115.214957][ T9944] netlink: 'syz.2.779': attribute type 10 has an invalid length. [ 115.223565][ T9945] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.227297][ T9945] bond0: (slave team0): Enslaving as an active interface with an up link [ 115.363247][ T9963] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000007 [ 115.450805][ T9982] netlink: 32 bytes leftover after parsing attributes in process `syz.1.785'. [ 115.465402][ T9949] Process accounting resumed [ 115.465402][ T40] audit: type=1400 audit(3512887745.246:798): avc: denied { create } for pid=9962 comm="syz.2.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 115.486971][ T40] audit: type=1400 audit(3512887745.246:799): avc: denied { write } for pid=9962 comm="syz.2.781" path="socket:[27044]" dev="sockfs" ino=27044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 115.559482][ T9982] netlink: 'syz.1.785': attribute type 10 has an invalid length. [ 115.563106][T10031] netlink: 'syz.3.787': attribute type 2 has an invalid length. [ 116.011302][ T54] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 116.041039][ T1332] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 116.161128][ T54] usb 8-1: Using ep0 maxpacket: 8 [ 116.164611][ T54] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 116.168327][ T54] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 116.171044][ T1332] usb 7-1: device descriptor read/64, error -71 [ 116.173151][ T54] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.178144][ T54] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.182450][ T54] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.185453][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.349570][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.807'. [ 116.350416][T10130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.807'. [ 116.357416][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.807'. [ 116.392357][ T54] usb 8-1: GET_CAPABILITIES returned 0 [ 116.394287][ T54] usbtmc 8-1:16.0: can't read capabilities [ 116.411114][ T1332] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 116.425086][T10150] netlink: 'syz.1.809': attribute type 1 has an invalid length. [ 116.445615][T10150] 8021q: adding VLAN 0 to HW filter on device bond4 [ 116.448599][T10150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10150 comm=syz.1.809 [ 116.457919][T10149] bond4: (slave ip6erspan0): making interface the new active one [ 116.463074][T10149] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 116.541153][ T1332] usb 7-1: device descriptor read/64, error -71 [ 116.541156][ T5326] Bluetooth: hci2: command tx timeout [ 116.594598][ C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 116.600686][T10065] usbtmc 8-1:16.0: Unable to send data, error -71 [ 116.613072][ T6081] usb 8-1: USB disconnect, device number 6 [ 116.641020][ T840] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 116.654808][ T1332] usb usb7-port1: attempt power cycle [ 116.668050][T10209] netlink: 'syz.3.812': attribute type 1 has an invalid length. [ 116.685958][T10209] 8021q: adding VLAN 0 to HW filter on device bond5 [ 116.694999][T10208] bond5: (slave geneve2): making interface the new active one [ 116.699330][T10208] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 116.788653][T10255] macsec0: entered promiscuous mode [ 116.790708][T10255] macsec0: entered allmulticast mode [ 116.794176][T10255] veth1_macvtap: entered allmulticast mode [ 116.802956][ T840] usb 9-1: Using ep0 maxpacket: 16 [ 116.808682][ T840] usb 9-1: config 0 has an invalid interface number: 111 but max is 1 [ 116.812072][ T840] usb 9-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 116.815950][ T840] usb 9-1: config 0 has an invalid interface number: 77 but max is 1 [ 116.819312][ T840] usb 9-1: config 0 has an invalid interface number: 5 but max is 1 [ 116.822618][ T840] usb 9-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 116.826088][ T840] usb 9-1: config 0 has no interface number 0 [ 116.828347][ T840] usb 9-1: config 0 has no interface number 1 [ 116.830421][ T840] usb 9-1: config 0 has no interface number 2 [ 116.832981][ T840] usb 9-1: config 0 interface 111 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 116.837330][ T840] usb 9-1: config 0 interface 111 altsetting 5 bulk endpoint 0x2 has invalid maxpacket 1023 [ 116.842640][ T840] usb 9-1: config 0 interface 111 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 116.847059][ T840] usb 9-1: config 0 interface 111 altsetting 5 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 116.850465][ T840] usb 9-1: config 0 interface 77 altsetting 8 endpoint 0x3 has an invalid bInterval 203, changing to 7 [ 116.854623][ T840] usb 9-1: config 0 interface 77 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.859888][ T840] usb 9-1: too many endpoints for config 0 interface 5 altsetting 178: 252, using maximum allowed: 30 [ 116.864389][ T840] usb 9-1: config 0 interface 5 altsetting 178 has a duplicate endpoint with address 0xD, skipping [ 116.868355][ T840] usb 9-1: config 0 interface 5 altsetting 178 has 1 endpoint descriptor, different from the interface descriptor's value: 252 [ 116.873610][ T840] usb 9-1: config 0 interface 111 has no altsetting 0 [ 116.876706][ T840] usb 9-1: config 0 interface 77 has no altsetting 0 [ 116.878862][ T840] usb 9-1: config 0 interface 5 has no altsetting 0 [ 116.884052][ T840] usb 9-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=2c.ad [ 116.887850][ T840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.890721][ T840] usb 9-1: Product: 籜ঝ㓂謷縳컥뫎ᖉڷ犭ⅉ꠪ꮞ蚲銱䕶먝ℯşﲾ拈姾䐩쯅⧆ᝮ퉟졟츍劽죅㛹ꑦ䋡㛱Ӎⴺ钠釤嘻⽅❲뉼䳰ꕽ孨권裬⥩ [ 116.897056][ T840] usb 9-1: Manufacturer: ᎑欱䎒姹猜ᠮ뗎ꊄꎚ첫裰칙濫쌌䌫聄媝楤㞊ц濤꾔ઓ隸橉顩⽀席畢㓖뾗׵䬚溃큮䅆䜇⍆⿘䊒䂏⑥걪莽甋딑푗嘸ꊆ⾛㳵ꌦ꽡㊆ꨨ뒷㍀ᘵ萲扒狇儔췔꒥ꗌ僰ᘾ댬贗哆榍馶㍞뎚Ḽ▎콣 [ 116.906306][ T840] usb 9-1: SerialNumber: Б [ 116.910551][ T840] usb 9-1: config 0 descriptor?? [ 116.913556][T10137] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 116.916715][T10137] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 116.991308][ T1332] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 117.013018][ T1332] usb 7-1: device descriptor read/8, error -71 [ 117.132502][ T840] rndis_host 9-1:0.77: skipping garbage [ 117.134387][ T840] usb 9-1: bad CDC descriptors [ 117.144467][ T840] usb 9-1: USB disconnect, device number 2 [ 117.186539][T10289] netlink: 'syz.3.820': attribute type 1 has an invalid length. [ 117.189512][T10289] netlink: 'syz.3.820': attribute type 4 has an invalid length. [ 117.251059][ T1332] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 117.271625][ T1332] usb 7-1: device descriptor read/8, error -71 [ 117.382157][ T1332] usb usb7-port1: unable to enumerate USB device [ 117.916973][T10451] usb usb8: usbfs: process 10451 (syz.4.824) did not claim interface 0 before use [ 118.080148][T10490] __nla_validate_parse: 12 callbacks suppressed [ 118.080164][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 118.231685][T10520] nbd: must specify a size in bytes for the device [ 118.521581][ T1339] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 118.631077][ T5326] Bluetooth: hci2: command tx timeout [ 118.689150][ T1339] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 118.693035][ T1339] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.695965][ T1339] usb 9-1: Product: syz [ 118.697508][ T1339] usb 9-1: Manufacturer: syz [ 118.699166][ T1339] usb 9-1: SerialNumber: syz [ 118.707049][ T1339] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 118.736727][ T54] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 118.972344][T10533] sp0: Synchronizing with TNC [ 118.980536][T10533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.995995][T10533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.003873][T10711] 9pnet_virtio: no channels available for device /dev/nullb0 [ 119.008888][T10533] input: syz0 as /devices/virtual/input/input11 [ 119.028456][T10533] netlink: 'syz.4.836': attribute type 1 has an invalid length. [ 119.081845][T10747] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 119.086606][T10747] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 119.093503][T10747] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 119.176990][ T1339] usb 9-1: USB disconnect, device number 3 [ 119.195478][T10780] raw_sendmsg: syz.3.855 forgot to set AF_INET. Fix it! [ 119.227375][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 119.227387][ T40] audit: type=1400 audit(3512887749.006:827): avc: denied { ioctl } for pid=10786 comm="syz.3.856" path="socket:[30129]" dev="sockfs" ino=30129 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 119.293661][ T40] audit: type=1400 audit(3512887749.076:828): avc: denied { mounton } for pid=10770 comm="syz.1.851" path="/253/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 119.293663][T10793] tmpfs: Bad value for 'mpol' [ 119.334280][ T40] audit: type=1400 audit(3512887749.116:829): avc: denied { watch_mount } for pid=10797 comm="syz.3.857" path="/250" dev="tmpfs" ino=1353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 119.441087][ T1332] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 119.487530][T10803] ip6tnl2: entered promiscuous mode [ 119.489318][T10803] ip6tnl2: entered allmulticast mode [ 119.704780][ T40] audit: type=1400 audit(3512887749.486:830): avc: denied { setopt } for pid=10808 comm="syz.4.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 119.751906][ T54] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 119.757052][ T54] ath9k_htc: Failed to initialize the device [ 119.761629][ T1339] usb 9-1: ath9k_htc: USB layer deinitialized [ 119.859719][ T40] audit: type=1400 audit(3512887749.636:831): avc: denied { watch watch_reads } for pid=10814 comm="syz.4.860" path="pipe:[28242]" dev="pipefs" ino=28242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 119.912993][T10815] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 119.913159][T10816] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 120.073741][ T40] audit: type=1400 audit(3512887749.856:832): avc: denied { read open } for pid=10828 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.082510][ T40] audit: type=1400 audit(3512887749.856:833): avc: denied { getattr } for pid=10828 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.094438][ T40] audit: type=1400 audit(3512887749.876:834): avc: denied { add_name } for pid=10827 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.102449][ T40] audit: type=1400 audit(3512887749.876:835): avc: denied { create } for pid=10827 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.109953][ T40] audit: type=1400 audit(3512887749.876:836): avc: denied { write } for pid=10827 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=6163 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.137476][T10831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.862'. [ 120.668055][T10862] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 120.701057][ T5326] Bluetooth: hci2: command tx timeout [ 120.781114][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 120.870280][T10872] fuse: Bad value for 'group_id' [ 120.873239][T10872] fuse: Bad value for 'group_id' [ 121.101144][ T6024] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 121.103491][ T6024] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 121.121277][ T840] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 121.190423][T10927] fuse: Invalid rootmode [ 121.271462][ T840] usb 8-1: Using ep0 maxpacket: 32 [ 121.274685][ T840] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.277235][ T840] usb 8-1: config 0 has no interface number 0 [ 121.280954][ T840] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 121.283886][ T840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.286752][ T840] usb 8-1: Product: syz [ 121.288390][ T840] usb 8-1: Manufacturer: syz [ 121.290006][ T840] usb 8-1: SerialNumber: syz [ 121.293871][ T840] usb 8-1: config 0 descriptor?? [ 121.298275][ T840] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 121.409516][T10940] openvswitch: netlink: IP tunnel dst address not specified [ 121.637200][T10949] program syz.4.877 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.913739][ T840] gspca_ov534_9: reg_w failed -71 [ 122.258377][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 122.311767][T10973] fuse: Bad value for 'fd' [ 122.331405][ T840] gspca_ov534_9: Unknown sensor 0000 [ 122.331469][ T840] ov534_9 8-1:0.1: probe with driver ov534_9 failed with error -22 [ 122.341425][ T840] usb 8-1: USB disconnect, device number 7 [ 122.365933][T10989] binder: 10975:10989 ioctl 40044591 0 returned -22 [ 122.368833][T10989] binder: 10975:10989 ioctl c0306201 200000000240 returned -14 [ 122.376112][T10977] binder: 10975:10977 ioctl c0306201 200000000040 returned -14 [ 122.379591][T10977] netlink: 'syz.2.883': attribute type 1 has an invalid length. [ 122.404179][T10977] 8021q: adding VLAN 0 to HW filter on device bond5 [ 122.444624][T10977] bond5: (slave gretap1): making interface the new active one [ 122.449542][T10977] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 122.583914][T11046] batman_adv: batadv0: Adding interface: ipvlan2 [ 122.586221][T11046] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.594841][T11046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.602656][T11046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.605934][T11046] batman_adv: batadv0: Interface activated: ipvlan2 [ 122.681995][T11062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.892'. [ 122.768201][T11059] netlink: 32 bytes leftover after parsing attributes in process `syz.3.891'. [ 122.775122][T11071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.893'. [ 122.871700][T11086] netlink: 'syz.4.896': attribute type 8 has an invalid length. [ 123.066744][T11113] 9p filesystem being mounted at /258/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 123.341048][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.429239][T11150] tipc: Started in network mode [ 123.431696][T11150] tipc: Node identity e6cd975d3451, cluster identity 4711 [ 123.434205][T11150] tipc: Enabled bearer , priority 0 [ 123.437156][T11150] usb usb8: usbfs: process 11150 (syz.4.906) did not claim interface 0 before use [ 123.450660][T11148] tipc: Resetting bearer [ 123.498582][T11166] netlink: 'syz.1.909': attribute type 17 has an invalid length. [ 123.502788][T11166] netlink: 5 bytes leftover after parsing attributes in process `syz.1.909'. [ 123.792059][ T840] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 123.973790][ T840] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.978662][ T840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 123.983790][ T840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 123.988627][ T840] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.993129][ T840] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.996107][ T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.000147][ T840] usb 6-1: config 0 descriptor?? [ 124.003551][T11169] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.455053][ T54] tipc: Node number set to 3533477725 [ 124.970540][T11148] tipc: Disabling bearer [ 124.986981][T11166] macvtap0: entered allmulticast mode [ 124.989877][T11166] veth0_macvtap: entered allmulticast mode [ 124.994040][T11166] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 125.028871][ T840] usbhid 6-1:0.0: can't add hid device: -71 [ 125.037118][ T840] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 125.042687][ T840] usb 6-1: USB disconnect, device number 6 [ 125.071885][T11206] block nbd1: Attempted send on invalid socket [ 125.074649][T11206] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.079451][T11206] (syz.1.913,11206,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 125.084899][T11206] (syz.1.913,11206,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 125.085552][T11207] netlink: 'syz.2.914': attribute type 1 has an invalid length. [ 125.088143][T11206] (syz.1.913,11206,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 125.091673][T11207] netlink: 'syz.2.914': attribute type 4 has an invalid length. [ 125.093782][T11206] (syz.1.913,11206,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 125.098752][T11207] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.914'. [ 125.123130][T11207] xfrm0 speed is unknown, defaulting to 1000 [ 125.127628][T11207] lo speed is unknown, defaulting to 1000 [ 125.250974][ T40] kauditd_printk_skb: 1255 callbacks suppressed [ 125.250997][ T40] audit: type=1400 audit(3512887755.026:2092): avc: denied { create } for pid=11241 comm="syz.4.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 125.295704][ T40] audit: type=1400 audit(3512887755.076:2093): avc: denied { write } for pid=11253 comm="syz.4.919" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 125.304889][ T40] audit: type=1400 audit(3512887755.076:2094): avc: denied { map } for pid=11253 comm="syz.4.919" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 125.313814][ T40] audit: type=1400 audit(3512887755.076:2095): avc: denied { call } for pid=11253 comm="syz.4.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 125.320470][ T54] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 125.347092][T11256] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 125.418992][T11258] nftables ruleset with unbound chain [ 125.423274][T11258] netlink: 3 bytes leftover after parsing attributes in process `syz.4.921'. [ 125.430700][T11258] batadv1: entered promiscuous mode [ 125.433937][T11258] batadv1: entered allmulticast mode [ 125.441109][ T1339] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 125.493214][ T54] usb 8-1: config 0 has no interfaces? [ 125.498181][ T54] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 125.502696][ T54] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 125.505809][ T54] usb 8-1: Product: syz [ 125.507337][ T54] usb 8-1: Manufacturer: syz [ 125.510767][ T54] usb 8-1: config 0 descriptor?? [ 125.594373][ T1339] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 125.598034][ T1339] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 125.601830][ T1339] usb 7-1: config 0 interface 0 has no altsetting 0 [ 125.606902][ T1339] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 125.610685][ T1339] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 125.614693][ T1339] usb 7-1: Product: syz [ 125.616866][ T1339] usb 7-1: Manufacturer: syz [ 125.618730][ T1339] usb 7-1: SerialNumber: syz [ 125.622579][ T1339] usb 7-1: config 0 descriptor?? [ 125.626275][ T1339] hub 7-1:0.0: bad descriptor, ignoring hub [ 125.629706][ T1339] hub 7-1:0.0: probe with driver hub failed with error -5 [ 125.636174][ T1339] usb 7-1: selecting invalid altsetting 0 [ 125.640986][T11270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.922'. [ 125.645000][T11270] netlink: 40 bytes leftover after parsing attributes in process `syz.4.922'. [ 125.652964][ T40] audit: type=1400 audit(3512887755.436:2096): avc: denied { append } for pid=11269 comm="syz.4.922" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 125.657951][T11277] netlink: 20 bytes leftover after parsing attributes in process `syz.4.922'. [ 125.664723][T11277] netlink: 40 bytes leftover after parsing attributes in process `syz.4.922'. [ 125.715664][T11288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.923'. [ 125.717810][ T6024] usb 8-1: USB disconnect, device number 8 [ 126.073170][T11327] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 126.133828][ T40] audit: type=1400 audit(3512887755.916:2097): avc: denied { append } for pid=11328 comm="syz.4.930" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 126.144642][T11331] trusted_key: encrypted_key: insufficient parameters specified [ 126.323818][T11356] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 126.326991][T11356] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 126.330567][T11356] vhci_hcd vhci_hcd.0: Device attached [ 126.335456][T11357] vhci_hcd: cannot find a urb of seqnum 4294967226 max seqnum 0 [ 126.340049][ T6853] vhci_hcd: stop threads [ 126.343460][ T6853] vhci_hcd: release socket [ 126.344610][ T40] audit: type=1326 audit(3512887756.126:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.4.937" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f6c58ebe9 code=0x0 [ 126.346064][ T6853] vhci_hcd: disconnect device [ 126.354291][T11353] 9pnet_virtio: no channels available for device 127.0.0.1 [ 126.690679][ T53] usb 7-1: USB disconnect, device number 22 [ 126.763518][T11392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.942'. [ 127.088890][ T40] audit: type=1400 audit(3512887756.866:2099): avc: denied { setattr } for pid=11404 comm="syz.1.945" name="NETLINK" dev="sockfs" ino=30965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.140324][ T40] audit: type=1800 audit(3512887756.916:2100): pid=11405 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.945" name="/" dev="sockfs" ino=30965 res=0 errno=0 [ 127.184890][T11411] can0: slcan on ptm0. [ 127.249320][T11426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.948'. [ 127.290576][T11435] MINIX-fs: blocksize too small for device [ 127.379774][T11440] tipc: Started in network mode [ 127.381499][T11440] tipc: Node identity 7f000001, cluster identity 4711 [ 127.384372][T11440] tipc: Enabled bearer , priority 10 [ 127.431085][ T6024] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 127.567799][ T40] audit: type=1400 audit(3512887757.346:2101): avc: denied { write } for pid=11470 comm="syz.2.956" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 127.569632][T11471] overlayfs: missing 'lowerdir' [ 127.615535][ T6024] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.619258][ T6024] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.623465][ T6024] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.627692][ T6024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.633853][ T6024] usb 6-1: config 0 descriptor?? [ 127.838288][T11411] netlink: 'syz.1.946': attribute type 1 has an invalid length. [ 127.843745][ T1339] usb 6-1: USB disconnect, device number 7 [ 128.501256][ T840] tipc: Node number set to 2130706433 [ 128.582059][T11513] __nla_validate_parse: 1 callbacks suppressed [ 128.582082][T11513] netlink: 48 bytes leftover after parsing attributes in process `syz.4.963'. [ 128.588904][T11513] netlink: 48 bytes leftover after parsing attributes in process `syz.4.963'. [ 128.595933][T11516] i2c i2c-1: Invalid block write size 34 [ 128.604000][T11410] can0 (unregistered): slcan off ptm0. [ 128.778857][T11553] : entered promiscuous mode [ 129.186424][T11621] /dev/sg0: Can't lookup blockdev [ 129.220225][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.984'. [ 129.224683][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.984'. [ 129.227572][T11625] netlink: 'syz.1.984': attribute type 12 has an invalid length. [ 129.352769][T11631] netlink: ct family unspecified [ 129.354624][T11631] openvswitch: netlink: Actions may not be safe on all matching packets [ 129.795044][T11671] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 129.991459][T11671] netlink: 'syz.2.994': attribute type 10 has an invalid length. [ 129.995089][T11671] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 129.998730][T11671] bond0: (slave wlan1): Opening slave failed [ 130.116237][T11680] ================================================================== [ 130.116255][T11680] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 130.116317][T11680] Write of size 8 at addr ffffc90005031000 by task syz.2.996/11680 [ 130.116332][T11680] [ 130.116342][T11680] CPU: 2 UID: 0 PID: 11680 Comm: syz.2.996 Not tainted syzkaller #0 PREEMPT(full) [ 130.116364][T11680] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.116376][T11680] Call Trace: [ 130.116383][T11680] [ 130.116391][T11680] dump_stack_lvl+0x116/0x1f0 [ 130.116425][T11680] print_report+0xcd/0x630 [ 130.116447][T11680] ? __virt_addr_valid+0x81/0x610 [ 130.116473][T11680] ? sys_imageblit+0x1a6f/0x1e60 [ 130.116496][T11680] kasan_report+0xe0/0x110 [ 130.116518][T11680] ? sys_imageblit+0x1a6f/0x1e60 [ 130.116545][T11680] sys_imageblit+0x1a6f/0x1e60 [ 130.116582][T11680] ? __pfx_sys_imageblit+0x10/0x10 [ 130.116608][T11680] ? do_raw_spin_lock+0x12c/0x2b0 [ 130.116634][T11680] ? queue_work_on+0x12a/0x1f0 [ 130.116654][T11680] ? fb_pad_unaligned_buffer+0x38d/0x440 [ 130.116677][T11680] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 130.116699][T11680] bit_putcs+0x90f/0xde0 [ 130.116726][T11680] ? __pfx_bit_putcs+0x10/0x10 [ 130.116749][T11680] ? fb_get_color_depth+0x120/0x250 [ 130.116766][T11680] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.116791][T11680] ? __pfx_bit_putcs+0x10/0x10 [ 130.116809][T11680] fbcon_putcs+0x384/0x4a0 [ 130.116840][T11680] do_update_region+0x2e6/0x3f0 [ 130.116867][T11680] redraw_screen+0x63f/0x760 [ 130.116884][T11680] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 130.116910][T11680] ? __pfx_redraw_screen+0x10/0x10 [ 130.116927][T11680] ? fbcon_set_disp+0x84/0xe50 [ 130.116956][T11680] set_con2fb_map+0x7aa/0x1080 [ 130.116978][T11680] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 130.116999][T11680] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 130.117021][T11680] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.117043][T11680] do_fb_ioctl+0x328/0x7e0 [ 130.117066][T11680] ? __pfx_do_fb_ioctl+0x10/0x10 [ 130.117094][T11680] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.117127][T11680] ? selinux_file_ioctl+0x180/0x270 [ 130.117155][T11680] fb_ioctl+0xe5/0x150 [ 130.117176][T11680] ? __pfx_fb_ioctl+0x10/0x10 [ 130.117198][T11680] __x64_sys_ioctl+0x18b/0x210 [ 130.117228][T11680] do_syscall_64+0xcd/0x4c0 [ 130.117250][T11680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.117270][T11680] RIP: 0033:0x7fe10718ebe9 [ 130.117286][T11680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.117305][T11680] RSP: 002b:00007fe107f65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.117324][T11680] RAX: ffffffffffffffda RBX: 00007fe1073b6090 RCX: 00007fe10718ebe9 [ 130.117336][T11680] RDX: 0000200000000000 RSI: 0000000000004610 RDI: 0000000000000003 [ 130.117348][T11680] RBP: 00007fe107211e19 R08: 0000000000000000 R09: 0000000000000000 [ 130.117359][T11680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.117370][T11680] R13: 00007fe1073b6128 R14: 00007fe1073b6090 R15: 00007fff3c2f3738 [ 130.117445][T11680] [ 130.117452][T11680] [ 130.117458][T11680] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90004d31000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 130.117507][T11680] Memory state around the buggy address: [ 130.117518][T11680] ffffc90005030f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 130.117531][T11680] ffffc90005030f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 130.117543][T11680] >ffffc90005031000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 130.117553][T11680] ^ [ 130.117563][T11680] ffffc90005031080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 130.117576][T11680] ffffc90005031100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 130.117586][T11680] ================================================================== [ 130.117597][T11680] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 130.117609][T11680] CPU: 2 UID: 0 PID: 11680 Comm: syz.2.996 Not tainted syzkaller #0 PREEMPT(full) [ 130.117632][T11680] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.117651][T11680] Call Trace: [ 130.117659][T11680] [ 130.117666][T11680] dump_stack_lvl+0x3d/0x1f0 [ 130.117688][T11680] vpanic+0x6e8/0x7a0 [ 130.117716][T11680] ? __pfx_vpanic+0x10/0x10 [ 130.117742][T11680] ? __pfx_vprintk_emit+0x10/0x10 [ 130.117767][T11680] ? sys_imageblit+0x1a6f/0x1e60 [ 130.117792][T11680] panic+0xca/0xd0 [ 130.117818][T11680] ? __pfx_panic+0x10/0x10 [ 130.117850][T11680] ? check_panic_on_warn+0x1f/0xb0 [ 130.117868][T11680] check_panic_on_warn+0xab/0xb0 [ 130.117886][T11680] end_report+0x107/0x170 [ 130.117907][T11680] kasan_report+0xee/0x110 [ 130.117928][T11680] ? sys_imageblit+0x1a6f/0x1e60 [ 130.117955][T11680] sys_imageblit+0x1a6f/0x1e60 [ 130.117984][T11680] ? __pfx_sys_imageblit+0x10/0x10 [ 130.118010][T11680] ? do_raw_spin_lock+0x12c/0x2b0 [ 130.118035][T11680] ? queue_work_on+0x12a/0x1f0 [ 130.118056][T11680] ? fb_pad_unaligned_buffer+0x38d/0x440 [ 130.118081][T11680] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 130.118103][T11680] bit_putcs+0x90f/0xde0 [ 130.118130][T11680] ? __pfx_bit_putcs+0x10/0x10 [ 130.118154][T11680] ? fb_get_color_depth+0x120/0x250 [ 130.118171][T11680] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.118197][T11680] ? __pfx_bit_putcs+0x10/0x10 [ 130.118218][T11680] fbcon_putcs+0x384/0x4a0 [ 130.118249][T11680] do_update_region+0x2e6/0x3f0 [ 130.118278][T11680] redraw_screen+0x63f/0x760 [ 130.118296][T11680] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 130.118322][T11680] ? __pfx_redraw_screen+0x10/0x10 [ 130.118340][T11680] ? fbcon_set_disp+0x84/0xe50 [ 130.118381][T11680] set_con2fb_map+0x7aa/0x1080 [ 130.118403][T11680] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 130.118425][T11680] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 130.118450][T11680] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.118473][T11680] do_fb_ioctl+0x328/0x7e0 [ 130.118498][T11680] ? __pfx_do_fb_ioctl+0x10/0x10 [ 130.118526][T11680] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.118560][T11680] ? selinux_file_ioctl+0x180/0x270 [ 130.118589][T11680] fb_ioctl+0xe5/0x150 [ 130.118610][T11680] ? __pfx_fb_ioctl+0x10/0x10 [ 130.118633][T11680] __x64_sys_ioctl+0x18b/0x210 [ 130.118669][T11680] do_syscall_64+0xcd/0x4c0 [ 130.118693][T11680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.118713][T11680] RIP: 0033:0x7fe10718ebe9 [ 130.118729][T11680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.118748][T11680] RSP: 002b:00007fe107f65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.118769][T11680] RAX: ffffffffffffffda RBX: 00007fe1073b6090 RCX: 00007fe10718ebe9 [ 130.118783][T11680] RDX: 0000200000000000 RSI: 0000000000004610 RDI: 0000000000000003 [ 130.118796][T11680] RBP: 00007fe107211e19 R08: 0000000000000000 R09: 0000000000000000 [ 130.118810][T11680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.118824][T11680] R13: 00007fe1073b6128 R14: 00007fe1073b6090 R15: 00007fff3c2f3738 [ 130.118844][T11680] [ 130.119936][T11680] Kernel Offset: disabled VM DIAGNOSIS: 05:02:50 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608c60 RDX=ffffffff8e2977c0 RSI=ffffffff81608ca8 RDI=ffffffff93db8fe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27b71fc R10=ffffffff93db8fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608ca9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc437db7dac CR3=000000004b7ee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff46300186 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff46300186 00007fff4630018c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc437c12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc437c12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc437c12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc437c12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc437c12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc437c12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9694fe048c11eba4 479d30d2be063696 c58e79b4b8305dd4 611869e94fd534f9 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc4388ed100 00007fc437d87460 00007fc437d80004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc437d874b8 00007fc437d874b0 00007fc437d874a8 00007fc437d874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010002 RBX=0000000000000000 RCX=ffffffff81608c60 RDX=ffff8880655d2440 RSI=ffffffff81608ca8 RDI=ffffffff93db8fe0 RBP=0000000000000001 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27b71fc R10=ffffffff93db8fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608ca9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffffffff000 CR3=0000000050423000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000c0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffca63bee0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffca63c066 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffca63c066 00007fffca63c06c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10c012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10c012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10c012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10c012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10c012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10c012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643cf5 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc900262470f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030396366666666 R12=0000000000000000 R13=000000000000006b R14=ffffffff9b111060 R15=ffffffff85643c90 RIP=ffffffff85643d1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe107f656c0 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000002b09c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00c2904c565d91ef bec754ea9232cd6d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffca63c066 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffca63c066 00007fffca63c06c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10c012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10c012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10c012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10c012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10c012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10c012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10cced100 00007fd10c187460 00007fd10c180004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10c1874b8 00007fd10c1874b0 00007fd10c1874a8 00007fd10c1874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608c60 RDX=ffff88801ded0000 RSI=ffffffff81608ca8 RDI=ffffffff93db8fe0 RBP=0000000000000003 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27b71fc R10=ffffffff93db8fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608ca9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c279b93 CR3=000000010afdf000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00c2904c565d91ef bec754ea9232cd6d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffca63c066 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffca63c066 00007fffca63c06c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10c012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10c012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10c012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10c012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10c012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10c012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10cced100 00007fd10c187460 00007fd10c180004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd10c1874b8 00007fd10c1874b0 00007fd10c1874a8 00007fd10c1874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000