last executing test programs: 5.252806678s ago: executing program 2 (id=1195): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r1 = socket(0x11, 0x800000002, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000080)='C\xbanFx\xc20\x01\x8f~\x1d\x8eqb\xf5\t\xa2\x14\xbak\xff\xedYqc\xde\xc1\xaaY\xe2\x85\xb1\x1c\xd1a\xabM\x84\xfcs\xfa\x1a\x10\xd8\xf7\xc2@\xe9y\xe68\\iZJk\xe6\xe1\xd1vQ\b]\'\xe1\xd2\xea\xd8\xff\xffd\x84\xb0\xc9\xfe\xab\x00\x00\x00\x00\x00\x00') (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0xc0089364, &(0x7f00000001c0)) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a0000}}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='&\x00\x00\x00\a', @ANYRESOCT=r0, @ANYRES16=r1], 0x50) write(r3, &(0x7f0000000000)='U', 0x1) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) (async) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x20000000009) (async) read$FUSE(r6, &(0x7f00000025c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r2, &(0x7f00000002c0)={0x18, 0x0, r7, {0x7}}, 0x18) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) (async) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x9}, 0x8) 4.989246078s ago: executing program 2 (id=1201): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x1, &(0x7f00000000c0)={0x11, 0x19, r3, 0x1, 0x5, 0x6, @multicast}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000100)={{0x9, 0x7f}, {0x9, 0x1003ff}, 0xfeffffff, 0x1}) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') preadv(r6, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x80, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000011008188046b5b79deacbc0413a1f8480b0000005e141140ca3dd24d0602000000000e0027001000000002", 0x2f}], 0x1}, 0x0) 4.900536232s ago: executing program 2 (id=1203): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) unshare(0x6a040000) (async) unshare(0x6a040000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x5, 0x5f57, 0x8, 0x3, 0x6, 0x3], 0x1, &(0x7f0000000000), 0x0, [{}]}, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfc8753e16b80e5c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfc8753e16b80e5c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffb, 0x7, 0xfee, 0x5, 0x3]}, &(0x7f0000000340)=0x78) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mlockall(0x0) openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) (async) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000006300)={'b', ' *:* ', 'rw\x00'}, 0x9) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000840)) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000840)) 4.450027697s ago: executing program 2 (id=1213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd70000000000003000000400001802c000400140001000200000200000000000000000000000014000200020000000000000000000000000000000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xf8, r2, 0x28, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0xc0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb234fa65}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x15cdea33}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x469a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x279a17e5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x46b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4aafce5a}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4040414}, 0x84) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000000)) r7 = fsopen(&(0x7f00000003c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r8, &(0x7f00000000c0)='./file0\x00') ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/pm_trace', 0x0, 0x0) read$FUSE(r9, &(0x7f00000009c0)={0x2020}, 0x2020) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10) 4.389344039s ago: executing program 3 (id=1217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x10001) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000080)) write$tun(r0, &(0x7f00000000c0)={@void, @void, @eth={@broadcast, @random="a6443148661e", @val={@void, {0x8100, 0x6, 0x0, 0x4}}, {@can={0xc, {{0x4, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "65f5f65f73946e71"}}}}}, 0x22) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xc4, 0x3, 0x20, @loopback, @dev={0xfe, 0x80, '\x00', 0x34}, 0x7800, 0x20, 0xfff, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0xb, 0x6, 0x101, 0x30, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x7, 0x40, 0x5, 0x8001}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xcffa29e1d94c6523}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4844}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x1a4, r3, 0x20, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xc4, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4010}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000740)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000780)=0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000007c0)={0x6, 0x200, 0x80, 0x38, r8}, &(0x7f0000000800)=0x10) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000c40)={0x0, 0x1, 0x16, 0xe, 0x106, &(0x7f0000000840)="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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x2, 0xf, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d00)='syzkaller\x00', 0xff000000, 0x0, 0x0, 0x40f00, 0x1, '\x00', r5, @fallback=0x2c, r2, 0x8, &(0x7f0000000d40)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000d80)={0x0, 0xd, 0x1, 0xce1f}, 0x10, 0xffffffffffffffff, r2, 0x6, &(0x7f0000000dc0)=[r2, r2, r2, r2, r2], &(0x7f0000000e00)=[{0x2, 0x5, 0x6, 0x4}, {0x0, 0x3, 0x7, 0xc}, {0x1, 0x5, 0x2, 0xa}, {0x1, 0x3, 0x7, 0x9}, {0x2, 0x4, 0xc, 0x2977cd2b4d9cea03}, {0x0, 0x4, 0x4, 0x4}], 0x10, 0x3, @void, @value}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r9, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xf8, 0x1, 0x7, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9fe}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4000800000}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3f8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8e9}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) r11 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000001100), 0x200, 0x0) r12 = dup3(r10, r11, 0x80000) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000001140)="62937ca8d544a3fc09670c9e9abab1eb752dcd51c14ac396e2cc7b24e0f0938547882c6502b232c9e6609d9a1be9144ee05226d91ba56afa9b3fc7a600f882f9284ecc66030d6a530378efcc9bf3995029d47d45c76009d5ae6a9cfd6f53c68e707ebb7fd606efd334931196e2ebaa4941acbac6fd9df3017a637466926520bd7fd9ac96c7acd3a12ae1e0fdb68700417f60e3c851020fccfcf9959a16520c72523e45f6c24363", 0xa7}, {&(0x7f0000001200)="8dd7fdc9dabda70d65cf3ea18a56971224c61ccd4b04887c24c71b2ec1c03c29a0bfbf11d73e15c76f02a7f86eb8f6cc54fdef4d2563cc016c809803213caec141629c22015a71aee171cbd37487f040f7d0d8cad7eea1dbaf2fb2bcf8738db119b131ddb3c5801f0aee9a934ca40460baec01d1745e32f958502bbe42e6e1bd0cf945f7a85d4baf859026d5ff4b95efa23408601e35c0d855c4eaf15eb8f99d8e9089fe608efff210cc0619e01da4", 0xaf}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="d4d1547d5e2df66ddc017465717167ead77751689324b6a810c4d0824f1b1bd22d69b0ec3ac8c723f0e5a45ddd01c4e1062d7a8253a7d1e625f40a6b781fdfb7aa1be67fef49f9bf4162bd51630999b0755fd96f112e66482553", 0x5a}, {&(0x7f0000002340)="da61a758f04907ff6df57e41c57061e4d3c8d9e23d348a79d644aec8d3fafa79eb860fac87e6509b73dc783850660478a7545aec789b6649c0f3911820b48e69e14d40fb1697c85356b4e80a8ef36117e3a55cb2bb5f4332a5b4e10edc121f4e74eb0fabe74874486ee6b1ecc77ff6253305cade663c28ee3548feda3258c00784dca4fafddf05", 0x87}, {&(0x7f0000002400)="849d97cf20f50209d93ec8016796e85cac487358674fd7200adbdbb38766229029974e40ef2545f6cceb7ee716aaeb3924382592f12df3cbd417e97a4fc116de4c24790f638a1af1af620bbfcb0d2cd6da562992d5ad65858a5beb3c6d6c57cdce859f717ace629ebe823b2405ce02a489edafec544653ee1821768c28cef620bddb40abac5d9b0f597af75ed9f67f9dd9a625f5560c95836dc7dde05c2f37e7726d4fde3b01b1df3e0370fb0236c87245b7ae97aaa1184c5839568c602fff7582095f37a5d1a7f70cec8d4c7b938dcf51bd10b442ddfc3869fc0584ace53ff85d41291a6af20c5bc8a96d26384296b96f1d8300", 0xf4}, {&(0x7f0000002500)="320fe431a1346241e16c68ac2f9b19dfd5", 0x11}, {&(0x7f0000002540)="24726d9cbf60b71087837169d88d0a5e784534779470b5b1a7ee9d652f7e36983b4717760f34c0baae5b75435f41ed", 0x2f}, {&(0x7f0000002580)="f88370b087a564745026ef765d6818c09755804b7c02e8", 0x17}], 0x9) r13 = accept$inet(r2, &(0x7f0000002680)={0x2, 0x0, @remote}, &(0x7f00000026c0)=0x10) readahead(r13, 0x4e0cae45, 0xcc9) r14 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000002700), 0x664400, 0x0) waitid$P_PIDFD(0x3, r14, &(0x7f0000002740), 0xa, &(0x7f00000027c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000002880)={0x0, 0x0, r12}) mkdirat(r2, &(0x7f00000028c0)='./file0\x00', 0x5e) sendfile(r14, r13, &(0x7f0000002900), 0x7) 4.320754545s ago: executing program 3 (id=1218): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0x1, 0x2}) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0x1, 0x2}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x12, &(0x7f0000000180)=ANY=[@ANYBLOB="180400000000000000000000000100001800000000000000000000004c74f202b6657818000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x7, 0x3, 0x3, 0x2180, r1, 0x7, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6(0xa, 0x80002, 0x0) (async) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x12, 0x0, 0x31) (async) setsockopt$inet6_int(r6, 0x29, 0x12, 0x0, 0x31) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x6, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x67, 0x0, 0x7c, 0x3}, @struct={0xd, 0x1, 0x0, 0x4, 0x0, 0x6, [{0x10, 0x5, 0xeb3}]}, @float={0x5, 0x0, 0x0, 0x10, 0x8}, @ptr={0x5, 0x0, 0x0, 0x2, 0x4}, @func={0xa, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x61, 0x30, 0x4f, 0x2e]}}, &(0x7f0000000940)=""/238, 0x6a, 0xee, 0x0, 0xeb6, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x29, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xdbcb}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x4, 0x1, 0x1, 0x8, 0x5, 0x10, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x283b, 0x0, 0x0, 0x0, 0x9b}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7fff}, @map_val={0x18, 0x1, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x36c97430}, @jmp={0x5, 0x1, 0xa, 0x5, 0x8, 0x2, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='syzkaller\x00', 0x9, 0x89, &(0x7f0000000700)=""/137, 0x41000, 0x20, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x1, 0x2, 0x9, 0xb}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000a80)=[r1, r1, r1, r1, r1], &(0x7f0000000ac0)=[{0x4, 0x5, 0x8, 0x8}, {0x1, 0x1, 0x6, 0xb}, {0x5, 0x3, 0x4, 0xa}, {0x4, 0x2, 0x9, 0x9}, {0x4, 0x2, 0xd, 0x8}, {0x2, 0x3}], 0x10, 0x5, @void, @value}, 0x94) 4.320476716s ago: executing program 3 (id=1219): syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x81, 0x1, 0x2019}}}, 0x7) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x6c}}, 0x0) sendto$packet(r0, &(0x7f0000000380)="44c394f305916c4516999da286dd", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TCSBRK(r5, 0x80111500, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006", @ANYRES16=r7], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 3.469785478s ago: executing program 2 (id=1242): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000080", 0x64, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ef6c2fca06a9bd768d5f1", {"76c19815002000000000000000001000", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x1, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) syz_emit_ethernet(0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004500001d0000000000019078ac1414bbac1414aa080090780000cf"], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000480)={0x800000, 0x4000004, 0x8000009, 0x3, 0x1, 0x15a}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r2, 0x9, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001) r3 = syz_io_uring_setup(0x239, &(0x7f0000000400)={0x0, 0x6fbe, 0x10100, 0x0, 0x2e0}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x81, 0x0, 0x0, 0x2, 0x1}) syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x9f70, 0x4, 0x2, 0x45, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x6b, 0x0, @fd=r0, 0xff58, 0x0, 0x5}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) r8 = socket$kcm(0x10, 0x2, 0x4) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x220c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r12, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r13, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r14, 0x0) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.26949316s ago: executing program 3 (id=1263): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @empty}, &(0x7f0000000040)=0xc) listen(r0, 0xe8c0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'gre0\x00', r1, 0x7800, 0x7, 0xc698, 0x8, {{0x1b, 0x4, 0x2, 0x10, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @remote, @multicast1, {[@timestamp={0x44, 0x18, 0xa8, 0x0, 0x0, [0x9, 0x8, 0x1000, 0x73, 0x25a507ba]}, @generic={0x44, 0xf, "cc8a1d8f5a610c7668fbedce99"}, @lsrr={0x83, 0x1f, 0xa9, [@dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010102, @rand_addr=0x64010100, @local, @rand_addr=0x64010102, @private=0x10, @private=0xa010102]}, @generic={0x83, 0xc, "37c933a6093b9f8bef05"}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@mpls_getnetconf={0x1c, 0x52, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x98) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x7, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'pim6reg\x00'}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f00000007c0)={0x1, 0x380, 0x340, &(0x7f00000003c0)=[0x9, 0x9, 0x3, 0x8, 0x5, 0x3, 0x3, 0x80, 0x8, 0x5, 0xbc, 0x8732, 0x2, 0x6, 0x7a10, 0xa, 0x5, 0x4, 0xf17, 0x19, 0x8, 0x9f58, 0x7fff, 0xfffffffffffffe01, 0x1, 0x7a18, 0x5, 0x65, 0xffff, 0x1, 0x401, 0x4, 0x6, 0x3, 0xfffffffffffffff9, 0x4, 0xffffffffffffffff, 0x100000001, 0x4, 0x8, 0x800, 0x5, 0xc, 0x9, 0x1, 0xf53, 0x100000001, 0x9, 0x3, 0x3, 0xe51, 0xa, 0x10001, 0x10000, 0x9, 0x7, 0x1, 0x263, 0xffff, 0x8, 0x1000, 0x2, 0x9, 0xf, 0x1, 0x7fff, 0x4, 0x7, 0x36c, 0x400, 0x4, 0x5, 0x8, 0xfff, 0x100000000000000, 0x5, 0x4, 0x20, 0x3ff, 0x7ff, 0x4, 0x4c5, 0xf8, 0x5, 0x7fffffffffffffff, 0x0, 0x80000001, 0x2, 0x2, 0x1, 0x4, 0x0, 0x2, 0x80000001, 0x4, 0x6, 0xfffffffffffffffb, 0xab3d, 0x0, 0xf3, 0x3, 0x2800, 0x9, 0x8, 0xd239000, 0x0, 0x1, 0x2, 0x5, 0x7fffffffffffffff, 0x2, 0x5, 0x8000000000000000, 0x2, 0x1, 0x9, 0x9, 0xfffffffffffffffa, 0x7, 0x10000, 0x3, 0x1, 0x81, 0xe74, 0x7a, 0x2, 0x0, 0x8]}) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = fcntl$dupfd(r5, 0x0, r4) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r6) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200410}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, r7, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xf}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9f}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r8 = syz_usb_connect$cdc_ecm(0x3, 0x71, &(0x7f0000000980)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0xf1, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0xc, 0x3, 0x2, 0x6, 0x0, 0x38, {{0x5}, {0x5, 0x24, 0x0, 0x4a36}, {0xd, 0x24, 0xf, 0x1, 0x421, 0x6, 0xfffa, 0x10}, [@country_functional={0x10, 0x24, 0x7, 0x8, 0x88, [0x0, 0x9, 0x80, 0x5, 0x0]}, @ncm={0x6, 0x24, 0x1a, 0x97c, 0x12}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xbc, 0xa7}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xa0, 0x5, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0x1, 0x5c}}}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x250, 0x7, 0x80, 0x8f, 0x40, 0x8}, 0x13, &(0x7f0000000a40)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x0, 0x49, 0x7, 0x2, 0x200, 0x1}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x437}}]}) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000bc0)={0x14, &(0x7f0000000b40)={0x20, 0x3, 0x29, {0x29, 0x10, "7369a0ff5b8e3b6dfe3003dbc84f08ee59b461dc9a215bdf653293894471775eda80776f892de7"}}, &(0x7f0000000b80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x1c, &(0x7f0000000c00)={0x0, 0x6, 0xb2, "886b128f390a32efd59297650f135906abda111e13103aa9d16899e7d714e3d482fff4373d5e1a34e891cf2ff9ed62e9eff1aea455361fb500bc0fce00278b0cbbfd05bdb88d66a019dfa9a5c134acdeb786ae07b6a254b0d0c77b8a52c84c1c094d5bc3c2b9c080817c38f0398487ac8e75d9a7051978306cbaf79adc5d01e9b8c05c14179fee28744f5c7b88a833e9005db11f1e7a9a5bfd3c7835abc255de4c783db2e404e84d4041a7cff7916fc4ef93"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0xe}}) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000d80)={0x0, 0xc1}, &(0x7f0000000dc0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000e00)={r9, @in={{0x2, 0x4e24, @broadcast}}, [0x9, 0x4, 0x8001, 0x7, 0x1, 0x8000000000000001, 0x3, 0x401, 0x9, 0x100, 0x1, 0x87, 0x7, 0x7, 0x1]}, &(0x7f0000000f00)=0x100) (async) r10 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000f40)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1430, 0x474c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0xf, {0x9, 0x21, 0x3a8a, 0xc, 0x1, {0x22, 0x8c5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x94, 0xf8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x9, 0x3, 0x8}}]}}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x110, 0x1, 0x9, 0xfc, 0xff}, 0x15, &(0x7f0000000fc0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0xfff, 0xf000, 0xdd9c, [0x0]}]}, 0x2, [{0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x1407}}]}) syz_usb_control_io$hid(r10, &(0x7f0000001200)={0x24, &(0x7f00000010c0)={0x40, 0x1c, 0x60, {0x60, 0x7, "22147ce4bae20806c23e83e5a95bf0aa2c138e0c6935e088cad8a7124e8260a94f0ad99239929cbe28604f06472507e6bb76a9ba9ad0aa4651a5b3a03248b46d34fe76a5cdb213cf7ff0b8e690a4e2bdccbdc6d36e9dc953b2b25bd23a49"}}, &(0x7f0000001140)={0x0, 0x3, 0x2f, @string={0x2f, 0x3, "06467e844fb7a8068f6440d24a1f5e773533b9e551fce192b0b626942fa6f50a51c123de7d5ae67047dd39ce79"}}, &(0x7f0000001180)={0x0, 0x22, 0x10, {[@local=@item_4={0x3, 0x2, 0x8, '$V7h'}, @global=@item_012={0x2, 0x1, 0x2, "6a9f"}, @global=@item_4={0x3, 0x1, 0xb, "402e578b"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_012={0x1, 0x2, 0xa, "f0"}]}}, &(0x7f00000011c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xcf, 0x95, 0x1, {0x22, 0x1f7}}}}, &(0x7f0000001440)={0x2c, &(0x7f0000001240)={0x40, 0xf, 0x7, "862cbf8198d0ec"}, &(0x7f0000001280)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000012c0)={0x0, 0x8, 0x1, 0xf6}, &(0x7f0000001300)={0x20, 0x1, 0xbb, "02fdae986e1cc121cb27b779f0e848a08832740b3d1e1ed1f9cdf4c0fa4a329af2cb637b388c60eb158d3b24fd8b38d8df0a80f35960ebd1099b5ba5f81f5cd60a72536bffda50bae924bc5c700bee6e45cdd4859f24f335f985f196aaf4ec8892af73e7661f56f954a83dac70d1b4820b352a6e30bc5cd20ec03b6baf8041bb055b99deff33d7e06f914c129120a13fa16de60f912e5e5b88499759e380293d9b5f8e382f47cb4f6262bd9aadcc95252c0377a82826df026d1cf7"}, &(0x7f0000001400)={0x20, 0x3, 0x1, 0x8}}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000001480)=@overlay={0x0, 0x2, 0x4, 0x0, 0xff, {0x77359400}, {0x1, 0x0, 0x3e, 0x8, 0x7f, 0x2, "7010aa1b"}, 0x1, 0x3, {}, 0x80000001, 0x0, r6}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001500)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000001540)) (async) r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001580), 0x1, 0x0) (async) r12 = syz_usb_connect(0x4, 0x8cd, &(0x7f00000015c0)={{0x12, 0x1, 0x300, 0xa3, 0xb2, 0x8d, 0xff, 0x19d2, 0x1252, 0xa728, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8bb, 0x2, 0x2, 0x58, 0x40, 0x7, [{{0x9, 0x4, 0xaa, 0xab, 0xa, 0xff, 0xff, 0xff, 0x7, [@hid_hid={0x9, 0x21, 0xc0, 0x5, 0x1, {0x22, 0x752}}], [{{0x9, 0x5, 0xb, 0x0, 0x40, 0x8, 0x5, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xffff}, @generic={0x18, 0x8, "c79f448126dc71955b8b7d0094dfe7f48a8741ca49f3"}]}}, {{0x9, 0x5, 0xf, 0x14, 0x8, 0x5, 0x3, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7c, 0x7ff}]}}, {{0x9, 0x5, 0x4, 0x5, 0x200, 0x8, 0x10, 0x80, [@generic={0x38, 0x8, "624c1bfaf1a436be3333f0e602c8df9ecf49500e36ef645e354743f88e003c9dfc66cb2b4776439aa0153d31fa77e2cf0b68caabb3b2"}]}}, {{0x9, 0x5, 0xa, 0xf4516b5bbd9d9df1, 0x200, 0xe2, 0xe, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x6}]}}, {{0x9, 0x5, 0x1, 0x18, 0x10, 0x0, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x4}]}}, {{0x9, 0x5, 0x5, 0x3, 0x408, 0x2, 0x1, 0x4, [@generic={0x42, 0x6, "7f6b019472cbed97dbda3529e7bca69b266d17273e2850d9012cde4b22a76f5beb7e222531207467fc8becfca30e00e2b73b1b0b7c722718fc66df2cca453f49"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0xf, 0x6, 0x4, [@generic={0xe1, 0xb, "cdad845db1d55e8b27425dcd02cd89f6a9fc9fad519a579a00d44f8f135eb570896fcd44a759960b2b0b435c8120f0e5d121706676c1bf1c38fc43c6ce659ec6be659e64f797ad9200c40be6492e1d56a19be238af955f4aaaf28a0b2b19b4618855d31104b992f99e62b78bb7380c1c99400bfc19cd6c16ffd0a8a2d186667f802fffdf3be39608c8605f946e2fed3105a3ee9f57c9efc176269c344dc2c6990ecd793cba2bc1328a2c3d636a812f0f6ff0396b321802b6a7be4248239cbb4dff1bc9b092a44a1f6303dfd99c3a7514c6b67489ab65bd90cbdc6fe1865dd7"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0xfa, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x3ff}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x8e, 0x1, 0xc8, [@generic={0x5d, 0x31, "6e78273e4d2656ae19041156693fa05deb824c52fcbec9fdfb05a897f3f7d44a8e668f362dc071b7f6b6d8133326782f5613bd35bededaf6b1f8512e21a1587d8d3cda9389cc5276315dd903aaa1e016d6c78888ede2f1e18641f8"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x3, 0xc6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1}]}}]}}, {{0x9, 0x4, 0x73, 0x2, 0xe, 0x48, 0xfb, 0x2d, 0x4, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "16d6dc"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x8, 0x1, 0x3}, [@mdlm_detail={0x35, 0x24, 0x13, 0x5, "7a93e941ad07c212722886ac0610d7d49ea539ce5bbb1dad3869d1b4064a878cf47fe16f1a0f85194e017c33983919befa"}, @acm={0x4, 0x24, 0x2, 0xe}, @country_functional={0xc, 0x24, 0x7, 0x9b, 0x8, [0xc, 0x5064, 0x1]}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x6, 0x9}]}], [{{0x9, 0x5, 0x3, 0x10, 0x400, 0x1, 0x7, 0xb3, [@generic={0x89, 0x23, "4fc46abe19131a8d57ed8ca8af4625a5effc37bf234b13ab5483a8cfc8e59fcb451fb49e127936c839542996e81408146e46fc0b63b9b98f0e27c300d87e4e10961443ddfa5bf855d2f1cf474982a46e735eaddea5116bd7924db10e94c987264bd762911eb54a96cef8e20495668d70e08aa2149c38b8f754c2dc173103ab93b9c408c67e92e0"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0xfeff}]}}, {{0x9, 0x5, 0xa, 0x4, 0x200, 0x81, 0x9, 0xc, [@generic={0x73, 0x4, "5f5c6276e5047d5ec4e891318587f14b639b53d4fa67da68e1129d761d12872fa903f708983e5d7880dcc282506cb07e663711cd23a2ce2e5cf0c041e9741cd8a11afcb00fe5820a28cb29a8f82d8e64c7aa9b606c8a16b789a4b5efbc98e7d0824e8adb4ad914f460c57fbeb3fe6c98e3"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x0, 0x0, 0x40, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2c}]}}, {{0x9, 0x5, 0x3, 0xc, 0x400, 0xff, 0x93, 0x4, [@generic={0xa1, 0xc, "001a5a4580f36a80c0931631934b56253369adac017d303a3501752eb4f11c5a39b6bdd3c3d1fcf740e577471ba08ced41d4d8e20de7e39aa0ea5553a2c8957c9638da133ea409adda75fd019b4440bf9a0bfd5263e58cd178d7581a344414775f8130131aa9b54ba1eda491f464fc8444f6c675916806da157a0df2e9e1ca0b5c4f3fc827a3df1c91a7e5cbb328e7af2b1a7e4b93f003bf5245877472d7e0"}, @generic={0x76, 0x5, "ea6acc0f3bbe6c4e90cb0f145be4e861892d11e79ac90800fb659184c61d5ebfeebc23026a37ef00918b9dd0d4faa81625f60e6dce4f3b6ecf5e91f7f3316a043061a480f91470430ad93de16bf3a5312f3d526373a4fbd8349941b641ad3e61d7feb1b2d02f9dce713ad899a8561708ae5ebbef"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x400, 0x1, 0xae, 0xdb, [@generic={0x70, 0x8, "53ee7186af3c220d4af68a7293c73c86a7f76812745908ddeff8ae57c8b7d4ff6bc73ddd3b63682b72b2eda59bab51f39e41420c1486880e01771f3649f2dd4f7749f6e4b5d53394da5eb5ef73470737cbc4a7807ced095bb0b7a6457414acb0d11ae14e23ed985c6edab149305a"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x6, 0x3, 0xe, [@generic={0x28, 0xc, "927b9790d61fb37a1d720aba57c679cd27377beda0aace3bda5225580247e7b0ca51d5b2af2e"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x8, 0x8, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x54f5}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0xd, 0x5, 0x2, [@generic={0x99, 0x23, "7564d57d9b0173deb1911c1d8e0d265b587e15c49a3982f28ccea4ae8d65610b22d5eb365be396cf0a28d55d70da4b284e5a46dcd57181f679efa4a0f077405071660f955dec5a267b07cda0835110ca606e0553f776734737ffb97ccf810ebdd71d63ffb22aae5afd570c968877337e981d79698faf0c3e75a1d2dc61cd9e2539a2596ad0e789c075151da51b289a738c276031dab4bc"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x5, 0x47, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x97, 0x55b}]}}, {{0x9, 0x5, 0x7, 0x0, 0x840, 0x9, 0x4, 0x3, [@generic={0xf4, 0x21, "6964259662d382c0d5e495981202656c8a5fadc6804a59791a4df09197635b5d76f4db9c78256efac2e18c4dac8e46fc5638468828d9a7e192d2f21872cce8e26e1364d5013d45e8e6dbff57df9d4e483ff82571d2d7d23a28be8ea7797f8e29ecbc1c540c4795048bfacf4600309c06cb019b2694acf697df848d91326a4c77eb7a85d0e93e10102bfa47d1518a82a641b2d2e973744c1f0b7758d184f7566458f55f36698b0234482a66d9bee992598ff81815a7f120606ca3fcaf8bae780e80cdec9f58d2f5ce61e043087ba6a728935aabf50f30d18b25e7b7441ca76122f17cf8b6df032234f82730ee3c47231bddca"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x6e}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x8, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x4}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x81, 0xf, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x7}]}}, {{0x9, 0x5, 0x8, 0x2, 0x0, 0x5f, 0x2, 0x28, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x8000}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x2, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xb}, @generic={0xd9, 0x8, "d6ba121db7cfc574625cc64ed33e59d42bb0ebf5e8fa32e3c04c10945c1bd1a108aa774baccf2dcbb090187bb2a1ac6a8d3fca2e782475983512f5a1e57fdad8b91f12eabd1572dfffd34ad53e7a91bf91efc4fa42b2b5026ad3edc59aeb5b98d992eebaf550d465d795f282f4d2d38b522308789ee6914691b87bdd4549e6f393096be80f206503aa60e1b45787a143f9836575033b8aec365876006004d1235f59021f2fd785b4ab040fd609f1a6966d06fcc989c08b41bc1c25ebb9510b8965d42ef8a5013136234b0e71ac1f658e704bc62a50f294"}]}}]}}]}}]}}, &(0x7f0000002340)={0xa, &(0x7f0000001ec0)={0xa, 0x6, 0x300, 0x0, 0xf9, 0xf, 0x20, 0x3}, 0x28, &(0x7f0000001f00)={0x5, 0xf, 0x28, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x2, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0xa, 0x0, 0x0, [0xc0c0, 0xc000, 0xf, 0xc0582aa57cbfee1d]}]}, 0x6, [{0xe3, &(0x7f0000001f40)=@string={0xe3, 0x3, "4f32e1314faaac1e09b2d4cb47dd4435df05aed9296abfb5d1c532cfb20e9c09a00ebd1be93c4aac83f618539c73b48c2f54bd6ad40cf9cd9b73a600720c25289de8c32f8dae951bd4a12adee4cd156df90c7e73976edfa980561a6c317b0efed08a2b4af410cb245fe9bf603506d3a27cef45f295f51917145992972463b680f30133b7b67b5f7e27182d385ca638c0bbb8e6f0a6257a39e99ab99759e5ffacead0b82b2b4bfbde959254ab0051e6401c17a22a796812023442db5445aa51cadf8915a8cce2565a3f6ee7606981325beb5f73eb40bb82f787c85bc3592e7331a5"}}, {0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x1401}}, {0x32, &(0x7f0000002080)=@string={0x32, 0x3, "e754f60b046297cf649a468d2362e608c3df796d4e186e1fa5d6dde6b886b08f5de68a8e1207c51ef85694ab70fbf147"}}, {0xfe, &(0x7f00000020c0)=@string={0xfe, 0x3, "c8391dd9379199757b5312ec97d3d75d85e7b6703b89cc7954c65f25a382e0dc3ee20554ca55a0e7019bb21b4e7fb9921f10e6b35aa32f60f96b594e32ea6fd39110b0acc281de6b5ba4446bb2b345c369c9f3205f912289034d1932bc4ab2590f4b4162808b834e70f75c5d40852b2ece9e8f14663661175d13d5afba7032df0cadc3f643d227fe9c7b9aee6bdcf7b2e81fdcc1556cd72f5ad1e88739eb19064db0cadda3e3e7968dfebb854e65ba1ad94970e0bb4bcc18f0c7065fd375d0b5475cabddf3aa8ef2482c2092ba5616a129a1a43815d933a9b46fb60d4a94504ab5d903ff521993664394dc9307e6b21dd9cfe4afbccec8d39bc66a9a"}}, {0x7d, &(0x7f00000021c0)=@string={0x7d, 0x3, "22e30f0e474dc20f1dde3be5e5d0201e573edc7ee3ea424661e4b965d6cb55241078d90a68fbaf28ff7c72e35276d4256024b8df9b316aceafd640bad0217fa3a06e42c8e4aa4ddb7f021d2d197ac7b30870165e86ebec9d212c69763b65c1e2cd0ad7b03c48ce6d368744328559be66e63fa0fecd55987c1b0c6b"}}, {0xe2, &(0x7f0000002240)=@string={0xe2, 0x3, "51576b865344f4e5f73231b4008d9e3d484d06b9426ada4106a81cd2b45a9c5705b0b8a9080c4a7da254babaa7e76ff1eca8ca9f0fcf39d801ada2574d1c73c8709acc4aa39771c62b9618df3397301c0875021491ce9ad0092c32c6d929133c164e14715d6441252e8749020bb94ae5378bd1f0a52acc82a66877d7b7e74d9103e8b859f95789b11e2dda3452fae7df21220e4282fa87084507a4a796a83eff944ffdc8a58c79b5dd585536a1b9cdd75a86a8483ea5ae89d38ae58536c2cbe3223dcf445eb5791723555f659ea15aaf92ab658d3a1e7856bed7704928d61072"}}]}) syz_usb_control_io$printer(r12, &(0x7f0000002500)={0x14, &(0x7f00000023c0)={0x20, 0x23, 0x53, {0x53, 0x8, "837b123a08c1223495ace8b46635fc49eb936a546e3c9a17ce28b9821845b1613d1ee1f67355de628c7fe7eafc72cf59feb37bc348459caaec888568a060c1cfa4d908992fd380f06eed77f29ac80138ea"}}, &(0x7f0000002440)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "49f809ff97d248a1960f2ae1b1d9f988243e6cc799a4ca1029b638f95764f5986c84c72131b521c525352ad5c7ca3b707f0070d13cf7d25033e755ae9488116210a423fc251ca1676a4c5899144423a1a2e5333908c7ca9c277dcdeb362d887a5171273661edbfe02935f436de7fbf22694d0f6380350a178c338aa79b583915cc6866788c1d74e9bdf2217e002d7d4db2e9c0f9e3fc9021d275ba74d4"}}}, &(0x7f0000002700)={0x34, &(0x7f0000002540)={0x40, 0x18, 0x71, "c9a52d383266c24caa99f0cc9f37d2c0a38ee40ee930c09fa778fe5e898b962102ca2f9bbe3dec705888f8da02bce520a405038b434fd4e17fba9962b1b07b406f5d3967afe667c91463c3ea29822ecba6551550679c0a0734a073d1b001ae40d8e8fa7433cfa256630c5e4a6599f80296"}, &(0x7f00000025c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002600)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000002640)={0x20, 0x0, 0x23, {0x21, "7b6432a6fb4088577c7bce0d2776dedf32e21247dec53abb18b9abe9bef9fd8664"}}, &(0x7f0000002680)={0x20, 0x1, 0x1, 0x80}, &(0x7f00000026c0)={0x20, 0x0, 0x1, 0xff}}) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000002740)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000002840)=0xe8) setresuid(0xee00, 0xee01, r13) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x58, r7, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve0\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r11}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) (async) ioctl$KVM_CAP_X2APIC_API(r11, 0x4068aea3, &(0x7f00000029c0)) 1.079974867s ago: executing program 0 (id=1265): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) creat(&(0x7f0000000300)='./bus\x00', 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) (async) symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') (async) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file4\x00', 0x4) (async) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd22, 0x1a1802) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, &(0x7f0000000440), 0x1) (async) syz_open_dev$dri(&(0x7f0000000080), 0x10, 0x125001) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0xffffffffffffff22, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) capset(0x0, &(0x7f0000000100)={0x200000, 0x4, 0x4, 0x0, 0x6b20, 0x8}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x606c) 980.039823ms ago: executing program 0 (id=1266): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xdd) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300)) socket$unix(0x1, 0x2, 0x0) pipe2(&(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001800010000000000000000000a00000000000000000000001800160014000100020000000000000000001000fc00010008001f"], 0x44}, 0x1, 0x0, 0x0, 0x24041004}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, 0x0, 0x0) (async) bind$inet(r4, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 799.934581ms ago: executing program 1 (id=1268): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5883, 0x100, 0x0, 0x3}, &(0x7f0000000340), &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="8b332000000000000000150000000c00380146979e714118d80da8727099004ce3c3321c00000034001d80300000802c000d80280001800900010012013624090000000500000500070001000000"], 0x54}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000840)=@gettaction={0xc4, 0x32, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff001}}]}]}, 0xc4}}, 0x40800) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000240)=0x2000, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000580), 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$tun(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010000000000200000004600003f00000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c4000502000000000000000002d58838068b91000000"], 0x4e) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000021070000000000000000000002000000000000000000000008000a0006000000"], 0x24}}, 0x8000) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f00000000c0)={0x1, "b85c528abf9426fe9d7e513b65c5c22df4909fa6891ca94446b88c663d7c32f4", 0x1, 0x1}) sendmmsg$unix(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22040881}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000000000dc26cfdf0001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x4000}}], 0x2, 0x0) request_key(&(0x7f0000000400)='rxrpc_s\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000004c0)='nl80211\x00', 0xfffffffffffffffc) 539.534771ms ago: executing program 1 (id=1269): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000200000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x208563b1da94c8b2, 0x1, 0x3}}, 0x10) write$tun(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 369.834771ms ago: executing program 0 (id=1270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_proto_private(r0, 0x89e3, &(0x7f00000000c0)="141f6b67029deb7eaa1a3a158291e331b6126ff9e1a4faf48819aacbf7861fd5cc8f706243676e73374c5ab8b36e447d2ed33bef446c82ccfcdf80332c01d0b8e94ae22aef64d5c5aaffc9f994ed1dd4e55c1223dca9443a9312e94a14c9608af28f5f773eb5f56cae27ee9b70eee32ef9a9723c9ec683601968dc86dc89c8badeb4b51ba8174f560632bbc8827cfa62e38f0666b5c16c9dc2008a946337ce70e5c7a603795dd4d121924b5792bbd4dd0b7f11c5efe1bc6a5b") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000a08000140000000170900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000002d00090027bd700000ee0000040000000e0018"], 0x24}}, 0x84) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 369.423656ms ago: executing program 1 (id=1271): r0 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048845}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@deltfilter={0x24, 0x2d, 0x5, 0x70bd2a, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xfff3, 0x9}, {0x6, 0xf}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "427f4d05618664ecb7f952ed7667675bc32afc7ebbfea1deee1e2e520cc38c6a"}}) 229.349949ms ago: executing program 0 (id=1273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r1, 0x11a, 0x3, &(0x7f0000000040)=0xb, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000008c0), 0xfecc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x4e0, 0x9, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_DESC={0x4a8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x68}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40000000}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffe01}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe8}]}, {0x4}]}, @NFTA_SET_DESC_CONCAT={0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xae4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x780}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xb4}, @NFTA_SET_DESC_CONCAT={0x110, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x120}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6f4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}]}, @NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_CONCAT={0xa0, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7d7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd5e2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x49}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}]}, @NFTA_SET_DESC_CONCAT={0x174, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4158}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x53}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x72d2488b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1fc000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x62eb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff91}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa8ae}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe0000000}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x72a1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x508}}, 0x0) 228.493898ms ago: executing program 3 (id=1274): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@ccm_128={{0x304}, "7fdd1bc8974f099a", "827f79b2d67ee24300a044274ee33a1b", "a3b8e2dc", "fe77875d773acfbf"}, 0x28) sendfile(r0, r1, &(0x7f0000000100)=0x6, 0x100000000010001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000000000000000fffff000000000000900020073792b32000000000500040000000000050005000200000010000300686173683a69702c6d616300050001"], 0x54}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r4, &(0x7f0000000b80), 0x2, 0x2001, 0x0) 228.202763ms ago: executing program 2 (id=1275): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x33, 0x1, 0x2, "1c13ebdaf2f20d55806b26b1d750185fd75a206da058e85b2197edb1439b1cc2", 0x20363159}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x2, @sliced={0x7, [0x0, 0x1, 0x4, 0x3, 0x3, 0x9, 0x5, 0x0, 0x0, 0x7fff, 0x2, 0x800, 0xf, 0x1000, 0x4, 0x9, 0xd, 0x8, 0x0, 0x1, 0x0, 0x2, 0x5, 0xa, 0x3, 0x551, 0x1, 0xd8d3, 0xf4, 0xd, 0x9, 0x101, 0x3, 0x8000, 0xfff8, 0x1, 0x200, 0x8e, 0x5, 0x40, 0x1, 0x8f, 0x1, 0x3e82, 0x9, 0x9, 0x7, 0x9de], 0x7}}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000180)={'veth0_vlan\x00', 0x44}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r5, 0x2, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @random="44328a67ad89"}]}, 0x3c}}, 0x20024090) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r5, 0x2, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @random="44328a67ad89"}]}, 0x3c}}, 0x20024090) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x5ca5, 0x200, 0xfffffffe, 0x8}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x4) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x4a0800, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x4a0800, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000000000007000000ff"]) (async) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000000000007000000ff"]) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01df25010045200c0002000400000132420c4b9964f1f80c00030009000000000000000ba396795394d25e4de536b00c2c269b33a1f3cc24fe7cb231e2dfb4a89cd7c71583643059711f71d76c3a7fefd6e122c5908177"], 0x30}, 0x1, 0x0, 0x0, 0x20044000}, 0x20040040) 159.583664ms ago: executing program 1 (id=1276): r0 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0xfcf6}], 0x1}}], 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd0c, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 79.638895ms ago: executing program 0 (id=1277): mkdir(&(0x7f0000000300)='./bus\x00', 0x40) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x814004, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="02000000010000000000000002000200", @ANYRES32=0x0, @ANYBLOB="04000000000000001000"/24], 0x2c, 0x3) 78.815135ms ago: executing program 3 (id=1278): r0 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x16b5, 0x41) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x5, 0x6, 0x105, 0x3, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1000) (async) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000001180), 0x10000, 0x900) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r2, 0x40044104, &(0x7f00000011c0)) (async) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r3, &(0x7f0000ff6000/0x4000)=nil, 0x400c) (async) mremap(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff9000/0x2000)=nil) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ff7000/0x2000)=nil) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='bic\x00', 0x4) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000140)={0x1, 0x6, 0x2, 0x0}) (async) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56f64, 0x70bd28, 0x25dfdc04, {0x0, 0x0, 0x0, r7, {0x4, 0x1}, {0xc, 0x6}, {0xd}}}, 0xae}, 0x1, 0x0, 0x0, 0x51}, 0x800) (async) shutdown(r4, 0x1) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000000206030000000000000000000200000013b20e0f80d30460687b974fd92b5c000300686173683a6e65742c696661632b0900050001000700000005000500020000000900020073797a300000000005000400000000000c0007800800064000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20004080}, 0x20040800) (async) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000001c0)={0x4, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x9, '\x00', @ptr=0x12}}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r8}) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000240)=@req3={0x5a8c, 0xfffff001, 0x60b5cf75, 0xea, 0x7, 0x5, 0xffffffff}, 0x1c) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0\x00'}) 74.144561ms ago: executing program 1 (id=1279): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd2c, 0x0, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3}, [@FRA_DST={0x14, 0x1, @local}]}, 0x30}}, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x80}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x80}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRES8=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000047c0)=r3, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000047c0)=r3, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}, @NFT_MSG_NEWTABLE={0xa0, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x46, 0x6, "50c23eec95bb3c794bfcf93bdb4c7c672370d5d33ef0e11352d647313e4497476226a448bc4a8eb8efd8bf2c48f793a65419f42001946e4bb6ff0af78ca48fd134bc"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x13c}, 0x1, 0x0, 0x0, 0x2000002}, 0x4001) 408.218µs ago: executing program 1 (id=1280): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x80}, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x48, r1, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0b}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x48}}, 0x0) 0s ago: executing program 0 (id=1281): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000017c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000001340)=@newtaction={0x84, 0x30, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1100}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0x24}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x7ff, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x84}}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x1c, r0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}}, 0x4008040) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000080), 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0xe3b49000) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000400)={'lo\x00', {0x2, 0x4e22, @local}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r5) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)={0x64, r6, 0x201, 0x70bd26, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0xd}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x64}, 0x8, 0x3000000000002, 0x0, 0x4040010}, 0x4) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00', 0x6, r8) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r7, 0x0) mincore(&(0x7f0000ff4000/0xc000)=nil, 0xc000, &(0x7f00000007c0)=""/232) io_setup(0x6, &(0x7f0000001380)) r9 = socket$netlink(0x10, 0x3, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000111420002abd7000fedbdf250800030003000400000008004a00ec00000008004f0003000000080001000100000008004b001300000008004a000200"/80], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): b6/6-1/6-1:0.0/input/input10 [ 68.415933][ T7387] validate_nla: 3 callbacks suppressed [ 68.415945][ T7387] netlink: 'syz.2.390': attribute type 29 has an invalid length. [ 68.420918][ T7387] netlink: 'syz.2.390': attribute type 29 has an invalid length. [ 68.458319][ T7389] netlink: 72 bytes leftover after parsing attributes in process `syz.2.391'. [ 68.466987][ T7389] sp0: Synchronizing with TNC [ 68.521940][ T7363] input: syz1 as /devices/virtual/input/input11 [ 68.530914][ T5334] bcm5974 6-1:0.0: could not read from device [ 68.536935][ T5334] bcm5974 6-1:0.0: could not read from device [ 68.540928][ T839] usb 6-1: USB disconnect, device number 4 [ 68.541201][ T5334] bcm5974 6-1:0.0: could not read from device [ 68.734880][ T7410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.777203][ T7410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.834731][ T7402] delete_channel: no stack [ 68.971366][ T7430] netlink: 'syz.0.402': attribute type 12 has an invalid length. [ 69.132538][ T6450] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 69.240938][ T7450] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 69.282585][ T6450] usb 8-1: Using ep0 maxpacket: 8 [ 69.286489][ T6450] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 69.290101][ T6450] usb 8-1: config 0 has no interface number 0 [ 69.293581][ T6450] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 69.298186][ T6450] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 69.301999][ T6450] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.309717][ T6450] usb 8-1: config 0 descriptor?? [ 69.316753][ T6450] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 69.389811][ T7460] netlink: 'syz.1.411': attribute type 32 has an invalid length. [ 69.431692][ T7463] sp0: Synchronizing with TNC [ 69.492497][ T7464] dvmrp1: entered allmulticast mode [ 69.595741][ T7468] 9pnet: Could not find request transport: virti [ 69.613412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 70.116893][ T7498] binder: 7497:7498 ioctl c018620c 2000000000c0 returned -22 [ 70.126157][ T7499] netlink: 248 bytes leftover after parsing attributes in process `syz.0.422'. [ 70.170599][ T7503] netlink: 448 bytes leftover after parsing attributes in process `syz.0.425'. [ 70.173837][ T7503] unsupported nla_type 14345 [ 70.303108][ T7508] overlayfs: failed to resolve './file1/file0': -2 [ 70.770931][ T7536] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 70.774858][ T7536] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 71.085921][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.088194][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.381735][ T52] usb 8-1: USB disconnect, device number 4 [ 71.416129][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 71.416140][ T40] audit: type=1400 audit(1749812982.206:519): avc: denied { create } for pid=7551 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 71.454485][ T40] audit: type=1400 audit(1749812982.246:520): avc: denied { listen } for pid=7557 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 71.474375][ T7560] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 71.477137][ T7560] overlayfs: missing 'lowerdir' [ 71.509514][ T7563] xt_hashlimit: max too large, truncated to 1048576 [ 71.549288][ T7569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.782608][ T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 71.929581][ T40] audit: type=1400 audit(1749812982.716:521): avc: denied { open } for pid=7575 comm="syz.3.446" path="/dev/ttyqa" dev="devtmpfs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 71.938749][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 71.942498][ T40] audit: type=1400 audit(1749812982.726:522): avc: denied { module_request } for pid=7575 comm="syz.3.446" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 71.944977][ T34] usb 5-1: config index 0 descriptor too short (expected 1042, got 18) [ 71.951562][ T34] usb 5-1: config 117 has too many interfaces: 189, using maximum allowed: 32 [ 71.956198][ T34] usb 5-1: config 117 has an invalid descriptor of length 0, skipping remainder of the config [ 71.960428][ T34] usb 5-1: config 117 has 0 interfaces, different from the descriptor's value: 189 [ 71.965907][ T34] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 71.968926][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.971498][ T34] usb 5-1: Product: syz [ 71.974058][ T34] usb 5-1: Manufacturer: syz [ 71.975806][ T34] usb 5-1: SerialNumber: syz [ 72.053484][ T40] audit: type=1400 audit(1749812982.846:523): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 72.112580][ T40] audit: type=1400 audit(1749812982.896:524): avc: denied { watch_mount } for pid=7588 comm="syz.2.449" path="/142" dev="tmpfs" ino=769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.186540][ T7567] binder: 7566:7567 ioctl 400c620e 200000001580 returned -22 [ 72.190545][ T7567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.194613][ T7567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.226561][ T34] usb 5-1: USB disconnect, device number 5 [ 72.289257][ T7612] block nbd0: not configured, cannot reconfigure [ 72.293539][ T40] audit: type=1400 audit(1749812983.086:525): avc: denied { connect } for pid=7600 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 72.328792][ T40] audit: type=1400 audit(1749812983.116:526): avc: denied { mounton } for pid=7606 comm="syz.2.455" path="/145/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 72.880731][ T40] audit: type=1400 audit(1749812983.666:527): avc: denied { setattr } for pid=7648 comm="syz.1.457" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 73.012739][ T7651] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 73.012754][ T40] audit: type=1400 audit(1749812983.796:528): avc: denied { getattr } for pid=7650 comm="syz.1.458" name="/" dev="9p" ino=35913840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 73.021258][ T7651] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 73.027017][ T7651] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 73.030451][ T7651] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 73.034279][ T7651] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 73.038521][ T7651] geneve2: entered promiscuous mode [ 73.040241][ T7651] geneve2: entered allmulticast mode [ 73.192871][ T7661] __nla_validate_parse: 3 callbacks suppressed [ 73.192882][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'. [ 73.198233][ T7661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.239496][ T7661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.451241][ T7679] netlink: 'syz.1.467': attribute type 1 has an invalid length. [ 73.454060][ T7679] netlink: 44 bytes leftover after parsing attributes in process `syz.1.467'. [ 73.459138][ T7681] netlink: 'syz.1.467': attribute type 1 has an invalid length. [ 73.461602][ T7681] netlink: 44 bytes leftover after parsing attributes in process `syz.1.467'. [ 73.489701][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 73.648198][ T7690] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 73.842395][ T7702] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 73.846389][ T7702] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 73.849190][ T7702] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 73.851939][ T7702] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 74.200333][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.480'. [ 74.212813][ T7719] bond2: entered promiscuous mode [ 74.214685][ T7719] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.221808][ T7719] netlink: 44 bytes leftover after parsing attributes in process `syz.0.480'. [ 74.551932][ T7748] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 74.556660][ T7748] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 74.736850][ T5939] Bluetooth: hci1: unexpected event for opcode 0x040d [ 74.842576][ T5953] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 74.993908][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 74.997207][ T5953] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 75.000008][ T5953] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.003675][ T5953] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.006881][ T5953] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.010093][ T5953] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.014487][ T5953] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 75.017471][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.046236][ T7769] netdevsim netdevsim3 netdevsim1: Unsupported IPsec algorithm [ 75.222552][ T5953] usb 5-1: usb_control_msg returned -32 [ 75.224536][ T5953] usbtmc 5-1:16.0: can't read capabilities [ 75.325799][ T34] usb 5-1: USB disconnect, device number 6 [ 75.459336][ T7792] netlink: 'syz.0.501': attribute type 1 has an invalid length. [ 75.496932][ T7792] 8021q: adding VLAN 0 to HW filter on device bond4 [ 75.499899][ T7792] bond3: (slave bond4): making interface the new active one [ 75.503816][ T7792] bond3: (slave bond4): Enslaving as an active interface with an up link [ 75.506543][ T7798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.503'. [ 75.516402][ T7799] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.502'. [ 75.519937][ T7799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.502'. [ 75.600086][ T7801] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.673640][ T7801] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.742782][ T7801] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.805059][ T7801] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.842577][ T5953] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 75.875465][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 75.893179][ T839] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 75.908628][ T7801] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.916213][ T7801] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.924079][ T7801] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.931899][ T7801] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.993365][ T7812] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.002655][ T5953] usb 5-1: device descriptor read/64, error -71 [ 76.067031][ T839] usb 7-1: Using ep0 maxpacket: 16 [ 76.071768][ T839] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 76.082487][ T839] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11 [ 76.087129][ T839] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024 [ 76.090553][ T839] usb 7-1: config 0 interface 0 has no altsetting 0 [ 76.102685][ T839] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 76.105393][ T839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.107840][ T839] usb 7-1: Product: syz [ 76.109178][ T839] usb 7-1: Manufacturer: syz [ 76.110645][ T839] usb 7-1: SerialNumber: syz [ 76.113750][ T839] usb 7-1: config 0 descriptor?? [ 76.115810][ T7799] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 76.252571][ T5953] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 76.319498][ T7799] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 76.324458][ T839] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input13 [ 76.376248][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 76.392516][ T5953] usb 5-1: device descriptor read/64, error -71 [ 76.503644][ T5953] usb usb5-port1: attempt power cycle [ 76.525442][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 76.529488][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.533923][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.537627][ T29] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 76.540806][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.545448][ T29] usb 8-1: config 0 descriptor?? [ 76.843378][ T5953] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 76.864162][ T5953] usb 5-1: device descriptor read/8, error -71 [ 76.954827][ T29] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 76.956989][ T29] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 76.959138][ T29] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 76.961210][ T29] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 76.963773][ T29] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 76.965736][ T29] savu 0003:1E7D:2D5A.0004: unbalanced collection at end of report description [ 76.968749][ T29] savu 0003:1E7D:2D5A.0004: parse failed [ 76.970596][ T29] savu 0003:1E7D:2D5A.0004: probe with driver savu failed with error -22 [ 76.998868][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 76.998879][ T40] audit: type=1800 audit(1749812987.786:542): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.514" name="bpf-map" dev="anon_inodefs" ino=1061 res=0 errno=0 [ 77.103245][ T5953] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 77.123095][ T5953] usb 5-1: device descriptor read/8, error -71 [ 77.135050][ T40] audit: type=1400 audit(1749812987.926:543): avc: denied { map } for pid=7836 comm="syz.1.516" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.142524][ T40] audit: type=1400 audit(1749812987.926:544): avc: denied { execute } for pid=7836 comm="syz.1.516" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.160255][ T29] usb 8-1: USB disconnect, device number 5 [ 77.234043][ T5953] usb usb5-port1: unable to enumerate USB device [ 77.796952][ T7850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 77.926036][ T7864] batadv_slave_1: entered promiscuous mode [ 77.985775][ T7863] batadv_slave_1: left promiscuous mode [ 78.030936][ T40] audit: type=1400 audit(1749812988.816:545): avc: denied { ioctl } for pid=7865 comm="syz.3.526" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x64c3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.412563][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 78.472166][ T6450] usb 7-1: USB disconnect, device number 12 [ 78.582614][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 78.589657][ T10] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 78.590318][ T40] audit: type=1400 audit(1749812989.376:546): avc: denied { bind } for pid=7877 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 78.597191][ T10] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 78.602027][ T10] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.612119][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 78.617221][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 78.620138][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.624034][ T10] usb 6-1: Product: syz [ 78.625682][ T10] usb 6-1: Manufacturer: syz [ 78.627234][ T10] usb 6-1: SerialNumber: syz [ 78.706168][ T7887] 9pnet_fd: Insufficient options for proto=fd [ 78.841493][ T10] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 78.895617][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.898138][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.900832][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.904612][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.908087][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.910656][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.914294][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.916521][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.918989][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.921348][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.923930][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.926360][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.928687][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.931301][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.933746][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.935995][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.938269][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.940609][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.943043][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.945324][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.947654][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.950315][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.952872][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.955173][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.957489][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.959848][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.962102][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.964454][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.966857][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.969150][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.971505][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.974130][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.976441][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.978777][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.981427][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.983864][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.986184][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.988491][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.990968][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.993376][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.995752][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 78.998393][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.000848][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.003623][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.006303][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.008817][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.011735][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.014370][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.016897][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.019520][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.022111][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.024734][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.027369][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.029868][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.032395][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.035104][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.037759][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.040482][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.040977][ T40] audit: type=1400 audit(1749812989.826:547): avc: denied { read write } for pid=7867 comm="syz.1.527" name="lp0" dev="devtmpfs" ino=2962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 79.043052][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.050295][ T40] audit: type=1400 audit(1749812989.826:548): avc: denied { open } for pid=7867 comm="syz.1.527" path="/dev/usb/lp0" dev="devtmpfs" ino=2962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 79.052579][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.052595][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.052607][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.052619][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.052631][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.052643][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.052654][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.052666][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.052678][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.059880][ T40] audit: type=1400 audit(1749812989.826:549): avc: denied { ioctl } for pid=7867 comm="syz.1.527" path="/dev/usb/lp0" dev="devtmpfs" ino=2962 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 79.062289][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.094704][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.095241][ T10] usb 6-1: USB disconnect, device number 5 [ 79.097312][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.101843][ T7868] usblp0:failed reading printer status (-71) [ 79.103868][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.108846][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.111458][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.114736][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.117715][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.120440][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.123386][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.126321][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.129130][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.131467][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.133966][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.136282][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.138875][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.141878][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.145068][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.146670][ T7912] __nla_validate_parse: 2 callbacks suppressed [ 79.146680][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'. [ 79.148843][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.150589][ T7914] syzkaller1: entered promiscuous mode [ 79.154330][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.158166][ T7914] syzkaller1: entered allmulticast mode [ 79.158193][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.167020][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.169741][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.172487][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.175155][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.177922][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.180812][ T7916] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 79.180850][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.186384][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.189251][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.192407][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.195371][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.198192][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.201001][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.204035][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.206754][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.209601][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.211712][ T40] audit: type=1400 audit(1749812989.996:550): avc: denied { create } for pid=7915 comm="syz.0.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.212390][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.224084][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.226780][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.229688][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.232671][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.235480][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.238717][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.241275][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.243743][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.246652][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.249468][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.252311][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.255184][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.257773][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.260622][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.263483][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.265985][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.268861][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.271667][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.274281][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.276967][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.279718][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.282266][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.285111][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.288045][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.290906][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.293652][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.296407][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.299272][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.301566][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.303899][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.306194][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.308105][ T7867] usblp0: removed [ 79.308507][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.308522][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.314593][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.316884][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.319190][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.321478][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.324039][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.326332][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.328656][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.330951][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.333310][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.335572][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.337880][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.340181][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.342543][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.344809][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.347118][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.349455][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.351743][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.354119][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.356406][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.358725][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.360996][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.363372][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.365665][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.367956][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.370214][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.372593][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.374899][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.377141][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.379428][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.381731][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.384110][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.386326][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.388644][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.390941][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.393294][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.395548][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.397915][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.400214][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.402757][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.404996][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.407318][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.409638][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.411934][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.414362][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.416669][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.418974][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.421180][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.423587][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.425839][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.428140][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.430417][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.432759][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.435125][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.437436][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.439735][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.442058][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.444442][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.446717][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.449019][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.451328][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.453671][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.455990][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.458298][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.460732][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.463420][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.465664][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.467941][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.470259][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.472658][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.474990][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.477314][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.479636][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.481942][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.484697][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.487000][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.489279][ T29] hid-generic 000E:0003:0008.0005: unknown main item tag 0x0 [ 79.497086][ T29] hid-generic 000E:0003:0008.0005: hidraw1: HID v0.08 Device [syz0] on syz0 [ 79.535015][ T7921] fido_id[7921]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 79.899032][ T40] audit: type=1400 audit(1749812990.686:551): avc: denied { write } for pid=7922 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.899131][ T7931] netlink: 'syz.0.553': attribute type 32 has an invalid length. [ 80.724839][ T7942] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 80.739470][ T7945] binder: 7944:7945 ioctl c0306201 0 returned -14 [ 80.917833][ T7966] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.970704][ T7973] xt_hashlimit: size too large, truncated to 1048576 [ 81.111898][ T7991] nilfs2: Unknown parameter 'barrier' [ 81.142118][ T7995] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.567'. [ 81.262725][ T8015] netlink: 88 bytes leftover after parsing attributes in process `syz.0.576'. [ 81.355542][ T8029] netlink: 72 bytes leftover after parsing attributes in process `syz.0.580'. [ 81.356333][ T59] cfg80211: failed to load regulatory.db [ 81.493890][ T8040] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 81.497351][ T8040] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 81.517764][ T8040] netlink: 168 bytes leftover after parsing attributes in process `syz.3.584'. [ 81.541093][ T8046] netlink: 14212 bytes leftover after parsing attributes in process `syz.0.586'. [ 81.563108][ T8046] netlink: 'syz.0.586': attribute type 3 has an invalid length. [ 81.565659][ T8046] netlink: 'syz.0.586': attribute type 1 has an invalid length. [ 81.568031][ T8046] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.586'. [ 81.905818][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 81.909495][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.593'. [ 81.913178][ T8076] netlink: 'syz.2.593': attribute type 5 has an invalid length. [ 82.014461][ T8083] netlink: 'syz.0.597': attribute type 5 has an invalid length. [ 82.067296][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 82.067308][ T40] audit: type=1400 audit(1749812992.856:566): avc: denied { execmem } for pid=8088 comm="syz.0.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 82.151619][ T8096] x_tables: ip6_tables: CT target: only valid in raw table, not  [ 82.182798][ T40] audit: type=1400 audit(1749812992.976:567): avc: denied { setopt } for pid=8097 comm="syz.0.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.190185][ T40] audit: type=1400 audit(1749812992.976:568): avc: denied { getopt } for pid=8097 comm="syz.0.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.504756][ T8108] ptm ptm17: ldisc open failed (-12), clearing slot 17 [ 82.619552][ T8118] IPVS: set_ctl: invalid protocol: 3 172.20.20.187:20003 [ 83.032668][ T8142] nbd3: detected capacity change from 0 to 4294967296 [ 83.046368][ T8144] block nbd3: shutting down sockets [ 83.055479][ C2] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.059018][ C2] Buffer I/O error on dev nbd3, logical block 0, async page read [ 83.061768][ T6501] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.065990][ T6501] Buffer I/O error on dev nbd3, logical block 0, async page read [ 83.068862][ T6501] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.071675][ T6501] Buffer I/O error on dev nbd3, logical block 0, async page read [ 83.074157][ T6501] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.077618][ T6501] Buffer I/O error on dev nbd3, logical block 0, async page read [ 83.080137][ T6501] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.081233][ T40] audit: type=1400 audit(1749812993.866:569): avc: denied { read } for pid=8141 comm="syz.3.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 83.084723][ T6501] Buffer I/O error on dev nbd3, logical block 0, async page read [ 83.094080][ T6501] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.096864][ T6501] Buffer I/O error on dev nbd3, logical block 0, async page read [ 83.099553][ T6501] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.102348][ T6501] Buffer I/O error on dev nbd3, logical block 0, async page read [ 83.105989][ T6501] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.108797][ T6501] Buffer I/O error on dev nbd3, logical block 0, async page read [ 83.111216][ T6501] ldm_validate_partition_table(): Disk read failed. [ 83.113447][ T6501] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.116245][ T6501] Buffer I/O error on dev nbd3, logical block 0, async page read [ 83.117438][ T8149] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 83.118748][ T6501] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.120707][ T8149] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 83.123764][ T6501] Buffer I/O error on dev nbd3, logical block 0, async page read [ 83.126133][ T8149] vhci_hcd vhci_hcd.0: Device attached [ 83.128510][ T6501] Dev nbd3: unable to read RDB block 0 [ 83.132029][ T6501] nbd3: unable to read partition table [ 83.133291][ T8149] vhci_hcd vhci_hcd.0: port 0 already used [ 83.137599][ T8151] vhci_hcd: connection closed [ 83.138686][ T8085] vhci_hcd: stop threads [ 83.139126][ T6501] ldm_validate_partition_table(): Disk read failed. [ 83.140201][ T8085] vhci_hcd: release socket [ 83.142090][ T6501] Dev nbd3: unable to read RDB block 0 [ 83.147195][ T8085] vhci_hcd: disconnect device [ 83.148326][ T6501] nbd3: unable to read partition table [ 83.349623][ T8163] usb usb8: usbfs: process 8163 (syz.3.619) did not claim interface 0 before use [ 83.379824][ T40] audit: type=1400 audit(1749812994.166:570): avc: denied { getopt } for pid=8164 comm="syz.3.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 83.383249][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.060240][ T40] audit: type=1400 audit(1749812994.846:571): avc: denied { read write } for pid=8188 comm="syz.0.625" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.069952][ T40] audit: type=1400 audit(1749812994.846:572): avc: denied { open } for pid=8188 comm="syz.0.625" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.123023][ T8190] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 84.136189][ T8189] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 84.136469][ T8190] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 84.153740][ T40] audit: type=1400 audit(1749812994.946:573): avc: denied { ioctl } for pid=8188 comm="syz.0.625" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.242318][ T8199] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 84.245234][ T8199] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.249657][ T8199] vhci_hcd vhci_hcd.0: Device attached [ 84.261963][ T8201] vhci_hcd: connection closed [ 84.263110][ T1155] vhci_hcd: stop threads [ 84.265954][ T1155] vhci_hcd: release socket [ 84.267367][ T1155] vhci_hcd: disconnect device [ 84.300751][ T40] audit: type=1400 audit(1749812995.086:574): avc: denied { mounton } for pid=8207 comm="syz.0.629" path="/136/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 84.309182][ T40] audit: type=1400 audit(1749812995.106:575): avc: denied { read write } for pid=8207 comm="syz.0.629" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.394996][ T8213] ip6t_srh: unknown srh match flags B153 [ 84.431987][ T8217] netlink: 'syz.0.630': attribute type 4 has an invalid length. [ 84.440116][ T8217] netlink: 'syz.0.630': attribute type 4 has an invalid length. [ 84.474871][ T8222] mmap: syz.3.634 (8222) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.762790][ T8233] fuse: Unknown parameter 'rootm/de' [ 84.791711][ T8241] netlink: 36 bytes leftover after parsing attributes in process `syz.2.641'. [ 84.798124][ T8241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.641'. [ 84.858726][ T8243] netlink: 'syz.3.637': attribute type 10 has an invalid length. [ 84.875864][ T8250] sp0: Synchronizing with TNC [ 84.901976][ T8252] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 84.978990][ T8257] syz.0.645: attempt to access beyond end of device [ 84.978990][ T8257] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 84.985211][ T8257] (syz.0.645,8257,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 84.988353][ T8257] (syz.0.645,8257,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 84.991261][ T8257] (syz.0.645,8257,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 84.996708][ T8257] (syz.0.645,8257,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 85.202515][ T29] IPVS: starting estimator thread 0... [ 85.299226][ T8285] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 85.302559][ T8278] IPVS: using max 45 ests per chain, 108000 per kthread [ 85.552518][ T29] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 85.713879][ T29] usb 5-1: config 0 has no interfaces? [ 85.715701][ T29] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 85.718552][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.722207][ T29] usb 5-1: config 0 descriptor?? [ 85.954416][ T29] usb 5-1: USB disconnect, device number 11 [ 86.040942][ T8370] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 86.176488][ T8375] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8375 comm=syz.2.667 [ 86.178100][ T8376] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 86.239764][ T8382] netlink: 76 bytes leftover after parsing attributes in process `syz.2.669'. [ 86.460834][ T8386] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.492709][ T8388] binder: 8387:8388 ioctl 4018620d 0 returned -22 [ 86.492754][ T8389] binder: 8387:8389 ioctl 4018620d 0 returned -22 [ 86.711753][ T8394] netlink: 11 bytes leftover after parsing attributes in process `syz.3.673'. [ 87.103184][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 87.103195][ T40] audit: type=1400 audit(1749812997.896:590): avc: denied { getopt } for pid=8395 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.169253][ T8403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.676'. [ 87.349591][ T8416] bond0: (slave wlan1): Releasing backup interface [ 87.410972][ T8325] Bluetooth: hci5: Frame reassembly failed (-84) [ 87.602531][ T6000] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 87.752979][ T6000] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 87.756183][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.758905][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.762121][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.765227][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.767967][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.771353][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.774991][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.777774][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.781110][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.785036][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.787825][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.791154][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.794143][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.796905][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.800252][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.803565][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.806471][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.809837][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.813205][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.815968][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.819296][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.822229][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.825119][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.828554][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.832339][ T6000] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 87.835468][ T6000] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 87.838235][ T6000] usb 7-1: Product: syz [ 87.839578][ T6000] usb 7-1: Manufacturer: syz [ 87.841207][ T6000] usb 7-1: SerialNumber: syz [ 87.844831][ T6000] usb 7-1: config 0 descriptor?? [ 87.849226][ T6000] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 88.050136][ T6000] usb 7-1: USB disconnect, device number 13 [ 88.053818][ T6000] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 88.762929][ T5939] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 88.783419][ T8429] 9pnet: Limiting 'msize' to 512000 as this is the maximum supported by transport virtio [ 88.884504][ T8433] input: syz0 as /devices/virtual/input/input15 [ 88.895844][ T40] audit: type=1400 audit(1749812998.691:591): avc: denied { checkpoint_restore } for pid=8434 comm="syz.3.688" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.099798][ T40] audit: type=1400 audit(1749812998.891:592): avc: denied { ioctl } for pid=8449 comm="syz.3.694" path="socket:[22791]" dev="sockfs" ino=22791 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.104622][ T8450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8450 comm=syz.3.694 [ 89.120444][ T8450] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 89.120483][ T40] audit: type=1400 audit(1749812998.911:593): avc: denied { ioctl } for pid=8449 comm="syz.3.694" path="socket:[21825]" dev="sockfs" ino=21825 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 89.427626][ T8479] sg_write: data in/out 440207358/4056 bytes for SCSI command 0x45-- guessing data in; [ 89.427626][ T8479] program syz.0.703 not setting count and/or reply_len properly [ 89.482586][ T5944] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 89.482630][ T5939] Bluetooth: hci5: command 0x1003 tx timeout [ 89.601726][ T8489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.706'. [ 89.632550][ T8492] nfs4: Unknown parameter 'usrquota' [ 89.645074][ T8492] delete_channel: no stack [ 89.733625][ T40] audit: type=1400 audit(1749812999.531:594): avc: denied { read } for pid=8497 comm="syz.2.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.245852][ T8505] No such timeout policy "syz0" [ 90.250087][ T40] audit: type=1400 audit(1749813000.041:595): avc: denied { bind } for pid=8504 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.290772][ T8513] tmpfs: Bad value for 'huge' [ 90.430578][ T8531] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 90.431097][ T40] audit: type=1400 audit(1749813000.221:596): avc: denied { ioctl } for pid=8523 comm="syz.0.719" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 90.511452][ T8539] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 90.520176][ T8539] netlink: 1 bytes leftover after parsing attributes in process `syz.1.723'. [ 90.602769][ T40] audit: type=1400 audit(1749813000.391:597): avc: denied { create } for pid=8544 comm="syz.1.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 90.611470][ T40] audit: type=1400 audit(1749813000.401:598): avc: denied { write } for pid=8544 comm="syz.1.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 90.661384][ T8556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.729'. [ 90.711390][ T40] audit: type=1400 audit(1749813000.501:599): avc: denied { ioctl } for pid=8558 comm="syz.0.730" path="socket:[22934]" dev="sockfs" ino=22934 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 90.915238][ T8566] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 90.917936][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 91.160758][ T8590] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 91.170456][ T8590] cramfs: wrong magic [ 91.205886][ T8595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.743'. [ 91.241091][ T8600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.744'. [ 91.290675][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'. [ 91.296789][ T8605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.432545][ T59] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 91.592534][ T59] usb 8-1: Using ep0 maxpacket: 32 [ 91.596255][ T59] usb 8-1: config 5 has an invalid interface number: 129 but max is 3 [ 91.598778][ T59] usb 8-1: config 5 has an invalid interface number: 205 but max is 3 [ 91.601376][ T59] usb 8-1: config 5 has an invalid interface number: 219 but max is 3 [ 91.604105][ T59] usb 8-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 91.606839][ T59] usb 8-1: config 5 has an invalid interface number: 213 but max is 3 [ 91.609360][ T59] usb 8-1: config 5 has no interface number 0 [ 91.611234][ T59] usb 8-1: config 5 has no interface number 1 [ 91.613320][ T59] usb 8-1: config 5 has no interface number 2 [ 91.615353][ T59] usb 8-1: config 5 has no interface number 3 [ 91.617347][ T59] usb 8-1: config 5 interface 129 altsetting 11 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 91.620904][ T59] usb 8-1: config 5 interface 129 altsetting 11 endpoint 0xF has invalid wMaxPacketSize 0 [ 91.624398][ T59] usb 8-1: config 5 interface 129 altsetting 11 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 91.628054][ T59] usb 8-1: config 5 interface 129 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 91.631342][ T59] usb 8-1: config 5 interface 129 altsetting 11 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 91.635011][ T59] usb 8-1: config 5 interface 129 altsetting 11 has a duplicate endpoint with address 0x8C, skipping [ 91.638406][ T59] usb 8-1: config 5 interface 129 altsetting 11 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 91.641901][ T59] usb 8-1: config 5 interface 129 altsetting 11 has 9 endpoint descriptors, different from the interface descriptor's value: 10 [ 91.646418][ T59] usb 8-1: config 5 interface 205 altsetting 254 has a duplicate endpoint with address 0xC, skipping [ 91.649716][ T59] usb 8-1: config 5 interface 205 altsetting 254 endpoint 0x7 has invalid wMaxPacketSize 0 [ 91.652894][ T59] usb 8-1: config 5 interface 205 altsetting 254 has a duplicate endpoint with address 0xF, skipping [ 91.656278][ T59] usb 8-1: config 5 interface 205 altsetting 254 has a duplicate endpoint with address 0x4, skipping [ 91.659637][ T59] usb 8-1: config 5 interface 205 altsetting 254 has a duplicate endpoint with address 0xC, skipping [ 91.663209][ T59] usb 8-1: config 5 interface 205 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 91.666586][ T59] usb 8-1: config 5 interface 205 altsetting 254 endpoint 0x83 has an invalid bInterval 178, changing to 11 [ 91.670151][ T59] usb 8-1: config 5 interface 205 altsetting 254 endpoint 0x83 has invalid wMaxPacketSize 0 [ 91.673479][ T59] usb 8-1: config 5 interface 205 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 91.677155][ T59] usb 8-1: config 5 interface 205 altsetting 254 has a duplicate endpoint with address 0xA, skipping [ 91.680476][ T59] usb 8-1: config 5 interface 205 altsetting 254 has a duplicate endpoint with address 0xA, skipping [ 91.683981][ T59] usb 8-1: config 5 interface 205 altsetting 254 has a duplicate endpoint with address 0x6, skipping [ 91.687400][ T59] usb 8-1: config 5 interface 205 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 91.690768][ T59] usb 8-1: config 5 interface 205 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 91.694436][ T59] usb 8-1: config 5 interface 219 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 91.697725][ T59] usb 8-1: config 5 interface 219 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 91.701045][ T59] usb 8-1: config 5 interface 219 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 91.704367][ T59] usb 8-1: config 5 interface 219 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 91.707652][ T59] usb 8-1: config 5 interface 219 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 91.710827][ T59] usb 8-1: config 5 interface 219 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 91.714151][ T59] usb 8-1: config 5 interface 219 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 91.717639][ T59] usb 8-1: config 5 interface 219 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 91.720922][ T59] usb 8-1: config 5 interface 219 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 91.724248][ T59] usb 8-1: config 5 interface 219 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 91.727526][ T59] usb 8-1: config 5 interface 213 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 91.730769][ T59] usb 8-1: config 5 interface 213 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 91.734251][ T59] usb 8-1: config 5 interface 213 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 91.737556][ T59] usb 8-1: config 5 interface 213 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 91.740802][ T59] usb 8-1: config 5 interface 129 has no altsetting 0 [ 91.743125][ T59] usb 8-1: config 5 interface 205 has no altsetting 0 [ 91.745227][ T59] usb 8-1: config 5 interface 219 has no altsetting 0 [ 91.747318][ T59] usb 8-1: config 5 interface 213 has no altsetting 0 [ 91.750844][ T59] usb 8-1: Dual-Role OTG device on HNP port [ 91.753343][ T59] usb 8-1: New USB device found, idVendor=04d8, idProduct=f58b, bcdDevice=82.47 [ 91.756114][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.758630][ T59] usb 8-1: Product: syz [ 91.759970][ T59] usb 8-1: Manufacturer: ⤕嚢넲胲뀵՗軸扷囚逶ﮜ翕拵쒶馑⛸紭⦕냇몐荙쳏廷删뼆쏾탭꼥꽐殠鳜眲濶醟ᰐꈚ췻㔿ꋒꓹẾ눒㶟佡⫞쏭‹똻ҝ⬆ϳ✛꧑캈룋⪺癩坹珝ᘆ敄쐁ᯱ릵ᔸ沗닺휇眲퍍饈ꧤ쁹됌㟱姡ᖅ퍨ᗐ囃흭⾈똭ा壽蓄퍋灭晣Ս謸䛊܋⍌蚘꣪큟킦潷愓뾚露 [ 91.770509][ T59] usb 8-1: SerialNumber: syz [ 91.776137][ T8593] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.818376][ T8620] netem: incorrect gi model size [ 91.820235][ T8620] netem: change failed [ 91.972391][ T8633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.754'. [ 91.998042][ T8630] netlink: 'syz.0.753': attribute type 11 has an invalid length. [ 92.020133][ T8638] tmpfs: Bad value for 'mpol' [ 92.057482][ T8642] delete_channel: no stack [ 92.092327][ T8647] overlay: Bad value for 'workdir' [ 92.138437][ T8649] netlink: 'syz.1.760': attribute type 10 has an invalid length. [ 92.141378][ T8649] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.162546][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 92.162562][ T40] audit: type=1400 audit(1749813001.951:608): avc: denied { create } for pid=8644 comm="syz.0.758" name="#18" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 92.173610][ T8649] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.173796][ T40] audit: type=1400 audit(1749813001.951:609): avc: denied { link } for pid=8644 comm="syz.0.758" name="#18" dev="tmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 92.175781][ T8649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.182892][ T40] audit: type=1400 audit(1749813001.951:610): avc: denied { rename } for pid=8644 comm="syz.0.758" name="#19" dev="tmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 92.187525][ T8649] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 92.204776][ T59] usb 8-1: USB disconnect, device number 6 [ 92.266348][ T40] audit: type=1400 audit(1749813002.061:611): avc: denied { listen } for pid=8653 comm="syz.2.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.370402][ T5944] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 92.373737][ T8663] cgroup: No subsys list or none specified [ 92.523334][ T40] audit: type=1400 audit(1749813002.321:612): avc: denied { create } for pid=8667 comm="syz.1.765" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.536688][ T40] audit: type=1400 audit(1749813002.331:613): avc: denied { mounton } for pid=8667 comm="syz.1.765" path="/182/file0" dev="tmpfs" ino=1002 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.547558][ T40] audit: type=1400 audit(1749813002.341:614): avc: denied { unlink } for pid=5938 comm="syz-executor" name="file0" dev="tmpfs" ino=1002 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.600548][ T8672] team0: entered allmulticast mode [ 92.602273][ T8672] team_slave_0: entered allmulticast mode [ 92.604714][ T8672] team_slave_1: entered allmulticast mode [ 92.607025][ T8672] dvmrp1: left allmulticast mode [ 92.608859][ T8672] team0: left allmulticast mode [ 92.610683][ T8672] team_slave_0: left allmulticast mode [ 92.612957][ T8672] team_slave_1: left allmulticast mode [ 92.722859][ T8675] SELinux: ebitmap start bit (436207808) is beyond the end of the bitmap (1088) [ 92.731498][ T8675] SELinux: failed to load policy [ 92.738196][ T8677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.769'. [ 92.742026][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.769'. [ 92.746944][ T8677] tmpfs: Cannot disable swap on remount [ 92.831136][ T8683] netlink: 60 bytes leftover after parsing attributes in process `syz.1.770'. [ 93.022571][ T6018] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 93.097699][ T8698] syz.1.776 (8698): /proc/8694/oom_adj is deprecated, please use /proc/8694/oom_score_adj instead. [ 93.174661][ T6018] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 93.180221][ T6018] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.183511][ T6018] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 93.186194][ T6018] usb 8-1: SerialNumber: syz [ 93.221892][ T40] audit: type=1326 audit(1749813003.011:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.0.778" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f2a78e929 code=0x0 [ 93.229316][ T40] audit: type=1326 audit(1749813003.021:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.0.778" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f2a78e929 code=0x0 [ 93.237991][ T40] audit: type=1326 audit(1749813003.021:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.0.778" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f2a78e929 code=0x0 [ 93.498381][ T8738] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20001 [ 94.219742][ T8794] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.829030][ T8814] Illegal XDP return value 486544904 on prog (id 185) dev N/A, expect packet loss! [ 94.928333][ T8824] netlink: 'syz.0.820': attribute type 25 has an invalid length. [ 94.976548][ T8830] ipvlan2: entered allmulticast mode [ 94.978257][ T8830] macvlan0: entered allmulticast mode [ 94.980169][ T8830] veth1_vlan: entered allmulticast mode [ 95.114307][ T8836] block device autoloading is deprecated and will be removed. [ 95.144915][ T8841] sp0: Synchronizing with TNC [ 95.192573][ T59] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 95.368107][ T59] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.371435][ T59] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 95.374447][ T59] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 95.377288][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.383246][ T8828] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 95.388200][ T59] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 95.467193][ T8857] MINIX-fs: blocksize too small for device [ 95.589769][ T59] usb 5-1: USB disconnect, device number 12 [ 95.794343][ T6018] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 95.803544][ T6018] usb 8-1: USB disconnect, device number 7 [ 95.805858][ T5944] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 96.000338][ T8893] netlink: 'syz.2.839': attribute type 1 has an invalid length. [ 96.004275][ T8893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.185326][ T8904] __nla_validate_parse: 3 callbacks suppressed [ 96.185337][ T8904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.842'. [ 96.220170][ T8906] loop2: detected capacity change from 0 to 7 [ 96.225931][ T6501] Dev loop2: unable to read RDB block 7 [ 96.227688][ T6501] loop2: AHDI p1 p2 p3 [ 96.228998][ T6501] loop2: partition table partially beyond EOD, truncated [ 96.231998][ T6501] loop2: p1 start 1601398130 is beyond EOD, truncated [ 96.235197][ T6501] loop2: p2 start 1702059890 is beyond EOD, truncated [ 96.239584][ T8906] Dev loop2: unable to read RDB block 7 [ 96.241388][ T8906] loop2: AHDI p1 p2 p3 [ 96.242892][ T8906] loop2: partition table partially beyond EOD, truncated [ 96.245337][ T8906] loop2: p1 start 1601398130 is beyond EOD, truncated [ 96.247487][ T8906] loop2: p2 start 1702059890 is beyond EOD, truncated [ 96.250652][ T5944] Bluetooth: hci0: unexpected event for opcode 0x0401 [ 96.320172][ T8908] xt_hashlimit: size too large, truncated to 1048576 [ 96.322805][ T8909] xt_hashlimit: size too large, truncated to 1048576 [ 96.350708][ T8909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.844'. [ 96.354871][ T8909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.844'. [ 96.836435][ T8946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.855'. [ 97.145354][ T8957] tmpfs: Unknown parameter 'grpqu>Einode_hardlimit' [ 97.207508][ T837] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 97.266377][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 97.266393][ T40] audit: type=1400 audit(1749813007.061:631): avc: denied { mount } for pid=8984 comm="syz.2.868" name="/" dev="rpc_pipefs" ino=25052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 97.278640][ T8985] dns_resolver: Unsupported server list version (0) [ 97.385304][ T837] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 97.388320][ T837] usb 6-1: config 0 interface 0 has no altsetting 0 [ 97.390805][ T40] audit: type=1400 audit(1749813007.181:632): avc: denied { mounton } for pid=9009 comm="syz.3.875" path="/193/file0" dev="rpc_pipefs" ino=24413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 97.401357][ T837] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 97.405846][ T837] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 97.408499][ T837] usb 6-1: Product: syz [ 97.410009][ T837] usb 6-1: Manufacturer: syz [ 97.411513][ T837] usb 6-1: SerialNumber: syz [ 97.416498][ T837] usb 6-1: config 0 descriptor?? [ 97.423439][ T837] usb 6-1: selecting invalid altsetting 0 [ 97.423604][ T5939] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 97.485834][ T9016] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 97.492020][ T40] audit: type=1400 audit(1749813007.281:633): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 97.623589][ T837] usb 6-1: USB disconnect, device number 6 [ 98.283260][ T5939] Bluetooth: hci0: command 0x0419 tx timeout [ 98.285497][ T5944] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 98.407128][ T9052] bond0: entered promiscuous mode [ 98.409036][ T9052] bond_slave_0: entered promiscuous mode [ 98.411062][ T9052] bond_slave_1: entered promiscuous mode [ 98.413417][ T9052] bridge0: entered promiscuous mode [ 98.455017][ T40] audit: type=1400 audit(1749813008.251:634): avc: denied { mounton } for pid=9062 comm="syz.1.891" path="/proc/742/cgroup" dev="proc" ino=27942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 98.569306][ T9069] overlayfs: workdir and upperdir must be separate subtrees [ 98.653756][ T10] IPVS: starting estimator thread 0... [ 98.666289][ T40] audit: type=1400 audit(1749813008.461:635): avc: denied { connect } for pid=9078 comm="syz.3.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.762569][ T9079] IPVS: using max 45 ests per chain, 108000 per kthread [ 99.152080][ T9112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9112 comm=syz.0.906 [ 99.432594][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 99.577695][ T40] audit: type=1400 audit(1749813009.371:636): avc: denied { write } for pid=9130 comm="syz.1.912" name="usbmon6" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 99.595877][ T5939] block nbd3: Receive control failed (result -32) [ 99.600746][ T9093] block nbd3: shutting down sockets [ 99.608503][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.611785][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.615881][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.618616][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.624406][ T10] usb 5-1: config 0 descriptor?? [ 99.637705][ T9135] netlink: 40 bytes leftover after parsing attributes in process `syz.3.914'. [ 99.717934][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.918'. [ 99.760673][ T9148] binder: 9147:9148 ioctl c0306201 200000000540 returned -22 [ 99.907436][ T9164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.925'. [ 99.911033][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'. [ 99.959640][ T40] audit: type=1400 audit(1749813009.751:637): avc: denied { listen } for pid=9168 comm="syz.3.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 99.973665][ T40] audit: type=1400 audit(1749813009.751:638): avc: denied { accept } for pid=9168 comm="syz.3.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 100.036161][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 100.038583][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 100.040894][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 100.045984][ T9176] xt_hashlimit: size too large, truncated to 1048576 [ 100.052616][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 100.054980][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 100.057888][ T10] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 100.077351][ T10] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 100.101338][ T9179] syzkaller0: entered promiscuous mode [ 100.103290][ T9179] syzkaller0: entered allmulticast mode [ 100.125988][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.929'. [ 100.157384][ T5944] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 100.203792][ T9191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.931'. [ 100.230834][ T40] audit: type=1400 audit(1749813010.021:639): avc: denied { read } for pid=9196 comm="syz.3.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 100.241710][ T40] audit: type=1400 audit(1749813010.031:640): avc: denied { shutdown } for pid=9196 comm="syz.3.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.305863][ T9118] netlink: 'syz.0.908': attribute type 4 has an invalid length. [ 100.310231][ T29] usb 5-1: USB disconnect, device number 13 [ 100.316634][ T9206] netlink: 'syz.2.938': attribute type 21 has an invalid length. [ 100.319207][ T9206] netlink: 'syz.2.938': attribute type 6 has an invalid length. [ 100.350506][ T9208] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 100.385865][ T9211] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 100.388451][ T9211] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 100.467700][ T9223] autofs4:pid:9223:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189379) [ 100.471618][ T9223] autofs4:pid:9223:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379) [ 100.476665][ T5944] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 100.478788][ T5944] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 100.538095][ T9241] xt_hashlimit: size too large, truncated to 1048576 [ 100.719013][ T9257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.778336][ T9252] devpts: Bad value for 'max' [ 100.842605][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 100.877036][ T9274] overlayfs: missing 'lowerdir' [ 100.877082][ T9276] overlayfs: missing 'lowerdir' [ 100.996702][ T10] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 100.999566][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.002045][ T10] usb 8-1: Product: syz [ 101.003647][ T10] usb 8-1: Manufacturer: syz [ 101.005148][ T10] usb 8-1: SerialNumber: syz [ 101.009680][ T10] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 101.040677][ T10] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 101.075629][ T9280] netlink: 'syz.2.959': attribute type 4 has an invalid length. [ 101.242317][ T9247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.246906][ T9247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.260526][ T34] usb 8-1: USB disconnect, device number 8 [ 101.409852][ T9305] netlink: 'syz.0.969': attribute type 11 has an invalid length. [ 101.412317][ T9305] __nla_validate_parse: 8 callbacks suppressed [ 101.412325][ T9305] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.969'. [ 101.463070][ T29] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 101.503833][ T9309] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 101.551633][ T9311] ubi31: attaching mtd0 [ 101.556756][ T9311] ubi31: scanning is finished [ 101.558374][ T9311] ubi31: empty MTD device detected [ 101.614766][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.618150][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.621208][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.625882][ T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.628996][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.634847][ T29] usb 6-1: config 0 descriptor?? [ 101.650047][ T9311] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 101.652482][ T9311] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 101.654713][ T9311] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 101.655159][ T9314] netlink: 28 bytes leftover after parsing attributes in process `syz.0.972'. [ 101.656892][ T9311] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 101.656919][ T9311] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 101.656928][ T9311] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 101.667894][ T9311] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1325213491 [ 101.670882][ T9311] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 101.674373][ T9313] ubi31: background thread "ubi_bgt31d" started, PID 9313 [ 102.006095][ T9320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.974'. [ 102.044176][ T29] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 102.056382][ T29] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 102.122566][ T10] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 102.125936][ T10] ath9k_htc: Failed to initialize the device [ 102.130231][ T34] usb 8-1: ath9k_htc: USB layer deinitialized [ 102.673682][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 102.673693][ T40] audit: type=1326 audit(1749813012.471:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.0.981" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f2a78e929 code=0x0 [ 103.252533][ T34] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 103.355441][ C0] plantronics 0003:047F:FFFF.0007: usb_submit_urb(ctrl) failed: -1 [ 103.403024][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 103.405847][ T34] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 103.408314][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.411426][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.415034][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.418034][ T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.421997][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 103.426294][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.629595][ T5944] Bluetooth: hci0: unexpected event for opcode 0x0c12 [ 103.634387][ T34] usb 8-1: usb_control_msg returned -32 [ 103.636260][ T34] usbtmc 8-1:16.0: can't read capabilities [ 103.824722][ T9358] netlink: 'syz.0.987': attribute type 10 has an invalid length. [ 103.860724][ T9360] befs: (nullb0): No write support. Marking filesystem read-only [ 103.864519][ T9360] befs: (nullb0): invalid magic header [ 104.021406][ T9372] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.146399][ T59] usb 6-1: USB disconnect, device number 7 [ 104.150948][ T40] audit: type=1400 audit(1749813013.941:650): avc: denied { bind } for pid=9387 comm="syz.2.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 104.214899][ T9396] netlink: 'syz.2.1000': attribute type 9 has an invalid length. [ 104.218355][ T9396] netlink: 'syz.2.1000': attribute type 6 has an invalid length. [ 104.260366][ T40] audit: type=1400 audit(1749813014.051:651): avc: denied { listen } for pid=9403 comm="syz.2.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 104.272791][ T40] audit: type=1400 audit(1749813014.071:652): avc: denied { accept } for pid=9403 comm="syz.2.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 104.292796][ T40] audit: type=1326 audit(1749813014.091:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9408 comm="syz.0.1005" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f2a78e929 code=0x0 [ 105.213658][ T40] audit: type=1400 audit(1749813015.011:654): avc: denied { accept } for pid=9426 comm="syz.0.1011" path="socket:[27579]" dev="sockfs" ino=27579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.272649][ T29] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 105.376190][ T9432] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1013'. [ 105.403693][ T29] usb 6-1: device descriptor read/64, error -71 [ 105.472925][ T9435] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1014'. [ 105.656715][ T29] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 105.664061][ T9438] nfs4: Unknown parameter 'x{8$ԛ؇;!?' [ 105.793333][ T29] usb 6-1: device descriptor read/64, error -71 [ 105.851967][ T9448] netlink: 'syz.0.1018': attribute type 1 has an invalid length. [ 105.903228][ T29] usb usb6-port1: attempt power cycle [ 105.948500][ T9450] netlink: 'syz.0.1019': attribute type 83 has an invalid length. [ 105.955689][ T40] audit: type=1400 audit(1749813015.751:655): avc: denied { mount } for pid=9449 comm="syz.0.1019" name="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 105.962632][ T40] audit: type=1400 audit(1749813015.751:656): avc: denied { search } for pid=9449 comm="syz.0.1019" name="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.026426][ T5981] usb 8-1: USB disconnect, device number 9 [ 106.089340][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1021'. [ 106.119302][ T9461] netlink: 'syz.3.1022': attribute type 10 has an invalid length. [ 106.121839][ T9461] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 106.126435][ T9461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.136219][ T9461] rdma_op ffff8880374119f0 conn xmit_rdma 0000000000000000 [ 106.195485][ T40] audit: type=1400 audit(1749813015.991:657): avc: denied { mount } for pid=9470 comm="syz.3.1025" name="/" dev="9p" ino=35913840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 106.209593][ T9473] overlay: Unknown parameter '/' [ 106.211322][ T40] audit: type=1400 audit(1749813016.001:658): avc: denied { remove_name } for pid=9470 comm="syz.3.1025" name="file0" dev="9p" ino=35913843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.242544][ T29] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 106.269679][ T29] usb 6-1: device descriptor read/8, error -71 [ 106.495263][ T9496] bond0: entered promiscuous mode [ 106.496926][ T9496] bond_slave_0: entered promiscuous mode [ 106.498797][ T9496] bond_slave_1: entered promiscuous mode [ 106.503127][ T29] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 106.520540][ T9496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9496 comm=syz.0.1034 [ 106.523261][ T29] usb 6-1: device descriptor read/8, error -71 [ 106.616123][ T9511] xt_hashlimit: size too large, truncated to 1048576 [ 106.621031][ T9511] syz.0.1039: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 106.627029][ T9511] CPU: 3 UID: 0 PID: 9511 Comm: syz.0.1039 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 106.627045][ T9511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.627052][ T9511] Call Trace: [ 106.627056][ T9511] [ 106.627062][ T9511] dump_stack_lvl+0x16c/0x1f0 [ 106.627089][ T9511] warn_alloc+0x248/0x3a0 [ 106.627112][ T9511] ? __pfx_warn_alloc+0x10/0x10 [ 106.627144][ T9511] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 106.627167][ T9511] ? __vmalloc_node_noprof+0xad/0xf0 [ 106.627192][ T9511] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 106.627212][ T9511] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 106.627227][ T9511] ? rcu_is_watching+0x12/0xc0 [ 106.627244][ T9511] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 106.627256][ T9511] ? __alloc_pages_noprof+0xb/0x1b0 [ 106.627269][ T9511] ? ___kmalloc_large_node+0x84/0x1e0 [ 106.627283][ T9511] __kvmalloc_node_noprof+0x30a/0x620 [ 106.627296][ T9511] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 106.627311][ T9511] ? net_generic+0xea/0x2a0 [ 106.627323][ T9511] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 106.627340][ T9511] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 106.627354][ T9511] hashlimit_mt_check_common+0x8bb/0x1460 [ 106.627373][ T9511] hashlimit_mt_check+0x71/0x90 [ 106.627386][ T9511] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 106.627400][ T9511] xt_check_match+0x283/0xa50 [ 106.627415][ T9511] ? __schedule+0x4f62/0x5de0 [ 106.627431][ T9511] ? __pfx_xt_check_match+0x10/0x10 [ 106.627444][ T9511] ? pcpu_memcg_post_alloc_hook+0x1e/0x690 [ 106.627462][ T9511] ? xt_find_match+0x1f6/0x290 [ 106.627478][ T9511] find_check_entry.constprop.0+0x34e/0xa20 [ 106.627497][ T9511] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 106.627516][ T9511] ? kasan_quarantine_put+0x10a/0x240 [ 106.627529][ T9511] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.627546][ T9511] ? kfree+0x2b4/0x4d0 [ 106.627556][ T9511] ? translate_table+0xc0e/0x17b0 [ 106.627572][ T9511] translate_table+0xd0b/0x17b0 [ 106.627591][ T9511] ? __pfx_translate_table+0x10/0x10 [ 106.627603][ T9511] ? xt_alloc_table_info+0x3e/0xa0 [ 106.627620][ T9511] do_ip6t_set_ctl+0x570/0xb00 [ 106.627633][ T9511] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 106.627652][ T9511] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 106.627668][ T9511] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.627692][ T9511] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 106.627706][ T9511] nf_setsockopt+0x8d/0xf0 [ 106.627719][ T9511] ipv6_setsockopt+0x135/0x170 [ 106.627734][ T9511] rawv6_setsockopt+0xc2/0x510 [ 106.627746][ T9511] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 106.627758][ T9511] ? selinux_socket_setsockopt+0x6a/0x80 [ 106.627797][ T9511] ? sock_common_setsockopt+0x2e/0xf0 [ 106.627811][ T9511] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 106.627822][ T9511] do_sock_setsockopt+0x221/0x470 [ 106.627833][ T9511] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 106.627852][ T9511] __sys_setsockopt+0x1a0/0x230 [ 106.627875][ T9511] __x64_sys_setsockopt+0xbd/0x160 [ 106.627895][ T9511] ? do_syscall_64+0x91/0x4c0 [ 106.627921][ T9511] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.627943][ T9511] do_syscall_64+0xcd/0x4c0 [ 106.627970][ T9511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.627988][ T9511] RIP: 0033:0x7f2f2a78e929 [ 106.628000][ T9511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.628014][ T9511] RSP: 002b:00007f2f2b554038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 106.628025][ T9511] RAX: ffffffffffffffda RBX: 00007f2f2a9b5fa0 RCX: 00007f2f2a78e929 [ 106.628031][ T9511] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000026 [ 106.628037][ T9511] RBP: 00007f2f2a810b39 R08: 00000000000005c0 R09: 0000000000000000 [ 106.628044][ T9511] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 106.628050][ T9511] R13: 0000000000000000 R14: 00007f2f2a9b5fa0 R15: 00007ffc70f7eee8 [ 106.628064][ T9511] [ 106.628068][ T9511] Mem-Info: [ 106.643528][ T29] usb usb6-port1: unable to enumerate USB device [ 106.644625][ T9511] active_anon:19673 inactive_anon:0 isolated_anon:0 [ 106.644625][ T9511] active_file:5478 inactive_file:50853 isolated_file:0 [ 106.644625][ T9511] unevictable:1768 dirty:42 writeback:0 [ 106.644625][ T9511] slab_reclaimable:11876 slab_unreclaimable:72930 [ 106.644625][ T9511] mapped:24838 shmem:11619 pagetables:1477 [ 106.644625][ T9511] sec_pagetables:306 bounce:0 [ 106.644625][ T9511] kernel_misc_reclaimable:0 [ 106.644625][ T9511] free:443719 free_pcp:12057 free_cma:0 [ 106.758513][ T9511] Node 0 active_anon:78568kB inactive_anon:0kB active_file:21912kB inactive_file:203212kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:99972kB dirty:168kB writeback:0kB shmem:42940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:15312kB pagetables:5692kB sec_pagetables:1224kB all_unreclaimable? no Balloon:0kB [ 106.768239][ T9511] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 106.777420][ T9511] Node 0 DMA free:15016kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:192kB local_pcp:56kB free_cma:0kB [ 106.785856][ T9511] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 106.787584][ T9511] Node 0 DMA32 free:145728kB boost:8192kB min:35708kB low:42584kB high:49460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:78568kB inactive_anon:0kB active_file:21912kB inactive_file:203212kB unevictable:3536kB writepending:168kB present:2080628kB managed:1264724kB mlocked:0kB bounce:0kB free_pcp:33980kB local_pcp:8528kB free_cma:0kB [ 106.796948][ T9511] lowmem_reserve[]: 0 0 0 0 0 [ 106.798421][ T9511] Node 1 Normal free:1612404kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781948kB mlocked:0kB bounce:0kB free_pcp:14376kB local_pcp:96kB free_cma:0kB [ 106.807294][ T9511] lowmem_reserve[]: 0 0 0 0 0 [ 106.808773][ T9511] Node 0 DMA: 14*4kB (UM) 5*8kB (UM) 7*16kB (ME) 7*32kB (UM) 8*64kB (UME) 6*128kB (UME) 6*256kB (UME) 3*512kB (ME) 4*1024kB (ME) 3*2048kB (ME) 0*4096kB = 15024kB [ 106.813523][ T9511] Node 0 DMA32: 956*4kB (UME) 956*8kB (UME) 564*16kB (UME) 611*32kB (UME) 319*64kB (UME) 33*128kB (UM) 40*256kB (UM) 38*512kB (UM) 16*1024kB (UM) 9*2048kB (UM) 4*4096kB (U) = 145584kB [ 106.818813][ T9511] Node 1 Normal: 16*4kB (UME) 19*8kB (UME) 38*16kB (UME) 126*32kB (UME) 38*64kB (UME) 12*128kB (UME) 8*256kB (UME) 6*512kB (UME) 3*1024kB (UM) 3*2048kB (UM) 388*4096kB (UM) = 1612408kB [ 106.824635][ T9511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.827688][ T9511] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 106.830372][ T9511] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.833181][ T9511] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 106.835914][ T9511] 67946 total pagecache pages [ 106.837349][ T9511] 0 pages in swap cache [ 106.838939][ T9511] Free swap = 124996kB [ 106.840218][ T9511] Total swap = 124996kB [ 106.841417][ T9511] 1048443 pages RAM [ 106.842596][ T9511] 0 pages HighMem/MovableOnly [ 106.843954][ T9511] 282935 pages reserved [ 106.845211][ T9511] 0 pages cma reserved [ 106.953860][ T9526] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.171453][ T9538] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 107.281076][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1047'. [ 107.393010][ T9549] program syz.0.1050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.396603][ T9549] program syz.0.1050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.446551][ T9550] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 107.526968][ T9556] input: syz0 as /devices/virtual/input/input20 [ 107.644882][ T5939] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 107.648798][ T5939] Bluetooth: hci0: Injecting HCI hardware error event [ 107.651370][ T9574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1056'. [ 107.652552][ T5939] Bluetooth: hci0: hardware error 0x00 [ 107.658165][ T9574] nft_compat: unsupported protocol 1 [ 107.660974][ T9574] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1056'. [ 107.841376][ T9576] netlink: 14504 bytes leftover after parsing attributes in process `syz.0.1057'. [ 107.872877][ T5953] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 108.024679][ T5953] usb 8-1: config 1 interface 0 has no altsetting 0 [ 108.031077][ T5953] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.035357][ T5953] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.039826][ T5953] usb 8-1: Product: Ц [ 108.041414][ T5953] usb 8-1: Manufacturer: п [ 108.044253][ T5953] usb 8-1: SerialNumber: 㐊 [ 108.226717][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 108.226734][ T40] audit: type=1400 audit(1749813018.021:668): avc: denied { write } for pid=9609 comm="syz.1.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.250005][ T9614] overlayfs: conflicting options: nfs_export=on,index=off [ 108.308322][ T5953] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 108.316546][ T5953] usb 8-1: USB disconnect, device number 10 [ 108.410122][ T9647] netlink: 'syz.1.1071': attribute type 10 has an invalid length. [ 108.417523][ T9647] team0: Device ipvlan1 failed to register rx_handler [ 108.492406][ T9659] IPVS: persistence engine module ip_vs_pe_s not found [ 108.600532][ T9675] hpfs: Bad magic ... probably not HPFS [ 108.659789][ T9678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1078'. [ 108.774839][ T9687] sp0: Synchronizing with TNC [ 108.790770][ T9690] tmpfs: Unknown parameter 'grpqU-8y(uota_block]hacg' [ 108.945740][ T9699] 8021q: adding VLAN 0 to HW filter on device bond6 [ 109.028227][ T40] audit: type=1400 audit(1749813018.821:669): avc: denied { read } for pid=9708 comm="syz.0.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 109.054160][ T9709] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1086'. [ 109.121210][ T9715] overlay: Bad value for 'workdir' [ 109.124615][ T9715] netlink: 'syz.3.1088': attribute type 2 has an invalid length. [ 109.132646][ T40] audit: type=1400 audit(1749813018.921:670): avc: denied { execute_no_trans } for pid=9716 comm="syz.0.1089" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=30824 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 109.162295][ T40] audit: type=1400 audit(1749813018.951:671): avc: denied { read } for pid=9719 comm="syz.3.1090" path="socket:[31906]" dev="sockfs" ino=31906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.165163][ T9720] netlink: 'syz.0.1091': attribute type 8 has an invalid length. [ 109.172144][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 109.178589][ T9720] bridge0: port 3(dummy0) entered disabled state [ 109.181513][ T9720] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.185084][ T9720] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.190911][ T9720] bridge0: entered allmulticast mode [ 109.202500][ T59] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 109.334811][ T59] usb 6-1: device descriptor read/64, error -71 [ 109.523924][ T9752] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.572539][ T59] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 109.702509][ T59] usb 6-1: device descriptor read/64, error -71 [ 109.736461][ T5939] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 109.812779][ T59] usb usb6-port1: attempt power cycle [ 110.016386][ T9793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1110'. [ 110.052276][ T9796] random: crng reseeded on system resumption [ 110.061615][ T40] audit: type=1400 audit(1749813019.851:672): avc: denied { ioctl } for pid=9795 comm="syz.0.1111" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 110.152635][ T59] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 110.173092][ T59] usb 6-1: device descriptor read/8, error -71 [ 110.250406][ T9814] syz.3.1116: attempt to access beyond end of device [ 110.250406][ T9814] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 110.258741][ T9814] syz.3.1116: attempt to access beyond end of device [ 110.258741][ T9814] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 110.263088][ T9814] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 110.266050][ T9814] syz.3.1116: attempt to access beyond end of device [ 110.266050][ T9814] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 110.266965][ T5939] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 110.270113][ T9814] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 110.276273][ T9814] syz.3.1116: attempt to access beyond end of device [ 110.276273][ T9814] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 110.280105][ T9814] syz.3.1116: attempt to access beyond end of device [ 110.280105][ T9814] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 110.284211][ T9814] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 110.287258][ T9814] syz.3.1116: attempt to access beyond end of device [ 110.287258][ T9814] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 110.291210][ T9814] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 110.296692][ T9814] syz.3.1116: attempt to access beyond end of device [ 110.296692][ T9814] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 110.300721][ T9814] syz.3.1116: attempt to access beyond end of device [ 110.300721][ T9814] nbd3: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 110.305000][ T9814] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 110.307965][ T9814] syz.3.1116: attempt to access beyond end of device [ 110.307965][ T9814] nbd3: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 110.312027][ T9814] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 110.315175][ T9814] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 110.412500][ T59] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 110.417078][ T40] audit: type=1400 audit(1749813020.211:673): avc: denied { map } for pid=9835 comm="syz.2.1122" path="/dev/nvme-fabrics" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.427354][ T40] audit: type=1400 audit(1749813020.211:674): avc: denied { execute } for pid=9835 comm="syz.2.1122" path="/dev/nvme-fabrics" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.433053][ T59] usb 6-1: device descriptor read/8, error -71 [ 110.548864][ T59] usb usb6-port1: unable to enumerate USB device [ 110.570070][ T9847] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.609820][ T9849] netlink: 'syz.0.1127': attribute type 1 has an invalid length. [ 110.624420][ T9849] 8021q: adding VLAN 0 to HW filter on device bond7 [ 110.637723][ T9849] bond7: (slave veth0_to_bond): making interface the new active one [ 110.642305][ T9849] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 110.654319][ T9847] pimreg3: entered allmulticast mode [ 110.659287][ T9849] vlan0: entered allmulticast mode [ 110.661999][ T9849] veth1: entered allmulticast mode [ 110.666132][ T9849] veth1: entered promiscuous mode [ 110.669766][ T9849] veth1: left promiscuous mode [ 110.672321][ T9849] bond7: (slave vlan0): Enslaving as an active interface with an up link [ 110.720492][ T40] audit: type=1400 audit(1749813020.511:675): avc: denied { map } for pid=9853 comm="syz.0.1128" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 110.732514][ T40] audit: type=1400 audit(1749813020.511:676): avc: denied { execute } for pid=9853 comm="syz.0.1128" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 110.753778][ T9855] syzkaller0: entered promiscuous mode [ 110.755872][ T9855] syzkaller0: entered allmulticast mode [ 110.761039][ T40] audit: type=1400 audit(1749813020.551:677): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 111.522531][ T5981] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 111.844728][ T9878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1133'. [ 111.952153][ T9896] fuse: Bad value for 'fd' [ 111.989189][ T9905] program syz.1.1139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.156532][ T9914] netlink: 'syz.3.1135': attribute type 2 has an invalid length. [ 112.159718][ T9914] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1135'. [ 112.164790][ T9914] nbd: must specify a device to reconfigure [ 112.197762][ T9917] random: crng reseeded on system resumption [ 112.207230][ T9917] Restarting kernel threads ... [ 112.210759][ T9917] Done restarting kernel threads. [ 112.299018][ T9926] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 112.523312][ T9935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1149'. [ 112.534975][ T59] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 112.684758][ T59] usb 5-1: Using ep0 maxpacket: 8 [ 112.688102][ T59] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 112.691065][ T59] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 112.695121][ T59] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.698815][ T59] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.702239][ T59] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 112.706442][ T59] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 112.708690][ T59] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 112.712112][ T59] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.715750][ T59] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.719041][ T59] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 112.723007][ T59] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 112.725306][ T59] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 112.728638][ T59] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.732045][ T59] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.735480][ T59] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 112.741116][ T59] usb 5-1: string descriptor 0 read error: -22 [ 112.743320][ T59] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 112.746335][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.753410][ T59] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 112.979079][ T6501] udevd[6501]: symlink '../../loop2' '/dev/disk/by-diskseq/86.tmp-b7:2' failed: Read-only file system [ 112.997252][ T6000] usb 5-1: USB disconnect, device number 14 [ 113.006597][ T6047] udevd[6047]: symlink '../../loop2' '/dev/disk/by-diskseq/86.tmp-b7:2' failed: Read-only file system [ 113.022366][ T6047] udevd[6047]: symlink '../../loop2' '/dev/disk/by-diskseq/86.tmp-b7:2' failed: Read-only file system [ 113.245651][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 113.245663][ T40] audit: type=1400 audit(1749813023.041:684): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 113.462666][ T9959] i2c i2c-1: Invalid block write size 34 [ 113.507551][ T40] audit: type=1400 audit(1749813023.301:685): avc: denied { setopt } for pid=9962 comm="syz.3.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 113.521494][ T9965] 9pnet_virtio: no channels available for device syz [ 113.544574][ T9967] nbd: couldn't find a device at index -1605786504 [ 113.597789][ T9969] ntfs3(sr0): Primary boot signature is not NTFS. [ 113.601182][ T9969] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 113.647855][ T40] audit: type=1400 audit(1749813023.441:686): avc: denied { create } for pid=9970 comm="syz.0.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 113.981485][ T40] audit: type=1400 audit(1749813023.771:687): avc: denied { map } for pid=10009 comm="syz.1.1167" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 113.989587][T10008] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 114.072276][T10014] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 114.134418][ T40] audit: type=1400 audit(1749813023.931:688): avc: denied { mounton } for pid=10018 comm="syz.1.1173" path="/291/file0" dev="hugetlbfs" ino=32172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 114.134587][T10019] overlayfs: maximum fs stacking depth exceeded [ 114.195455][T10026] syzkaller1: entered promiscuous mode [ 114.197782][T10026] syzkaller1: entered allmulticast mode [ 114.231345][ T40] audit: type=1400 audit(1749813024.021:689): avc: denied { write } for pid=10027 comm="syz.1.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.256320][ T6047] udevd[6047]: symlink '../../loop2' '/dev/disk/by-diskseq/87.tmp-b7:2' failed: Read-only file system [ 114.282540][ T5939] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 114.286148][ T5939] Bluetooth: hci3: Injecting HCI hardware error event [ 114.288931][ T5939] Bluetooth: hci3: hardware error 0x00 [ 114.318968][T10041] overlayfs: conflicting options: nfs_export=on,index=off [ 114.499057][ T6501] udevd[6501]: symlink '../../loop2' '/dev/disk/by-diskseq/87.tmp-b7:2' failed: Read-only file system [ 114.527223][T10067] GUP no longer grows the stack in syz.1.1186 (10067): 200000004000-200000008000 (200000002000) [ 114.531035][T10067] CPU: 1 UID: 0 PID: 10067 Comm: syz.1.1186 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 114.531051][T10067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.531058][T10067] Call Trace: [ 114.531063][T10067] [ 114.531068][T10067] dump_stack_lvl+0x16c/0x1f0 [ 114.531098][T10067] gup_vma_lookup+0x1d2/0x220 [ 114.531117][T10067] __get_user_pages+0x271/0x3b80 [ 114.531142][T10067] ? __pfx___get_user_pages+0x10/0x10 [ 114.531166][T10067] get_user_pages_remote+0x258/0xb20 [ 114.531178][T10067] ? __pfx_mtree_load+0x10/0x10 [ 114.531195][T10067] ? __pfx_get_user_pages_remote+0x10/0x10 [ 114.531223][T10067] __access_remote_vm+0x246/0x810 [ 114.531241][T10067] ? do_raw_spin_lock+0x12c/0x2b0 [ 114.531253][T10067] ? __pfx___access_remote_vm+0x10/0x10 [ 114.531273][T10067] proc_pid_cmdline_read+0x4de/0x900 [ 114.531314][T10067] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 114.531330][T10067] ? rw_verify_area+0xcf/0x680 [ 114.531345][T10067] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 114.531359][T10067] vfs_readv+0x5c1/0x8b0 [ 114.531377][T10067] ? __pfx_vfs_readv+0x10/0x10 [ 114.531391][T10067] ? kmem_cache_free+0x2d1/0x4d0 [ 114.531414][T10067] ? __fget_files+0x20e/0x3c0 [ 114.531434][T10067] ? do_preadv+0x1a6/0x270 [ 114.531446][T10067] do_preadv+0x1a6/0x270 [ 114.531458][T10067] ? __pfx_do_preadv+0x10/0x10 [ 114.531479][T10067] do_syscall_64+0xcd/0x4c0 [ 114.531497][T10067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.531510][T10067] RIP: 0033:0x7fa52038e929 [ 114.531520][T10067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.531532][T10067] RSP: 002b:00007fa521215038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 114.531543][T10067] RAX: ffffffffffffffda RBX: 00007fa5205b5fa0 RCX: 00007fa52038e929 [ 114.531551][T10067] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000006 [ 114.531558][T10067] RBP: 00007fa520410b39 R08: 0000000000000200 R09: 0000000000000000 [ 114.531564][T10067] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 114.531570][T10067] R13: 0000000000000000 R14: 00007fa5205b5fa0 R15: 00007ffccec02968 [ 114.531584][T10067] [ 114.646030][T10071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1187'. [ 114.694187][T10073] [U] zͻi[27| [ 114.696444][T10073] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 114.702394][T10073] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 114.705361][T10073] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 114.720106][T10073] [U] 8)X)YvxRĻbmbN@ox;JD, [ 114.723293][T10073] [U] *Cn3v7KEXgt_3 [ 114.725828][T10073] [U] D/QazҬEHgE1$_ks=R@ [ 114.728223][T10073] [U] ϼcEv @ [ 114.729907][T10073] [U] a% [ 114.731410][T10073] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 114.739850][T10073] [U] f1p3 [ 114.741404][T10073] [U] N0[L;a_l&kMC [ 114.744300][T10073] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 114.748579][ T40] audit: type=1400 audit(1749813024.541:690): avc: denied { setattr } for pid=10072 comm="syz.1.1188" name="ALG" dev="sockfs" ino=31132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 114.749548][T10072] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 rejected, failed to enable media [ 116.173586][T10162] Falling back ldisc for ptm0. [ 116.218616][T10174] debugfs: Invalid uid '0x00000000ffffffff' [ 116.220619][T10173] debugfs: Invalid uid '0x00000000ffffffff' [ 116.331295][ T5945] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 116.331887][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1219'. [ 116.363025][ T5939] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 116.398535][T10193] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 116.438969][T10202] usb usb9: usbfs: process 10202 (syz.0.1224) did not claim interface 0 before use [ 116.440820][T10203] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1224'. [ 116.551714][T10209] syzkaller0: entered promiscuous mode [ 116.553838][T10209] syzkaller0: entered allmulticast mode [ 116.596633][ T5953] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 116.597266][T10211] vxfs: WRONG superblock magic 00000000 at 1 [ 116.601964][T10211] vxfs: WRONG superblock magic 00000000 at 8 [ 116.604230][T10211] vxfs: can't find superblock. [ 116.647482][T10213] efs: device does not support 512 byte blocks [ 116.649680][T10213] device does not support 512 byte blocks [ 116.649680][T10213] [ 116.725600][ T5953] usb 8-1: device descriptor read/64, error -71 [ 116.738389][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 116.800834][T10223] tmpfs: Bad value for 'mpol' [ 116.805127][T10223] netlink: 'syz.0.1233': attribute type 10 has an invalid length. [ 116.962788][ T5953] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 117.092604][ T5953] usb 8-1: device descriptor read/64, error -71 [ 117.127488][ T6501] udevd[6501]: symlink '../../loop2' '/dev/disk/by-diskseq/87.tmp-b7:2' failed: Read-only file system [ 117.202754][ T5953] usb usb8-port1: attempt power cycle [ 117.553741][ T5953] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 117.583646][ T5953] usb 8-1: device descriptor read/8, error -71 [ 117.790667][T10260] netlink: 'syz.1.1246': attribute type 11 has an invalid length. [ 117.794818][T10260] netlink: 'syz.1.1246': attribute type 11 has an invalid length. [ 117.798625][T10260] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1246'. [ 117.832552][ T5953] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 117.863481][ T5953] usb 8-1: device descriptor read/8, error -71 [ 117.934733][T10274] SELinux: syz.1.1251 (10274) set checkreqprot to 1. This is no longer supported. [ 117.973070][ T5953] usb usb8-port1: unable to enumerate USB device [ 118.112553][ T5953] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 118.242592][ T5953] usb 8-1: device descriptor read/64, error -71 [ 118.284886][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 118.284904][ T40] audit: type=1326 audit(1749813028.081:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10280 comm="syz.1.1254" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52038e929 code=0x7fc00000 [ 118.312386][ T40] audit: type=1400 audit(1749813028.101:753): avc: denied { read write } for pid=5938 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.321993][ T40] audit: type=1400 audit(1749813028.111:754): avc: denied { read write open } for pid=5938 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.332641][ T40] audit: type=1400 audit(1749813028.111:755): avc: denied { ioctl } for pid=5938 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.354535][ T40] audit: type=1400 audit(1749813028.151:756): avc: denied { ioctl } for pid=10184 comm="syz.3.1219" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.364735][ T40] audit: type=1400 audit(1749813028.151:757): avc: denied { read } for pid=10287 comm="syz.1.1255" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 118.378985][ T40] audit: type=1400 audit(1749813028.151:758): avc: denied { ioctl } for pid=10184 comm="syz.3.1219" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.388934][ T40] audit: type=1400 audit(1749813028.151:759): avc: denied { read open } for pid=10287 comm="syz.1.1255" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 118.396310][ T40] audit: type=1400 audit(1749813028.151:760): avc: denied { ioctl } for pid=10287 comm="syz.1.1255" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 118.403709][ T40] audit: type=1400 audit(1749813028.171:761): avc: denied { prog_load } for pid=10287 comm="syz.1.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 118.502564][ T5953] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 118.642729][ T5953] usb 8-1: device descriptor read/64, error -71 [ 118.753668][ T5953] usb usb8-port1: attempt power cycle [ 119.103207][ T5953] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 119.124160][ T5953] usb 8-1: device descriptor read/8, error -71 [ 119.372558][ T5953] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 119.602209][ T5953] usb 8-1: device not accepting address 18, error -71 [ 119.604855][ T5953] usb usb8-port1: unable to enumerate USB device [ 119.684188][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1266'. [ 119.690301][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 119.909147][T10332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1825 sclass=netlink_route_socket pid=10332 comm=syz.1.1268 [ 119.922669][ T5953] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 120.082600][ T5953] usb 8-1: Using ep0 maxpacket: 32 [ 120.094362][ T5953] usb 8-1: config 1 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.098633][ T5953] usb 8-1: config 1 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 64 [ 120.101869][ T5953] usb 8-1: config 1 interface 0 altsetting 12 bulk endpoint 0x3 has invalid maxpacket 64 [ 120.107479][ T5953] usb 8-1: config 1 interface 0 has no altsetting 0 [ 120.117937][ T5953] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.120664][ T5953] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.123221][ T5953] usb 8-1: Product: syz [ 120.124515][ T5953] usb 8-1: Manufacturer: з [ 120.125900][ T5953] usb 8-1: SerialNumber: syz [ 120.135282][T10312] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.138342][T10312] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.346917][T10312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.349637][T10312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.375082][ T5953] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 120.384093][ T5953] usb 8-1: USB disconnect, device number 19 [ 120.499515][T10345] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 120.529578][ T5935] udevd[5935]: symlink '../../loop2' '/dev/disk/by-diskseq/87.tmp-b7:2' failed: Read-only file system [ 120.574039][T10350] [U]  [ 120.646288][T10362] ================================================================== [ 120.648744][T10362] BUG: KASAN: slab-out-of-bounds in _raw_spin_lock+0x2e/0x40 [ 120.651060][T10362] Read of size 1 at addr ffff8880589f8e60 by task syz.3.1278/10362 [ 120.654673][T10362] [ 120.656142][T10362] CPU: 3 UID: 0 PID: 10362 Comm: syz.3.1278 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 120.656157][T10362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.656164][T10362] Call Trace: [ 120.656168][T10362] [ 120.656172][T10362] dump_stack_lvl+0x116/0x1f0 [ 120.656191][T10362] print_report+0xcd/0x680 [ 120.656207][T10362] ? __virt_addr_valid+0x81/0x610 [ 120.656219][T10362] ? __phys_addr+0xe8/0x180 [ 120.656231][T10362] ? _raw_spin_lock+0x2e/0x40 [ 120.656248][T10362] kasan_report+0xe0/0x110 [ 120.656263][T10362] ? _raw_spin_lock+0x2e/0x40 [ 120.656277][T10362] ? _raw_spin_lock+0x2e/0x40 [ 120.656290][T10362] __kasan_check_byte+0x36/0x50 [ 120.656305][T10362] lock_acquire+0xfc/0x350 [ 120.656322][T10362] ? __pfx___mutex_lock+0x10/0x10 [ 120.656340][T10362] _raw_spin_lock+0x2e/0x40 [ 120.656352][T10362] ? __futex_pivot_hash+0x1dd/0x540 [ 120.656367][T10362] __futex_pivot_hash+0x1dd/0x540 [ 120.656382][T10362] futex_hash_allocate+0xad1/0xf00 [ 120.656397][T10362] ? __pfx_futex_hash_allocate+0x10/0x10 [ 120.656412][T10362] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 120.656424][T10362] ? cap_task_prctl+0x2af/0xa80 [ 120.656462][T10362] ? static_key_count+0x5a/0x70 [ 120.656474][T10362] futex_hash_prctl+0x1f4/0x650 [ 120.656490][T10362] __do_sys_prctl+0x171f/0x24c0 [ 120.656501][T10362] ? __pfx___do_sys_prctl+0x10/0x10 [ 120.656514][T10362] do_syscall_64+0xcd/0x4c0 [ 120.656530][T10362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.656541][T10362] RIP: 0033:0x7fa775b8e929 [ 120.656550][T10362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.656561][T10362] RSP: 002b:00007fa776960038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 120.656571][T10362] RAX: ffffffffffffffda RBX: 00007fa775db6160 RCX: 00007fa775b8e929 [ 120.656578][T10362] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 120.656584][T10362] RBP: 00007fa775c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 120.656591][T10362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.656597][T10362] R13: 0000000000000001 R14: 00007fa775db6160 R15: 00007ffd988342d8 [ 120.656607][T10362] [ 120.656610][T10362] [ 120.656847][T10363] sctp: [Deprecated]: syz.1.1280 (pid 10363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.656847][T10363] Use struct sctp_sack_info instead [ 120.660282][T10362] Allocated by task 10359: [ 120.660291][T10362] kasan_save_stack+0x33/0x60 [ 120.660305][T10362] kasan_save_track+0x14/0x30 [ 120.660317][T10362] __kasan_kmalloc+0xaa/0xb0 [ 120.660329][T10362] __kvmalloc_node_noprof+0x27b/0x620 [ 120.738646][T10362] futex_hash_allocate+0x49d/0xf00 [ 120.740233][T10362] futex_hash_prctl+0x1f4/0x650 [ 120.741721][T10362] __do_sys_prctl+0x171f/0x24c0 [ 120.743264][T10362] do_syscall_64+0xcd/0x4c0 [ 120.744681][T10362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.746505][T10362] [ 120.747249][T10362] The buggy address belongs to the object at ffff8880589f8e00 [ 120.747249][T10362] which belongs to the cache kmalloc-cg-64 of size 64 [ 120.751384][T10362] The buggy address is located 32 bytes to the right of [ 120.751384][T10362] allocated 64-byte region [ffff8880589f8e00, ffff8880589f8e40) [ 120.755733][T10362] [ 120.756502][T10362] The buggy address belongs to the physical page: [ 120.758464][T10362] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880589f8000 pfn:0x589f8 [ 120.761462][T10362] memcg:ffff88803bed2001 [ 120.762823][T10362] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 120.764943][T10362] page_type: f5(slab) [ 120.766163][T10362] raw: 00fff00000000000 ffff88801b849a40 ffffea0000e20bc0 dead000000000004 [ 120.768754][T10362] raw: ffff8880589f8000 000000008020001d 00000000f5000000 ffff88803bed2001 [ 120.771361][T10362] page dumped because: kasan: bad access detected [ 120.773349][T10362] page_owner tracks the page as allocated [ 120.775079][T10362] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5938, tgid 5938 (syz-executor), ts 48892698052, free_ts 0 [ 120.780541][T10362] post_alloc_hook+0x1c0/0x230 [ 120.781999][T10362] get_page_from_freelist+0x1321/0x3890 [ 120.783729][T10362] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 120.785510][T10362] alloc_pages_mpol+0x1fb/0x550 [ 120.787028][T10362] new_slab+0x23b/0x330 [ 120.788312][T10362] ___slab_alloc+0xd9c/0x1940 [ 120.789794][T10362] __slab_alloc.constprop.0+0x56/0xb0 [ 120.791446][T10362] __kmalloc_cache_noprof+0xfb/0x3e0 [ 120.793208][T10362] alloc_fdtable+0xa0/0x2b0 [ 120.794642][T10362] dup_fd+0x83b/0xb90 [ 120.795872][T10362] copy_process+0x230c/0x76a0 [ 120.797346][T10362] kernel_clone+0xfc/0x960 [ 120.798762][T10362] __do_sys_clone+0xce/0x120 [ 120.800218][T10362] do_syscall_64+0xcd/0x4c0 [ 120.801667][T10362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.803565][T10362] page_owner free stack trace missing [ 120.805210][T10362] [ 120.805980][T10362] Memory state around the buggy address: [ 120.807675][T10362] ffff8880589f8d00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 120.810049][T10362] ffff8880589f8d80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 120.812437][T10362] >ffff8880589f8e00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 120.814840][T10362] ^ [ 120.817019][T10362] ffff8880589f8e80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 120.819445][T10362] ffff8880589f8f00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 120.821916][T10362] ================================================================== [ 120.824645][T10362] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 120.826891][T10362] CPU: 3 UID: 0 PID: 10362 Comm: syz.3.1278 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 120.830550][T10362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.833774][T10362] Call Trace: [ 120.834807][T10362] [ 120.835742][T10362] dump_stack_lvl+0x3d/0x1f0 [ 120.837203][T10362] panic+0x71c/0x800 [ 120.838450][T10362] ? __pfx_panic+0x10/0x10 [ 120.839849][T10362] ? irqentry_exit+0x3b/0x90 [ 120.841319][T10362] ? lockdep_hardirqs_on+0x7c/0x110 [ 120.842923][T10362] ? _raw_spin_lock+0x2e/0x40 [ 120.844395][T10362] ? check_panic_on_warn+0x1f/0xb0 [ 120.845935][T10362] ? _raw_spin_lock+0x2e/0x40 [ 120.847391][T10362] check_panic_on_warn+0xab/0xb0 [ 120.849040][T10362] end_report+0x107/0x170 [ 120.850806][T10362] kasan_report+0xee/0x110 [ 120.852308][T10362] ? _raw_spin_lock+0x2e/0x40 [ 120.853805][T10362] ? _raw_spin_lock+0x2e/0x40 [ 120.855271][T10362] __kasan_check_byte+0x36/0x50 [ 120.856792][T10362] lock_acquire+0xfc/0x350 [ 120.858197][T10362] ? __pfx___mutex_lock+0x10/0x10 [ 120.859753][T10362] _raw_spin_lock+0x2e/0x40 [ 120.861151][T10362] ? __futex_pivot_hash+0x1dd/0x540 [ 120.863078][T10362] __futex_pivot_hash+0x1dd/0x540 [ 120.864705][T10362] futex_hash_allocate+0xad1/0xf00 [ 120.866255][T10362] ? __pfx_futex_hash_allocate+0x10/0x10 [ 120.867935][T10362] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 120.869735][T10362] ? cap_task_prctl+0x2af/0xa80 [ 120.871258][T10362] ? static_key_count+0x5a/0x70 [ 120.872751][T10362] futex_hash_prctl+0x1f4/0x650 [ 120.874259][T10362] __do_sys_prctl+0x171f/0x24c0 [ 120.875736][T10362] ? __pfx___do_sys_prctl+0x10/0x10 [ 120.877306][T10362] do_syscall_64+0xcd/0x4c0 [ 120.878705][T10362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.880507][T10362] RIP: 0033:0x7fa775b8e929 [ 120.881911][T10362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.887747][T10362] RSP: 002b:00007fa776960038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 120.890282][T10362] RAX: ffffffffffffffda RBX: 00007fa775db6160 RCX: 00007fa775b8e929 [ 120.892872][T10362] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 120.895298][T10362] RBP: 00007fa775c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 120.897727][T10362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.900054][T10362] R13: 0000000000000001 R14: 00007fa775db6160 R15: 00007ffd988342d8 [ 120.902661][T10362] [ 120.904314][T10362] Kernel Offset: disabled [ 120.905678][T10362] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:10:31 Registers: info registers vcpu 0 CPU#0 RAX=00000000000051df RBX=dffffc0000000000 RCX=ffffc90007522000 RDX=0000000000080000 RSI=ffffffff848f4e94 RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc9000c8b79c0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000165 R13=ffffffff9af33748 R14=0000000000000193 R15=0000000000000200 RIP=ffffffff81bc1d06 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa5212156c0 ffffffff 00c00000 GS =0000 ffff8880d6754000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa521214f98 CR3=000000003d0f7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000004144 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa520411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa520411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa520411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa520411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa520411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa520411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa520584488 00007fa520584480 00007fa520584478 00007fa520584450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5210ed100 00007fa520584440 00007fa520584458 00007fa5205844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa520584498 00007fa520584490 00007fa520584488 00007fa520584480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=2e1cb3b3bf435c00 RBX=0000000000000001 RCX=ffffffff95d43b78 RDX=0000000000000008 RSI=ffff888025bdaf58 RDI=ffff888025bda440 RBP=ffffc90003e6f768 RSP=ffffc90003e6f6d0 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000028 R11=0000000000000001 R12=ffff888025bdaf30 R13=ffff888025bdaf58 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff81984ffd RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555559f54500 ffffffff 00c00000 GS =0000 ffff8880d6854000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa776960d58 CR3=0000000032ab6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=000000000000003f Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555559f73365 0000555559f72ee0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555559f7252e 0000555559f71d70 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000290030fff ffffffffff040280 0300080006100020 100006026ffa0108 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2803000400240300 0200220316020020 0306080018030008 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0310020040030c04 003c031404003803 0000000608063003 0604002c03100400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0054034004005003 0202004a03000200 4803000200460322 0200440304020042 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010010001b800401 000004080606015c a40008001be00300 10001bd003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1bc0030210001bb0 03019010001a9003 fd2fd5e57e0a0801 80030204007c0312 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040078037db09608 0070030604006c03 1004006803000200 60030404005c030a ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040058030210b880 840056030010b080 8400560301a001e0 8080840054034004 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000002 RCX=ffffffff81c3ee1f RDX=fffffbfff21501eb RSI=0000000000000008 RDI=ffffffff90a80f50 RBP=ffffea00011c3100 RSP=ffffc9000d27f628 R8 =0000000000000000 R9 =fffffbfff21501ea R10=ffffffff90a80f57 R11=dffffc0000000000 R12=0000000000000003 R13=ffff88807ffd7c58 R14=ffffed100fffaf8a R15=00000000000470c4 RIP=ffffffff81a15df4 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555583a75500 ffffffff 00c00000 GS =0000 ffff8880d6954000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa5205ab118 CR3=000000003d0f7000 CR4=00352ef0 DR0=0000000010000007 DR1=400000000000000c DR2=0000000000000000 DR3=0000000000000005 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa520411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa520411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa520411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa520411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa520411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa520411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa520584488 00007fa520584480 00007fa520584478 00007fa520584450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5210ed100 00007fa520584440 00007fa520584458 00007fa5205844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa520584498 00007fa520584490 00007fa520584488 00007fa520584480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b6495 RDI=ffffffff9b0883a0 RBP=ffffffff9b088360 RSP=ffffc9000d3af6a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9b088360 R15=ffffffff855b6430 RIP=ffffffff855b64bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fa7769606c0 ffffffff 00c00000 GS =0000 ffff8880d6a54000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa77695ff98 CR3=00000000321aa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000000000ff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa775c11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa775c11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa775c11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa775c11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa775c11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa775c11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa775d84488 00007fa775d84480 00007fa775d84478 00007fa775d84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7768ed100 00007fa775d84440 00007fa775d84458 00007fa775d844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa775d84498 00007fa775d84490 00007fa775d84488 00007fa775d84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000