last executing test programs: 1m2.369644959s ago: executing program 1 (id=745): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x9801, 0x20313}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, 0x0, &(0x7f00000000c0)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80401, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1m2.319451756s ago: executing program 1 (id=746): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 1m2.1312712s ago: executing program 1 (id=752): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064010101e4dc2c7b08090b7f4fbb9bde163a4e136c434c81fc5fdaf3b0a426e712ec6e444084ecfb6c551ac4486e89d3c86cddd79b1332ee211c14"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000f80)="f6fd4b4371b9cee432fc34e3b0cde3c10d835add05a2a055159b2312cff09dcbea4964835e21d0bdce7cec7a3ccf45ade70cdfa3244c6283342b161cf9be8a3390867042297df641f139ed0e0f6ee57129d551ca34c4b59067be7d74b1f483aee866db92965e73ce2299d080ea0d6b2233b2b8f43150ec0758c7f59f9f4fd5b7c4", 0x81}], 0x1) 1m2.122950096s ago: executing program 1 (id=753): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x40, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xe6}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xc}]}]}, 0x40}}, 0x4848) 1m2.069790622s ago: executing program 1 (id=756): ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x10005}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x521}, 0x57) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100000000000400000008"], 0x1c}}, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) r9 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000380)) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000880), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x840) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r7, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc800) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000500)=@bpq0, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, ')\xe2-\xac-}]]\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x20040001) 58.990590103s ago: executing program 1 (id=779): r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) fsmount(r1, 0x0, 0x0) (rerun: 64) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x0, 0xe1) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_client}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000004c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x7fff, 0xb, 0x4, 0x401, 0x9, 0x4, 0x9, 0xffff7071}}) (async) pivot_root(&(0x7f0000000140)='./file1/file0\x00', 0x0) (async) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000010001"], 0x0) 38.412999785s ago: executing program 32 (id=779): r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) fsmount(r1, 0x0, 0x0) (rerun: 64) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x0, 0xe1) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_client}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000004c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x7fff, 0xb, 0x4, 0x401, 0x9, 0x4, 0x9, 0xffff7071}}) (async) pivot_root(&(0x7f0000000140)='./file1/file0\x00', 0x0) (async) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000010001"], 0x0) 23.270152863s ago: executing program 4 (id=1141): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000280)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r7, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r8, 0x80044940, &(0x7f00000000c0)=0x32) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r3) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="340200006dada82b76a2c1982a08fe5e10a73006b95bf6615869b49da3aecc81d40a7afc9c8f5345fc68920c0fa4ce46e3180fa200a82e1f935eefa85f0ee8d37ddf5e5b538bd4786f561b1c62ba39", @ANYRES16=r9, @ANYBLOB="00022cbd7000fbdbdf2517000000300006800400020008000100ff0300000400050008000100040000000400020008000100040000000800010001000000140001800d0001007564703a73797a30000000002801068008000600010000004600040067636d28616573290000000000000000000000000000000000000000000000001e0000004278e9657b67d9282e51aa44d1db2ad047ed5f9542e27e2b39eaf138ea5a00008c0003001e1f390f68035d634358e4422007b2dd8c881790ecbe5832f3cd78911dedf902272d5999bc674198f60df084c526b9c379930d47b9549a26c6022c61a19e24b005a08517f8248e774cd995be88dfc08828371cd88d99f6298359aa8876f49fbdcd5ecebbdd4e0ef467cf2891e380a55afc54064fd2bcab6c530f78d7b7c935d284c94c8a1e3b7160040002003d00040067636d2861657329000000000000000000000000000000000000000000000000150000003e76cd3f58924c613a52801c9657c9de0100dec4ce00000004000500a800058008000100756470000c00028008000100200000001400028008000200fc0a000008000400460000003400028008000200000800000800030002000000080001001a0000000800020002000000080001000e00000008000100000000002400028008000300ff7f00000800040080000000080003000800000008000400fcffffff0800010065746800140002800800030006000000080003000000010008000100756470000c000380080002000c000000"], 0x234}, 0x1, 0x0, 0x0, 0x600c5}, 0x40) read(r8, &(0x7f00000019c0)=""/4107, 0x100b) r10 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r10, 0xa, 0x13) fcntl$setlease(r10, 0x400, 0x0) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r11}, &(0x7f0000bbdffc)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x16, 0x2, @tid=r11}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r6, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="010000000000000000004200000008008e007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e4ce723f1657464657673696d3000000d0087006c325f64726f707300000000050083000000000089d0aa972275566fcbff0a191596065e711fc0ae489ceca619d07d0318a06f23a1bd72ec67584c2cd45f7595d557f7e9ffb20badd70558580bebc269634663340e19c7e803d8e2fafad8faf0d427f1fc1da45684392bd7828e1cb6a0997eedc805f0f3"], 0x80}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040014}, 0x20005804) 20.181228038s ago: executing program 4 (id=1185): shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r0 = openat$pmem0(0xffffff9c, &(0x7f00000000c0), 0x165101, 0x0) r1 = dup(r0) setsockopt$inet_buf(r1, 0x0, 0x25, &(0x7f0000000140)="56743fff9668661dfe9d699c388af8b069f42947a55ce275134e695b7fec5d110ca6682949c97f7cbacfb6150faa8eea40ec23890fa74ca18994134cb8b794bad5f99cffef07bea505", 0x49) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') io_uring_enter(r2, 0x1693, 0x4c0f, 0x1, &(0x7f0000000040)={[0xe7c]}, 0x8) pread64(r2, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) get_mempolicy(&(0x7f0000000080), &(0x7f0000000100), 0x8, &(0x7f0000ffc000/0x4000)=nil, 0x2) 20.063336568s ago: executing program 4 (id=1189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48880}, 0x4004000) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000070a01040000000000000000020000000900020073797a32000000000900012273797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000070a01040000000000000000020000000900020073797a32000000000900012273797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000200)=[{&(0x7f00000002c0)='-1', 0x2}], 0x1, 0x4, 0x0) (async) pwritev(r2, &(0x7f0000000200)=[{&(0x7f00000002c0)='-1', 0x2}], 0x1, 0x4, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r6, @ANYBLOB="080006070a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r6, @ANYBLOB="080006070a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r3, 0x4, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2400408c) 19.909971538s ago: executing program 4 (id=1191): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000015000100000000000000ff00fe8800000000000000000000800000010000000000000000000000000000000000040000000000000000b10000000000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x68}}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000200)=@md0, 0xffffffffffffffff, &(0x7f0000000240)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f0000000880)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000080), 0x400) 19.907489363s ago: executing program 4 (id=1193): openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x129202, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fsc']) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f0000000340)={{&(0x7f0000004580)={'Accelerator\x00'}}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x32000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x43, 0xfe, 0x400, 0x1, @private2, @remote, 0x8000, 0x80, 0x9, 0x3651}}) r3 = socket(0x1d, 0x2, 0x6) bind$inet(r3, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) mlock2(&(0x7f0000513000/0x4000)=nil, 0x4000, 0x0) r4 = io_uring_setup(0x479, &(0x7f0000000100)={0x0, 0x4000005, 0x40, 0x4, 0x4000020}) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/130, 0x82}], 0x1}, 0xfffff88c}], 0x1, 0x1123, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r6, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000e80)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x390, 0x0, 0xffffffff, 0xf0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 'veth1_to_bridge\x00', {0x1ff}}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [0x0, 0x0, 0x0, 0xff000000], @ipv4=@private, [0x0, 0x0, 0x0, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@loopback, @ipv4=@local, @icmp_id=0x64, @gre_key=0x8}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @icmp_id=0x67, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'syz_tun\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4000000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [], 0xfffffffd}}, @common=@mh={{0x28}, {"6403"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x8, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) 19.564122548s ago: executing program 4 (id=1200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0x1, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0xffff, 0x29}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101100000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aec180000060a0b04000000000000000002000000c0180480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c7200000000000000000000020000000a0001006f776e65720000003800018007000100727400002c00028008000240000000020800014000000014080001400000000a080002400000000108000240000000000c0001800700010072740000381801800a00010072616e676500000028180280441004800410010005962c100356ed69d838dfe9f911d0c2d22748aa21150c9e20a5546364402d074628a28cccbe047e0489aaf5f1e11e68383a2c048bb21539cfb5aa6b8742378a50adee4cefa910a655dfd5e246e7eeed67b4ec0230bbd9f06ceafa0939255fd8172c3931c10ef37cf85fd984476689d32c329c2a0b17648166651d8f58f876ed8302b77a3fc39bdc830d71bb39e613cda9e2971df443dde2d858c5c20024a7e13828e2882a4249e5febe3a1b06948152e7e2062d07be2d36008d4d4af3dd26d5ccf3bffcd844e8564096e31c2fd48157767e9b1dd481c2ffaed6393651332f0d9ed4ec042941def789a605126269576786252867af79f6e963bb2b4ab70e1f0b5c54f772104e4c36b1e77b4d38189557607eb673d8b6d5c18c844294541a458f7dbd8eae6fa0598665b34a55da6ba158d8ba9d4fcbbc9d3abd134eccd702daf46f17893d77b4e32f78b56cde2a6fe3764f58c55e6f6e5de59c24c0d8875ba4079565023f69c254015b7193b0924f0874bee7c089895852ab9f2946f2ffb47755371e22b937cd35fc03496fd7ee79d1cd98086b7525d682fe4a621f461b2cedae6e2046d76affe72e7ed340bf4414758690d733a1f0ee49f704ba26f1d0c6b9a9d04807f1aced0530a9faba539c85c870558496282db8b674a21b99cab5519f265b295e663507ade444b5bcabe6fa306e5179a62c911d162bc7b30ab3333bedf6133ea73d01875a3986605088c0af13b39fd09ebfa106617dce8b23aefaefb7deb3af4950e4b3d4b88ecc81d808589967b5519a482ff7f53f4ab76825af49f23f1c9e8dd71bcc457b727c1da5545e621c17e7fbc30bf048796815203f7778b2e90d7c68c8b45cd7361e7c0db9ea571e772fdd102455756175a6afd4f7f1bf574e9d60738c478dd65635491f38d31d1daf8f6323ad6c4c0704b2adb5f6192504217b86555b1e367cd8de2044662e091a54625a22769344ef541978dd7ae4a4ed8db2c908f5afe46a4256de3e6d585a99e5dc6c731308106e6c95c689124b12724b730cfed5ecc894398213d6d2b0c81e4808f24753a913ea853d0a78bdcf8edb68963402d16fda0215ea01cf1148b58ed4d8196baffc2fbe5ac7d4ab4465e785e0a65fcc76048a5ca113b1a853827b462e5d4fcc1ed1a6b3828ec803d30b3765383ba156c4890eee7fe64fcacb8e07b1796444063c5111b6a9379ec7d5b4746abe700f590c125827fa60e36258580dcf1367c3ef407f8a1d64ba611062d42fe79c34be8b7fc5aefcc728f104af6392182f093ab03e49e4c8936a8316f63bad118cc719a19a62507b7fb91e8ce065fd9c547940e5c4c97c1c19fc9ef9cbc2d211afba659a8c39e7464ac5ac286fcaed19ab747352914d02900a6b9dd03e22cfafd104fe25aae03d0d71b5059d778c1de00b54de8124ab6fc7df9ba15af2fe9e778d694ec9b152914268597dcabcd145146b3fcad5f2bfb8d107d010f39fd7015e5e1de00a179c01606754822747c92d57db653c87fa2fbafeffbdac7c5da421a1a158bbb502257e8bf7384a73eace3ba6b7b1e2cde7e1a03ab532f103fe077bfec4b70c8208c4ab4b3d0a87268785c828098e0ecefa1274d5f58583915d480fec83c2b113d4f45342ac313c3919ba6e979cedcf07bb76baee467e9117b4f955d134ce9612cc0b8f603b1088296b549dc92873c2ddac8baac9e494da5e035818e6a9d0e1099a21a1b23a950a58e323e04a418cca8aef019a5decfa9aa4192f213cb60ce8009a1f2358c5538bd6a35b3f7e3f3427ac92f7e842bf1e6bfcb79d913e5b91aa3aa05b2847a5ffe00888fb19f2d9e78cc45df642e55be037f8ae61bfd2c63547bf85d72afa28e50f7e4bf971e63bca90f313280b6ef62dde95735a3c79cbe8641174c3c4f48012947f2d25c36aa9939f0f5f151004c802b0074278aaa43debb4b33cc2e4b625b702024cb39550d7de22bb7f3782061311b5cc8b6e0ba8ce695b85d2846f16e9a72ed614d88e3e49d28fd0e47ba7d6d1743510445120a6d23d449391c96539d596495ca5bcaace3679d4d363dec23897d9d75ddedfbe5c3a38cdceef05b2a429c8f733b611282b4e6dc02289243e056d9ca66d2d120a7d7fff18494f9efd6285deff4a07ac475145f1bc27497fe8b7c2496a8211516dcc4658d6c10fe27367fbdeaa4b62b539e5b79c776e031c77414443f8abca5a0dc8ac3f8218fe453c8dab0808a7c29c7b6a473a87d90c87673466c5b54da11ba942ea3af03bd451357c23fbcb5621903a47ceaa6a89bde38aa490226c867ecb9c50d4f85d5161f058785d46cc6dd9888c15e307c1a673f594eb8635aaa1d94d12f36db7e83a578097e95b9538fc95b9c6e60e0bf055b58d836ed396238b7b357a3096058791f663069f0e1ce71fde80f7d858b50b2b7531041b6cc69a476321ba6e8542fbdc970f29ff421f005ee3a607c8eb4806c8e163dba82aad59547bc6feabed00819416dd66eb37a9d5bf289ba9a76a4e06d3bf0a8d44e116f5b4435d7e7b1fdc038933d9df24c74a72d5d7af1a96400835834db9ab57fcd53caea37a9ce2b698a6118fa4ceb2d74f9cdbcfaba54f5576c9711a99a2298746ac22d6e3d83176303a22f830df2c88f29c59a9e199e87612e78232bc93f59b8ff783f3b3ce96d978e40ae4e52a2fa3702bf58297be763861bdbb47a3d6b458953e7bcf985b534a2bc6467e9df0bcd095b4f69b4a344ebefeabfc6263ee8d16392aab57d23391ce721d64197a810481671551b13ea024c43514e6a70667cea1bf242a97882434c30c6948ee59e729d36ec9e6faf871914ca8fe7a1419153c11f8eb8bcdee4fd63246ced94c5179c44f58836e2d0a04477e7dd16610beb3385f6cb91a1049417ce5afe2989d254363db2a729b70ee2bb4f4f4b06667f51277fd9fa850b5960c54ce0dd72488005ed51ff409f3c0cba6ea5076ba2f35ceaa3b4e7ebcc9eeda28244e6dc0191018fb27078790b4cf1d351d22335884a2e1e7a176f274adaa16addf404dd3f665a5248ed346da5a382d99853250e7e8265c276e739c1cf5508f5f6bb6ba7abb00833081bc613c00174a03a28dd204d3cee5d2578286e25511448c1f88af397f4d98df1289e28f4c3b9119013c38fbdb47a41e1127eeed931d4e8f741c218776d7ff7ec5146d2cfdb2249e083b85b3dc3d83446e5f7d10a2340decdf4935e256fbac0370d249f4814593d45de2229c8366d0c04c5b73e4ffa4a73a9b4d060fc7c9165ec254478c989b08219932f0da57c9a140b0297571d6bc2a5db1f7f0d0477590f45596fdfe8bf7bd5ff79dd5d5b88863a88982794884b9be7793ebd10bd10c9cbae1e5243de5649881937355407f249d5ddc3efd3bd4114d9954fa25bc8b5d8205afece8c84b5dc5adeee875d021b010fd21640ff57ed4d410501dd861778cf50efebe1078eba0f5deb5e27f2c9454a2acb8c8698412e4ef7b79d3c7f5fd04ad125a491edf8c36ab2d03316f316c3ce18d7ba1816583ff0928f37a2043dfc072d3c28252e3702bdbc5c7d6d9dcce19adb3d75a53e9fb960d78e93302cc31792d3f15031374abed685baadef43245b9ea3a1aaafcf54b537825a3cf0087b5fee8d541b471c4963d44cbfed161edb6ce31e5008178712421c03ce5a69b39c9b0b1ca131ff35c6ccf2ebcaa59f56ae4618bcd054d8189cb794694913d6cae220a0128f8e106e7768ebe06f511bc371b90bfd4194e9e3f4e2ea614674255eddda568013806b198abc23d018d48aa8c23806ff9034f94397de26a1a7bfbbf9a59210ee51d156e02b5497abf60c6d807974637305d7d7bd966c5c8192d22a2993cad4fcab43f581d5330190d9eac2b4b97dfeb4f884cbecc89a2e48b6d5105669612607060c17cdb9db0998f5a436108693ce8e1475e9e4833ff8b477b815095dd524a2f70389753004599b005bc38d69a164b84c29be66885f07a88e35917747fdd99fdc3fc3a4830dd6c7a62dccbdbcf591cfafd30a205e1e5cdb9e72058d7c4b64df7fa6eae762448bfc8786a5977764cf41f29912f959079bb0e05e03c4c669065fb9f4f4103cf5f4ea477b4daf015f3ca4e846bc6058c1dc85953fb20830132ee822861da37da574f3f47581dacb77fe5182aae788755d620eef97e19f202b475c48f014d1f303b4161b750d17822bdca9768965ef2bc74c10eaa31d2aa133300191682bb603eff475b8d836322bdda0a2c08b27a2d2fa0c96e08c469b7a919e49b3c7115092a4e4fd273e3212716a70f82d570b7faaf72c1e9ad33a5d9955f4be79f58d78ae828de4029fbaee5e97fff02f8d9bda938f0c11384cdb136da4828a6cde17a729f311d7eb9538b83b1616b149f4461bd483a0560f4831fab9c412dde7d4f131230bdaa958fc1fd26f1726a24524d57a90c32c0a9fc7b368af1a38c09233d05db83f9d566ecfa12810551cb7fa69c448d564885f174773b90eefdc80c03f6305d43d0e8c72bb5e9d7523217ee04a1d2fe589a9335e6e291e65c694af9371e0ae4578492ca48eee9fe538d827b11118b199977cfd29f24fff38224e5c2796e7ed4817a7ab61f6769ed3ad3071a67b5c1098fe414ae9ee27141c725db4333ba4b26ef6ca257b6b2508c371812e7ead0aa93ec9468cbce337d7b48248d2c9743736c442a3121b0853a3c1fcc8fa8641a313d50b1420c63cb94ea923949b44250f711da51fd5fc0b0194815c698b1f38bae041583bc8bcfbfb9229512d1cbd61b20ff6ee1c960a3568c89e78423753d1b984712bb042516df57da793ca2db5de9a157efa6e3c6653551d1a13d274fa40aa68bcbfe82b9bf046f925f9e4e8e7ce0e4756bc3c2e7ce3f530bea0af8c53ca5fb1242108ad0e7838dad8d9f29125cb217f74718630c9f3f5907325189738a67b49b5e129298ab843a4f8fb88922ca53145a79e71b46867a1414e64d726a2d40730af24ad4ceb240eb6a1f2956307b42ec9c61de245b06bb8e28c0ad3e06f1ab42a1fc105b9bd6d0a45240addda2e938efdbce2df6201c9faba03813bcf5c3f6352fe00539dc53822f4e6f1fe6a62b1f7b703c970dcf8fc6ee52c59d665166bd7d27b1a4bf05242967c262fa61d4220895d9536556306ef1e6cfcaa594a63c8d15d0712fcb7693492f21e8326cc2cd14a68170f1fc2e21c5c54159783f9ab41a93d947b0b96793166b2c19cae3f5301f7c45bde97c3c0c4b8821f3cab3edd3de9e2cb07123b76aedeaef4d18e9751550b82ccfeca51992e4aa7f20f8c37c5fb45c232a07c15f87d6ca4aaabf5aacb19042379533787f93bd0640a05a382fbe0fe16ba2ffd98fbec20a0212af5975605d9db6dbda11ff839b173d9c37175ad14e404436f4140a3d97a1ea910aa67624fb9099258fdba38abfcef8e0c328eeb4745289529d0096441b932ec41ed5366341cbb7aa5bbc5843bc706a2277394d5bec290a545146abb20007b578a1e0990cb2e36d9354fc76b874b59edb74e14ca4cd9b816ebc302463ec6c2ff457d22ce9affa5afaa3517cfcce854eee78dbd0ddff52f632b2fd5ffab6af577aa22c81ebac2b6e2b45107a17ad5f80f2b17bd681df2492c979744cfbc66d1d33c4968908f3de0c0e7ad2c70ef676d274708d2791ad97cae7d412bcf9e9be23bbc3d32165010b4bca0dce2694d9a76b88d20effb6571c0e3517ec3883034f65deefe8b40fa2854d2e65e6a7cf11cef40d0b75961b5b70dfc765abf9831149a5dcc649740ce845875c9901b34a969ed43c1b7e31ddd897eeabb8288628c53c000280080003400000000208000180fffffffd080003400000000308000180fffffffc080003400000000308000180fffffffb08000180000000030800024000000000d002048044000280080003400000000308000180ffffffff080003400000000308000340000000030800034000000002080003400000000308000180fffffffb0800034000000003400002800900020073797a300000000008000340000000020900020073797a3000000000080003400000000108000180fffffffc0900020073797a32000000000c00028008000180fffffffca1000100a043a928690c708f1df9888914e1499396c72fc220102c222437bb432e05b0b7e998a303233471ca4afda2491a5c4329d5ade960138e2898127fad0bb06cc3c8abd37903d08cbf7ffd83e9e4082bbbd2092ccccdd5e7786f59937a911555a8b974a7cb3fd71dfa07affa2169573d51c317e7b0d7eed68a361b8cc3606f973f6da82279f31962c4e0d3eb348e2c9e8016d57a004522d667320e6103a9580000002e0001006b7a98263328440dcfaa118a8f95f453821178bef38e56ed34968c07d6e0b0105b8e2d61bab943fde9310000540002800800034000000002080003400000000408000340000000040800034000000004080001800000000008000340000000040900020073797a32000000000900020073797a310000000008000180ffffffff60000100bbbf9393e49fa09da846887163d7b1f2ccb3170e6a4f9e6cc945d0f2558e430b02be5455498a121fdf624958e95980b0cd8083dd67d6503b0aa564c4923197dfbb3fa07206119e68e9940ea28f68ec360a7b9ad1b9894c1a5d8724ac280002800900020073797a300000000008000180fffffffe08000180ffffffff08000180ffffffff5300010069034d2725bf14e3478a0f75071c5c4f533cdc2a187262ecd8f27332551a518cfbdbf4e7a069cb1dbba13d4668e5f2a60b87b05abbb2084579f1e342a10b7f5efb4cf9502061d6babe86fd503c315500370001000473c0f7b8a0f72a69616a9155bff65a4966865a531712ab3753b4ec468bf9fda28688b15bf3c0828d67f2b6d5e5e1b6b224b90008000140000000155c030380f8000100038786b4331b61d029539dcd10bec20d81e92f4ebff3e9cdbb48486eb9e70753093ae261cc71fe9e80fd2ab591e6b7685323e9455029efaa426b0dc87f6dd9658f7f25d7ddfa8f37357b71154c44ea880e96d55f4bc8d58b8e61824d3c2248c175045ba073c60b648a7495361172aee99c72bdb51909deaa1867fddd0febf78531df5e59ae136a238c010649ec23f47e3693c5b190f9a3fe6edbb9cb90fe8e8d71d5958473bde002b09fde886f778853e7ecfa29ca9458ed24bc9bf9fcede6ca0b1fe643e0b98215c61c457c32b4850f8e2bc0f668417206d051e977c840139614fcdd4ef96fb3c2d42e64098c21be5980cf1f0e0c00028008000180fffffffb8f00010092600ca210f46dc1ce204b931329bfb580e261d23b3d259dec86a986809aec64ab76667dfd4537454be06b6c62cbe913951c07dc59fbd6f4142313b67d29efc98d5288f37e2b571fcc32439734412c99fb007b4b646bda88f68bcdeb2aa8d5dbf56bf1aada3695a3f98ff58739084916476e2fd959c9420a8da4dc1330bb2ba74793ac759f6c77d72d90ac0089000100811425b220f6847fa3291bc6db480e01af2f585d17cd8aafe0e78c8985aa7b88c10038e1ddc59969fc475d4993cde28012e3d07f4187fd5cd1277c36961c95ac2d387f31552427b864a97c4cf244355aa6391d0732697e5afff9ee845980200e7e8636aa837e0500fb8c4e7d09ab5fb83790d5b437100ae4331a1dfbdc5c5025c664806308000000b1000100fda47f7eabdb2bc85895903cb098befc3a6ce0785ea819ed05aea12a06cd6ed25f18a0cff44bcf2b9680f46ffcf4eaf78d41a06b26bea89fb1afe04c2254b9f7ca4fa3fcc24e9d485c222ee809e0ba1caa1d92a3963eb36063c13de8ac34715754aa06e7964598e46b3f80ab5eb18e226459aad5eab2a175f50d46dd66acb584562aa26f9600f22972f70b7e92157989668fb1d39d62317c947f608f00b33c870050910f05fc563649548baf36000000540002800900020073797a3200000000080003400000000308000180fffffffb0900020073797a300000000008000340000000010900020073797a320000000008000180fffffffd0900020073797a310000000014000280080001800000000008000180ffffffff1a000100420be1b2178ebc9de4b980153e17854efdc5a39099a90000bc000380280002800900020073797a30000000000800034000000004080003400000000308000340000000018d0001000500df2420d88581c01b6eb3663bb697813d1afdbcb1a59b0789c917a0d4233dbe9b049d22f2e0413494cf71680b4b5423382873a61fa14c2c120fa943e9c583c49d70114c56954c7f02095f00a3323c6aa73e8e0c0cb32a23591ef63a758f4966d97d34d6b0ff8b5e195413eeeab8a3fab90ba75caf2c5742669cdcb5609464aa86c135d4e6a362d90000000800024000000001e0000380db000100bc1e040dbcc244d1e63eec6cbb74ce334b3f49e5f4e2ab674552cc58a07aac3d8150f31a4a0b9e4fc13d36d63e4621466005725974712c871accd5f91703264a9bf96676ca2e21d3c3b7a6f82c6df636246a87dc2438ef8fc8fa7fc5adf81e71e1c2b68fbcf2f931b2c3c1412e29a8f71be571a107b1000bec796e16be70b32db0a0a7970fe0e534ebc26047c50e5638e900ecc30cb2e7d4c9b872d4b13089b968f54decbf49f6d11258cf82994f66c9a10e39698087ec0d59a979c33488e2c47caac1c4e001e5f2ee70cdf013cf8e904e8f209631fd1e000900010073797a30000000000900020073797a32"], 0x1914}}, 0x4048010) 19.473293952s ago: executing program 33 (id=1200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0x1, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0xffff, 0x29}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101100000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x1914}}, 0x4048010) 2.808876797s ago: executing program 3 (id=1453): setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "cc47a627484ace3a", "6047be727aaaaeccc8523cafa4c755ef", "260230fd", "27f14755086e1e16"}, 0x28) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x401, 0x90a3}) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x401, 0x90a3}) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000) write$yama_ptrace_scope(r1, &(0x7f00000000c0)='0\x00', 0x2) (async) write$yama_ptrace_scope(r1, &(0x7f00000000c0)='0\x00', 0x2) close_range(r1, r1, 0x2) close_range(r0, r0, 0x0) (async) close_range(r0, r0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000100)={0x9, 0x80000, r1}) (async) ioctl$DVB_DEMUX_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000100)={0x9, 0x80000, r1}) ioctl$XFS_IOC_SCRUB_METADATA(r2, 0xc040583c, &(0x7f0000000140)={0x14, 0x20, 0x1, 0x400, 0x9}) setrlimit(0x7, &(0x7f0000000180)={0xfffffffffffffff1, 0x279}) (async) setrlimit(0x7, &(0x7f0000000180)={0xfffffffffffffff1, 0x279}) r3 = syz_open_dev$dmmidi(&(0x7f00000001c0), 0x8001, 0x280001) ioctl$XFS_IOC_INUMBERS(r3, 0x80405880, &(0x7f0000000200)={{0xb25, 0x4, 0x1, 0x4ff7056f, 0x5}, [{0x8, 0x6, 0x6, 0x4}]}) setsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000280)=0x8, 0x4) getrlimit(0x0, &(0x7f00000002c0)) (async) getrlimit(0x0, &(0x7f00000002c0)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) futex(&(0x7f0000000300)=0x1, 0x80, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x1, 0x2) (async) futex(&(0x7f0000000300)=0x1, 0x80, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x1, 0x2) ioctl$XFS_IOC_FREE_EOFBLOCKS(0xffffffffffffffff, 0x8080583a, &(0x7f00000003c0)={0x6, 0xffffffff, 0x80000001, 0x1, 0xb43c, 0x0, 0x3}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000440)={0x1, [0x7fff]}, 0x6) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000480)={0x3, [0x3, 0x6, 0x2]}, &(0x7f00000004c0)=0xa) recvmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000500)=@tipc=@name, 0x80, &(0x7f0000000700)=[{&(0x7f0000000580)=""/22, 0x16}, {&(0x7f00000005c0)=""/100, 0x64}, {&(0x7f0000000640)=""/65, 0x41}, {&(0x7f00000006c0)=""/6, 0x6}], 0x4, &(0x7f0000000740)=""/29, 0x1d}, 0x120) r5 = accept$inet(r2, &(0x7f00000007c0)={0x2, 0x0, @remote}, &(0x7f0000000800)=0x10) bind$inet(r5, &(0x7f0000000840)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000880)={{0x3, @addr=0x8}, 0x8, 0x10, 0x5f}) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f00000008c0)) name_to_handle_at(r2, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)=@orangefs={0x14, 0x1, {"4e6dc5212a68103cfd3fbc9f651e76ee", 0xc39b}}, &(0x7f0000000980), 0x600) (async) name_to_handle_at(r2, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)=@orangefs={0x14, 0x1, {"4e6dc5212a68103cfd3fbc9f651e76ee", 0xc39b}}, &(0x7f0000000980), 0x600) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r6, 0x4018aee3, &(0x7f00000009c0)=@attr_pmu_init) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r4, 0xa594b000) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000a80)=@assoc_value={0x0, 0x8}, 0x8) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000a80)=@assoc_value={0x0, 0x8}, 0x8) 2.730072265s ago: executing program 3 (id=1454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r2 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0x29ac, 0x0, 0x1, 0x28a}, &(0x7f0000000100)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd=r2, 0xffffffffffffffff, 0xd0, 0x8007, 0xa, 0x1}) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000140)=""/38) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000800)=[{0x0}], 0x1) io_uring_enter(r2, 0x54, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c9, 0x12) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r8, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYRES8=r6, @ANYRES8=r9, @ANYBLOB="1c005a8018000380140005"], 0x38}}, 0x0) 2.649404611s ago: executing program 3 (id=1456): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r3 = socket$kcm(0x2, 0x3, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2008}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0x66, 0x2, 0x1, 0x0, 0x800}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x101}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x495f}]}]}, @NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1b}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7f}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x2}]}}], {0x14}}, 0x13c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0xffeb}], 0x1}, 0x0) lsm_get_self_attr(0x65, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.520380511s ago: executing program 3 (id=1458): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x4008}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000600)=@generic={&(0x7f0000000400)='./file0\x00', r0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@delqdisc={0x2c, 0x25, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xb}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008041) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) cachestat(r1, &(0x7f0000000040), &(0x7f000009de80), 0x0) recvmsg$inet_nvme(r1, &(0x7f0000000540)={&(0x7f00000006c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000240)=""/147, 0x93}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f0000000380)=""/74, 0x4a}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/63, 0x3f}], 0x7, &(0x7f0000000980)=""/4096, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) creat(&(0x7f0000000640)='./file0/file0\x00', 0x82) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f00000000c0)={0x400, 0x400, 0x10, 0x80, 0x0, 0x0, 0x20, 0x1, {0xc, 0x2}, {0x1, 0x2, 0x1}, {0xfff, 0x10000}, {0x1, 0x2, 0x1}, 0x1, 0x180, 0x1, 0x3, 0x1, 0x0, 0x0, 0x7fff, 0x5, 0xdb, 0x0, 0x6, 0x8, 0x100, 0x1, 0x7}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}}, 0x0) close(r2) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="20000000f100000001010000000000000017606df400"], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 2.400085042s ago: executing program 3 (id=1460): epoll_create1(0x80000) (async) r0 = epoll_create1(0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='cdg', 0x3) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='cdg', 0x3) fcntl$dupfd(r1, 0x0, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x911c8000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) shutdown(r1, 0x1) (async) shutdown(r1, 0x1) epoll_pwait2(r0, &(0x7f0000000040)=[{}], 0x1, &(0x7f00000000c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000100)={0x4000000c}) mkdirat(0xffffffffffffff9c, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') write$cgroup_subtree(r3, 0x0, 0x4c) (async) write$cgroup_subtree(r3, 0x0, 0x4c) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x54, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 2.186519034s ago: executing program 3 (id=1463): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a00030724bd7002f8dbdf250d"], 0x14}}, 0x4008800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) getpid() socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x30]}}}}]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0x42, 0x4, 0x428, 0xffffffff, 0x0, 0x0, 0x210, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xba7d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x9, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x7, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x2, 0x1, 0x4, 0x4], 0x1, 0x3}, {0x4, [0x1, 0x0, 0x6, 0x2, 0x7, 0x1], 0x0, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'ip6tnl0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x1c, "f30053790051bf3ffd3f72b279e4368029840d3facd44179be46d350310b"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) close(0x3) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r8, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r8, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r6, 0xa, 0x12) r9 = getpgid(r5) fcntl$setown(r6, 0x8, r9) tkill(r5, 0x13) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x28, r3, 0x1, 0x70bd27, 0x2ddfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x41}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x2000c119}, 0x40) 1.198849349s ago: executing program 5 (id=1477): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x70bd2d, 0x25dfdbfd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x81, 0xffffadf3, 0x1, 0x3, 0x10000}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000680)={0x2, 0x4}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff45, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@delqdisc={0x2c, 0x25, 0x7, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x5, 0xb}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x20c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008041) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r0, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4) 1.058355198s ago: executing program 5 (id=1478): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x161200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0xdd, 0x3ff, 0xb}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x15, 0xa, 0x101, 0x0, 0x0, {0x8, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1fd, 0x101c3c}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x8, 0x5, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0x6}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1, 0x3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) ioctl$BINDER_GET_EXTENDED_ERROR(r7, 0xc018620b, &(0x7f0000000080)) close_range(r2, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r8) 905.16443ms ago: executing program 5 (id=1480): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000080), &(0x7f0000000000)="15", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f00000003c0)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "59fda1c8b815e08c5770b613db43fccce186f4518b0a85dfc17745849f68f56fec5d3de4ea4a94ff6aaa88e4659a0fb979ce504666ecff76ea262b8b8019c4aa", 0x1d}, 0x48, 0xfffffffffffffffc) add_key$user(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000240)="5b50571d6d04e451b4092868bc9260d749aec08292bdbfadd6fc26bf087a3736bd45f32fbc62160b7f1e18234e1d7a0be43d80a1b1ba0efcafe9f675c441ec83e23bd0c36d9bb9e64bf705ffc35d3f2025fd50fca91d4524ec633ae8bc5b664877982d464f2c01a0d24247ade166cdd079087d3c538d58878700f0dc4976dd2913c0128334e13501a762e318", 0x8c, r2) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 904.714186ms ago: executing program 5 (id=1482): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x4, 0x20000) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000300)="1209b0ff0000", 0x0, 0x4, 0x4, 0x0, 0x0}) 830.748729ms ago: executing program 5 (id=1483): r0 = fsopen(&(0x7f00000003c0)='befs\x00', 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) 730.3351ms ago: executing program 5 (id=1486): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r1, 0x1000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) write(0xffffffffffffffff, &(0x7f0000000340)="1c0000005e", 0x5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}, {{&(0x7f0000000280)={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xbf}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000002c0)="b37bf5bed87fa49a56316ca09d6758cb756889966f58bb01c2ef2056a9ede26927fa8f7dc4385c40ff5cf9d454258fee9a3220cba3d6d4e95bdb0b60d3344338e8025b64c49b8e0f", 0x48}, {&(0x7f0000000600)="44c4e9f6c74ce5d5535a6ff3860ab4269ed0349da610b5a6a521d428746578acf3713c21381cd40e246d7ed1c76c18c17d9f3bfd9f3950693ee884d6f9208c629436077b9ade522c397bd94513ee2167cc426602ae53c2bb5128d21e63bd82956dc1d2b813caf183e33b0a97629d0e04884ac39f13c8a87159a93a7f4316de163515baa0a0771b04b9bc20d63b2e844fe4ef762ab52ec7d12b1043020811cec5bf11", 0xa2}, {&(0x7f0000000500)="71720ef248959d109e72b565cefe264a18f10e85eeda4823bb1971c734c99720554e7e98777dcf1618c603dc3c4e", 0x2e}], 0x3, &(0x7f0000000880)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @dstopts_2292={{0x78, 0x29, 0x4, {0x73, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x8001}, @enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x2, 0x8, 0x4, 0x9c3, [0x8, 0x957b, 0x7, 0x4]}}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x73, 0x0, '\x00', [@pad1]}}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x16, 0xa, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @private1}, @padn, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x18}, @calipso={0x7, 0x10, {0x2, 0x2, 0x3, 0xf663, [0xea]}}, @jumbo={0xc2, 0x4, 0x998c}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x33, 0x3, '\x00', [@hao={0xc9, 0x10, @empty}, @pad1, @enc_lim]}}}, @rthdr={{0x58, 0x29, 0x39, {0x32, 0x8, 0x1, 0x80, 0x0, [@remote, @mcast2, @private1, @ipv4={'\x00', '\xff\xff', @empty}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x12}]}}}], 0x1e8}}], 0x2, 0x810) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e8", 0x85}, {0x0}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fd", 0x2e}, {&(0x7f0000000700)="741f5b18fef5626f948b191986", 0xd}, {0x0}, {&(0x7f0000000ac0)}], 0x6, 0x4d9e, 0x8) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r9 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$FE_GET_PROPERTY(r9, 0x80106f53, &(0x7f0000000000)={0x13, &(0x7f0000000040)=[{0x23, '\x00', @st={0x4, [{0x1, @svalue=0x7}, {0x3, @uvalue=0x3}, {0x0, @svalue=0x5}, {0x2, @uvalue=0x1}]}, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000100), 0x4000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 680.265419ms ago: executing program 0 (id=1490): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000038fffd000000019078ac1e8f47e8b8c520f3a0310001ac1414aa030490780300fffe450000000000ffff002f0000"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c110027020000000000001d0c00"/28], 0x1c}}, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x48102, 0x0) write$FUSE_GETXATTR(r1, 0x0, 0x0) write$tun(r1, &(0x7f00000000c0)=ANY=[], 0x3e) 558.308855ms ago: executing program 0 (id=1492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000004000000080000000400000000000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000002000000000000000000000000018fa7849d49091810919accfa4ee4e3d38e353485feca6e1ca871415f3c9db17537a2fe4b0edf311a9151e53c697f845e3606e27bfdf73060cd6ed05fb566c91a66867ef80ff25170773f00c9a9537888cf68f12721ea1316b974fee9c6880ae09944"], 0x50) (async) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="08b4fffffede", &(0x7f0000002240)=""/4103, 0xfffffffe, 0x0, 0x0, 0x0}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000080)={0x1, 'veth1_to_batadv\x00', {}, 0x6}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x84880) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(generic-gcm-aesni)\x00'}, 0x58) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x5) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x50000}]}) (async) r13 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r13, 0x2282, &(0x7f0000000100)) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) listen(r11, 0x1) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r14) close_range(r12, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r6, &(0x7f0000000200), 0x0}, 0x20) 480.927106ms ago: executing program 0 (id=1493): r0 = socket$kcm(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000fc40facbe9408ae40e00", @ANYRES16=r2, @ANYBLOB="ff0600000000fcdbdf25520000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1000000, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91124fc60", 0x8c0}], 0x1}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) (async) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, r4, 0xee00) (async) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_SETMODE(r6, 0x5602, &(0x7f0000000d40)={0x0, 0x32, 0x3, 0xf02a, 0x9}) (async, rerun: 32) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (rerun: 32) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) (async, rerun: 64) setsockopt$sock_attach_bpf(r9, 0x1, 0x9, &(0x7f0000000800)=r8, 0x4) (async, rerun: 64) write$tcp_mem(r5, &(0x7f00000000c0)={0x40, 0x20, 0x3, 0x20, 0x6}, 0x48) (async) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000200)=[{0x17, '\x00', @buffer={"bc503e211b4c1198cd98b5f801b21380f62579814aae62d886a21f20d7646202", 0x20}, 0x7}]}) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@remote, @in=@rand_addr=0x64010101, 0x4e24, 0x0, 0x4e22, 0x5, 0x2, 0x80, 0x80, 0x87, 0x0, r3}, {0x80000000, 0x8, 0x5, 0x2, 0xe, 0xa2, 0x2}, {0x401, 0x7ff, 0x2, 0xb833}, 0x4, 0x6e6bb5, 0x1, 0x1, 0x2, 0x1}, {{@in6=@mcast2, 0x4d4, 0x2b}, 0xa, @in6=@mcast2, 0x0, 0x2, 0x3, 0x80, 0x1, 0x2, 0x1}}, 0xe8) 480.617347ms ago: executing program 0 (id=1495): mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000180)='./file0/file0/file0\x00', &(0x7f00000004c0), 0x8017, &(0x7f0000000000)={'trans=virtio,', {[{@cache_mmap}, {@version_u}, {@noextend}]}}) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000180)='./file0/file0/file0\x00', &(0x7f00000004c0), 0x8017, &(0x7f0000000000)={'trans=virtio,', {[{@cache_mmap}, {@version_u}, {@noextend}]}}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)) truncate(&(0x7f0000000200)='./file0/file0/file0\x00', 0x1000000) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@e={0xff, 0xc, 0x0, 0x0, @generic, 0x0, 0x0, 0x1}) rename(&(0x7f00000000c0)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00') (async) rename(&(0x7f00000000c0)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00') 410.810421ms ago: executing program 0 (id=1497): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x3889400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000380)={0x4308d580, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, {r0}}, 0x58) 409.913402ms ago: executing program 0 (id=1498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x4, &(0x7f0000000000)=[{0x1, 0x3, 0x9, 0x7a4}, {0x95, 0xf9, 0xd, 0x88f6}, {0x2, 0x6c, 0x6, 0xc}, {0x8, 0x7, 0xb8, 0x3}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x4, &(0x7f0000000000)=[{0x1, 0x3, 0x9, 0x7a4}, {0x95, 0xf9, 0xd, 0x88f6}, {0x2, 0x6c, 0x6, 0xc}, {0x8, 0x7, 0xb8, 0x3}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) ioctl$TCSETSW2(r3, 0x5425, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0xd, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 319.77341ms ago: executing program 2 (id=1499): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)={0x1c, 0x33, 0x20, 0x70bd25, 0x25dfdbfe, "", [@nested={0xc, 0x3ffc, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid=r0}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f00000000c0)={0x10, 0x0, 0x3}, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x981, 0x47, "0441920887e8d2b791f19dd026d76d7fcb3678", 0x4, 0x200}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x4, 0x860d, {}, {0xee01}, 0x3ff, 0x48000000}) syz_clone(0x2400000, &(0x7f0000000340)="18dd8db3a7bd37aeab66793d9102c82dde067c1cb5f1c2618c6b31c4b7fabe3b3eec56875643753075d04030d214d1dd28a8955598eee40da55525a5b2106564cccec6ab8798d1f4fe2b758f678a26317c757515070343a322b964af9816e0b378268631ddd68ee992e151f64c62603117efde704f8faf75914bfd092995563a1fa6bc4d447e4fd7b8a6b33c70306a7312ff8ee6338417ad8237c13bf2809e4f77925da80010a7ae33ff9065f96d3e63e6917b38d9a5", 0xb6, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000400)="b5f761f4306e47ffa9b2816e2062ebe00952da6fe8be8e1f5197e6822ddb274702945607f7e8de5f19422d4fed9fcc928340568467d5c5f742792f5a46f2b0b270caee427729fee73ecc305dd7c8508c4559f6141c9153d5512037b42abeac25c7d45199b1fcabfd8b6dbc50f7d51c7bf45142754c66ad765d6b70b4fddd4daa") sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14000000a0f5fadbdf250400fa800000000000002d2c2d583334dd34f7ea146b42323d2ab5d6deaa35d2508006830486111f8d95eee0f6bb9c4823a6ad8fa2ae76655f39b4f203756a62f483977be57c41f81326fc4eeba21c33f4a1f527978329872924153c3b521ef63e4f67733aa903a094e009da820aa0c457826a99478bef2bac1804fcef76a4be953406e742431c"], 0x14}], 0x1, 0x0, 0x0, 0x400c445}, 0x80c4) 315.571299ms ago: executing program 2 (id=1500): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000000180)) r1 = socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x48a33}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_IFALIASn={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 230.42303ms ago: executing program 2 (id=1501): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000190095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="190000000400135e5d6a632c42ae000000000000", @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="040000008200"], 0x50) 229.983148ms ago: executing program 2 (id=1502): open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x5dfe, 0x3, 'nq\x00', 0x1, 0x80005, 0x29}, 0x2c) dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000000c0)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x7, 0x77}, {@remote, 0x4e20, 0x4, 0x400003, 0x2}}, 0x44) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e26, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax=always') 149.966919ms ago: executing program 2 (id=1503): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x410000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/oss_mixer\x00', 0x141000, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000027c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x7, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x3, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x7a02, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x1, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x6, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1fd, 0xfffff060, 0x3, 0x469, 0x3, 0xfffffffc, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x8, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0xc, 0x100, 0xa4, 0x8, 0x9, 0x9, 0x1, 0x6, 0x1, 0xfffffff3, 0x0, 0x3, 0x3, 0x200, 0xffffffff, 0xdf, 0x7, 0x4, 0xf, 0xc, 0x6, 0x7fff, 0xc, 0x1000, 0x3e5, 0x8, 0x8318, 0x3, 0x6, 0x4, 0x8001, 0x8, 0x0, 0x7, 0x16301c8, 0x80, 0x1, 0x1c59, 0xfff, 0x8, 0x1, 0x0, 0xb, 0x9, 0x800, 0x3, 0x5, 0x3, 0x4, 0x7fff, 0x0, 0x90, 0xb0b, 0x2, 0x8, 0x4000, 0x6, 0x9, 0x9, 0x5, 0x0, 0x3, 0xb49, 0x4, 0x0, 0xb430, 0x3, 0x3, 0xd, 0x4000000, 0x12, 0xf, 0x280000, 0x7, 0x2, 0x6, 0x9, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0xfffffffd, 0x3, 0x5, 0x5, 0x9, 0x40, 0x4, 0x2, 0xffffff00, 0x4, 0x6, 0xa25, 0x40, 0x81, 0x8, 0x72243b5d, 0x7, 0xb, 0xfff, 0x6, 0x9, 0xc840, 0x5de9244a, 0x993, 0xfffffffa, 0x8, 0xfffffff9, 0x5, 0x7fffffff, 0x9, 0x3, 0xffffffff, 0x401, 0xfffffffa, 0xc, 0xd5a8, 0x8000, 0x2, 0x8000, 0x143b, 0x1, 0x0, 0x0, 0x0, 0x657, 0x8, 0x4, 0x8, 0x8000, 0xfffffffd, 0x6, 0x8, 0x1ff, 0x72, 0x1, 0x4, 0x26aa, 0x8, 0xaa6, 0x9, 0x8, 0xffffffff, 0x84, 0xc, 0x3, 0xb, 0xc4, 0xd, 0x3, 0xf7, 0x7, 0x8, 0x5, 0x5f42, 0x6, 0x5, 0x10, 0x3, 0x17, 0x7f, 0x2, 0x0, 0x8001, 0x13e, 0xffffffff, 0xfa86, 0xf, 0x100, 0xe7d6, 0xbc, 0x2, 0x3, 0x101, 0x0, 0x890, 0x3, 0x2, 0x6, 0xffffffff, 0xdc6, 0x7, 0x0, 0x1, 0x4, 0x6, 0x0, 0xffffffff, 0x0, 0xe3b, 0x5, 0x4, 0x1, 0x2c1, 0x1, 0x8137, 0x4, 0x1ff, 0x9, 0x0, 0xffff, 0x1ff, 0x1, 0x7, 0x4, 0x1, 0x7ff, 0x4, 0xffff, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x6, 0xb, 0x85b, 0x8, 0x80000001, 0x7f, 0x10, 0x1, 0xb, 0x5, 0x7, 0x7, 0x4, 0x401, 0x81, 0x401, 0x4, 0x8000000, 0x9, 0x3ff, 0x4, 0x8, 0x6, 0x5, 0x9, 0x1, 0x7, 0xbb05, 0x4, 0x101, 0xffffff2e, 0x1, 0x417, 0x80000000, 0x4, 0xb, 0x100, 0xfffffff5, 0x100, 0x874, 0xf7]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000019c0), r7) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001a00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="70a416d9850af168f6a4a5b76af8da89f55bb6ba4c3e04f082655e266d3c9f485907a8b0b44a44e39b5866ebf0be99164e8b4df16fb8c5291ec6007373cfd6c514fb7bbd71c28c669c85422c577dd1e002f3de90e9e639a5c4367fef3b8007", @ANYBLOB="0f0000000500370000e92840140986000000080003000000000000000000000009ccd6908cc4ff6251154bd3782e014b3a552d268ab0c492f3aae6c0ac586edc42d2eebe66fc4875d81ef5a088fde71036cfea7e2bff45147fcb470868f42a5db2a57bd04200c5f1d5aa34e761b09b23ee4649117f672a219ed31acb8dc721c7329a0efd472e37d9b1c8cba2a6314147f6ec6098f99037ac0f06d5421f7029513e53747a040fb9475b", @ANYRES32=r8, @ANYBLOB="743bd376b0dc2e35d26e8e1b4def78da7ac1934f1f6090e8224e13943b2816de620782cc603c0ee966c4a55d11021c25d30d1123030200ff4bfc39eb3cb1178382bbad42d17870663f2b0d328821459f93a45fb04f81b4067ee0430b079b6fd3910585a8341419b2d041f3e236076a8414e66f43fc6c92d88839bb9199b6de7541f640e7a60d3429351d8d6f6c5e64bcdc81b234106f460c4f4657a33ca7aa3acf1872a579f61bbc83ec60c180a658562b72bdad2833452b2bda85d58427714b"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000006c0)={'sit0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x8000, 0x80, 0x8, 0xdec, {{0x36, 0x4, 0x2, 0x39, 0xd8, 0x66, 0x0, 0x7, 0x2f, 0x0, @multicast2, @remote, {[@ssrr={0x89, 0x2b, 0x43, [@multicast2, @local, @rand_addr=0x64010102, @rand_addr=0x64010102, @empty, @multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty]}, @timestamp={0x44, 0x10, 0xe1, 0x0, 0xc, [0x1000, 0x4, 0x1]}, @noop, @timestamp={0x44, 0x24, 0xbb, 0x0, 0xc, [0x1, 0x80, 0x40, 0x8, 0xfffffff7, 0x3, 0xa, 0x0]}, @ssrr={0x89, 0x23, 0x7c, [@local, @local, @private=0xa010102, @multicast1, @multicast1, @broadcast, @empty, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x1c, 0x40, 0x3, 0x1, [{@rand_addr=0x64010102, 0x3ff}, {@remote, 0xf7fb}, {@remote}]}, @generic={0x7, 0x10, "9c0cafe8ba6b0a0844f5c9c879b3"}, @timestamp_prespec={0x44, 0x14, 0x48, 0x3, 0xc, [{@loopback, 0x8}, {@broadcast, 0x7f}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r1, 0x58, &(0x7f0000000700)}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000f80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10043050}, 0xc, &(0x7f0000000f40)={&(0x7f0000000840)={0x6d4, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x270, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x5, 0x5, 0x3}, {0x9, 0x84, 0x7, 0x6}, {0xa, 0x8, 0x6, 0xf}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xc1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6f5954d6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xbcd}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf78}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r5}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r11}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0xb, 0xfc, 0x3}, {0x1, 0xfb, 0x6, 0x1}]}}}]}}, {{0x8, 0x1, r13}, {0x80, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xa, 0xc, 0x6, 0xb3ad}, {0x98a1, 0x0, 0x2, 0x9}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r14}, {0x4}}]}, 0x6d4}, 0x1, 0x0, 0x0, 0xc0}, 0x400c4) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (async) getpid() ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f00000000c0)={0x695e, 0xffff}) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) 0s ago: executing program 2 (id=1504): syz_emit_ethernet(0x6c, &(0x7f00000001c0)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33c83", 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "e3e627", 0x0, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], ';I'}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101900, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) unshare(0x2c020400) r2 = msgget$private(0x0, 0x240) msgsnd(0x0, &(0x7f00000001c0)=ANY=[], 0x2000, 0x0) msgrcv(r2, &(0x7f0000000000), 0x8, 0xffffff7f00000000, 0x3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x50000}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="4000000010000003000000000000000800000010", @ANYBLOB="69b377c117556d3c051b1b9fca3c5f2714f0bedd890ddf381c3c586ae9b1458daac8a6a36afd7fd222bc75f55e91dc6adee827a37eb241719b64765aef59eb12a3a5c2c60f8eba8b4377e5b80a0a8815361479fbdf1b87d2453a3720c7070b0c092ebe0ab07b0c52ddad6a47175727011035c963c901db50361a356a720ca0fec8ac28196c80eb641822da741f5ffbd2d337faa79fa393f0922749b541a705498bb6e2edb8594eaa163d958d28040e522f38c292a89e6c088e29f72f641274601f2492f74854ed98057873c4d6e7778fd2700af99ac280f27ff54c46835df156", @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r1, 0x22, &(0x7f00000002c0)={&(0x7f0000000180)={&(0x7f00000000c0)="947794842e4daa307c0feb340293a0e751433e9bb83af52ed220ec22311c7cfbb7ab432ed4fa298892fc352cf7b70cf58c5701aebc3f80", 0x37, 0x0, 0x1ff, 0x2000000009}, 0x1}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r4) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a40)="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", 0x17a}, {&(0x7f0000000140)="ebe3a0e9", 0x4}, {&(0x7f0000000340)="112150007597b589affe2984b1a02b52ca03a9e8d7db38aa1be2fc3b4a2294a55d88476f8774d07fb887faec8ea119808240838dc2ddc3d6dbb7dace44155416d2eb4a03202d32fba532fe7169a63aa8491739b9f85e0f7bec55a5eb1ef4fb07a6adb63b2908b01b7285825341a338937f698008103e993c4809ab6b6b1627bf028498a160b7c3d80fa2b1e46611690c7afb2d477fc8c68eb1679b0d9c9b07b2464f856fe852658a0b333aea4f2128a96e8e351496364fea6596469cd1ba168ed9f6660744e7902479d8aa5b7cbd094fbfc1f1ad", 0xd4}, {&(0x7f0000000440)="92a4b541549502b45921a6995abd738174c79da14db8f6400f3046bd996aa2a519231c2819ee8659773f032a4055aaeab8d88af00e1b049fe1cd48d938f6503239ab7a10f63bc649d871112097ae799bbefe635a8e5e92da7c4eea3b612212064015de405823a900ed1c8ad370fe30f355a5aa2755ec", 0x76}, {&(0x7f00000007c0)="616d5158eb3ff550db135b4cf6e3c37e525941af520dc26a79afaebc3d558ced63a051b9d1f97095a5187cc284f7913cbb41f696bbf69a8a787c9c59dfb2df3345a563fdb97f09164aa9a556f0ed1d592c27850651fdf86997e67ad3d250e75992992f4207ccf66a3cfc6756a379f790814e04e3fc2275007cc94b46c8b062dd870849c64ed0ea8adf92358639", 0x8d}], 0x5, &(0x7f0000000300)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)=""/81, 0x51}], 0x1}, 0x0) kernel console output (not intermixed with test programs): __kernel_text_address+0xd/0x30 [ 109.480408][ T8243] ? unwind_get_return_address+0x59/0xa0 [ 109.480438][ T8243] ? mark_held_locks+0x40/0x70 [ 109.480463][ T8243] ? irqentry_exit+0x180/0x670 [ 109.480481][ T8243] ? lockdep_hardirqs_on+0x78/0x100 [ 109.480497][ T8243] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.480523][ T8243] ? policy_nodemask+0xed/0x4f0 [ 109.480554][ T8243] alloc_pages_mpol+0x1fb/0x550 [ 109.480583][ T8243] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 109.480618][ T8243] folio_alloc_mpol_noprof+0x36/0x340 [ 109.480641][ T8243] vma_alloc_folio_noprof+0xed/0x1d0 [ 109.480662][ T8243] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 109.480690][ T8243] do_anonymous_page+0xb3a/0x1fb0 [ 109.480751][ T8243] __handle_mm_fault+0x1d42/0x2b60 [ 109.480779][ T8243] ? mt_find+0x45e/0x8e0 [ 109.480802][ T8243] ? __pfx___handle_mm_fault+0x10/0x10 [ 109.480823][ T8243] ? __pfx_mt_find+0x10/0x10 [ 109.480855][ T8243] ? find_vma+0xbf/0x140 [ 109.480879][ T8243] ? __pfx_find_vma+0x10/0x10 [ 109.480907][ T8243] handle_mm_fault+0x36d/0xa20 [ 109.480934][ T8243] do_user_addr_fault+0x74c/0x12f0 [ 109.480961][ T8243] exc_page_fault+0x6f/0xd0 [ 109.480979][ T8243] asm_exc_page_fault+0x26/0x30 [ 109.480997][ T8243] RIP: 0010:_copy_to_iter+0x4c0/0x1720 [ 109.481023][ T8243] Code: 00 e8 b4 3a 15 fd 48 8b 74 24 18 48 8b 44 24 08 4c 8d 24 06 89 de 4c 89 e7 e8 0c bd 81 fd 0f 01 cb 48 89 d9 4c 89 f7 4c 89 e6 a4 0f 1f 00 49 89 cc 0f 01 ca 48 89 d8 48 29 c8 48 01 44 24 08 [ 109.481039][ T8243] RSP: 0018:ffffc9000cae79f8 EFLAGS: 00050246 [ 109.481055][ T8243] RAX: 0000000000000001 RBX: 0000000000000783 RCX: 00000000000003b1 [ 109.481065][ T8243] RDX: 0000000000000001 RSI: ffff88802c72a3d2 RDI: 0000200000002000 [ 109.481075][ T8243] RBP: ffffc9000cae7c00 R08: 0000000000000000 R09: ffffed10058e54f0 [ 109.481085][ T8243] R10: ffff88802c72a782 R11: 0000000000000000 R12: ffff88802c72a000 [ 109.481096][ T8243] R13: 000000000000002e R14: 0000200000001c2e R15: 0000000000000783 [ 109.481120][ T8243] ? _copy_to_iter+0x4b4/0x1720 [ 109.481150][ T8243] ? __pfx__copy_to_iter+0x10/0x10 [ 109.481172][ T8243] ? m_stop+0x39c/0x500 [ 109.481211][ T8243] ? m_stop+0x333/0x500 [ 109.481238][ T8243] seq_read_iter+0xdab/0x1270 [ 109.481277][ T8243] seq_read+0x33b/0x4c0 [ 109.481305][ T8243] ? __pfx_seq_read+0x10/0x10 [ 109.481337][ T8243] ? avc_policy_seqno+0x9/0x20 [ 109.481360][ T8243] ? selinux_file_permission+0x8f/0x6d0 [ 109.481387][ T8243] ? rw_verify_area+0xce/0x6d0 [ 109.481412][ T8243] ? __pfx_seq_read+0x10/0x10 [ 109.481438][ T8243] vfs_read+0x1e4/0xb30 [ 109.481468][ T8243] ? __pfx_vfs_read+0x10/0x10 [ 109.481491][ T8243] ? find_held_lock+0x2b/0x80 [ 109.481512][ T8243] ? __fget_files+0x215/0x3d0 [ 109.481529][ T8243] ? __fget_files+0x215/0x3d0 [ 109.481551][ T8243] ? __fget_files+0x21f/0x3d0 [ 109.481575][ T8243] __x64_sys_pread64+0x1eb/0x250 [ 109.481603][ T8243] ? __pfx___x64_sys_pread64+0x10/0x10 [ 109.481634][ T8243] do_syscall_64+0x106/0xf80 [ 109.481650][ T8243] ? clear_bhb_loop+0x40/0x90 [ 109.481672][ T8243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.481689][ T8243] RIP: 0033:0x7fcbfa99c799 [ 109.481703][ T8243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.481719][ T8243] RSP: 002b:00007fcbfb7c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 109.481735][ T8243] RAX: ffffffffffffffda RBX: 00007fcbfac15fa0 RCX: 00007fcbfa99c799 [ 109.481745][ T8243] RDX: 000000000000100c RSI: 0000200000001c00 RDI: 0000000000000003 [ 109.481756][ T8243] RBP: 00007fcbfb7c4090 R08: 0000000000000000 R09: 0000000000000000 [ 109.481766][ T8243] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 109.481776][ T8243] R13: 00007fcbfac16038 R14: 00007fcbfac15fa0 R15: 00007ffe6e7aab28 [ 109.481802][ T8243] [ 109.500057][ T24] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 109.509089][ T8237] __nla_validate_parse: 3 callbacks suppressed [ 109.509105][ T8237] netlink: 32 bytes leftover after parsing attributes in process `syz.0.678'. [ 109.513043][ T24] appleir 0003:05AC:8243.0007: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 109.728622][ T5932] usb 8-1: USB disconnect, device number 3 [ 109.746405][ T8249] fido_id[8249]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/8-1/report_descriptor': No such file or directory [ 109.805398][ T8252] netlink: 44 bytes leftover after parsing attributes in process `syz.0.682'. [ 110.078621][ T8268] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 110.085103][ T8268] romfs: unable to set blocksize [ 110.085103][ T8268] [ 110.158718][ T5966] usb 7-1: USB disconnect, device number 7 [ 110.267706][ T8283] FAULT_INJECTION: forcing a failure. [ 110.267706][ T8283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.299453][ T8283] CPU: 0 UID: 0 PID: 8283 Comm: syz.3.689 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.299481][ T8283] Tainted: [L]=SOFTLOCKUP [ 110.299488][ T8283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.299497][ T8283] Call Trace: [ 110.299511][ T8283] [ 110.299519][ T8283] dump_stack_lvl+0x100/0x190 [ 110.299561][ T8283] should_fail_ex.cold+0x5/0xa [ 110.299584][ T8283] _copy_to_user+0x32/0xd0 [ 110.299623][ T8283] simple_read_from_buffer+0xcb/0x170 [ 110.299655][ T8283] proc_fail_nth_read+0x1af/0x230 [ 110.299687][ T8283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.299714][ T8283] ? rw_verify_area+0xce/0x6d0 [ 110.299739][ T8283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.299763][ T8283] vfs_read+0x1e4/0xb30 [ 110.299791][ T8283] ? __pfx_vfs_read+0x10/0x10 [ 110.299817][ T8283] ? __fget_files+0x215/0x3d0 [ 110.299840][ T8283] ? __fget_files+0x21f/0x3d0 [ 110.299866][ T8283] ksys_read+0x12a/0x250 [ 110.299891][ T8283] ? __pfx_ksys_read+0x10/0x10 [ 110.299924][ T8283] do_syscall_64+0x106/0xf80 [ 110.299952][ T8283] ? clear_bhb_loop+0x40/0x90 [ 110.299974][ T8283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.299992][ T8283] RIP: 0033:0x7fe77215cfce [ 110.300007][ T8283] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 110.300024][ T8283] RSP: 002b:00007fe772fbffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.300041][ T8283] RAX: ffffffffffffffda RBX: 00007fe772fc06c0 RCX: 00007fe77215cfce [ 110.300053][ T8283] RDX: 000000000000000f RSI: 00007fe772fc00a0 RDI: 0000000000000004 [ 110.300063][ T8283] RBP: 00007fe772fc0090 R08: 0000000000000000 R09: 0000000000000000 [ 110.300074][ T8283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.300084][ T8283] R13: 00007fe772416038 R14: 00007fe772415fa0 R15: 00007ffd1ccda0e8 [ 110.300109][ T8283] [ 110.451365][ T8293] netlink: 'syz.2.691': attribute type 3 has an invalid length. [ 110.623911][ T40] kauditd_printk_skb: 799 callbacks suppressed [ 110.623929][ T40] audit: type=1400 audit(1772619291.411:22356): avc: denied { create } for pid=8307 comm="syz.0.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.637224][ T40] audit: type=1400 audit(1772619291.411:22357): avc: denied { bind } for pid=8307 comm="syz.0.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.645383][ T40] audit: type=1400 audit(1772619291.411:22358): avc: denied { create } for pid=8307 comm="syz.0.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.652934][ T40] audit: type=1400 audit(1772619291.411:22359): avc: denied { setopt } for pid=8307 comm="syz.0.698" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.660569][ T40] audit: type=1400 audit(1772619291.411:22360): avc: denied { setopt } for pid=8307 comm="syz.0.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.667128][ T40] audit: type=1400 audit(1772619291.411:22361): avc: denied { accept } for pid=8307 comm="syz.0.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.674732][ T40] audit: type=1400 audit(1772619291.411:22362): avc: denied { write } for pid=8307 comm="syz.0.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.675143][ T8316] macvlan2: entered promiscuous mode [ 110.681949][ T40] audit: type=1400 audit(1772619291.411:22363): avc: denied { read } for pid=8307 comm="syz.0.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.690655][ T40] audit: type=1400 audit(1772619291.451:22364): avc: denied { read write } for pid=8307 comm="syz.0.698" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 110.698679][ T40] audit: type=1400 audit(1772619291.451:22365): avc: denied { open } for pid=8307 comm="syz.0.698" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 110.815353][ T8320] netlink: 32 bytes leftover after parsing attributes in process `syz.0.699'. [ 110.820311][ T8320] netlink: 32 bytes leftover after parsing attributes in process `syz.0.699'. [ 110.954608][ T8326] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 110.957630][ T8326] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.963235][ T8326] vhci_hcd vhci_hcd.0: Device attached [ 110.979725][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 111.021882][ T8327] vhci_hcd: connection closed [ 111.022682][ T60] vhci_hcd vhci_hcd.0: stop threads [ 111.026077][ T60] vhci_hcd vhci_hcd.0: release socket [ 111.027945][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 111.129528][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 111.133068][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 111.136438][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.140076][ T24] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 111.143312][ T24] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 111.146657][ T24] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 111.153997][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.157989][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.161726][ T24] usb 8-1: Product: syz [ 111.163652][ T24] usb 8-1: Manufacturer: syz [ 111.165738][ T24] usb 8-1: SerialNumber: syz [ 111.381364][ T24] cdc_ncm 8-1:1.0: bind() failure [ 111.387720][ T24] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 111.391001][ T24] cdc_ncm 8-1:1.1: bind() failure [ 111.395604][ T24] usb 8-1: USB disconnect, device number 4 [ 113.530405][ T8300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.587321][ T8341] i2c i2c-1: Invalid block write size 34 [ 113.593154][ T8341] netlink: 'syz.1.706': attribute type 12 has an invalid length. [ 113.595238][ T8339] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 113.597348][ T8342] netlink: 'syz.2.705': attribute type 11 has an invalid length. [ 113.605412][ T8342] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.705'. [ 113.606257][ T8344] sit0: entered promiscuous mode [ 113.616936][ T8344] netlink: 'syz.3.707': attribute type 1 has an invalid length. [ 113.621325][ T8344] netlink: 1 bytes leftover after parsing attributes in process `syz.3.707'. [ 113.724853][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 113.749271][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.710'. [ 113.752588][ T5934] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 113.857344][ T8378] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 1, id = 0 [ 113.859019][ T8373] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 113.862650][ T8374] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 113.870327][ T8373] overlayfs: failed to set uuid (212/file0, err=-13); falling back to uuid=null. [ 114.038805][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 114.042725][ T8393] veth0_macvtap: left promiscuous mode [ 114.110136][ T8391] can0: slcan on ttynull. [ 114.297281][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 114.427537][ T8440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.442888][ T8440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.460406][ T8440] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 114.465106][ T8440] bond0 (unregistering): Released all slaves [ 114.504851][ T8454] overlayfs: failed lookup in lower (newroot/173, name='file1', err=-40): overlapping layers [ 114.620923][ T8465] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 114.636156][ T8465] kvm: pic: non byte read [ 114.643726][ T8465] kvm: pic: non byte read [ 114.647566][ T8465] kvm: pic: non byte read [ 114.659499][ T8465] kvm: pic: non byte read [ 114.775778][ T8484] netlink: 'syz.1.746': attribute type 3 has an invalid length. [ 114.941907][ T8497] __nla_validate_parse: 11 callbacks suppressed [ 114.941926][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'. [ 114.974095][ T8505] netlink: 32 bytes leftover after parsing attributes in process `syz.2.748'. [ 115.089294][ T8519] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 115.094633][ T8520] veth0: entered promiscuous mode [ 115.100343][ T8517] veth0: left promiscuous mode [ 115.170185][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 115.211825][ T8525] syzkaller0: entered promiscuous mode [ 115.213734][ T8525] syzkaller0: entered allmulticast mode [ 115.587285][ T8560] Cannot find del_set index 0 as target [ 115.636144][ T40] kauditd_printk_skb: 916 callbacks suppressed [ 115.636161][ T40] audit: type=1400 audit(1772619296.421:23282): avc: denied { accept } for pid=8550 comm="syz.0.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.657002][ T40] audit: type=1400 audit(1772619296.441:23283): avc: denied { accept } for pid=8550 comm="syz.0.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.666655][ T40] audit: type=1400 audit(1772619296.441:23284): avc: denied { prog_load } for pid=8562 comm="syz.3.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 115.675101][ T40] audit: type=1400 audit(1772619296.441:23285): avc: denied { bpf } for pid=8562 comm="syz.3.769" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 115.683265][ T40] audit: type=1400 audit(1772619296.441:23286): avc: denied { perfmon } for pid=8562 comm="syz.3.769" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 115.691137][ T40] audit: type=1400 audit(1772619296.451:23288): avc: denied { prog_run } for pid=8562 comm="syz.3.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 115.698919][ T40] audit: type=1400 audit(1772619296.441:23287): avc: denied { accept } for pid=8550 comm="syz.0.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.708560][ T40] audit: type=1400 audit(1772619296.461:23289): avc: denied { accept } for pid=8550 comm="syz.0.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.715958][ T40] audit: type=1400 audit(1772619296.461:23290): avc: denied { read } for pid=8562 comm="syz.3.769" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 115.725874][ T40] audit: type=1400 audit(1772619296.461:23291): avc: denied { open } for pid=8562 comm="syz.3.769" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 115.880088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.883469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.886960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.890038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.893723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.897341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.901546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.908509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.917582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.921853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.972765][ T8572] xt_hashlimit: invalid rate [ 116.084431][ T5940] Bluetooth: hci4: sending frame failed (-49) [ 116.086920][ T5934] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 116.729490][ T54] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 116.889478][ T54] usb 8-1: Using ep0 maxpacket: 8 [ 116.893915][ T54] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 116.897478][ T54] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.902199][ T54] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.907775][ T54] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.912412][ T54] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.917959][ T54] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.922736][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.136462][ T54] usb 8-1: usb_control_msg returned -32 [ 117.138949][ T54] usbtmc 8-1:16.0: can't read capabilities [ 117.495400][ T8590] usbtmc 8-1:16.0: INITIATE_CLEAR returned 0 [ 117.502208][ T8590] NILFS (nbd3): device size too small [ 117.697759][ T6848] usb 8-1: USB disconnect, device number 5 [ 118.049179][ T8515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.103174][ T8592] netlink: 'syz.0.778': attribute type 1 has an invalid length. [ 118.106385][ T8592] netlink: 'syz.0.778': attribute type 2 has an invalid length. [ 118.109672][ T8592] netlink: 'syz.0.778': attribute type 1 has an invalid length. [ 118.112940][ T8592] netlink: 'syz.0.778': attribute type 3 has an invalid length. [ 118.127358][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.778'. [ 118.171631][ T8597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.780'. [ 118.245004][ T8605] netlink: 32 bytes leftover after parsing attributes in process `syz.3.782'. [ 118.253501][ T8606] netlink: 32 bytes leftover after parsing attributes in process `syz.3.782'. [ 118.292015][ T5934] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 118.453829][ T10] hid-generic 0362:07FF:7FFFFFFF.0008: item fetching failed at offset 0/2 [ 118.460452][ T10] hid-generic 0362:07FF:7FFFFFFF.0008: probe with driver hid-generic failed with error -22 [ 118.542081][ T8617] QAT: failed to copy from user cfg_data. [ 118.547162][ T8617] 9pnet_fd: p9_fd_create_unix (8617): problem connecting socket: ./file0: -111 [ 119.383848][ T8672] block nbd0: NBD_DISCONNECT [ 119.511111][ T8685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.805'. [ 119.515036][ T8685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.805'. [ 120.639541][ T40] kauditd_printk_skb: 546 callbacks suppressed [ 120.639553][ T40] audit: type=1400 audit(1772619301.421:23838): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.651067][ T40] audit: type=1400 audit(1772619301.421:23839): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.659854][ T40] audit: type=1400 audit(1772619301.421:23840): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.670154][ T40] audit: type=1400 audit(1772619301.441:23841): avc: denied { open } for pid=8722 comm="syz.2.816" path="/dev/ptyq9" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 120.677857][ T40] audit: type=1400 audit(1772619301.441:23842): avc: denied { ioctl } for pid=8722 comm="syz.2.816" path="/dev/ptyq9" dev="devtmpfs" ino=136 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 120.688704][ T40] audit: type=1400 audit(1772619301.451:23843): avc: denied { create } for pid=8727 comm="syz.3.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 120.695901][ T40] audit: type=1400 audit(1772619301.461:23844): avc: denied { write } for pid=8727 comm="syz.3.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 120.721469][ T40] audit: type=1400 audit(1772619301.461:23845): avc: denied { read } for pid=8727 comm="syz.3.817" dev="nsfs" ino=4026533325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 120.733642][ T40] audit: type=1400 audit(1772619301.461:23846): avc: denied { open } for pid=8727 comm="syz.3.817" path="net:[4026533325]" dev="nsfs" ino=4026533325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 120.749571][ T40] audit: type=1400 audit(1772619301.461:23847): avc: denied { create } for pid=8727 comm="syz.3.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.871514][ T8738] : renamed from vlan0 (while UP) [ 120.893511][ T8735] netlink: 4532 bytes leftover after parsing attributes in process `syz.0.818'. [ 121.023607][ T8743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.026245][ T8743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.038417][ T8743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.043408][ T8743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.191550][ T34] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 121.339541][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 121.344944][ T34] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 121.349138][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.358859][ T34] usb 7-1: config 0 descriptor?? [ 121.370240][ T34] as10x_usb: device has been detected [ 121.373016][ T34] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 121.387138][ T34] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 121.414720][ T34] as10x_usb: error during firmware upload part1 [ 121.417622][ T34] Registered device nBox DVB-T Dongle [ 121.573686][ T8738] loop1: detected capacity change from 0 to 4 [ 121.582879][ T8738] Dev loop1: unable to read RDB block 4 [ 121.585339][ T8738] loop1: unable to read partition table [ 121.587885][ T8738] loop1: partition table beyond EOD, truncated [ 121.593400][ T8738] loop_reread_partitions: partition scan of loop1 (被x ) failed (rc=-5) [ 121.602889][ T34] usb 7-1: USB disconnect, device number 8 [ 121.618615][ T34] Unregistered device nBox DVB-T Dongle [ 121.624905][ T34] as10x_usb: device has been disconnected [ 122.197886][ T8790] program syz.0.833 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.206564][ T8790] qnx6: unable to read the first superblock [ 122.208963][ T8790] qnx6: unable to read the first superblock [ 122.213922][ T8790] qnx6: unable to read the first superblock [ 122.220008][ T8790] netlink: 52 bytes leftover after parsing attributes in process `syz.0.833'. [ 122.232135][ T8790] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.243362][ T8790] netlink: 76 bytes leftover after parsing attributes in process `syz.0.833'. [ 122.248186][ T8790] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.251046][ T8790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.255968][ T8790] netlink: 52 bytes leftover after parsing attributes in process `syz.0.833'. [ 122.259256][ T8790] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.571537][ T8809] fuse: Unknown parameter '' [ 122.630936][ T54] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 122.780518][ T54] usb 7-1: Using ep0 maxpacket: 8 [ 122.785573][ T54] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 122.789548][ T54] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 122.794161][ T54] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 122.798468][ T54] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 122.805110][ T54] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.809606][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.818869][ T54] usbtmc 7-1:16.0: bulk endpoints not found [ 122.867075][ T8826] program syz.3.845 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.917880][ T8828] netlink: 32 bytes leftover after parsing attributes in process `syz.0.844'. [ 123.018903][ T8798] program syz.2.835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.024647][ T8798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.028240][ T8798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.036876][ T8834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.847'. [ 123.342996][ T8843] openvswitch: netlink: IP tunnel TTL not specified. [ 123.394065][ T54] usb 7-1: USB disconnect, device number 9 [ 123.420727][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.852'. [ 123.424138][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'. [ 123.428179][ T8848] netlink: 'syz.3.852': attribute type 15 has an invalid length. [ 123.470742][ T8854] netlink: 92 bytes leftover after parsing attributes in process `syz.3.855'. [ 123.645969][ T8874] misc userio: No port type given on /dev/userio [ 123.648783][ T8873] misc userio: Invalid payload size [ 123.674872][ T8877] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.860'. [ 123.677853][ T8877] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 123.963629][ T8915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.073191][ T8928] 5gQ[: renamed from lo (while UP) [ 124.162094][ T8940] netlink: 'syz.3.877': attribute type 13 has an invalid length. [ 124.166757][ T8943] netlink: 'syz.3.877': attribute type 13 has an invalid length. [ 124.177644][ T8940] gretap0: refused to change device tx_queue_len [ 124.180472][ T8940] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 124.185796][ T8943] gretap0: refused to change device tx_queue_len [ 124.188932][ T8943] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 124.196835][ T8946] CIFS mount error: No usable UNC path provided in device string! [ 124.196835][ T8946] [ 124.196850][ T8946] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 124.235979][ T60] Bluetooth: hci4: Frame reassembly failed (-84) [ 125.657654][ T40] kauditd_printk_skb: 776 callbacks suppressed [ 125.657667][ T40] audit: type=1400 audit(1772619306.441:24624): avc: denied { write } for pid=8966 comm="syz.0.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.682729][ T40] audit: type=1400 audit(1772619306.471:24625): avc: denied { read write } for pid=5926 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.691683][ T40] audit: type=1400 audit(1772619306.471:24626): avc: denied { open } for pid=5926 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.700746][ T40] audit: type=1400 audit(1772619306.471:24627): avc: denied { ioctl } for pid=5926 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.230593][ T5934] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 126.262521][ T40] audit: type=1400 audit(1772619307.051:24628): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.275000][ T40] audit: type=1400 audit(1772619307.061:24629): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.287726][ T40] audit: type=1400 audit(1772619307.061:24630): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.067494][ T40] audit: type=1400 audit(1772619307.851:24631): avc: denied { search } for pid=8978 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.075043][ T40] audit: type=1400 audit(1772619307.851:24632): avc: denied { search } for pid=8978 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.083039][ T40] audit: type=1400 audit(1772619307.851:24633): avc: denied { search } for pid=8978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.293506][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 133.293527][ T40] audit: type=1400 audit(1772619314.081:24692): avc: denied { execute } for pid=8991 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 133.308399][ T40] audit: type=1400 audit(1772619314.081:24693): avc: denied { execute_no_trans } for pid=8991 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 133.330052][ T40] audit: type=1400 audit(1772619314.121:24694): avc: denied { execmem } for pid=8991 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 137.993564][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.995800][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.759447][ T40] audit: type=1400 audit(1772619319.541:24695): avc: denied { prog_load } for pid=8992 comm="syz.0.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 138.767967][ T40] audit: type=1400 audit(1772619319.541:24696): avc: denied { bpf } for pid=8992 comm="syz.0.887" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.777530][ T40] audit: type=1400 audit(1772619319.541:24697): avc: denied { perfmon } for pid=8992 comm="syz.0.887" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.787160][ T40] audit: type=1400 audit(1772619319.541:24698): avc: denied { prog_load } for pid=8992 comm="syz.0.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 138.794942][ T40] audit: type=1400 audit(1772619319.541:24699): avc: denied { bpf } for pid=8992 comm="syz.0.887" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.807801][ T40] audit: type=1400 audit(1772619319.541:24700): avc: denied { prog_run } for pid=8992 comm="syz.0.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 138.815692][ T5940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 138.820624][ T5940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 138.822205][ T9005] __nla_validate_parse: 3 callbacks suppressed [ 138.822222][ T9005] netlink: 32 bytes leftover after parsing attributes in process `syz.3.891'. [ 138.824655][ T5940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 138.830012][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.891'. [ 138.831342][ T9005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9005 comm=syz.3.891 [ 138.834168][ T40] audit: type=1400 audit(1772619319.571:24701): avc: denied { create } for pid=8998 comm="syz.3.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.851242][ T40] audit: type=1400 audit(1772619319.571:24702): avc: denied { write } for pid=8998 comm="syz.3.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.863408][ T40] audit: type=1400 audit(1772619319.571:24703): avc: denied { read } for pid=8998 comm="syz.3.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.871188][ T5940] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 138.874231][ T40] audit: type=1400 audit(1772619319.581:24704): avc: denied { create } for pid=9001 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.886784][ T5940] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 138.949324][ T9008] netlink: 'syz.0.892': attribute type 10 has an invalid length. [ 138.972393][ T9008] veth0_vlan: entered allmulticast mode [ 138.979849][ T9008] veth0_vlan: left promiscuous mode [ 138.986264][ T9008] veth0_vlan: entered promiscuous mode [ 138.990272][ T9008] team0: Device veth0_vlan failed to register rx_handler [ 139.066580][ T9028] syzkaller0: entered promiscuous mode [ 139.068797][ T9028] syzkaller0: entered allmulticast mode [ 139.101810][ T9001] chnl_net:caif_netlink_parms(): no params data found [ 139.185672][ T9040] geneve3: entered promiscuous mode [ 139.187573][ T9040] geneve3: entered allmulticast mode [ 139.194472][ T9001] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.199617][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.202505][ T9001] bridge_slave_0: entered allmulticast mode [ 139.205384][ T9001] bridge_slave_0: entered promiscuous mode [ 139.210097][ T9001] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.212773][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.215542][ T9001] bridge_slave_1: entered allmulticast mode [ 139.218912][ T9001] bridge_slave_1: entered promiscuous mode [ 139.222435][ T1143] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 139.233462][ T1143] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 139.236623][ T1143] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 139.245326][ T1143] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 139.252713][ T9001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.257524][ T9001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.260493][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 139.273811][ T9001] team0: Port device team_slave_0 added [ 139.277467][ T9001] team0: Port device team_slave_1 added [ 139.293821][ T9001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.296249][ T9001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.305436][ T9001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.313427][ T9044] vlan2: entered promiscuous mode [ 139.315320][ T9044] vlan2: entered allmulticast mode [ 139.317174][ T9044] hsr_slave_1: entered allmulticast mode [ 139.326933][ T9001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.333320][ T9001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.343168][ T9001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.369542][ T5966] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 139.392212][ T9001] hsr_slave_0: entered promiscuous mode [ 139.394556][ T9001] hsr_slave_1: entered promiscuous mode [ 139.397044][ T9001] debugfs: 'hsr0' already exists in 'hsr' [ 139.399043][ T9001] Cannot create hsr debugfs directory [ 139.409425][ T9051] netlink: 'syz.2.903': attribute type 4 has an invalid length. [ 139.430964][ T9051] netlink: 'syz.2.903': attribute type 4 has an invalid length. [ 139.532459][ T5966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.537022][ T5966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.542466][ T5966] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.549581][ T5966] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.553527][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.559659][ T5966] usb 5-1: config 0 descriptor?? [ 139.568078][ T9001] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 139.585719][ T9001] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 139.593305][ T9001] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.600257][ T9001] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 139.602442][ T9072] netlink: 'syz.3.909': attribute type 9 has an invalid length. [ 139.654020][ T9001] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.656481][ T9001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.659028][ T9001] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.661677][ T9001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.667339][ T5934] Bluetooth: hci3: unexpected event for opcode 0x200f [ 139.703687][ T9001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.711782][ T95] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.715569][ T95] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.718996][ T9080] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 139.724757][ T9080] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 139.733089][ T9001] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.740529][ T195] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.743928][ T195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.756048][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.759430][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.931672][ T9001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.971029][ T5966] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 139.974570][ T5966] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 139.978118][ T5966] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 139.983097][ T5966] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 139.986635][ T5966] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 139.993425][ T5966] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 139.997262][ T5966] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 140.001927][ T5966] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 140.004614][ T5966] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 140.007092][ T5966] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 140.027083][ T5966] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 140.158116][ T9001] veth0_vlan: entered promiscuous mode [ 140.171084][ T9032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.174132][ T9001] veth1_vlan: entered promiscuous mode [ 140.179722][ T9031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.182777][ T9031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.185867][ T9032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.205342][ T9001] veth0_macvtap: entered promiscuous mode [ 140.211972][ T9001] veth1_macvtap: entered promiscuous mode [ 140.224521][ T9001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.234434][ T9001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.245339][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.249521][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.254184][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.258127][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.312829][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.316210][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.340206][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.344971][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.467564][ T9032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.477821][ T9031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.492403][ T9032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.492561][ T9031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.501985][ T9138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.919'. [ 140.509147][ T5932] usb 5-1: USB disconnect, device number 7 [ 140.542572][ T9138] PKCS7: Unknown OID: [4] 0.38.35.36.951720.33.17 [ 140.545683][ T9138] PKCS7: Only support pkcs7_signedData type [ 140.557183][ T9138] pim6reg: entered allmulticast mode [ 140.569267][ T9138] pim6reg: left allmulticast mode [ 140.665991][ T9150] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 140.727747][ T9156] Failed to get privilege flags for destination (handle=0x2:0x9) [ 140.738970][ T9158] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 140.896401][ T9162] netlink: 'syz.3.927': attribute type 12 has an invalid length. [ 140.899005][ T9162] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.927'. [ 140.934872][ T9164] binder_alloc: 9163: binder_alloc_buf, no vma [ 140.949922][ T5934] Bluetooth: hci4: command tx timeout [ 140.985631][ T9166] netlink: 76 bytes leftover after parsing attributes in process `syz.3.929'. [ 141.248613][ T9177] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.934'. [ 141.252135][ T9177] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 141.442325][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 141.681388][ T9195] netlink: 16 bytes leftover after parsing attributes in process `syz.3.941'. [ 142.416484][ T9224] pimreg: entered allmulticast mode [ 142.471652][ T9224] pimreg: left allmulticast mode [ 142.539919][ T9229] macvlan0: entered allmulticast mode [ 142.545516][ T9229] pim6reg: entered allmulticast mode [ 142.553609][ T9229] misc userio: Invalid payload size [ 142.733226][ T9242] netlink: 52 bytes leftover after parsing attributes in process `syz.4.956'. [ 142.781339][ T9247] netlink: 'syz.0.958': attribute type 13 has an invalid length. [ 142.814706][ T9247] gretap0: refused to change device tx_queue_len [ 142.816840][ T9247] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 142.840562][ T9257] program syz.3.961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.980932][ T9281] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 142.981976][ T5934] Bluetooth: hci3: unexpected event for opcode 0x0c56 [ 143.029608][ T5934] Bluetooth: hci4: command tx timeout [ 143.076796][ T9273] macsec3: entered promiscuous mode [ 143.079333][ T9273] macsec3: entered allmulticast mode [ 143.396698][ T9324] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 143.398913][ T9324] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 143.402810][ T9324] vhci_hcd vhci_hcd.0: Device attached [ 143.405700][ T9325] vhci_hcd: cannot find a urb of seqnum 5 max seqnum 0 [ 143.405948][ T9329] xt_hashlimit: invalid interval [ 143.409012][ T1164] vhci_hcd vhci_hcd.3: stop threads [ 143.412399][ T1164] vhci_hcd vhci_hcd.3: release socket [ 143.414895][ T1164] vhci_hcd vhci_hcd.3: disconnect device [ 143.420774][ T24] IPVS: starting estimator thread 0... [ 143.509564][ T9331] IPVS: using max 27 ests per chain, 64800 per kthread [ 143.578331][ T9340] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 143.739514][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 143.811800][ T40] kauditd_printk_skb: 1188 callbacks suppressed [ 143.811815][ T40] audit: type=1400 audit(1772619324.601:25893): avc: denied { ioctl } for pid=9337 comm="syz.2.989" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.889510][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 143.893714][ T24] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.898526][ T24] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.902943][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 143.905940][ T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 143.909785][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.927119][ T24] usb 7-1: config 0 descriptor?? [ 143.932090][ T40] audit: type=1400 audit(1772619324.721:25894): avc: denied { ioctl } for pid=9337 comm="syz.2.989" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.941787][ T40] audit: type=1400 audit(1772619324.721:25895): avc: denied { ioctl } for pid=9337 comm="syz.2.989" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.017836][ T40] audit: type=1400 audit(1772619324.801:25896): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.028957][ T40] audit: type=1400 audit(1772619324.801:25897): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.039497][ T40] audit: type=1400 audit(1772619324.801:25898): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.050292][ T40] audit: type=1400 audit(1772619324.841:25899): avc: denied { watch watch_reads } for pid=9344 comm="syz.3.992" path="/326" dev="tmpfs" ino=1740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 144.053151][ T9345] __nla_validate_parse: 6 callbacks suppressed [ 144.053163][ T9345] netlink: 48 bytes leftover after parsing attributes in process `syz.3.992'. [ 144.083953][ T9345] bond0: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 144.090869][ T9345] netlink: 48 bytes leftover after parsing attributes in process `syz.3.992'. [ 144.094997][ T9345] bond0: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 144.129945][ T40] audit: type=1400 audit(1772619324.921:25900): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.138208][ T40] audit: type=1400 audit(1772619324.921:25901): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.146784][ T40] audit: type=1400 audit(1772619324.921:25902): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.342901][ T24] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 144.411591][ T9368] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 144.545027][ T9338] IPv6: sit1: Disabled Multicast RS [ 144.549029][ T9338] sit1: entered allmulticast mode [ 144.601734][ T24] usb 7-1: USB disconnect, device number 10 [ 144.626133][ T9383] vivid-000: disconnect [ 144.633137][ T9383] binder: 9382:9383 ioctl c0306201 0 returned -14 [ 144.638000][ T9383] binder: 9382:9383 ioctl c0306201 0 returned -14 [ 144.642605][ T9382] vivid-000: reconnect [ 144.759495][ T6848] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 144.807228][ T9386] sctp: [Deprecated]: syz.0.1006 (pid 9386) Use of int in max_burst socket option. [ 144.807228][ T9386] Use struct sctp_assoc_value instead [ 144.912689][ T6848] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 144.916264][ T6848] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.920133][ T6848] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.923454][ T6848] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 144.928690][ T6848] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 144.932047][ T6848] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 144.934727][ T6848] usb 8-1: Manufacturer: syz [ 144.938974][ T6848] usb 8-1: config 0 descriptor?? [ 144.965692][ T9397] loop2: detected capacity change from 0 to 7 [ 144.970213][ T9397] Dev loop2: unable to read RDB block 7 [ 144.972289][ T9397] loop2: AHDI p1 [ 144.973703][ T9397] loop2: partition table partially beyond EOD, truncated [ 145.119559][ T5934] Bluetooth: hci4: command tx timeout [ 145.129948][ T5333] Dev loop2: unable to read RDB block 7 [ 145.132492][ T5333] loop2: AHDI p1 [ 145.134287][ T5333] loop2: partition table partially beyond EOD, truncated [ 145.271511][ T9412] FAULT_INJECTION: forcing a failure. [ 145.271511][ T9412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.274351][ T9410] Set syz1 is full, maxelem 1021 reached [ 145.275875][ T9412] CPU: 2 UID: 0 PID: 9412 Comm: syz.0.1014 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.275895][ T9412] Tainted: [L]=SOFTLOCKUP [ 145.275898][ T9412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.275905][ T9412] Call Trace: [ 145.275909][ T9412] [ 145.275914][ T9412] dump_stack_lvl+0x100/0x190 [ 145.275958][ T9412] should_fail_ex.cold+0x5/0xa [ 145.275973][ T9412] _copy_from_user+0x2e/0xd0 [ 145.275995][ T9412] copy_msghdr_from_user+0x9f/0x4f0 [ 145.276017][ T9412] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 145.276038][ T9412] ___sys_sendmsg+0x106/0x1e0 [ 145.276053][ T9412] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.276084][ T9412] __sys_sendmsg+0x170/0x220 [ 145.276095][ T9412] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.276115][ T9412] do_syscall_64+0x106/0xf80 [ 145.276127][ T9412] ? clear_bhb_loop+0x40/0x90 [ 145.276139][ T9412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.276150][ T9412] RIP: 0033:0x7fa20039c799 [ 145.276161][ T9412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.276171][ T9412] RSP: 002b:00007fa1fe5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.276182][ T9412] RAX: ffffffffffffffda RBX: 00007fa200615fa0 RCX: 00007fa20039c799 [ 145.276188][ T9412] RDX: 0000000000004848 RSI: 0000200000000200 RDI: 0000000000000004 [ 145.276194][ T9412] RBP: 00007fa1fe5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 145.276200][ T9412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.276206][ T9412] R13: 00007fa200616038 R14: 00007fa200615fa0 R15: 00007fffa4627398 [ 145.276220][ T9412] [ 145.440244][ T6848] usbhid 8-1:0.0: can't add hid device: -71 [ 145.442439][ T6848] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 145.450920][ T6848] usb 8-1: USB disconnect, device number 6 [ 145.489647][ T5966] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 145.642652][ T5966] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.646048][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1019'. [ 145.647645][ T5966] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 145.650544][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1019'. [ 145.650567][ T9428] netlink: 'syz.4.1019': attribute type 20 has an invalid length. [ 145.654594][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1019'. [ 145.655709][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.658366][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1019'. [ 145.658393][ T9428] netlink: 'syz.4.1019': attribute type 20 has an invalid length. [ 145.674820][ T5966] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 145.675553][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.679442][ T5966] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.683433][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.687945][ T5966] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.687971][ T5966] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.690825][ T5966] usb 7-1: config 0 descriptor?? [ 145.691468][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.823440][ T9432] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 146.030529][ T9450] binder: 9449:9450 ioctl 400c620e 200000000080 returned -22 [ 146.037634][ T9450] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 146.110240][ T5966] hid_parser_main: 6 callbacks suppressed [ 146.110253][ T5966] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 146.119586][ T5966] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 146.122409][ T5966] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 146.135305][ T5966] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 146.137993][ T5966] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 146.142991][ T5966] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 146.145737][ T5966] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 146.148532][ T5966] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 146.152889][ T5966] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 146.155986][ T9454] mmap: syz.4.1026 (9454): VmData 29204480 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 146.162870][ T5966] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 146.180309][ T5966] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 146.181645][ T9454] syz.4.1026 uses old SIOCAX25GETINFO [ 146.267824][ T9468] futex_wake_op: syz.0.1029 tries to shift op by -1; fix this program [ 146.274658][ T9468] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1029'. [ 146.310949][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 146.397125][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'. [ 146.400410][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1034'. [ 146.404017][ T9477] netlink: 'syz.0.1034': attribute type 12 has an invalid length. [ 146.416019][ T9477] tmpfs: Cannot disable swap on remount [ 146.708761][ T9509] FAULT_INJECTION: forcing a failure. [ 146.708761][ T9509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.714851][ T9509] CPU: 0 UID: 0 PID: 9509 Comm: syz.4.1042 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.714881][ T9509] Tainted: [L]=SOFTLOCKUP [ 146.714888][ T9509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.714898][ T9509] Call Trace: [ 146.714905][ T9509] [ 146.714913][ T9509] dump_stack_lvl+0x100/0x190 [ 146.714947][ T9509] should_fail_ex.cold+0x5/0xa [ 146.714972][ T9509] _copy_from_iter+0x1f4/0x1690 [ 146.715002][ T9509] ? __asan_memset+0x23/0x50 [ 146.715027][ T9509] ? __pfx__copy_from_iter+0x10/0x10 [ 146.715054][ T9509] ? __pfx___alloc_skb+0x10/0x10 [ 146.715082][ T9509] netlink_sendmsg+0x808/0xda0 [ 146.715110][ T9509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.715130][ T9509] ? __pfx___might_fault+0x10/0x10 [ 146.715166][ T9509] ____sys_sendmsg+0xa54/0xc30 [ 146.715193][ T9509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.715229][ T9509] ___sys_sendmsg+0x190/0x1e0 [ 146.715257][ T9509] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.715320][ T9509] __sys_sendmsg+0x170/0x220 [ 146.715341][ T9509] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.715376][ T9509] do_syscall_64+0x106/0xf80 [ 146.715395][ T9509] ? clear_bhb_loop+0x40/0x90 [ 146.715419][ T9509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.715438][ T9509] RIP: 0033:0x7fa24759c799 [ 146.715454][ T9509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.715471][ T9509] RSP: 002b:00007fa2483cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.715490][ T9509] RAX: ffffffffffffffda RBX: 00007fa247815fa0 RCX: 00007fa24759c799 [ 146.715502][ T9509] RDX: 0000000000004848 RSI: 0000200000000200 RDI: 0000000000000004 [ 146.715513][ T9509] RBP: 00007fa2483cd090 R08: 0000000000000000 R09: 0000000000000000 [ 146.715523][ T9509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.715534][ T9509] R13: 00007fa247816038 R14: 00007fa247815fa0 R15: 00007ffd38e90c48 [ 146.715559][ T9509] [ 147.189499][ T5934] Bluetooth: hci4: command tx timeout [ 147.471408][ T9536] netlink: 'syz.4.1049': attribute type 2 has an invalid length. [ 147.586601][ T9551] geneve2: entered promiscuous mode [ 147.588485][ T9551] geneve2: entered allmulticast mode [ 147.785630][ T9557] netlink: 'syz.4.1057': attribute type 21 has an invalid length. [ 147.788293][ T9557] netlink: 'syz.4.1057': attribute type 6 has an invalid length. [ 147.999998][ T6606] usb 7-1: reset high-speed USB device number 11 using dummy_hcd [ 148.074531][ T9562] FAULT_INJECTION: forcing a failure. [ 148.074531][ T9562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.078986][ T9562] CPU: 3 UID: 0 PID: 9562 Comm: syz.4.1059 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.079003][ T9562] Tainted: [L]=SOFTLOCKUP [ 148.079007][ T9562] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.079013][ T9562] Call Trace: [ 148.079018][ T9562] [ 148.079023][ T9562] dump_stack_lvl+0x100/0x190 [ 148.079044][ T9562] should_fail_ex.cold+0x5/0xa [ 148.079058][ T9562] _copy_to_iter+0x5a4/0x1720 [ 148.079076][ T9562] ? __pfx__copy_to_iter+0x10/0x10 [ 148.079090][ T9562] ? m_stop+0x39c/0x500 [ 148.079108][ T9562] ? m_stop+0x333/0x500 [ 148.079123][ T9562] seq_read_iter+0xdab/0x1270 [ 148.079146][ T9562] seq_read+0x33b/0x4c0 [ 148.079162][ T9562] ? __pfx_seq_read+0x10/0x10 [ 148.079181][ T9562] ? avc_policy_seqno+0x9/0x20 [ 148.079196][ T9562] ? selinux_file_permission+0x8f/0x6d0 [ 148.079212][ T9562] ? rw_verify_area+0xce/0x6d0 [ 148.079226][ T9562] ? __pfx_seq_read+0x10/0x10 [ 148.079243][ T9562] vfs_read+0x1e4/0xb30 [ 148.079261][ T9562] ? __pfx_vfs_read+0x10/0x10 [ 148.079275][ T9562] ? find_held_lock+0x2b/0x80 [ 148.079289][ T9562] ? __fget_files+0x215/0x3d0 [ 148.079299][ T9562] ? __fget_files+0x215/0x3d0 [ 148.079315][ T9562] ? __fget_files+0x21f/0x3d0 [ 148.079330][ T9562] __x64_sys_pread64+0x1eb/0x250 [ 148.079360][ T9562] ? __pfx___x64_sys_pread64+0x10/0x10 [ 148.079381][ T9562] do_syscall_64+0x106/0xf80 [ 148.079392][ T9562] ? clear_bhb_loop+0x40/0x90 [ 148.079407][ T9562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.079423][ T9562] RIP: 0033:0x7fa24759c799 [ 148.079438][ T9562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.079455][ T9562] RSP: 002b:00007fa2483cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 148.079474][ T9562] RAX: ffffffffffffffda RBX: 00007fa247815fa0 RCX: 00007fa24759c799 [ 148.079482][ T9562] RDX: 000000000000100c RSI: 0000200000001c00 RDI: 0000000000000005 [ 148.079488][ T9562] RBP: 00007fa2483cd090 R08: 0000000000000000 R09: 0000000000000000 [ 148.079494][ T9562] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 148.079500][ T9562] R13: 00007fa247816038 R14: 00007fa247815fa0 R15: 00007ffd38e90c48 [ 148.079514][ T9562] [ 148.346862][ T9570] netlink: 'syz.3.1061': attribute type 3 has an invalid length. [ 148.795021][ T9598] FAULT_INJECTION: forcing a failure. [ 148.795021][ T9598] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 148.799816][ T9598] CPU: 2 UID: 0 PID: 9598 Comm: syz.0.1068 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.799833][ T9598] Tainted: [L]=SOFTLOCKUP [ 148.799837][ T9598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.799843][ T9598] Call Trace: [ 148.799847][ T9598] [ 148.799851][ T9598] dump_stack_lvl+0x100/0x190 [ 148.799873][ T9598] should_fail_ex.cold+0x5/0xa [ 148.799885][ T9598] ? prepare_alloc_pages+0x16d/0x5f0 [ 148.799898][ T9598] should_fail_alloc_page+0xeb/0x140 [ 148.799910][ T9598] prepare_alloc_pages+0x1f0/0x5f0 [ 148.799923][ T9598] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 148.799943][ T9598] ? mark_held_locks+0x40/0x70 [ 148.799960][ T9598] ? smp_call_function_many_cond+0x120b/0x1500 [ 148.799976][ T9598] ? lockdep_hardirqs_on+0x78/0x100 [ 148.799987][ T9598] ? __pfx_flush_tlb_func+0x10/0x10 [ 148.799998][ T9598] ? smp_call_function_many_cond+0x5d3/0x1500 [ 148.800014][ T9598] ? __pfx_should_flush_tlb+0x10/0x10 [ 148.800029][ T9598] ? __pfx_flush_tlb_func+0x10/0x10 [ 148.800039][ T9598] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 148.800057][ T9598] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 148.800075][ T9598] ? __lock_acquire+0x4a5/0x2630 [ 148.800093][ T9598] ? __lock_acquire+0x4a5/0x2630 [ 148.800109][ T9598] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.800126][ T9598] ? policy_nodemask+0xed/0x4f0 [ 148.800146][ T9598] alloc_pages_mpol+0x1fb/0x550 [ 148.800165][ T9598] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 148.800182][ T9598] ? __lock_acquire+0x4a5/0x2630 [ 148.800201][ T9598] folio_alloc_mpol_noprof+0x36/0x340 [ 148.800214][ T9598] vma_alloc_folio_noprof+0xed/0x1d0 [ 148.800226][ T9598] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 148.800237][ T9598] ? rcu_read_unlock+0x2d/0xb0 [ 148.800250][ T9598] ? rcu_read_unlock+0x2d/0xb0 [ 148.800263][ T9598] ? __lock_acquire+0x4a5/0x2630 [ 148.800282][ T9598] do_wp_page+0xf28/0x4f00 [ 148.800296][ T9598] ? __pfx_do_wp_page+0x10/0x10 [ 148.800308][ T9598] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 148.800325][ T9598] __handle_mm_fault+0x1ac8/0x2b60 [ 148.800340][ T9598] ? mt_find+0x45e/0x8e0 [ 148.800385][ T9598] ? __pfx___handle_mm_fault+0x10/0x10 [ 148.800399][ T9598] ? __pfx_mt_find+0x10/0x10 [ 148.800418][ T9598] ? find_vma+0xbf/0x140 [ 148.800434][ T9598] ? __pfx_find_vma+0x10/0x10 [ 148.800451][ T9598] handle_mm_fault+0x36d/0xa20 [ 148.800467][ T9598] do_user_addr_fault+0x74c/0x12f0 [ 148.800483][ T9598] exc_page_fault+0x6f/0xd0 [ 148.800494][ T9598] asm_exc_page_fault+0x26/0x30 [ 148.800504][ T9598] RIP: 0010:_copy_to_iter+0x4c0/0x1720 [ 148.800520][ T9598] Code: 00 e8 b4 3a 15 fd 48 8b 74 24 18 48 8b 44 24 08 4c 8d 24 06 89 de 4c 89 e7 e8 0c bd 81 fd 0f 01 cb 48 89 d9 4c 89 f7 4c 89 e6 a4 0f 1f 00 49 89 cc 0f 01 ca 48 89 d8 48 29 c8 48 01 44 24 08 [ 148.800530][ T9598] RSP: 0018:ffffc900054379f8 EFLAGS: 00050246 [ 148.800540][ T9598] RAX: 0000000000000001 RBX: 00000000000007e6 RCX: 0000000000000414 [ 148.800546][ T9598] RDX: 0000000000000001 RSI: ffff888065a2a3d2 RDI: 0000200000002000 [ 148.800553][ T9598] RBP: ffffc90005437c00 R08: 0000000000000000 R09: ffffed100cb454fc [ 148.800559][ T9598] R10: ffff888065a2a7e5 R11: 0000000000000000 R12: ffff888065a2a000 [ 148.800565][ T9598] R13: 000000000000002e R14: 0000200000001c2e R15: 00000000000007e6 [ 148.800578][ T9598] ? _copy_to_iter+0x4b4/0x1720 [ 148.800595][ T9598] ? __pfx__copy_to_iter+0x10/0x10 [ 148.800608][ T9598] ? m_stop+0x39c/0x500 [ 148.800627][ T9598] ? m_stop+0x333/0x500 [ 148.800642][ T9598] seq_read_iter+0xdab/0x1270 [ 148.800670][ T9598] seq_read+0x33b/0x4c0 [ 148.800686][ T9598] ? __pfx_seq_read+0x10/0x10 [ 148.800705][ T9598] ? avc_policy_seqno+0x9/0x20 [ 148.800719][ T9598] ? selinux_file_permission+0x8f/0x6d0 [ 148.800735][ T9598] ? rw_verify_area+0xce/0x6d0 [ 148.800749][ T9598] ? __pfx_seq_read+0x10/0x10 [ 148.800765][ T9598] vfs_read+0x1e4/0xb30 [ 148.800782][ T9598] ? __pfx_vfs_read+0x10/0x10 [ 148.800796][ T9598] ? find_held_lock+0x2b/0x80 [ 148.800809][ T9598] ? __fget_files+0x215/0x3d0 [ 148.800819][ T9598] ? __fget_files+0x215/0x3d0 [ 148.800831][ T9598] ? __fget_files+0x21f/0x3d0 [ 148.800850][ T9598] __x64_sys_pread64+0x1eb/0x250 [ 148.800873][ T9598] ? __pfx___x64_sys_pread64+0x10/0x10 [ 148.800906][ T9598] do_syscall_64+0x106/0xf80 [ 148.800923][ T9598] ? clear_bhb_loop+0x40/0x90 [ 148.800946][ T9598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.800962][ T9598] RIP: 0033:0x7fa20039c799 [ 148.800978][ T9598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.800993][ T9598] RSP: 002b:00007fa1fe5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 148.801009][ T9598] RAX: ffffffffffffffda RBX: 00007fa200615fa0 RCX: 00007fa20039c799 [ 148.801019][ T9598] RDX: 000000000000100c RSI: 0000200000001c00 RDI: 0000000000000005 [ 148.801028][ T9598] RBP: 00007fa1fe5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 148.801037][ T9598] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 148.801046][ T9598] R13: 00007fa200616038 R14: 00007fa200615fa0 R15: 00007fffa4627398 [ 148.801068][ T9598] [ 148.937850][ T40] kauditd_printk_skb: 733 callbacks suppressed [ 148.937862][ T40] audit: type=1400 audit(1772619330.717:26636): avc: denied { create } for pid=9606 comm="syz.0.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 148.950030][ T9605] macsec0: entered promiscuous mode [ 148.951453][ T40] audit: type=1400 audit(1772619330.727:26637): avc: denied { create } for pid=9606 comm="syz.0.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 149.017524][ T40] audit: type=1400 audit(1772619330.727:26638): avc: denied { write } for pid=9606 comm="syz.0.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.024282][ T40] audit: type=1400 audit(1772619330.727:26639): avc: denied { nlmsg_write } for pid=9606 comm="syz.0.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.031666][ T40] audit: type=1400 audit(1772619330.727:26640): avc: denied { read } for pid=9606 comm="syz.0.1072" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 149.038923][ T40] audit: type=1400 audit(1772619330.727:26641): avc: denied { open } for pid=9606 comm="syz.0.1072" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 149.048017][ T40] audit: type=1400 audit(1772619330.727:26642): avc: denied { ioctl } for pid=9606 comm="syz.0.1072" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 149.056517][ T40] audit: type=1400 audit(1772619330.757:26643): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.067172][ T40] audit: type=1400 audit(1772619330.757:26644): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.076644][ T40] audit: type=1400 audit(1772619330.757:26645): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.201875][ T9624] ipt_ECN: cannot use operation on non-tcp rule [ 149.315544][ T9637] 5gQ[: renamed from lo [ 149.394361][ T5934] block nbd0: Receive control failed (result -32) [ 149.765443][ T9663] binder: BINDER_SET_CONTEXT_MGR already set [ 149.768548][ T9663] binder: 9662:9663 ioctl 4018620d 200000004a80 returned -16 [ 149.782332][ T9122] usb 7-1: USB disconnect, device number 11 [ 149.795293][ T9665] __nla_validate_parse: 3 callbacks suppressed [ 149.795310][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 149.817291][ T9668] SELinux: syz.2.1092 (9668) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 149.833179][ T9665] 8021q: adding VLAN 0 to HW filter on device bond6 [ 149.850874][ T9665] netlink: 'syz.3.1090': attribute type 10 has an invalid length. [ 149.853553][ T9665] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1090'. [ 149.963647][ T9681] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1094'. [ 150.125235][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1100'. [ 150.172279][ T9712] openvswitch: netlink: Flow key attr not present in new flow. [ 150.223016][ T9719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1105'. [ 150.295415][ T9729] sctp: [Deprecated]: syz.3.1107 (pid 9729) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.295415][ T9729] Use struct sctp_sack_info instead [ 150.330472][ T9731] netlink: 'syz.0.1108': attribute type 1 has an invalid length. [ 150.346838][ T9738] CUSE: info not properly terminated [ 150.759530][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 150.824060][ T9754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1113'. [ 150.837986][ T9754] bond2: entered promiscuous mode [ 150.840209][ T9754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.848469][ T9754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.852699][ T9754] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 150.857143][ T9754] bond2: (slave vcan2): Error -95 calling set_mac_address [ 150.909595][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 150.913632][ T24] usb 9-1: config index 0 descriptor too short (expected 260, got 27) [ 150.917390][ T24] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 150.921814][ T24] usb 9-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 150.925917][ T24] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 150.930807][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.208861][ T24] usb 9-1: string descriptor 0 read error: -71 [ 151.215847][ T24] usb 9-1: USB disconnect, device number 2 [ 151.330686][ T9764] program syz.0.1116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.419610][ T9773] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 151.578367][ T9783] 8021q: adding VLAN 0 to HW filter on device bond7 [ 151.790708][ T9799] overlayfs: failed to resolve './file0': -2 [ 152.121524][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 152.176783][ T9838] nft_compat: unsupported protocol 0 [ 152.379847][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 152.469604][ T1334] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 152.541295][ T24] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 152.545497][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.550261][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 152.555608][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.561564][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 152.567576][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.572413][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 152.577151][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.582046][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 152.585959][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.589607][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 152.594045][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.597407][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 152.601926][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.605588][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 152.611257][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.616747][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 152.620029][ T1334] usb 9-1: Using ep0 maxpacket: 8 [ 152.624243][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 152.628844][ T24] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 152.632498][ T24] usb 5-1: Product: syz [ 152.632902][ T1334] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.633960][ T24] usb 5-1: Manufacturer: syz [ 152.633971][ T24] usb 5-1: SerialNumber: syz [ 152.635927][ T24] usb 5-1: config 0 descriptor?? [ 152.644046][ T1334] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.651266][ T1334] usb 9-1: config 0 interface 0 has no altsetting 0 [ 152.656780][ T1334] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 152.662380][ T1334] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.679090][ T1334] usb 9-1: config 0 descriptor?? [ 152.857127][ T9831] fuse: Unknown parameter '' [ 152.863082][ T9122] usb 5-1: USB disconnect, device number 8 [ 153.099190][ T1334] hid_parser_main: 5 callbacks suppressed [ 153.099204][ T1334] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 153.104689][ T1334] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 153.106943][ T1334] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 153.110517][ T1334] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 153.112788][ T1334] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 153.115380][ T1334] mcp2221 0003:04D8:00DD.000C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 153.300711][ T9840] dlm: no locking on control device [ 153.302960][ T6848] usb 9-1: USB disconnect, device number 3 [ 153.861581][ T9880] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 153.945109][ T40] kauditd_printk_skb: 1172 callbacks suppressed [ 153.945122][ T40] audit: type=1400 audit(1772619335.727:27818): avc: denied { add_name } for pid=9884 comm="dhcpcd-run-hook" name="resolv.conf.lapb7.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.957053][ T40] audit: type=1400 audit(1772619335.727:27819): avc: denied { create } for pid=9884 comm="dhcpcd-run-hook" name="resolv.conf.lapb7.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.968246][ T40] audit: type=1400 audit(1772619335.727:27820): avc: denied { write open } for pid=9884 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb7.link" dev="tmpfs" ino=5509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.980291][ T40] audit: type=1400 audit(1772619335.727:27821): avc: denied { search } for pid=9884 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.991726][ T40] audit: type=1400 audit(1772619335.727:27822): avc: denied { search } for pid=9884 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.001237][ T40] audit: type=1400 audit(1772619335.727:27823): avc: denied { search } for pid=9884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.011412][ T40] audit: type=1400 audit(1772619335.727:27824): avc: denied { append } for pid=9884 comm="dhcpcd-run-hook" name="resolv.conf.lapb7.link" dev="tmpfs" ino=5509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.021721][ T40] audit: type=1400 audit(1772619335.727:27825): avc: denied { getattr } for pid=9884 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.032167][ T40] audit: type=1400 audit(1772619335.747:27826): avc: denied { search } for pid=9888 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.041429][ T40] audit: type=1400 audit(1772619335.747:27827): avc: denied { read } for pid=9888 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.409923][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1144'. [ 154.537353][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'. [ 154.541861][ T9918] veth0_macvtap: left promiscuous mode [ 154.716616][ T9930] ntfs3: Unknown parameter 'acl [ 154.879039][ T9946] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1153'. [ 154.953187][ T9950] netlink: 'syz.0.1153': attribute type 1 has an invalid length. [ 154.956753][ T9950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.106733][ T9956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1157'. [ 155.261569][ T9963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1159'. [ 155.464940][ T9974] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 155.625521][ T9977] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 155.721100][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1166'. [ 155.772169][ T9985] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 155.907449][ T9988] SELinux: ebitmap: truncated map [ 155.914811][ T9988] SELinux: failed to load policy [ 156.117044][T10013] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 156.122466][T10013] nfs4: Unknown parameter '' [ 156.505503][T10030] netlink: 'syz.0.1177': attribute type 10 has an invalid length. [ 156.524569][T10030] `: (slave netdevsim0): Enslaving as an active interface with an up link [ 156.565513][T10030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10030 comm=syz.0.1177 [ 156.795493][T10046] ntfs3(sr0): Primary boot signature is not NTFS. [ 156.798843][T10046] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 156.832747][T10050] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1182'. [ 157.001589][T10054] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1184'. [ 157.078988][T10066] hpfs: Bad magic ... probably not HPFS [ 157.135498][T10066] xt_CT: No such helper "snmp_trap" [ 157.179758][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 157.180989][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1191'. [ 157.182772][T10076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1190'. [ 157.195381][T10069] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 157.201755][T10069] bond3 (unregistering): Released all slaves [ 157.520922][T10099] overlayfs: failed to get inode (-116) [ 157.524996][T10099] overlayfs: failed to get inode (-116) [ 157.533854][T10099] overlayfs: failed to get inode (-116) [ 157.538835][T10099] overlayfs: failed to get inode (-116) [ 157.572814][ T95] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.577508][ T95] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.692963][ T95] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.696368][ T95] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.745415][T10099] overlayfs: failed to get inode (-116) [ 157.748123][T10099] overlayfs: failed to get inode (-116) [ 157.753368][T10099] overlayfs: failed to get inode (-116) [ 157.755588][T10099] overlayfs: failed to get inode (-116) [ 157.792600][ T95] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.792609][ T5940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.796603][ T95] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.805084][ T5940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.808193][ T5940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.818919][ T5940] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.824708][ T5940] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.907424][ T95] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.911430][ T95] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.958162][T10108] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 157.973808][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1202'. [ 158.081367][T10118] sp0: Synchronizing with TNC [ 158.181419][ T95] bridge_slave_1: left allmulticast mode [ 158.184301][ T95] bridge_slave_1: left promiscuous mode [ 158.188046][ T95] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.203336][ T95] bridge_slave_0: left allmulticast mode [ 158.205355][ T95] bridge_slave_0: left promiscuous mode [ 158.207333][ T95] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.301298][T10128] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 158.306272][T10128] block device autoloading is deprecated and will be removed. [ 158.522951][ T95] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.533864][ T95] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.545511][ T95] bond0 (unregistering): Released all slaves [ 158.559091][T10105] chnl_net:caif_netlink_parms(): no params data found [ 158.746051][T10105] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.755520][T10105] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.758679][T10105] bridge_slave_0: entered allmulticast mode [ 158.768090][T10105] bridge_slave_0: entered promiscuous mode [ 158.808755][T10105] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.820831][T10105] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.824154][T10105] bridge_slave_1: entered allmulticast mode [ 158.830770][T10105] bridge_slave_1: entered promiscuous mode [ 158.887719][T10105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.901315][T10169] Bluetooth: MGMT ver 1.23 [ 158.902645][T10105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.926407][T10173] i2c i2c-1: dvb_frontend_start: failed to start kthread (-4) [ 158.936247][T10105] team0: Port device team_slave_0 added [ 158.940498][T10105] team0: Port device team_slave_1 added [ 158.965563][ T40] kauditd_printk_skb: 1037 callbacks suppressed [ 158.965580][ T40] audit: type=1400 audit(1772619340.747:28864): avc: denied { search } for pid=10178 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.975650][T10105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.983256][T10105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.989901][ T40] audit: type=1400 audit(1772619340.747:28865): avc: denied { search } for pid=10178 comm="rm" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.991833][T10105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.002092][ T40] audit: type=1400 audit(1772619340.747:28866): avc: denied { search } for pid=10178 comm="rm" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.008247][T10105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.010429][ T40] audit: type=1400 audit(1772619340.767:28867): avc: denied { open } for pid=10179 comm="syz.3.1221" path="/dev/pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.015337][T10105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.020599][ T40] audit: type=1400 audit(1772619340.767:28868): avc: denied { read write } for pid=5926 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.027686][T10105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.038137][ T40] audit: type=1400 audit(1772619340.767:28869): avc: denied { read write open } for pid=5926 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.048089][ T40] audit: type=1400 audit(1772619340.767:28870): avc: denied { ioctl } for pid=5926 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.054310][T10180] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 159.056896][ T40] audit: type=1400 audit(1772619340.807:28871): avc: denied { search } for pid=5636 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.066991][ T40] audit: type=1400 audit(1772619340.807:28872): avc: denied { search } for pid=5636 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.074763][ T40] audit: type=1400 audit(1772619340.807:28873): avc: denied { search } for pid=5636 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.082166][ T95] hsr_slave_0: left promiscuous mode [ 159.089248][ T95] hsr_slave_1: left promiscuous mode [ 159.095797][ T95] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.098047][ T95] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.105140][ T95] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.107752][ T95] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.160569][ T95] veth1_macvtap: left promiscuous mode [ 159.162664][ T95] veth0_macvtap: left promiscuous mode [ 159.164578][ T95] veth1_vlan: left promiscuous mode [ 159.166466][ T95] veth0_vlan: left promiscuous mode [ 159.178574][T10196] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 159.233364][T10199] [U] zͻi[27| [ 159.236400][T10199] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 159.242794][T10199] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 159.248727][T10199] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 159.263019][T10199] [U] 8)X)YvxRĻbmbN@ox;JD, [ 159.265681][T10199] [U] *Cn3v7KEXgt_3 [ 159.267451][T10199] [U] D/QazҬEHgE1$_ks=R@ [ 159.269469][T10199] [U] ϼcEv @ [ 159.270889][T10199] [U] a% [ 159.272097][T10199] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 159.278567][T10199] [U] f1p3 [ 159.279848][T10199] [U] N0[L;a_l&kMC [ 159.282230][T10199] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 159.349482][ T95] team0 (unregistering): Port device team_slave_1 removed [ 159.361541][ T95] team0 (unregistering): Port device team_slave_0 removed [ 159.457132][T10198] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 1 [ 164.989753][ T5940] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 165.122714][T10553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4719 sclass=netlink_route_socket pid=10553 comm=syz.3.1311 [ 165.353189][T10565] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 165.360641][T10565] overlayfs: failed to set uuid (385/file0, err=-13); falling back to uuid=null. [ 165.779533][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 165.909636][ T24] usb 5-1: device descriptor read/64, error -71 [ 166.149567][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 166.238809][ T5966] usb 7-1: USB disconnect, device number 12 [ 166.279996][ T24] usb 5-1: device descriptor read/64, error -71 [ 166.325179][T10575] hpfs: Bad magic ... probably not HPFS [ 166.367559][T10575] xt_CT: No such helper "snmp_trap" [ 166.393342][ T24] usb usb5-port1: attempt power cycle [ 166.518557][T10587] delete_channel: no stack [ 166.579099][T10595] __nla_validate_parse: 3 callbacks suppressed [ 166.579122][T10595] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1325'. [ 166.588655][T10595] 0: renamed from hsr0 (while UP) [ 166.601894][T10595] 0: entered allmulticast mode [ 166.603807][T10595] hsr_slave_0: entered allmulticast mode [ 166.605862][T10595] hsr_slave_1: entered allmulticast mode [ 166.608401][T10595] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 166.729843][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 166.751626][ T24] usb 5-1: device descriptor read/8, error -71 [ 166.843647][T10609] xt_ecn: cannot match TCP bits for non-tcp packets [ 166.973636][T10621] netlink: 210928 bytes leftover after parsing attributes in process `syz.5.1332'. [ 166.989530][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 167.010816][ T24] usb 5-1: device descriptor read/8, error -71 [ 167.120793][ T24] usb usb5-port1: unable to enumerate USB device [ 167.176777][T10629] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1335'. [ 167.181357][T10629] 0: renamed from hsr0 (while UP) [ 167.185120][T10629] 0: entered allmulticast mode [ 167.186808][T10629] hsr_slave_0: entered allmulticast mode [ 167.190367][T10629] hsr_slave_1: entered allmulticast mode [ 167.192839][T10629] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 167.202324][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1335'. [ 167.206735][T10629] tc_dump_action: action bad kind [ 167.211076][T10629] tipc: Started in network mode [ 167.212854][T10629] tipc: Node identity 00000000000000000000000000040001, cluster identity 4711 [ 167.216152][T10629] tipc: Enabling of bearer rejected, failed to enable media [ 167.303145][ T5940] Bluetooth: hci2: unexpected event for opcode 0x080d [ 167.360570][T10638] syz.2.1338: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 167.617366][T10654] trusted_key: encrypted_key: insufficient parameters specified [ 168.293985][T10672] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 168.300164][T10672] cramfs: wrong magic [ 168.308599][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1347'. [ 168.313658][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1347'. [ 168.321129][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1347'. [ 168.325902][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1347'. [ 168.327700][T10674] 9pnet_virtio: no channels available for device 127.0.0.1 [ 168.788447][T10714] FAT-fs (sr0): bogus number of reserved sectors [ 168.791771][T10714] FAT-fs (sr0): Can't find a valid FAT filesystem [ 168.804643][T10713] FAT-fs (sr0): bogus number of reserved sectors [ 168.807073][T10713] FAT-fs (sr0): Can't find a valid FAT filesystem [ 169.029966][ T40] kauditd_printk_skb: 712 callbacks suppressed [ 169.029980][ T40] audit: type=1400 audit(2000000001.819:30612): avc: denied { create } for pid=10724 comm="syz.3.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.040375][ T5940] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 169.044520][ T5940] Bluetooth: hci4: Injecting HCI hardware error event [ 169.049574][ T5940] Bluetooth: hci4: hardware error 0x00 [ 169.059458][ T40] audit: type=1400 audit(2000000001.819:30613): avc: denied { module_request } for pid=10724 comm="syz.3.1362" kmod="net-pf-2-proto-6-type-6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 169.081631][ T40] audit: type=1400 audit(2000000001.829:30614): avc: denied { sys_module } for pid=10722 comm="syz.2.1363" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 169.082861][T10729] geneve4: entered promiscuous mode [ 169.092939][T10729] geneve4: entered allmulticast mode [ 169.098052][ T40] audit: type=1400 audit(2000000001.829:30615): avc: denied { module_request } for pid=10722 comm="syz.2.1363" kmod="macvtap0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 169.104918][ T40] audit: type=1400 audit(2000000001.869:30616): avc: denied { read } for pid=10724 comm="syz.3.1362" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 169.112787][ T40] audit: type=1400 audit(2000000001.869:30617): avc: denied { open } for pid=10724 comm="syz.3.1362" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 169.120673][ T40] audit: type=1400 audit(2000000001.869:30618): avc: denied { wake_alarm } for pid=10724 comm="syz.3.1362" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 169.129476][ T40] audit: type=1400 audit(2000000001.869:30619): avc: denied { create } for pid=10724 comm="syz.3.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.136750][ T40] audit: type=1400 audit(2000000001.869:30620): avc: denied { write } for pid=10724 comm="syz.3.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.145214][ T40] audit: type=1400 audit(2000000001.869:30621): avc: denied { read } for pid=10724 comm="syz.3.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.526647][T10754] gfs2: path_lookup on b::: returned error -2 [ 169.557766][ T41] Bluetooth: hci5: Frame reassembly failed (-84) [ 169.569595][T10758] Bluetooth: hci5: Frame reassembly failed (-84) [ 169.658066][T10772] bridge_slave_0: left allmulticast mode [ 169.660258][T10772] bridge_slave_0: left promiscuous mode [ 169.662327][T10772] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.666759][T10772] bridge_slave_1: left allmulticast mode [ 169.667829][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1376'. [ 169.668674][T10772] bridge_slave_1: left promiscuous mode [ 169.674861][T10772] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.683379][T10772] bond0: (slave bond_slave_0): Releasing backup interface [ 169.720575][T10776] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1376'. [ 169.731806][T10772] bond0: (slave bond_slave_1): Releasing backup interface [ 169.777350][T10772] team0: Port device team_slave_0 removed [ 169.785077][T10772] team0: Port device team_slave_1 removed [ 169.788329][T10772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.791749][T10772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.796136][T10772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.800434][T10772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.806046][T10772] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 170.058242][T10794] tmpfs: Bad value for 'mpol' [ 170.092737][T10798] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10798 comm=syz.5.1383 [ 170.196848][T10802] gfs2: not a GFS2 filesystem [ 170.293155][T10816] trusted_key: encrypted_key: insufficient parameters specified [ 170.513502][T10834] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 170.711176][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 170.713593][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 170.746855][T10843] ceph: No mds server is up or the cluster is laggy [ 170.958699][T10847] syzkaller0: entered promiscuous mode [ 170.963888][T10847] syzkaller0: entered allmulticast mode [ 171.269836][ T24] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 171.349622][ T5940] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 171.398266][ T5940] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 171.422416][ T24] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 171.427355][ T24] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 171.433536][ T24] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.438881][ T24] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 171.444675][ T24] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 171.451543][ T24] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 171.454641][ T24] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 171.458349][ T24] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.462501][ T24] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 171.466013][ T24] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 171.470688][ T24] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 171.473652][ T24] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 171.477634][ T24] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.482742][ T24] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 171.487619][ T24] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 171.495304][ T24] usb 8-1: string descriptor 0 read error: -22 [ 171.497736][ T24] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 171.501177][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.514940][ T24] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 171.589525][ T5940] Bluetooth: hci5: command 0x1003 tx timeout [ 171.589936][ T5934] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 171.635932][T10896] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 171.638799][T10896] UDF-fs: Scanning with blocksize 2048 failed [ 171.646813][T10896] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 171.649861][T10896] UDF-fs: Scanning with blocksize 4096 failed [ 171.694044][T10901] gre2: entered promiscuous mode [ 171.775215][ T9122] usb 8-1: USB disconnect, device number 9 [ 172.127645][T10945] sp0: Synchronizing with TNC [ 172.184990][T10950] __nla_validate_parse: 2 callbacks suppressed [ 172.185006][T10950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1419'. [ 172.209909][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1420'. [ 172.210894][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'. [ 172.241183][T10954] hsr_slave_1 (unregistering): left promiscuous mode [ 172.682692][T10989] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1427'. [ 173.276012][T11033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1432'. [ 173.446181][T11038] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 173.446181][T11038] program syz.2.1434 not setting count and/or reply_len properly [ 173.528433][T11042] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 173.591092][T11047] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 173.594292][T11047] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 173.597764][T11047] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 173.600872][T11047] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 173.603772][T11047] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 173.607053][T11047] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 173.614293][T11047] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 173.618372][T11047] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 173.622139][T11047] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 173.625929][T11047] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 174.003608][T11096] Bluetooth: MGMT ver 1.23 [ 174.046316][ T40] kauditd_printk_skb: 1188 callbacks suppressed [ 174.046327][ T40] audit: type=1400 audit(2000000006.829:31810): avc: denied { read } for pid=11045 comm="syz.0.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 174.059543][ T40] audit: type=1400 audit(2000000006.829:31811): avc: denied { write } for pid=11045 comm="syz.0.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 174.068296][ T40] audit: type=1400 audit(2000000006.829:31812): avc: denied { module_request } for pid=11045 comm="syz.0.1437" kmod="nfnetlink-subsys-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 174.077280][ T40] audit: type=1400 audit(2000000006.849:31813): avc: denied { read } for pid=11045 comm="syz.0.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 174.086150][ T40] audit: type=1400 audit(2000000006.849:31814): avc: denied { write } for pid=11045 comm="syz.0.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 174.093761][ T40] audit: type=1400 audit(2000000006.849:31815): avc: denied { module_request } for pid=11045 comm="syz.0.1437" kmod="nfnetlink-subsys-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 174.104083][ T40] audit: type=1400 audit(2000000006.849:31816): avc: denied { create } for pid=11100 comm="syz.5.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 174.113522][ T40] audit: type=1400 audit(2000000006.849:31817): avc: denied { read write } for pid=11100 comm="syz.5.1450" name="userio" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.125032][ T40] audit: type=1400 audit(2000000006.849:31818): avc: denied { read write open } for pid=11100 comm="syz.5.1450" path="/dev/userio" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.133542][ T40] audit: type=1400 audit(2000000006.859:31819): avc: denied { prog_load } for pid=11100 comm="syz.5.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 174.386609][T11133] netlink: 'syz.3.1454': attribute type 3 has an invalid length. [ 174.412359][T11137] netlink: 4376 bytes leftover after parsing attributes in process `syz.2.1455'. [ 174.415542][T11137] netlink: 4376 bytes leftover after parsing attributes in process `syz.2.1455'. [ 174.442053][ T9122] libceph: connect (1)[c::]:6789 error -101 [ 174.444222][ T9122] libceph: mon0 (1)[c::]:6789 connect error [ 174.548010][T11137] ceph: No mds server is up or the cluster is laggy [ 174.633255][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'. [ 174.636931][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'. [ 174.779816][T11161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1462'. [ 174.850460][T11159] can0 (unregistered): slcan off ttynull. [ 174.933678][T11175] Cannot find add_set index 0 as target [ 175.157008][T11200] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11200 comm=syz.2.1468 [ 176.043094][T11244] can0: slcan on ttyS3. [ 176.140795][T11244] can0 (unregistered): slcan off ttyS3. [ 176.373174][T11268] ip6t_REJECT: ECHOREPLY is not supported [ 176.453277][T11274] nvme_fabrics: missing parameter 'transport=%s' [ 176.456385][T11274] nvme_fabrics: missing parameter 'nqn=%s' [ 176.500287][T11274] nvme_fabrics: missing parameter 'transport=%s' [ 176.503384][T11274] nvme_fabrics: missing parameter 'nqn=%s' [ 176.541914][T11281] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.546067][T11281] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.550277][T11281] bridge0: entered allmulticast mode [ 176.884445][ T5932] IPVS: starting estimator thread 0... [ 176.888714][T11316] No source specified [ 176.969955][T11317] IPVS: using max 44 ests per chain, 105600 per kthread [ 177.188530][T11265] ================================================================== [ 177.191307][T11265] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x4f3/0x5d0 [ 177.194100][T11265] Read of size 4 at addr ffff88802e076e3c by task syz.5.1486/11265 [ 177.197053][T11265] [ 177.198648][T11265] CPU: 3 UID: 0 PID: 11265 Comm: syz.5.1486 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.198665][T11265] Tainted: [L]=SOFTLOCKUP [ 177.198669][T11265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.198676][T11265] Call Trace: [ 177.198683][T11265] [ 177.198687][T11265] dump_stack_lvl+0x100/0x190 [ 177.198707][T11265] print_report+0x156/0x4c9 [ 177.198722][T11265] ? __virt_addr_valid+0x81/0x620 [ 177.198737][T11265] ? __phys_addr+0xe8/0x180 [ 177.198752][T11265] ? dvb_frontend_release+0x4f3/0x5d0 [ 177.198763][T11265] kasan_report+0xdf/0x1e0 [ 177.198780][T11265] ? dvb_frontend_release+0x4f3/0x5d0 [ 177.198792][T11265] dvb_frontend_release+0x4f3/0x5d0 [ 177.198802][T11265] ? __pfx_dvb_frontend_release+0x10/0x10 [ 177.198814][T11265] __fput+0x3ff/0xb40 [ 177.198826][T11265] task_work_run+0x150/0x240 [ 177.198838][T11265] ? __pfx_task_work_run+0x10/0x10 [ 177.198851][T11265] exit_to_user_mode_loop+0x100/0x4a0 [ 177.198868][T11265] do_syscall_64+0x67c/0xf80 [ 177.198887][T11265] ? clear_bhb_loop+0x40/0x90 [ 177.198899][T11265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.198912][T11265] RIP: 0033:0x7f7201b9c799 [ 177.198923][T11265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.198934][T11265] RSP: 002b:00007fff34692dd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 177.198944][T11265] RAX: 0000000000000000 RBX: 00007f7201e17da0 RCX: 00007f7201b9c799 [ 177.198951][T11265] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 177.198957][T11265] RBP: 00007f7201e17da0 R08: 0000000000000006 R09: 0000000000000000 [ 177.198964][T11265] R10: 00007f7201e17cb0 R11: 0000000000000246 R12: 000000000002b3aa [ 177.198970][T11265] R13: 00007f7201e1609c R14: 000000000002b138 R15: 00007fff34692ee0 [ 177.198979][T11265] [ 177.198983][T11265] [ 177.264415][T11265] Allocated by task 1: [ 177.265827][T11265] kasan_save_stack+0x30/0x50 [ 177.267414][T11265] kasan_save_track+0x14/0x30 [ 177.268987][T11265] __kasan_kmalloc+0xaa/0xb0 [ 177.270582][T11265] dvb_register_device+0x1d6/0x1e20 [ 177.270598][T11265] dvb_register_frontend+0x5a8/0x8a0 [ 177.270609][T11265] vidtv_bridge_probe+0x44b/0xa30 [ 177.270623][T11265] platform_probe+0x106/0x1d0 [ 177.270633][T11265] really_probe+0x241/0xa60 [ 177.270644][T11265] __driver_probe_device+0x1de/0x400 [ 177.281076][T11265] driver_probe_device+0x4c/0x1b0 [ 177.282762][T11265] __driver_attach+0x2f4/0x6a0 [ 177.284439][T11265] bus_for_each_dev+0x13e/0x1d0 [ 177.286098][T11265] bus_add_driver+0x305/0x5b0 [ 177.287686][T11265] driver_register+0x1e2/0x360 [ 177.289244][T11265] vidtv_bridge_init+0x38/0x70 [ 177.290840][T11265] do_one_initcall+0x11d/0x760 [ 177.292449][T11265] kernel_init_freeable+0x6e5/0x7a0 [ 177.294275][T11265] kernel_init+0x1f/0x1e0 [ 177.295700][T11265] ret_from_fork+0x754/0xd80 [ 177.297297][T11265] ret_from_fork_asm+0x1a/0x30 [ 177.298890][T11265] [ 177.299686][T11265] Freed by task 11265: [ 177.301022][T11265] kasan_save_stack+0x30/0x50 [ 177.302736][T11265] kasan_save_track+0x14/0x30 [ 177.304366][T11265] kasan_save_free_info+0x3b/0x70 [ 177.306053][T11265] __kasan_slab_free+0x5f/0x80 [ 177.307797][T11265] kfree+0x1f6/0x6b0 [ 177.309195][T11265] dvb_device_put.part.0+0x57/0x90 [ 177.311058][T11265] dvb_generic_release+0xe2/0x160 [ 177.312886][T11265] dvb_frontend_release+0x13d/0x5d0 [ 177.314697][T11265] __fput+0x3ff/0xb40 [ 177.316073][T11265] task_work_run+0x150/0x240 [ 177.317722][T11265] exit_to_user_mode_loop+0x100/0x4a0 [ 177.319592][T11265] do_syscall_64+0x67c/0xf80 [ 177.321213][T11265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.323303][T11265] [ 177.324190][T11265] The buggy address belongs to the object at ffff88802e076e00 [ 177.324190][T11265] which belongs to the cache kmalloc-256 of size 256 [ 177.328964][T11265] The buggy address is located 60 bytes inside of [ 177.328964][T11265] freed 256-byte region [ffff88802e076e00, ffff88802e076f00) [ 177.333581][T11265] [ 177.334435][T11265] The buggy address belongs to the physical page: [ 177.336647][T11265] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e076 [ 177.339652][T11265] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 177.342535][T11265] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 177.345361][T11265] page_type: f5(slab) [ 177.346807][T11265] raw: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 177.349830][T11265] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 177.352794][T11265] head: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 177.355806][T11265] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 177.358719][T11265] head: 00fff00000000001 ffffea0000b81d81 00000000ffffffff 00000000ffffffff [ 177.361837][T11265] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 177.364782][T11265] page dumped because: kasan: bad access detected [ 177.367037][T11265] page_owner tracks the page as allocated [ 177.369107][T11265] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 20586373655, free_ts 0 [ 177.375626][T11265] post_alloc_hook+0x153/0x170 [ 177.377143][T11265] get_page_from_freelist+0x111d/0x3140 [ 177.379028][T11265] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 177.380961][T11265] new_slab+0xa6/0x6d0 [ 177.382322][T11265] refill_objects+0x26b/0x400 [ 177.383854][T11265] __pcs_replace_empty_main+0x19f/0x600 [ 177.385809][T11265] __kmalloc_cache_noprof+0x493/0x6f0 [ 177.387545][T11265] bus_add_driver+0x92/0x5b0 [ 177.389085][T11265] driver_register+0x1e2/0x360 [ 177.390698][T11265] usb_register_driver+0x21c/0x3e0 [ 177.392357][T11265] do_one_initcall+0x11d/0x760 [ 177.393936][T11265] kernel_init_freeable+0x6e5/0x7a0 [ 177.395665][T11265] kernel_init+0x1f/0x1e0 [ 177.397102][T11265] ret_from_fork+0x754/0xd80 [ 177.398607][T11265] ret_from_fork_asm+0x1a/0x30 [ 177.400199][T11265] page_owner free stack trace missing [ 177.401936][T11265] [ 177.402741][T11265] Memory state around the buggy address: [ 177.404849][T11265] ffff88802e076d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 177.407817][T11265] ffff88802e076d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 177.410657][T11265] >ffff88802e076e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.413331][T11265] ^ [ 177.415344][T11265] ffff88802e076e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.418050][T11265] ffff88802e076f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 177.420826][T11265] ================================================================== [ 177.426229][T11265] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 177.428882][T11265] CPU: 3 UID: 0 PID: 11265 Comm: syz.5.1486 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.432707][T11265] Tainted: [L]=SOFTLOCKUP [ 177.434237][T11265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.437630][T11265] Call Trace: [ 177.438800][T11265] [ 177.439871][T11265] dump_stack_lvl+0x100/0x190 [ 177.441536][T11265] vpanic+0x552/0x970 [ 177.442884][T11265] ? __pfx_vpanic+0x10/0x10 [ 177.444433][T11265] ? dvb_frontend_release+0x4f3/0x5d0 [ 177.446270][T11265] panic+0xd1/0xe0 [ 177.447579][T11265] ? __pfx_panic+0x10/0x10 [ 177.449108][T11265] ? dvb_frontend_release+0x4f3/0x5d0 [ 177.450875][T11265] ? preempt_schedule_common+0x42/0xc0 [ 177.452820][T11265] ? check_panic_on_warn+0x1f/0x90 [ 177.454606][T11265] check_panic_on_warn.cold+0x19/0x34 [ 177.456525][T11265] end_report.part.0+0x3a/0x90 [ 177.458155][T11265] kasan_report.cold+0xe/0x18 [ 177.459721][T11265] ? dvb_frontend_release+0x4f3/0x5d0 [ 177.461503][T11265] dvb_frontend_release+0x4f3/0x5d0 [ 177.463364][T11265] ? __pfx_dvb_frontend_release+0x10/0x10 [ 177.465561][T11265] __fput+0x3ff/0xb40 [ 177.466965][T11265] task_work_run+0x150/0x240 [ 177.468867][T11265] ? __pfx_task_work_run+0x10/0x10 [ 177.470644][T11265] exit_to_user_mode_loop+0x100/0x4a0 [ 177.472642][T11265] do_syscall_64+0x67c/0xf80 [ 177.474267][T11265] ? clear_bhb_loop+0x40/0x90 [ 177.476007][T11265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.478336][T11265] RIP: 0033:0x7f7201b9c799 [ 177.480270][T11265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.487226][T11265] RSP: 002b:00007fff34692dd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 177.490595][T11265] RAX: 0000000000000000 RBX: 00007f7201e17da0 RCX: 00007f7201b9c799 [ 177.493445][T11265] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 177.496212][T11265] RBP: 00007f7201e17da0 R08: 0000000000000006 R09: 0000000000000000 [ 177.498891][T11265] R10: 00007f7201e17cb0 R11: 0000000000000246 R12: 000000000002b3aa [ 177.501687][T11265] R13: 00007f7201e1609c R14: 000000000002b138 R15: 00007fff34692ee0 [ 177.504412][T11265] [ 177.506486][T11265] Kernel Offset: disabled [ 177.508136][T11265] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:15:58 Registers: info registers vcpu 0 CPU#0 EAX=0000ffc4 EBX=00000000 ECX=00000000 EDX=00000063 ESI=00000000 EDI=000000a0 EBP=00000000 ESP=000052e2 EIP=00004118 EFL=00000817 [-O--APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 00000000 0000ffff 00009300 CS =9123 00091230 0000ffff 00009b00 SS =0000 00000000 0000ffff 00009300 DS =0000 00000000 0000ffff 00009300 FS =0000 00000000 0000ffff 00009300 GS =0000 00000000 0000ffff 00009300 LDT=0000 00000000 0000ffff 00008200 TR =0000 00000000 0000ffff 00008b00 GDT= 00000000 0000ffff IDT= 00000000 0000ffff CR0=00000030 CR2=00000000 CR3=00000000 CR4=00002040 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000000 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=000000003b346000 RCX=0000000000000400 RDX=0000000000000000 RSI=0000000000000001 RDI=ffff88803b346c00 RBP=ffffea0000ecd180 RSP=ffffc9000e8be6c0 R8 =0000000000001000 R9 =0000000000000000 R10=ffffed1007668c00 R11=dffffc0000000000 R12=ffffea0000ecd1c0 R13=fffffbfff1c237e7 R14=fffffbfff1c237e5 R15=0000000000000001 RIP=ffffffff8265ad55 RFL=00010286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f5e9aed96c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d6445000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000381eb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 736d656d5f657669 7463656666652e74 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa4627886 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa4627886 00007fffa462788c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2004331bc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2004331fc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa200433360 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2004331ee ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=1ffff9200084be62 RBX=ffffc9000425f2f8 RCX=0000000000000800 RDX=ffff88802cbc4980 RSI=ffffffff84fef93d RDI=ffffc9000425f2f8 RBP=dffffc0000000000 RSP=ffffc9000425f0f8 R8 =0000000000000001 R9 =0000000000000008 R10=0000000000000004 R11=0000000000000000 R12=0000000000000800 R13=0000000000000004 R14=0000000000000009 R15=0000000087d35277 RIP=ffffffff84fef957 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4ecb145300 ffffffff 00c00000 GS =0000 ffff8880d6545000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055e2bd6de000 CR3=000000002caef000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 736d656d5f657669 7463656666652e74 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa4627886 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa4627886 00007fffa462788c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2004331bc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2004331fc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa200433360 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2004331ee ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857959a5 RDI=ffffffff9b4a0a00 RBP=ffffffff9b4a09c0 RSP=ffffc9000f667798 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2e7a7973203a5043 R12=0000000000000000 R13=0000000000000032 R14=0000000000000010 R15=ffffffff85795940 RIP=ffffffff857959cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555584569500 ffffffff 00c00000 GS =0000 ffff8880d6645000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5e9aeb8d58 CR3=0000000023232000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f720294d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff34693166 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff34693166 00007fff3469316c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7201c331bc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7201c331fc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7201c33360 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7201c331ee ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7201deb600 00007f7201deb5e0 00007f7201deb5e8 00007f7201deb618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7201deb5f8 00007f7201deb5c8 00007f7201deb600 00007f7201deb5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 110f0685a0e2454c 67f43e349ebf4718 24487b6de2ce1145 ef463f3fe6a2bdee ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 663e9dd1ba3d2ff0 28c9fdd35a045af0 3a1921e725ed582e 7136c4fc0aaf33b2 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7040c3968bdad204 1780cf464ff7666b 75138b56c1941f50 219a6b76934b2fef ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03812a7dadc6e943 c458f1802c9692e8 c55376150bcd3815 cfb1ba5934ad9ece ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000