last executing test programs: 6.317432663s ago: executing program 3 (id=504): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r1], 0x44}}, 0x2000040) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r1], 0x44}}, 0x2000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 6.316395855s ago: executing program 3 (id=505): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x1c, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, r1, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 6.316192097s ago: executing program 3 (id=506): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000225bd7000ffdbdf2501000000400001800600010002000000080006006f76660008000900640000000c00070000000000000000000800050000000000080008000000000008000b00736970008c1372b03485e111f732099cfa"], 0x54}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) r3 = accept(r2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) ustat(0x801, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1d19"], 0x1c) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f00)=@newtfilter={0x30, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24041091}, 0x800) sendmmsg$unix(r4, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x511}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r7, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x53}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) 6.282768824s ago: executing program 3 (id=510): timer_create(0x2, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={&(0x7f00000001c0)="40e256fcd1c3eaa8724c17dab5f1d7028b9518b5b1a31bab808af60e4dcf4538b130d98680a3f14721c1ccd43e5311986f7d2cbe8895ac8fdedbbce740491ae797c35c3a0166a64c693226a0a4127c315f384ed2e26048d41f1f41f1fba6406191dd6fd126b1d626117bd0b438c896b9e010675f39a8159f271a400b199f49da6a98731865cb530467c80cd73f4fab1fb6d38554d23b9c5d2f696fa209be0321eb3d49fc5c851bc65335a4b588ee4dc2a307896c878ec638b899e420e8c3825bb65d08be430ec6b70cd0eb0b065ad0364600bd2f294f01b4e4fe9cde2ba14d1f7232cf96d6374f824a1740a7387db3cf67a1fff9a6def89a4c", &(0x7f00000002c0)="5a93deb45c7ba31accd4af1f57b8ac4d87cef8e5951154f39ffeaf8783e4870fd55868b3915bc7c1d609957b14570441c51340a81cae008829cb40454b2a595e90cc4fda009f0b8bd43bf08ea6b0867e509848b0f5a8aad2099ac4edaee61382bcc10fcc15af20c4d8dfca8ce968511ea003318fea160637169b9e9db180582c64fce03283a7a341a00da80df547a7c06d780484f26a33e7b94ed46529f0a4b6fead3e02251fea98c705f5e91a656ea922ff67f4b89be704cfe84c41a2269ccd116de34978456f38d45d255e5305f949fe63df0630f99cef00"}}, &(0x7f0000000100)=0x0) (async, rerun: 32) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) io_submit(0x0, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x6, r1, 0x0}]) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x13, r2, 0x1e67b000) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0xca61b) (async) syz_open_dev$sndctrl(0x0, 0x0, 0x801) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x1) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x3b65, 0x40010, 0x3, 0x6e}, &(0x7f00000006c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8897, 0x0, 0x3, 0xe5}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdaa1, 0x2, 0x1, 0x184}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x765e, 0x1000, 0x3, 0x2ed}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbda0, 0x4000, 0x2, 0x234}}], 0x4, &(0x7f0000001940)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x0, 0x877, 0x0, &(0x7f0000000940)=@buf_1k="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"}}, &(0x7f00000019c0)) r5 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x83, 0x3af, 0x0, r4}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async, rerun: 32) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000540)={0x0, 0x0, @ioapic={0x41000, 0x0, 0x7c7, 0x8, 0x0, [{0x55, 0x0, 0x6, '\x00', 0xf1}, {0x4, 0x35, 0x6, '\x00', 0x7}, {0xfb, 0x4, 0x5, '\x00', 0x6}, {0x2, 0x80, 0x1, '\x00', 0x6}, {0x7, 0x7e, 0x3, '\x00', 0x7}, {0x8, 0x1, 0x7, '\x00', 0x2}, {0x3, 0x7, 0x48, '\x00', 0x9}, {0x1, 0xa, 0x8, '\x00', 0x40}, {0xf2, 0x7, 0xff, '\x00', 0x1}, {0x7, 0x0, 0x6, '\x00', 0x3}, {0xff, 0x9, 0x5, '\x00', 0x2}, {0x0, 0x5, 0x6a}, {0x8, 0x40, 0xff, '\x00', 0x4}, {0x5, 0xff, 0xdf, '\x00', 0x3}, {0x1, 0x4, 0x6}, {0xc, 0xc4, 0x32, '\x00', 0x6}, {0x1, 0x1, 0x1}, {0x5, 0x6, 0x4, '\x00', 0x5}, {0x7, 0x9, 0x4, '\x00', 0x2}, {0xf0, 0xbf, 0xa, '\x00', 0xfc}, {0x9, 0xc0, 0x2, '\x00', 0x3}, {0x3, 0x9, 0x6, '\x00', 0x5}, {0x3, 0x9, 0x9, '\x00', 0xda}, {0x1, 0x75, 0x81, '\x00', 0x40}]}}) (async, rerun: 32) syz_io_uring_modify_offsets$generic(r6, r7, 0x2c, 0x1000) (async) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r10, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) (async) recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) (async) io_uring_enter(r5, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000040)) 5.629597349s ago: executing program 3 (id=525): socket$unix(0x1, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0xc, 0x1, 0x2, 0xd, 0x3, 0xb, 0x0, 0x5, 0x2, 0xa, 0xc, 0xf, 0x2, 0x5, 0x1, 0x6], 0x1, [0x2, 0x10, 0xf9b, 0x400, 0x1, 0x5, 0x81, 0xd, 0x5, 0xf, 0x0, 0x400, 0x3, 0x81, 0x2, 0x53], [0x80, 0x6, 0x8000, 0x3, 0xfffd, 0x200, 0x5, 0x4, 0x0, 0x6, 0x7, 0x1, 0x0, 0x8a9f, 0xbef, 0x3]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x40, "2672805d08bddb132dc95e721272c841047fdd2282f75e4898b70ce2247aead41a91ad258527f180cd536be2e32d318e3c3617996f99bebb1794f1c003c30928"}, &(0x7f00000001c0)=0x48) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={r3, 0x1, 0x1}, &(0x7f00000002c0)=0x10) r4 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export_path_with_very_long_name_to_increase_xdr_payload_length\x00', 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc8000000}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0xa, @private0, 0xfff}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000017c0)="d3", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='mountaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='mountproto\x00', &(0x7f0000000280)='udp\x00', 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x80000}}, 0x10) syz_open_dev$usbfs(&(0x7f0000000140), 0xd, 0x3501) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0xc5d116e9899720b9, {{0x42}}}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x480000, 0x0, 0x0) 5.539270567s ago: executing program 0 (id=528): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd92a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffeb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x67ab8055}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x841) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x10}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000440)={r1, &(0x7f0000000340)='nl80211\x00', 0x800, &(0x7f0000000380)={@align=0x8000000000000001, {0x2cc8, 0x1, 0xfff, 0x6}}, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x81}) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x10, 0xa, 0x302, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'ipvlan1\x00', 0x0}) read$FUSE(r3, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$setownex(r4, 0xf, &(0x7f0000002600)={0x2, r6}) r7 = accept$packet(r3, &(0x7f0000002640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002680)=0x14) getsockname$packet(r7, 0x0, &(0x7f00000026c0)) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000035c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003580)={&(0x7f0000002740)={0xe20, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x51}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc7}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x79}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x93}, @NL80211_ATTR_CSA_IES={0x10, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x5, 0xd, 0xff]}]}, @NL80211_ATTR_CSA_IES={0xd9c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x69, 0x80, [@erp={0x2a, 0x1, {0x0, 0x1}}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x5, 0x0, {0x8, 0x5, 0x0, 0x4, 0x0, 0x1, 0x1}, 0x57278b5e9eb3227e, 0x4, 0x4}}, @random_vendor={0xdd, 0x3e, "733655bc27212b964e8f5fbed9908ea708dfb4abcac6e2f71b03d03d33be4811402b336316033f2f59b1c5641eb1a2b374effec447067087693a478af530"}, @challenge={0x10, 0x1, 0xc6}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x38, 0x7f, [@perr={0x84, 0x2, {0x4}}, @ibss={0x6, 0x2, 0x400}, @mic={0x8c, 0x10, {0x23, "fe7c30afb068", @short="cb01193a054ff50d"}}, @peer_mgmt={0x75, 0x18, {0x1, 0xd, @val=0x5d6b, @val=0x36, @val="102c4c3b5210719d0838d4e3f75ae5c5"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x10, 0x80, [@sec_chan_ofs={0x3e, 0x1}, @erp={0x2a, 0x1}, @erp={0x2a, 0x1}, @challenge={0x10, 0x1, 0xeb}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x9, 0xfff7, 0x6, 0x9, 0xea4, 0x25d]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x9, 0x7, 0x7fff, 0xf64, 0x941, 0x2a8]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x250, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x17, 0x3, "fdd21887a25645eb4aabeefb3d1e9fd6434302"}, @NL80211_FTM_RESP_ATTR_LCI={0x9b, 0x2, "f6c8bd647b017994b8f7c9ab333cbea2ab771ca351119d483b3b283f369ac118e0cc5cefafe34253fe381a275d583d539fd6781f959a02a0a6bb03b207ef82c55d6f020ae7c1de6f1a443197a433372c3b90beed1be6f9606a40870c87f32851bb2c8f4218ffc45be1cab67a5cecc48b2be716d4992296bf3c0654181ae63ff8decffd00b27616a7a18945edfead46921901ee9b284e88"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x9c, 0x3, "281ba7f6133ce1dee5140fc047b04b0d009d4ed884b4fbe8a3b436475e2e3a2fe8f88251908e4601a1e49234f876da55b67f7db5ae4bf6d5d7c1b4177fe6dc648555de413be1e4450c7daf002f3cf009d4a9d9241bf58cbef8136d0d76413d8b9cdc7867d1ea0b8b11a2d7e379ede4c134b83437dcca38f5de9753c1e2dad1cd69b62f4eeaefaf173dfae1c7896835973639d872bdf87d5c"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf3, 0x3, "78d91c690bf8e09aacb26da6836c17de8d3561e1395a83516f9104a0122ad3dd294776ab6ce0f9fa24661fb03426ceecdc40aa546aaf0daccbd0b4613bb9984cf269884fb2d84e5d5c37efd4e4dcd803553565eba8f1b8573c7f18e62edb277c1cad145f5fb408337648b52a9f7f8ef820457ded295fac68565ecfdc5e86627d325568f144d1e6ed78038fae008c4bdf2a307ced998721339887fcbb028001f3c47d8a4c571c8778cf5fc734595bca75bd66c6424f1b631d31ce2e1ec6eabbe857234e041c72ffa906cad1230e1a989c54bcec44094af184660c075b9adb562e99ee5a44b7720b2d2b8683137dfd53"}]}, @NL80211_ATTR_BEACON_HEAD={0x179, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_b, @from_mac, {0x1, 0x9}, @value=@ver_80211n={0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0xfffffffffffffffa, @random=0x200, 0x802, @void, @val={0x1, 0x5, [{0x48}, {0x16}, {0x30}, {0xb}, {0x1b}]}, @void, @val={0x4, 0x6, {0xf, 0xfe, 0x9, 0x7fff}}, @val={0x6, 0x2, 0x8}, @val={0x5, 0x76, {0x38, 0x63, 0x16, "92943b1067219734424e1c82f08feccc12074f41bfbc5bf60fee6e84b40ee5816e38625744fb17e23ede0e9a07f657c09cdda026fa91a97e086a6d48d2cb3cb46f9599d8378607f1999093523083506ed7fa65bd02030247372bfce32f11d8d65c1a917fb9d82c46106607b76c3485c7076e52"}}, @val={0x25, 0x3, {0x1, 0x8, 0x7}}, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xc, 0x2, 0x32, 0xef2}}, [{0xdd, 0xab, "d4a3579cca08eb88f00f83d1f240047c0baadeb120d8106e1e319ede15a57bf381c57ae747952de0e2ffedb9c51af65fae70044947875fe58daef157b6f5339714864d00d560e2da1b2ad8fedd3471f568ceab7fe1b17e45c850844d934de73a7d631e75989e9ea34b2bc70f83b8077185958e7d67a5f98bd3abcee4caada2caf440c4408ccd5d5f49056ec38d9ffd21587e95b64c730348294ef6b7cd71bf82c3f31a918716ae0d9cc6f4"}]}}, @NL80211_ATTR_BEACON_HEAD={0xf6, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xde}, @broadcast, @device_b, @random='LY\r|;L', {0x4, 0x9}, @value=@ver_80211n={0x0, 0x7, 0x3, 0x2, 0x0, 0x2, 0x1}}, 0x400, @default, 0x204, @void, @void, @void, @val={0x4, 0x6, {0x2, 0x7, 0x6, 0xc47d}}, @val={0x6, 0x2, 0x9}, @val={0x5, 0xa, {0x2, 0xc1, 0x1, "1cd7c81086f4d6"}}, @val={0x25, 0x3, {0x1, 0x2c, 0x1}}, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0x1, 0x1, 0x6, 0x20}}, @void, [{0xdd, 0x9f, "33e7f0ff5cf1ff2c50abdabe89071eee08f4c511109d8216037b20a41536419ae957da240f17aa808718465387cfc1abc86a44291c962ae666511f6784a0678d5060de226372f8d5f701c8a315138488a704b8f474c4f4685175c9b6de9b1f83ea57fd1ab60208e4c4c997dd18a5f048e4dbac45341691b2b40ef8ca4e4903b090213675373039ecc01255d71b988475f3295a73008b2c1dd9a2b35be5e179"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xfc, 0x7f, [@link_id={0x65, 0x12, {@from_mac, @device_b, @device_b}}, @ibss={0x6, 0x2}, @erp={0x2a, 0x1, {0x0, 0x1}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0xf, 0x60}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x4f, 0x1}}, @ssid={0x0, 0x14, @random="76bdab096aa8638845b0568d2b114065afa9df73"}, @tim={0x5, 0x8c, {0xa3, 0x6d, 0xc, "38bc29804e20f7901028a49ebcdeef0f5bc756784f2fe8a768232621343ef271374af0e5864817609a41ec8645cd8f91231d389793570acc37e68d330e951b917866ca8932dd3e8a13bd0783d177c8358d23f768b155f8390e4830682890d5291d49757a29dabec98ae5228561467553663b60911870ee67583a94b1b3a6a0cc192d3aa9fc2c74e421"}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @ssid={0x0, 0x1, @random="99"}, @prep={0x83, 0x1f, {{}, 0x3, 0x4, @device_b, 0x10000, @void, 0x401, 0x7ce, @device_b, 0x100}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xd, 0x80, [@chsw_timing={0x68, 0x4, {0x8, 0x400}}, @dsss={0x3, 0x1, 0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x42, 0x7f, [@gcr_ga={0xbd, 0x6, @broadcast}, @link_id={0x65, 0x12, {@random="fc5ea4aadcd3", @broadcast, @device_b}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xb, 0xb9, 0x1d}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @cf={0x4, 0x6, {0x5, 0xff, 0x5, 0x1000}}, @dsss={0x3, 0x1, 0xb6}, @chsw_timing={0x68, 0x4, {0x6, 0x7}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1a8, 0x80, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x4}}, @tim={0x5, 0x66, {0x7, 0x2, 0x7, "0185ae939a282e68675f00b0e490701f2d43197ab63217684da83b6df78fadff8c3e7ad9f7e800d6afa600706daa527606a0f9509fbbba4b3552f763478b9d9c253d3778f4163203b88f378c6b8ecc840820587ce97f0a42afbb156339a006cd98ede4"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x4, 0x41}}, @link_id={0x65, 0x12, {@random="91e87d655eb5", @device_a, @device_b}}, @fast_bss_trans={0x37, 0x114, {0xa7, 0x7, "ada11a4f3dc8e1d288520487ea25d943", "3305d6cdcc882aeab04a9220d27a6ccec6cce49485b7561738d5d8c0081d32ba", "78b0a831f6bb0c2c05025077c12f236991926f6305814eb2c0e937e64a17b127", [{0x1, 0x10, "d680b7660470f87aeb781dcd056cf37a"}, {0x2, 0x9, "11e267880fa25bf06b"}, {0x3, 0x14, "20c2bf9f3a8c23f6cef0c8ca6ddb5ae1b82ba8b3"}, {0x2, 0x15, "6a7221f142a7e7dadf14bb7b665b5eafc014c977e3"}, {0x4, 0x27, "da08d212939b0be7f549405b73e37eed9064a21eaec7d004a8984a4a8ab26f2d969e22ae2cb221"}, {0x1, 0x25, "458752bff1a1342695003f8efff225ebc839d4bdf704d9e7339e78f3e7a5b5fb2dc6502793"}, {0x3, 0x26, "5ab72281c59a90dc8c4cec5d5e3688ff0e68ee611bdf68c2c65d7161dcb357cd1a50da506531"}]}}]}, @NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@challenge={0x10, 0x1, 0xe7}]}, @NL80211_ATTR_PROBE_RESP={0xa7, 0x91, "cad12622ccece754031d91f744d147255f613d506a2511d52cfefcfd618195bfd3811f5c192f39d3ee25c5223cf3fbeb504c407ba79cca82f6ee8011b599fe5e068e850d59b6588cad9d2b1097a711e5fa696234c317d3059a5059a906e88bc4a52c9a939f78297746e0e03090b86873ffe6b787e74b0bd8c209a9c13a9c7c54a09cb76113ddcf8d4b1eed5300bf344b3436e770c7eae821acd12567bbe9ae50eb8b01"}, @NL80211_ATTR_BEACON_HEAD={0x457, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xf}, @broadcast, @device_a, @from_mac=@broadcast, {0xa, 0xc}}, 0xc, @default, 0x0, @void, @void, @val={0x3, 0x1, 0xb3}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x0, 0x1, 0x0, {0xa, 0x4, 0x0, 0xb, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x800, 0x3, 0x6}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x43, "aeaf8ff0d2a0bd4c2324f0bf7aad65ee4f06890cdfcff0828c81243d932069e131703b5ef985c848fbc7c07223906481ceef37b14577c7a1e18e4b4946677351b0325c"}, {0xdd, 0xf5, "780d419bfe69cb51e760ef6acf6afba87b116a2927d01830b0dd58cdb129b91f21364a570ff1e6ccc3bb4c787568367a831933c085debc9ec78cf2fd3d4de804f86257aca8fc83900413013e65f31532da542729f2ce610be3de9e3345eb24c0246dc7101282299c29a1189795bc86f522d3fe195b3a43adb5588835afcef486134b42a64b8a01498a7c5bd530e4176f1eb725c94510c17f5a70efdadcb00ae060830dbbe66ef09d3d9576405da51ceafecdd3783b4a1a9dda82b9365cdef76350a73c7393882a884f4481bf84bceecf9e1eceb9e4c340990a7f1d88da7832a4f22c75876d748ad49c107dfcf2314d79977ee2fa26"}, {0xdd, 0x82, "9ebe37277ce44e70875e49f37345b2a99b37688337f75a6c987ff5cc5fa39665e586d819e2164adbd90cc9d29c27b6d0b7982863a5743362e05bd3c6abaf8d9e2ed7981b05c18724ce84d8680bba14a40f8e76db1eea1e0e6bb44c05fd938785d0afcea2c12b86aaa1880cbf8928d56e32cfb5bf1b5278bffe948770b683d2016ab4"}, {0xdd, 0xb2, "f091d759dfaf448aaf771d3085ff37fb059aa5bcdb977fada405b2272e9bc699a2ceca622113f3eac1f5acf9a2eca12adfdd73cd8961f16b8fafed01dafc6c762c348daafc231f85bd1ac391c9d8d008612ca8141b667a887fb4705b2565fde892bfc68ca49d81090240fd3117417db96a72846f17b8e04488e83fa6aa277dccf676eebb936b62439d7fb674edc611014e3db0dbb3cc72bcbe448c044ae6f8740a9718b9bca3e68cd951fb54348c6225c1e5"}, {0xdd, 0xae, "8dee10304720b1e90864c29efafbabdc239338ce40f21ffdc7cfcd4a394ec6af1223b1522188f6c0c1d3e531d9961bad4f4b6fc8e56fe5c0199e0dbdd301bc0bb13390a158864c8a9d67e9d4719af648eb96619d5096bcb72cfc85636b15f18d9f3523474e3fa923823d84e40a930713883f7b31340ac5286c01baafd5a81f8a4b06c14bccd88a97d5328d4e9f02e095997474942cd98f1a719128fc225760a9157f5ac86bd01b1afe889ffce83f"}, {0xdd, 0x10, "b1048ac93eecb6fa95e10002dd7db16e"}, {0xdd, 0x16, "829a6e21f11d2ec34ad3077cd29f4e342526d41dea85"}, {0xdd, 0xb5, "75bc8f0ca6ac5d3a5a382e2323f0f9b18e58182660fae74793d086096bb562d93637877587a9cc725b7b72bd66da5866d767d3edfb639a05e3312ee5fb950f18917a8ed64a5a3877dfb1572444b41bbbc1ad10a2856964fcbdbf5e43f9ca409d7216117aaeef052ecaf5bedafcb45898ad0d85de4e5b4772101e75ee43db1c3752f6c90e9746ef3b7e6e55d332be0c873999c9f5abf038ec5dce20ffa128a2f27547541986d303b705b994cb2e2c405976302b49d5"}]}}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x2c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x8, 0xa2a, 0xffff, 0xd, 0x7]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x400]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x7, 0x7, 0x4, 0xf, 0x7f, 0x3]}]}]}, 0xe20}, 0x1, 0x0, 0x0, 0x24004040}, 0x40000) ioctl$SNDRV_PCM_IOCTL_PAUSE(r3, 0x40044145, &(0x7f0000003600)=0xa8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000003640)) fsetxattr$security_capability(r7, &(0x7f00000036c0), &(0x7f0000003700)=@v1={0x1000000, [{0x4, 0x5e}]}, 0xc, 0x2) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000003780), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x3c, r9, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x20040000) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000038c0)=@generic={&(0x7f0000003880)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000003b80)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003c40)={{r3, 0xffffffffffffffff}, &(0x7f0000003bc0), &(0x7f0000003c00)=r3}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003d40)={0x6, 0x1e, &(0x7f0000003900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001}, [@map_val={0x18, 0x5, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0xfff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x41}, @exit, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000003a00)='syzkaller\x00', 0x6b39, 0x8e, &(0x7f0000003a40)=""/142, 0x41100, 0x13, '\x00', r5, 0x25, r3, 0x8, &(0x7f0000003b00)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000003b40)={0x1, 0x3, 0x8b, 0xf}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000003c80)=[r3, r11, r3, r12, r3, r3], &(0x7f0000003cc0)=[{0x0, 0x5, 0x8, 0xc}, {0x1, 0x2, 0xf, 0x6}, {0x0, 0x1, 0x6, 0xa}, {0x2, 0x5, 0x5, 0x2}, {0x5, 0x5, 0xe, 0xb}, {0x1, 0x4, 0xa, 0xa}], 0x10, 0x3}, 0x94) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000003e40), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000003f00)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x2c, r13, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x80) syz_open_dev$sndpcmp(&(0x7f0000003f40), 0xfffffffffffffffb, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000004000)={0xdc7, 0x48f, &(0x7f0000003f80)='\x00', &(0x7f0000003fc0)="e8f6d92f51f86fb1f07866094f699b2f3480e358df72d76c06c74f8d4c1543c3725ce35361650caafe99faa5", 0x1, 0x2c}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000041c0)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004180)={&(0x7f0000004080)={0xec, r2, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0xb}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0x25, 0x5b, "9409944d6960f73e48ef134282f6632e5a1ecefd3cc7eba55a778dc2141788d231"}, @NL80211_ATTR_FRAME_MATCH={0x2b, 0x5b, "77ac2b738c6a164513667846da708cc12eae54dcc2f69d0b3f64f9125d01983fa9344e7fb49a5e"}, @NL80211_ATTR_FRAME_MATCH={0x58, 0x5b, "a60a720773aead1587bdd4ae77edb09073857e4986990a1871bbfb78f75c19ce99fd32b4f328f55fba4b8cbc8d74bb349c43c67ba8c53d7851c48eace125d52d297672226f0bba04febdac8898dd3b1e8f8db338"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}]}, 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) r14 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r14, &(0x7f0000004200)="afec1ed2f6805dd8be069dae650d79fef0ad8fe22a57aedc1a92b835826965605fed663075b3a40a6c7eddf45ec9bfef37a64227f1faa78bc7dd5e6766e95992b0f817595aa5ef7853a2c4ce27df690c5da0b65f022f98a0b58056bcfb820ddf9c9a7ba0b6b9ea7bffe256fb6105e98f0ed8ee56e9cbea59dddd622a48fb78b8439061a1525e88", 0x87, 0x60080b0, &(0x7f00000042c0), 0x12) 5.489648968s ago: executing program 0 (id=530): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc458}, [@IFLA_PORT_SELF={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4604}, 0x0) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(0xffffffffffffffff, 0x6f2d, 0x3) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000200)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000880)={0x1, 0x5, 0x7fffffffffffffff, 0x400, 0xfff, 0x5}) syz_emit_ethernet(0x204, &(0x7f00000001c0)={@random="732a44cc89be", @local, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "a04b37", 0x1ce, 0x6, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, {[@srh={0x87, 0xe, 0x4, 0x7, 0x26, 0x48, 0x44, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @fragment={0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x66}, @dstopts={0x3c, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0xff}, @pad1, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0xe31e}, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x20, {0x0, 0x6, 0x9, 0x400, [0xd521, 0xfffffffffffffff9, 0x8]}}]}, @dstopts={0x26, 0x6, '\x00', [@ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0xfb}, @pad1, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3f}}]}, @fragment={0x87, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x67}, @dstopts={0x2b, 0x4, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x0, 0x8, [0x7fffffff]}}, @enc_lim={0x4, 0x1, 0x73}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xff01}, @pad1]}, @fragment={0x21, 0x0, 0x3, 0x0, 0x0, 0x1f, 0x66}, @routing={0x3b, 0x6, 0x2, 0xf0, 0x0, [@mcast1, @local, @ipv4={'\x00', '\xff\xff', @broadcast}]}, @dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0x8}, @pad1]}, @fragment={0x5e, 0x0, 0x3, 0x1, 0x0, 0x7, 0x65}], @payload_named={{{{{0x2e, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x2, 0x9, 0x0, 0x1, 0xf, 0x3, 0x2, 0x9, 0x9, 0x4, 0x4e22, 0x4e23}, 0x1, 0x1}, 0x0, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, &(0x7f0000000440)={0x0, 0x3, [0xf06, 0x6c6, 0x91e, 0xbda]}) 5.439707509s ago: executing program 0 (id=532): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32], 0x48) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)={0x0}) mkdir(&(0x7f0000000000)='./my_sysfs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./my_sysfs\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000500), 0x4, 0x10) pread64(r2, &(0x7f0000000600), 0x4, 0x40) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f0000000240)='./bus\x00', 0x34117e, 0x44) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0d0000000400000004951f000c00000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000005c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:02.0/msi_bus\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='0', 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1715, 0x4b7bc}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) setns(0xc9, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14}}, 0xa4}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r8, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0x4, "14655b50"}, &(0x7f0000000180)=0x2c) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000640)=@vmx={0x101, 0x0, 0x2080, {0x30000, 0x3000, {}, 0x1, 0x6}, {"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", "f25a83bf728b338acf82f9ed7bbe36f9425856ce0fe5cbe3776723abe8554c41be9c9a35682ffccb000c1b01766b98baffe8c4328f4fc489699bdc3fdf7fbcc748f9c720280a7cd8815d3296fa7faebb924b2faac7c9b21c8fa1e3b5d8ac3631449daadb91890a922a78903711c6b8a7d2763824ac03dc05b49df6f271e06600bd765f3c085329774a504722260c0145a762b64d3fb474bcb2326ece4280dcc7bcfc92f619e5e4f56bcbd0d4442fac726a88bf342ffcc99dfd2109fb157a672ddf1a00b2e7af2ac5606acc11061e3047ca8bf101159960082145712fe71334afee199e30a527d9f5da7f23658d28b07208fa191d455f0952860a96edb5e71fcc16a416b54459eaa6dcf8a60d0f6c8360994284748839c7370cfb4d8388ada06445bcdb8930ed1b08ecde00dd86fdcb254952d865e293719838b782e4b238edd9d19c8c42e569536667ea0b80abee84d2ce21abba99f2ef3afff1003dd445d911f9e7b97b7da6cfdc45499382f4a575473deb41533ed28d922a25ffe69ea2c463dbd631b5bcddfdd6130bf0cea1ce75761513183dc8a137403fdac711a6cea4115d91d594133f0d3af8c9b60207fcc3551c95349b7418d6fdd5d6c744d9f3edc25eba145cf0be712734051947abc0a1fcbc2f81207da2d1c28b7ab602d01b2fceaa12d784ecccd27001457c15933e2a12404a3d0de39ba756158dd9a5b53d194ee1ed0d35d336f8e516d5bb0e4df46eaa38ab15a109f0cb3ed4a92fc76d454b378cc2e4e4ab054027d05809b62bc82ea6654af416242e709a585f5259095885265d8a1a7b11857c9176c819a58cd2ae18829e4a90f0b76462834091158dbc6e772c51e11e45cc7cbfbcf8df7cfb0b3e1b694fb5c9604889474369f57cd841e733e4d821aa823a9e8e9f45277551375dc44b9f08c10480666771f04bcf4e5e96bd70dc3440474479b99e7171c1905589365d8d3c9c5dc65b9cdbdb7f8fae3d2d07f2c670c6247eaa0175650ed90a919bbf3897dec15fccc325c42af78a2711c15e731c6c8a73a7191c13d29cdc0fd161d73060601738618884a26f13bf966f06e70fd34056f3c7911322e5621dd462b084d7a0223c329dd4f5071fd0d088b4214ec4395efc5133b62ba8a1ba3be59e8c16c27ec3fa7e0b0d626c4187f1ca5f781dbf047a9a3dfe244a1a7cc4e081b9ca8e2176a85fdb1bd8039b0db6ce8dab9fc4bc99548fe9da5e415a2a4da081101d07bab0c669580d0489bb097b67299b7084d844d8e5b77c51762543467b7aa4673186bc3d033df4d3d645212ad9ad3f102e60d8e2ee2a57e6ce527d71f6bed33064df1b96ce33367ec3009eae45076a66831d1709ba432ca2a1e66f5e733423856bf33319af98b211d426744cac7bcff576966a4c9a9e5da2d730b5f999599c88d6728b59342babe758f6dbe343aab3e3bf6905f47456469b804e59721abb59c4227c436eb46ec9c566eae9293c10c1240e3eecfd12faa3c408fa20667b912ab1de7d455adb9f23f642a55fa48a56156c37289a02afc6507b0fa7e9561b2ff572b967fc115d36e55539d8f3217a1d9a08ab7b2eac7c96d300eed8571b04c2fb55d870d23b5d80b51833ea8af1bbe5cd47a9ca9e95716f9835d4e1c5bfa7305841d5cecc5afd132717a9d6789d4fd3ffcac4bba0384f89ba854a9f5fc7b6ac5b5893cdab68d2a58fb96a0ee392ffb32c4b5cb6c13adc9ab0f63a718a1aa9514585cfd3d2e06a02cd73e60adcec36b51c57694314de9cea3641b01a4ee99de3d99441169f2b511b05c413c87b8548f7ef5af8b2a7cca078a46586ca679d749834ea404ce861b7e9ed09933219cb3accf8c334ceac815da61dae5cdebec88932f2ab8e8d528925fae9d0cd82b93f0a14423cb35cb7ec9c9789b13b114fd51e7ebba8ed8a35dc818ca7520525c7f8771e3a10f5dcce1fe04c9d6bde196bc9070ea928a4b9e4491a12cecf8d9137e0c1d4a5c5d75972e30a278d98137c7dfba11669b68a06a97501da496798fc377131259b581e099e8eeb3a6400146a61bd2157552d54624b20152c223b52ad04d014945c84140fd034050d7c2b92ea9f39b244edf24445c1ca5d14abb897e65443992a515866db1c4ddd2680181b90be0d87d2442797ddf407f419f88d56a802d417903971431b27543a14497500d7f71c102478ada4dfffb808575560e57fdc54c9e7ba411d44de5354eb029da24644eef2af18a43f03c32217c8f3b84db98196f93f2c8b042b1528fbb0531efb796a1135e5f885e7663f7656a28cfd0881acd02477f0d663464f5859c5fb5bc1ceea2de361487721b701dd5dcc49b06681dd74c3287425b9ce6bc2c7606caa6fb08879862178301cedc6aa0ba42a3d5f64f88ca38a6d84e67f7862ddfdeca69d7d51714924471576b9114a091ae6e097e76b509679725af04fb82490e86780bc07c638bb9e86176ae1577afea4a3ed9a2b1f731a770494229c8797992a6ea9ccbefdfd1911c7a02c66a5e0097e5ed0a1d61608ace699fbd4f33587d5a082cb33e5626ce2fa2338257066840afb4e2610b0ce328e9a3f22feea64ce8bdb38bf63b2f2c35fa6d3f1f73a9c479768c99f87d987f5094098b68818970539b7f344d3537e945f74c47482f3850ddba27df4979fdef0db9c826d1e1c5180c3fc44de37ba64242cf160112f4ca7064146cf8e8edb9a24fadb247c45cd385f837a7ba68e244a67a6b5d303b20b5790bdb1303a2d28f0938ec85d2b8cd4da62419456654eae39160a5e335a0f1c5bfaef8450f1cc6476c98f84353df244d8f196a785c5f902b0735e40a11713d499d2365fb7f511f3e8880c60645d71dcc462a28c3cb66a1726c18a842d8e9acc128871e29107a504302e23b46ae5a9caf5911b6d7e723b0394385f0213ed5e20134ab4f7dbd47938b676013e7e3748f5a56c918726e111afea80767b8c8468c0b4c2e33793cfa6b7f58cedb0fe3acd13877a6d1880e52f45e60ec74d6830937d208c1e324449ecd627952599e6088fa947c02225187dcc8ebcee155449264c1dd459d8195c295d140f2e0ce7337d560d9ffbf144e471d4d3c98dd31280647f09f050277732c8600fbb43a6d341d82ec733534011cf2bb3973a2578874e4492cc4b3004ce925ee6fb7e5d8efb3496a05f74b4bfeae011c0b692592ad7fb56f4f32136bee057eb46d776749cd2655ae57e976032a20927a59a6d6fa98590814a3786cf06ccca9b1a62a3c94cf708130e132eef865d892f84f77579536ac9e09ebb14feab024d155aa6532ab1d25c033d1644a4321c7797dc407071158756e818a070a3103475c00c312305f77b10af20f0574ded51e05f8ea4b40f9eb4512aa172f491f8cce822bb464d92f461493c23c804f52ca0fe782f4f430a9049d20b79f62d52bb714c292d9ac04a8955764810b1eb5f3410d9bfdb50d86ed4e0d92ab7f3543764bbe36b4b5cc8d2cd6cc8097c170e29071abb061bdfa41bb86b47c3cbb4d50ff6be0566ca928816c2fbf46c60e34d0f2c48acc9194b20ab4fee0d63e24866b6fb8f796fed5adb8c354f5341242d52a5b03986e610913e1d2a70d518663d0e541262dc364f952efb3706b01d55259ac8645d31184a5479ae287f511830690e1d74d64f5593fbc104fd88a7bc2577adaba631c747180a1ab16b53e96fd8d7e97a03ea11898bc5c87cd27ae5c8c5dc02122f4cebdfd833f2ad89250aab7b3378c92f7f598664bed2d8c3089afaf4960410fe763e23254f7ead94084fa75c3713b9ed087577b0e5c644490f801b011e62bfd9e1525dd9171a37c615d9df08c574ce96c7e07f77d1dcc51ed21aa63e3f6dc24fe5a013b1316a9020359d5c869ca42d5b4c64a8dc4374cab49e73d76c1374f8340e3bd1f587819e6a0c224189343c252889720ade28792c92836b64710cf130fae0004e42b6e7af9fb6b3d34b147d791ce302e6f6ccd4e5f06b4804e099904f65e18e90ce89bba683864b43eaa1559f96f6bb1814c9b207aa5d15f277a41ecd0855e80f0c2655ebdcf8de9caf47ad6b8cfe1d0e1e8e7fb684d0aecfed70381c1d0d11b724f834710162fb30ff4cac09dff9e806427cfc3ea5923918bea923ff27b9aedd7ed93825438de839b60995af124c8c98ca787a3080f00c8cbda1dc46d565a051b72057dbcc9ff899bb72c172f44ea15e8efd1c11b3d7c4facf5f12622077276f231fed7a7a6ffcbb1933d0668e37075b5affc45ff16972c1248b92d0ce59c594f71f4d051386aaeccd9a652f698037696bb5d10af3e15433f37594713601494e5bb6964d0d6cae2357c5b9a913de4c4caa0a89b51c68bf2feb5a3e8594d8ea1ec59be78c50382e13b8b6a8860d6b475822569f7ea278f2ab2737b082e743c0d463357402f6b8c1f73add5b1a5d81c4d56ae7b38a3a303a02c902ec5da512e52e9f5daca9275ae9140dfcc44a7ff943614c52f46c78b2805055991411661112335abc2a25bdf6aa6981cdc798d5760e42d93fde35aeeb490db063b53be1d993a4a3e52ae5836a60e463a71be031e7ef2b17809d2955b167bd76be84f1bfdf2d7a9181aba637bd823f2e482942e17afd8b2ef604a483156af1521d43cfddcc5b2cabd8ad59674011cef8384480d843d1757abd64961494a2ac0a30593e10bcde118086ed981fcdc05df867442a391781c01f377cb4202712ec62c587098eb3f1fd7d149baaebb9c445cc8f879ad2f880c6613a669b2bc40f9b262daedd95483d3cdfa3f40a8ac4b97be0635dd80b5a4e9ffcdc620785611c327a7f3556fa5ecf078c51975340ee048517477b0941a8f9dbfa73439d156f5ec9ae9d4b2a2b0d8a12eb08f978f2c3f56af2ab38ab08222927fc0dc4d582d2e8220ea09bd0edbd851a692e2aba2e8d87f9545dcf413afee7b233239caeb631394e549cc339ed439e13244bf1ff0300000000000064eba8e570f68ebf503870d541e9514750fb90587c65661c48326b4e20fbe7cd551b696525a525092d4973cdcf70d57e1ae579958996d19930360d2d5d1ecca34d8cb21b6d0e9d97a06fe4c790bd0ac964a26087a5ed00b2f6241ce32b20332b1640960f4bfd42738c145d7ae9d15e6056f3978d78e6af407a22d5b0dd358c5c185dcdb1a8f2b1aee8ebdff7adf075d594da55a8a955932a6f73338574f83328483447aa7a121607b3bbff1defdf55cc10e22bc6bf77e20093d54382177f562459967365ac688a869cf0e46f1ca1a22d20efc9f78d5c700fba8d43ca23ff69bbf851b293ef021cb865ea698f50fb41bb75541f2c870fe0cdc3099f45464a19e6423231a4eb6619b76a510ca238011e342f75fedb402c21b37d46e2d9570eb1e91cc70ad231bb439cca337c79fe84b023ae2faf0e090acf0a8d97aa5831768bb5b001d5a4ac0933fbefe29dcaa31ca3be632dba2cadeeb944cf5ef223f6d8e64dabdf9fecb59bf1a5360b8f0e3549630209e29cc2ba24aa9bdbcd252c732216df399ac50d07354a45550ec482bb0e8eca6dd43cde322ee04acdb5ac3cf014349f0eab5b16c8e1d1484a978620e73a803cb6fc2644278eadc0f26d8045ea7f67ef9f0962f228fadd7e2b57e5dfa9442e34b9a2d3b045505d941161aa605080ff7a397b3d68f36abf77941ca97544a335bfb65621b91f419a6ff953efeea798774bfc1d4efb27fb527de2326868f3e49644114fbc438ff46091aa2d477794e33aca3c519e25d74ef0f6364f2f05e8f8a981d7da4c243c5fe6fdcb57ba75ce5b54f25dad00"}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x12bc}, 0x1, 0x0, 0x0, 0x40000020}, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9b3e345ed7c577f5, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r0, 0x3) 5.386632604s ago: executing program 0 (id=534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) (async, rerun: 64) r3 = getpid() (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400074100000000000000000000000000000001050004000100000008000a00", @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioprio_set$pid(0x1, r3, 0x2000) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="d000b2f7", @ANYRES16=r2, @ANYBLOB="04002cbd7000fddbdf250f00000008000500090000000800050006000000280001800800050000000000080005000000000014000300e0000001000000000000000000000000480001800c000700080000000400000008000b007369700008000b007369700008000b007369700008000800feffffff0a0006006c626c63720000000c000700050000000c0000000800050000000000340001800800050002000000080006007772720008000b00736970000600020001000000080006006f7666000600020021000000"], 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x800) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x1, 0x8, 0x801, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x515}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x55d}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0xe8f}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40005}, 0x4000) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xcc, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x32, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffff6d3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb19}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000000}]}, 0xcc}, 0x1, 0x0, 0x0, 0x48004}, 0x20044000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff01"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8080) 5.316314626s ago: executing program 0 (id=535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x442260, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000380)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) syz_clone3(&(0x7f0000000180)={0x2381a400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0xa, &(0x7f0000000600)=0x0) r5 = syz_usbip_server_init(0x3) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r6, &(0x7f0000000480)=[{&(0x7f0000000380)=""/80, 0x50}], 0x1) r7 = fcntl$dupfd(r6, 0x0, r6) write$tun(r7, &(0x7f0000000400)=ANY=[], 0xa2) eventfd2(0xffff0000, 0xe6b47f44dd1b4614) io_submit(r4, 0x7, &(0x7f0000000c00)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f0000000500)="5d1c59709a1ec663a4e5714c60b92c12bc1a47bad652df9d2b2a2015b638d6379bac3fb37beaa6e577e8967c18dc36c136367d75483e4438e7c327cce32a80825a35a45b21f65049a92ba027d54f72d63e052b1c6d283de28aedbc98e59b34dad0cbaf46a7d8623a98fd39e7aa6ee1c1076328371f7b3e2a36beaecb8172858bc87a2868d35141334f6e8b17107c206fea2ca4935901d8b5a142c605e56037dfb62ab8798059f4a305626597d67a9a58b47b3c021af95e4194a0", 0xba, 0x5, 0x0, 0x1}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x8, 0x3, r2, &(0x7f0000000640)="616e6205309e5575a37c2a2f7cb0b690bcebe68e6e0b63ed9c6766788371f9b1b4f5386733e3209f267d53f53e9ddc0924988b2d3f7ae1751ea98a932ef0c6dcdaaaffe1af05b80696b98da2fe63591f526ccadffceec10aad5cd4d293452ecbc2695db7a493ee547361fad1edc05f2859a0c3c1e7923bd54b0717949ec7ba31b3374449a2fe42e3b1afde94b0ee4d32240e0e0196d4f7c040b90b8b", 0x9c, 0x0, 0x0, 0x2}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x2, 0x4, r2, &(0x7f0000000740)="67ad14275249a7e345d507b3848f39b1268eb3a306e4d72a20e86751c9cf407d4230a044fd857b7ec49d629b67f12bea271c5405c50c97cd24090d4330ae51151c8d92e30e3bd4230f75b428cce8b13c310661bd65310fe64b2863eae6e13610cd18c56f329e69e1f96e479796e0ce94469ef128c1d52b61329b52890805729638e3013297fdab069b9b02571c76ac3f450aaf267b4753ae1e0ceaf2c8e3fe6f517693a29c2934cb3acde055e133dacb421ada0b91b1b88ba002f44c390102a37005d190e95686a314068073b380f5473127bdf6b7ae72c697742130e431f54b4c228f47091cf4ccb4785096ea16af7b9975a176502fc01c64", 0xf9, 0x9, 0x0, 0x2}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x5, r3, &(0x7f0000000880)="1e", 0x1, 0xe982, 0x0, 0xdbb42a6201511f76}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x100, r5, &(0x7f0000000900)="2381ff0314ee3e1296dd8bb3f8a33550a84c33bc05460f3a87d8cfd65c58f0062c71f755b11d34a57ea2de1e054a3e85386f7091dbd5be6460a29382c820bf0897018026323e01c219c343c115cdc9efbc4be01bdf37b0f688d8df84d4d5743b57a95c8f00e138609209e0dda8ff3b4117fcba78ccb6f4dacbc1e1be13ce46dd7b46422d2b218398ef13d09f5226bf8b8b54c732d4dd8023424875d1fe218d0b4db0e6be13958285eacb35b2a76a47e49ff564c820f533c9d2f2ec9e2e908d86575ad81eaae7252ccff9b1b3b07fb25179ecdc75c51616bcc836cc589825027767", 0xe1, 0x8, 0x0, 0x3, r7}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x8, 0x6, r1, &(0x7f0000000a40)="247a4c4e39a19ef52a05704e6ce31f5fbb5ca23d1f3c34273c45fcbdb6de3c5ad39395be545f2c334fb03b48bfa17710e29cc865f332411dfd87c66ee011e24744", 0x41, 0x1, 0x0, 0x3, r0}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x5, 0x5, r3, &(0x7f0000000b00)="11d65240bf8eaea54b71b5054aae7fcc2a3c1d408741ca8b79fbee513a6427e9a7e250c38c74d7b02680786de45e78e4b218f2431a2a2293ab721ca5ccdde29c7b049246c8a32bdd8baa2b83d869f1fcfe3c11be494b10e0cd5335f1ea0116b5a87fc6e5098f5efe8fb57b55b8c489d52cd5507903f62af346312a4c195826d947", 0x81, 0x3ff, 0x0, 0x1}]) io_submit(r4, 0x0, &(0x7f0000000100)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000002c0)={[0x35, 0x807, 0x0, 0x180, 0x9, 0x10, 0xf1, 0x100, 0x80, 0x2, 0x80, 0x9, 0x100, 0x9, 0x88000000000, 0xbdb], 0x41000, 0x3c4210}) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendfile(r2, r10, &(0x7f0000000100)=0x4, 0x6) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r11) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 5.207743727s ago: executing program 3 (id=536): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000080)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x4000000, 0xf, 0x40000060, 0x2, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000080)) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x4000000, 0xf, 0x40000060, 0x2, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) (async) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) (async) 5.107613135s ago: executing program 2 (id=538): linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xb}}]}, 0x38}}, 0x4000010) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0xfe33) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 4.978871408s ago: executing program 1 (id=542): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)=0x1) (async) ioctl$TCSETSF2(r0, 0x89f0, &(0x7f00000194c0)={0x40, 0x4, 0x10008, 0x2, 0xf, "a533b6aaf9f659ff35036bf79d8b4c22246305", 0x9, 0x9}) 4.840202997s ago: executing program 1 (id=543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x4a) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}]}]}]}, 0x2c}}, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r6, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xa, 0x2, 0x4, @generic=0x2, 0x7f, 0x7, 0x8}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x4048010) 4.188824247s ago: executing program 2 (id=544): socket$unix(0x1, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0xc, 0x1, 0x2, 0xd, 0x3, 0xb, 0x0, 0x5, 0x2, 0xa, 0xc, 0xf, 0x2, 0x5, 0x1, 0x6], 0x1, [0x2, 0x10, 0xf9b, 0x400, 0x1, 0x5, 0x81, 0xd, 0x5, 0xf, 0x0, 0x400, 0x3, 0x81, 0x2, 0x53], [0x80, 0x6, 0x8000, 0x3, 0xfffd, 0x200, 0x5, 0x4, 0x0, 0x6, 0x7, 0x1, 0x0, 0x8a9f, 0xbef, 0x3]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x40, "2672805d08bddb132dc95e721272c841047fdd2282f75e4898b70ce2247aead41a91ad258527f180cd536be2e32d318e3c3617996f99bebb1794f1c003c30928"}, &(0x7f00000001c0)=0x48) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={r3, 0x1, 0x1}, &(0x7f00000002c0)=0x10) r4 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export_path_with_very_long_name_to_increase_xdr_payload_length\x00', 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc8000000}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0xa, @private0, 0xfff}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000017c0)="d3", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='mountaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='mountproto\x00', &(0x7f0000000280)='udp\x00', 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x80000}}, 0x10) syz_open_dev$usbfs(&(0x7f0000000140), 0xd, 0x3501) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0xc5d116e9899720b9, {{0x42}}}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x1000000, 0x0, 0x0) 4.019705697s ago: executing program 2 (id=545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0xb9, @local, 0x6, 0x2}, 0x20) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x0, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) getsockname$packet(r3, 0x0, &(0x7f0000000200)) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r5 = timerfd_create(0x8, 0x0) (async) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000500)={0x0, &(0x7f0000000300)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x79}}, @nested_amd_stgi={0x17e, 0x10}, @cpuid={0x64, 0x18, {0x2, 0x7}}, @wrmsr={0x65, 0x20, {0xb8b, 0x8}}, @code={0xa, 0x62, {"c4425d8c7825c441fa5bc266ba4000ecb8010000000f01c10f0866ba2000ec0f20d835080000000f22d826440f0948b800000000008000000f23c80f21f835080020000f23f80f20c035100000000f22c0"}}, @nested_load_syzos={0x136, 0x118, {0x2, 0x3, [@nested_vmresume={0x130, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @out_dx={0x6a, 0x28, {0x1fcd, 0x1, 0xe}}, @wr_crn={0x67, 0x20, {0x8, 0x7fff}}, @nested_load_syzos={0x136, 0x20, {0x0, 0x7f}}, @nested_vmresume={0x130, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0xa3e, 0x7}}, @nested_create_vm={0x12d, 0x18, 0x3}, @enable_nested={0x12c, 0x18}]}}], 0x1f2}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000540)={{0xeeee0000, 0x80a0000, 0xa, 0x7a, 0x10, 0xa, 0xae, 0xfb, 0x5, 0x5, 0xb, 0x9}, {0x1000, 0xeeee8000, 0xb, 0x4, 0x91, 0x7f, 0x7, 0xe8, 0x8, 0x15, 0xda, 0x2}, {0x20b000, 0x200000, 0xe, 0x0, 0x1, 0x5, 0xff, 0x1, 0x6, 0x4, 0x5, 0xf8}, {0x8080000, 0xa000, 0x4, 0x6c, 0x0, 0xfc, 0xe, 0xe, 0x8, 0x5, 0xca, 0x3}, {0x25000, 0x26000, 0xe, 0x30, 0x1, 0x3, 0x2, 0x0, 0xd, 0xaa, 0x3, 0x80}, {0x0, 0x58000, 0x0, 0x9, 0x2, 0x0, 0xe9, 0xe, 0x10, 0x4f, 0xd, 0x50}, {0x0, 0x3000, 0xe, 0x4, 0x9, 0x10, 0x1, 0x0, 0x9, 0x4, 0x2, 0x2}, {0xb000, 0x26000, 0xc, 0x6, 0x8, 0x77, 0x9, 0x1, 0x2, 0xa, 0x6, 0x9}, {0xfed00000, 0x4}, {0xeeef0000, 0x6}, 0x1, 0x0, 0x40000, 0x40401, 0x9, 0x800, 0xdddd1000, [0xffffffffffffff0c, 0xfffffffffffffff8, 0xfa, 0xec4b6f2]}) timerfd_gettime(r5, &(0x7f0000000000)) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c}) (async) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) (async) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) (async) r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x20200) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r8, 0xc008551c, &(0x7f0000000080)={0x0, 0xc, [0x9, 0x3, 0x8]}) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe4, 0x40, 0xfd, 0x0, 0x38, 0x1b}, {0xb000, 0x70000, 0xe, 0x0, 0x9, 0x5, 0x7d, 0x0, 0x58, 0x3, 0x3, 0x1}, {0x2000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x22, 0xab, 0x5, 0x46}, {0x30000, 0x7000, 0x3, 0x1, 0x4, 0x43, 0x9, 0xfb, 0x80, 0xa, 0xd}, {0xa000, 0x9000, 0x10, 0x2, 0x3, 0x7, 0xab, 0x7f, 0x4a, 0x83, 0x2, 0xe}, {0xdddd1000, 0x40000, 0x8, 0x20, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xfb, 0x1, 0xfd}, {0x1000, 0x2, 0x4, 0x85, 0x7, 0xff, 0x7, 0x0, 0x5, 0x81, 0xff}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x5, 0x3, 0x7, 0x19}, {0xb000, 0x4}, {0x4000, 0x7fff}, 0xc0040065, 0x0, 0x231d7000, 0x452025, 0xb, 0x1, 0x3000, [0x683ffffffffffffe, 0x3, 0x80000004, 0x5b3]}) 3.94981521s ago: executing program 2 (id=546): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffa0900010073797a30000000002c000000030a01010000000000000000010000000900030073797a31000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004801c0001800a0001007265646972"], 0xc8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x4}, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x54}}, 0x20008014) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @multicast, 'ip6tnl0\x00'}}, 0x1e) write$selinux_load(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="8cff7cf908b1bb66009d387f00005345204c69"], 0xa) r5 = syz_open_dev$vcsa(&(0x7f0000000180), 0x83, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x3f7, 0x13500, 0x0, 0x163}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r7, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r8, &(0x7f0000000400)='algo=zstd \"', 0xb) setsockopt$packet_int(r5, 0x107, 0x11, &(0x7f00000001c0)=0x4, 0x4) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r10 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r10, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 3.900189087s ago: executing program 1 (id=547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x4000000, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) fcntl$getown(r2, 0x9) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) r5 = syz_open_procfs(r4, 0xfffffffffffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b00000004400010029bd7000040000000200000004004880900001"], 0xb0}, 0x1, 0x0, 0x0, 0x801}, 0x4008094) read$FUSE(r3, &(0x7f0000004240)={0x2020}, 0x2020) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) r7 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$uac3(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000002300)={0x14, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f00000022c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002600)={0x44, &(0x7f0000002340)={0x20, 0xc, 0xd7, "7786834c84751c9b22a0dc889150b7b7ffd66dc41556c80f60804e1d673dd11a14fff684abaac87adba5fcebb3c3a93743be60219d9601941ae26dd907dd998ec78a3f1c20211ad0bfdcbc9723c77ceef46b159760f90f71005b49e9f32bc2e80e2ae618fa660c6b629a1469900982eb7973e6001e3ffa0b6ab15e8ae23f3c4007aaaa39031894c39280ed6dc97c55e66a8d5d880f572dbb904469e2b0bf0d84164154672573c71afc33610064e8460759f0a2b5780f4eec9980e45069054684de9a38591f8c5b8e2fce95580652ef1d1ae9d9ab6485e0"}, &(0x7f0000002440)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000002480)={0x0, 0x8, 0x1, 0xa7}, &(0x7f00000024c0)={0x20, 0x80, 0x1c, {0x5, 0x62dc, 0x200, 0x1, 0x3, 0x81, 0x1dc, 0x4, 0x7, 0x3, 0x9, 0x4}}, &(0x7f0000002500)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000002540)={0x20, 0x83, 0x2}, &(0x7f0000002580)={0x20, 0x87, 0x2, 0xba59}, &(0x7f00000025c0)={0x20, 0x89, 0x2}}) write$char_usb(r8, 0x0, 0x0) ioctl$CDROMREADAUDIO(r2, 0x31e, &(0x7f0000002140)={@msf={0xef, 0x2, 0x4}, 0x0, 0x0, 0x0}) 3.847497218s ago: executing program 2 (id=548): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r0, 0x400, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x2d, 0x107, 0xfffffffe, 0x2000001, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c855}, 0xc800) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r2, &(0x7f00000024c0)=""/209, 0xd1, 0x8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x500, 0x100) fcntl$notify(r4, 0x402, 0x34) fcntl$notify(r4, 0x402, 0x18) close_range(r3, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x48, "48c879", "88849a9fe7f96c3c87a23ae56a6d972e6fd038b1ee68cc519ea7f787106b24719f76563e0799632b231841067e03cb07d4bf7314ec7d639b5a6d0a344df27997f3fff172cadd2f107912150536224d5a0dc04ecaf7fd6e311e8ce6543f5872bb4139761b43b1961c8aced7831510c2040df49c57ec5bb410adc044e90507a818465ab016b9267b09bd8d4b852633f67061e3ad83e906d8917fe6b88f4ac374dc0170c8b5b720441092545f4663a939951266fe66f23baaad347fa7f0859fa57e9734e97333f4b0c616dddcdc5357e9dab467b12047a3d240e370160ad3c3808ff724125dfc8d2ccb37cf9b57ae333ebb98bf9df6e726218ebed13c56181e43a9"}}, 0x110) 3.730112949s ago: executing program 0 (id=549): r0 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/vhci_hcd/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='vhci_hcd.0\x00', 0xa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r3, &(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000200)=0x2, 0x4) close_range(r3, r3, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)="3a822d6f0306bc598a25fbf98ce3df61eddbb19384ec19a1b8cc10cf952b7536e16239cb61c3ba224865dadc4b1088ed0ce5c9ede116bbde6c3a8329413526b61ec377c0f2833a31b0ec1819ae320ead44ca256a14c3c29f6fea826ce6dfcdbde79656574caca7d33f43358c1f09d1809f0fc894ad8dc2339e2acbd7b63580ad7b88bc00000000000000", 0x8a}, {&(0x7f00000005c0)="3c977216b675039a1d3cb9920fbde265b9fde5b6e2b783b007b86348fe27ba25eb95bb5c4801fb54160e8dc5a2dda4a5874012f61bc684f2fea324e5ce4f463d183394e9f1a10d4617821b5e3ab4f2db20309495630dc4069c2e5abcf78f36372b95eb5f7a9ad2fdd2de8dc2b2b8005b1c693326ee358c3ce5f07cc2a060b56dc4d32eda82d690deb953f171dcb504e13d612bddbf039175912c87bff251ecf18ab5fe4568d1219b6b424d0af0b117b73a8ad2c67c8e3597bcba5a86b20b1f3f657ced3bf6d67479cac4f1a1f9b67512acad7521711c33", 0xd7}, {&(0x7f00000006c0)="299b0c039d86bff86edd7b6de6dde7fadb86888a410060def3174d4d4ba1cf8c4fdde03e83abbdf73e695f165346a78d8d79108d9b516d9abf09a136ab52d0e19dfb2f00bb046d00000000001b000000000010000000", 0x56}], 0x3}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="9d70b2a7c34e6a7f3116cfa2b021c3136e6530cfe2b242564adf52d96187131c30b12cada737", 0x26}, {&(0x7f0000000100)="7b4bcc9089864d85e764b6bba256e6af91e69ae71ffef7df313e92c30fed65dae5961c2c163fb13606ee96db7249efdb195eb6cbc8462a0b7df5e9a2f2555d3959af1ca406f89e87409474f6c69230cbc89e4052b59bf2d40986e6547ee78b4c36db49a35f2949daa1dadcdb43d5cfb31839d3ce23eccf139ef9c2286a326d1ca5e18e449fe954cb9d33eb4e6761f41cefcaf0c88adc59a283c091f645fecade2b37c10bf3", 0xa5}, {&(0x7f0000000280)="02e6f3e048e65d33e396c2b739cf5b78f9dbc918cd90d3384c2ca9d13f9ad152d4bb2f24a81055e2dd62fdb07332640926c6c9f54896a6522cb14a6dcee80743e8fac9d9189acebddf920aabd09f4a9aa975877619996a34ff58778b57b6da8e8938b6bc82ad33f637cf60ae5fd21872cf134af66123e18917194dc67bffeff923960c500a", 0x85}, {&(0x7f0000000980)="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", 0x1a9}, {&(0x7f0000000480)="0aa732c38ba9f4ae98f8528cb4a558d6b836a04da29c5fabcb595bbb896d766f9073be7b0346b0ec225618bb72c878b4ac8e1cdadff66cbc6545652f2aba12fce7ee8fc1870ac0d6192d95cf39de108fbd34da90483f34083ffee7980365", 0x5e}, {&(0x7f0000000dc0)="128057c3ecdf99f18b48f0aae1987a57df52c3df6ef6655a29ada4e07fb82bc16b6d09acfd6561625554fabc92cec26138ba1e641d459b332d808d7d7acd57cf2abd209c59d2e676d3a25b109b1ded08377acc67fbd4015e03a13b9f761db934b988d34f45530b2bc710f89c2b0004f62a14c65f6c1a0c018bea98af07fa1dfeb41459930a71e9628b87defa7de243b58eb9eabdcfcedb666bfe5f", 0x9b}], 0x6}}], 0x3, 0x2000c044) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r6, 0x11, 0x65, 0x0, &(0x7f0000000080)) sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000014006600710653a68adca2d04464010101"], 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0), 0x3) 3.310125694s ago: executing program 2 (id=550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x7, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) (async) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x3, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4c064) 3.235747303s ago: executing program 32 (id=550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x7, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) (async) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x3, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4c064) 1.318363942s ago: executing program 4 (id=552): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@alg={0xe0, 0x10, 0x1, 0x0, 0x3, {{'aegis128\x00'}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x375}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004810) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) 1.129281778s ago: executing program 4 (id=553): socket$unix(0x1, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0xc, 0x1, 0x2, 0xd, 0x3, 0xb, 0x0, 0x5, 0x2, 0xa, 0xc, 0xf, 0x2, 0x5, 0x1, 0x6], 0x1, [0x2, 0x10, 0xf9b, 0x400, 0x1, 0x5, 0x81, 0xd, 0x5, 0xf, 0x0, 0x400, 0x3, 0x81, 0x2, 0x53], [0x80, 0x6, 0x8000, 0x3, 0xfffd, 0x200, 0x5, 0x4, 0x0, 0x6, 0x7, 0x1, 0x0, 0x8a9f, 0xbef, 0x3]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x40, "2672805d08bddb132dc95e721272c841047fdd2282f75e4898b70ce2247aead41a91ad258527f180cd536be2e32d318e3c3617996f99bebb1794f1c003c30928"}, &(0x7f00000001c0)=0x48) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={r3, 0x1, 0x1}, &(0x7f00000002c0)=0x10) r4 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export_path_with_very_long_name_to_increase_xdr_payload_length\x00', 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc8000000}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0xa, @private0, 0xfff}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000017c0)="d3", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='mountaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='mountproto\x00', &(0x7f0000000280)='udp\x00', 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x80000}}, 0x10) syz_open_dev$usbfs(&(0x7f0000000140), 0xd, 0x3501) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0xc5d116e9899720b9, {{0x42}}}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x3000000, 0x0, 0x0) 990.159636ms ago: executing program 4 (id=554): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8480, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0x6c, 0xffffffff) 988.206576ms ago: executing program 4 (id=555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000480), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x8, 0x8, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x4, 0xc}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0xa, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, &(0x7f0000000100)=0x3) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01080000000000000000050000000900010073797a30000000000900030073797a31000000004c000000060a010400000000000000000500000008000b40000000002400048020000180070001006374000014000280080002400000000608000140000000150900010073797a3000"], 0xc0}}, 0x4000094) syz_open_dev$dri(&(0x7f0000000240), 0x8, 0x258401) 889.902485ms ago: executing program 4 (id=556): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000080)=0x2, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020100090e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa"], 0x70}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xdd955b7}}}}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000003e08f0ff0000000085000000b4005400b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r6, &(0x7f0000001300)=ANY=[@ANYBLOB="10000000f1000300", @ANYRES8=r6], 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r7, 0x1) ppoll(&(0x7f0000001400)=[{r7, 0x2420}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 886.125904ms ago: executing program 1 (id=557): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r1, 0xc8a6}, 0x8) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f00000000c0)=[0x1, 0x4], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf}, @in6={0xa, 0x4e21, 0x0, @local, 0x4}, @in6={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, 0x2}, @in={0x2, 0x4e20, @remote}], 0x80) fremovexattr(r0, &(0x7f0000000180)=@random={'security.', '+(\x00'}) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000240)={0x3c, "a16da0850cdeb00a0acbca462bc4bf6676894bdf19a70b5de031c0deabd4cd84ad713fdd12b5bf9e7c6004b5462d15287fd4ee9111a1ca6d8b65b405b8cb6d604a1359fe292298b64e74f79007bf181054605eb50c306c67bb073edb3b502788047bac505fbc5091449da899e790af4930e1cf290bf36feae7cdd6ac29d24ef7"}) (async) ioctl$FE_READ_UNCORRECTED_BLOCKS(r2, 0x80046f49, &(0x7f0000000300)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000480)={0xe, 0xce, 0x0, 0x6, 0x3, 0x3, 0x4b, 0xf8, 0xd, 0x7, 0x5, 0x8, 0x2, 0x5}, 0xe) (async) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000004c0), 0x4000) mmap$qrtrtun(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x12, r5, 0xee92) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r6, 0x1) (async) ioctl$int_in(r3, 0x5421, &(0x7f0000000500)=0x6) r7 = open(&(0x7f0000000540)='./file0\x00', 0x412240, 0x8) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000580)={0x4, r2, 0x10, {0x4, 0x5}, 0x2f}, 0x1) (async) ioctl$UBLK_U_CMD_DEL_DEV(r7, 0xc0207505, &(0x7f00000005c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r9, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x7, 0x63}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000000780)) (async) socket$xdp(0x2c, 0x3, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r7, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x84, r10, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 770.119673ms ago: executing program 1 (id=559): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.controllers\x00', 0x300, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000002c0)={0x18, r1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x5, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r6 = fsopen(&(0x7f0000000080)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040']) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) 639.628809ms ago: executing program 1 (id=560): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000842000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r3, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r4, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @dev, @local, {[@routing={0x5c, 0x0, 0x1}]}}}}}, 0x0) read(r1, &(0x7f0000000300)=""/172, 0xdc) write(r0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wg1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x65b5, 0x0, 0x0, 0x0, 0x3ff}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @generic={0x8, 0x4, 0x4, 0x90, 0x7}, @ldst={0x3, 0x2, 0x4, 0x0, 0xb, 0xfffffffffffffffe}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x10}]}, &(0x7f0000000400)='GPL\x00', 0x10000, 0x8b, &(0x7f0000000440)=""/139, 0x41000, 0x20, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000580)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x0, 0x7, 0xab19}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000600)=[{0x0, 0x1, 0x1, 0x9}, {0x0, 0x1, 0x8, 0xa}, {0x0, 0x5, 0x1, 0xc}, {0x3, 0x3, 0x8, 0xb}, {0x5, 0xffffffff, 0xe}, {0x4, 0x4, 0x8001, 0x4}], 0x10, 0x2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) keyctl$setperm(0x5, 0x0, 0x30925) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f00000002c0)={'wg1\x00', 0x1000}) r8 = socket(0x2b, 0x5, 0xe7e) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$XFS_IOC_PATH_TO_HANDLE(r8, 0xc0385869, &(0x7f0000000840)={r3, &(0x7f0000000740)='\x00', 0x200000, &(0x7f0000000780)={@_ha_fsid={[0x5, 0x3]}, {0x5, 0x3, 0x2, 0x18}}, 0x4, &(0x7f00000007c0)={@_ha_fsid}, &(0x7f0000000800)=0x3}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='bond_slave_0\x00', 0xffffffffffffffff) r10 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)={0x0, 0x0, @c}, 0x29, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000200)='ceph\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r10}) 0s ago: executing program 4 (id=561): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0xfffffffffffffeff, 0x0) r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r0, @ANYBLOB="01002cbd7000fedbdf2503000000080001000000000064000780600001"], 0x8c}, 0x1, 0x0, 0x0, 0x4814}, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000180)={0x10, 0xfffffffffffffff5, r3}, 0x10) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@fallback=r6, r6, 0x2f, 0x2000, 0x2000000}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Bluetooth: hci0: command tx timeout [ 57.672824][ T5977] Zero length message leads to an empty skb [ 57.688749][ T64] Bluetooth: hci2: command tx timeout [ 57.769293][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.801975][ T5988] musb-hdrc pcspkr: error -ENXIO: IRQ mc not found [ 58.018602][ T5840] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.174578][ T5998] netlink: 596 bytes leftover after parsing attributes in process `syz.2.36'. [ 58.183855][ T5840] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.188154][ T5840] usb 8-1: config 0 has no interfaces? [ 58.190389][ T5840] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.193834][ T5840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.201532][ T5840] usb 8-1: config 0 descriptor?? [ 58.219598][ T6001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.225867][ T6001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.410649][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.712772][ T5995] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 58.715819][ T5996] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 58.775888][ T42] kauditd_printk_skb: 114 callbacks suppressed [ 58.775903][ T42] audit: type=1400 audit(1785445753.452:282): avc: denied { wake_alarm } for pid=6008 comm="syz.0.40" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.797131][ T42] audit: type=1400 audit(1785445753.472:283): avc: denied { write } for pid=6007 comm="syz.2.39" name="video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 58.829574][ T42] audit: type=1400 audit(1785445753.512:284): avc: denied { ioctl } for pid=6008 comm="syz.0.40" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10559 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.866349][ T42] audit: type=1400 audit(1785445753.542:285): avc: denied { read write } for pid=6008 comm="syz.0.40" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 58.866396][ T42] audit: type=1400 audit(1785445753.542:286): avc: denied { open } for pid=6008 comm="syz.0.40" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 58.923123][ T42] audit: type=1400 audit(1785445753.602:287): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 58.974340][ T6016] team0: No ports can be present during mode change [ 59.007697][ T6023] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 59.050540][ T42] audit: type=1400 audit(1785445753.732:288): avc: denied { mounton } for pid=6022 comm="syz.2.44" path="/6/file0" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.206707][ T5840] IPVS: starting estimator thread 0... [ 59.235796][ T42] audit: type=1400 audit(1785445753.912:289): avc: denied { write } for pid=6035 comm="syz.2.47" name="002" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 59.293875][ T42] audit: type=1400 audit(1785445753.972:290): avc: denied { read } for pid=6039 comm="syz.2.48" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.303895][ T42] audit: type=1400 audit(1785445753.972:291): avc: denied { open } for pid=6039 comm="syz.2.48" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.308233][ T6034] IPVS: using max 43 ests per chain, 103200 per kthread [ 59.368479][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.383883][ T6045] binder: 6043:6045 ioctl c0306201 200000000640 returned -22 [ 59.388303][ T2327] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.459707][ T1491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.538313][ T2327] usb 5-1: Using ep0 maxpacket: 8 [ 59.542301][ T2327] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 179, changing to 11 [ 59.545800][ T2327] usb 5-1: config 1 interface 0 has no altsetting 0 [ 59.551036][ T2327] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 59.554337][ T2327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.557543][ T2327] usb 5-1: Product: syz [ 59.559476][ T2327] usb 5-1: Manufacturer: syz [ 59.561515][ T2327] usb 5-1: SerialNumber: syz [ 59.689450][ T64] Bluetooth: hci0: command tx timeout [ 59.689592][ T5746] Bluetooth: hci3: command tx timeout [ 59.689658][ T5093] Bluetooth: hci1: command tx timeout [ 59.768281][ T5746] Bluetooth: hci2: command tx timeout [ 59.786877][ T1491] usb 8-1: USB disconnect, device number 2 [ 60.220386][ T6051] tmpfs: Bad value for 'mpol' [ 60.344209][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.504306][ T1491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.643365][ T6082] netlink: 'syz.2.54': attribute type 10 has an invalid length. [ 60.670820][ T6082] team0 (unregistering): Port device team_slave_0 removed [ 60.678467][ T6082] team0 (unregistering): Port device team_slave_1 removed [ 60.886737][ T6090] binfmt_misc: register: failed to install interpreter file ./file1 [ 60.999850][ T6096] overlayfs: overlapping lowerdir path [ 61.500065][ T5746] Bluetooth: hci0: unexpected event for opcode 0x2011 [ 61.603238][ T6144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=6144 comm=syz.3.67 [ 61.730893][ T6152] netlink: 60 bytes leftover after parsing attributes in process `syz.3.68'. [ 61.736123][ T6152] netlink: 60 bytes leftover after parsing attributes in process `syz.3.68'. [ 61.769115][ T5746] Bluetooth: hci1: command tx timeout [ 61.770137][ T64] Bluetooth: hci3: command tx timeout [ 61.797971][ T6156] netlink: 'syz.3.68': attribute type 32 has an invalid length. [ 61.801287][ T6156] netlink: 500 bytes leftover after parsing attributes in process `syz.3.68'. [ 61.848900][ T64] Bluetooth: hci2: command tx timeout [ 61.874235][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 62.109843][ T2327] usbhid 5-1:1.0: can't add hid device: -71 [ 62.114443][ T2327] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 62.129115][ T2327] usb 5-1: USB disconnect, device number 2 [ 62.139104][ T6184] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=104 sclass=netlink_xfrm_socket pid=6184 comm=syz.3.75 [ 62.244103][ T6189] block device autoloading is deprecated and will be removed. [ 62.335233][ T6196] netlink: 68 bytes leftover after parsing attributes in process `syz.3.79'. [ 62.397461][ T6207] befs: (nbd1): unable to read superblock [ 62.547190][ T6222] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 62.571515][ T1491] net_ratelimit: 4 callbacks suppressed [ 62.571526][ T1491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.846978][ T6241] vlan2: entered allmulticast mode [ 63.398216][ T34] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 63.431326][ T6265] overlay: Unknown parameter '/' [ 63.436561][ T6266] overlayfs: overlapping lowerdir path [ 63.526515][ T6271] Invalid ELF header len 18 [ 63.569524][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.573009][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.573025][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.573047][ T34] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.573059][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.576206][ T34] usb 6-1: config 0 descriptor?? [ 63.608674][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.699772][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.736701][ T6281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.106'. [ 63.785985][ T42] kauditd_printk_skb: 120 callbacks suppressed [ 63.786008][ T42] audit: type=1400 audit(1785445758.462:412): avc: denied { write } for pid=6282 comm="syz.2.107" path="socket:[10171]" dev="sockfs" ino=10171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.802666][ T6281] netlink: 1 bytes leftover after parsing attributes in process `syz.0.106'. [ 63.806762][ T42] audit: type=1400 audit(1785445758.482:413): avc: denied { map_create } for pid=6277 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.814313][ T42] audit: type=1400 audit(1785445758.482:414): avc: denied { map_read map_write } for pid=6277 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.860477][ T6291] netlink: 'syz.3.109': attribute type 39 has an invalid length. [ 63.937752][ T42] audit: type=1400 audit(1785445758.612:415): avc: denied { bind } for pid=6282 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.945180][ T42] audit: type=1400 audit(1785445758.622:416): avc: denied { setopt } for pid=6282 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.969014][ T42] audit: type=1400 audit(1785445758.652:417): avc: denied { unlink } for pid=5737 comm="syz-executor" name="file0" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 63.994685][ T6256] netlink: 'syz.1.98': attribute type 10 has an invalid length. [ 63.999505][ T6256] ipvlan0: entered allmulticast mode [ 64.001196][ T6256] veth0_vlan: entered allmulticast mode [ 64.008273][ T6256] team0: Device ipvlan0 failed to register rx_handler [ 64.028425][ T34] usbhid 6-1:0.0: can't add hid device: -71 [ 64.028464][ T42] audit: type=1400 audit(1785445758.702:418): avc: denied { append } for pid=6298 comm="syz.2.111" name="pmem0" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.031472][ T34] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 64.047743][ T34] usb 6-1: USB disconnect, device number 2 [ 64.101769][ T42] audit: type=1400 audit(1785445758.782:419): avc: denied { append } for pid=6302 comm="syz.3.113" name="001" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 64.119229][ T42] audit: type=1400 audit(1785445758.802:420): avc: denied { create } for pid=6298 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.134268][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.137515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.427574][ T42] audit: type=1400 audit(1785445759.102:421): avc: denied { listen } for pid=6310 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.645247][ T6324] openvswitch: netlink: IPv4 tun info is not correct [ 64.650135][ T1491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.652629][ T6326] netlink: 'syz.1.120': attribute type 2 has an invalid length. [ 64.653630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.666035][ T6326] netlink: 'syz.1.120': attribute type 2 has an invalid length. [ 64.674786][ T6326] netlink: 'syz.1.120': attribute type 2 has an invalid length. [ 64.678246][ T6326] netlink: 'syz.1.120': attribute type 2 has an invalid length. [ 64.681745][ T6326] netlink: 'syz.1.120': attribute type 2 has an invalid length. [ 64.685128][ T6326] netlink: 'syz.1.120': attribute type 2 has an invalid length. [ 64.688992][ T6326] netlink: 'syz.1.120': attribute type 2 has an invalid length. [ 64.692444][ T6326] netlink: 'syz.1.120': attribute type 2 has an invalid length. [ 64.723771][ T6332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.122'. [ 64.730467][ T6332] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 64.968386][ T5746] Bluetooth: hci1: command 0x0405 tx timeout [ 64.981409][ T6367] process 'syz.0.132' launched './file0' with NULL argv: empty string added [ 64.996979][ T6367] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 65.003634][ T6367] VFS: Can't find a romfs filesystem on dev nullb0. [ 65.003634][ T6367] [ 65.014694][ T6371] MTD: Couldn't look up '': -22 [ 65.016291][ T6371] : Can't lookup blockdev [ 65.156286][ T6382] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 65.173802][ T6382] dummy0: entered allmulticast mode [ 65.177267][ T6381] dummy0: left allmulticast mode [ 65.203263][ T6394] xhci_hcd 0000:00:00.0: init 0000:00:00.0 fail, -16 [ 65.205403][ T6394] xhci_hcd 0000:00:00.0: probe with driver xhci_hcd failed with error -16 [ 65.300676][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.319416][ T6409] vhci_hcd vhci_hcd.0: remove, state 4 [ 65.325456][ T6409] usb usb38: USB disconnect, device number 1 [ 65.350229][ T6410] ceph: No mds server is up or the cluster is laggy [ 65.356763][ T1491] libceph: connect (1)[c::]:6789 error -101 [ 65.360657][ T1491] libceph: mon0 (1)[c::]:6789 connect error [ 65.381476][ T6419] tmpfs: Bad value for 'mpol' [ 65.407176][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 65.416508][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 65.420233][ T6421] syz.1.148 uses obsolete (PF_INET,SOCK_PACKET) [ 65.450357][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 65.452902][ T5841] vhci_hcd vhci_hcd.0: release socket [ 65.455296][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 65.459401][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 65.462095][ T5841] vhci_hcd vhci_hcd.0: release socket [ 65.464529][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 65.475627][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 65.477377][ T5841] vhci_hcd vhci_hcd.0: release socket [ 65.479170][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 65.480957][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 65.482516][ T6410] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.482609][ T5841] vhci_hcd vhci_hcd.0: release socket [ 65.488216][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 65.490127][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 65.491901][ T5841] vhci_hcd vhci_hcd.0: release socket [ 65.493603][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 65.495523][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 65.497233][ T5841] vhci_hcd vhci_hcd.0: release socket [ 65.500890][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 65.503489][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 65.505140][ T5841] vhci_hcd vhci_hcd.0: release socket [ 65.506832][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 65.508759][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 65.510569][ T5841] vhci_hcd vhci_hcd.0: release socket [ 65.512333][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 65.514303][ T6409] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 65.522072][ T6409] vhci_hcd vhci_hcd.0: remove, state 4 [ 65.523784][ T6409] usb usb37: USB disconnect, device number 1 [ 65.549561][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 65.551291][ T5841] vhci_hcd vhci_hcd.0: release socket [ 65.553002][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 65.554967][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 65.556690][ T5841] vhci_hcd vhci_hcd.0: release socket [ 65.560215][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 65.562280][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 65.563882][ T5841] vhci_hcd vhci_hcd.0: release socket [ 65.565748][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 65.568907][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 65.571306][ T5841] vhci_hcd vhci_hcd.0: release socket [ 65.573543][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 65.576870][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 65.579098][ T5841] vhci_hcd vhci_hcd.0: release socket [ 65.581067][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 65.582957][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 65.584988][ T5841] vhci_hcd vhci_hcd.0: release socket [ 65.586155][ T6410] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.586898][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 65.592593][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 65.594572][ T5841] vhci_hcd vhci_hcd.0: release socket [ 65.596626][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 65.599840][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 65.601852][ T5841] vhci_hcd vhci_hcd.0: release socket [ 65.603772][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 65.605730][ T6409] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 65.616369][ T6411] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller [ 65.622626][ T6411] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 37 [ 65.625851][ T6411] vhci_hcd vhci_hcd.0: created sysfs vhci_hcd.0 [ 65.629943][ T6411] usb usb37: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 65.632839][ T6411] usb usb37: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 65.635380][ T6411] usb usb37: Product: USB/IP Virtual Host Controller [ 65.637383][ T6411] usb usb37: Manufacturer: Linux syzkaller vhci_hcd [ 65.641137][ T6411] usb usb37: SerialNumber: vhci_hcd.0 [ 65.659908][ T6410] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.659928][ T6411] hub 37-0:1.0: USB hub found [ 65.667642][ T6411] hub 37-0:1.0: 8 ports detected [ 65.686629][ T6411] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller [ 65.695166][ T6411] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 38 [ 65.699342][ T6411] usb usb38: We don't know the algorithms for LPM for this host, disabling LPM. [ 65.703004][ T6411] usb usb38: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 7.02 [ 65.705997][ T6411] usb usb38: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 65.708735][ T6411] usb usb38: Product: USB/IP Virtual Host Controller [ 65.710938][ T6411] usb usb38: Manufacturer: Linux syzkaller vhci_hcd [ 65.713144][ T6411] usb usb38: SerialNumber: vhci_hcd.0 [ 65.726699][ T6411] hub 38-0:1.0: USB hub found [ 65.726944][ T6410] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.728604][ T6411] hub 38-0:1.0: 8 ports detected [ 65.782859][ T6432] binder: BINDER_SET_CONTEXT_MGR already set [ 65.788266][ T5840] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.793060][ T6432] binder: 6429:6432 ioctl 4018620d 200000000040 returned -16 [ 65.810827][ T5841] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.831943][ T5841] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.846582][ T5841] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.859761][ T5841] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.878873][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'. [ 65.879393][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'. [ 65.932022][ T6450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.153'. [ 65.938969][ T5840] usb 6-1: Using ep0 maxpacket: 32 [ 65.946352][ T5840] usb 6-1: config 1 interface 0 altsetting 195 bulk endpoint 0x1 has invalid maxpacket 1023 [ 65.955033][ T5840] usb 6-1: config 1 interface 0 altsetting 195 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.964836][ T5840] usb 6-1: config 1 interface 0 has no altsetting 0 [ 65.965188][ T6450] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 65.973396][ T5840] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 65.976311][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.979943][ T5840] usb 6-1: Product: ä­áœ¹ç¯¿à­¿ì·–é¹ë¢‹í–©æ´«ç¬«äŒ ì®­à¿¹î†»åˆšë®›çµê­²é¾¶ê®œã±‚붕旸藙ꤸ㬚㦆☾꤯ح斥륶帺㾛韌㖒ㅚꊚ풧벳 [ 65.985821][ T5840] usb 6-1: Manufacturer: 䒰䮌릛쬵â§êª¬á•¿ì³†êƒ¡ã¾ä‘‰è˜³îŒ¦ç¡ç˜‰æŒ¯à¾Žæ†íⰋⴴ㲯ᾠ誧뎮봮歗䲂⠦≤㘒쬷魆âžæ°±ì¶·í›½æ…»é î±¹â†©å¹îº–畳嗓ᚦྦ騙⊋肪è«î†„ᯢ㼮ë©îᢽ渑甥꺀契⇉猺踑弃努á±ï›è©î“µ [ 65.997112][ T5840] usb 6-1: SerialNumber: 䀊 [ 66.003037][ T6428] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 66.035140][ T6457] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.104793][ T6465] Illegal XDP return value 4294967274 on prog (id 19) dev syz_tun, expect packet loss! [ 66.112415][ T6465] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 66.215603][ T5840] usb 6-1: USB disconnect, device number 3 [ 66.267983][ T5447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.348845][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.166'. [ 66.419812][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.167'. [ 66.441037][ T6496] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 66.443782][ T6496] UDF-fs: Scanning with blocksize 2048 failed [ 66.446888][ T6496] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 66.449546][ T6496] UDF-fs: Scanning with blocksize 4096 failed [ 66.488251][ T5812] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 66.670460][ T5812] usb 7-1: not running at top speed; connect to a high speed hub [ 66.674858][ T5812] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.679352][ T5812] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 66.686866][ T5812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.698235][ T5812] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 66.701523][ T5812] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 66.704272][ T5812] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 66.715947][ T5812] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 66.719439][ T5812] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 66.721456][ T6517] binder: BINDER_SET_CONTEXT_MGR already set [ 66.724445][ T6517] binder: 6516:6517 ioctl 4018620d 2000000002c0 returned -16 [ 66.725124][ T5812] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 66.736076][ T5812] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 66.739381][ T5812] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 66.752166][ T5812] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 66.902306][ T6487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.907346][ T6487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.026602][ T24] usb 7-1: USB disconnect, device number 3 [ 67.039959][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 67.046895][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 67.051475][ T24] keyspan 7-1:1.0: device disconnected [ 67.124613][ T6538] comedi: valid board names for 8255 driver are: [ 67.127172][ T6538] 8255 [ 67.129826][ T6538] comedi: valid board names for vmk80xx driver are: [ 67.133832][ T6538] vmk80xx [ 67.135271][ T6538] comedi: valid board names for usbduxsigma driver are: [ 67.138652][ T6538] usbduxsigma [ 67.140127][ T6538] comedi: valid board names for usbduxfast driver are: [ 67.143128][ T6538] usbduxfast [ 67.144638][ T6538] comedi: valid board names for usbdux driver are: [ 67.147330][ T6538] usbdux [ 67.148801][ T6538] comedi: valid board names for ni6501 driver are: [ 67.151476][ T6538] ni6501 [ 67.152670][ T6538] comedi: valid board names for dt9812 driver are: [ 67.155272][ T6538] dt9812 [ 67.156469][ T6538] comedi: valid board names for ni_labpc_cs driver are: [ 67.159551][ T6538] ni_labpc_cs [ 67.160949][ T6538] comedi: valid board names for ni_daq_700 driver are: [ 67.163311][ T6538] ni_daq_700 [ 67.164407][ T6538] comedi: valid board names for labpc_pci driver are: [ 67.166590][ T6538] labpc_pci [ 67.168330][ T6538] comedi: valid board names for adl_pci9118 driver are: [ 67.171214][ T6538] pci9118dg [ 67.172550][ T6538] pci9118hg [ 67.173938][ T6538] pci9118hr [ 67.179798][ T6538] comedi: valid board names for 8255_pci driver are: [ 67.182314][ T6538] 8255_pci [ 67.183718][ T6538] comedi: valid board names for s526 driver are: [ 67.186377][ T6538] s526 [ 67.187774][ T6538] comedi: valid board names for multiq3 driver are: [ 67.191084][ T6538] multiq3 [ 67.193090][ T6538] comedi: valid board names for pcmuio driver are: [ 67.196171][ T6538] pcmuio48 [ 67.197409][ T6538] pcmuio96 [ 67.198690][ T6538] comedi: valid board names for pcmmio driver are: [ 67.200701][ T6538] pcmmio [ 67.201759][ T6538] comedi: valid board names for pcmda12 driver are: [ 67.203817][ T6538] pcmda12 [ 67.204809][ T6538] comedi: valid board names for pcmad driver are: [ 67.207431][ T6538] pcmad12 [ 67.208492][ T6538] pcmad16 [ 67.209563][ T6538] comedi: valid board names for ni_labpc driver are: [ 67.211873][ T6538] lab-pc-1200 [ 67.213042][ T6538] lab-pc-1200ai [ 67.214298][ T6538] lab-pc+ [ 67.215524][ T6538] comedi: valid board names for atmio16 driver are: [ 67.218666][ T6538] atmio16 [ 67.220108][ T6538] atmio16d [ 67.221481][ T6538] comedi: valid board names for ni_at_ao driver are: [ 67.224313][ T6538] at-ao-6 [ 67.225700][ T6538] at-ao-10 [ 67.227122][ T6538] comedi: valid board names for ni_at_a2150 driver are: [ 67.230883][ T6538] ni_at_a2150 [ 67.232467][ T6538] comedi: valid board names for adq12b driver are: [ 67.235222][ T6538] adq12b [ 67.236558][ T6538] comedi: valid board names for mpc624 driver are: [ 67.239731][ T6538] mpc624 [ 67.241093][ T6538] comedi: valid board names for c6xdigio driver are: [ 67.243909][ T6538] c6xdigio [ 67.245300][ T6538] comedi: valid board names for aio_iiro_16 driver are: [ 67.248260][ T6538] aio_iiro_16 [ 67.249277][ T6538] comedi: valid board names for aio_aio12_8 driver are: [ 67.251308][ T6538] aio_aio12_8 [ 67.252285][ T6538] aio_ai12_8 [ 67.253342][ T6538] aio_ao12_4 [ 67.254472][ T6538] comedi: valid board names for fl512 driver are: [ 67.256519][ T6538] fl512 [ 67.257386][ T6538] comedi: valid board names for dmm32at driver are: [ 67.259918][ T6538] dmm32at [ 67.261420][ T6538] comedi: valid board names for dt282x driver are: [ 67.263419][ T6538] dt2821 [ 67.264818][ T6538] dt2821-f [ 67.266240][ T6538] dt2821-g [ 67.267633][ T6538] dt2823 [ 67.268986][ T6538] dt2824-pgh [ 67.270530][ T6538] dt2824-pgl [ 67.271955][ T6538] dt2825 [ 67.273161][ T6538] dt2827 [ 67.274503][ T6538] dt2828 [ 67.275819][ T6538] dt2829 [ 67.277087][ T6538] dt21-ez [ 67.278501][ T6538] dt23-ez [ 67.279858][ T6538] dt24-ez [ 67.281201][ T6538] dt24-ez-pgl [ 67.282696][ T6538] comedi: valid board names for dt2817 driver are: [ 67.285197][ T6538] dt2817 [ 67.286335][ T6538] comedi: valid board names for dt2815 driver are: [ 67.289157][ T6538] dt2815 [ 67.290556][ T6538] comedi: valid board names for dt2814 driver are: [ 67.293300][ T6538] dt2814 [ 67.294585][ T6538] comedi: valid board names for dt2811 driver are: [ 67.297237][ T6538] dt2811-pgh [ 67.298895][ T6538] dt2811-pgl [ 67.300317][ T6538] comedi: valid board names for dt2801 driver are: [ 67.302865][ T6538] dt2801 [ 67.303995][ T6538] comedi: valid board names for das6402 driver are: [ 67.306443][ T6538] das6402-12 [ 67.307727][ T6538] das6402-16 [ 67.309075][ T6538] comedi: valid board names for das1800 driver are: [ 67.311587][ T6538] das-1701st [ 67.312802][ T6538] das-1701st-da [ 67.314376][ T6538] das-1702st [ 67.315709][ T6538] das-1702st-da [ 67.317265][ T6538] das-1702hr [ 67.318842][ T6538] das-1702hr-da [ 67.320415][ T6538] das-1701ao [ 67.321794][ T6538] das-1702ao [ 67.323144][ T6538] das-1801st [ 67.324601][ T6538] das-1801st-da [ 67.326273][ T6538] das-1802st [ 67.327711][ T6538] das-1802st-da [ 67.329486][ T6538] das-1802hr [ 67.330887][ T6538] das-1802hr-da [ 67.332505][ T6538] das-1801hc [ 67.333900][ T6538] das-1802hc [ 67.335315][ T6538] das-1801ao [ 67.336550][ T6538] das-1802ao [ 67.338003][ T6538] comedi: valid board names for das800 driver are: [ 67.341005][ T6538] das-800 [ 67.342255][ T6538] cio-das800 [ 67.343546][ T6538] das-801 [ 67.344646][ T6538] cio-das801 [ 67.345987][ T6538] das-802 [ 67.347261][ T6538] cio-das802 [ 67.348944][ T6538] cio-das802/16 [ 67.350642][ T6538] comedi: valid board names for isa-das08 driver are: [ 67.353531][ T6538] isa-das08 [ 67.354955][ T6538] das08-pgm [ 67.356320][ T6538] das08-pgh [ 67.357675][ T6538] das08-pgl [ 67.359070][ T6538] das08-aoh [ 67.360341][ T6538] das08-aol [ 67.361661][ T6538] das08-aom [ 67.362960][ T6538] das08/jr-ao [ 67.364490][ T6538] das08jr-16-ao [ 67.365927][ T6538] pc104-das08 [ 67.367421][ T6538] das08jr/16 [ 67.369067][ T6538] comedi: valid board names for das16m1 driver are: [ 67.371802][ T6538] das16m1 [ 67.373119][ T6538] comedi: valid board names for dac02 driver are: [ 67.375652][ T6538] dac02 [ 67.376840][ T6538] comedi: valid board names for rti802 driver are: [ 67.379526][ T6538] rti802 [ 67.380657][ T6538] comedi: valid board names for rti800 driver are: [ 67.383326][ T6538] rti800 [ 67.384610][ T6538] rti815 [ 67.386176][ T6538] comedi: valid board names for pcm3724 driver are: [ 67.388820][ T6538] pcm3724 [ 67.390079][ T6538] comedi: valid board names for pcl818 driver are: [ 67.392656][ T6538] pcl818l [ 67.393913][ T6538] pcl818h [ 67.395184][ T6538] pcl818hd [ 67.396412][ T6538] pcl818hg [ 67.397679][ T6538] pcl818 [ 67.398946][ T6538] pcl718 [ 67.400114][ T6538] pcm3718 [ 67.401285][ T6538] comedi: valid board names for pcl816 driver are: [ 67.403738][ T6538] pcl816 [ 67.404855][ T6538] pcl814b [ 67.406064][ T6538] comedi: valid board names for pcl812 driver are: [ 67.408855][ T6538] pcl812 [ 67.410030][ T6538] pcl812pg [ 67.411273][ T6538] acl8112pg [ 67.412612][ T6538] acl8112dg [ 67.413871][ T6538] acl8112hg [ 67.415194][ T6538] a821pgl [ 67.416451][ T6538] a821pglnda [ 67.417840][ T6538] a821pgh [ 67.419236][ T6538] a822pgl [ 67.420470][ T6538] a822pgh [ 67.421709][ T6538] a823pgl [ 67.422953][ T6538] a823pgh [ 67.424215][ T6538] pcl813 [ 67.425420][ T6538] pcl813b [ 67.426722][ T6538] acl8113 [ 67.428854][ T6538] iso813 [ 67.430226][ T6538] acl8216 [ 67.431638][ T6538] a826pg [ 67.432844][ T6538] comedi: valid board names for pcl730 driver are: [ 67.435423][ T6538] pcl730 [ 67.436625][ T6538] iso730 [ 67.437866][ T6538] acl7130 [ 67.440183][ T6538] pcm3730 [ 67.441385][ T6538] pcl725 [ 67.442721][ T6538] p8r8dio [ 67.443961][ T6538] acl7225b [ 67.445175][ T6538] p16r16dio [ 67.446460][ T6538] pcl733 [ 67.449929][ T6538] pcl734 [ 67.451248][ T6538] opmm-1616-xt [ 67.452695][ T6538] pearl-mm-p [ 67.454033][ T6538] ir104-pbf [ 67.455354][ T6538] comedi: valid board names for pcl726 driver are: [ 67.457544][ T6538] pcl726 [ 67.458983][ T6538] pcl727 [ 67.459917][ T6538] pcl728 [ 67.460918][ T6538] acl6126 [ 67.461946][ T6538] acl6128 [ 67.462915][ T6538] comedi: valid board names for pcl724 driver are: [ 67.464943][ T6538] pcl724 [ 67.465922][ T6538] pcl722 [ 67.466870][ T6538] pcl731 [ 67.467822][ T6538] acl7122 [ 67.469526][ T6538] acl7124 [ 67.470562][ T6538] pet48dio [ 67.471686][ T6538] pcmio48 [ 67.472678][ T6538] onyx-mm-dio [ 67.473772][ T6538] comedi: valid board names for pcl711 driver are: [ 67.475717][ T6538] pcl711 [ 67.476651][ T6538] pcl711b [ 67.477622][ T6538] acl8112hg [ 67.479069][ T6538] acl8112dg [ 67.480057][ T6538] comedi: valid board names for amplc_pc263 driver are: [ 67.482468][ T6538] pc263 [ 67.483367][ T6538] comedi: valid board names for amplc_pc236 driver are: [ 67.485659][ T6538] pc36at [ 67.486546][ T6538] comedi: valid board names for amplc_dio200 driver are: [ 67.488863][ T6538] pc212e [ 67.489799][ T6538] pc214e [ 67.490722][ T6538] pc215e [ 67.491856][ T6538] pc218e [ 67.492756][ T6538] pc272e [ 67.493747][ T6538] comedi: valid board names for comedi_parport driver are: [ 67.495905][ T6538] comedi_parport [ 67.497002][ T6538] comedi: valid board names for comedi_test driver are: [ 67.499444][ T6538] comedi_test [ 67.500516][ T6538] comedi: valid board names for comedi_bond driver are: [ 67.502683][ T6538] comedi_bond [ 67.613434][ T5827] net_ratelimit: 23 callbacks suppressed [ 67.613450][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.639834][ T6582] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 67.743116][ T6593] fuse: Bad value for 'group_id' [ 67.745033][ T6593] fuse: Bad value for 'group_id' [ 67.769684][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.792136][ T6576] loop5: detected capacity change from 0 to 7 [ 67.802798][ T6576] Dev loop5: unable to read RDB block 7 [ 67.806287][ T6576] loop5: AHDI p2 [ 67.807661][ T6576] loop5: partition table partially beyond EOD, truncated [ 67.845817][ T6596] dlm: no local IP address has been set [ 67.848491][ T6596] dlm: cannot start dlm midcomms -107 [ 68.169404][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.259193][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.668279][ T5827] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 68.738820][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.808616][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.819592][ T5827] usb 6-1: Using ep0 maxpacket: 8 [ 68.822822][ T5827] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 68.825900][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.829054][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 68.829073][ T42] audit: type=1400 audit(68.763:475): avc: denied { ioctl } for pid=6644 comm="syz.0.217" path="socket:[14527]" dev="sockfs" ino=14527 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.844904][ T5827] pvrusb2: Hardware description: Terratec Grabster AV400 [ 68.847311][ T5827] pvrusb2: ********** [ 68.848883][ T5827] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 68.851961][ T5827] pvrusb2: Important functionality might not be entirely working. [ 68.854321][ T5827] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 68.857622][ T6647] warning: `syz.2.218' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.857735][ T5827] pvrusb2: ********** [ 68.868314][ T42] audit: type=1400 audit(68.803:476): avc: denied { read } for pid=6646 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.891560][ T42] audit: type=1400 audit(68.823:477): avc: denied { mount } for pid=6648 comm="syz.0.219" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 68.909476][ T6649] __nla_validate_parse: 8 callbacks suppressed [ 68.909492][ T6649] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.219'. [ 68.916627][ T6649] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.219'. [ 68.924209][ T42] audit: type=1400 audit(68.853:478): avc: denied { listen } for pid=6648 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.925047][ T6650] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 68.943656][ T42] audit: type=1400 audit(68.873:479): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 69.058443][ T2518] pvrusb2: Invalid write control endpoint [ 69.091967][ T2518] pvrusb2: Invalid write control endpoint [ 69.094378][ T2518] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 69.097338][ T2518] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 69.100863][ T2518] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 69.104543][ T2518] pvrusb2: Device being rendered inoperable [ 69.108648][ T2518] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 69.112631][ T2518] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 69.116777][ T2518] pvrusb2: Attached sub-driver cx25840 [ 69.121199][ T2518] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 69.125389][ T2518] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 69.184261][ T42] audit: type=1400 audit(69.113:481): avc: denied { append } for pid=6667 comm="syz.0.223" name="demux0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 69.193002][ T42] audit: type=1400 audit(69.113:480): avc: denied { create } for pid=6667 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 69.259244][ T64] Bluetooth: hci1: adv larger than maximum supported [ 69.259295][ T64] Bluetooth: hci1: Malformed LE Event: 0x0d [ 69.306543][ T6615] pvrusb2: Attempted to execute control transfer when device not ok [ 69.312450][ T5812] usb 6-1: USB disconnect, device number 4 [ 69.434022][ T42] audit: type=1400 audit(69.363:482): avc: denied { name_connect } for pid=6681 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 69.441763][ T42] audit: type=1400 audit(69.363:483): avc: denied { accept } for pid=6681 comm="syz.0.225" lport=44096 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.441802][ T42] audit: type=1400 audit(69.363:484): avc: denied { write } for pid=6681 comm="syz.0.225" lport=44096 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 69.650873][ T6688] input: syz1 as /devices/virtual/input/input5 [ 69.772444][ T6697] vim2m vim2m.0: vidioc_s_fmt queue busy [ 69.849775][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.892690][ T6712] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 69.905939][ T6712] random: crng reseeded on system resumption [ 69.936609][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.072986][ T6739] validate_nla: 27 callbacks suppressed [ 70.073013][ T6739] netlink: 'syz.1.242': attribute type 28 has an invalid length. [ 70.077244][ T6739] netlink: 'syz.1.242': attribute type 3 has an invalid length. [ 70.079685][ T6739] netlink: 132 bytes leftover after parsing attributes in process `syz.1.242'. [ 70.237830][ T6744] mmap: syz.1.244 (6744): VmData 37400576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 70.269106][ T50] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.329924][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.421139][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.424646][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.427787][ T50] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 70.432137][ T50] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.435197][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.440285][ T50] usb 5-1: config 0 descriptor?? [ 70.862016][ T50] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 70.866166][ T50] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 70.872051][ T50] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 70.875245][ T50] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 70.879796][ T50] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 70.885284][ T50] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 70.888872][ T50] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 70.892321][ T50] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 70.897915][ T50] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 70.902006][ T50] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 70.922592][ T50] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 71.100420][ T6723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.104521][ T6723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.115824][ T10] usb 5-1: USB disconnect, device number 3 [ 71.163312][ T6767] bond0: entered promiscuous mode [ 71.171480][ T6767] bond_slave_0: entered promiscuous mode [ 71.179812][ T6767] bond_slave_1: entered promiscuous mode [ 71.182189][ T6767] veth0_to_bond: entered promiscuous mode [ 71.201822][ T6767] loop3: detected capacity change from 0 to 7 [ 71.210362][ T6767] loop3: p1 p4 [ 71.211910][ T6767] loop3: partition table partially beyond EOD, truncated [ 71.217071][ T6767] loop3: p4 start 65535 is beyond EOD, truncated [ 71.250423][ T6186] udevd[6186]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 71.292810][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.294833][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.414029][ T6781] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 71.540887][ T6784] FAULT_INJECTION: forcing a failure. [ 71.540887][ T6784] name failslab, interval 1, probability 0, space 0, times 1 [ 71.547820][ T6784] CPU: 0 UID: 0 PID: 6784 Comm: syz.1.256 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.547848][ T6784] Tainted: [L]=SOFTLOCKUP [ 71.547854][ T6784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.547875][ T6784] Call Trace: [ 71.547883][ T6784] [ 71.547890][ T6784] dump_stack_lvl+0x100/0x190 [ 71.547985][ T6784] should_fail_ex.cold+0x5/0xa [ 71.548028][ T6784] should_failslab+0xc2/0x120 [ 71.548072][ T6784] __kmalloc_cache_noprof+0x91/0x6c0 [ 71.548121][ T6784] ? xprt_alloc+0x590/0x9d0 [ 71.548195][ T6784] xprt_alloc+0x590/0x9d0 [ 71.548224][ T6784] xs_setup_xprt+0xaf/0x3c0 [ 71.548243][ T6784] xs_setup_udp+0x43/0x960 [ 71.548265][ T6784] xprt_create_transport+0x16c/0x740 [ 71.548291][ T6784] ? down_write+0x146/0x1f0 [ 71.548343][ T6784] rpc_create+0x390/0x7f0 [ 71.548364][ T6784] ? __pfx_rpc_create+0x10/0x10 [ 71.548391][ T6784] ? __lock_acquire+0x49f/0x1a40 [ 71.548465][ T6784] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.548502][ T6784] nfs_mount+0x42d/0x7f0 [ 71.548557][ T6784] ? __pfx_nfs_mount+0x10/0x10 [ 71.548576][ T6784] ? arch_stack_walk+0xa6/0xf0 [ 71.548626][ T6784] ? kasan_save_stack+0x30/0x50 [ 71.548646][ T6784] ? kasan_save_track+0x14/0x30 [ 71.548665][ T6784] ? __kasan_kmalloc+0xaa/0xb0 [ 71.548683][ T6784] ? __kmalloc_node_track_caller_noprof+0x331/0x830 [ 71.548704][ T6784] ? kmemdup_nul+0x49/0xd0 [ 71.548723][ T6784] ? nfs_get_tree+0x7dd/0x1450 [ 71.548742][ T6784] ? vfs_get_tree+0x92/0x320 [ 71.548766][ T6784] ? vfs_cmd_create+0xd7/0x2a0 [ 71.548804][ T6784] ? __do_sys_fsconfig+0x55a/0xcb0 [ 71.548828][ T6784] ? do_syscall_64+0x115/0x870 [ 71.548846][ T6784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.548869][ T6784] nfs_request_mount.constprop.0.isra.0+0x4c0/0x730 [ 71.548904][ T6784] ? __pfx_nfs_request_mount.constprop.0.isra.0+0x10/0x10 [ 71.548944][ T6784] nfs_try_get_tree+0x32d/0xa40 [ 71.548971][ T6784] ? __pfx_nfs_try_get_tree+0x10/0x10 [ 71.548994][ T6784] ? lock_acquire+0x1b9/0x370 [ 71.549012][ T6784] ? find_held_lock+0x2b/0x80 [ 71.549042][ T6784] ? do_raw_read_unlock+0x3f/0x70 [ 71.549069][ T6784] nfs_get_tree+0xa61/0x1450 [ 71.549094][ T6784] vfs_get_tree+0x92/0x320 [ 71.549117][ T6784] vfs_cmd_create+0xd7/0x2a0 [ 71.549143][ T6784] __do_sys_fsconfig+0x55a/0xcb0 [ 71.549169][ T6784] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 71.549193][ T6784] ? fput+0x79/0x100 [ 71.549224][ T6784] do_syscall_64+0x115/0x870 [ 71.549243][ T6784] ? clear_bhb_loop+0x40/0x90 [ 71.549265][ T6784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.549283][ T6784] RIP: 0033:0x7fe1ee19df99 [ 71.549299][ T6784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.549316][ T6784] RSP: 002b:00007fe1eefcb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 71.549343][ T6784] RAX: ffffffffffffffda RBX: 00007fe1ee425fa0 RCX: 00007fe1ee19df99 [ 71.549354][ T6784] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 71.549363][ T6784] RBP: 00007fe1eefcb090 R08: 0000000000000000 R09: 0000000000000000 [ 71.549373][ T6784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.549383][ T6784] R13: 00007fe1ee426038 R14: 00007fe1ee425fa0 R15: 00007ffe0f762b18 [ 71.549407][ T6784] [ 71.932303][ T6802] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.934325][ T6802] program syz.0.262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.948223][ T6802] ata1.00: non-matching transfer count (-1447821268/0) [ 72.138212][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 72.300651][ T10] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 72.308311][ T10] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 72.314733][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 72.328143][ T10] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.331808][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 72.336231][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 72.358348][ T10] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 72.364483][ T10] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 72.378148][ T10] usb 8-1: Product: syz [ 72.379476][ T10] usb 8-1: Manufacturer: syz [ 72.384538][ T6798] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.388762][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 72.390457][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 72.398264][ T10] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 72.408194][ T10] cdc_wdm 8-1:1.0: Unknown control protocol [ 72.529602][ T6824] netlink: 'syz.0.269': attribute type 26 has an invalid length. [ 72.590592][ T6828] netlink: 'syz.1.271': attribute type 1 has an invalid length. [ 72.598498][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 72.600798][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 72.603653][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 72.605913][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 72.608321][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 72.610579][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 72.613016][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 72.615310][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 72.617616][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 72.619907][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 72.622206][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 72.624424][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 72.626714][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 72.628984][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 72.631331][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 72.633860][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 72.636608][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 72.639354][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 72.642108][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 72.644835][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 72.732817][ T1491] usb 8-1: USB disconnect, device number 3 [ 72.791489][ T6828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.820743][ T6830] bond1: (slave gretap1): making interface the new active one [ 72.825082][ T6830] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 72.861100][ T6828] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 72.868456][ T6828] syzkaller1: owner set to 805 [ 72.899588][ T848] net_ratelimit: 7 callbacks suppressed [ 72.899605][ T848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.975644][ T1491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.079318][ T6863] xt_HMARK: spi-set and port-set can't be combined [ 73.305697][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.474686][ T6913] input: syz0 as /devices/virtual/input/input8 [ 73.663995][ T34] IPVS: starting estimator thread 0... [ 73.681713][ T6848] ceph: No mds server is up or the cluster is laggy [ 73.725472][ T6935] Cannot find set identified by id 0 to match [ 73.748187][ T6933] IPVS: using max 26 ests per chain, 62400 per kthread [ 73.814157][ T6956] netlink: 'syz.3.297': attribute type 1 has an invalid length. [ 73.825706][ T6956] netlink: 'syz.3.297': attribute type 3 has an invalid length. [ 73.832849][ T6956] netlink: 224 bytes leftover after parsing attributes in process `syz.3.297'. [ 73.843436][ T42] kauditd_printk_skb: 55 callbacks suppressed [ 73.843458][ T42] audit: type=1400 audit(73.773:540): avc: denied { write } for pid=6960 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.862652][ T42] audit: type=1400 audit(73.793:541): avc: denied { unmount } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 73.914534][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 73.919666][ T6964] hugetlbfs: Bad value for 'uid' [ 73.921681][ T6964] hugetlbfs: Bad value for 'uid' [ 73.921895][ T6966] netlink: 24 bytes leftover after parsing attributes in process `syz.3.303'. [ 73.940661][ T6964] syz.2.301: vmalloc error: size 4294959104, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 73.948903][ T6964] CPU: 1 UID: 0 PID: 6964 Comm: syz.2.301 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.948932][ T6964] Tainted: [L]=SOFTLOCKUP [ 73.948939][ T6964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.948956][ T6964] Call Trace: [ 73.948963][ T6964] [ 73.948970][ T6964] dump_stack_lvl+0x100/0x190 [ 73.949044][ T6964] warn_alloc.cold+0x94/0xa8 [ 73.949066][ T6964] ? __pfx_warn_alloc+0x10/0x10 [ 73.949095][ T6964] ? kasan_save_stack+0x3f/0x50 [ 73.949118][ T6964] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 73.949143][ T6964] ? vb2_vmalloc_alloc+0xf9/0x410 [ 73.949224][ T6964] ? __vb2_queue_alloc+0x8d5/0x1160 [ 73.949259][ T6964] ? vb2_core_create_bufs+0x5fa/0xa30 [ 73.949283][ T6964] ? vb2_create_bufs+0x40c/0x830 [ 73.949304][ T6964] ? v4l_create_bufs+0x17d/0x270 [ 73.949321][ T6964] ? __video_do_ioctl+0xb2a/0xdf0 [ 73.949339][ T6964] ? video_usercopy+0x47a/0x1730 [ 73.949357][ T6964] ? __x64_sys_ioctl+0x18e/0x210 [ 73.949387][ T6964] ? do_syscall_64+0x115/0x870 [ 73.949427][ T6964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.949448][ T6964] ? vb2_vmalloc_alloc+0x135/0x410 [ 73.949472][ T6964] __vmalloc_node_range_noprof+0x136c/0x1630 [ 73.949501][ T6964] ? vb2_vmalloc_alloc+0x135/0x410 [ 73.949532][ T6964] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 73.949589][ T6964] ? kasan_save_track+0x14/0x30 [ 73.949609][ T6964] ? __kasan_kmalloc+0xaa/0xb0 [ 73.949628][ T6964] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 73.949653][ T6964] ? vb2_vmalloc_alloc+0x135/0x410 [ 73.949678][ T6964] vmalloc_user_noprof+0x9e/0xe0 [ 73.949701][ T6964] ? vb2_vmalloc_alloc+0x135/0x410 [ 73.949725][ T6964] vb2_vmalloc_alloc+0x135/0x410 [ 73.949750][ T6964] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 73.949776][ T6964] __vb2_queue_alloc+0x8d5/0x1160 [ 73.949810][ T6964] vb2_core_create_bufs+0x5fa/0xa30 [ 73.949837][ T6964] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 73.949864][ T6964] ? trace_contention_end+0x126/0x160 [ 73.949898][ T6964] ? __mutex_lock+0x26d/0x1bd0 [ 73.949921][ T6964] vb2_create_bufs+0x40c/0x830 [ 73.949952][ T6964] ? __pfx_vb2_create_bufs+0x10/0x10 [ 73.949976][ T6964] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.949999][ T6964] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.950022][ T6964] v4l_create_bufs+0x17d/0x270 [ 73.950042][ T6964] __video_do_ioctl+0xb2a/0xdf0 [ 73.950064][ T6964] ? __might_fault+0xc5/0x140 [ 73.950100][ T6964] ? __pfx___video_do_ioctl+0x10/0x10 [ 73.950130][ T6964] video_usercopy+0x47a/0x1730 [ 73.950152][ T6964] ? __pfx___video_do_ioctl+0x10/0x10 [ 73.950172][ T6964] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 73.950234][ T6964] ? __pfx_video_usercopy+0x10/0x10 [ 73.950270][ T6964] v4l2_ioctl+0x1bd/0x250 [ 73.950292][ T6964] ? __pfx_v4l2_ioctl+0x10/0x10 [ 73.950314][ T6964] __x64_sys_ioctl+0x18e/0x210 [ 73.950339][ T6964] do_syscall_64+0x115/0x870 [ 73.950356][ T6964] ? clear_bhb_loop+0x40/0x90 [ 73.950377][ T6964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.950394][ T6964] RIP: 0033:0x7f3fd4f9df99 [ 73.950410][ T6964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.950425][ T6964] RSP: 002b:00007f3fd31f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.950442][ T6964] RAX: ffffffffffffffda RBX: 00007f3fd5225fa0 RCX: 00007f3fd4f9df99 [ 73.950453][ T6964] RDX: 0000200000000480 RSI: 00000000c100565c RDI: 0000000000000008 [ 73.950462][ T6964] RBP: 00007f3fd5034ec4 R08: 0000000000000000 R09: 0000000000000000 [ 73.950471][ T6964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.950480][ T6964] R13: 00007f3fd5226038 R14: 00007f3fd5225fa0 R15: 00007ffc0e8e8958 [ 73.950502][ T6964] [ 73.951212][ T6964] Mem-Info: [ 73.988919][ T42] audit: type=1400 audit(73.923:542): avc: denied { write } for pid=6962 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.010246][ T42] audit: type=1400 audit(73.943:543): avc: denied { read } for pid=6974 comm="syz.3.306" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.011292][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.015825][ T42] audit: type=1400 audit(73.943:544): avc: denied { read } for pid=6975 comm="syz.0.305" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 74.019480][ T6964] active_anon:20688 inactive_anon:0 isolated_anon:16 [ 74.019480][ T6964] active_file:0 inactive_file:62225 isolated_file:0 [ 74.019480][ T6964] unevictable:1751 dirty:2017 writeback:0 [ 74.019480][ T6964] slab_reclaimable:11857 slab_unreclaimable:67511 [ 74.019480][ T6964] mapped:34661 shmem:12498 pagetables:3696 [ 74.019480][ T6964] sec_pagetables:292 bounce:0 [ 74.019480][ T6964] kernel_misc_reclaimable:0 [ 74.019480][ T6964] free:433287 free_pcp:17006 free_cma:0 [ 74.024206][ T42] audit: type=1400 audit(73.943:545): avc: denied { open } for pid=6975 comm="syz.0.305" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 74.027189][ T6964] Node 0 active_anon:82612kB inactive_anon:0kB active_file:0kB inactive_file:248308kB unevictable:3468kB isolated(anon):64kB isolated(file):0kB mapped:138256kB dirty:8064kB writeback:0kB shmem:46568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13376kB pagetables:5540kB sec_pagetables:1168kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 74.038492][ T42] audit: type=1400 audit(73.943:546): avc: denied { map } for pid=6974 comm="syz.3.306" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.039197][ T6964] Node 1 active_anon:140kB inactive_anon:0kB active_file:0kB inactive_file:592kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:388kB dirty:4kB writeback:0kB shmem:3548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:9244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 74.041581][ T42] audit: type=1400 audit(73.943:547): avc: denied { execute } for pid=6974 comm="syz.3.306" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.052542][ T42] audit: type=1400 audit(73.983:548): avc: denied { write } for pid=6980 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.054807][ T6964] Node 0 [ 74.125397][ T42] audit: type=1400 audit(74.053:549): avc: denied { write } for pid=6982 comm="syz.0.307" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 74.137517][ T6964] DMA free:15324kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 74.224635][ T6964] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 74.226599][ T6964] Node 0 DMA32 free:117160kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:100468kB inactive_anon:0kB active_file:0kB inactive_file:248308kB unevictable:3468kB writepending:8064kB zspages:0kB present:2080628kB managed:1255240kB mlocked:0kB bounce:0kB free_pcp:2652kB local_pcp:0kB free_cma:0kB [ 74.236885][ T6964] lowmem_reserve[]: 0 0 0 0 0 [ 74.238673][ T6964] Node 1 Normal free:1583916kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1372kB inactive_anon:0kB active_file:0kB inactive_file:592kB unevictable:3536kB writepending:4kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:62324kB local_pcp:10212kB free_cma:0kB [ 74.249279][ T6964] lowmem_reserve[]: 0 0 0 0 0 [ 74.250818][ T6964] Node 0 DMA: 6*4kB (U) 6*8kB (U) 6*16kB (U) 6*32kB (U) 4*64kB (U) 5*128kB (U) 5*256kB (U) 3*512kB (U) 5*1024kB (U) 1*2048kB (M) 1*4096kB (U) = 15336kB [ 74.255923][ T6964] Node 0 DMA32: 1273*4kB (UME) 503*8kB (UME) 565*16kB (UE) 436*32kB (UME) 138*64kB (UME) 71*128kB (UE) 48*256kB (UE) 44*512kB (UME) 31*1024kB (U) 0*2048kB 0*4096kB = 116588kB [ 74.261674][ T6964] Node 1 Normal: 177*4kB (U) 178*8kB (UE) 191*16kB (UME) 191*32kB (UM) 181*64kB (U) 186*128kB (UM) 173*256kB (UE) 168*512kB (UM) 152*1024kB (UE) 5*2048kB (UE) 303*4096kB (M) = 1583972kB [ 74.267658][ T6964] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 74.271631][ T6964] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 74.274662][ T6964] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 74.278467][ T6964] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 74.281498][ T6964] 80330 total pagecache pages [ 74.283095][ T6964] 0 pages in swap cache [ 74.284802][ T6964] Free swap = 124996kB [ 74.286559][ T6964] Total swap = 124996kB [ 74.288582][ T6964] 1048443 pages RAM [ 74.290210][ T6964] 0 pages HighMem/MovableOnly [ 74.291655][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 74.292189][ T6964] 285322 pages reserved [ 74.297053][ T6964] 0 pages cma reserved [ 74.397477][ T7000] loop6: detected capacity change from 0 to 2640 [ 74.409816][ T6837] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.418980][ T6837] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.422849][ T6837] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.426383][ T6837] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.430150][ T6837] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.461972][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 74.465520][ T34] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.469635][ T34] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.472990][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 74.475143][ T34] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 74.477928][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.482896][ T34] usb 8-1: config 0 descriptor?? [ 74.765781][ T7012] usb usb9: usbfs: process 7012 (syz.1.314) did not claim interface 10 before use [ 74.771734][ T7013] usb usb9: usbfs: process 7013 (syz.1.314) did not claim interface 10 before use [ 74.893248][ T34] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 74.970223][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.050409][ T1491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.095656][ T7019] batman_adv: batadv0: Adding interface: macvtap1 [ 75.097797][ T7019] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.108536][ T7019] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 75.108624][ T1491] usb 8-1: USB disconnect, device number 4 [ 75.343809][ T7037] can0: slcan on ttyS3. [ 75.357452][ T7037] xt_hashlimit: size too large, truncated to 1048576 [ 75.664916][ T7068] trusted_key: encrypted_key: keyword 'u' not recognized [ 75.746818][ T7079] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 75.750251][ T7079] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 75.757899][ T7079] vhci_hcd vhci_hcd.0: Device attached [ 75.761988][ T7082] vhci_hcd: cannot find a urb of seqnum 37731 max seqnum 0 [ 75.771462][ T5842] vhci_hcd vhci_hcd.0: stop threads [ 75.777391][ T5842] vhci_hcd vhci_hcd.0: release socket [ 75.783617][ T7042] can0 (unregistered): slcan off ttyS3. [ 75.784172][ T5842] vhci_hcd vhci_hcd.0: disconnect device [ 75.872707][ T7092] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 75.938822][ T1491] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 76.090466][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.115293][ T7106] configfs-gadget.g1 gadget.0: HOST MAC 6a:9f:75:88:67:ea [ 76.117665][ T7106] configfs-gadget.g1 gadget.0: MAC d6:91:8b:7f:0e:37 [ 76.258260][ T2327] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 76.312222][ T7114] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.358594][ T5884] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.417960][ T222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.428307][ T2327] usb 7-1: Using ep0 maxpacket: 8 [ 76.431879][ T2327] usb 7-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 179, changing to 11 [ 76.435442][ T2327] usb 7-1: config 1 interface 0 has no altsetting 0 [ 76.439075][ T2327] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 76.442445][ T2327] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.444951][ T2327] usb 7-1: Product: syz [ 76.446258][ T2327] usb 7-1: Manufacturer: syz [ 76.447698][ T2327] usb 7-1: SerialNumber: syz [ 76.484808][ T7129] MTD: Couldn't look up './bus': -15 [ 76.520723][ T5884] usb 5-1: Dual-Role OTG device on HNP port [ 76.526586][ T5884] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 76.531349][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.543969][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.347'. [ 76.587920][ T5884] cdc_ncm 5-1:1.0: MAC-Address: 6a:9f:75:88:67:ea [ 76.610630][ T5884] cdc_ncm 5-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 6a:9f:75:88:67:ea [ 76.611105][ T7149] netlink: 'syz.0.349': attribute type 1 has an invalid length. [ 76.655942][ T7147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.349'. [ 76.764762][ T7153] overlayfs: invalid origin (0000) [ 76.809136][ T34] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 76.958232][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 76.974364][ T34] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 76.977939][ T34] usb 8-1: config 0 has no interface number 0 [ 76.980859][ T34] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 76.990890][ T34] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 76.996102][ T34] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 77.005371][ T34] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 77.011257][ T34] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 77.014107][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.024394][ T34] usb 8-1: config 0 descriptor?? [ 77.031972][ T2327] usbhid 7-1:1.0: can't add hid device: -71 [ 77.038561][ T2327] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 77.046642][ T2327] usb 7-1: USB disconnect, device number 4 [ 77.061449][ T34] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 77.139804][ T1491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.162594][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 77.243091][ T7138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.307647][ T7203] bridge0: port 3(syz_tun) entered blocking state [ 77.313387][ T7203] bridge0: port 3(syz_tun) entered disabled state [ 77.316765][ T7203] syz_tun: entered allmulticast mode [ 77.332159][ T7203] syz_tun: entered promiscuous mode [ 77.335585][ T7203] bridge0: port 3(syz_tun) entered blocking state [ 77.337767][ T7203] bridge0: port 3(syz_tun) entered forwarding state [ 77.350250][ T50] IPVS: starting estimator thread 0... [ 77.357016][ T7206] team0: Device vlan2 is already an upper device of the team interface [ 77.438886][ T7207] IPVS: using max 44 ests per chain, 105600 per kthread [ 77.639551][ T64] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 77.642824][ T64] CPU: 0 UID: 0 PID: 64 Comm: kworker/u34:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.642842][ T64] Tainted: [L]=SOFTLOCKUP [ 77.642846][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.642861][ T64] Workqueue: hci1 hci_rx_work [ 77.642965][ T64] Call Trace: [ 77.642973][ T64] [ 77.642978][ T64] dump_stack_lvl+0x100/0x190 [ 77.643036][ T64] sysfs_warn_dup.cold+0x1c/0x28 [ 77.643071][ T64] sysfs_create_dir_ns+0x24b/0x2b0 [ 77.643110][ T64] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 77.643128][ T64] ? find_held_lock+0x2b/0x80 [ 77.643156][ T64] ? kobject_add_internal+0x25f/0x930 [ 77.643194][ T64] ? kobject_add_internal+0x25f/0x930 [ 77.643212][ T64] ? do_raw_spin_unlock+0x145/0x1e0 [ 77.643230][ T64] kobject_add_internal+0x2c8/0x930 [ 77.643250][ T64] kobject_add+0x16a/0x1e0 [ 77.643266][ T64] ? __pfx_kobject_add+0x10/0x10 [ 77.643282][ T64] ? class_to_subsys+0x10f/0x150 [ 77.643331][ T64] ? kobject_put+0xb9/0x640 [ 77.643346][ T64] ? _raw_spin_unlock+0x28/0x50 [ 77.643374][ T64] device_add+0x294/0x1970 [ 77.643398][ T64] ? __pfx_dev_set_name+0x10/0x10 [ 77.643417][ T64] ? __pfx_device_add+0x10/0x10 [ 77.643434][ T64] ? mgmt_send_event_skb+0x2fb/0x460 [ 77.643462][ T64] hci_conn_add_sysfs+0x1a3/0x260 [ 77.643485][ T64] le_conn_complete_evt+0x11eb/0x1f60 [ 77.643512][ T64] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 77.643532][ T64] ? hci_event_packet+0x186/0xcd0 [ 77.643548][ T64] ? hci_event_packet+0x186/0xcd0 [ 77.643573][ T64] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 77.643594][ T64] ? skb_pull_data+0x15f/0x1e0 [ 77.643661][ T64] hci_le_meta_evt+0x34a/0x5f0 [ 77.643686][ T64] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 77.643711][ T64] hci_event_packet+0x51c/0xcd0 [ 77.643723][ T64] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 77.643736][ T64] ? __pfx_hci_event_packet+0x10/0x10 [ 77.643749][ T64] ? kcov_remote_start+0x384/0x670 [ 77.643771][ T64] ? lockdep_hardirqs_on+0x78/0x100 [ 77.643816][ T64] hci_rx_work+0x451/0xfc0 [ 77.643831][ T64] process_one_work+0xa23/0x1940 [ 77.643853][ T64] ? __pfx_process_one_work+0x10/0x10 [ 77.643871][ T64] ? __pfx_hci_rx_work+0x10/0x10 [ 77.643888][ T64] worker_thread+0x5ef/0xe50 [ 77.643906][ T64] ? kthread+0x13a/0x450 [ 77.643917][ T64] ? __pfx_worker_thread+0x10/0x10 [ 77.643928][ T64] kthread+0x370/0x450 [ 77.643938][ T64] ? __pfx_kthread+0x10/0x10 [ 77.643951][ T64] ret_from_fork+0x72b/0xd50 [ 77.643971][ T64] ? __pfx_ret_from_fork+0x10/0x10 [ 77.643988][ T64] ? __switch_to+0x800/0x10f0 [ 77.644002][ T64] ? __pfx_kthread+0x10/0x10 [ 77.644014][ T64] ret_from_fork_asm+0x1a/0x30 [ 77.644038][ T64] [ 77.644176][ T64] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 77.649651][ T7222] loop4: detected capacity change from 0 to 2640 [ 77.650550][ T64] Bluetooth: hci1: failed to register connection device [ 77.655189][ T7222] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.747724][ T7222] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.752549][ T7222] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.752572][ T7222] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.752589][ T7222] Buffer I/O error on dev loop4, logical block 0, async page read [ 77.752641][ T7222] ldm_validate_partition_table(): Disk read failed. [ 77.752681][ T7222] Dev loop4: unable to read RDB block 0 [ 77.752804][ T7222] loop4: unable to read partition table [ 77.766497][ T7222] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 77.809417][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 77.957657][ T7235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.373'. [ 77.968977][ T7235] overlayfs: upper fs does not support file handles, falling back to index=off. [ 78.168593][ T29] net_ratelimit: 2 callbacks suppressed [ 78.168610][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.258463][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.331252][ T848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.334958][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.379328][ T7251] syzkaller1: entered promiscuous mode [ 78.381093][ T7251] syzkaller1: entered allmulticast mode [ 78.384890][ T7251] netlink: 32 bytes leftover after parsing attributes in process `syz.0.379'. [ 78.660491][ T7272] FAULT_INJECTION: forcing a failure. [ 78.660491][ T7272] name failslab, interval 1, probability 0, space 0, times 0 [ 78.665635][ T7272] CPU: 2 UID: 0 PID: 7272 Comm: syz.1.386 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.665660][ T7272] Tainted: [L]=SOFTLOCKUP [ 78.665667][ T7272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.665676][ T7272] Call Trace: [ 78.665683][ T7272] [ 78.665691][ T7272] dump_stack_lvl+0x100/0x190 [ 78.665721][ T7272] should_fail_ex.cold+0x5/0xa [ 78.665746][ T7272] should_failslab+0xc2/0x120 [ 78.665771][ T7272] __kmalloc_cache_noprof+0x91/0x6c0 [ 78.665806][ T7272] ? xprt_alloc+0x590/0x9d0 [ 78.665847][ T7272] xprt_alloc+0x590/0x9d0 [ 78.665876][ T7272] xs_setup_xprt+0xaf/0x3c0 [ 78.665895][ T7272] xs_setup_udp+0x43/0x960 [ 78.665916][ T7272] xprt_create_transport+0x16c/0x740 [ 78.665941][ T7272] ? down_write+0x146/0x1f0 [ 78.665966][ T7272] rpc_create+0x390/0x7f0 [ 78.665986][ T7272] ? __pfx_rpc_create+0x10/0x10 [ 78.666013][ T7272] ? __lock_acquire+0x49f/0x1a40 [ 78.666055][ T7272] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.666083][ T7272] nfs_mount+0x42d/0x7f0 [ 78.666139][ T7272] ? __pfx_nfs_mount+0x10/0x10 [ 78.666158][ T7272] ? arch_stack_walk+0xa6/0xf0 [ 78.666205][ T7272] ? kasan_save_stack+0x30/0x50 [ 78.666224][ T7272] ? kasan_save_track+0x14/0x30 [ 78.666242][ T7272] ? __kasan_kmalloc+0xaa/0xb0 [ 78.666260][ T7272] ? __kmalloc_node_track_caller_noprof+0x331/0x830 [ 78.666281][ T7272] ? kmemdup_nul+0x49/0xd0 [ 78.666300][ T7272] ? nfs_get_tree+0x7dd/0x1450 [ 78.666319][ T7272] ? vfs_get_tree+0x92/0x320 [ 78.666342][ T7272] ? vfs_cmd_create+0xd7/0x2a0 [ 78.666379][ T7272] ? __do_sys_fsconfig+0x55a/0xcb0 [ 78.666402][ T7272] ? do_syscall_64+0x115/0x870 [ 78.666421][ T7272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.666442][ T7272] nfs_request_mount.constprop.0.isra.0+0x4c0/0x730 [ 78.666476][ T7272] ? __pfx_nfs_request_mount.constprop.0.isra.0+0x10/0x10 [ 78.666515][ T7272] nfs_try_get_tree+0x32d/0xa40 [ 78.666543][ T7272] ? __pfx_nfs_try_get_tree+0x10/0x10 [ 78.666569][ T7272] ? lock_acquire+0x1b9/0x370 [ 78.666590][ T7272] ? find_held_lock+0x2b/0x80 [ 78.666622][ T7272] ? do_raw_read_unlock+0x3f/0x70 [ 78.666650][ T7272] nfs_get_tree+0xa61/0x1450 [ 78.666674][ T7272] vfs_get_tree+0x92/0x320 [ 78.666698][ T7272] vfs_cmd_create+0xd7/0x2a0 [ 78.666721][ T7272] __do_sys_fsconfig+0x55a/0xcb0 [ 78.666748][ T7272] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 78.666772][ T7272] ? fput+0x79/0x100 [ 78.666806][ T7272] do_syscall_64+0x115/0x870 [ 78.666824][ T7272] ? clear_bhb_loop+0x40/0x90 [ 78.666845][ T7272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.666863][ T7272] RIP: 0033:0x7fe1ee19df99 [ 78.666879][ T7272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.666896][ T7272] RSP: 002b:00007fe1eefcb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 78.666922][ T7272] RAX: ffffffffffffffda RBX: 00007fe1ee425fa0 RCX: 00007fe1ee19df99 [ 78.666934][ T7272] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 78.666944][ T7272] RBP: 00007fe1eefcb090 R08: 0000000000000000 R09: 0000000000000000 [ 78.666954][ T7272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.666964][ T7272] R13: 00007fe1ee426038 R14: 00007fe1ee425fa0 R15: 00007ffe0f762b18 [ 78.666988][ T7272] [ 78.840003][ T7265] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.847048][ T7265] syz.0.384 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 78.895350][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 78.939070][ T42] kauditd_printk_skb: 265 callbacks suppressed [ 78.939083][ T42] audit: type=1400 audit(78.873:815): avc: denied { map } for pid=7280 comm="syz.1.389" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 79.010032][ T42] audit: type=1400 audit(78.943:816): avc: denied { map_create } for pid=7282 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 79.015858][ T42] audit: type=1400 audit(78.943:817): avc: denied { map_read map_write } for pid=7282 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 79.049412][ T7285] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 79.058405][ T2327] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 79.087748][ T42] audit: type=1400 audit(79.013:818): avc: denied { read } for pid=7286 comm="syz.1.392" dev="nsfs" ino=4026532882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.094316][ T42] audit: type=1400 audit(79.013:819): avc: denied { open } for pid=7286 comm="syz.1.392" path="net:[4026532882]" dev="nsfs" ino=4026532882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.101029][ T42] audit: type=1400 audit(79.023:820): avc: denied { create } for pid=7286 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 79.106683][ T42] audit: type=1400 audit(79.023:821): avc: denied { ioctl } for pid=7286 comm="syz.1.392" path="socket:[16295]" dev="sockfs" ino=16295 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 79.133198][ T42] audit: type=1400 audit(79.063:822): avc: denied { associate } for pid=7288 comm="syz.1.393" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 79.139647][ T42] audit: type=1400 audit(79.073:823): avc: denied { set_context_mgr } for pid=7288 comm="syz.1.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 79.140351][ T7289] binder: 7288:7289 ioctl c0306201 200000000040 returned -22 [ 79.154222][ T42] audit: type=1400 audit(79.083:824): avc: denied { name_bind } for pid=7288 comm="syz.1.393" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 79.194615][ T7291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.202391][ T7291] netlink: 160 bytes leftover after parsing attributes in process `syz.1.394'. [ 79.218387][ T2327] usb 7-1: Using ep0 maxpacket: 32 [ 79.219691][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.227013][ T2327] usb 7-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 8 [ 79.230408][ T2327] usb 7-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.234278][ T2327] usb 7-1: config 1 interface 0 has no altsetting 0 [ 79.238461][ T2327] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 79.241227][ T2327] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.243692][ T2327] usb 7-1: Product: syz [ 79.245043][ T2327] usb 7-1: Manufacturer: syz [ 79.246510][ T2327] usb 7-1: SerialNumber: syz [ 79.252215][ T7274] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 79.254577][ T7274] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 79.298224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.479821][ T2327] usb 7-1: USB disconnect, device number 5 [ 79.508796][ T7299] netlink: 'syz.0.397': attribute type 63 has an invalid length. [ 79.511170][ T7299] netlink: 5 bytes leftover after parsing attributes in process `syz.0.397'. [ 79.513920][ T7299] gretap0: entered allmulticast mode [ 79.515975][ T7299] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 79.535456][ T29] usb 8-1: USB disconnect, device number 5 [ 79.556095][ T29] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 79.621164][ T163] rpcbind: server 127.0.0.1 not responding, timed out [ 79.760992][ T7313] SELinux: syz.3.403 (7313) wrote to user. This is no longer supported. [ 79.884114][ T7322] evm: overlay not supported [ 79.904060][ T7322] Bluetooth: MGMT ver 1.23 [ 79.940610][ T7310] infiniband syz1: set down [ 79.943337][ T7310] infiniband syz1: added ipvlan0 [ 79.967684][ T7310] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 79.974017][ T7310] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 79.981732][ T7310] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 80.057886][ T7310] RDS/IB: syz1: added [ 80.060448][ T7337] loop5: detected capacity change from 0 to 7 [ 80.062482][ T7310] smc: adding ib device syz1 with port count 1 [ 80.067478][ T7337] loop5: p3 p4 [ 80.067498][ T7337] loop5: partition table partially beyond EOD, truncated [ 80.075970][ T7310] smc: ib device syz1 port 1 has no pnetid [ 80.242198][ T6186] udevd[6186]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 80.247983][ T6837] udevd[6837]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 80.254869][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.297507][ T7351] 9p: Bad value for 'version' [ 80.398014][ T7355] fuse: fd is not a fuse device [ 80.459152][ T34] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 80.539800][ T7362] syzkaller1: entered allmulticast mode [ 80.629872][ T34] usb 6-1: not running at top speed; connect to a high speed hub [ 80.633596][ T34] usb 6-1: config 1 interface 0 altsetting 19 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.637984][ T34] usb 6-1: config 1 interface 0 has no altsetting 0 [ 80.642924][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.645618][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.650573][ T34] usb 6-1: Product: syz [ 80.652040][ T34] usb 6-1: Manufacturer: syz [ 80.653598][ T34] usb 6-1: SerialNumber: syz [ 80.758023][ T7382] netlink: 160 bytes leftover after parsing attributes in process `syz.3.424'. [ 80.888720][ T36] rpcbind: server 127.0.0.1 not responding, timed out [ 80.903367][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.932338][ T34] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 80.943658][ T34] usb 6-1: USB disconnect, device number 6 [ 80.955740][ T7390] nicvf0: renamed from team0 (while UP) [ 80.973267][ T7390] nicvf0: Cannot enslave team device to itself [ 80.979711][ T7390] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 81.060897][ T7393] netlink: 'syz.3.428': attribute type 1 has an invalid length. [ 81.077987][ T7393] bond1: entered promiscuous mode [ 81.080464][ T7393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.304377][ T7411] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 81.309334][ T7411] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 81.341121][ T7413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.347506][ T7413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.547475][ T1045] cfg80211: failed to load regulatory.db [ 81.553615][ T7417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.652149][ T7417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.760131][ T7417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.903431][ T7417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.948633][ T7444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.954679][ T7444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.957457][ T7444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.998600][ T5842] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.009907][ T5842] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.025180][ T5842] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.043869][ T5842] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.629131][ T7454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.449'. [ 82.662720][ T7464] FAULT_INJECTION: forcing a failure. [ 82.662720][ T7464] name failslab, interval 1, probability 0, space 0, times 0 [ 82.667920][ T7464] CPU: 0 UID: 0 PID: 7464 Comm: syz.0.451 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.667947][ T7464] Tainted: [L]=SOFTLOCKUP [ 82.667953][ T7464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.667975][ T7464] Call Trace: [ 82.667983][ T7464] [ 82.667990][ T7464] dump_stack_lvl+0x100/0x190 [ 82.668192][ T7464] should_fail_ex.cold+0x5/0xa [ 82.668249][ T7464] should_failslab+0xc2/0x120 [ 82.668299][ T7464] __kmalloc_cache_noprof+0x91/0x6c0 [ 82.668330][ T7464] ? xprt_alloc+0x590/0x9d0 [ 82.668443][ T7464] xprt_alloc+0x590/0x9d0 [ 82.668472][ T7464] xs_setup_xprt+0xaf/0x3c0 [ 82.668492][ T7464] xs_setup_udp+0x43/0x960 [ 82.668515][ T7464] xprt_create_transport+0x16c/0x740 [ 82.668541][ T7464] ? down_write+0x146/0x1f0 [ 82.668593][ T7464] rpc_create+0x390/0x7f0 [ 82.668614][ T7464] ? __pfx_rpc_create+0x10/0x10 [ 82.668641][ T7464] ? __lock_acquire+0x49f/0x1a40 [ 82.668699][ T7464] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.668734][ T7464] nfs_mount+0x42d/0x7f0 [ 82.668812][ T7464] ? __pfx_nfs_mount+0x10/0x10 [ 82.668832][ T7464] ? arch_stack_walk+0xa6/0xf0 [ 82.668882][ T7464] ? kasan_save_stack+0x30/0x50 [ 82.668902][ T7464] ? kasan_save_track+0x14/0x30 [ 82.668921][ T7464] ? __kasan_kmalloc+0xaa/0xb0 [ 82.668939][ T7464] ? __kmalloc_node_track_caller_noprof+0x331/0x830 [ 82.668960][ T7464] ? kmemdup_nul+0x49/0xd0 [ 82.668980][ T7464] ? nfs_get_tree+0x7dd/0x1450 [ 82.669000][ T7464] ? vfs_get_tree+0x92/0x320 [ 82.669025][ T7464] ? vfs_cmd_create+0xd7/0x2a0 [ 82.669063][ T7464] ? __do_sys_fsconfig+0x55a/0xcb0 [ 82.669087][ T7464] ? do_syscall_64+0x115/0x870 [ 82.669106][ T7464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.669130][ T7464] nfs_request_mount.constprop.0.isra.0+0x4c0/0x730 [ 82.669165][ T7464] ? __pfx_nfs_request_mount.constprop.0.isra.0+0x10/0x10 [ 82.669206][ T7464] nfs_try_get_tree+0x32d/0xa40 [ 82.669235][ T7464] ? __pfx_nfs_try_get_tree+0x10/0x10 [ 82.669263][ T7464] ? lock_acquire+0x1b9/0x370 [ 82.669290][ T7464] ? find_held_lock+0x2b/0x80 [ 82.669323][ T7464] ? do_raw_read_unlock+0x3f/0x70 [ 82.669352][ T7464] nfs_get_tree+0xa61/0x1450 [ 82.669377][ T7464] vfs_get_tree+0x92/0x320 [ 82.669402][ T7464] vfs_cmd_create+0xd7/0x2a0 [ 82.669428][ T7464] __do_sys_fsconfig+0x55a/0xcb0 [ 82.669455][ T7464] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 82.669479][ T7464] ? fput+0x79/0x100 [ 82.669534][ T7464] do_syscall_64+0x115/0x870 [ 82.669555][ T7464] ? clear_bhb_loop+0x40/0x90 [ 82.669576][ T7464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.669595][ T7464] RIP: 0033:0x7ff609b9df99 [ 82.669611][ T7464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.669628][ T7464] RSP: 002b:00007ff60a9c2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 82.669656][ T7464] RAX: ffffffffffffffda RBX: 00007ff609e25fa0 RCX: 00007ff609b9df99 [ 82.669667][ T7464] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 82.669677][ T7464] RBP: 00007ff60a9c2090 R08: 0000000000000000 R09: 0000000000000000 [ 82.669688][ T7464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.669699][ T7464] R13: 00007ff609e26038 R14: 00007ff609e25fa0 R15: 00007ffc86dca498 [ 82.669724][ T7464] [ 82.932611][ T7483] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.456' sets config #511 [ 82.937869][ T7477] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.456' sets config #511 [ 82.945532][ T7477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.456'. [ 82.952929][ T7483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.456'. [ 83.026617][ T7487] bridge_slave_1: left allmulticast mode [ 83.030288][ T7487] bridge_slave_1: left promiscuous mode [ 83.036435][ T7487] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.037025][ T7493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.459'. [ 83.049008][ T7487] bridge_slave_0: left allmulticast mode [ 83.050913][ T7487] bridge_slave_0: left promiscuous mode [ 83.053531][ T7487] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.072008][ T7496] netlink: 'syz.2.460': attribute type 1 has an invalid length. [ 83.137595][ T7501] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.145611][ T7501] bond1: (slave bond2): making interface the new active one [ 83.148724][ T7501] bond1: (slave bond2): Enslaving as an active interface with an up link [ 83.342215][ T7520] IPVS: length: 18 != 8 [ 83.344889][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 83.368610][ T29] net_ratelimit: 5 callbacks suppressed [ 83.368626][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.415389][ T7528] trusted_key: syz.3.468 sent an empty control message without MSG_MORE. [ 83.421821][ T7528] openvswitch: netlink: IPv4 tunnel dst address is zero [ 83.448972][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.860770][ T7573] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 83.977346][ T42] kauditd_printk_skb: 89 callbacks suppressed [ 83.977370][ T42] audit: type=1400 audit(83.903:914): avc: denied { write } for pid=5735 comm="syz-executor" name="bus" dev="tmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 84.011223][ T7584] netlink: 64 bytes leftover after parsing attributes in process `syz.1.473'. [ 84.037491][ T42] audit: type=1400 audit(83.903:915): avc: denied { rmdir } for pid=5735 comm="syz-executor" name="index" dev="tmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 84.056309][ T42] audit: type=1400 audit(83.903:916): avc: denied { write } for pid=5735 comm="syz-executor" name="bus" dev="tmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 84.056508][ T7585] netlink: 64 bytes leftover after parsing attributes in process `syz.1.473'. [ 84.096904][ T7584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7584 comm=syz.1.473 [ 84.119897][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.134067][ T42] audit: type=1400 audit(84.023:917): avc: denied { write } for pid=7589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.191209][ T42] audit: type=1400 audit(84.123:918): avc: denied { write } for pid=7597 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.279801][ T7601] FAULT_INJECTION: forcing a failure. [ 84.279801][ T7601] name failslab, interval 1, probability 0, space 0, times 0 [ 84.285297][ T7601] CPU: 0 UID: 0 PID: 7601 Comm: syz.0.474 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.285323][ T7601] Tainted: [L]=SOFTLOCKUP [ 84.285330][ T7601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.285353][ T7601] Call Trace: [ 84.285360][ T7601] [ 84.285367][ T7601] dump_stack_lvl+0x100/0x190 [ 84.285460][ T7601] should_fail_ex.cold+0x5/0xa [ 84.285516][ T7601] should_failslab+0xc2/0x120 [ 84.285555][ T7601] __kmalloc_cache_noprof+0x91/0x6c0 [ 84.285587][ T7601] ? xprt_alloc+0x590/0x9d0 [ 84.285658][ T7601] xprt_alloc+0x590/0x9d0 [ 84.285684][ T7601] xs_setup_xprt+0xaf/0x3c0 [ 84.285702][ T7601] xs_setup_udp+0x43/0x960 [ 84.285723][ T7601] xprt_create_transport+0x16c/0x740 [ 84.285750][ T7601] ? down_write+0x146/0x1f0 [ 84.285796][ T7601] rpc_create+0x390/0x7f0 [ 84.285814][ T7601] ? __pfx_rpc_create+0x10/0x10 [ 84.285837][ T7601] ? __lock_acquire+0x49f/0x1a40 [ 84.285885][ T7601] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.285924][ T7601] nfs_mount+0x42d/0x7f0 [ 84.285973][ T7601] ? __pfx_nfs_mount+0x10/0x10 [ 84.285990][ T7601] ? arch_stack_walk+0xa6/0xf0 [ 84.286036][ T7601] ? kasan_save_stack+0x30/0x50 [ 84.286058][ T7601] ? kasan_save_track+0x14/0x30 [ 84.286079][ T7601] ? __kasan_kmalloc+0xaa/0xb0 [ 84.286096][ T7601] ? __kmalloc_node_track_caller_noprof+0x331/0x830 [ 84.286115][ T7601] ? kmemdup_nul+0x49/0xd0 [ 84.286133][ T7601] ? nfs_get_tree+0x7dd/0x1450 [ 84.286151][ T7601] ? vfs_get_tree+0x92/0x320 [ 84.286173][ T7601] ? vfs_cmd_create+0xd7/0x2a0 [ 84.286216][ T7601] ? __do_sys_fsconfig+0x55a/0xcb0 [ 84.286238][ T7601] ? do_syscall_64+0x115/0x870 [ 84.286255][ T7601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.286277][ T7601] nfs_request_mount.constprop.0.isra.0+0x4c0/0x730 [ 84.286308][ T7601] ? __pfx_nfs_request_mount.constprop.0.isra.0+0x10/0x10 [ 84.286347][ T7601] nfs_try_get_tree+0x32d/0xa40 [ 84.286382][ T7601] ? __pfx_nfs_try_get_tree+0x10/0x10 [ 84.286407][ T7601] ? lock_acquire+0x1b9/0x370 [ 84.286427][ T7601] ? find_held_lock+0x2b/0x80 [ 84.286456][ T7601] ? do_raw_read_unlock+0x3f/0x70 [ 84.286481][ T7601] nfs_get_tree+0xa61/0x1450 [ 84.286508][ T7601] vfs_get_tree+0x92/0x320 [ 84.286534][ T7601] vfs_cmd_create+0xd7/0x2a0 [ 84.286558][ T7601] __do_sys_fsconfig+0x55a/0xcb0 [ 84.286582][ T7601] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 84.286603][ T7601] ? fput+0x79/0x100 [ 84.286631][ T7601] do_syscall_64+0x115/0x870 [ 84.286650][ T7601] ? clear_bhb_loop+0x40/0x90 [ 84.286673][ T7601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.286692][ T7601] RIP: 0033:0x7ff609b9df99 [ 84.286707][ T7601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.286722][ T7601] RSP: 002b:00007ff60a9c2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 84.286746][ T7601] RAX: ffffffffffffffda RBX: 00007ff609e25fa0 RCX: 00007ff609b9df99 [ 84.286757][ T7601] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 84.286766][ T7601] RBP: 00007ff60a9c2090 R08: 0000000000000000 R09: 0000000000000000 [ 84.286775][ T7601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.286784][ T7601] R13: 00007ff609e26038 R14: 00007ff609e25fa0 R15: 00007ffc86dca498 [ 84.286808][ T7601] [ 84.413900][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.432180][ T42] audit: type=1400 audit(84.363:919): avc: denied { write } for pid=7606 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.454786][ T42] audit: type=1400 audit(84.383:920): avc: denied { open } for pid=7609 comm="syz.0.476" path="/dev/ptyq5" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 84.484652][ T42] audit: type=1400 audit(84.413:921): avc: denied { write } for pid=7613 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.492056][ T42] audit: type=1400 audit(84.423:922): avc: denied { ioctl } for pid=7609 comm="syz.0.476" path="/dev/ttyq5" dev="devtmpfs" ino=388 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 84.499882][ T5840] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 84.502979][ T7611] __nla_validate_parse: 1 callbacks suppressed [ 84.502989][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'. [ 84.552125][ T42] audit: type=1400 audit(84.483:923): avc: denied { write } for pid=7619 comm="syz.0.478" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 84.620124][ T7626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.662087][ T5840] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 84.665609][ T5840] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.669413][ T5840] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 84.670997][ T7629] zram0: detected capacity change from 0 to 8 [ 84.672744][ T5840] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.679565][ T5840] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 84.682556][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 84.685352][ T5840] usb 6-1: Product: syz [ 84.686776][ T5840] usb 6-1: Manufacturer: syz [ 84.701341][ T5840] cdc_wdm 6-1:1.0: skipping garbage [ 84.703127][ T5840] cdc_wdm 6-1:1.0: skipping garbage [ 84.711676][ T7634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.711684][ T5840] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 84.711699][ T5840] cdc_wdm 6-1:1.0: Unknown control protocol [ 84.906628][ T5840] usb 6-1: USB disconnect, device number 7 [ 85.094737][ T7649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.099581][ T7649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.106074][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 85.448525][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.696631][ T7657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.489'. [ 85.970150][ T7665] tipc: Can't bind to reserved service type 2 [ 86.029357][ T7667] syzkaller0: entered promiscuous mode [ 86.031165][ T7667] syzkaller0: entered allmulticast mode [ 86.046079][ T7667] netlink: 45 bytes leftover after parsing attributes in process `syz.1.493'. [ 86.162044][ T7678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.497'. [ 86.165785][ T7678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.497'. [ 86.169894][ T7676] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 44 [ 86.253254][ T7685] netlink: 16 bytes leftover after parsing attributes in process `syz.3.498'. [ 86.491356][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.494051][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.614084][ T5746] Bluetooth: hci0: unexpected subevent 0x19 length: 24 < 28 [ 86.650684][ T36] rpcbind: server 127.0.0.1 not responding, timed out [ 88.569306][ T1045] net_ratelimit: 2 callbacks suppressed [ 88.569325][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.195693][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 89.195713][ T42] audit: type=1400 audit(89.123:950): avc: denied { write } for pid=7753 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.209032][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.247741][ T42] audit: type=1400 audit(89.173:951): avc: denied { write } for pid=7756 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.608591][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.768734][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.648654][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.128592][ T1172] rpcbind: server 127.0.0.1 not responding, timed out [ 91.688525][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.249880][ T848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.728541][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.060470][ T848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.688533][ T1172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.768615][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.328946][ T163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.332206][ T848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.808640][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.968605][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.848713][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.890833][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.370018][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.528341][ T222] rpcbind: server 127.0.0.1 not responding, timed out [ 97.928544][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.968575][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.448734][ T222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.451977][ T163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.008487][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.048539][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.088877][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.490155][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.128619][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.168857][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.568689][ T222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.210050][ T1172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.213137][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.473599][ T42] audit: type=1400 audit(105.403:952): avc: denied { read append } for pid=7778 comm="syz.1.508" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 105.484885][ T42] audit: type=1400 audit(105.413:953): avc: denied { open } for pid=7778 comm="syz.1.508" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 105.509683][ T42] audit: type=1400 audit(105.443:954): avc: denied { read } for pid=7782 comm="syz.3.510" name="usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 105.530225][ T7790] mmap: syz.0.511 (7790) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.532852][ T42] audit: type=1400 audit(105.463:955): avc: denied { map } for pid=7782 comm="syz.3.510" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 105.545291][ T7783] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 105.579727][ T42] audit: type=1400 audit(105.513:956): avc: denied { map } for pid=7778 comm="syz.1.508" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 105.587316][ T42] audit: type=1400 audit(105.513:957): avc: denied { write } for pid=7778 comm="syz.1.508" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 105.598391][ T42] audit: type=1400 audit(105.523:958): avc: denied { write } for pid=7796 comm="syz.2.512" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 105.607181][ T7798] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 105.610210][ T42] audit: type=1400 audit(105.523:959): avc: denied { open } for pid=7796 comm="syz.2.512" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 105.610681][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 105.738638][ T42] audit: type=1400 audit(105.663:960): avc: denied { append } for pid=7812 comm="syz.1.518" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.768286][ T42] audit: type=1400 audit(105.693:961): avc: denied { map } for pid=7812 comm="syz.1.518" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.773249][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 105.782121][ T7821] netlink: 20 bytes leftover after parsing attributes in process `syz.2.516'. [ 105.813986][ T5842] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.814025][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 105.817931][ T5842] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.822145][ T7821] netlink: 20 bytes leftover after parsing attributes in process `syz.2.516'. [ 105.824857][ T5842] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.832642][ T5842] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.067801][ T7836] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 106.071218][ T7836] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 106.074182][ T7836] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 106.076627][ T7836] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 106.080618][ T7836] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 106.082847][ T7836] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 106.349315][ T7858] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.532'. [ 106.353428][ T7858] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.532'. [ 106.430734][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'. [ 106.433709][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'. [ 106.438064][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'. [ 106.447232][ T7870] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 106.449252][ T7870] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 106.453824][ T7870] vhci_hcd vhci_hcd.0: Device attached [ 106.519646][ T7874] sg_write: data in/out 65516/120 bytes for SCSI command 0xa-- guessing data in; [ 106.519646][ T7874] program syz.0.535 not setting count and/or reply_len properly [ 106.555299][ T7874] syzkaller0: entered promiscuous mode [ 106.557199][ T7874] syzkaller0: entered allmulticast mode [ 106.688827][ T5819] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 106.731168][ T7889] capability: warning: `syz.1.540' uses 32-bit capabilities (legacy support in use) [ 107.331079][ T7871] vhci_hcd: connection reset by peer [ 107.334957][ T5842] vhci_hcd vhci_hcd.0: stop threads [ 107.336676][ T5842] vhci_hcd vhci_hcd.0: release socket [ 107.339878][ T5842] vhci_hcd vhci_hcd.0: disconnect device [ 107.809229][ T7925] SELinux: policydb string length 1723576584 does not match expected length 8 [ 107.814669][ T7925] SELinux: failed to load policy qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 107.861408][ T7927] tipc: Failed to obtain node identity [ 107.863327][ T7927] tipc: Enabling of bearer rejected, failed to enable media [ 108.014528][ T7930] vhci_hcd vhci_hcd.0: remove, state 4 [ 108.016682][ T7930] usb usb38: USB disconnect, device number 1 [ 108.033009][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 108.034993][ T5841] vhci_hcd vhci_hcd.0: release socket [ 108.037460][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 108.040073][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 108.042142][ T5841] vhci_hcd vhci_hcd.0: release socket [ 108.043858][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 108.045727][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 108.047347][ T5841] vhci_hcd vhci_hcd.0: release socket [ 108.049109][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 108.050897][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 108.052585][ T5841] vhci_hcd vhci_hcd.0: release socket [ 108.054270][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 108.056097][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 108.057692][ T5841] vhci_hcd vhci_hcd.0: release socket [ 108.059450][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 108.061469][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 108.062934][ T5841] vhci_hcd vhci_hcd.0: release socket [ 108.064425][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 108.066221][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 108.067863][ T5841] vhci_hcd vhci_hcd.0: release socket [ 108.069677][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 108.071706][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 108.073408][ T5841] vhci_hcd vhci_hcd.0: release socket [ 108.075102][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 108.076827][ T7930] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 108.086480][ T7930] vhci_hcd vhci_hcd.0: remove, state 1 [ 108.089204][ T7930] usb usb37: USB disconnect, device number 1 [ 108.158266][ T5812] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 108.318331][ T5812] usb 6-1: Using ep0 maxpacket: 32 [ 108.321823][ T5812] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 108.325893][ T5812] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 108.329779][ T5812] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 58, changing to 9 [ 108.333644][ T5812] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25244, setting to 1024 [ 108.337082][ T5812] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 108.344108][ T5812] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 108.347597][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.350892][ T5812] usb 6-1: Product: syz [ 108.352626][ T5812] usb 6-1: Manufacturer: syz [ 108.354461][ T5812] usb 6-1: SerialNumber: syz [ 108.367414][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 108.379119][ T5812] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input10 [ 108.578218][ T5812] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 108.581027][ T5812] (id 0x00) [ 108.630482][ T5746] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.634682][ T5746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.639686][ T5812] rc_core: IR keymap rc-imon-pad not found [ 108.644377][ T5812] Registered IR keymap rc-empty [ 108.646778][ T5812] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 108.648306][ T5746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.651365][ T5812] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 108.661486][ T5746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.667970][ T5746] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.782685][ T5812] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 108.790589][ T5812] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input11 [ 108.798238][ T5812] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:8> initialized [ 109.259223][ T7935] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.262433][ T7935] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.265617][ T7935] bridge_slave_0: entered allmulticast mode [ 109.269749][ T7935] bridge_slave_0: entered promiscuous mode [ 109.274754][ T7935] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.277871][ T7935] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.281065][ T7935] bridge_slave_1: entered allmulticast mode [ 109.284802][ T7935] bridge_slave_1: entered promiscuous mode [ 109.310941][ T7935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.316029][ T7935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.322149][ T7952] imon:vfd_write: invalid payload size [ 109.333581][ T7935] team0: Port device team_slave_0 added [ 109.336914][ T7935] team0: Port device team_slave_1 added [ 109.351781][ T7935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.354096][ T7935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.362449][ T7935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.367066][ T7935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.368439][ T1045] net_ratelimit: 79 callbacks suppressed [ 109.368453][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.369688][ T7935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.382655][ T7935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.410898][ T7935] hsr_slave_0: entered promiscuous mode [ 109.413481][ T7935] hsr_slave_1: entered promiscuous mode [ 109.415705][ T7935] debugfs: 'hsr0' already exists in 'hsr' [ 109.417559][ T7935] Cannot create hsr debugfs directory [ 109.539617][ T7935] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.545790][ T7935] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.549993][ T7935] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.555756][ T7935] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.559671][ T7935] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.566048][ T7935] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.570016][ T7935] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.575733][ T7935] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.673635][ T7935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.688565][ T163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.697178][ T7935] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.707014][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.709896][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.724486][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.727368][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.990681][ T7935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.163816][ T7935] veth0_vlan: entered promiscuous mode [ 110.174155][ T7935] veth1_vlan: entered promiscuous mode [ 110.193827][ T7935] veth0_macvtap: entered promiscuous mode [ 110.198311][ T7935] veth1_macvtap: entered promiscuous mode [ 110.211438][ T7935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.218439][ T7935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.229810][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.234110][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.239045][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.242729][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.249071][ T163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.313959][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.316632][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.335510][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.338925][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.409759][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.485874][ T7980] syzkaller0: entered promiscuous mode [ 110.487716][ T7980] syzkaller0: entered allmulticast mode [ 110.728416][ T64] Bluetooth: hci3: command tx timeout [ 110.754563][ T42] kauditd_printk_skb: 54 callbacks suppressed [ 110.754592][ T42] audit: type=1400 audit(110.683:1016): avc: denied { append } for pid=7983 comm="syz.4.554" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 110.859894][ T42] audit: type=1400 audit(110.793:1017): avc: denied { setopt } for pid=7987 comm="syz.4.556" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.870649][ T42] audit: type=1400 audit(110.803:1018): avc: denied { shutdown } for pid=7987 comm="syz.4.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.873758][ T5844] usb 6-1: USB disconnect, device number 8 [ 110.903182][ T42] audit: type=1400 audit(110.833:1019): avc: denied { setopt } for pid=7989 comm="syz.1.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 110.917548][ T42] audit: type=1400 audit(110.843:1020): avc: denied { setattr } for pid=7989 comm="syz.1.557" name="SCTPv6" dev="sockfs" ino=22580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.927116][ T42] audit: type=1400 audit(110.853:1021): avc: denied { ioctl } for pid=7989 comm="syz.1.557" path="socket:[22581]" dev="sockfs" ino=22581 ioctlcmd=0x6f49 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 110.936894][ T42] audit: type=1400 audit(110.863:1022): avc: denied { create } for pid=7989 comm="syz.1.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 110.978554][ T42] audit: type=1400 audit(110.913:1023): avc: denied { mount } for pid=7994 comm="syz.1.559" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 111.052074][ T7995] tmpfs: Group quota block hardlimit too large. [ 111.271533][ T8000] syz.1.560 (8000): drop_caches: 0 [ 111.449982][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.730606][ T8003] __nla_validate_parse: 4 callbacks suppressed [ 111.730629][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.561'. [ 111.735738][ T8003] block nbd0: not configured, cannot reconfigure [ 111.755019][ T8003] netlink: 'syz.4.561': attribute type 10 has an invalid length. [ 111.769705][ T5819] usb usb37-port1: attempt power cycle [ 111.800026][ T7930] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 111.801758][ T5842] vhci_hcd vhci_hcd.0: stop threads [ 111.804111][ T5842] vhci_hcd vhci_hcd.0: release socket [ 111.806100][ T5842] vhci_hcd vhci_hcd.0: disconnect device [ 111.808325][ T5842] vhci_hcd vhci_hcd.0: stop threads [ 111.810236][ T5842] ================================================================== [ 111.813300][ T5842] BUG: KASAN: slab-use-after-free in vhci_shutdown_connection.cold+0x2f1/0x37c [ 111.813543][ T7931] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller [ 111.816820][ T5842] Read of size 8 at addr ffff888057e68780 by task kworker/u32:5/5842 [ 111.816839][ T5842] [ 111.816852][ T5842] CPU: 2 UID: 0 PID: 5842 Comm: kworker/u32:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.816874][ T5842] Tainted: [L]=SOFTLOCKUP [ 111.816880][ T5842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.816903][ T5842] Workqueue: usbip_event event_handler [ 111.816988][ T5842] Call Trace: [ 111.816995][ T5842] [ 111.817001][ T5842] dump_stack_lvl+0x100/0x190 [ 111.817033][ T5842] print_report+0x13d/0x4b0 [ 111.817065][ T5842] ? __virt_addr_valid+0x239/0x430 [ 111.817103][ T5842] ? vhci_shutdown_connection.cold+0x2f1/0x37c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 111.817133][ T5842] kasan_report+0xdf/0x1c0 [ 111.817181][ T5842] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 111.817207][ T5842] vhci_shutdown_connection.cold+0x2f1/0x37c [ 111.817233][ T5842] event_handler+0x216/0x570 [ 111.817248][ T5842] process_one_work+0xa23/0x1940 [ 111.817270][ T5842] ? __pfx_process_one_work+0x10/0x10 [ 111.817288][ T5842] ? __pfx_event_handler+0x10/0x10 [ 111.817304][ T5842] worker_thread+0x5ef/0xe50 [ 111.817323][ T5842] ? __pfx_worker_thread+0x10/0x10 [ 111.817340][ T5842] ? kthread+0x13a/0x450 [ 111.817354][ T5842] ? __pfx_worker_thread+0x10/0x10 [ 111.817388][ T5842] kthread+0x370/0x450 [ 111.817402][ T5842] ? __pfx_kthread+0x10/0x10 [ 111.817415][ T5842] ret_from_fork+0x72b/0xd50 [ 111.817438][ T5842] ? __pfx_ret_from_fork+0x10/0x10 [ 111.817457][ T5842] ? __switch_to+0x800/0x10f0 [ 111.817471][ T5842] ? __pfx_kthread+0x10/0x10 [ 111.817484][ T5842] ret_from_fork_asm+0x1a/0x30 [ 111.817507][ T5842] [ 111.817512][ T5842] [ 111.853658][ T7931] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 37 [ 111.854574][ T5842] Allocated by task 6411: [ 111.854598][ T5842] kasan_save_stack+0x30/0x50 [ 111.888379][ T5842] kasan_save_track+0x14/0x30 [ 111.889817][ T5842] __kasan_kmalloc+0xaa/0xb0 [ 111.891225][ T5842] __kmalloc_noprof+0x322/0x820 [ 111.892693][ T5842] __usb_create_hcd+0x5e/0xac0 [ 111.894254][ T5842] vhci_hcd_probe+0xf3/0x4e0 [ 111.895630][ T5842] platform_probe+0x106/0x1d0 [ 111.897052][ T5842] really_probe+0x241/0xa60 [ 111.898484][ T5842] __driver_probe_device+0x20e/0x450 [ 111.900120][ T5842] device_driver_attach+0xd1/0x220 [ 111.901760][ T5842] bind_store+0xf4/0x190 [ 111.903075][ T5842] drv_attr_store+0x74/0xb0 [ 111.904507][ T5842] sysfs_kf_write+0xf2/0x150 [ 111.905966][ T5842] kernfs_fop_write_iter+0x3e0/0x5f0 [ 111.907614][ T5842] vfs_write+0x6ac/0x1050 [ 111.908973][ T5842] ksys_write+0x12a/0x250 [ 111.910332][ T5842] do_syscall_64+0x115/0x870 [ 111.911840][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.913674][ T5842] [ 111.914432][ T5842] Freed by task 7930: [ 111.915672][ T5842] kasan_save_stack+0x30/0x50 [ 111.917139][ T5842] kasan_save_track+0x14/0x30 [ 111.918602][ T5842] kasan_save_free_info+0x3b/0x70 [ 111.920146][ T5842] __kasan_slab_free+0x5f/0x80 [ 111.921664][ T5842] kfree+0x22b/0x6c0 [ 111.922895][ T5842] usb_put_hcd+0x149/0x1f0 [ 111.924398][ T5842] vhci_hcd_remove+0x107/0x1b0 [ 111.926274][ T5842] platform_remove+0x5f/0x80 [ 111.927972][ T5842] device_remove+0xcb/0x180 [ 111.929360][ T5842] device_release_driver_internal+0x44e/0x620 [ 111.931222][ T5842] unbind_store+0xf8/0x110 [ 111.932557][ T5842] drv_attr_store+0x74/0xb0 [ 111.933933][ T5842] sysfs_kf_write+0xf2/0x150 [ 111.935373][ T5842] kernfs_fop_write_iter+0x3e0/0x5f0 [ 111.936956][ T5842] vfs_write+0x6ac/0x1050 [ 111.938319][ T5842] ksys_write+0x12a/0x250 [ 111.939677][ T5842] do_syscall_64+0x115/0x870 [ 111.941048][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.942776][ T5842] [ 111.943530][ T5842] Last potentially related work creation: [ 111.945280][ T5842] kasan_save_stack+0x30/0x50 [ 111.946761][ T5842] kasan_record_aux_stack+0xa7/0xc0 [ 111.948385][ T5842] insert_work+0x36/0x230 [ 111.949786][ T5842] __queue_work+0x9bc/0x12b0 [ 111.951343][ T5842] queue_work_on+0x1a9/0x1e0 [ 111.952905][ T5842] usb_hcd_giveback_urb+0x330/0x4a0 [ 111.954532][ T5842] unlink1+0x418/0x510 [ 111.955852][ T5842] usb_hcd_flush_endpoint+0x253/0x400 [ 111.957643][ T5842] usb_disable_interface+0x1ce/0x4c0 [ 111.959680][ T5842] usb_unbind_interface+0x3ce/0x9e0 [ 111.961783][ T5842] device_remove+0x12a/0x180 [ 111.963372][ T5842] device_release_driver_internal+0x44e/0x620 [ 111.965308][ T5842] bus_remove_device+0x2bc/0x560 [ 111.966873][ T5842] device_del+0x376/0x9b0 [ 111.968440][ T5842] usb_disable_device+0x367/0x810 [ 111.970483][ T5842] usb_disconnect+0x2e2/0x9a0 [ 111.972004][ T5842] usb_remove_hcd.cold+0x1ae/0x401 [ 111.973615][ T5842] vhci_hcd_remove+0xe0/0x1b0 [ 111.975086][ T5842] platform_remove+0x5f/0x80 [ 111.976613][ T5842] device_remove+0xcb/0x180 [ 111.978309][ T5842] device_release_driver_internal+0x44e/0x620 [ 111.980599][ T5842] unbind_store+0xf8/0x110 [ 111.982043][ T5842] drv_attr_store+0x74/0xb0 [ 111.983468][ T5842] sysfs_kf_write+0xf2/0x150 [ 111.984915][ T5842] kernfs_fop_write_iter+0x3e0/0x5f0 [ 111.986594][ T5842] vfs_write+0x6ac/0x1050 [ 111.988135][ T5842] ksys_write+0x12a/0x250 [ 111.989846][ T5842] do_syscall_64+0x115/0x870 [ 111.991307][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.993065][ T5842] [ 111.993798][ T5842] Second to last potentially related work creation: [ 111.995838][ T5842] kasan_save_stack+0x30/0x50 [ 111.997534][ T5842] kasan_record_aux_stack+0xa7/0xc0 [ 111.999521][ T5842] insert_work+0x36/0x230 [ 112.000853][ T5842] __queue_work+0x9bc/0x12b0 [ 112.002328][ T5842] queue_work_on+0x1a9/0x1e0 [ 112.003772][ T5842] usb_hcd_giveback_urb+0x330/0x4a0 [ 112.005515][ T5842] usb_hcd_poll_rh_status+0x5b3/0x7e0 [ 112.007590][ T5842] vhci_shutdown_connection.cold+0x2ae/0x37c [ 112.009804][ T5842] event_handler+0x216/0x570 [ 112.011313][ T5842] process_one_work+0xa23/0x1940 [ 112.012883][ T5842] worker_thread+0x5ef/0xe50 [ 112.014239][ T5842] kthread+0x370/0x450 [ 112.015363][ T5842] ret_from_fork+0x72b/0xd50 [ 112.016851][ T5842] ret_from_fork_asm+0x1a/0x30 [ 112.018740][ T5842] [ 112.019701][ T5842] The buggy address belongs to the object at ffff888057e68000 [ 112.019701][ T5842] which belongs to the cache kmalloc-8k of size 8192 [ 112.023980][ T5842] The buggy address is located 1920 bytes inside of [ 112.023980][ T5842] freed 8192-byte region [ffff888057e68000, ffff888057e6a000) [ 112.028314][ T5842] [ 112.029095][ T5842] The buggy address belongs to the physical page: [ 112.031168][ T5842] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e68 [ 112.033990][ T5842] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 112.036658][ T5842] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 112.039105][ T5842] page_type: f5(slab) [ 112.040376][ T5842] raw: 00fff00000000040 ffff88801bc43180 dead000000000100 dead000000000122 [ 112.043097][ T5842] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 112.045830][ T5842] head: 00fff00000000040 ffff88801bc43180 dead000000000100 dead000000000122 [ 112.048475][ T5842] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 112.051177][ T5842] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 112.053981][ T5842] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 112.056653][ T5842] page dumped because: kasan: bad access detected [ 112.058636][ T5842] page_owner tracks the page as allocated [ 112.060389][ T5842] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5995, tgid 5994 (syz.0.35), ts 57886432655, free_ts 57886266715 [ 112.066476][ T5842] post_alloc_hook+0xfd/0x120 [ 112.068001][ T5842] get_page_from_freelist+0xf48/0x3530 [ 112.069700][ T5842] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 112.071590][ T5842] new_slab+0xa2/0x640 [ 112.072871][ T5842] refill_objects+0xe3/0x410 [ 112.074326][ T5842] __pcs_replace_empty_main+0x376/0x680 [ 112.076050][ T5842] __kmalloc_cache_noprof+0x479/0x6c0 [ 112.077721][ T5842] audit_log_d_path+0xed/0x210 [ 112.079218][ T5842] audit_log_lsm_data+0x5bc/0x1fa0 [ 112.080867][ T5842] common_lsm_audit+0x229/0x2b0 [ 112.082424][ T5842] slow_avc_audit+0x186/0x210 [ 112.083904][ T5842] avc_has_extended_perms+0x9b7/0x1080 [ 112.085603][ T5842] ioctl_has_perm.constprop.0.isra.0+0x376/0x540 [ 112.087575][ T5842] selinux_file_ioctl+0x13b/0x290 [ 112.089160][ T5842] security_file_ioctl+0xfb/0x230 [ 112.090787][ T5842] __x64_sys_ioctl+0xb7/0x210 [ 112.092291][ T5842] page last free pid 5995 tgid 5994 stack trace: [ 112.094252][ T5842] __free_frozen_pages+0x79f/0x1090 [ 112.095876][ T5842] qlist_free_all+0x47/0xf0 [ 112.097302][ T5842] kasan_quarantine_reduce+0x1a0/0x1f0 [ 112.099029][ T5842] __kasan_slab_alloc+0x69/0x90 [ 112.100641][ T5842] __kmalloc_noprof+0x2bf/0x820 [ 112.102263][ T5842] tomoyo_realpath_from_path+0xb6/0x690 [ 112.103970][ T5842] tomoyo_path_number_perm+0x23c/0x580 [ 112.105702][ T5842] security_file_ioctl+0xd3/0x230 [ 112.107293][ T5842] __x64_sys_ioctl+0xb7/0x210 [ 112.108766][ T5842] do_syscall_64+0x115/0x870 [ 112.110231][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.112054][ T5842] [ 112.112785][ T5842] Memory state around the buggy address: [ 112.114530][ T5842] ffff888057e68680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.116991][ T5842] ffff888057e68700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.119483][ T5842] >ffff888057e68780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.122007][ T5842] ^ [ 112.123310][ T5842] ffff888057e68800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.125826][ T5842] ffff888057e68880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.128294][ T5842] ================================================================== [ 112.131335][ T42] audit: type=1400 audit(111.753:1024): avc: denied { write } for pid=5721 comm="syz-executor" path="pipe:[3599]" dev="pipefs" ino=3599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 112.141315][ T7931] vhci_hcd vhci_hcd.0: created sysfs vhci_hcd.0 [ 112.149242][ T7931] usb usb37: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 112.152974][ T7931] usb usb37: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 112.155970][ T7931] usb usb37: Product: USB/IP Virtual Host Controller [ 112.158211][ T7931] usb usb37: Manufacturer: Linux syzkaller vhci_hcd [ 112.160440][ T42] audit: type=1400 audit(112.083:1025): avc: denied { read } for pid=5127 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 112.167872][ T7931] usb usb37: SerialNumber: vhci_hcd.0 [ 112.175606][ T7931] hub 37-0:1.0: USB hub found [ 112.179303][ T7931] hub 37-0:1.0: 8 ports detected [ 112.194802][ T5842] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 112.197121][ T5842] CPU: 2 UID: 0 PID: 5842 Comm: kworker/u32:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.200607][ T5842] Tainted: [L]=SOFTLOCKUP [ 112.202019][ T5842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.205221][ T5842] Workqueue: usbip_event event_handler [ 112.206963][ T5842] Call Trace: [ 112.208014][ T5842] [ 112.209052][ T5842] dump_stack_lvl+0x100/0x190 [ 112.210497][ T5842] vpanic+0x552/0x970 [ 112.211801][ T5842] ? __pfx_vpanic+0x10/0x10 [ 112.213221][ T5842] ? mark_held_locks+0x40/0x70 [ 112.214726][ T5842] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 112.216637][ T5842] panic+0xd1/0xe0 [ 112.217817][ T5842] ? __pfx_panic+0x10/0x10 [ 112.219284][ T5842] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 112.221211][ T5842] ? preempt_schedule_common+0x42/0xc0 [ 112.222907][ T5842] ? check_panic_on_warn+0x1f/0x90 [ 112.224521][ T5842] check_panic_on_warn.cold+0x19/0x34 [ 112.226341][ T5842] end_report.part.0+0x3a/0x90 [ 112.227889][ T5842] kasan_report.cold+0xe/0x18 [ 112.229629][ T5842] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 112.232049][ T5842] vhci_shutdown_connection.cold+0x2f1/0x37c [ 112.234382][ T5842] event_handler+0x216/0x570 [ 112.236038][ T5842] process_one_work+0xa23/0x1940 [ 112.237703][ T5842] ? __pfx_process_one_work+0x10/0x10 [ 112.239504][ T5842] ? __pfx_event_handler+0x10/0x10 [ 112.241177][ T5842] worker_thread+0x5ef/0xe50 [ 112.242613][ T5842] ? __pfx_worker_thread+0x10/0x10 [ 112.244405][ T5842] ? kthread+0x13a/0x450 [ 112.245967][ T5842] ? __pfx_worker_thread+0x10/0x10 [ 112.247642][ T5842] kthread+0x370/0x450 [ 112.249067][ T5842] ? __pfx_kthread+0x10/0x10 [ 112.250529][ T5842] ret_from_fork+0x72b/0xd50 [ 112.252065][ T5842] ? __pfx_ret_from_fork+0x10/0x10 [ 112.253908][ T5842] ? __switch_to+0x800/0x10f0 [ 112.255644][ T5842] ? __pfx_kthread+0x10/0x10 [ 112.257400][ T5842] ret_from_fork_asm+0x1a/0x30 [ 112.259254][ T5842] [ 112.261025][ T5842] Kernel Offset: disabled [ 112.262392][ T5842] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:10:06 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a38b65 RDI=ffffffff9ba07b40 RBP=ffffffff9ba07b00 RSP=ffffc9000d6373b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000002f R14=ffffffff9b6fa20f R15=ffffffff85a38b00 RIP=ffffffff85a38b8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff60a9a16c0 ffffffff 00c00000 GS =0000 ffff8880d5ddc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c43a266 CR3=000000003ea76000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000290410 Opmask02=00000000ffffffff Opmask03=0000000000400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4e56f2c8 00007ffc4e56f2c8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4e56f4a0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c87e086e50 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89d39f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89d39f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326bb0d747483 737326be52172459 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b8946e382260724d 737373762ff49308 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 377570632f302f71 6d2f34706f6f6c2f 6b636f6c622f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003775 70632f302f716d2f 34706f6f6c2f6b63 6f6c622f6c617574 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cbe71d4b5113013e 000055cd228010df 0000000000000371 00000000302e3535 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c6d612c38 2c312c30722c4339 312c3739312c3938 312c3838312c3538 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3937312c3136 312c3131312c3031 312c32452c34442c 30442c45412c3841 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c34412c42382c30 382c33372c32372c 31376b2c34312c32 2c312c30652d3033 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4442654344464670 3243353176333030 30623a7475706e69 3d5341494c41444f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88803702aeb0 RCX=ffffffff84d7d656 RDX=ffff888034970000 RSI=ffffffff84d7d67b RDI=ffff88803702aeb6 RBP=0000000000000008 RSP=ffffc900038ef700 R8 =0000000000000002 R9 =0000000000000008 R10=0000000000000008 R11=0000000000000000 R12=000000000000000e R13=dffffc0000000000 R14=00000000000001af R15=0000000000000008 RIP=ffffffff84d7d67f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555581243540 ffffffff 00c00000 GS =0000 ffff8880d5edc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000035791000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000044402 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52d73f1823 00007f52d73f1823 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6370722076636572 206f742064656c69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52d73f1e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52d73f1e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558125cde8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616e676973206e77 6f6e6b6e75000a29 7325203a6425206f 6e7272652820000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444b424c56054b52 4a4b4e4b50000a0c 5600051f4100054a 4b5757400d05000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040010000fffffff ffffff040fffffff ffffff040010000a 0145ce3034303030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffff308078003 0030656c69662f2e 01ffffffffffffff ffef080180030880 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0108800400100007 8004018004001000 0a0145dc333d7469 6d696c647261685f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b636f6c625f6174 6f75717072672c61 746f757140080880 03007366706d7401 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff f308078003003065 6c69662f2e01ffff ffffffffffffef08 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0180030880040010 000fffffffffffff 040fffffffffffff 040010000a0145ce ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d206873756c666c 6320363365737020 74617020766f6d63 2061636d20656770 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e206c6c61637379 7320746820737320 3265737320657373 207273786620786d ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6373745f746e6174 736e6f63206d6c20 7063737464722062 6731657064702078 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a09746e656d6e 67696c615f656863 61630a3436203a09 657a697320687375 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6973796870207374 6962203634203a09 73657a6973207373 65726464610a3436 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 67616e616d207265 776f700a6c617574 7269762073746962 203834202c6c6163 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000060000006f 666e697570632f63 6f72702f0000000d 0a0a3a746e656d65 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81e8b0ce RDX=ffff888031b6a540 RSI=ffffffff81e8b0bc RDI=ffff888031b6a540 RBP=0000000000000001 RSP=ffffc90006b4f918 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=000000000000758b R12=1ffff92000d69f25 R13=0000000000000000 R14=ffff88805b70a540 R15=ffffc90006b4f9e0 RIP=ffffffff81e8b0be RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c450077 CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 347a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd82b11b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd82b11b6 00007ffcd82b11bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b3d4354a7 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b3d4354e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b3d43564b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b3d4354d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff81fdc702 RDX=0000000000000001 RSI=0000000000000000 RDI=ffff88802b432540 RBP=ffff88806a643540 RSP=ffffc9000e3df548 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4c86a9 R14=0000000000000001 R15=ffff88806a73c880 RIP=ffffffff820a5930 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555556ee7500 ffffffff 00c00000 GS =0000 ffff8880d60dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4b3e1556c8 CR3=0000000012fc8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 347a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd82b11b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd82b11b6 00007ffcd82b11bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b3d4354a7 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b3d4354e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b3d43564b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b3d4354d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000320 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a 0000000000000000 0000000000000000 0000000000000320 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000