last executing test programs: 11m14.60953737s ago: executing program 4 (id=70): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 11m13.624628135s ago: executing program 4 (id=73): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x56, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000040)=0x10000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bind$nfc_llcp(r5, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x6, 0x4) 11m12.040955222s ago: executing program 4 (id=76): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r5 = syz_io_uring_setup(0x72ae, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x36}, &(0x7f0000000500), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x2, 0x1, 0x1}, &(0x7f00000004c0)=0x0, &(0x7f0000001540)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r8) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="99742dbd7000fbdbdf251500000014000180100001006574683a6970766c031f616e"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) socket$nl_generic(0x10, 0x3, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) 11m10.3263024s ago: executing program 4 (id=79): sendmmsg(0xffffffffffffffff, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000001e80)=[{0x0}], 0x1}}], 0x1, 0x4009811) syz_emit_vhci(0x0, 0x2a) syz_emit_ethernet(0x17c, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$llc(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) unshare(0x22020600) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x38, 0x30, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x39, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) syz_pidfd_open(r3, 0x0) wait4(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 11m9.373650137s ago: executing program 4 (id=80): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x18, &(0x7f0000000200)=0x1) r1 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x10002f4e, &(0x7f0000000080)={0x0, 0x9e8d, 0x4000, 0x2, 0x342}, &(0x7f0000000000)=0x0, &(0x7f0000000100)) renameat2(0xffffffffffffffff, &(0x7f00000003c0)='.\x00', 0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f00000001c0)=0x10000, 0x0, 0x4) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101083, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd2b965090000b800800000ba000000000f860f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x63}], 0x1, 0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 11m4.639600075s ago: executing program 4 (id=89): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x296) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x1800000003000000, 0x200000000000021d, 0x1}}, 0x40) preadv2(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)}], 0x1) r7 = syz_io_uring_setup(0x7b3e, &(0x7f0000000140)={0x0, 0xc781, 0x2, 0x2, 0x2e6}, &(0x7f0000000240), &(0x7f0000000280)) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xdf}, {}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @alu={0x7, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x7}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0x0, 0x7, 0x2, 0x8, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x1, 0x69, &(0x7f0000000440)=""/105, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x5, 0x4, 0x4}, {0x0, 0x4, 0xf, 0x4}, {0x4, 0x5, 0xd, 0x6}, {0x5, 0x3, 0x7, 0x6}, {0x1, 0x5, 0x9, 0x5}], 0x10, 0x509}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000018c0)={r9, 0x0, 0xd80, 0xe6, &(0x7f00000006c0)="ff3a3e36e8b0ce6e7561cefc97a731aaa19daa39bf7fddcfcbd0abd442bd5d9dcdc2440922578a754a66b9ae07f7c58e376c3dfd5b956bf165dd70cff9b4d2d43562b7198f516b52cad841d43b18dcfe430cdc45bb20e2ae27c5c67d5f2973a8810605d0ad2ff6b766de93a3f4b98e48f9bb70365c3127ba211dba09c4e30e5ff6d556399fcdef2156bae8b88d13b4aa51183703b11c9d2f76102a126356df6443443f94428d0c1cc70880c38af52c416fb449c7eab957aa38bd0fd5fa9cf56667b7db6ddcd58a357e7b6030dce86a6b8f7bd8f309d6f2f7ad71ca52106f435c793d0995a8e09c37535f08d780a119b3b8a6a7218f4a6c1c43c650e3cd12197bda956ad6d644cf2c1ca242c2224b715523caa5c0d8ff6d60b3f4c61ff1cbbe78f1e7bde0a3d3466b105e40eb41dd566a44f271e65d5175148b98a3b1313b749a54a81a6456da383761485db2ee81b26c19b234d2c1ad9d4df1cad3afd7a81d645e26a0276b259076233e519477438a6b726b5b265a7c4c4fdeabcd6d3feda15dc0048ae7953c857f8c76149f1db0daae327626b34d7a1651da6bd15857ade524c5989f4d9a004112430604985a7f4766db6e7257d03d477068cc80cc63c929220230b58e566c72a7cae8825e92bfefcf4340d084da6a76db317ec4ba324939753e640353d2e3dacd9ba3d89f936d6d3f3d22b6bc980f40a09ab54f7bc1fad52860c7b3532b3f3144dea6b7d50b8c6b7a9d41b8a0bb41a55fd417eabb43ffe1a81002e8e3422319dd2b4c65155607463842c3c4ee76ec0ee2405f866d9c0390c52dcba9504ab95e18caf5d821cce9b9a1a273d893c9edc63c428a867af38a64b1a757e91d83901b12afbfc76b560853be0109605fa749f45b46cf139452d5e1582db6747e7de4f197b69759d465057cd8c9fd02e67c002eeb5dfc460d53f0850f11ea90b604b8cce1291c400d7034ac2831a2de5b6e7dae68d80a8463c2ce28c86ce03f2086c7f5ae4efc6f7485f21123dd736611bf7e2793c484f24641a01ee5a5997a6f51ca8bcd95193652cee7f48a8d7567b56f6f1251ddc6b63cf573d1b1837db7f949a42c07a91a78da71ee3b45dca98e9e0d82ea6902ee7cb27200f2d33179af9475457724db3448c7a3ae6b7123e9f6f1b9351bc64ff69f75849a64c0754c586cce132461424837070fb5b7486cd5ed389bb6d6a2df1ad9a534e56594370d49afd79819e3de844da9c565df877b4c18c11cf0f0cf0775dfb937158045a5bfe90332edb505b986ba5571a83f254b9e9cd2d0f3f97c2f59498b0fd9a0d081e46158c1b5379034baaf348f055d9ec245bd5263a206bdacfdcc17b68e980a4fd1c94a80fef3d2a7299ffba74d399a34c807999dd316d45a1b6aaf62264fd128685afc4d45fdb30ad92410f71b4e515ccb4cc7e9681c663967718e00b30bb9232cc302b6b0825657e25f11bb3dd9ac20f6d48836911595d429e6dca39b103e759237e50b7f29b452844c0e7161d0351302fd8afeec21a8a2a0ef7b10dc23a9d5273cc8d59302b76a279532e2f2d9a1e32c08f17c0eb3be1691c4f801e4de170f20291877ccfbb54896efe4319f5f03d6efad05f07cf8eefbc93f91a9a70df08a632f5ae536ce1b1b6d8a36c07d4dc20869ad60f040d0f56440f45759016e6df1f4efe78b2e0cc372077a1674c87b434459772b4588f17a1bba35a2bef3b604f6ab6240e27fb5b57d7469221f094c9a13af317093745a3aa1bbbef1d189a56651a947847e8f6acc6bb3f0cfb4deff19cf2a4ed7fc7c305bb050e777007c2b5f3bec815180b64a46827974e2c2acdc3d5c0187318065195a60db4621dfe405468d60165b4f2c406491449e6cceb5beeeb2dca3f7633213ee3844cb8eae8f4775ce8e714e558abab7c2d9f2bd620467b01f3dddab38e7e4e07d20638ba5b4a45d1f9a255296a8165cd98f6b35e63d29bbc09ebe369b6136fda3c44862e52372917c8684234b68a0d3224390e33f141831d98055e89000fc1d11bae20ed0253ec30f61d67c7414a2123e9b48040d104ada43df2c8a9d61d0ebdd4cadaefbda5cb2508e094fc35f6bd0fe6863fa079e7a32510e6c7f31d24ebc2a5d2ea038a04ef25afdb2635e487913c15c102f9911aff105ee7b1778770b9a26b53fffa954af80fd3182108d340c65155f85767d5e1beda5f83fe5f38674f6434e912b705bb62b0f254b07307337c184ffd7ed6e197f3a0f94f9b32f65009a80fbf300931e86e6560cd8f13c61e61ec85d54c2aafde0a3411b555bb771f1f31e3468f2716ebe8adde240945cba3d3cc2dd321fc87f61c453f4225ce3ac3dea86c06b0fd1f67c9f4df883c9b6c4158881f0d3b9c4b55986937a10830f6c11437311bea0bf63beee5815492a7c92b76644a7edc500aac721f01753528b27d3b8a3029349e8eb275afa6cf8a45798161981cd30de4e5bdd33a2fd93f9ccbc4d67993efa0ca2148f0496806951b5ffed6a29b593ef1e8663575c085ea3a42e3dde54b5b36931087fa0e5f4d50746843b7ea2a0cbb4c82598f3da755dc7987fae271f4a02446a3463119908392165a83cf16bac71b134bcf6cada4095de7c8aaed87c42f1a877147fd0e3561978429a326c4e70caa8de93375610a5e4d56d6dbd976fafd4553fd55c1c90c36cd61101b7746d93162a9e4dab1a8c6514c0f976159e1708fe1104cec6ee246a4f71882310ce2f242d3ac490e52e7bf0efe7fccab34ecc4c7e81490b2b281405c9660eca24d31d66ce21a52714dd2b36c1811261723587a832927aa407e6bb156ae9faa184ac470f387a8712a6e8f8b9a293068d96badeca2f1502c0ed59b92620de626d8f6faa29213921bb466885eb69f952b21cff240cc364145c4972b93284d2b746407c799cb9c17a7ce3c27f127f7369176f18ca4f4fc78e25d8e881e3c52026044fad8f834509e3e466b41f05886af3b365674f994daa5183af50c88da3f327f69e6f348d728bb9260585be5f6e91f04e3458218d7073fd8e14358893b6710a79d2d2f7f52651b35ac30114cfa8605d85f7fbc3ffbe87865578ba3fd76c45343037999eeef66d2b8308d5821e1e7fd688be91ca2225c1584b763c3b54e22c49e3e97bab200f297e29af6c446a6080d7ffbe42088559408f63b1f1bf6cca1e3c509d3412b9c8fb12db695bdadd724d95388c0b6db31e0a7104b1f3e17c8359571c1517aab184f3ca5c4680d4caa9304b73b0038169cae19de0a99e7ece16e68b091861a711d2c40edb7d398a0c840ffa8affe47f0de6a2ada1d6de2e78b7d70b8030f1e5fb2e9d226b587ae515dd91dc746be8eb8a90e81e72e9fc3588573e69e11d8f1ce2886b30b5db0b582630482165d4f325e8f7a39338c6eb7a9366b4152bcdd7f9ed4138999581eeaae55a4ef1b9a0f21df9399086176b5c0a4ef00e09997763a734b0f3447c2053fad5b6e9cfe209b4dc8f976d81aa53ec2c9b96611909f40c0195cb03548fa187e220294f9a067a592b80764efedb453f30b04071818f732cd61eb0f88d3b7e3d56d32cc49451eeb43c11cbccc9d8c98dc62a4efa71a606bb2f9aede29a56322ce4d0647f240b6be2642933cdfff6845b869d30b8fa6f47ce6a508a6f08b1bdd5d53f502847fd3fa00adaa44c6916c2384ff4f67fb17f3747f4b8886db45489cf97d10bbd65a23a0fbc1510305e0fc511a006f33ffe6ce316120dc4b2a364da6fe89f81aaf086e1429be0469cc77a27943eddf9e78f62e14e8fdfaa711f76fb46fdf906cfcc8543982648b4cf5d717d03d26f0681534066307663031d75eccc8b6292b8e4c16f00c6fcf4df0277f3cde8e19ec8dedf6e523e424e1b51938730114b9a2c87b04e61169a7109c89168c42a1a989134c96dd9714e51d22aa8c2dd5a0fd8119ef6798a362b95a6374e06f6be15c31861f4cceb8da3327ff64fd1ad4bace4a925833037d1de545b452e11936e80c7fdad620d8617037352b2f7ae62c8c5e61d08b7b8b24f54c4901ad3baa37c419f5d8c78e4325259d2d5b627d2729c16c1428bb73e8aa4fa13c2f97265476a4b1a2b63da7bb9e5c04009db8da59099db4a363fb3af70647fdcee61924c03593dfe850db409e888536ea4557845b3b1a1c2ecf3728e46605c75815712f65429beb5d11250fc76299355e6d73bb6eb6319b001e3f5be2952ba064b228f5ee90213bad022c5dffe1da985600fb752fe250e11e7ea43b461772639f2ae8a5972aaa5b14f42b27d255a03dbaaa25e13576f0f75e782ed6a60f66b88e15841141fe7a800e71b386edc326bdc88eab36e5af193ccade844fe81c71d3b9f01a1a3bdd9e74346c32e783c3966a958b0d5cf98758eaa1698b4dd67b19779c1518d3dee927906579e972be4886e05bc1d5551f8fa506e63f2dd67996f63259e9e8ef06038c764bcb332bef9b93fe8f65c50a5922c3baf9a4f6e455d1e0ef40d08d1110016360c0230aefa7ddbb4094bf6134f22d8988e27cd0bf3a9f263f8ba0e6b3a7d03a597429e73a9d53a18e5e336ab9cc5ecfbca7336b48a0c333fa48645e701c78c690defff4fd9d43b607eb9ee876aced1a19565c0a9a7219afdf0212789dfe73c0208f9764c2503f157d1ab122585a070a3ac811bc8f6164ca3b8ab0813dc172adf16f63ac3549bd65a6ea556450e9f827961e5a88a3834d9264adf00dd81563b8f5caa8d57963cc316388c3388d1b5097414caf6118f8ed7ab7072ea189afab30e20dee0058d4fb6036aa36a146b98fe6b8ba44e182162101d143c0a244b0f0dbd69cf58bec8f53da2e21bee703c3c0d1d718a3fe4698fd80e9b2e246de41313f3395dfd5df55d609161a605b734dac6fd5414bae96049d29f44231fb0b6cc63", &(0x7f00000016c0)=""/230, 0xbc000000, 0x0, 0x7b, 0x28, &(0x7f00000017c0)="2963488a6d8e0903213f55b5e2d0a2628fd1d9ebbad5bd821f2bf5131a1b2106c219986ab1f1279aa6113d5d6723874b8c9094c60ef85d94332517da461b25ed4674c9190c2953c73c1a84b919f03604d1f216258e84ba6bcf2b017363f9b91835064345743a62b8f701b0321d01670aa1f24f8f98cf7d33d8aba3", &(0x7f0000001880)="3e23e4b98f22633dfaf21ba286864e60ff2116cbadca05e005012391d9d9b48ce6510f02917001e3", 0x0, 0x0, 0x48000}, 0x50) close_range(r8, 0xffffffffffffffff, 0x0) 10m48.944520685s ago: executing program 32 (id=89): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x296) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x1800000003000000, 0x200000000000021d, 0x1}}, 0x40) preadv2(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)}], 0x1) r7 = syz_io_uring_setup(0x7b3e, &(0x7f0000000140)={0x0, 0xc781, 0x2, 0x2, 0x2e6}, &(0x7f0000000240), &(0x7f0000000280)) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xdf}, {}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @alu={0x7, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x7}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0x0, 0x7, 0x2, 0x8, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x1, 0x69, &(0x7f0000000440)=""/105, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x5, 0x4, 0x4}, {0x0, 0x4, 0xf, 0x4}, {0x4, 0x5, 0xd, 0x6}, {0x5, 0x3, 0x7, 0x6}, {0x1, 0x5, 0x9, 0x5}], 0x10, 0x509}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000018c0)={r9, 0x0, 0xd80, 0xe6, &(0x7f00000006c0)="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", &(0x7f00000016c0)=""/230, 0xbc000000, 0x0, 0x7b, 0x28, &(0x7f00000017c0)="2963488a6d8e0903213f55b5e2d0a2628fd1d9ebbad5bd821f2bf5131a1b2106c219986ab1f1279aa6113d5d6723874b8c9094c60ef85d94332517da461b25ed4674c9190c2953c73c1a84b919f03604d1f216258e84ba6bcf2b017363f9b91835064345743a62b8f701b0321d01670aa1f24f8f98cf7d33d8aba3", &(0x7f0000001880)="3e23e4b98f22633dfaf21ba286864e60ff2116cbadca05e005012391d9d9b48ce6510f02917001e3", 0x0, 0x0, 0x48000}, 0x50) close_range(r8, 0xffffffffffffffff, 0x0) 2m32.861959747s ago: executing program 5 (id=1064): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007"], 0x38}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture'], 0x86) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r7, r6, 0x0) r8 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r8, 0x4161, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c00010062697477"], 0x118}}, 0x0) 2m31.94606239s ago: executing program 5 (id=1069): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000000e0c0)=""/102400, 0x19000) mkdir(&(0x7f0000000200)='./file0\x00', 0x56) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x10, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={[], [{@uid_lt}], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000002440)=""/4084, 0xff4) r6 = socket(0x400000000010, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYBLOB="f907a28ec27ca42904e60f8a446124ad55b4", @ANYRES16=r6, @ANYRES16=r6, @ANYRESDEC, @ANYRES64=r5, @ANYRESOCT=r6, @ANYRES8=r5], 0x50) r8 = socket$packet(0x11, 0x3, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r7, @ANYBLOB="0000000000000000b708000062f3ffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000062c6b987850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000016c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r10 = creat(&(0x7f0000000080)='./file1\x00', 0x19c) r11 = fanotify_init(0xf00, 0x40000) fanotify_mark(r11, 0x105, 0x4000997d, r10, 0x0) pipe2$watch_queue(&(0x7f0000001000), 0x80) fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 2m31.234698642s ago: executing program 5 (id=1071): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x3a, 0x5d, 0x40, 0x5f9, 0xffff, 0x619f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xbd, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x7f, 0xc7, 0x1, 0xff, 0x2, 0xc1, 0x6, [], [{{0x9, 0x5, 0xe, 0x2, 0x200, 0x8, 0xfe, 0x2}}]}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) 2m29.80701207s ago: executing program 5 (id=1073): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'ipvlan0\x00', &(0x7f00000004c0)=@ethtool_rxnfc={0x1, 0x12, 0x1, {0x2, @ah_ip6_spec={@private2, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x5}, {0x0, @local, 0x2, 0x1ff, [0x7, 0x6]}, @hdata="b46fff858894b359ecc9021a2d6b482d6f227d036e4c4033813eab2a5498ab346a5c5afa4913138e87754cf7aff4b800", {0x0, @local, 0xb289, 0x1, [0x401]}, 0xfffffffffffff200, 0xe}}}) 2m29.731304988s ago: executing program 5 (id=1075): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_emit_ethernet(0x4f, &(0x7f0000000a80)={@local, @local, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x19, 0x84, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], "a5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"}}}}}, 0x0) 2m29.585690633s ago: executing program 5 (id=1078): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sync() 2m14.882166694s ago: executing program 33 (id=1078): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sync() 8.930168449s ago: executing program 1 (id=1845): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf177c000) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close_range(r3, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x36, 0x107, 0xfffffffc, 0x810000, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) sendmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="33100acc5a371803a2f3581cb8b5e2a15d705ffcfd6125af06a707e4a63972599183633f87bdc8ad28d490d2e6c75a60625eeebfa08f6be8845c3cc1fbc19a746150ee8acd9d8165b3fef7ce9746ca11cfeb89d5da", 0x55}, {&(0x7f0000000380)="58bb6dcbfb0ff6e3d47d4952f7c5f359c5fc7492e53d4585f50bf8f76452e857f8a688d673c4db575b068413fad484e23902c68bc0a20ea76b3cd27532f1303df2f84706bd7b12cab1b22140486bd884bacc11feec12eda4d0b8948639671966951b6f92a804145676ac9ec0b2b09200ed5a6459888a7232191dce4bd6adac3a37", 0x81}, {&(0x7f0000000040)="52f541cbb0d2e69883b7dca7c21025c883c6357a", 0x14}, {&(0x7f00000002c0)="2b631e101af6656ee4efe6317e2752753d72ac81bade49ff7322255d4f6fddcf724fcd1b6f0cee63e456b8cbb722bf67dfb88e9cf0de9f7e9e3914e9a653e25821b4a5c4e6018c7e01472fa059d71a59af0d1457099b9b366efa7f6104", 0x5d}, {&(0x7f0000000440)="b44c301f3cf04a1930a5fa4ecc5ac2862403a1c41cdda6e8d7dee7946c62fac3e463039ad021c02061a0cf6b5c204bc07cae632744eb9f7a07d87a69cd7c54b811b72d3c378239f237278771bffe0898fb77636f21ab2ff65df3f12ac724d396fad92e52b14a93ace65ea87cd52ca7a4938f03fbe0d3cb3c710aaf9a4c37b87bbb779f72f92eefcbd9c4e6274a83", 0x8e}], 0x5, &(0x7f0000000580)=[{0xa0, 0x101, 0x3ff, "df66c6cdbff9989c582e6e25d735e74b2104502ac71557d7d6e42dda57ee6c29aed2880df22923862540e4e3a8f6a4b83fb4b58de37d418b43997fc65b51780524aea6a051a51f0f2d3007170c17d3635433b2485a65c514752918822ee2e747dbda89c4d2338bc156ced8daa33fd595154ec7e8ec6434c1304867d2e6879cab3db9be84862850cac4e48b8e"}, {0xd8, 0x29, 0x1c, "a4b2930629fa30ceba0e0b600c194caba0276176c873efca1e6adf85af3993ef367a088a7df19940ab87de738974e5c7dc19faf26ce9d4fe456e258dbfcd8817adbf269224a32e72e1259f08e6785bf4875ba2b036e607f653bbcb768ffc82abfcf57b8b7bd28e9287561d6cba6039e6bf24e37ce23636853e01a70e38987d5268692c5a38c4dab804b68a8a92e17cedf24677d6df6b45e3d64c923abd852910e08a9a6c6e1b29bdd50dff8b3a90b7795684add2bb9c1d29d80b4629572d4de220"}, {0x28, 0x118, 0x6, "666b80bb7ae30e086860610e995018fc7153ed690a"}, {0xd8, 0x102, 0x8, "17b608d340b0932cbd8ab23fbe6aa599771222182f6a4283c5a2faf8940848e7eef16612b24e22b4da36c95407e913be18746323e746d7955cf62a7733c6ac1f2bb6ce76833a50aaad84ccbef30231abe1154d91c26ec5f0d9d9015636f908538990599da9d8cd20c6618fff4ebda1a14d6c0dbc469401637a2ba0b4834b0bcc83a3cc3305e5ee2ca212ed928c9a205295cf2982e415b582d66d0cfe5b58d4fb813d8a49c8e6154f8b03b59a065fa8491a8d8dc14fb92eb781857ab87c9b51080a"}], 0x278}}, {{&(0x7f0000000800)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x1, 0x0, 0x4, 0x1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000880)="be66f6d58a0fe0225d0a2595da13aaef39eaf2a3b9cdf92872a494f89416da2f59880e03b8636d1045eb1d3231456072598fdc765e4cc8ba904154b67b88dc67a5e3bd1d102fe272d8904c002579b61fb1399bcbbf8d828d950c8fea8fa6cba12291342177fcadc1b63209651855a7f953022b1a2746fc3354f5b4411c425c6bd449c0915dba5dc902ad67b9b85c6ef5772cee1a6ad2ee2a907bbd37bc697fed78aa94ab2d3d1378", 0xa8}], 0x1, &(0x7f0000000940)=[{0x20, 0x1, 0x1, "43ca7e62ba4ec5a2f7870c"}, {0x70, 0x10f, 0x7, "db7a4d7b38df31e127ed03847b9190c01416b93990ce08741468fe37ad119fa043320e3de9b1959a7f926928a86e08a7ab349d177f9dd23bb8605c735c1b8f4ea5ba9e455ba7051b618fdbf8b4ac354c71ea9b880215252c2c906fb4"}], 0x90}}], 0x2, 0x2000a805) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 6.520536674s ago: executing program 1 (id=1857): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf177c000) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x36, 0x107, 0xfffffffc, 0x810000, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) sendmmsg(r3, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="33100acc5a371803a2f3581cb8b5e2a15d705ffcfd6125af06a707e4a63972599183633f87bdc8ad28d490d2e6c75a60625eeebfa08f6be8845c3cc1fbc19a746150ee8acd9d8165b3fef7ce9746ca11cfeb89d5da", 0x55}, {&(0x7f0000000380)="58bb6dcbfb0ff6e3d47d4952f7c5f359c5fc7492e53d4585f50bf8f76452e857f8a688d673c4db575b068413fad484e23902c68bc0a20ea76b3cd27532f1303df2f84706bd7b12cab1b22140486bd884bacc11feec12eda4d0b8948639671966951b6f92a804145676ac9ec0b2b09200ed5a6459888a7232191dce4bd6adac3a37", 0x81}, {&(0x7f0000000040)="52f541cbb0d2e69883b7dca7c21025c883c6357a", 0x14}, {&(0x7f00000002c0)="2b631e101af6656ee4efe6317e2752753d72ac81bade49ff7322255d4f6fddcf724fcd1b6f0cee63e456b8cbb722bf67dfb88e9cf0de9f7e9e3914e9a653e25821b4a5c4e6018c7e01472fa059d71a59af0d1457099b9b366efa7f6104", 0x5d}, {&(0x7f0000000440)="b44c301f3cf04a1930a5fa4ecc5ac2862403a1c41cdda6e8d7dee7946c62fac3e463039ad021c02061a0cf6b5c204bc07cae632744eb9f7a07d87a69cd7c54b811b72d3c378239f237278771bffe0898fb77636f21ab2ff65df3f12ac724d396fad92e52b14a93ace65ea87cd52ca7a4938f03fbe0d3cb3c710aaf9a4c37b87bbb779f72f92eefcbd9c4e6274a83", 0x8e}], 0x5, &(0x7f0000000580)=[{0xa0, 0x101, 0x3ff, "df66c6cdbff9989c582e6e25d735e74b2104502ac71557d7d6e42dda57ee6c29aed2880df22923862540e4e3a8f6a4b83fb4b58de37d418b43997fc65b51780524aea6a051a51f0f2d3007170c17d3635433b2485a65c514752918822ee2e747dbda89c4d2338bc156ced8daa33fd595154ec7e8ec6434c1304867d2e6879cab3db9be84862850cac4e48b8e"}, {0xd8, 0x29, 0x1c, "a4b2930629fa30ceba0e0b600c194caba0276176c873efca1e6adf85af3993ef367a088a7df19940ab87de738974e5c7dc19faf26ce9d4fe456e258dbfcd8817adbf269224a32e72e1259f08e6785bf4875ba2b036e607f653bbcb768ffc82abfcf57b8b7bd28e9287561d6cba6039e6bf24e37ce23636853e01a70e38987d5268692c5a38c4dab804b68a8a92e17cedf24677d6df6b45e3d64c923abd852910e08a9a6c6e1b29bdd50dff8b3a90b7795684add2bb9c1d29d80b4629572d4de220"}, {0x28, 0x118, 0x6, "666b80bb7ae30e086860610e995018fc7153ed690a"}, {0xd8, 0x102, 0x8, "17b608d340b0932cbd8ab23fbe6aa599771222182f6a4283c5a2faf8940848e7eef16612b24e22b4da36c95407e913be18746323e746d7955cf62a7733c6ac1f2bb6ce76833a50aaad84ccbef30231abe1154d91c26ec5f0d9d9015636f908538990599da9d8cd20c6618fff4ebda1a14d6c0dbc469401637a2ba0b4834b0bcc83a3cc3305e5ee2ca212ed928c9a205295cf2982e415b582d66d0cfe5b58d4fb813d8a49c8e6154f8b03b59a065fa8491a8d8dc14fb92eb781857ab87c9b51080a"}], 0x278}}, {{&(0x7f0000000800)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x1, 0x0, 0x4, 0x1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000880)="be66f6d58a0fe0225d0a2595da13aaef39eaf2a3b9cdf92872a494f89416da2f59880e03b8636d1045eb1d3231456072598fdc765e4cc8ba904154b67b88dc67a5e3bd1d102fe272d8904c002579b61fb1399bcbbf8d828d950c8fea8fa6cba12291342177fcadc1b63209651855a7f953022b1a2746fc3354f5b4411c425c6bd449c0915dba5dc902ad67b9b85c6ef5772cee1a6ad2ee2a907bbd37bc697fed78aa94ab2d3d1378", 0xa8}], 0x1, &(0x7f0000000940)=[{0x20, 0x1, 0x1, "43ca7e62ba4ec5a2f7870c"}, {0x70, 0x10f, 0x7, "db7a4d7b38df31e127ed03847b9190c01416b93990ce08741468fe37ad119fa043320e3de9b1959a7f926928a86e08a7ab349d177f9dd23bb8605c735c1b8f4ea5ba9e455ba7051b618fdbf8b4ac354c71ea9b880215252c2c906fb4"}], 0x90}}], 0x2, 0x2000a805) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 6.386352322s ago: executing program 6 (id=1858): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x5, 0x6, 0x5, 0x70bd2c, 0x25dfdbfe, {0x14, 0x0, 0xc2a4}, [@typed={0x14, 0x68, 0x0, 0x0, @ipv6=@local}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x3}], 0xf26, 0x0, &(0x7f00000014c0)="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"}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="dd8a5acd4817d8d1adb0a637df115f9bc8af7e137ffcb12d153b8e4aca54cb8069e388a92fe6b1d3998797ff80cd4ef4d0fa03a43012cd68759ca8922f239e095bdcb9ba3616192f8b58205b5f8736e5bda03ba9b9c8813cc37600002a5868c3cff065e0467619", 0x67}, {&(0x7f0000000440)="586be182bdcbd16894c06f6ef7d5bd0bdcfecf0bb62a5f07f462c3bac63eacac9bea4f8170651e11a1e5c23c2c5fe7cfe53946bec6a3817f9c6c76e803670a60223080b2b2bb18c8", 0x48}, {&(0x7f0000000640)="5615dd7d4f587b7f415c62f3fd04906c0e0d687ffa6959ce52b9aecff9bf33c9cf390b600b79f124fc6631f7bcf0cb812b355fcb1bab05516b029823b82866043d8c858fb45a9b4fa88856727b3f829b28020b20f5332e03cd10d534891198535f2c2feee5d2dccc9bad8cd112dad1bfc89e081e96c7597774c2da5a6846a7cdba423cf026d9002857051b998e9e5527ab804d577b616917dfa8c77d9d9d661bc456acc71fae37bb679e256832cbb9e3a850d0c807465dc7be5415bdbcf0000fc221cd06c4ffa6dc95d1ff02e886", 0xce}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000740)="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", 0xfc}, {&(0x7f0000000840)="0644ccf4d065cb02a61998b01b674e80122bb2989b3999d2a8400679a7a519d19da9ea68d804373e6291f7ef20c4b2628a48950c2a2a48ebfb2b1dd00d93261e2031adc908b512bedc4ff085a6f91c455d9afe7ee10abf082357888b95380ed50fe865a0", 0x64}, {&(0x7f0000000580)="1ce709ae7eb4e18119f76b5963791ebf3a608a291b3679a302a480cf9966c51a8b7c6c33b9cf067a129c223c8ca66112152d9fe91ec4", 0x36}, {&(0x7f00000008c0)="9607f12a9f14347ff3c293f252690d44cc589d6e517c360ac74d13fef47358f35e26584f7d", 0x25}], 0x4}}], 0x2, 0x20008811) 6.156750309s ago: executing program 6 (id=1859): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000000e0c0)=""/102400, 0x19000) keyctl$clear(0x3, 0xfffffffffffffffd) mkdir(&(0x7f0000000200)='./file0\x00', 0x56) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x10, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000002440)=""/4084, 0xff4) r6 = socket(0x400000000010, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYBLOB="f907a28ec27ca42904e60f8a446124ad55b4", @ANYRES16=r6, @ANYRES16=r6, @ANYRESDEC, @ANYRES64=r5, @ANYRESOCT=r6, @ANYRES8=r5], 0x50) r8 = socket$packet(0x11, 0x3, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r7, @ANYBLOB="0000000000000000b708000062f3ffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000062c6b987850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000016c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r10 = creat(&(0x7f0000000080)='./file1\x00', 0x19c) r11 = fanotify_init(0xf00, 0x40000) fanotify_mark(r11, 0x105, 0x4000997d, r10, 0x0) pipe2$watch_queue(&(0x7f0000001000), 0x80) fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 5.121675947s ago: executing program 6 (id=1862): unshare(0x6a040000) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6c, 0x4, 0x2b, 0x20, 0x1f71, 0x3306, 0x1b23, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xfd, 0xe0}}]}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.864264486s ago: executing program 3 (id=1865): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600"], 0x48) 4.799961868s ago: executing program 3 (id=1866): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.747714762s ago: executing program 3 (id=1867): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000006c0)={&(0x7f0000000180)=[{0x5, 0x4000, 0x4e, &(0x7f00000001c0)="50e834d6f41f2b24bdba0daad80b604378e4e5d85480071158a17b6a252fe97f7dc90d3179be6b33d12dd954f1f8d0ab52bd1148bf2accefd31ba8a8f133cb2dc97a37eb222546c866f092955c1c"}], 0x1}) 2.706556798s ago: executing program 0 (id=1873): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000000e0c0)=""/102400, 0x19000) keyctl$clear(0x3, 0xfffffffffffffffd) mkdir(&(0x7f0000000200)='./file0\x00', 0x56) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x10, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000002440)=""/4084, 0xff4) r6 = socket(0x400000000010, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYBLOB="f907a28ec27ca42904e60f8a446124ad55b4", @ANYRES16=r6, @ANYRES16=r6, @ANYRESDEC, @ANYRES64=r5, @ANYRESOCT=r6, @ANYRES8=r5], 0x50) r8 = socket$packet(0x11, 0x3, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r7, @ANYBLOB="0000000000000000b708000062f3ffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000062c6b987850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000016c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r10 = creat(&(0x7f0000000080)='./file1\x00', 0x19c) r11 = fanotify_init(0xf00, 0x40000) fanotify_mark(r11, 0x105, 0x4000997d, r10, 0x0) pipe2$watch_queue(&(0x7f0000001000), 0x80) fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 2.670216555s ago: executing program 1 (id=1874): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf250100000008000100030000002400048005000300010000000400030000000000050003000200004005000300050000000800020003"], 0x48}}, 0x40000) 2.602217765s ago: executing program 3 (id=1875): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r0) 2.560458941s ago: executing program 1 (id=1876): unshare(0x22020400) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)=0xffff0001) 2.510334678s ago: executing program 0 (id=1877): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf177c000) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close_range(r3, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x36, 0x107, 0xfffffffc, 0x810000, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) sendmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="33100acc5a371803a2f3581cb8b5e2a15d705ffcfd6125af06a707e4a63972599183633f87bdc8ad28d490d2e6c75a60625eeebfa08f6be8845c3cc1fbc19a746150ee8acd9d8165b3fef7ce9746ca11cfeb89d5da", 0x55}, {&(0x7f0000000380)="58bb6dcbfb0ff6e3d47d4952f7c5f359c5fc7492e53d4585f50bf8f76452e857f8a688d673c4db575b068413fad484e23902c68bc0a20ea76b3cd27532f1303df2f84706bd7b12cab1b22140486bd884bacc11feec12eda4d0b8948639671966951b6f92a804145676ac9ec0b2b09200ed5a6459888a7232191dce4bd6adac3a37", 0x81}, {&(0x7f0000000040)="52f541cbb0d2e69883b7dca7c21025c883c6357a", 0x14}, {&(0x7f00000002c0)="2b631e101af6656ee4efe6317e2752753d72ac81bade49ff7322255d4f6fddcf724fcd1b6f0cee63e456b8cbb722bf67dfb88e9cf0de9f7e9e3914e9a653e25821b4a5c4e6018c7e01472fa059d71a59af0d1457099b9b366efa7f6104", 0x5d}, {&(0x7f0000000440)="b44c301f3cf04a1930a5fa4ecc5ac2862403a1c41cdda6e8d7dee7946c62fac3e463039ad021c02061a0cf6b5c204bc07cae632744eb9f7a07d87a69cd7c54b811b72d3c378239f237278771bffe0898fb77636f21ab2ff65df3f12ac724d396fad92e52b14a93ace65ea87cd52ca7a4938f03fbe0d3cb3c710aaf9a4c37b87bbb779f72f92eefcbd9c4e6274a83", 0x8e}], 0x5, &(0x7f0000000580)=[{0xa0, 0x101, 0x3ff, "df66c6cdbff9989c582e6e25d735e74b2104502ac71557d7d6e42dda57ee6c29aed2880df22923862540e4e3a8f6a4b83fb4b58de37d418b43997fc65b51780524aea6a051a51f0f2d3007170c17d3635433b2485a65c514752918822ee2e747dbda89c4d2338bc156ced8daa33fd595154ec7e8ec6434c1304867d2e6879cab3db9be84862850cac4e48b8e"}, {0xd8, 0x29, 0x1c, "a4b2930629fa30ceba0e0b600c194caba0276176c873efca1e6adf85af3993ef367a088a7df19940ab87de738974e5c7dc19faf26ce9d4fe456e258dbfcd8817adbf269224a32e72e1259f08e6785bf4875ba2b036e607f653bbcb768ffc82abfcf57b8b7bd28e9287561d6cba6039e6bf24e37ce23636853e01a70e38987d5268692c5a38c4dab804b68a8a92e17cedf24677d6df6b45e3d64c923abd852910e08a9a6c6e1b29bdd50dff8b3a90b7795684add2bb9c1d29d80b4629572d4de220"}, {0x28, 0x118, 0x6, "666b80bb7ae30e086860610e995018fc7153ed690a"}, {0xd8, 0x102, 0x8, "17b608d340b0932cbd8ab23fbe6aa599771222182f6a4283c5a2faf8940848e7eef16612b24e22b4da36c95407e913be18746323e746d7955cf62a7733c6ac1f2bb6ce76833a50aaad84ccbef30231abe1154d91c26ec5f0d9d9015636f908538990599da9d8cd20c6618fff4ebda1a14d6c0dbc469401637a2ba0b4834b0bcc83a3cc3305e5ee2ca212ed928c9a205295cf2982e415b582d66d0cfe5b58d4fb813d8a49c8e6154f8b03b59a065fa8491a8d8dc14fb92eb781857ab87c9b51080a"}], 0x278}}, {{&(0x7f0000000800)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x1, 0x0, 0x4, 0x1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000880)="be66f6d58a0fe0225d0a2595da13aaef39eaf2a3b9cdf92872a494f89416da2f59880e03b8636d1045eb1d3231456072598fdc765e4cc8ba904154b67b88dc67a5e3bd1d102fe272d8904c002579b61fb1399bcbbf8d828d950c8fea8fa6cba12291342177fcadc1b63209651855a7f953022b1a2746fc3354f5b4411c425c6bd449c0915dba5dc902ad67b9b85c6ef5772cee1a6ad2ee2a907bbd37bc697fed78aa94ab2d3d1378", 0xa8}], 0x1, &(0x7f0000000940)=[{0x20, 0x1, 0x1, "43ca7e62ba4ec5a2f7870c"}, {0x70, 0x10f, 0x7, "db7a4d7b38df31e127ed03847b9190c01416b93990ce08741468fe37ad119fa043320e3de9b1959a7f926928a86e08a7ab349d177f9dd23bb8605c735c1b8f4ea5ba9e455ba7051b618fdbf8b4ac354c71ea9b880215252c2c906fb4"}], 0x90}}], 0x2, 0x2000a805) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 2.470951564s ago: executing program 1 (id=1878): syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x404c080) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r10, @ANYRES32=r6], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0x5}, {0x9, 0xd}, {0xffff, 0xb}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r11 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x8020004, r0}) 2.289663078s ago: executing program 6 (id=1880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 1.554993632s ago: executing program 6 (id=1881): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r0, 0xc2f, 0x0, 0x300) 1.450611497s ago: executing program 6 (id=1882): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000000e0c0)=""/102400, 0x19000) keyctl$clear(0x3, 0xfffffffffffffffd) mkdir(&(0x7f0000000200)='./file0\x00', 0x56) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x10, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000002440)=""/4084, 0xff4) r6 = socket(0x400000000010, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYBLOB="f907a28ec27ca42904e60f8a446124ad55b4", @ANYRES16=r6, @ANYRES16=r6, @ANYRESDEC, @ANYRES64=r5, @ANYRESOCT=r6, @ANYRES8=r5], 0x50) r8 = socket$packet(0x11, 0x3, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r7, @ANYBLOB="0000000000000000b708000062f3ffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000062c6b987850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000016c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r10 = creat(&(0x7f0000000080)='./file1\x00', 0x19c) r11 = fanotify_init(0xf00, 0x40000) fanotify_mark(r11, 0x105, 0x4000997d, r10, 0x0) pipe2$watch_queue(&(0x7f0000001000), 0x80) fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 1.097632315s ago: executing program 2 (id=1884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 866.768876ms ago: executing program 0 (id=1885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 843.880871ms ago: executing program 2 (id=1886): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 633.349818ms ago: executing program 0 (id=1887): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000000e0c0)=""/102400, 0x19000) keyctl$clear(0x3, 0xfffffffffffffffd) mkdir(&(0x7f0000000200)='./file0\x00', 0x56) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x10, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)={[], [{@uid_lt}], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000002440)=""/4084, 0xff4) r6 = socket(0x400000000010, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYBLOB="f907a28ec27ca42904e60f8a446124ad55b4", @ANYRES16=r6, @ANYRES16=r6, @ANYRESDEC, @ANYRES64=r5, @ANYRESOCT=r6, @ANYRES8=r5], 0x50) r8 = socket$packet(0x11, 0x3, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r7, @ANYBLOB="0000000000000000b708000062f3ffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000062c6b987850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000016c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r10 = creat(&(0x7f0000000080)='./file1\x00', 0x19c) r11 = fanotify_init(0xf00, 0x40000) fanotify_mark(r11, 0x105, 0x4000997d, r10, 0x0) pipe2$watch_queue(&(0x7f0000001000), 0x80) fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 561.251595ms ago: executing program 2 (id=1888): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x804) 405.956274ms ago: executing program 3 (id=1889): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x400}) ioctl$UFFDIO_CONTINUE(r0, 0xc028aa05, &(0x7f0000000140)={{&(0x7f0000032000/0x4000)=nil, 0x4000}, 0xffffdffce000}) 365.972501ms ago: executing program 1 (id=1890): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x296) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x1800000003000000, 0x200000000000021d, 0x1}}, 0x40) preadv2(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) writev(r0, &(0x7f0000000000), 0x0) r7 = syz_io_uring_setup(0x7b3e, &(0x7f0000000140)={0x0, 0xc781, 0x2, 0x2, 0x2e6}, &(0x7f0000000240), &(0x7f0000000280)) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xdf}, {}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @alu={0x7, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x7}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0x0, 0x7, 0x2, 0x8, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x1, 0x69, &(0x7f0000000440)=""/105, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x5, 0x4, 0x4}, {0x0, 0x4, 0xf, 0x4}, {0x4, 0x5, 0xd, 0x6}, {0x5, 0x3, 0x7, 0x6}, {0x1, 0x5, 0x9, 0x5}], 0x10, 0x509}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000018c0)={r9, 0x0, 0xd80, 0xe6, &(0x7f00000006c0)="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", &(0x7f00000016c0)=""/230, 0xbc000000, 0x0, 0x7b, 0x28, &(0x7f00000017c0)="2963488a6d8e0903213f55b5e2d0a2628fd1d9ebbad5bd821f2bf5131a1b2106c219986ab1f1279aa6113d5d6723874b8c9094c60ef85d94332517da461b25ed4674c9190c2953c73c1a84b919f03604d1f216258e84ba6bcf2b017363f9b91835064345743a62b8f701b0321d01670aa1f24f8f98cf7d33d8aba3", &(0x7f0000001880)="3e23e4b98f22633dfaf21ba286864e60ff2116cbadca05e005012391d9d9b48ce6510f02917001e3", 0x0, 0x0, 0x48000}, 0x50) close_range(r8, 0xffffffffffffffff, 0x0) 294.878935ms ago: executing program 2 (id=1891): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x12}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) 274.967027ms ago: executing program 3 (id=1892): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000800)=ANY=[]) syz_usb_control_io$uac1(r0, 0x0, 0x0) 211.410891ms ago: executing program 0 (id=1893): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200000000000c000000ea55", 0x10) setsockopt(r0, 0x107, 0x1, &(0x7f0000000040)="030000001ec0040000071a80010061cc", 0x10) 105.913663ms ago: executing program 2 (id=1894): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, r1, 0x1, 0x122, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c4}, 0x20000080) 40.204355ms ago: executing program 0 (id=1895): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080)=0x8, 0x4) 0s ago: executing program 2 (id=1896): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf177c000) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close_range(r3, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x36, 0x107, 0xfffffffc, 0x810000, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) sendmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="33100acc5a371803a2f3581cb8b5e2a15d705ffcfd6125af06a707e4a63972599183633f87bdc8ad28d490d2e6c75a60625eeebfa08f6be8845c3cc1fbc19a746150ee8acd9d8165b3fef7ce9746ca11cfeb89d5da", 0x55}, {&(0x7f0000000380)="58bb6dcbfb0ff6e3d47d4952f7c5f359c5fc7492e53d4585f50bf8f76452e857f8a688d673c4db575b068413fad484e23902c68bc0a20ea76b3cd27532f1303df2f84706bd7b12cab1b22140486bd884bacc11feec12eda4d0b8948639671966951b6f92a804145676ac9ec0b2b09200ed5a6459888a7232191dce4bd6adac3a37", 0x81}, {&(0x7f0000000040)="52f541cbb0d2e69883b7dca7c21025c883c6357a", 0x14}, {&(0x7f00000002c0)="2b631e101af6656ee4efe6317e2752753d72ac81bade49ff7322255d4f6fddcf724fcd1b6f0cee63e456b8cbb722bf67dfb88e9cf0de9f7e9e3914e9a653e25821b4a5c4e6018c7e01472fa059d71a59af0d1457099b9b366efa7f6104", 0x5d}, {&(0x7f0000000440)="b44c301f3cf04a1930a5fa4ecc5ac2862403a1c41cdda6e8d7dee7946c62fac3e463039ad021c02061a0cf6b5c204bc07cae632744eb9f7a07d87a69cd7c54b811b72d3c378239f237278771bffe0898fb77636f21ab2ff65df3f12ac724d396fad92e52b14a93ace65ea87cd52ca7a4938f03fbe0d3cb3c710aaf9a4c37b87bbb779f72f92eefcbd9c4e6274a83", 0x8e}], 0x5, &(0x7f0000000580)=[{0xa0, 0x101, 0x3ff, "df66c6cdbff9989c582e6e25d735e74b2104502ac71557d7d6e42dda57ee6c29aed2880df22923862540e4e3a8f6a4b83fb4b58de37d418b43997fc65b51780524aea6a051a51f0f2d3007170c17d3635433b2485a65c514752918822ee2e747dbda89c4d2338bc156ced8daa33fd595154ec7e8ec6434c1304867d2e6879cab3db9be84862850cac4e48b8e"}, {0xd8, 0x29, 0x1c, "a4b2930629fa30ceba0e0b600c194caba0276176c873efca1e6adf85af3993ef367a088a7df19940ab87de738974e5c7dc19faf26ce9d4fe456e258dbfcd8817adbf269224a32e72e1259f08e6785bf4875ba2b036e607f653bbcb768ffc82abfcf57b8b7bd28e9287561d6cba6039e6bf24e37ce23636853e01a70e38987d5268692c5a38c4dab804b68a8a92e17cedf24677d6df6b45e3d64c923abd852910e08a9a6c6e1b29bdd50dff8b3a90b7795684add2bb9c1d29d80b4629572d4de220"}, {0x28, 0x118, 0x6, "666b80bb7ae30e086860610e995018fc7153ed690a"}, {0xd8, 0x102, 0x8, "17b608d340b0932cbd8ab23fbe6aa599771222182f6a4283c5a2faf8940848e7eef16612b24e22b4da36c95407e913be18746323e746d7955cf62a7733c6ac1f2bb6ce76833a50aaad84ccbef30231abe1154d91c26ec5f0d9d9015636f908538990599da9d8cd20c6618fff4ebda1a14d6c0dbc469401637a2ba0b4834b0bcc83a3cc3305e5ee2ca212ed928c9a205295cf2982e415b582d66d0cfe5b58d4fb813d8a49c8e6154f8b03b59a065fa8491a8d8dc14fb92eb781857ab87c9b51080a"}], 0x278}}, {{&(0x7f0000000800)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x1, 0x0, 0x4, 0x1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000880)="be66f6d58a0fe0225d0a2595da13aaef39eaf2a3b9cdf92872a494f89416da2f59880e03b8636d1045eb1d3231456072598fdc765e4cc8ba904154b67b88dc67a5e3bd1d102fe272d8904c002579b61fb1399bcbbf8d828d950c8fea8fa6cba12291342177fcadc1b63209651855a7f953022b1a2746fc3354f5b4411c425c6bd449c0915dba5dc902ad67b9b85c6ef5772cee1a6ad2ee2a907bbd37bc697fed78aa94ab2d3d1378", 0xa8}], 0x1, &(0x7f0000000940)=[{0x20, 0x1, 0x1, "43ca7e62ba4ec5a2f7870c"}, {0x70, 0x10f, 0x7, "db7a4d7b38df31e127ed03847b9190c01416b93990ce08741468fe37ad119fa043320e3de9b1959a7f926928a86e08a7ab349d177f9dd23bb8605c735c1b8f4ea5ba9e455ba7051b618fdbf8b4ac354c71ea9b880215252c2c906fb4"}], 0x90}}], 0x2, 0x2000a805) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) kernel console output (not intermixed with test programs): ext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 535.567419][T10251] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 535.576751][T10251] team0: Port device batadv2 added [ 535.693872][ T5143] block nbd0: Possible stuck request ffff888027be8000: control (read@0,1024B). Runtime 30 seconds [ 535.711266][T10251] hub 9-0:1.0: USB hub found [ 535.720018][T10251] hub 9-0:1.0: 1 port detected [ 535.746626][ T5143] block nbd0: Possible stuck request ffff888027be8200: control (read@1024,1024B). Runtime 30 seconds [ 535.758421][ T5143] block nbd0: Possible stuck request ffff888027be8400: control (read@2048,1024B). Runtime 30 seconds [ 535.774733][ T5143] block nbd0: Possible stuck request ffff888027be8600: control (read@3072,1024B). Runtime 30 seconds [ 537.365404][ T30] audit: type=1400 audit(2000000914.461:838): avc: denied { connect } for pid=10259 comm="syz.1.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 538.697502][T10271] netlink: 68 bytes leftover after parsing attributes in process `syz.3.847'. [ 540.106304][T10284] fuse: Bad value for 'rootmode' [ 540.594352][T10289] overlayfs: missing 'lowerdir' [ 540.722972][T10290] netlink: 'syz.3.851': attribute type 4 has an invalid length. [ 540.731274][T10290] netlink: 152 bytes leftover after parsing attributes in process `syz.3.851'. [ 540.779797][T10290] .`: renamed from bond0 (while UP) [ 540.790271][T10291] overlayfs: empty lowerdir [ 541.287460][T10296] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 542.178974][ T30] audit: type=1400 audit(2000000919.501:839): avc: denied { accept } for pid=10302 comm="syz.3.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 544.455435][T10321] netlink: 32 bytes leftover after parsing attributes in process `syz.2.856'. [ 545.181647][T10328] netlink: 'syz.5.858': attribute type 1 has an invalid length. [ 547.602828][T10349] fuse: Unknown parameter 'fd0x0000000000000003' [ 547.934984][T10346] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 547.985075][T10346] team0: Port device batadv2 added [ 548.203244][T10346] hub 9-0:1.0: USB hub found [ 548.208587][T10346] hub 9-0:1.0: 1 port detected [ 548.659740][T10352] overlay: Unknown parameter 'uid<00000000000000000000' [ 550.247334][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.867'. [ 550.262139][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.867'. [ 550.278669][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.867'. [ 550.290075][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.867'. [ 550.303250][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.867'. [ 550.526484][T10381] input: syz0 as /devices/virtual/input/input15 [ 550.641698][ T30] audit: type=1400 audit(2000000928.309:840): avc: denied { read } for pid=5163 comm="acpid" name="event4" dev="devtmpfs" ino=2966 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 550.716791][ T30] audit: type=1400 audit(2000000928.320:841): avc: denied { open } for pid=5163 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2966 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 551.829239][T10378] syz.2.870 (10378): drop_caches: 2 [ 552.189391][ T30] audit: type=1400 audit(2000000928.320:842): avc: denied { ioctl } for pid=5163 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2966 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 553.465296][T10403] siw: device registration error -23 [ 553.473097][T10403] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 553.861423][T10409] netlink: 'syz.5.877': attribute type 8 has an invalid length. [ 554.154030][T10415] siw: device registration error -23 [ 554.311525][ T30] audit: type=1400 audit(2000000932.131:843): avc: denied { getopt } for pid=10407 comm="syz.1.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 554.809619][T10420] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 554.838783][ T30] audit: type=1400 audit(2000000932.814:844): avc: denied { relabelto } for pid=10419 comm="syz.1.879" name="186" dev="tmpfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 554.878601][ T30] audit: type=1400 audit(2000000932.845:845): avc: denied { associate } for pid=10419 comm="syz.1.879" name="186" dev="tmpfs" ino=1071 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 555.715213][ T30] audit: type=1400 audit(2000000933.727:846): avc: denied { remove_name } for pid=5804 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 555.893206][ T30] audit: type=1400 audit(2000000933.727:847): avc: denied { rmdir } for pid=5804 comm="syz-executor" name="186" dev="tmpfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 556.055952][ T30] audit: type=1400 audit(2000000933.968:848): avc: denied { getopt } for pid=10425 comm="syz.0.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 556.797053][T10441] evm: overlay not supported [ 557.138756][ T30] audit: type=1400 audit(2000000934.882:849): avc: denied { watch } for pid=10436 comm="syz.5.883" path="/127/bus/file1" dev="overlay" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 558.807964][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 558.857764][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 559.249033][T10456] openvswitch: netlink: IP tunnel dst address not specified [ 560.288484][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 560.300912][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 560.312598][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 560.323251][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 560.333404][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 561.979120][T10486] netlink: 40 bytes leftover after parsing attributes in process `syz.5.892'. [ 562.867057][T10489] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 563.188461][ T30] audit: type=1400 audit(2000000941.307:850): avc: denied { watch_reads } for pid=10482 comm="syz.1.893" path="/189" dev="tmpfs" ino=1090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 563.258258][ T30] audit: type=1400 audit(2000000941.307:851): avc: denied { accept } for pid=10482 comm="syz.1.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 563.632505][T10496] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 563.641789][T10496] team0: Port device batadv3 added [ 564.821790][T10507] netlink: 'syz.3.897': attribute type 8 has an invalid length. [ 564.893369][ T5143] block nbd0: Possible stuck request ffff888027be8000: control (read@0,1024B). Runtime 60 seconds [ 564.904873][ T5143] block nbd0: Possible stuck request ffff888027be8200: control (read@1024,1024B). Runtime 60 seconds [ 564.917704][ T5143] block nbd0: Possible stuck request ffff888027be8400: control (read@2048,1024B). Runtime 60 seconds [ 564.929002][ T5143] block nbd0: Possible stuck request ffff888027be8600: control (read@3072,1024B). Runtime 60 seconds [ 565.915717][T10525] netlink: 'syz.5.895': attribute type 10 has an invalid length. [ 565.923771][T10525] batadv0: left allmulticast mode [ 565.928829][T10525] batadv0: left promiscuous mode [ 565.934080][T10525] bridge0: port 3(batadv0) entered disabled state [ 565.955505][T10525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.964325][T10525] .`: (slave batadv0): Enslaving as an active interface with an up link [ 565.977416][T10525] netlink: 'syz.5.895': attribute type 10 has an invalid length. [ 565.985288][T10525] netlink: 40 bytes leftover after parsing attributes in process `syz.5.895'. [ 565.994216][T10525] batadv0: entered promiscuous mode [ 565.999523][T10525] batadv0: entered allmulticast mode [ 566.006228][T10525] .`: (slave batadv0): Releasing backup interface [ 566.111843][T10525] bridge0: port 3(batadv0) entered blocking state [ 566.118458][T10525] bridge0: port 3(batadv0) entered disabled state [ 566.330011][T10529] xt_socket: unknown flags 0x4 [ 566.543802][ T83] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 566.553766][ T83] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 569.717376][T10574] overlay: Unknown parameter 'uid<00000000000000000000' [ 571.112555][T10587] can0: slcan on ttyS3. [ 571.466536][T10581] can0 (unregistered): slcan off ttyS3. [ 571.646835][T10591] netlink: 'syz.1.912': attribute type 8 has an invalid length. [ 574.208619][T10623] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 574.225074][T10623] team0: Port device batadv4 added [ 574.732592][ T5178] udevd[5178]: worker [9960] /devices/virtual/block/nbd0 is taking a long time [ 574.767733][T10638] veth0: entered promiscuous mode [ 574.884203][T10633] veth0: left promiscuous mode [ 577.047528][ T30] audit: type=1400 audit(2000000954.581:852): avc: denied { ioctl } for pid=10650 comm="syz.2.924" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 577.295777][T10661] netlink: 'syz.5.925': attribute type 8 has an invalid length. [ 577.328029][T10666] openvswitch: netlink: IP tunnel dst address not specified [ 578.154556][T10673] overlay: Unknown parameter 'uid<00000000000000000000' [ 578.362769][T10679] overlay: Unknown parameter 'uid<00000000000000000000' [ 578.665487][T10684] netlink: 'syz.0.930': attribute type 4 has an invalid length. [ 578.770491][T10688] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=10688 comm=syz.0.930 [ 579.694598][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.932'. [ 581.020330][T10701] sit1: entered allmulticast mode [ 581.725800][T10706] team0: Port device team_slave_0 removed [ 582.512041][ T30] audit: type=1400 audit(2000000960.869:853): avc: denied { setopt } for pid=10714 comm="syz.2.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 583.682020][ T30] audit: type=1400 audit(2000000962.076:854): avc: denied { append } for pid=10722 comm="syz.1.940" name="mouse0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 583.760829][ T30] audit: type=1400 audit(2000000962.097:855): avc: denied { mounton } for pid=10721 comm="syz.2.941" path="/188/file0" dev="tmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 584.289577][T10740] openvswitch: netlink: IP tunnel dst address not specified [ 584.775649][T10743] @ÿ: renamed from veth0_vlan (while UP) [ 585.110789][T10747] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 585.299729][T10749] hpfs: Bad magic ... probably not HPFS [ 585.427072][ T30] audit: type=1400 audit(2000000963.767:856): avc: denied { ioctl } for pid=10745 comm="syz.0.943" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 588.909985][T10770] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 589.193347][T10777] overlay: Unknown parameter 'uid<00000000000000000000' [ 589.193652][T10779] netlink: 40 bytes leftover after parsing attributes in process `syz.5.951'. [ 590.055279][ T30] audit: type=1400 audit(595.564:857): avc: denied { read } for pid=10790 comm="syz.5.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 591.057647][ T30] audit: type=1800 audit(596.604:858): pid=10804 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.955" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 591.547374][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'. [ 591.558816][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'. [ 591.573866][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'. [ 591.595552][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'. [ 591.621588][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'. [ 592.417161][ T30] audit: type=1326 audit(598.010:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926019c799 code=0x7ffc0000 [ 592.830245][T10820] lo speed is unknown, defaulting to 1000 [ 592.915391][T10821] 9pnet_virtio: no channels available for device ./bus [ 593.088351][ T30] audit: type=1326 audit(598.010:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926019c799 code=0x7ffc0000 [ 593.862338][ T5143] block nbd0: Possible stuck request ffff888027be8000: control (read@0,1024B). Runtime 90 seconds [ 593.874650][ T5143] block nbd0: Possible stuck request ffff888027be8200: control (read@1024,1024B). Runtime 90 seconds [ 593.885915][ T5143] block nbd0: Possible stuck request ffff888027be8400: control (read@2048,1024B). Runtime 90 seconds [ 593.897053][ T5143] block nbd0: Possible stuck request ffff888027be8600: control (read@3072,1024B). Runtime 90 seconds [ 593.912929][ T30] audit: type=1326 audit(598.010:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f926019c799 code=0x7ffc0000 [ 593.935998][ T30] audit: type=1326 audit(598.010:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926019c799 code=0x7ffc0000 [ 593.960373][ T30] audit: type=1326 audit(598.010:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926019c799 code=0x7ffc0000 [ 593.985357][ T30] audit: type=1326 audit(598.010:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f926019c799 code=0x7ffc0000 [ 594.019603][ T30] audit: type=1326 audit(598.010:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926019c799 code=0x7ffc0000 [ 594.053345][ T30] audit: type=1326 audit(598.010:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926019c799 code=0x7ffc0000 [ 594.372074][T10818] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 595.342506][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 595.342525][ T30] audit: type=1326 audit(600.110:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f926019c799 code=0x7ffc0000 [ 595.569924][T10837] overlay: Unknown parameter 'uid<00000000000000000000' [ 596.128237][ T29] Process accounting resumed [ 596.257474][T10856] netlink: 'syz.5.966': attribute type 10 has an invalid length. [ 596.283197][T10856] batadv0: left allmulticast mode [ 596.298559][T10856] batadv0: left promiscuous mode [ 596.318504][T10856] bridge0: port 3(batadv0) entered disabled state [ 596.327162][T10858] netlink: 'syz.5.966': attribute type 10 has an invalid length. [ 596.355418][T10858] netlink: 40 bytes leftover after parsing attributes in process `syz.5.966'. [ 596.431457][T10856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.478297][T10856] .`: (slave batadv0): Enslaving as an active interface with an up link [ 596.661415][T10858] batadv0: entered promiscuous mode [ 596.686940][ T30] audit: type=1400 audit(602.514:881): avc: denied { ioctl } for pid=10861 comm="syz.0.967" path="socket:[28616]" dev="sockfs" ino=28616 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 596.755105][T10858] batadv0: entered allmulticast mode [ 596.773815][T10867] netlink: 'syz.2.964': attribute type 4 has an invalid length. [ 596.894619][T10858] .`: (slave batadv0): Releasing backup interface [ 596.995403][T10858] bridge0: port 3(batadv0) entered blocking state [ 597.003736][T10858] bridge0: port 3(batadv0) entered disabled state [ 597.053889][T10862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.967'. [ 597.083681][ T30] audit: type=1400 audit(602.944:882): avc: denied { read write } for pid=10828 comm="syz.3.961" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 597.113707][ T167] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 597.123120][ T167] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 597.260657][ T30] audit: type=1400 audit(602.976:883): avc: denied { open } for pid=10828 comm="syz.3.961" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 598.202769][T10863] netlink: 52 bytes leftover after parsing attributes in process `syz.0.967'. [ 598.550316][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 598.581105][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 598.592777][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 598.603650][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 598.612709][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 599.257973][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 599.277694][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 601.120103][T10897] __nla_validate_parse: 5 callbacks suppressed [ 601.120142][T10897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.974'. [ 601.135329][T10897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.974'. [ 601.231776][ T30] audit: type=1326 audit(607.280:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10892 comm="syz.1.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 601.359969][ T30] audit: type=1326 audit(607.280:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10892 comm="syz.1.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 601.530651][T10898] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 601.963519][T10904] Invalid logical block size (-134217730) [ 602.544147][ T30] audit: type=1326 audit(607.280:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10892 comm="syz.1.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 602.585268][ T30] audit: type=1400 audit(608.025:887): avc: denied { create } for pid=10893 comm="syz.2.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 602.804836][ T30] audit: type=1400 audit(608.046:888): avc: denied { ioctl } for pid=10893 comm="syz.2.973" path="socket:[28658]" dev="sockfs" ino=28658 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 603.680041][T10924] hub 9-0:1.0: USB hub found [ 603.686258][T10924] hub 9-0:1.0: 1 port detected [ 604.367485][T10933] 9p: Bad value for 'rfdno' [ 605.010902][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.981'. [ 605.020534][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.981'. [ 605.029593][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.981'. [ 605.038672][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.981'. [ 605.251702][T10947] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 605.332647][T10947] team0: Port device batadv3 added [ 605.441087][ T30] audit: type=1400 audit(611.700:889): avc: denied { read } for pid=10909 comm="syz.1.977" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 605.503573][T10949] overlay: Unknown parameter 'uid<00000000000000000000' [ 605.810921][T10954] overlay: Unknown parameter 'uid<00000000000000000000' [ 606.510926][ T30] audit: type=1400 audit(612.844:890): avc: denied { create } for pid=10959 comm="syz.0.985" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 606.567291][ T30] audit: type=1400 audit(612.875:891): avc: denied { create } for pid=10959 comm="syz.0.985" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 606.642466][ T30] audit: type=1400 audit(612.938:892): avc: denied { unlink } for pid=5803 comm="syz-executor" name="file5" dev="tmpfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 606.953625][T10970] netlink: 'syz.0.986': attribute type 7 has an invalid length. [ 607.003376][T10970] netlink: 'syz.0.986': attribute type 7 has an invalid length. [ 607.120662][ T83] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.319173][ T83] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.979848][T10978] mkiss: ax0: crc mode is auto. [ 607.998016][ T83] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.040958][T10974] netlink: 'syz.3.984': attribute type 4 has an invalid length. [ 608.093975][T10981] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=10981 comm=syz.3.984 [ 608.122324][ T29] lo speed is unknown, defaulting to 1000 [ 608.179204][ T29] syz0: Port: 1 Link DOWN [ 608.282170][T10985] netlink: 'syz.0.989': attribute type 10 has an invalid length. [ 608.343016][T10986] netlink: 'syz.0.989': attribute type 10 has an invalid length. [ 608.350946][T10986] netlink: 40 bytes leftover after parsing attributes in process `syz.0.989'. [ 609.037572][T10985] batadv0: left promiscuous mode [ 609.042589][T10985] batadv0: left allmulticast mode [ 609.048693][T10985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.056672][T10985] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 609.065402][T10986] batadv0: entered promiscuous mode [ 609.070654][T10986] batadv0: entered allmulticast mode [ 609.156709][T10986] bond0: (slave batadv0): Releasing backup interface [ 609.169236][T10986] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 609.914358][T11002] netlink: 'syz.5.993': attribute type 1 has an invalid length. [ 610.726075][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'. [ 610.760304][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'. [ 610.773228][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'. [ 610.786146][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'. [ 610.796714][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'. [ 611.484078][T11017] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 611.535541][T11017] team0: Port device batadv1 added [ 611.701443][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.997'. [ 611.751776][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.997'. [ 611.764364][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.997'. [ 611.776852][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.997'. [ 612.370041][T11034] overlay: Unknown parameter 'uid<00000000000000000000' [ 616.915648][T11062] infiniband syz1: set active [ 616.920389][T11062] infiniband syz1: added syz_tun [ 616.972328][T11062] RDS/IB: syz1: added [ 616.976418][T11062] smc: adding ib device syz1 with port count 1 [ 616.983755][T11062] smc: ib device syz1 port 1 has no pnetid [ 617.321827][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 617.328162][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 617.598296][T11068] __nla_validate_parse: 2 callbacks suppressed [ 617.598309][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'. [ 617.626074][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'. [ 617.635241][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'. [ 617.644405][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'. [ 617.653444][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'. [ 617.954764][ T5818] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 618.108916][ T5818] Bluetooth: hci4: Malformed Event: 0x2f [ 618.272063][T11082] netlink: 'syz.5.1007': attribute type 4 has an invalid length. [ 618.309567][T11088] overlay: Unknown parameter 'uid<00000000000000000000' [ 618.329682][T11086] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=11086 comm=syz.5.1007 [ 620.660134][T11098] overlay: Unknown parameter 'uid<00000000000000000000' [ 620.779213][T11099] overlay: Unknown parameter 'uid<00000000000000000000' [ 621.809100][ T5818] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 621.824663][ T5818] Bluetooth: hci5: Injecting HCI hardware error event [ 621.827534][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1015'. [ 621.834030][ T5817] Bluetooth: hci5: hardware error 0x00 [ 621.955910][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1015'. [ 621.970268][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1015'. [ 621.983204][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1015'. [ 622.047831][ T30] audit: type=1326 audit(2000000003.516:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11112 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 622.072514][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1015'. [ 622.273940][ T30] audit: type=1326 audit(2000000003.527:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11112 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 622.445217][ T30] audit: type=1326 audit(2000000003.642:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11112 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 622.557865][ T30] audit: type=1326 audit(2000000003.642:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11112 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 622.810326][ T5143] block nbd0: Possible stuck request ffff888027be8000: control (read@0,1024B). Runtime 120 seconds [ 622.821277][ T5143] block nbd0: Possible stuck request ffff888027be8200: control (read@1024,1024B). Runtime 120 seconds [ 622.832382][ T5143] block nbd0: Possible stuck request ffff888027be8400: control (read@2048,1024B). Runtime 120 seconds [ 622.844069][ T5143] block nbd0: Possible stuck request ffff888027be8600: control (read@3072,1024B). Runtime 120 seconds [ 622.858791][ T30] audit: type=1326 audit(2000000003.642:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11112 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 622.940250][ T30] audit: type=1326 audit(2000000003.653:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11112 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 623.020766][ T30] audit: type=1326 audit(2000000003.653:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11112 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 623.094415][ T30] audit: type=1326 audit(2000000003.653:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11112 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 623.154322][ T30] audit: type=1326 audit(2000000003.653:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11112 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 623.177778][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 623.221062][ T30] audit: type=1326 audit(2000000003.653:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11112 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 623.458328][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 623.476211][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.865532][ T5817] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 623.922899][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 623.935269][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 623.944844][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.957480][ T9] usb 4-1: Product: syz [ 623.962345][ T9] usb 4-1: Manufacturer: syz [ 623.969233][ T9] usb 4-1: SerialNumber: syz [ 624.002418][ T9] usb 4-1: selecting invalid altsetting 1 [ 624.016381][ T9] usb 4-1: unit 6 not found! [ 624.109335][T11144] overlay: Unknown parameter 'uid<00000000000000000000' [ 624.195867][ T9] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 624.300120][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 624.319891][ T9] usb 4-1: USB disconnect, device number 7 [ 624.466328][T11148] __nla_validate_parse: 1 callbacks suppressed [ 624.466363][T11148] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1025'. [ 625.114378][T10035] udevd[10035]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 625.619192][ T5873] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 625.632629][T11164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1029'. [ 625.645630][T11164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1029'. [ 625.654944][T11164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1029'. [ 625.664610][T11164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1029'. [ 625.764314][T11167] overlay: Unknown parameter 'uid<00000000000000000000' [ 625.775472][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 625.853982][ T5873] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 625.881557][ T5873] usb 3-1: config 0 has no interface number 0 [ 625.894710][ T5873] usb 3-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 625.906588][ T5873] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 625.917241][ T5873] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 625.937818][ T5873] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.cb [ 625.961548][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.992237][T11174] overlay: Unknown parameter 'uid<00000000000000000000' [ 625.993394][ T5873] usb 3-1: config 0 descriptor?? [ 626.025789][ T5873] hso 3-1:0.1: Failed to find BULK IN ep [ 626.392829][ T794] usb 3-1: USB disconnect, device number 7 [ 630.477910][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 630.487644][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 630.496771][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 630.505949][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 630.515040][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 630.583211][T11205] overlay: Unknown parameter 'uid<00000000000000000000' [ 630.741551][T11211] netlink: 'syz.1.1043': attribute type 10 has an invalid length. [ 630.749687][T11211] batadv0: left promiscuous mode [ 630.754814][T11211] batadv0: left allmulticast mode [ 630.771174][T11211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.786140][T11211] .`: (slave batadv0): Enslaving as an active interface with an up link [ 630.808983][T11211] netlink: 'syz.1.1043': attribute type 10 has an invalid length. [ 630.816948][T11211] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1043'. [ 630.826135][T11211] batadv0: entered promiscuous mode [ 630.831449][T11211] batadv0: entered allmulticast mode [ 631.258980][T11211] .`: (slave batadv0): Releasing backup interface [ 631.284358][T11211] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 631.518572][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'. [ 631.528214][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'. [ 631.537365][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'. [ 632.494490][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'. [ 632.503727][ T794] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 633.022113][ T794] usb 3-1: unable to get BOS descriptor or descriptor too short [ 633.037785][T11236] overlay: Unknown parameter 'uid<00000000000000000000' [ 633.061749][ T794] usb 3-1: config 2 has an invalid interface number: 20 but max is 0 [ 633.073817][T11238] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 633.104291][ T794] usb 3-1: config 2 has no interface number 0 [ 633.117470][T11238] team0: Port device batadv2 added [ 633.144255][ T794] usb 3-1: config 2 interface 20 has no altsetting 0 [ 633.174135][ T794] usb 3-1: string descriptor 0 read error: -22 [ 633.292688][ T794] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=62.fd [ 633.317567][ T794] usb 3-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 634.182237][ T794] usb 3-1: USB disconnect, device number 8 [ 634.800113][T11258] overlay: Unknown parameter 'uid<00000000000000000000' [ 636.089461][T11267] __nla_validate_parse: 6 callbacks suppressed [ 636.089488][T11267] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1059'. [ 636.637295][T11289] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1064'. [ 636.646494][T11289] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1064'. [ 637.070280][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 637.080216][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 637.089441][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 637.098528][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 637.107537][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 637.182369][ T29] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 637.383099][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 637.401262][T11298] overlay: Unknown parameter 'uid<00000000000000000000' [ 637.864776][ T29] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 637.873957][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.882638][ T29] usb 3-1: Product: syz [ 637.886854][ T29] usb 3-1: Manufacturer: syz [ 637.893901][ T29] usb 3-1: SerialNumber: syz [ 637.908659][ T29] usb 3-1: config 0 descriptor?? [ 637.926390][ T29] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 638.259160][ T29] gspca_sonixj: reg_w1 err -71 [ 638.268757][ T29] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 638.289424][ T29] usb 3-1: USB disconnect, device number 9 [ 639.716235][T11327] netlink: 'syz.3.1076': attribute type 10 has an invalid length. [ 639.724327][T11327] batadv0: left promiscuous mode [ 639.729430][T11327] batadv0: left allmulticast mode [ 639.743889][T11327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.757560][T11327] .`: (slave batadv0): Enslaving as an active interface with an up link [ 639.784269][T11327] loop5: detected capacity change from 0 to 7 [ 639.807661][T11327] Dev loop5: unable to read RDB block 7 [ 639.813569][T11327] loop5: AHDI p1 [ 639.817420][T11327] loop5: partition table partially beyond EOD, truncated [ 639.832674][T11327] netlink: 'syz.3.1076': attribute type 10 has an invalid length. [ 639.840652][T11327] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1076'. [ 639.849726][T11327] batadv0: entered promiscuous mode [ 639.855136][T11327] batadv0: entered allmulticast mode [ 640.226085][T11327] .`: (slave batadv0): Releasing backup interface [ 640.265611][T11327] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 641.301294][T11342] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1079'. [ 641.310482][T11342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1079'. [ 641.627744][T11338] overlay: Unknown parameter 'uid<00000000000000000000' [ 643.887871][T11373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 644.369990][T11384] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1093'. [ 644.379113][T11384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1093'. [ 645.464538][T11387] overlay: Unknown parameter 'uid<00000000000000000000' [ 645.725090][T11393] overlay: Unknown parameter 'uid<00000000000000000000' [ 646.831421][ T794] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 647.835319][ T794] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 647.851706][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.859755][ T794] usb 3-1: Product: syz [ 647.873951][ T794] usb 3-1: Manufacturer: syz [ 647.881961][ T794] usb 3-1: SerialNumber: syz [ 647.898468][ T794] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 647.927431][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 648.023349][T11418] overlay: Unknown parameter 'uid<00000000000000000000' [ 648.122663][T11421] overlay: Unknown parameter 'uid<00000000000000000000' [ 648.523098][ T794] usb 3-1: USB disconnect, device number 10 [ 649.619748][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 649.628365][ T9] ath9k_htc: Failed to initialize the device [ 649.637902][ T794] usb 3-1: ath9k_htc: USB layer deinitialized [ 650.076325][T11452] overlay: Unknown parameter 'uid<00000000000000000000' [ 650.115935][T11454] overlay: Unknown parameter 'uid<00000000000000000000' [ 650.556973][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 650.556989][ T30] audit: type=1400 audit(2000000002.341:915): avc: denied { getopt } for pid=11467 comm="syz.0.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 650.566378][ T5889] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 650.797421][ T5889] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 650.892763][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 650.919733][ T5889] usb 4-1: Product: syz [ 650.978684][T11476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1128'. [ 651.373150][ T5889] usb 4-1: SerialNumber: syz [ 651.405657][ T5889] usb 4-1: config 0 descriptor?? [ 651.444627][ T5143] block nbd0: Possible stuck request ffff888027be8000: control (read@0,1024B). Runtime 150 seconds [ 651.455603][ T5143] block nbd0: Possible stuck request ffff888027be8200: control (read@1024,1024B). Runtime 150 seconds [ 651.466890][ T5143] block nbd0: Possible stuck request ffff888027be8400: control (read@2048,1024B). Runtime 150 seconds [ 651.478259][ T5143] block nbd0: Possible stuck request ffff888027be8600: control (read@3072,1024B). Runtime 150 seconds [ 651.624487][ T5889] hso 4-1:0.0: Can't find BULK IN endpoint [ 651.829213][ T5889] usb 4-1: USB disconnect, device number 8 [ 651.898879][ T30] audit: type=1400 audit(2000000003.737:916): avc: denied { create } for pid=11490 comm="syz.2.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 651.953195][ T30] audit: type=1400 audit(2000000003.779:917): avc: denied { getopt } for pid=11490 comm="syz.2.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 652.022798][T11488] openvswitch: netlink: IP tunnel dst address not specified [ 652.157110][T11500] netlink: 'syz.1.1135': attribute type 10 has an invalid length. [ 652.174553][T11500] batadv0: left promiscuous mode [ 652.181130][T11500] batadv0: left allmulticast mode [ 652.671506][T11500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.706102][T11500] .`: (slave batadv0): Enslaving as an active interface with an up link [ 652.724561][T11500] netlink: 'syz.1.1135': attribute type 10 has an invalid length. [ 652.732596][T11500] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1135'. [ 652.747995][T11500] batadv0: entered promiscuous mode [ 652.763769][T11500] batadv0: entered allmulticast mode [ 652.781789][T11500] .`: (slave batadv0): Releasing backup interface [ 652.806444][T11500] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 652.992184][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 653.016536][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 653.030820][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 653.042016][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 653.052252][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 653.903734][T11520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1141'. [ 654.047929][T11522] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 655.769759][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 655.781236][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 655.793632][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 655.802135][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 655.810865][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 655.833268][ T30] audit: type=1400 audit(2000000001.207:918): avc: denied { mounton } for pid=11534 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 656.270976][T11552] openvswitch: netlink: IP tunnel dst address not specified [ 656.387671][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1149'. [ 656.411346][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1149'. [ 656.422470][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1149'. [ 656.433375][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1149'. [ 656.443707][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1149'. [ 656.674752][T11534] lo speed is unknown, defaulting to 1000 [ 657.093409][ T30] audit: type=1400 audit(2000000002.551:919): avc: denied { bind } for pid=11564 comm="syz.3.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 657.412528][ T30] audit: type=1400 audit(2000000002.876:920): avc: denied { write } for pid=11571 comm="syz.3.1159" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 657.458776][T11574] netlink: 'syz.0.1158': attribute type 8 has an invalid length. [ 657.770087][ T5818] Bluetooth: hci1: command tx timeout [ 657.809305][T11576] overlay: Unknown parameter 'uid<00000000000000000000' [ 658.221660][T11534] chnl_net:caif_netlink_parms(): no params data found [ 658.525889][T11534] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.573839][T11534] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.604276][T11534] bridge_slave_0: entered allmulticast mode [ 658.643387][T11534] bridge_slave_0: entered promiscuous mode [ 658.683605][T11534] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.694877][T11612] netlink: 'syz.1.1170': attribute type 10 has an invalid length. [ 658.722523][T11534] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.750686][T11534] bridge_slave_1: entered allmulticast mode [ 658.785460][T11534] bridge_slave_1: entered promiscuous mode [ 658.801915][T11613] netlink: 'syz.1.1170': attribute type 10 has an invalid length. [ 658.824604][T11613] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1170'. [ 658.836580][T11612] batadv0: left promiscuous mode [ 658.841576][T11612] batadv0: left allmulticast mode [ 658.891956][T11612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.925908][T11612] .`: (slave batadv0): Enslaving as an active interface with an up link [ 658.989074][T11613] batadv0: entered promiscuous mode [ 659.003547][T11613] batadv0: entered allmulticast mode [ 659.024643][T11613] .`: (slave batadv0): Releasing backup interface [ 659.058348][T11613] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 659.146424][T11534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.207997][T11534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.336719][T11534] team0: Port device team_slave_0 added [ 659.357470][T11534] team0: Port device team_slave_1 added [ 659.447524][T11534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.472721][T11534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.510524][T11534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.525680][T11534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.533335][T11534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.568407][T11534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.624099][T11620] overlay: Unknown parameter 'uid<00000000000000000000' [ 659.697528][T11534] hsr_slave_0: entered promiscuous mode [ 659.706044][T11534] hsr_slave_1: entered promiscuous mode [ 659.758416][ T5818] Bluetooth: hci1: command tx timeout [ 661.633056][T11637] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 661.643325][T11641] syz.1.1178: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 661.674988][T11637] team0: Port device batadv2 added [ 661.690914][T11641] CPU: 1 UID: 0 PID: 11641 Comm: syz.1.1178 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.690951][T11641] Tainted: [L]=SOFTLOCKUP [ 661.690959][T11641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 661.690974][T11641] Call Trace: [ 661.690979][T11641] [ 661.690986][T11641] dump_stack_lvl+0x100/0x190 [ 661.691015][T11641] warn_alloc.cold+0x95/0x1c1 [ 661.691038][T11641] ? __pfx_warn_alloc+0x10/0x10 [ 661.691063][T11641] ? kasan_save_stack+0x3f/0x50 [ 661.691079][T11641] ? kasan_save_stack+0x30/0x50 [ 661.691095][T11641] ? kasan_save_track+0x14/0x30 [ 661.691114][T11641] ? xskq_create+0xfb/0x1d0 [ 661.691132][T11641] __vmalloc_node_range_noprof+0x1252/0x1530 [ 661.691151][T11641] ? xskq_create+0xfb/0x1d0 [ 661.691174][T11641] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 661.691197][T11641] ? xskq_create+0xfb/0x1d0 [ 661.691214][T11641] vmalloc_user_noprof+0x9e/0xe0 [ 661.691228][T11641] ? xskq_create+0xfb/0x1d0 [ 661.691245][T11641] xskq_create+0xfb/0x1d0 [ 661.691264][T11641] xsk_setsockopt+0x743/0xab0 [ 661.691281][T11641] ? __pfx_xsk_setsockopt+0x10/0x10 [ 661.691298][T11641] ? find_held_lock+0x2b/0x80 [ 661.691312][T11641] ? __fget_files+0x215/0x3d0 [ 661.691326][T11641] ? selinux_socket_setsockopt+0x6a/0x80 [ 661.691340][T11641] ? __pfx_xsk_setsockopt+0x10/0x10 [ 661.691358][T11641] do_sock_setsockopt+0xf3/0x1d0 [ 661.691388][T11641] __sys_setsockopt+0x195/0x220 [ 661.691405][T11641] __x64_sys_setsockopt+0xbd/0x160 [ 661.691417][T11641] ? do_syscall_64+0x95/0xf80 [ 661.691431][T11641] ? lockdep_hardirqs_on+0x78/0x100 [ 661.691445][T11641] do_syscall_64+0x106/0xf80 [ 661.691458][T11641] ? clear_bhb_loop+0x40/0x90 [ 661.691473][T11641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.691486][T11641] RIP: 0033:0x7f441e79c799 [ 661.691503][T11641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.691516][T11641] RSP: 002b:00007f441f735028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 661.691532][T11641] RAX: ffffffffffffffda RBX: 00007f441ea15fa0 RCX: 00007f441e79c799 [ 661.691540][T11641] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 661.691547][T11641] RBP: 00007f441e832c99 R08: 0000000000000004 R09: 0000000000000000 [ 661.691554][T11641] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.691562][T11641] R13: 00007f441ea16038 R14: 00007f441ea15fa0 R15: 00007ffe6fad0018 [ 661.691578][T11641] [ 661.936245][ T5818] Bluetooth: hci1: command tx timeout [ 661.937409][T11641] Mem-Info: [ 661.945263][T11641] active_anon:35106 inactive_anon:0 isolated_anon:0 [ 661.945263][T11641] active_file:21311 inactive_file:40916 isolated_file:0 [ 661.945263][T11641] unevictable:2306 dirty:316 writeback:0 [ 661.945263][T11641] slab_reclaimable:9277 slab_unreclaimable:108551 [ 661.945263][T11641] mapped:40989 shmem:27780 pagetables:1404 [ 661.945263][T11641] sec_pagetables:0 bounce:0 [ 661.945263][T11641] kernel_misc_reclaimable:0 [ 661.945263][T11641] free:1250811 free_pcp:10775 free_cma:0 [ 661.991607][T11641] Node 0 active_anon:140424kB inactive_anon:0kB active_file:85152kB inactive_file:163468kB unevictable:7688kB isolated(anon):0kB isolated(file):0kB mapped:163864kB dirty:1264kB writeback:0kB shmem:109584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12668kB pagetables:5464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 662.024005][T11641] Node 1 active_anon:0kB inactive_anon:0kB active_file:92kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 662.055029][T11641] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 662.085365][T11641] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 662.091139][T11641] Node 0 DMA32 free:1048516kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:140424kB inactive_anon:0kB active_file:85152kB inactive_file:163468kB unevictable:7688kB writepending:1264kB zspages:0kB present:3129332kB managed:2537204kB mlocked:6152kB bounce:0kB free_pcp:43676kB local_pcp:24828kB free_cma:0kB [ 662.125380][T11641] lowmem_reserve[]: 0 0 1 1 1 [ 662.130122][T11641] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1048kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 662.160278][T11641] lowmem_reserve[]: 0 0 0 0 0 [ 662.165247][T11641] Node 1 Normal free:3939400kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:92kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 662.197027][T11641] lowmem_reserve[]: 0 0 0 0 0 [ 662.201827][T11641] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 662.215903][T11641] Node 0 DMA32: 1307*4kB (UME) 2571*8kB (UME) 1530*16kB (UME) 329*32kB (ME) 277*64kB (UME) 162*128kB (UME) 58*256kB (UME) 95*512kB (UME) 43*1024kB (UM) 7*2048kB (UM) 202*4096kB (M) = 1048516kB [ 662.254625][T11641] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 662.275462][T11641] Node 1 Normal: 0*4kB 7*8kB (U) 11*16kB (U) 7*32kB (UM) 4*64kB (U) 3*128kB [ 662.295845][T11534] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 662.330397][T11641] (UM) 4*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (UM) = 3939400kB [ 662.355690][T11641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 662.393636][T11534] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 662.401628][T11641] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 662.420968][T11534] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 662.480819][T11641] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 662.493486][T11534] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 662.511218][T11641] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 662.520963][T11641] 90041 total pagecache pages [ 662.531124][T11641] 38 pages in swap cache [ 662.541030][T11641] Free swap = 124844kB [ 662.550123][T11641] Total swap = 124996kB [ 662.559320][T11641] 2097051 pages RAM [ 662.568903][T11641] 0 pages HighMem/MovableOnly [ 662.578426][T11641] 430873 pages reserved [ 662.587461][T11641] 0 pages cma reserved [ 662.781873][ T30] audit: type=1400 audit(2000000002.708:921): avc: denied { map } for pid=11650 comm="syz.3.1180" path="/dev/video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 662.818389][T11534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.866355][T11534] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.895991][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.903146][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.986627][T11655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1179'. [ 663.428366][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.435538][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.837656][T11668] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 663.869935][ T5818] Bluetooth: hci1: command tx timeout [ 664.009106][T11534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.288361][ T30] audit: type=1400 audit(2000000004.283:922): avc: denied { ioctl } for pid=11680 comm="syz.2.1188" path="pid:[4026532799]" dev="nsfs" ino=4026532799 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 664.421681][ T30] audit: type=1400 audit(2000000004.419:923): avc: denied { getopt } for pid=11685 comm="syz.2.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 664.875138][T11703] openvswitch: netlink: IPv4 tunnel dst address is zero [ 664.897229][T11534] veth0_vlan: entered promiscuous mode [ 664.979748][T11534] veth1_vlan: entered promiscuous mode [ 665.093106][T11534] veth0_macvtap: entered promiscuous mode [ 665.136996][T11534] veth1_macvtap: entered promiscuous mode [ 665.217011][T11534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.268019][T11534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.275834][T11712] bpf: Bad value for 'gid' [ 665.300256][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.312057][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.352311][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.395107][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.543572][T11718] overlay: Unknown parameter 'uid<00000000000000000000' [ 665.561527][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.583358][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.634345][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.643118][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.796355][ T30] audit: type=1400 audit(2000000005.868:924): avc: denied { mounton } for pid=11534 comm="syz-executor" path="/root/syzkaller.Tphho0/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 665.895011][ T30] audit: type=1400 audit(2000000005.899:925): avc: denied { mounton } for pid=11534 comm="syz-executor" path="/root/syzkaller.Tphho0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=32027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 665.985748][ T30] audit: type=1400 audit(2000000005.931:926): avc: denied { mounton } for pid=11534 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 667.172160][T11751] openvswitch: netlink: IP tunnel dst address not specified [ 667.235463][T11753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1210'. [ 667.351582][T11756] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1211'. [ 667.605106][T11762] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 667.644277][T11762] team0: Port device batadv5 added [ 668.761043][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1221'. [ 669.079920][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'. [ 669.105007][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'. [ 669.122126][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'. [ 669.150471][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'. [ 669.171602][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'. [ 669.430813][T11796] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1224'. [ 669.541319][T11798] netlink: get zone limit has 4 unknown bytes [ 671.213031][T11813] netlink: 'syz.0.1228': attribute type 8 has an invalid length. [ 672.534352][T11827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1233'. [ 672.613340][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 672.655888][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 672.688048][T11831] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 672.791680][T11833] overlayfs: cannot append lower layer [ 672.816242][T11837] openvswitch: netlink: Multiple metadata blocks provided [ 673.190016][T11846] ªªªªªª: renamed from vlan0 (while UP) [ 673.508500][T11861] overlay: Unknown parameter 'uid<00000000000000000000' [ 674.177764][T11871] netlink: 'syz.0.1251': attribute type 21 has an invalid length. [ 674.186399][T11871] IPv6: NLM_F_CREATE should be specified when creating new route [ 674.673655][ T30] audit: type=1400 audit(2000000015.180:927): avc: denied { ioctl } for pid=11894 comm="syz.3.1262" path="socket:[32799]" dev="sockfs" ino=32799 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 674.743928][T11898] __nla_validate_parse: 7 callbacks suppressed [ 674.743947][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 674.766181][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 674.778036][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 674.797635][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 674.815115][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 674.866725][ T5889] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 674.919693][T11907] overlay: Unknown parameter 'uid<00000000000000000000' [ 674.928068][ T30] audit: type=1400 audit(2000000015.463:928): avc: denied { read } for pid=11905 comm="syz.3.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 675.186214][ T5889] usb 7-1: Using ep0 maxpacket: 16 [ 675.196015][ T5889] usb 7-1: unable to get BOS descriptor or descriptor too short [ 675.205731][ T5889] usb 7-1: config 6 has an invalid interface number: 228 but max is 0 [ 675.217941][ T5889] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 675.229804][ T5889] usb 7-1: config 6 has no interface number 0 [ 675.237481][ T5889] usb 7-1: config 6 interface 228 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 675.282582][ T5889] usb 7-1: config 6 interface 228 has no altsetting 0 [ 675.306327][ T5889] usb 7-1: New USB device found, idVendor=0403, idProduct=f3c2, bcdDevice=60.22 [ 675.321669][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.339845][ T5889] usb 7-1: Product: syz [ 675.348467][ T5889] usb 7-1: Manufacturer: syz [ 675.361371][ T5889] usb 7-1: SerialNumber: syz [ 675.717742][ T5889] usb 7-1: bad CDC descriptors [ 675.726218][ T5889] ftdi_sio 7-1:6.228: FTDI USB Serial Device converter detected [ 675.739357][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 675.754645][ T5889] ftdi_sio ttyUSB0: unknown device type: 0x6022 [ 676.251656][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 676.260823][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 676.476330][ T5889] usb 7-1: USB disconnect, device number 2 [ 676.525444][ T5889] ftdi_sio 7-1:6.228: device disconnected [ 676.795081][T11958] overlay: Unknown parameter 'uid<00000000000000000000' [ 677.767383][ T30] audit: type=1400 audit(2000000001.060:929): avc: denied { write } for pid=11975 comm="syz.2.1289" name="sg0" dev="devtmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 677.769915][T11977] program syz.2.1289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 678.003808][T11987] netlink: 'syz.3.1291': attribute type 10 has an invalid length. [ 678.012014][T11987] batadv0: left promiscuous mode [ 678.017425][T11987] batadv0: left allmulticast mode [ 678.024852][T11987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.033372][T11987] .`: (slave batadv0): Enslaving as an active interface with an up link [ 678.046505][T11987] loop5: detected capacity change from 0 to 7 [ 678.855497][T11987] Dev loop5: unable to read RDB block 7 [ 678.861716][T11987] loop5: AHDI p1 [ 678.865457][T11987] loop5: partition table partially beyond EOD, truncated [ 678.873803][T11991] netlink: 'syz.3.1291': attribute type 10 has an invalid length. [ 678.886538][T11991] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1291'. [ 678.895733][T11991] batadv0: entered promiscuous mode [ 678.901363][T11991] batadv0: entered allmulticast mode [ 679.258127][T11991] .`: (slave batadv0): Releasing backup interface [ 679.268854][T11991] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 679.366907][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'. [ 679.414152][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'. [ 679.664595][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'. [ 679.775925][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'. [ 679.796944][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'. [ 680.484638][ T5143] block nbd0: Possible stuck request ffff888027be8000: control (read@0,1024B). Runtime 180 seconds [ 680.495795][ T5143] block nbd0: Possible stuck request ffff888027be8200: control (read@1024,1024B). Runtime 180 seconds [ 680.510191][ T5143] block nbd0: Possible stuck request ffff888027be8400: control (read@2048,1024B). Runtime 180 seconds [ 680.521574][ T5143] block nbd0: Possible stuck request ffff888027be8600: control (read@3072,1024B). Runtime 180 seconds [ 681.865235][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 681.875081][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 681.884269][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 681.893405][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 681.902478][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 682.633929][ T5178] udevd[5178]: worker [9960] /devices/virtual/block/nbd0 timeout; kill it [ 682.800998][ T5178] udevd[5178]: seq 13275 '/devices/virtual/block/nbd0' killed [ 683.456295][T12085] netlink: 'syz.2.1320': attribute type 10 has an invalid length. [ 683.464317][T12085] batadv0: left allmulticast mode [ 683.476915][T12085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.490966][T12085] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 684.198364][T12085] netlink: 'syz.2.1320': attribute type 10 has an invalid length. [ 684.206388][T12085] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1320'. [ 684.215601][T12085] batadv0: entered promiscuous mode [ 684.221723][T12085] batadv0: entered allmulticast mode [ 684.233845][T12085] bond0: (slave batadv0): Releasing backup interface [ 684.249254][T12085] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 684.651393][ T30] audit: type=1400 audit(2000000004.997:930): avc: denied { setopt } for pid=12093 comm="syz.3.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 684.766945][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 684.785559][T12092] openvswitch: netlink: Flow actions attr not present in new flow. [ 684.931015][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 684.940799][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 684.950028][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 684.959182][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 685.405768][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 686.073385][T12134] overlay: Unknown parameter 'uid<00000000000000000000' [ 686.585097][ T30] audit: type=1400 audit(2000000007.033:931): avc: denied { write } for pid=12141 comm="syz.6.1337" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 686.610578][T12142] random: crng reseeded on system resumption [ 686.625590][ T30] audit: type=1400 audit(2000000007.065:932): avc: denied { open } for pid=12141 comm="syz.6.1337" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 686.693073][ T30] audit: type=1400 audit(2000000007.107:933): avc: denied { ioctl } for pid=12141 comm="syz.6.1337" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 686.927237][T12155] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1343'. [ 686.982155][T12158] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1342'. [ 688.178676][T12183] netlink: 'syz.6.1347': attribute type 8 has an invalid length. [ 688.583801][T12184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1346'. [ 688.593957][T12184] openvswitch: netlink: Flow actions attr not present in new flow. [ 688.641720][T12186] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1349'. [ 689.842174][ T794] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 690.023506][ T794] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.043463][ T794] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 690.183192][ T794] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 690.207705][T12213] netlink: 'syz.3.1357': attribute type 10 has an invalid length. [ 690.216452][T12213] batadv0: left promiscuous mode [ 690.221506][T12213] batadv0: left allmulticast mode [ 691.171503][ T794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.198577][T12213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.357584][ T794] usb 7-1: config 0 descriptor?? [ 691.371193][T12213] .`: (slave batadv0): Enslaving as an active interface with an up link [ 691.384499][T12217] loop5: detected capacity change from 0 to 7 [ 691.426383][T12217] Dev loop5: unable to read RDB block 7 [ 691.435220][T12213] netlink: 'syz.3.1357': attribute type 10 has an invalid length. [ 691.464799][T12217] loop5: AHDI p1 [ 691.468667][T12217] loop5: partition table partially beyond EOD, truncated [ 691.612466][T12213] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1357'. [ 691.621471][T12213] batadv0: entered promiscuous mode [ 691.930824][ T794] Bluetooth: Can't get state to change to load configuration err [ 692.085699][T12213] batadv0: entered allmulticast mode [ 692.121826][ T794] Bluetooth: Loading sysconfig file failed [ 692.134535][T12225] hub 9-0:1.0: USB hub found [ 692.150131][ T794] ath3k 7-1:0.0: probe with driver ath3k failed with error -16 [ 692.172846][T12225] hub 9-0:1.0: 1 port detected [ 692.180112][T12213] .`: (slave batadv0): Releasing backup interface [ 692.207178][ T794] usb 7-1: USB disconnect, device number 3 [ 692.238673][T12213] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 692.394805][T12231] overlay: Unknown parameter 'uid<00000000000000000000' [ 692.579981][T12237] openvswitch: netlink: Multiple metadata blocks provided [ 692.954990][ T794] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 693.128196][ T794] usb 7-1: Using ep0 maxpacket: 8 [ 693.253108][ T794] usb 7-1: config 6 has an invalid interface number: 64 but max is 0 [ 693.739072][ T794] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 693.765731][ T794] usb 7-1: config 6 has no interface number 0 [ 693.781477][ T794] usb 7-1: too many endpoints for config 6 interface 64 altsetting 21: 207, using maximum allowed: 30 [ 693.803105][ T794] usb 7-1: config 6 interface 64 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 693.838994][ T794] usb 7-1: config 6 interface 64 has no altsetting 0 [ 693.883412][ T794] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 693.898479][ T794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.917042][T12268] overlay: Unknown parameter 'uid<00000000000000000000' [ 693.924136][ T794] usb 7-1: Product: syz [ 694.040041][T12271] comedi comedi4: bad chanlist[0]=0x00400006 chan=6 range length=2 [ 694.071215][ T794] usb 7-1: Manufacturer: syz [ 694.078746][ T794] usb 7-1: SerialNumber: syz [ 694.304005][ T24] usb 7-1: USB disconnect, device number 4 [ 695.587656][T12312] overlay: Unknown parameter 'uid<00000000000000000000' [ 695.611875][T12314] overlay: Unknown parameter 'uid<00000000000000000000' [ 696.220841][T12327] netlink: 'syz.3.1394': attribute type 10 has an invalid length. [ 696.228962][T12327] batadv0: left promiscuous mode [ 696.233982][T12327] batadv0: left allmulticast mode [ 696.240517][T12327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.248480][T12327] .`: (slave batadv0): Enslaving as an active interface with an up link [ 696.258968][T12327] netlink: 'syz.3.1394': attribute type 10 has an invalid length. [ 696.266893][T12327] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1394'. [ 696.276177][T12327] batadv0: entered promiscuous mode [ 696.281437][T12327] batadv0: entered allmulticast mode [ 696.292737][T12327] .`: (slave batadv0): Releasing backup interface [ 696.301289][T12327] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 696.431268][T12332] netlink: 'syz.1.1396': attribute type 10 has an invalid length. [ 696.439738][T12332] batadv0: left promiscuous mode [ 696.444783][T12332] batadv0: left allmulticast mode [ 696.451623][T12332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.459470][T12332] .`: (slave batadv0): Enslaving as an active interface with an up link [ 696.471251][T12332] netlink: 'syz.1.1396': attribute type 10 has an invalid length. [ 696.479574][T12332] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1396'. [ 696.489169][T12332] batadv0: entered promiscuous mode [ 696.494554][T12332] batadv0: entered allmulticast mode [ 696.504303][T12332] .`: (slave batadv0): Releasing backup interface [ 696.514311][T12332] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 696.813785][T12344] netlink: 'syz.3.1398': attribute type 10 has an invalid length. [ 696.836477][T12344] batadv0: left promiscuous mode [ 696.841992][T12344] batadv0: left allmulticast mode [ 696.859525][T12344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.881272][T12344] .`: (slave batadv0): Enslaving as an active interface with an up link [ 696.899791][T12345] netlink: 'syz.3.1398': attribute type 10 has an invalid length. [ 696.917783][T12345] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1398'. [ 696.940832][T12345] batadv0: entered promiscuous mode [ 696.946135][T12345] batadv0: entered allmulticast mode [ 697.328855][ T30] audit: type=1326 audit(2000000018.172:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.1.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 697.547315][ T30] audit: type=1326 audit(2000000018.172:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.1.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 697.586765][ T30] audit: type=1326 audit(2000000018.172:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.1.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 697.611021][ T30] audit: type=1326 audit(2000000018.172:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.1.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 697.635409][ T30] audit: type=1326 audit(2000000018.172:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.1.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 697.668948][T12345] .`: (slave batadv0): Releasing backup interface [ 697.713178][ T30] audit: type=1326 audit(2000000018.172:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.1.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 697.745824][ T30] audit: type=1326 audit(2000000018.172:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.1.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 697.771526][ T30] audit: type=1326 audit(2000000018.172:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.1.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 697.809232][T12345] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 697.814190][ T30] audit: type=1326 audit(2000000018.182:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.1.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 697.961375][T12348] lo speed is unknown, defaulting to 1000 [ 698.121547][ T30] audit: type=1326 audit(2000000018.182:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.1.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441e79c799 code=0x7ffc0000 [ 698.519178][T12365] netlink: 'syz.0.1406': attribute type 10 has an invalid length. [ 698.527473][T12365] batadv0: left promiscuous mode [ 698.532504][T12365] batadv0: left allmulticast mode [ 698.538655][T12365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.546701][T12365] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 698.557237][T12365] netlink: 'syz.0.1406': attribute type 10 has an invalid length. [ 698.565147][T12365] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1406'. [ 698.574242][T12365] batadv0: entered promiscuous mode [ 698.579525][T12365] batadv0: entered allmulticast mode [ 698.802228][T12365] bond0: (slave batadv0): Releasing backup interface [ 698.967061][T12365] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 698.989695][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1404'. [ 699.642331][ T24] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 699.797468][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.849207][ T24] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 699.886487][ T24] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 699.944615][ T24] usb 7-1: config 1 interface 0 has no altsetting 0 [ 699.985822][ T24] usb 7-1: string descriptor 0 read error: -22 [ 700.006982][ T24] usb 7-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 700.053904][ T24] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 700.218000][ T24] usb 7-1: 0:2 : does not exist [ 700.434403][T12397] netlink: 'syz.3.1419': attribute type 10 has an invalid length. [ 700.442283][T12397] batadv0: left promiscuous mode [ 700.447377][T12397] batadv0: left allmulticast mode [ 700.456186][T12397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.469338][T12397] .`: (slave batadv0): Enslaving as an active interface with an up link [ 700.483609][T12397] netlink: 'syz.3.1419': attribute type 10 has an invalid length. [ 700.491717][T12397] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1419'. [ 700.500809][T12397] batadv0: entered promiscuous mode [ 700.506151][T12397] batadv0: entered allmulticast mode [ 700.512401][ T24] usb-storage 7-1:1.1: USB Mass Storage device detected [ 700.543856][T12397] .`: (slave batadv0): Releasing backup interface [ 700.558722][T12397] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 700.881466][ T24] usb 7-1: us122l: couldn't allocate write buffer [ 700.891751][ T24] snd-usb-us122l 7-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 701.484276][ T24] usb 7-1: USB disconnect, device number 5 [ 702.961664][T12430] hub 9-0:1.0: USB hub found [ 702.985970][T12430] hub 9-0:1.0: 1 port detected [ 703.089307][T12438] openvswitch: netlink: IP tunnel dst address not specified [ 705.456586][T12472] netlink: 'syz.3.1443': attribute type 8 has an invalid length. [ 705.830558][T12476] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 705.837143][T12476] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 705.858515][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 705.858530][ T30] audit: type=1400 audit(2000000006.445:963): avc: denied { write } for pid=12475 comm="syz.2.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 705.902209][T12476] vhci_hcd vhci_hcd.0: Device attached [ 705.918643][T12480] vhci_hcd: connection closed [ 705.918902][ T1162] vhci_hcd vhci_hcd.6: stop threads [ 705.949615][ T1162] vhci_hcd vhci_hcd.6: release socket [ 705.960882][ T1162] vhci_hcd vhci_hcd.6: disconnect device [ 706.224203][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 706.325797][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 706.376844][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 706.395810][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 706.428507][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 706.470852][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 706.575687][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 706.586574][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.594617][ T10] usb 3-1: Product: syz [ 706.601251][ T10] usb 3-1: Manufacturer: syz [ 706.606229][ T10] usb 3-1: SerialNumber: syz [ 706.622778][ T10] usb 3-1: config 0 descriptor?? [ 706.639189][ T10] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 706.841785][ T5873] kernel read not supported for file /sysvipc/shm (pid: 5873 comm: kworker/0:5) [ 707.024748][ T10] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 707.225100][ T10] usb 3-1: USB disconnect, device number 11 [ 708.569443][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1457'. [ 708.683864][T12522] overlay: Unknown parameter 'uid<00000000000000000000' [ 708.807530][T12528] overlay: Unknown parameter 'uid<00000000000000000000' [ 709.359771][ T5143] block nbd0: Possible stuck request ffff888027be8000: control (read@0,1024B). Runtime 210 seconds [ 709.370986][ T5143] block nbd0: Possible stuck request ffff888027be8200: control (read@1024,1024B). Runtime 210 seconds [ 709.385271][ T5143] block nbd0: Possible stuck request ffff888027be8400: control (read@2048,1024B). Runtime 210 seconds [ 709.396587][T12538] netlink: 'syz.1.1463': attribute type 10 has an invalid length. [ 709.404496][T12538] batadv0: left promiscuous mode [ 709.410237][T12538] batadv0: left allmulticast mode [ 709.418193][T12538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.426132][T12538] .`: (slave batadv0): Enslaving as an active interface with an up link [ 709.435317][ T5143] block nbd0: Possible stuck request ffff888027be8600: control (read@3072,1024B). Runtime 210 seconds [ 709.446666][T12538] netlink: 'syz.1.1463': attribute type 10 has an invalid length. [ 709.455337][T12538] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1463'. [ 709.465235][T12538] batadv0: entered promiscuous mode [ 709.470536][T12538] batadv0: entered allmulticast mode [ 709.515136][T12538] .`: (slave batadv0): Releasing backup interface [ 709.541654][T12538] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 709.980282][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1465'. [ 710.068856][T12550] overlay: Unknown parameter 'uid<00000000000000000000' [ 711.288361][ T58] batman_adv: batadv3: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 711.739629][T12569] hub 9-0:1.0: USB hub found [ 711.775903][T12569] hub 9-0:1.0: 1 port detected [ 711.823857][T12573] overlay: Unknown parameter 'uid<00000000000000000000' [ 711.966741][T12576] overlay: Unknown parameter 'uid<00000000000000000000' [ 712.123141][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1475'. [ 712.158648][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1475'. [ 712.172111][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1475'. [ 712.183289][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1475'. [ 713.330049][T12597] overlay: Unknown parameter 'uid<00000000000000000000' [ 714.926198][T12620] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1490'. [ 716.567638][T12638] overlay: Unknown parameter 'uid<00000000000000000000' [ 716.783171][T12653] netlink: 'syz.3.1498': attribute type 10 has an invalid length. [ 716.791090][T12653] batadv0: left promiscuous mode [ 716.796074][T12653] batadv0: left allmulticast mode [ 716.804109][T12653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.812604][T12653] .`: (slave batadv0): Enslaving as an active interface with an up link [ 716.824171][T12653] loop5: detected capacity change from 0 to 7 [ 716.831048][T12653] Dev loop5: unable to read RDB block 7 [ 716.836734][T12653] loop5: AHDI p1 [ 716.840375][T12653] loop5: partition table partially beyond EOD, truncated [ 716.848679][T12653] netlink: 'syz.3.1498': attribute type 10 has an invalid length. [ 716.856574][T12653] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1498'. [ 716.866551][T12653] batadv0: entered promiscuous mode [ 716.872066][T12653] batadv0: entered allmulticast mode [ 716.878167][T12653] .`: (slave batadv0): Releasing backup interface [ 716.886442][T12653] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 717.157273][T12665] openvswitch: netlink: IP tunnel dst address not specified [ 717.714610][T12677] overlay: Unknown parameter 'uid<00000000000000000000' [ 718.024892][T12683] overlay: Unknown parameter 'uid<00000000000000000000' [ 718.197077][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1513'. [ 718.211629][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1513'. [ 718.220854][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1513'. [ 718.230782][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1513'. [ 718.240085][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1513'. [ 718.523595][T12698] overlay: Unknown parameter 'uid<00000000000000000000' [ 718.826307][T12704] netlink: 'syz.6.1518': attribute type 8 has an invalid length. [ 719.438219][T12711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.643666][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1526'. [ 719.662291][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1526'. [ 719.673957][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1526'. [ 719.693173][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1526'. [ 719.706033][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1526'. [ 720.099005][T12740] overlay: filesystem on ./file0 is read-only [ 721.202591][T12769] openvswitch: netlink: IP tunnel dst address not specified [ 721.278082][T12770] : entered promiscuous mode [ 722.495454][T12791] overlay: Unknown parameter 'uid<00000000000000000000' [ 722.569655][T12793] netlink: 'syz.6.1544': attribute type 10 has an invalid length. [ 722.593311][T12793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.609847][T12793] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 722.637352][T12793] netlink: 'syz.6.1544': attribute type 10 has an invalid length. [ 722.645307][T12793] batadv0: entered promiscuous mode [ 722.650641][T12793] batadv0: entered allmulticast mode [ 723.068565][T12793] bond0: (slave batadv0): Releasing backup interface [ 723.081375][T12793] bridge0: port 3(batadv0) entered blocking state [ 723.088029][T12793] bridge0: port 3(batadv0) entered disabled state [ 723.119062][ T6415] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 723.128478][ T6415] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 723.463768][ T30] audit: type=1400 audit(2000000024.922:964): avc: denied { setopt } for pid=12803 comm="syz.0.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 724.293888][T12819] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 724.458620][T12819] team0: Port device batadv3 added [ 725.890998][T12854] openvswitch: netlink: IP tunnel dst address not specified [ 726.071656][T12859] hub 9-0:1.0: USB hub found [ 726.112371][T12859] hub 9-0:1.0: 1 port detected [ 727.033480][T12874] overlay: Unknown parameter 'uid<00000000000000000000' [ 727.187069][T12878] overlay: Unknown parameter 'uid<00000000000000000000' [ 730.097244][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 730.619418][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 730.720701][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.765795][T12938] openvswitch: netlink: IP tunnel dst address not specified [ 730.812103][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.837882][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 730.907017][T12945] netlink: 'syz.1.1590': attribute type 10 has an invalid length. [ 730.916502][T12945] batadv0: left promiscuous mode [ 730.921544][T12945] batadv0: left allmulticast mode [ 730.937278][T12945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.952013][T12945] .`: (slave batadv0): Enslaving as an active interface with an up link [ 730.974817][T12945] netlink: 'syz.1.1590': attribute type 10 has an invalid length. [ 730.982834][T12945] __nla_validate_parse: 7 callbacks suppressed [ 730.982868][T12945] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1590'. [ 730.998122][T12945] batadv0: entered promiscuous mode [ 731.003448][T12945] batadv0: entered allmulticast mode [ 731.425944][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.451017][T12945] .`: (slave batadv0): Releasing backup interface [ 731.465845][ T9] usb 3-1: config 0 descriptor?? [ 731.477985][T12945] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 731.610788][ T30] audit: type=1400 audit(2000000033.488:965): avc: denied { setopt } for pid=12949 comm="syz.6.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 732.267327][ T5813] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 732.367091][ T9] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 732.384015][ T9] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 732.400871][ T9] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 732.408979][ T9] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 732.418415][ T9] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 732.434422][ T9] koneplus 0003:1E7D:2D51.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 732.447595][ T9] koneplus 0003:1E7D:2D51.0006: couldn't init struct koneplus_device [ 732.460917][ T9] koneplus 0003:1E7D:2D51.0006: couldn't install mouse [ 732.475612][ T9] koneplus 0003:1E7D:2D51.0006: probe with driver koneplus failed with error -71 [ 732.492015][ T9] usb 3-1: USB disconnect, device number 12 [ 732.562847][ T5813] usb 7-1: Using ep0 maxpacket: 8 [ 732.576014][ T5813] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.600343][ T5813] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.641386][ T5813] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.684283][ T5813] usb 7-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 732.727440][ T5813] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.757390][T12964] fido_id[12964]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 732.795416][ T5813] usb 7-1: config 0 descriptor?? [ 732.836712][ T5813] usbhid 7-1:0.0: fixing wrong optional hid class descriptors count [ 733.152852][ T30] audit: type=1400 audit(2000000035.094:966): avc: denied { create } for pid=12976 comm="syz.0.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 733.665232][ T5813] maltron 0003:058F:9410.0007: unknown main item tag 0x0 [ 733.692448][ T5813] maltron 0003:058F:9410.0007: unknown main item tag 0x0 [ 733.715209][ T5813] maltron 0003:058F:9410.0007: unknown main item tag 0x0 [ 733.728902][ T5813] maltron 0003:058F:9410.0007: unknown main item tag 0x0 [ 733.750681][ T5813] maltron 0003:058F:9410.0007: unknown main item tag 0x0 [ 733.789596][ T5813] maltron 0003:058F:9410.0007: hidraw0: USB HID v0.00 Device [HID 058f:9410] on usb-dummy_hcd.6-1/input0 [ 733.924167][ T5813] usb 7-1: USB disconnect, device number 6 [ 734.439362][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 734.445721][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 734.730151][T12990] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 734.747389][T12988] fido_id[12988]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 734.795126][T12990] team0: Port device batadv3 added [ 734.882163][T12997] netlink: 'syz.3.1605': attribute type 10 has an invalid length. [ 734.890198][T12997] batadv0: left promiscuous mode [ 734.895200][T12997] batadv0: left allmulticast mode [ 734.910484][T12997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.925227][T12997] .`: (slave batadv0): Enslaving as an active interface with an up link [ 734.947473][T12997] netlink: 'syz.3.1605': attribute type 10 has an invalid length. [ 734.955446][T12997] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1605'. [ 734.964642][T12997] batadv0: entered promiscuous mode [ 734.969910][T12997] batadv0: entered allmulticast mode [ 735.241250][T12990] hub 9-0:1.0: USB hub found [ 735.250632][T12990] hub 9-0:1.0: 1 port detected [ 735.259099][T12997] .`: (slave batadv0): Releasing backup interface [ 735.312428][T12997] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 736.403687][ T30] audit: type=1400 audit(2000000038.517:967): avc: denied { setopt } for pid=13024 comm="syz.6.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 736.603348][T13032] overlay: Unknown parameter 'uid<00000000000000000000' [ 736.687894][T13034] netlink: 'syz.1.1619': attribute type 10 has an invalid length. [ 736.695919][T13034] batadv0: left promiscuous mode [ 736.701060][T13034] batadv0: left allmulticast mode [ 736.718146][T13034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.732546][T13034] .`: (slave batadv0): Enslaving as an active interface with an up link [ 736.756818][T13034] netlink: 'syz.1.1619': attribute type 10 has an invalid length. [ 736.765447][T13034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1619'. [ 736.775248][T13034] batadv0: entered promiscuous mode [ 736.780779][T13034] batadv0: entered allmulticast mode [ 737.214770][T13034] .`: (slave batadv0): Releasing backup interface [ 737.242615][T13034] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 737.642653][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'. [ 737.664338][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'. [ 737.673828][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'. [ 737.684023][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'. [ 737.693694][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'. [ 738.015326][ T5143] block nbd0: Possible stuck request ffff888027be8000: control (read@0,1024B). Runtime 240 seconds [ 738.026241][ T5143] block nbd0: Possible stuck request ffff888027be8200: control (read@1024,1024B). Runtime 240 seconds [ 738.041274][ T5143] block nbd0: Possible stuck request ffff888027be8400: control (read@2048,1024B). Runtime 240 seconds [ 738.072205][ T5143] block nbd0: Possible stuck request ffff888027be8600: control (read@3072,1024B). Runtime 240 seconds [ 738.762294][T13080] overlay: Unknown parameter 'uid<00000000000000000000' [ 739.301769][T13096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1639'. [ 739.682963][T13098] overlay: Unknown parameter 'uid<00000000000000000000' [ 740.311625][T13115] overlay: Unknown parameter 'uid<00000000000000000000' [ 741.225685][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 741.235582][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 741.244765][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 741.715962][T13144] __nla_validate_parse: 2 callbacks suppressed [ 741.715996][T13144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1657'. [ 742.102823][T13147] overlay: Unknown parameter 'uid<00000000000000000000' [ 742.262863][T13146] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 742.273952][T13146] team0: Port device batadv1 added [ 742.427098][T13146] hub 9-0:1.0: USB hub found [ 742.453320][T13146] hub 9-0:1.0: 1 port detected [ 742.680400][T13165] overlay: Unknown parameter 'uid<00000000000000000000' [ 743.607370][T13185] netlink: 'syz.2.1672': attribute type 10 has an invalid length. [ 743.615478][T13185] batadv0: left promiscuous mode [ 743.620483][T13185] batadv0: left allmulticast mode [ 743.632184][T13185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.648245][T13185] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 743.676232][T13185] loop5: detected capacity change from 0 to 7 [ 743.731274][T13186] netlink: 'syz.2.1672': attribute type 10 has an invalid length. [ 743.739311][T13186] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1672'. [ 743.748453][T13186] batadv0: entered promiscuous mode [ 743.753728][T13186] batadv0: entered allmulticast mode [ 743.813335][T13185] Dev loop5: unable to read RDB block 7 [ 743.819111][T13185] loop5: AHDI p1 [ 743.823020][T13185] loop5: partition table partially beyond EOD, truncated [ 744.266049][T13186] bond0: (slave batadv0): Releasing backup interface [ 744.322224][T13186] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 744.374908][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'. [ 744.440908][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'. [ 744.451678][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'. [ 744.469449][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'. [ 744.495793][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'. [ 745.122126][T13196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1673'. [ 745.593815][T13203] overlay: Unknown parameter 'uid<00000000000000000000' [ 745.712671][T13205] overlay: Unknown parameter 'uid<00000000000000000000' [ 745.768260][T13209] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1680'. [ 745.791106][T13209] netlink: 15 bytes leftover after parsing attributes in process `syz.6.1680'. [ 745.818711][T13209] netlink: 'syz.6.1680': attribute type 6 has an invalid length. [ 745.959295][T13217] overlay: Unknown parameter 'uid<00000000000000000000' [ 746.223212][ T24] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 746.377293][ T24] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 746.404761][ T24] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.417065][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 746.427794][ T24] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 746.438770][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.484598][ T24] usb 7-1: config 0 descriptor?? [ 746.661479][T13235] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 746.698690][T13235] team0: Port device batadv6 added [ 746.805315][T13242] overlay: Unknown parameter 'uid<00000000000000000000' [ 746.874766][T13246] __nla_validate_parse: 5 callbacks suppressed [ 746.874785][T13246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1694'. [ 746.929241][ T24] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 746.966862][ T24] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 747.007265][ T24] hid-steam 0003:28DE:1102.0008: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0 [ 747.099458][ T24] hid-steam 0003:28DE:1102.0008: Steam Controller 'XXXXXXXXXX' connected [ 747.143664][ T24] input: Steam Controller as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:28DE:1102.0008/input/input17 [ 747.213475][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 747.234736][ T24] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 747.273486][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1699'. [ 747.283046][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1699'. [ 747.292204][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1699'. [ 747.302120][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1699'. [ 747.312381][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1699'. [ 747.337185][ T24] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 747.388931][ T24] hid-steam 0003:28DE:1102.0009: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0 [ 747.411519][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 747.435595][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.449979][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.460339][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 747.470681][ T24] usb 7-1: USB disconnect, device number 7 [ 747.480299][ T10] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 747.506522][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.557575][ T10] usb 4-1: config 0 descriptor?? [ 747.597421][T13261] fido_id[13261]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 748.007238][ T10] holtek_kbd 0003:04D9:A055.000A: unknown main item tag 0x0 [ 748.100606][ T10] holtek_kbd 0003:04D9:A055.000A: unknown main item tag 0x0 [ 748.141020][ T24] hid-steam 0003:28DE:1102.0008: Steam Controller 'XXXXXXXXXX' disconnected [ 748.157900][ T10] holtek_kbd 0003:04D9:A055.000A: unknown main item tag 0x0 [ 748.223776][ T10] holtek_kbd 0003:04D9:A055.000A: unknown main item tag 0x0 [ 748.256150][ T10] holtek_kbd 0003:04D9:A055.000A: unknown main item tag 0x0 [ 748.266860][T13274] overlay: Unknown parameter 'uid<00000000000000000000' [ 748.290427][ T10] holtek_kbd 0003:04D9:A055.000A: unknown main item tag 0x0 [ 748.328251][ T10] holtek_kbd 0003:04D9:A055.000A: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.3-1/input0 [ 748.410611][ T10] usb 4-1: USB disconnect, device number 9 [ 748.482816][T13278] fido_id[13278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 748.745604][T13288] netlink: 'syz.0.1709': attribute type 2 has an invalid length. [ 748.776345][T13288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1709'. [ 749.917834][T13309] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 749.929321][T13309] team0: Port device batadv4 added [ 750.581964][T13313] hub 9-0:1.0: USB hub found [ 750.601516][T13313] hub 9-0:1.0: 1 port detected [ 750.615654][T13312] overlay: Unknown parameter 'uid<00000000000000000000' [ 750.907583][T13323] overlay: Unknown parameter 'uid<00000000000000000000' [ 751.045636][T13328] overlay: Unknown parameter 'uid<00000000000000000000' [ 751.767110][T13340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1726'. [ 751.990962][ T30] audit: type=1400 audit(2000000054.873:968): avc: denied { getopt } for pid=13344 comm="syz.1.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 752.224055][ T29] IPVS: starting estimator thread 0... [ 752.315244][T13357] openvswitch: netlink: IP tunnel dst address not specified [ 752.366577][T13354] IPVS: using max 36 ests per chain, 86400 per kthread [ 752.565693][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1732'. [ 752.594887][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1732'. [ 752.609205][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1732'. [ 752.623153][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1732'. [ 752.633947][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1732'. [ 753.037568][T13373] tipc: Enabling of bearer rejected, failed to enable media [ 753.071753][T13371] overlay: Unknown parameter 'uid<00000000000000000000' [ 753.176277][ T5817] Bluetooth: hci6: command 0xfc11 tx timeout [ 753.184533][ T5818] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 753.385542][ T29] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 754.174242][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 754.205458][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 754.226733][ T29] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 754.505966][T13392] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1742'. [ 754.701273][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.709495][ T29] usb 3-1: Product: syz [ 754.714558][ T29] usb 3-1: Manufacturer: syz [ 754.719774][ T29] usb 3-1: SerialNumber: syz [ 755.640272][ T29] usb 3-1: 0:2 : does not exist [ 755.926818][ T29] usb 3-1: USB disconnect, device number 13 [ 756.311861][T13421] openvswitch: netlink: IP tunnel dst address not specified [ 757.115390][T13431] openvswitch: netlink: IP tunnel dst address not specified [ 758.166901][T13447] openvswitch: netlink: IP tunnel dst address not specified [ 758.357962][T13456] overlay: Unknown parameter 'uid<00000000000000000000' [ 759.653510][T13473] netlink: 'syz.0.1763': attribute type 10 has an invalid length. [ 759.661450][T13473] batadv0: left promiscuous mode [ 759.666486][T13473] batadv0: left allmulticast mode [ 759.672435][T13473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.680427][T13473] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 759.694015][T13473] netlink: 'syz.0.1763': attribute type 10 has an invalid length. [ 759.701997][T13473] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1763'. [ 759.710997][T13473] batadv0: entered promiscuous mode [ 759.716188][T13473] batadv0: entered allmulticast mode [ 759.722441][T13473] bond0: (slave batadv0): Releasing backup interface [ 759.731213][T13473] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 761.542730][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1769'. [ 761.551956][T13492] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1769'. [ 763.506489][T13520] openvswitch: netlink: IP tunnel dst address not specified [ 763.544960][T13523] openvswitch: netlink: IP tunnel dst address not specified [ 765.385953][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1789'. [ 766.667110][ T5143] block nbd0: Possible stuck request ffff888027be8000: control (read@0,1024B). Runtime 270 seconds [ 766.678124][ T5143] block nbd0: Possible stuck request ffff888027be8200: control (read@1024,1024B). Runtime 270 seconds [ 766.690724][ T5143] block nbd0: Possible stuck request ffff888027be8400: control (read@2048,1024B). Runtime 270 seconds [ 766.702099][ T5143] block nbd0: Possible stuck request ffff888027be8600: control (read@3072,1024B). Runtime 270 seconds [ 767.475359][T13581] openvswitch: netlink: IP tunnel dst address not specified [ 767.748944][T13591] openvswitch: netlink: IP tunnel dst address not specified [ 768.345869][T13608] netlink: 'syz.2.1803': attribute type 10 has an invalid length. [ 768.353777][T13608] batadv0: left promiscuous mode [ 768.358727][T13608] batadv0: left allmulticast mode [ 768.365200][T13608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.373903][T13608] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 768.386298][T13608] loop5: detected capacity change from 0 to 7 [ 768.394197][T13608] Dev loop5: unable to read RDB block 7 [ 768.399812][T13608] loop5: AHDI p1 [ 768.403445][T13608] loop5: partition table partially beyond EOD, truncated [ 768.411899][T13608] netlink: 'syz.2.1803': attribute type 10 has an invalid length. [ 768.419910][T13608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1803'. [ 768.428890][T13608] batadv0: entered promiscuous mode [ 768.434107][T13608] batadv0: entered allmulticast mode [ 768.450399][T13608] bond0: (slave batadv0): Releasing backup interface [ 768.466326][T13608] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 772.492405][T13655] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 772.511564][T13655] team0: Port device batadv4 added [ 772.882301][T13677] openvswitch: netlink: IP tunnel dst address not specified [ 772.902784][T13675] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 772.976510][T13675] team0: Port device batadv7 added [ 773.328071][T13687] openvswitch: netlink: IP tunnel dst address not specified [ 773.847847][T13693] block nbd2: not configured, cannot reconfigure [ 773.910842][T13695] overlayfs: regular lower layers cannot follow data lower layers [ 775.041147][T13705] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1827'. [ 775.050262][T13705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1827'. [ 775.362822][T13689] Bluetooth: hci1: command 0x0406 tx timeout [ 775.704668][T13713] netlink: 'syz.2.1830': attribute type 10 has an invalid length. [ 775.712663][T13713] batadv0: left promiscuous mode [ 775.717710][T13713] batadv0: left allmulticast mode [ 775.729226][T13713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.743989][T13713] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 775.770814][T13713] loop5: detected capacity change from 0 to 7 [ 775.825093][T13714] netlink: 'syz.2.1830': attribute type 10 has an invalid length. [ 775.833325][T13714] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1830'. [ 775.843300][T13714] batadv0: entered promiscuous mode [ 775.849117][T13714] batadv0: entered allmulticast mode [ 775.862805][T13714] bond0: (slave batadv0): Releasing backup interface [ 775.884073][T13714] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 776.275987][T13713] Dev loop5: unable to read RDB block 7 [ 776.281605][T13713] loop5: AHDI p1 [ 776.285331][T13713] loop5: partition table partially beyond EOD, truncated [ 776.750357][T13729] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 777.221370][T13729] team0: Port device batadv5 added [ 777.341492][T13733] hub 9-0:1.0: USB hub found [ 777.362969][T13733] hub 9-0:1.0: 1 port detected [ 777.860725][T13743] overlayfs: missing 'lowerdir' [ 779.630824][T13762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1842'. [ 781.188515][T13779] netlink: 'syz.0.1847': attribute type 1 has an invalid length. [ 781.238500][T13779] netlink: 5220 bytes leftover after parsing attributes in process `syz.0.1847'. [ 781.255620][T13779] nbd: illegal input index 1638444 [ 781.294358][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1849'. [ 782.276747][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 782.524697][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 782.552895][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 782.638312][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.654830][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 782.666778][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 782.682826][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 782.693413][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 782.710432][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 782.719089][ T9] usb 4-1: config 0 has no interface number 0 [ 782.725857][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.737465][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.738111][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 782.757348][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 782.767108][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 782.775256][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.784224][ T10] usb 3-1: Manufacturer: syz [ 782.811686][ T9] usb 4-1: config 0 descriptor?? [ 782.819777][ T10] usb 3-1: config 0 descriptor?? [ 782.876742][T13813] netlink: 'syz.6.1858': attribute type 10 has an invalid length. [ 782.884904][T13813] batadv0: left allmulticast mode [ 782.890070][T13813] batadv0: left promiscuous mode [ 782.895167][T13813] bridge0: port 3(batadv0) entered disabled state [ 782.909338][T13813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.917755][T13813] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 782.929196][T13813] loop5: detected capacity change from 0 to 7 [ 782.936378][T13813] Dev loop5: unable to read RDB block 7 [ 782.941982][T13813] loop5: AHDI p1 [ 782.945825][T13813] loop5: partition table partially beyond EOD, truncated [ 782.954156][T13813] netlink: 'syz.6.1858': attribute type 10 has an invalid length. [ 782.961980][T13813] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1858'. [ 782.971637][T13813] batadv0: entered promiscuous mode [ 782.977181][T13813] batadv0: entered allmulticast mode [ 782.984014][T13813] bond0: (slave batadv0): Releasing backup interface [ 782.992843][T13813] bridge0: port 3(batadv0) entered blocking state [ 783.000114][T13813] bridge0: port 3(batadv0) entered disabled state [ 783.238792][ T10] rc_core: IR keymap rc-hauppauge not found [ 783.248477][T13820] overlayfs: missing 'lowerdir' [ 783.259869][ T9] prodikeys 0003:041E:2801.000B: item fetching failed at offset 5/7 [ 783.273372][ T10] Registered IR keymap rc-empty [ 783.301625][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.333596][ T9] prodikeys 0003:041E:2801.000B: hid parse failed [ 783.341823][ T9] prodikeys 0003:041E:2801.000B: probe with driver prodikeys failed with error -22 [ 783.365138][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.395867][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 783.500572][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 783.521517][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.539457][ T5813] usb 4-1: USB disconnect, device number 10 [ 783.553930][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.591639][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.641543][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.679660][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.715395][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.753171][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.839954][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.867903][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.915752][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.964442][ T10] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 783.972448][ T10] mceusb 3-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 784.019789][ T10] usb 3-1: USB disconnect, device number 14 [ 784.280172][T13834] pimreg3: entered allmulticast mode [ 784.400891][ T5813] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 784.553494][ T5813] usb 7-1: Using ep0 maxpacket: 32 [ 784.567337][ T5813] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.580862][ T5813] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 784.596529][ T5813] usb 7-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 784.619629][ T5813] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.645509][ T5813] usb 7-1: Product: syz [ 784.659929][ T5813] usb 7-1: Manufacturer: syz [ 784.671500][ T5813] usb 7-1: SerialNumber: syz [ 784.687496][ T5813] usb 7-1: config 0 descriptor?? [ 784.696180][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 784.710509][T13827] lo speed is unknown, defaulting to 1000 [ 784.808979][T13846] netlink: 'syz.2.1869': attribute type 10 has an invalid length. [ 784.816919][T13846] batadv0: left promiscuous mode [ 784.822037][T13846] batadv0: left allmulticast mode [ 784.828472][T13846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.837186][T13846] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 784.848673][T13846] netlink: 'syz.2.1869': attribute type 10 has an invalid length. [ 784.856925][T13846] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1869'. [ 784.865961][T13846] batadv0: entered promiscuous mode [ 784.871250][T13846] batadv0: entered allmulticast mode [ 784.905063][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 785.307510][T13846] bond0: (slave batadv0): Releasing backup interface [ 785.334058][T13846] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 785.338497][ T24] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 785.371667][ T24] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 785.381030][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.389321][ T24] usb 4-1: Product: syz [ 785.393875][ T24] usb 4-1: Manufacturer: syz [ 785.399123][ T24] usb 4-1: SerialNumber: syz [ 785.422638][ T24] usb 4-1: config 0 descriptor?? [ 785.438151][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 785.450612][ T24] usb 4-1: setting power ON [ 785.455731][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 785.526623][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 785.543107][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 785.559649][ T24] usb 4-1: media controller created [ 785.588355][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 785.661492][ T24] usb 4-1: selecting invalid altsetting 6 [ 785.676121][ T24] usb 4-1: digital interface selection failed (-22) [ 785.694668][T13840] dvb-usb: bulk message failed: -22 (3/0) [ 785.703152][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 785.715829][T13840] cxusb: i2c wr: len=80 is too big! [ 785.715829][T13840] [ 785.736472][ T24] usb 4-1: setting power OFF [ 785.743629][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 785.754739][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 785.766877][ T24] (NULL device *): no alternate interface [ 785.824924][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 785.875109][ T24] usb 4-1: USB disconnect, device number 11 [ 786.331140][ T5813] usb 7-1: USB disconnect, device number 8 [ 786.530045][T13860] overlayfs: missing 'lowerdir' [ 786.888439][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 787.129376][ T24] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 787.586317][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.593696][T13874] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 787.596312][ T24] usb 4-1: Product: syz [ 787.635842][ T24] usb 4-1: Manufacturer: syz [ 787.651944][T13874] team0: Port device batadv5 added [ 787.667817][ T24] usb 4-1: SerialNumber: syz [ 787.694602][ T24] usb 4-1: config 0 descriptor?? [ 787.712626][ T30] audit: type=1400 audit(2000000092.371:969): avc: denied { write } for pid=13886 comm="syz.6.1881" name="file0" dev="tmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 787.868631][ T30] audit: type=1400 audit(2000000092.371:970): avc: denied { open } for pid=13886 comm="syz.6.1881" path="/121/file0" dev="tmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 788.167448][T13892] overlayfs: missing 'lowerdir' [ 788.276162][ T24] usb 4-1: USB disconnect, device number 12 [ 789.064303][T13915] dummy0: entered allmulticast mode [ 789.111989][T13914] dummy0: left allmulticast mode [ 789.203766][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 789.230903][ T31] INFO: task syz.5.1078:11325 blocked for more than 143 seconds. [ 789.238664][ T31] Tainted: G L syzkaller #0 [ 789.248091][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 789.260072][ T31] task:syz.5.1078 state:D stack:28024 pid:11325 tgid:11324 ppid:6440 task_flags:0x400140 flags:0x00080002 [ 789.274555][ T31] Call Trace: [ 789.279008][ T31] [ 789.281976][ T31] __schedule+0xfee/0x6120 [ 789.296711][ T31] ? __lock_acquire+0x4a5/0x2630 [ 789.307092][ T31] ? __pfx___schedule+0x10/0x10 [ 789.317922][ T31] ? find_held_lock+0x2b/0x80 [ 789.324739][ T31] ? schedule+0x2bf/0x390 [ 789.330748][ T31] schedule+0xdd/0x390 [ 789.335628][ T31] schedule_preempt_disabled+0x13/0x30 [ 789.342367][ T31] __mutex_lock+0xc9a/0x1b90 [ 789.349118][ T31] ? sync_bdevs+0x153/0x480 [ 789.359883][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 789.367680][ T31] ? __mutex_unlock_slowpath+0x15c/0x790 [ 789.376557][ T31] ? iput.part.0+0x1a0/0xf50 [ 789.383483][ T31] ? sync_bdevs+0x153/0x480 [ 789.388813][ T31] sync_bdevs+0x153/0x480 [ 789.395110][ T31] ksys_sync+0xb0/0xf0 [ 789.399541][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 789.407774][ T31] ? __secure_computing+0x201/0x2e0 [ 789.418104][ T31] __do_sys_sync+0xe/0x20 [ 789.420846][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 789.427768][ T31] do_syscall_64+0x106/0xf80 [ 789.429664][ T24] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 789.446830][ T24] usb 4-1: config 0 has no interface number 0 [ 789.447730][ T31] ? clear_bhb_loop+0x40/0x90 [ 789.453222][ T24] usb 4-1: config 0 interface 184 has no altsetting 0 [ 789.455773][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 789.476224][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.487638][ T24] usb 4-1: Product: syz [ 789.487696][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.491894][ T24] usb 4-1: Manufacturer: syz [ 789.491914][ T24] usb 4-1: SerialNumber: syz [ 789.511237][ T24] usb 4-1: config 0 descriptor?? [ 789.542861][ T31] RIP: 0033:0x7fc5dc59c799 [ 789.551845][ T31] RSP: 002b:00007fc5dd491028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 789.578496][ T31] RAX: ffffffffffffffda RBX: 00007fc5dc815fa0 RCX: 00007fc5dc59c799 [ 789.597343][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 789.615832][ T31] RBP: 00007fc5dc815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 789.634375][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.651565][ T31] R13: 00007fc5dc816038 R14: 00007fc5dc815fa0 R15: 00007ffd26d66848 [ 789.668794][ T31] [ 789.684403][ T31] [ 789.684403][ T31] Showing all locks held in the system: [ 789.712660][ T31] 6 locks held by kworker/1:0/24: [ 789.723733][ T31] #0: ffff8880232b9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 789.738252][ T31] #1: ffffc900001e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 789.749963][ T31] #2: ffff88802ad73198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 789.767782][ T31] #3: ffff88802ad8e198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 789.777461][ T31] #4: ffff888059fb2160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 789.788335][ T31] #5: ffff88802aa08568 (hcd->bandwidth_mutex){+.+.}-{4:4}, at: usb_set_interface+0x294/0xe20 [ 789.799767][ T31] 1 lock held by khungtaskd/31: [ 789.808246][ T31] #0: ffffffff8e7e7620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 789.818471][ T31] 2 locks held by getty/5564: [ 789.823831][ T31] #0: ffff8880390520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 789.842246][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 789.858551][ T31] 1 lock held by udevd/9960: [ 789.863441][ T31] #0: ffff888027b0d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 789.873249][ T31] 1 lock held by syz.5.1078/11325: [ 789.878598][ T31] #0: ffff888027b0d358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 789.889935][ T31] 4 locks held by udevd/12226: [ 789.895061][ T31] #0: ffff888027632540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 789.909702][ T31] #1: ffff88805b72fc88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 789.926369][ T31] #2: ffff8880767b2e18 (kn->active#19){.+.+}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 789.937955][ T31] #3: ffff88802ad8e198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 789.947677][ T31] 1 lock held by syz.1.1890/13913: [ 789.952820][ T31] 2 locks held by syz.3.1892/13909: [ 789.958357][ T31] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 789.968640][ T31] #1: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 789.979031][ T31] [ 789.982184][ T31] ============================================= [ 789.982184][ T31] [ 789.991645][ T31] NMI backtrace for cpu 0 [ 789.991665][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 789.991694][ T31] Tainted: [L]=SOFTLOCKUP [ 789.991701][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 789.991713][ T31] Call Trace: [ 789.991720][ T31] [ 789.991728][ T31] dump_stack_lvl+0x100/0x190 [ 789.991767][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 789.991790][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 789.991823][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 789.991855][ T31] sys_info+0x141/0x190 [ 789.991881][ T31] watchdog+0xd25/0x1050 [ 789.991918][ T31] ? __pfx_watchdog+0x10/0x10 [ 789.991945][ T31] ? __kthread_parkme+0x18c/0x230 [ 789.991976][ T31] ? kthread+0x13a/0x450 [ 789.991994][ T31] ? __pfx_watchdog+0x10/0x10 [ 789.992020][ T31] kthread+0x370/0x450 [ 789.992038][ T31] ? __pfx_kthread+0x10/0x10 [ 789.992059][ T31] ret_from_fork+0x754/0xd80 [ 789.992081][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 789.992104][ T31] ? __switch_to+0x7b4/0x1120 [ 789.992129][ T31] ? __pfx_kthread+0x10/0x10 [ 789.992149][ T31] ret_from_fork_asm+0x1a/0x30 [ 789.992189][ T31] [ 789.992197][ T31] Sending NMI from CPU 0 to CPUs 1: [ 790.119992][ C1] NMI backtrace for cpu 1 [ 790.120011][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 790.120036][ C1] Tainted: [L]=SOFTLOCKUP [ 790.120043][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 790.120054][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 790.120079][ C1] Code: e8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 f1 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 790.120097][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 790.120112][ C1] RAX: 00000000044386ed RBX: ffff88801e6a24c0 RCX: ffffffff8b8f9c75 [ 790.120124][ C1] RDX: 0000000000000000 RSI: ffffffff8de7512b RDI: ffffffff8c1afca0 [ 790.120136][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795 [ 790.120147][ C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd4498 [ 790.120158][ C1] R13: 0000000000000001 R14: ffffffff90d98410 R15: 0000000000000000 [ 790.120170][ C1] FS: 0000000000000000(0000) GS:ffff888124445000(0000) knlGS:0000000000000000 [ 790.120187][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 790.120199][ C1] CR2: 0000200000395030 CR3: 00000000375b3000 CR4: 00000000003526f0 [ 790.120211][ C1] Call Trace: [ 790.120216][ C1] [ 790.120222][ C1] default_idle+0x9/0x10 [ 790.120245][ C1] default_idle_call+0x6c/0xb0 [ 790.120268][ C1] do_idle+0x35b/0x4b0 [ 790.120293][ C1] ? __pfx_do_idle+0x10/0x10 [ 790.120317][ C1] ? do_idle+0x6/0x4b0 [ 790.120340][ C1] cpu_startup_entry+0x4f/0x60 [ 790.120362][ C1] start_secondary+0x21d/0x2d0 [ 790.120390][ C1] ? __pfx_start_secondary+0x10/0x10 [ 790.120420][ C1] common_startup_64+0x13e/0x148 [ 790.120455][ C1] [ 790.217006][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 790.319393][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 790.324594][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 790.324619][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 790.324649][ T31] Tainted: [L]=SOFTLOCKUP [ 790.324657][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 790.324669][ T31] Call Trace: [ 790.324676][ T31] [ 790.324685][ T31] dump_stack_lvl+0x100/0x190 [ 790.324723][ T31] vpanic+0x552/0x970 [ 790.324743][ T31] ? __pfx_vpanic+0x10/0x10 [ 790.324769][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 790.324804][ T31] panic+0xd1/0xe0 [ 790.324823][ T31] ? __pfx_panic+0x10/0x10 [ 790.324846][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 790.324876][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 790.324904][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 790.324932][ T31] ? watchdog.cold+0x198/0x1ca [ 790.324954][ T31] ? watchdog+0xd35/0x1050 [ 790.324983][ T31] watchdog.cold+0x1a9/0x1ca [ 790.325015][ T31] ? __pfx_watchdog+0x10/0x10 [ 790.325048][ T31] ? __kthread_parkme+0x18c/0x230 [ 790.325079][ T31] ? kthread+0x13a/0x450 [ 790.325097][ T31] ? __pfx_watchdog+0x10/0x10 [ 790.325122][ T31] kthread+0x370/0x450 [ 790.325140][ T31] ? __pfx_kthread+0x10/0x10 [ 790.325161][ T31] ret_from_fork+0x754/0xd80 [ 790.325184][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 790.325206][ T31] ? __switch_to+0x7b4/0x1120 [ 790.325231][ T31] ? __pfx_kthread+0x10/0x10 [ 790.325255][ T31] ret_from_fork_asm+0x1a/0x30 [ 790.325293][ T31] [ 790.329349][ T31] Kernel Offset: disabled