last executing test programs: 36.40752053s ago: executing program 3 (id=798): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x7f, 0x3, 0x0, 0x80000002, 0x40, "1c00ef000000ff0600000000000000000100", 0x2, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x70bd2a, 0x4, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0xc091}, 0x4000004) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x3, 0x40) syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x60041) read$usbmon(r2, &(0x7f0000007500)=""/4096, 0x1000) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x0, 0xff, 0x1, 0x400002, 0x14, "3eccd8000000000000000010000000040100"}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006119a400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan1\x00') r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000014}, 0x2404c901) dup3(r3, r0, 0x0) 36.338743026s ago: executing program 3 (id=799): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0xffffffffffffffda, r1, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0xa000, 0x0, r2}}}, 0x78) 36.338304465s ago: executing program 3 (id=800): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000240), 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x10, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0xfe}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001}}) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000000, 0x10012, r7, 0x4000) ioctl$VIDIOC_SUBDEV_G_SELECTION(r7, 0xc040563d, &(0x7f00000002c0)={0x1, 0x0, 0x100, 0x4, {0x7f, 0x7, 0x2, 0x365b}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) timer_gettime(0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}) close(r8) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x7c, 0x25, 0x4020000004, 0x7f, 0x44233, 0x200000000000000, 0xffff, 0x9c1, 0x8001, 0x1005, 0xc, 0x4db1, 0x0, 0xfffffdfffffffffd], 0x0, 0xa0340}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 34.833868012s ago: executing program 3 (id=823): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x100001, 0xab}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x55b, &(0x7f0000000200)={0x0, 0x2, 0x672623806503daca, 0x2, 0x8000004, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x10, 0x0, 0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000400007012bbd7000000000007c00000c00c28008000a80543802ad892a080000004b651ed3"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_io_uring_setup(0x82e, &(0x7f0000000280)={0x0, 0x9389, 0x10100, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) syz_io_uring_submit(r5, r6, 0x0, 0x0) syz_io_uring_setup(0x5e4, &(0x7f0000000600)={0x0, 0xb1a9, 0x20008, 0x2, 0x1d9}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f00000005c0)=0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) r12 = dup3(r11, r10, 0x80000) ioctl$DRM_IOCTL_SET_MASTER(r12, 0x641e) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r13 = dup3(r9, r8, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r6, r7, &(0x7f0000000580)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, r13, 0x0, &(0x7f0000000540)='./file0\x00', 0x42, 0x0, 0x1, {0x0, r14}}) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x700000000000000) socket(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 34.728717292s ago: executing program 3 (id=824): r0 = socket$inet_smc(0x2b, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1100000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000007000000eaff000000000004008b97b9fd"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002140)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2800}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500add427323b472545b4560a117fff0b0082001b5980000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffff62fa86b3c67992f7d4f78c24f9", 0x46}, {&(0x7f00000000c0)="abd9", 0x2}, {&(0x7f0000000180)="3346252f5a393a2808d91260734f8244", 0x10}], 0x3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @remote, 0x7}, 0x1c, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000540)}, {0x0}], 0x3}}], 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x11, 0x0, &(0x7f0000005280)) 34.30879349s ago: executing program 3 (id=829): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0980, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = accept$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000040)={'netdevsim0\x00', 0xff}) 34.271018599s ago: executing program 32 (id=829): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0980, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = accept$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000040)={'netdevsim0\x00', 0xff}) 29.398375888s ago: executing program 4 (id=837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000240)={0x0, 0x1f000, 0x8}) (async) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) r3 = socket$alg(0x26, 0x5, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async, rerun: 32) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) (async) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}) (async, rerun: 64) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0xfffffffffffffffd, r3, 0x80000}) (async, rerun: 64) syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) (async, rerun: 32) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (rerun: 32) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x1) (async, rerun: 64) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x6, @pix={0x0, 0x20000, 0x9de86b73b1dd5744, 0x3, 0x4, 0x0, 0x5, 0x3, 0x1, 0x3, 0x0, 0x6}}) (async, rerun: 64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}}) (async) timer_create(0x5, &(0x7f00000014c0)={0x0, 0x2a, 0x0, @thr={&(0x7f0000000440)="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", &(0x7f0000001440)="9470a0c27b73dfb8ccad752fc8bcf2d6fbe1f4e7330907365aab607632a7f7b9f43df0ba9bb974702da1befe5b16510f15b3759060e41fad49766d3ba1e64ea80b9c3734ae6a3a357840e5064eb9afa04f5e4154472cb69d3ac5344fb5"}}, &(0x7f0000001500)=0x0) (async) clock_gettime(0x0, &(0x7f0000001540)={0x0, 0x0}) timer_settime(r9, 0x1, &(0x7f0000001580)={{r10, r11+60000000}}, &(0x7f00000015c0)) (async, rerun: 64) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) (rerun: 64) close_range(r4, r12, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000000c0)=0xa, 0x4) 21.415312513s ago: executing program 4 (id=837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000240)={0x0, 0x1f000, 0x8}) (async) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) r3 = socket$alg(0x26, 0x5, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async, rerun: 32) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) (async) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}) (async, rerun: 64) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0xfffffffffffffffd, r3, 0x80000}) (async, rerun: 64) syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) (async, rerun: 32) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (rerun: 32) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x1) (async, rerun: 64) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x6, @pix={0x0, 0x20000, 0x9de86b73b1dd5744, 0x3, 0x4, 0x0, 0x5, 0x3, 0x1, 0x3, 0x0, 0x6}}) (async, rerun: 64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}}) (async) timer_create(0x5, &(0x7f00000014c0)={0x0, 0x2a, 0x0, @thr={&(0x7f0000000440)="96fc5bb217f9e9d300a6ae8aa6ffecca7fecf91ecde53a384a27ee2b9e8cbf6649628dc2ee7b71a2e14f68937bfe102f253bfc05724b47a600438d2f2e7f5783150834cd5f14219115a2ddcfaf191be003fe6e671e1a986c16be09437b3a33327cac7cfe59b5d32f025206c80125bead7ed167f6fd34280b7c0034b153b8dd8205fb06ce4c2ae4421f56e3cc29e28606e587acdcd7d44a83f144f791ecc8582497a361dcb2c483c043ef14ec1e015b0b74a690ec8959f4f3b2526c2834d1bee12ac074c58aae3022f3a8eac4431701f0a3f26c6433a7889875fb4ac80070f3ab0f731f108fc162014e6902293bf67db4e81e8d2f738c9e236beb5ef5513998298c3ad1965e40d857c1f853b695ca2acda72e251f294dbd4d6d2b9a7512b90620a9756e09122ee59ebc4ba706828848dd1cd200de3427853d0e337de366b6f3b4bdff4b4be78a7c64a7da90ec570b881e56335911992121206ce3c713a3dd946e5a4adf1cafe5016f830a29864239f59352e881828df2a08243f2550328bca0bc872416b743f8583f25cb9a335d81609ff30b14960cd4d822307bf8f7f56290b94fa28dc46b05691ad897f9fea4d2eaac5e2328e5ea090d80a99f398209d5646c2373fab63fe29e59079536e71a9ec30936e9cdba8223eb88e0fe2abe63e483f205f7b6f376bb075feb167c35fa48ebc25f5eaedb6da6dc6d742eb04efcbf74587c46ac65a5f7257fc519f7d7f3d66f8c9a4ffbad70efdee010512d63750c9a705c80aa5b92983396e18b90efa9bd2963ae5f5620aa0d33de6fb1d36b0e1bccd387f3c4857477bd7e0fba5febec24c94cda8b0b6b9807ae72552bc3290ce9521e1bb2e6700a82f521c71b6d6e1290a8145a5369ac01ea1e4c967236c71202a03ff6e0aa6ffdff9582d2ac86d10238ebc6f7832989038a9e5982b3fac8b3b40575a827d873aa2e66edc50d4ba711114294b7bd09abdf037180d8e1db7539d7046758da21819abd3910d2af673aa8c782e33d8a6af8eb67ed1a593c468aa0f721c8043cb81ae467650bdfc4cb54a1e9ea697ab2d48dc7c13ef9a3e3a769fd526d8365c03a60a0f066205c881bce5057cae9fe0d3335bf99ebd7d231422ca8b1b89a4d0f14855ba112d188fb15707a76fc3d63c8e4de021a31a9912b53915f9c6838d6cd70e5e10c0f824772db0f628bd0b5f114223711129a29696eb0b024854d5587ab2169ab715f6f6aa9e158f337b6f94d41d20fbdc8d0624c61907f2719b05189c85d7bdae788da983d79b84f5bdfbc11f6bede97833ca4b55090ec87f5eda8c543cf101480ee453313a051d33bd35ca901387295cb4ed3d08c21ee85a67f9cde97d9b891e073f58b02681dae2e6a574fd95daf743a3f7c0228b390f649840a075442adf043a613e5f36fa30b009715d419d2c4efbc899586d7bcc0b731a3390b0777409330db16909de14b3be7ffcba68da52569ad710fc0950a24a4b5c3ee5df9c472175df2f36d09195dcb6cbaee831bc997a9472af2d0b3ba7955fe69023519bb5b990a7a1dbf0d614dda4b5fc79685a9dd8bbe7a83b1f7c0d7ced7e34dfc9d7ac72f37925f426146a3869411e8a58258925989516fc1970c57648da71379f89c64a7f15eb1eddd503a3c507d5fb1e0e907890ec5f88c6ba987d41c2e66afd57c335655024c5f143b7d105141c734d1af6818c2f34471f73cac3b2559ee0e8f7143f58aec15ee3dfb347e2dbad9f04743dba2af2d0968c1c97a1f4f6d6037fa495aae0abc122988f9b5c9e20f7c8e30de45378e9c29c6e0bc225811763f3cad8c7df256aa4ea3d27fcdd1f9c55af715b2564405b1b4f86b121a223f4f57a6c80f40e2a3bd43bf27d0b3ec27980178c7f1afda05784c2fb393b955ec35bf2b3c36adfe0e5209b69b075b633f67e3b40aa7831dd7031e0066775ea047cfc588d1e549cef2ded60bccc6112e99c0e25b2fd339611a0e6591858def543e2e5ff7b908b3346b5bda6ad70887cd61cb0bdb5ed69e7fd99aefdd406fb0d7a489532c21c5cb1498910d6a677b0b12a4d1207bd20d8e45f17e6cba10c45f025ea7c873563a5bd977325ded534f2fe3f21fa730e09f2f0bc6ec39777fbc224e2f7f43a24dc31ec32b8ac547e17a18d6fe0b7f57f6d8e1ddeaae7262b97580aab68bd5bf5e40f2c626d4d03d66328f5d2c6d2041751f214841297adbc4c004735196a4f1d1ce4437b7fb3cb66089c1498d979e310377837b221fc06b72b8c7fc70319f55ba75e2f381185e3f9e579fbaec0109d8fe00266a88a4d9e0725cbe8c067973eb2b4a3bb4f8ed94bbe1b2b2469f1275522ef64ff73f029e6c16f06bc6f2871ddb1fa2ea97530e7b6eaae2585b0f2db27bc051b1fa5e5d2b8d24515d863763012497ba6fa9f9f659fd3e8e49fc376b20d9d6ff51898e1b42052b3e49e2f6f2cebdf69a3cc5d851c1cd00b34bf314474c4bcbe994e52ae6f4f5faaab4bd8b05999fcc4547206a78d917c7baf873cb8e30238b554c2d88241631f0684f350465bb54d4292f36df360e869d3686d2ec7ebfa66fc659b4b96b45c779136db5b71b7bb0b2b915ac355717b8d6f93f322d2a87eb35ad71f364c163fe7fdba910b6eecf987b5e268d38344949652781a90cecc0cf3300ad7190abdf3ffcc1b0b0312c3eb7657bf37c14d748ab5f402eb8526171889e828e4065ace600cdfcd5f295f6b93d616ed9f2b583c1c63dc9dc925ff400e5cdcf7cf010a03d2f0264374590cf58eeb26e50c04c6714c79580b49ded1a180bcc1ad747ac18f6c0759d2e90cbfcf3f1be20cd436865270ecc3c6de3a3d84dfe9130fb57d43ee2465bef088a22733e06547e1dff400451cbfe8278158996e0f7766bc420ba5a551a8678919dfd1fbb52e95669e4be968f7eacfc7bf40724e18e62636f20b54cf11e4bfd38e479b4f116e1ca9fd0e717599917a9f75fd45e4b5c4fe1c4db986fce9774f9476eb171cdd4af54709d7e2a08457898b1a81c3646c5715c3c103caa9702bee6d23735e1ac1e1025c6d44561e846718c1edc1d526eb4d686c335a58fb30d6b64b37f4ff6534257e2ba453ba26346898f4562893328bcb4e5e9fb1276ef347f04c64dc4fe49ba5ab0c3fe086fe0dc86a11f24479aa756efd8d9d96525488723540cbb176106445507cecf3541d3d87227e3cda3404e21e80e180d4607d23eff3703606bc0b46ca07cc74f6550ac8d28b44b18b7d4efff5806797c5d6c92761d5c08af798abb78b2e614be16145794a8cf75c8091df892513ae0f800009cbabcf6df72e6d5e2d7289e2948717619f2d196f14c2bc500bcff75afcab7dc0d5443cb6683646dfe17a197022f53728696516d6d12fce2945829fb81f9c1945bf9adc7ceb60dd78b1aefa0931c474a30353945b8beb6f4871be469da803f8b28615adf41d6f79902206deb32f98cbd488a06aa96e0a9d6e289f0c8d51f079fa0e322339ffc5158cca31bdb7222305bbf545b00aed23a84ce7dbb072153a9e8aedc9e3752505185510cd2e354eeb1add1a8c7520d5f1d88eaa4c6e448347c1b41a1d4471a79c45c7eb090c201ce9008ce0f08dcc963546ba5813c1c6cd8efa37faff260f9dbe710c3a16ea8c6c6e4723328f6d2faf6c991958892892dc1d60dd4cc31d76040c4fc0fb6b21f7e485e270f68f72ada824b33d3730723f5fd8653bd74e1da2113c06acc543b1d74efce08a80bd6bbe0ef194565748266b7bd89a98c0c0ee30b6a31b8357eaf93e03f8f501207f629bbd5dbef66ed7e5ec1486839687b3271293173a70b69e5833ac2979825400a513f163542f5520232c7cb685a54bd834d19475177ab91dd6065534910e4187cd4dbbb32971e3e0057ecaeccc85e7e3a2e38e3b4e6a2dfa382db67b4912e2068bd1370a2bf3a28939518fa7d64ba3c0c7ad15c5570cb4186812a83d6e062cb3019aaa4aded1933957abe13447f3c4d13ce298d619e26ff32ff1b7447cf800651118441768f67b27a47812cec2cf9577c028d1157d0d5eb8f61596202aae547f415a50381131ef7c5cb2cc54f30650ea0fb8a4542ffa073efcf725b4e33e1e6292cf2d9e8b06a245ab599d15c617ec568de6b597ad5bd175a9725ced1e03d35dc83ab14872a4a87b98f8ce1402c0bcffdd59ba1abbec78e8ba7a632bf812b3a1224be55f773640ade944df19ea5ed690b71d4a484335997e905611a3deef1a62af060162ae6d0d48d5e5926e8a40992e04a8ae993bdb20ddf937333f9fdfd97c3f2eceed83c0187487e021bf3ddf38800aa930a09a5dfa714c68ea4b7c5eec0e7a25b7b3338f9bc0a5ca0312376c384fed015fcfd7990350e089cee6f04d3984dc2a06412301be2075352c45df5ab1e3da362d6c6c79c3995ce3533d9bdd5c1a98a62aa9a42749cd0d795d67e444cb98e0f8e696000c4afbac699bdcd1d3f6deb6a5edfb1e881dc905ca861fecde2d3462208dae9ab51d8cc217b7d43908a749762d535eb0f5d50a18858fcdba6ad6f0c3cc4701196e0fda638d8ea084f9502fad757e6d57e32cfb181a52d867cf60d1433387fc0c4c7a02752841cfa47b0c325eb61eeeaeaa8dcfea1c2eac3cafbff89355b92ce5f647f686e9ee977fbacffbb9c2066d8f9aa306ca0dcdb6d61783009ed245f96e3a5e70b82419ab4181dfeda3fc0c84dfff8e2d9db92f6ff0c82720e00eaacf2decad71c6fb0e941078f4058da8b47931bb8908cfab768b7cd820dc686a5554ab50fbf64e3ba07568b1614db5014059500ef2fcfadc9b39793f9e13c7be7b81b6683fa1dfa5b6cb6e00f7cd239b33c577a335a2978dadd3c096a533c15f8c07dd8e8b3dbacd0ef317fd433e4cb647e69515dcc204e4d67aa3de7067725742d05c0fbedb2faeb5ba6c1eda285b14046842f8ea6c8d3fd271a6e5e35fd851d99e675f2229f23dcf36068621f3a070d202f2ae82256c124e07e780c19a29045dbc3a8020274237093cb0100d883354ae2bc18e61e0ff44fde1682cba9d4573dcb249f8836d713d39b5c989c8b54c7431bd2fbed837b5974df3fa181286faee445fca697e2e73af5d0e5f0b2ad636f161593c2b357367696998e4b9a6f8be3c31f0546299723ff2eb065b5644600b3757d914c3c573d67feade5491416be6f5b1eaa75a804f65e5280798654e18497f61af015228d57be2c7fe27a640e4de835b0b6e7af4162c56749e210a1b815dd790af099baef072e702de5dd9d11d747a12a46058bf39a568226257ffe9191d9cf0f6f795dcbc548d1699ff27a7bb1141ba14648df486c6191cb455adc49a05c64cf816751837e4785dbc1423ba94242e1f7cb8103b543d13e687108eda37c77c530eb21f9a38bcc1f4c3979700d1548a55b799d158d56e8de582eab85c6812b3e134a566e39b77d405a1853a5b1bf8c4604df9a9b15d600756e27f064a614d09cce2fa4839584aa25b99be1f03be3be01e574f7421bc6d45f0d943a4b560bab499b19af76953700da9b12dee56d3424120b60363347da7e01b2c60347ee557f37a81da25781df8854528cfcf963e26f44e8f9baec3ffd07a76d8772bbbde8d830c9cc6e773c3c1a2e1e17651e683ebb32c3bfff591fd3c136c6b9fbf17962eb4c362b36355aa064091aba1f603a0c7892eb76f3747bc621b4884aaf6f4db56450721c79a208c0473fced5b0ae185f981ce2a7691b2d2f4f36b65b95752074a6c14b48294d23049039e9a6580f65c8f0a5caf1e60fab9e7628c60d261bf5be568e2a8b0743de61540ff9c78ce1834b9fc524883c78", &(0x7f0000001440)="9470a0c27b73dfb8ccad752fc8bcf2d6fbe1f4e7330907365aab607632a7f7b9f43df0ba9bb974702da1befe5b16510f15b3759060e41fad49766d3ba1e64ea80b9c3734ae6a3a357840e5064eb9afa04f5e4154472cb69d3ac5344fb5"}}, &(0x7f0000001500)=0x0) (async) clock_gettime(0x0, &(0x7f0000001540)={0x0, 0x0}) timer_settime(r9, 0x1, &(0x7f0000001580)={{r10, r11+60000000}}, &(0x7f00000015c0)) (async, rerun: 64) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) (rerun: 64) close_range(r4, r12, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000000c0)=0xa, 0x4) 14.867687273s ago: executing program 4 (id=837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000240)={0x0, 0x1f000, 0x8}) (async) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) r3 = socket$alg(0x26, 0x5, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async, rerun: 32) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) (async) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}) (async, rerun: 64) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0xfffffffffffffffd, r3, 0x80000}) (async, rerun: 64) syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) (async, rerun: 32) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (rerun: 32) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x1) (async, rerun: 64) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x6, @pix={0x0, 0x20000, 0x9de86b73b1dd5744, 0x3, 0x4, 0x0, 0x5, 0x3, 0x1, 0x3, 0x0, 0x6}}) (async, rerun: 64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}}) (async) timer_create(0x5, &(0x7f00000014c0)={0x0, 0x2a, 0x0, @thr={&(0x7f0000000440)="96fc5bb217f9e9d300a6ae8aa6ffecca7fecf91ecde53a384a27ee2b9e8cbf6649628dc2ee7b71a2e14f68937bfe102f253bfc05724b47a600438d2f2e7f5783150834cd5f14219115a2ddcfaf191be003fe6e671e1a986c16be09437b3a33327cac7cfe59b5d32f025206c80125bead7ed167f6fd34280b7c0034b153b8dd8205fb06ce4c2ae4421f56e3cc29e28606e587acdcd7d44a83f144f791ecc8582497a361dcb2c483c043ef14ec1e015b0b74a690ec8959f4f3b2526c2834d1bee12ac074c58aae3022f3a8eac4431701f0a3f26c6433a7889875fb4ac80070f3ab0f731f108fc162014e6902293bf67db4e81e8d2f738c9e236beb5ef5513998298c3ad1965e40d857c1f853b695ca2acda72e251f294dbd4d6d2b9a7512b90620a9756e09122ee59ebc4ba706828848dd1cd200de3427853d0e337de366b6f3b4bdff4b4be78a7c64a7da90ec570b881e56335911992121206ce3c713a3dd946e5a4adf1cafe5016f830a29864239f59352e881828df2a08243f2550328bca0bc872416b743f8583f25cb9a335d81609ff30b14960cd4d822307bf8f7f56290b94fa28dc46b05691ad897f9fea4d2eaac5e2328e5ea090d80a99f398209d5646c2373fab63fe29e59079536e71a9ec30936e9cdba8223eb88e0fe2abe63e483f205f7b6f376bb075feb167c35fa48ebc25f5eaedb6da6dc6d742eb04efcbf74587c46ac65a5f7257fc519f7d7f3d66f8c9a4ffbad70efdee010512d63750c9a705c80aa5b92983396e18b90efa9bd2963ae5f5620aa0d33de6fb1d36b0e1bccd387f3c4857477bd7e0fba5febec24c94cda8b0b6b9807ae72552bc3290ce9521e1bb2e6700a82f521c71b6d6e1290a8145a5369ac01ea1e4c967236c71202a03ff6e0aa6ffdff9582d2ac86d10238ebc6f7832989038a9e5982b3fac8b3b40575a827d873aa2e66edc50d4ba711114294b7bd09abdf037180d8e1db7539d7046758da21819abd3910d2af673aa8c782e33d8a6af8eb67ed1a593c468aa0f721c8043cb81ae467650bdfc4cb54a1e9ea697ab2d48dc7c13ef9a3e3a769fd526d8365c03a60a0f066205c881bce5057cae9fe0d3335bf99ebd7d231422ca8b1b89a4d0f14855ba112d188fb15707a76fc3d63c8e4de021a31a9912b53915f9c6838d6cd70e5e10c0f824772db0f628bd0b5f114223711129a29696eb0b024854d5587ab2169ab715f6f6aa9e158f337b6f94d41d20fbdc8d0624c61907f2719b05189c85d7bdae788da983d79b84f5bdfbc11f6bede97833ca4b55090ec87f5eda8c543cf101480ee453313a051d33bd35ca901387295cb4ed3d08c21ee85a67f9cde97d9b891e073f58b02681dae2e6a574fd95daf743a3f7c0228b390f649840a075442adf043a613e5f36fa30b009715d419d2c4efbc899586d7bcc0b731a3390b0777409330db16909de14b3be7ffcba68da52569ad710fc0950a24a4b5c3ee5df9c472175df2f36d09195dcb6cbaee831bc997a9472af2d0b3ba7955fe69023519bb5b990a7a1dbf0d614dda4b5fc79685a9dd8bbe7a83b1f7c0d7ced7e34dfc9d7ac72f37925f426146a3869411e8a58258925989516fc1970c57648da71379f89c64a7f15eb1eddd503a3c507d5fb1e0e907890ec5f88c6ba987d41c2e66afd57c335655024c5f143b7d105141c734d1af6818c2f34471f73cac3b2559ee0e8f7143f58aec15ee3dfb347e2dbad9f04743dba2af2d0968c1c97a1f4f6d6037fa495aae0abc122988f9b5c9e20f7c8e30de45378e9c29c6e0bc225811763f3cad8c7df256aa4ea3d27fcdd1f9c55af715b2564405b1b4f86b121a223f4f57a6c80f40e2a3bd43bf27d0b3ec27980178c7f1afda05784c2fb393b955ec35bf2b3c36adfe0e5209b69b075b633f67e3b40aa7831dd7031e0066775ea047cfc588d1e549cef2ded60bccc6112e99c0e25b2fd339611a0e6591858def543e2e5ff7b908b3346b5bda6ad70887cd61cb0bdb5ed69e7fd99aefdd406fb0d7a489532c21c5cb1498910d6a677b0b12a4d1207bd20d8e45f17e6cba10c45f025ea7c873563a5bd977325ded534f2fe3f21fa730e09f2f0bc6ec39777fbc224e2f7f43a24dc31ec32b8ac547e17a18d6fe0b7f57f6d8e1ddeaae7262b97580aab68bd5bf5e40f2c626d4d03d66328f5d2c6d2041751f214841297adbc4c004735196a4f1d1ce4437b7fb3cb66089c1498d979e310377837b221fc06b72b8c7fc70319f55ba75e2f381185e3f9e579fbaec0109d8fe00266a88a4d9e0725cbe8c067973eb2b4a3bb4f8ed94bbe1b2b2469f1275522ef64ff73f029e6c16f06bc6f2871ddb1fa2ea97530e7b6eaae2585b0f2db27bc051b1fa5e5d2b8d24515d863763012497ba6fa9f9f659fd3e8e49fc376b20d9d6ff51898e1b42052b3e49e2f6f2cebdf69a3cc5d851c1cd00b34bf314474c4bcbe994e52ae6f4f5faaab4bd8b05999fcc4547206a78d917c7baf873cb8e30238b554c2d88241631f0684f350465bb54d4292f36df360e869d3686d2ec7ebfa66fc659b4b96b45c779136db5b71b7bb0b2b915ac355717b8d6f93f322d2a87eb35ad71f364c163fe7fdba910b6eecf987b5e268d38344949652781a90cecc0cf3300ad7190abdf3ffcc1b0b0312c3eb7657bf37c14d748ab5f402eb8526171889e828e4065ace600cdfcd5f295f6b93d616ed9f2b583c1c63dc9dc925ff400e5cdcf7cf010a03d2f0264374590cf58eeb26e50c04c6714c79580b49ded1a180bcc1ad747ac18f6c0759d2e90cbfcf3f1be20cd436865270ecc3c6de3a3d84dfe9130fb57d43ee2465bef088a22733e06547e1dff400451cbfe8278158996e0f7766bc420ba5a551a8678919dfd1fbb52e95669e4be968f7eacfc7bf40724e18e62636f20b54cf11e4bfd38e479b4f116e1ca9fd0e717599917a9f75fd45e4b5c4fe1c4db986fce9774f9476eb171cdd4af54709d7e2a08457898b1a81c3646c5715c3c103caa9702bee6d23735e1ac1e1025c6d44561e846718c1edc1d526eb4d686c335a58fb30d6b64b37f4ff6534257e2ba453ba26346898f4562893328bcb4e5e9fb1276ef347f04c64dc4fe49ba5ab0c3fe086fe0dc86a11f24479aa756efd8d9d96525488723540cbb176106445507cecf3541d3d87227e3cda3404e21e80e180d4607d23eff3703606bc0b46ca07cc74f6550ac8d28b44b18b7d4efff5806797c5d6c92761d5c08af798abb78b2e614be16145794a8cf75c8091df892513ae0f800009cbabcf6df72e6d5e2d7289e2948717619f2d196f14c2bc500bcff75afcab7dc0d5443cb6683646dfe17a197022f53728696516d6d12fce2945829fb81f9c1945bf9adc7ceb60dd78b1aefa0931c474a30353945b8beb6f4871be469da803f8b28615adf41d6f79902206deb32f98cbd488a06aa96e0a9d6e289f0c8d51f079fa0e322339ffc5158cca31bdb7222305bbf545b00aed23a84ce7dbb072153a9e8aedc9e3752505185510cd2e354eeb1add1a8c7520d5f1d88eaa4c6e448347c1b41a1d4471a79c45c7eb090c201ce9008ce0f08dcc963546ba5813c1c6cd8efa37faff260f9dbe710c3a16ea8c6c6e4723328f6d2faf6c991958892892dc1d60dd4cc31d76040c4fc0fb6b21f7e485e270f68f72ada824b33d3730723f5fd8653bd74e1da2113c06acc543b1d74efce08a80bd6bbe0ef194565748266b7bd89a98c0c0ee30b6a31b8357eaf93e03f8f501207f629bbd5dbef66ed7e5ec1486839687b3271293173a70b69e5833ac2979825400a513f163542f5520232c7cb685a54bd834d19475177ab91dd6065534910e4187cd4dbbb32971e3e0057ecaeccc85e7e3a2e38e3b4e6a2dfa382db67b4912e2068bd1370a2bf3a28939518fa7d64ba3c0c7ad15c5570cb4186812a83d6e062cb3019aaa4aded1933957abe13447f3c4d13ce298d619e26ff32ff1b7447cf800651118441768f67b27a47812cec2cf9577c028d1157d0d5eb8f61596202aae547f415a50381131ef7c5cb2cc54f30650ea0fb8a4542ffa073efcf725b4e33e1e6292cf2d9e8b06a245ab599d15c617ec568de6b597ad5bd175a9725ced1e03d35dc83ab14872a4a87b98f8ce1402c0bcffdd59ba1abbec78e8ba7a632bf812b3a1224be55f773640ade944df19ea5ed690b71d4a484335997e905611a3deef1a62af060162ae6d0d48d5e5926e8a40992e04a8ae993bdb20ddf937333f9fdfd97c3f2eceed83c0187487e021bf3ddf38800aa930a09a5dfa714c68ea4b7c5eec0e7a25b7b3338f9bc0a5ca0312376c384fed015fcfd7990350e089cee6f04d3984dc2a06412301be2075352c45df5ab1e3da362d6c6c79c3995ce3533d9bdd5c1a98a62aa9a42749cd0d795d67e444cb98e0f8e696000c4afbac699bdcd1d3f6deb6a5edfb1e881dc905ca861fecde2d3462208dae9ab51d8cc217b7d43908a749762d535eb0f5d50a18858fcdba6ad6f0c3cc4701196e0fda638d8ea084f9502fad757e6d57e32cfb181a52d867cf60d1433387fc0c4c7a02752841cfa47b0c325eb61eeeaeaa8dcfea1c2eac3cafbff89355b92ce5f647f686e9ee977fbacffbb9c2066d8f9aa306ca0dcdb6d61783009ed245f96e3a5e70b82419ab4181dfeda3fc0c84dfff8e2d9db92f6ff0c82720e00eaacf2decad71c6fb0e941078f4058da8b47931bb8908cfab768b7cd820dc686a5554ab50fbf64e3ba07568b1614db5014059500ef2fcfadc9b39793f9e13c7be7b81b6683fa1dfa5b6cb6e00f7cd239b33c577a335a2978dadd3c096a533c15f8c07dd8e8b3dbacd0ef317fd433e4cb647e69515dcc204e4d67aa3de7067725742d05c0fbedb2faeb5ba6c1eda285b14046842f8ea6c8d3fd271a6e5e35fd851d99e675f2229f23dcf36068621f3a070d202f2ae82256c124e07e780c19a29045dbc3a8020274237093cb0100d883354ae2bc18e61e0ff44fde1682cba9d4573dcb249f8836d713d39b5c989c8b54c7431bd2fbed837b5974df3fa181286faee445fca697e2e73af5d0e5f0b2ad636f161593c2b357367696998e4b9a6f8be3c31f0546299723ff2eb065b5644600b3757d914c3c573d67feade5491416be6f5b1eaa75a804f65e5280798654e18497f61af015228d57be2c7fe27a640e4de835b0b6e7af4162c56749e210a1b815dd790af099baef072e702de5dd9d11d747a12a46058bf39a568226257ffe9191d9cf0f6f795dcbc548d1699ff27a7bb1141ba14648df486c6191cb455adc49a05c64cf816751837e4785dbc1423ba94242e1f7cb8103b543d13e687108eda37c77c530eb21f9a38bcc1f4c3979700d1548a55b799d158d56e8de582eab85c6812b3e134a566e39b77d405a1853a5b1bf8c4604df9a9b15d600756e27f064a614d09cce2fa4839584aa25b99be1f03be3be01e574f7421bc6d45f0d943a4b560bab499b19af76953700da9b12dee56d3424120b60363347da7e01b2c60347ee557f37a81da25781df8854528cfcf963e26f44e8f9baec3ffd07a76d8772bbbde8d830c9cc6e773c3c1a2e1e17651e683ebb32c3bfff591fd3c136c6b9fbf17962eb4c362b36355aa064091aba1f603a0c7892eb76f3747bc621b4884aaf6f4db56450721c79a208c0473fced5b0ae185f981ce2a7691b2d2f4f36b65b95752074a6c14b48294d23049039e9a6580f65c8f0a5caf1e60fab9e7628c60d261bf5be568e2a8b0743de61540ff9c78ce1834b9fc524883c78", &(0x7f0000001440)="9470a0c27b73dfb8ccad752fc8bcf2d6fbe1f4e7330907365aab607632a7f7b9f43df0ba9bb974702da1befe5b16510f15b3759060e41fad49766d3ba1e64ea80b9c3734ae6a3a357840e5064eb9afa04f5e4154472cb69d3ac5344fb5"}}, &(0x7f0000001500)=0x0) (async) clock_gettime(0x0, &(0x7f0000001540)={0x0, 0x0}) timer_settime(r9, 0x1, &(0x7f0000001580)={{r10, r11+60000000}}, &(0x7f00000015c0)) (async, rerun: 64) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) (rerun: 64) close_range(r4, r12, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000000c0)=0xa, 0x4) 9.136504539s ago: executing program 4 (id=837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000240)={0x0, 0x1f000, 0x8}) (async) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) r3 = socket$alg(0x26, 0x5, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async, rerun: 32) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) (async) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}) (async, rerun: 64) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0xfffffffffffffffd, r3, 0x80000}) (async, rerun: 64) syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) (async, rerun: 32) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (rerun: 32) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x1) (async, rerun: 64) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x6, @pix={0x0, 0x20000, 0x9de86b73b1dd5744, 0x3, 0x4, 0x0, 0x5, 0x3, 0x1, 0x3, 0x0, 0x6}}) (async, rerun: 64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}}) (async) timer_create(0x5, &(0x7f00000014c0)={0x0, 0x2a, 0x0, @thr={&(0x7f0000000440)="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", &(0x7f0000001440)="9470a0c27b73dfb8ccad752fc8bcf2d6fbe1f4e7330907365aab607632a7f7b9f43df0ba9bb974702da1befe5b16510f15b3759060e41fad49766d3ba1e64ea80b9c3734ae6a3a357840e5064eb9afa04f5e4154472cb69d3ac5344fb5"}}, &(0x7f0000001500)=0x0) (async) clock_gettime(0x0, &(0x7f0000001540)={0x0, 0x0}) timer_settime(r9, 0x1, &(0x7f0000001580)={{r10, r11+60000000}}, &(0x7f00000015c0)) (async, rerun: 64) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) (rerun: 64) close_range(r4, r12, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000000c0)=0xa, 0x4) 5.55748542s ago: executing program 2 (id=1267): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a030200000000000000000200fffd0900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100010000000000000007"], 0x68}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x10004104}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = userfaultfd(0x80001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r4, 0x0, 0x0, 0x1001f0) lseek(r4, 0x0, 0x4) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="000000005f4d4b1f6365cff01156afee3fb54805a225055150892a9ba4d05da80021be07fe19043df0509ebc8f665ced8528b121882943ac25b5ac31bbc23dc3e835cb30d7b69e1e786366159f3c7a6d6325d7cd6885f05b1789c5a5b631dc5ed2db6baf8ffcd6", @ANYRES16=r5, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 4.386789895s ago: executing program 2 (id=1290): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0x19a, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 4.307791513s ago: executing program 2 (id=1292): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000180)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x10940, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ff070000780000001400040073797a6a616c6c657230000000000000080005000700"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 3.442962696s ago: executing program 0 (id=1298): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x388, 0x7ffe) prlimit64(r0, 0x0, &(0x7f00000000c0)={0x101, 0x80000000}, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xfffffdaf) setresuid(0x0, r2, 0x0) socket$caif_stream(0x25, 0x1, 0x4) 3.368600831s ago: executing program 0 (id=1299): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149004006040800", 0x58}], 0x1) 3.368077844s ago: executing program 0 (id=1300): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0x19a, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 3.298215246s ago: executing program 0 (id=1301): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="180100002e00010000000000fbdbdf250601fa8008001800", @ANYRES32=r0, @ANYBLOB="14000a"], 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x4804) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x25, &(0x7f0000000000)={0x1}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x7, &(0x7f00000003c0)={0x0, 0x0, 0xb}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) sendmmsg$sock(r1, &(0x7f0000005580)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @loopback}, 0x4, 0x3, 0x0, 0x4}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000080)="b3d47f57aa0f6d010b8710125f1b0c4eb2faa88d6c01a920f8ef8bca2af8cc5c08f49d37c6307228e7fefbafae5422cd090cac992577126e289f1cdc9c1d4263ab31ce7cb4b2bcaaff3ddaa8bf", 0x4d}, {&(0x7f0000000100)="77c86ec3052b213c13e366a99a31b6e71de7959ca682c091", 0x18}, {&(0x7f0000000140)="64fb326f9edc3c9995b02224c789ca", 0xf}, {&(0x7f0000000340)="55b8f86c17a66e625ca408ad74fc88a6ea86663581d8a9d464ebb76e5795957aa680314275d7caf6cb52af6beed1117ebb5edbc29b33ffbaed3775c5ef7994b1b2ea854aa7fd8ee5b6b8de402c790f3a36ec6e9a463793712bbaf2ffac788304153b7dc71ec5dc213d9ca0c8972f279684ddc3c0bb8d42b1912dc6a751322a1e9e211d8fd8d4c25f317e8abc3af5896d3b7ece91dccd267744bbbf9c3839475a324f6db15a71f137410509fb7b7f06a4d2207c0c90aedbefcc8ee9", 0xbb}, {&(0x7f0000000400)="90bb9f972b3dfd142b94850b", 0xc}, {&(0x7f0000000440)="e9af48538ef69705a97710fe30179ea3e294197f4d4162d300b8cf80aca1c214b7233e04144dd1d4ee60c0abd17d83e283394ae0b94ed3ce56d648770011feac4bea9848b87a2058e13f3d0c64d08a88e64d6da3f2f51cef2ae3c11fe03be4f19102ad9cc112659b9b493fbe72a9e6635eaef22acf74fb7da8eaffe648988f235bbffc34d0d0bfdd825301f13b4b238913ec70e7939f74487076e7d5d1172f8a82b0e2e4db6bd93db8716800eae4", 0xae}, {&(0x7f0000000500)="fe22227f421fbe3dfbcbecc432dfd1cd67bf38064ada6f1e933424fd500e56f044721a7212809f772b43ff7a0ba2f6c121a970206dc0504ab91e01a6a878581ca7c6209932c534778199ad7861ecbac130ab6ac1b3f4feff518fe110b81d2b6ec84c80a141cb165c54877eff3c9faeb541b026cdff3b0a606cba79a0a5904edfe11c0b611d426f0cb59033d3b87b7f91328d6daec25b7f687b4d5be629b11a88e807dbac64abeed596f1fab6630d6430a50a8abc6abd8ab3300ee35cf31e4a9b2c346383dffafb3741cb0050d5e8f6c85ae162c9abb09412590c24", 0xdb}], 0x7, &(0x7f0000000680)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x30}}, {{&(0x7f00000006c0)=@nfc={0x27, r6}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000000740)="77027efc70a7f2020224e23c9b46565048d4277698c85edb244db4536bb292e34e2cdde7f77047c9efe15097ef4162d440894a62b9300b15685ae2f62ae051a285938a8ab4a211f078f4d9d899f941b4e7f05416ca493a21b9cc2d", 0x5b}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="cad45351e47f97c866a2882534271130162b144f1935360e23be37f0af333b08beb063d062d84b75c7594f46fe9e3eabc10ed53a295b3ac166ec76c95d01ee95620ad38a6705d20591dfcd124cbf6c92aef3aa8e43380923997443684631631f0576a5d32ddd8165ea01cf5466722e57660480bc73ee607a165eb2733797668070150b5fe9324d4bd6f858b24d2828e4a513da2117f938d8b6afc30de2bc8f080ebed9282a7bb21aee61a330137d59e158b29287d7ce3056335bac792e17c7d24010822c72dd4043355466acb8dd8e0a5432085d", 0xd4}, {&(0x7f0000001a80)="71d56ed59f7fbefda0a31741b5d8af8eafdab2e79cd37b945397b33a5cb098f009433b3db9a4a6faaf777111bf190488248f127f70845a9399696a9ad2ac4e2fb85ec64187db62f2cac58947e953d858664dc56fa08c26b4aacfd69a0967f647174d0271aef40fc973167c32f491bdc24f2242d57f49245d915430b4748e346802bcaf68a8caf60f9fac05334cc0af7f38ffe32d4d3304773eb8e3", 0x9b}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="9b3f5f924895b1c1a482acfe35bf6e0173995840760cdc489ed1ff724e2ab8110a57223c035fef21d5235bf2cd69679e51bd3c257280b88429b2e7c031c5f2762bb3ad73c24a7a1cddd130e205533fb895f044a53ea758b7fd25143e1b94bf266a568f81618fc448ffe0f50a4c2e5b51f7673db997ab5803f120b6590ede67c034e73736bb63521ec1243f61243e6b258987c2b7e0f5d4016e2e789742214920480130de5ff2f4d7de010c267fec8366c7aac5", 0xb3}], 0x6, &(0x7f0000002c80)=[@txtime={{0x18, 0x1, 0x3d, 0x29}}, @txtime={{0x18, 0x1, 0x3d, 0x3298}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0xa8}}, {{&(0x7f0000002d40)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x4, 0x0, 0x1, {0xa, 0x4e21, 0x870, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000002dc0)="bc7c25dba1b4ab04b4fbfb5fbb37eaebdc036f5e359f12574c3c3677487048aec4f5477e3de1e79be662297c0e24a77fababccee16bc73046f335cf9713ea59a9386d41e2026a47576002758ad4430102014fef536c9e1b90f42155af91c15813059e0c09d13b2", 0x67}, {&(0x7f0000002e40)="793a29c3a3b9434ff11f87106cbbb5ab9b507e2c5279a0a7e1c04ad0a2a2512bdafd073bd1d7c102a8c5f6aebbf7c3e99073d1f91e8b12fc7a4833c242b2ffc9390c122ad18972a4a3a33a104e6390c92a7591176bf494631e0e1b57bbfea8f81fed5a052e7f4447b1c899317d1f39e8ed770d9464984f2dfb48", 0x7a}, {&(0x7f0000002ec0)="237baaaececa724aaac7588dfeccfbfadd2c307eadb16b139f1e1d0e780bc0", 0x1f}, {&(0x7f0000002f00)="3aad5cebb47a7e889c039c45d0e8c1bc3a33a7976d29c8820496dbeae0dbadb43bc63eb9fd950b363bd54175f07d26fb79aabf2ed0c8292ba9e08b5c182f0c5db0aa68d6badc779905d5fed63130fc97b2048747cf1a546b13e2675dd41b9ff635b495137e46c769f18aa6b2143e6567da3cc4b546a075e92555445f40a55dff5ae942a93529788edfc3757f703af931d28c6ac14f3ab2cccb4ed72047a523357d803bcbd4ea3e426c0b59b0f4f629e936859d5f31ecf6c9d3c9e10e609ad52648a91f499385996c2ca53f573ba0bd2e875712e132e42f8b6ac79e4b00f827e57d3e11f186e7c182e355fa15fa7217179dc4b11b97c9db09f2eb6c49bf7e6270d2b3c94406a8ef31bf87e90f5088ce6dd2db43403f40ac0b5e3df269a376783546c8803a7e332e35fa2eaf4f4629c071b62cc24d70b251c33b1a9467915bf097cf45bcff343bb7b86e544a4e010c9a67014865d9db2199f4bfe176b38136e5f79312c0be32baf657db7117076f2c68dc2cadfd065c2d0abcb170c7889ab025c890574be85cc54b20b5146b01d24515915b545a814ed0bcfe62fde39c24e6b1fa592a3aaff25f5bc6cac184a10201b5664ad77a57e0561b97222ca96d63ae5da46371af6003ea2f46baf351f27b1b4f80c198284b9b0c25414eecef10faddf1e809845f4db309a5323430be4d07f8bc1175f0100a0f11f9befd2c88bc58ac72e150a9d7dced203b7fac96267c97220e2b9a4744e0affb3d5250cea240ca4e31c78dc035486fbe84f3bd26d724e7c3af6123bdd5149e17825c3042e4966f6aa56b1f84f634981b79aa513ae690626f8821157df72812d459d4c6e7600a39df50d4155d341a545aaa36f75b26479c43f2202a3aaa2ee8fa3cfaeeb65bf8e21ce0a3a36b67fa9b67634592f2e6b806c0ab9e7350861bb186f0f50041708330dea3c53cc32a145dc66ac2d361d315cd207d64fee17209c946cb6ea9321e59bca2f7eb1be0ebf99da8bf0c22c9dfbeabc91538e12826f50078d3559bff529197d81ba96a04415e75149a0504c36c604bf40fc4757346ae8865d671800b5006f22b2d3992b0bbe4f54d5365c956dc7db38296a866ed0809c8e3ea0e488ea487166d4856d5ba91d765496769f78f26dee1877db81fa0a1682d9e4aefbb5b71d71d0ea92da035af5bfb609965b12b58de0987814230d1a08dfd73256c95bd83a50ec4df5ad4dfc1fed00206195caff7b193084d23af599e745a00660873eac5cabe147839e8aa752961173037289e06a221a38d96d065b9d7aced2b9e5f275a7713f6587be42f4fba57693e5f4a4b907290cb46a40ea19c0636f7ba29a34a14554bb2171177bea0a4c4bf9ea7e0c0398e85257e249818e64726a864717dea51796ed191a6902c1183ba4c988969060024d7ad6a76fdc485902e3112fd02e8609146fdee69efaf23380ee32ba13305ac5307a89178110d089c3a10e5769173c33f2b1126fa1a154e0bf3f729a5029a8020a366ee0aeffd062de48b8ab556e6a021bcd270863d7eee5472d2d17e1f79a879cfd9201f1db03fbf6df51e97913ae8b08b7c68d2ec07ad8dae38f3d102bc391bc81df07aa218bf71f90e5456e7fef0c1ffc5cfdbe3e5a10d32dff4242e4a0ead8d6e769cf7bdbf1440e373617a0c35760cc70ead1bc69951f326977cd946b7bce79c186ef8db57628eb03d0547aa56c951e0a05c0243bbf161e02db285c992b0983ed3424b22ed889f01ba8c5e3bb91caa66c9218fff1382af8aeef76463a2573a197004f61648c20aab4299cbda8a31027a73a63a28d9e35699f3e65ed5fd2eb1c461ed4a61b9ec7fda52d5d3525e69f5fe93ac59fd06a644fa1d073f71316f08414a0722410b4f83c74cc4a5542b18f9be0f580e315c7b417f908f79c347eb15cb96e5fa832d76ba4843518a707f9ba4fd13b2d0d994350dc05be8ee6eb89c322225cec0f410757099473c60a74350891173c53433f025ba61774be60eddd1497d7eee7c854dcfac7ccfaf80a0222cbb369b16d1a619bb74da49258cd2ea3ffd8d0a3e7fbb5496c518922d395decc680c6f6ec4dbada286495ca99b53e5be9d19f034fb5a1b716f1c8e8a09d4b9351c51177bbedc14b4e9fcf38e22b64dedabf38fd998648d7c06fda294e1ebedbb64e9294543346d19f2b480b8ce45b4c1afc491f8247d72f10da11c39631722a49e1c9d5d9acea057dac1d8132950ce0e48e73232cc43f452d4fa96c9af191ea9f4199e7da3334c4c59c1c51b6cba57903c563350d1d94c18bac547c9277da548ee8043485951dbc3b5ae6e9775636c38644367525bfd876cf46f237ec5bb2ade3ad581d3fe40e00046d9a3f49d6e0c7e6b6771b62c33a61d4b04516ce32862f99a4b903bb6d6adabfa17dfbee292819f105dc55b9c6116686b19371db5f748376bb665ff6462c4803cfb8e995e97278b5e3704098050d2bd336b8ebb198a5ff5baea17be73557afeaf5e5ec17ebacf820bf3bad6e79acd58c321230b3ef60dbeaa2cee618601f9acae607560294d67ac25266018c308ba86050694e52373a249efb9ca521c502c890f007c34960c322c387b40b21fb9972a57e66aadf6e4e288a4a5795b32bd8c2f4b73da0d0fe94e924b9b19ddef17cf6ce71deb51c9055d67c7d39096f35f6771824a03ada68740806524af27fe74e0a3b15adbbbcc9b4a0b985d8e2ce23c57fbbca63fa765d8c21b624f7604080ef5d84ccba5fe49e02f9c0a4c6cf2a931fb5a35341d49091797245643a9ffe3f9ae19408e5cf855fa8c4beee198e25925b4673470c7b5f491710b598e0351fea56a1b99d17f44a3c2cc302c6573674ccf532e634ae03d1c0757749d82d90f76c83265b67c5956cb70dd8b4575b517f1592684a667c37bd86da9fd978ac0c65d3b4b65fe279348f5f819dfb8848534e470ab30cf51a0203909324f63dffec5ac37d19b959d9a86195f314e8d4ff70f9e347e81274b749d5444c29e8c247f11bfc039832cee18bbf8fd94a37b64d06d124c21b22177d6a9a77dc70d3c59cbb51476506512ae7376c4d93bde9cf28239e69edcbb65996df51c9a9982f2ca904a70e68f3ce6437feec08482c62500cd2947445b5f9a11d702b891705bf23dad3ecbe55aa62f7d0d44b6ae6085b4a99c0341bfbd53c7af15c25bc222f09f4643f4dfe082b8d667ef9d712f7fbbe0eb51f192eeb5b0f53dc60cb2a03137a79e2bafaaf2dcae22c4b7c3658ef0f1b03dce8fd614643c8d962b3be95d1ffde90ad1418907c1919ded857973209505a3fd8a252911cb88618cc0e1e02d836816cc9e1585b72dde9c5e0cb9ba890eed397b8e622b272680f9f45f0940d8d14d423826de9a5b9d31a24a56a38361f36cbb6a85f513b96ce7e3925e32095099c9c9eb8da365ccc226b8b65cfa2d49c7a6b706abe81540ff6f759ee31972f7056459ddb4a1e38dc92491d04764da0f233e387c25c307fd15cab0b0507fd80f16ce514eeeac4106a1427d7563a0080609383f82d4909e3356ecf0232aa3cc073ec5ba53c18a7822637ebe935ae25da5ddbb5e1d73362137dc3f6f061f5576333ae20b66ff5a0098b7027c9b3c0fecd23c3b740480d4e1a64d01e2400dc0eafca357456a2da279843db4bada8e812675a8feef71fd3a674d7f060255a38a1af43bfe93b74f78da933d5559d0d174a4bc6dafdd8a33ead4e8e591298c8b28c111fdac70028b052a5d8cdcfd435b1a8a1e5426c2f7502837c0e0439975c62f012d5f8ae78c20d3306f1f5b1f76eb443a1330525e5f10721400fd918868e696035f993b86a5dc581fe6dc94fd0014fc68b44582b440dd42d6620ee060166d9ba99cadaf52a78dd583317032b8c96c596d7ca2923321abf0e862c8d2ca442f1b1ddf134581fb47f906eea8798b7399ef8cf7e5cbc83c9db82944ddc9082c88778ce738c085fe57e42ca074b282def4efd9f9096fe2c890369e5be8511443ade4a16d3e3e7911435cba3c5c6c8eef84c47f4b7257f0e16d6f6236e7f553d0acea53597638452366dd1af9f6457de1e314a99ab01cd9e5a8d267805422931fed8414d5e4054e0929deddb1871855e14ff0a7b203adda4e8251199e8a0a73288f44779a0c3d31a438e93009527e212eef494f9633037871a159f50bf780e7d068cb71cd8b471eec64a62941ef99ef8512a11f124cc2b71507f77f3677c6994c1955c54a0197caeb2f77ae7393b13ac6b9f10d9d096919e8aca18ef01963d5170b75ba07367c8db0d501cdba998199174e4c64e575ca4c3de35d3a064e1e086e8d1cd6826c3fa97cee8145f2797fa95f816276a025614cbbb15fe1327b2572e34ecceef0c75aaed164d14d4f9e55d687f3b5eaba956db14db1d18011194c9fa98350cbae112cbbc27be581c5a59688beb30a802114d445b8699804f739555b8d375957d47cbb83c94fb96b2e82c0cdcf2fca6651116809cede0b752ac3695863b23afd5b195907f7e10bd5474334e4f1b9b5ba1098fbbf2edea026af0f54d3c4a90a4d7b84c6bab7fa7bfd22614151b9450d77df6d68c142c7499f1ed319167abde3b31cbebcc5321a32450c136519e46693741960c48f1b0367388eb73d2700e5cb1e5d17f0e54abbed00ae5b28eab06b3598ea5994cbae22e912cb4c11ea8fad51abfe210c602895f34416ab3b1e2d5af5c12c05108086cfc4e354d2d98606eb2aff145f8808ca814491516533eeef3cbc499182fa8c5ad25d44062258aa05930184fdf02768f946c8c0288aa4c039891058a179d969498a953a6f9eadb311264fe1b8e1aac2adac863889b9cc24507d115251446f74140fee05537fa7147ba3c137a48f8a895d2b8847d1974258ed2821866fa31a3a75574332bd4ca70581ec0d0f3048de2f25fbf9aa2cf47d46b6e94294fd986ebc639a520c415504613f3d69e36bd4ab61fb21a4fb262738fa666b65a5c6ca890b578333d0cf06969d9928ee2d8046a268b7f433608b0cd85c164a3561415090628694a0e8f82f3309438bdcf32421787120445c2af2653ba70d20cc63e8b0d81178101539bbed34873783103fd2b3dffbaffe6e3877061da04007f8c8087d6960b57c1044aab54a4aea54e6c3800e00bb515c9007dd97bb7fe851f7f70ac84c655c5680df0e4683034d466f92b4e1134657dac097a3ef37fd4473acf0172a3e56840d8db8b3af2caf732d6c0219bbf330e8e54d3da3b9562f08219e7bcd0240d83b2eaba9611e26fbec3de3cf979c6eeca65ad918d853c565c88c6c2e24049e9688be00e0e382400a8e10312701b91c37fc1d05709f0222c38109a3caf4c3ee7a3006a6cfce9f7facac9158b0bf1fd280ec53688b2403eb98474ee2feb67c05d147682ae27fefd0acf51087b0e6180b585d0291d34a4980ec5e5103bc608cf2cb4869e37b0e1b7ba654e0e3e922a5760a3bba55115d20f718fdcaf729a0a742eb0f1726fcefb43d1e960b1645eff952b42c927cce9fd3affaa61fedd12d14c9aeee3a7f6b43ff724b2d39fde618073864fb4f9a977a4964b05e33179ba7c5619a162cbe157a7d754ee87f62b14f9f3308e7d89edf2de78e0bec3f66fd9514384e03362953500c536bb219a69c7bf47b4a1f03eed42405de6084fc8695496105b8673b8548a78616d69c187e251fced74c330ef68a9aafb690779f62927b713d2037ea2268f036269e774231485a8f4d4b95c85e785700e85cc4de27c853c94a47d83f8625c7cb197d74445e1347949b2bdd310247d6ed26978647a5854954c46ef2af0ed", 0x1000}], 0x4, &(0x7f0000003f40)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x18}}, {{&(0x7f0000003f80)=@phonet={0x23, 0x19, 0x3, 0x6}, 0x80, &(0x7f0000005480)=[{&(0x7f0000004000)="7e3ce9041dbe8777043000aef3277b209c8004368cb6c6796706be958dd8b74edd2dce386731301f2a595f9f34a6571c07f968f6bf9add696f028b07500894684a", 0x41}, {&(0x7f0000004080)="37e72fa5f77c111988455352b882db546d1377b2eb8ffe874f81d499468226850d2f2e70ba5cf99aaa33e06eb1b8c4bbdba10a154b859c790afd2fd1ab7092bb6e48f3b865cb76d8337d32927df835b5a3908854f4e255b49b0c7aa39b75f39bdd3a18c5e6ea216158517c62256552ec015ce0e5aab67886a4161bf968e0cc49ab8adbf64c2a5e0a2b1586e799d20e209d0727227e62b13d9de21f5da16f7a4b7c76eb73e659cc07c082fade55b123bd9cd8339338f962ef493bd239901e3c2836a6b3", 0xc3}, {&(0x7f0000004180)="c9d2105eabf38037c05df24caaef3761457631a24e791da650563f08c528fa1d8b8ebeaa0d5ce7ecf2b349a2f839ee560ee63d6b5638d4c25fb605fd2c08c1cfa546ada21e6777bc7ce573aa813919262c028cf7144e95896b3c06d271764817d1c8af", 0x63}, {&(0x7f0000004200)="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", 0xff5}, {&(0x7f0000005200)="80c364034c36128ad38b2a82b8868d28011c224f98097e97c8adc9f3360c3de4d5ecb6ddd6d381f47997e35f83de2fab0da8fcf8753660e6489cfc38b10c866ad7c361ad1d446aba8f1f60e1555aa45f6252424734f43010640656453eacfa4c275ed1bf0dbfcd2d527a8dd4a35cf0631c8aa085a63c07a8921b79dec78754a25e434e9559b5ae6e30b93352c8483d4d1f31", 0x92}, {&(0x7f00000052c0)="ba956b582cb0781e9c871ca7e93231de6b9d4be8e2ab9a7d8b0eb6e48dcebd13c062ceea1b026bf195276bd1256cfcd5461d45fc879da5366bd5916e93e59130222b1eb82cb604a3ada58a20af04d9268c8d9b0a3dd243f7fef28d69d3fb644ab7ed92292fcd7998c814108a2bf686ad56da3157da027d006f37cd5a1b47", 0x7e}, {&(0x7f0000005340)="e24529c847d8ea29fc74a6ee24b425341295aae26b134063a733472f563cf761b70faa511e5e6fb9281a457f42acfe89d5b294fdcc03fc7b8d9dee3704a161ff2e6644ece8", 0x45}, {&(0x7f00000053c0)="f628603162232858d5fd2de84f4465f64a7d", 0x12}, {&(0x7f0000005400)="5e558623eee2e0d2aaf6cd08c8589e62d017896e6c53a3812494b45057d0e138d3d97b53b00455b58c52b23bbc7abbd263a291438eb7e01663e76c86d07453bcc4a584ac3099446ab2441449ee73205a41a06db6dc21d68b007b3ad83899ed6e0ec41409a9", 0x65}], 0x9, &(0x7f0000005540)=[@txtime={{0x18, 0x1, 0x3d, 0xd1a}}], 0x18}}], 0x4, 0x8040) chdir(&(0x7f00000007c0)='./file0\x00') sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="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", 0x170}], 0x1}, 0x4004010) 2.828201027s ago: executing program 2 (id=1302): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x1d, &(0x7f0000000080)=0x3, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f00000007c0), &(0x7f0000000540)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x29, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100c000000000000000a859ce800"/23, @ANYRES32=r5, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700ac141402"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) sendto$packet(r2, &(0x7f00000000c0)="0400ff000000", 0x6, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x4, 0x6, @multicast}, 0x14) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r5, @ANYRES16, @ANYBLOB="838981e7379c6b3ab55b04127c8afd7cd2cf5c2a6129d92247372767e3081f9a1c1566162a7ff4fe75f4ac02a6cce81eaa9df1ed948abb8ffa783eb7c6", @ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r3, @ANYRES64=r5, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000800)=0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r14], 0x1c}}, 0x840) sendmsg$NFC_CMD_DEV_DOWN(r7, &(0x7f0000000580)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f00000009c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES8=0x0, @ANYRESOCT=r8, @ANYRES32=r9, @ANYRES64=r7, @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="d249c358bba7952dd78dcbf781a58ed9d051e45b17e3c2bc01e03f706cc536f079c4e8a732a16308e1cbddf117bad7070001c0bab2b7a1202e1d8113261783e3bd3c43ff3d0723334056e887936ccb1853d2cc18a37f"], 0x2c}}, 0x4000010) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r16, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="10f8ff00", @ANYRES16=r17, @ANYBLOB="010026bd7000fddbdf25040000001400018008000500030000000600010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000) setsockopt$IP6T_SO_SET_REPLACE(r15, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0x0, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x248, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit3={{0x158}, {'lo\x00', {0x1, 0x1, 0x84, 0x800, 0x165, 0x13, 0x5, 0x3ff, 0x80, 0x8}, {0xfffffffffffffff3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x101, 0x8, 0x3, 0xb1, 'syz0\x00', {0x105}}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xff000000], 'batadv0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x44, 0xb2}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB="dc000000010801020000000000000000000000063c00048008000140000000090800014080000001080001400000059708000140000000010800014000000040080001400000008008000140000003ff0900010073797a3100000000440004800800024000000007080001400000000f080001400000000208000140fffffffb08000240fffffffa08000102400000000006000240890600003400048008000440000000070800074000000800080008403725e1180800044000008001080007400004100008000840000100"/220], 0xdc}}, 0x20000890) 2.63845311s ago: executing program 4 (id=837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000240)={0x0, 0x1f000, 0x8}) (async) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) r3 = socket$alg(0x26, 0x5, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async, rerun: 32) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) (async) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}) (async, rerun: 64) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0xfffffffffffffffd, r3, 0x80000}) (async, rerun: 64) syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) (async, rerun: 32) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (rerun: 32) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x1) (async, rerun: 64) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x6, @pix={0x0, 0x20000, 0x9de86b73b1dd5744, 0x3, 0x4, 0x0, 0x5, 0x3, 0x1, 0x3, 0x0, 0x6}}) (async, rerun: 64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}}) (async) timer_create(0x5, &(0x7f00000014c0)={0x0, 0x2a, 0x0, @thr={&(0x7f0000000440)="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", &(0x7f0000001440)="9470a0c27b73dfb8ccad752fc8bcf2d6fbe1f4e7330907365aab607632a7f7b9f43df0ba9bb974702da1befe5b16510f15b3759060e41fad49766d3ba1e64ea80b9c3734ae6a3a357840e5064eb9afa04f5e4154472cb69d3ac5344fb5"}}, &(0x7f0000001500)=0x0) (async) clock_gettime(0x0, &(0x7f0000001540)={0x0, 0x0}) timer_settime(r9, 0x1, &(0x7f0000001580)={{r10, r11+60000000}}, &(0x7f00000015c0)) (async, rerun: 64) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) (rerun: 64) close_range(r4, r12, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000000c0)=0xa, 0x4) 265.826843ms ago: executing program 2 (id=1304): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000e77910c0000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x94, &(0x7f00000000c0)=""/148}, 0x94) (async) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x4}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe) (async) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0xd) set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x80800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000480)=0x1) (async) ioctl$KDSKBLED(r2, 0x4b65, 0x696) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x420001, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 265.135838ms ago: executing program 0 (id=1306): prctl$PR_SET_FPEMU(0xa, 0x3) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0xf, r0, 'id0\x00'}) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r3, 0x8010aebc, &(0x7f0000000640)={0x0, 0x12000}) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x30) prctl$PR_SET_FPEMU(0xa, 0x3) (async) socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0xf, r0, 'id0\x00'}) (async) socket$xdp(0x2c, 0x3, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r3, 0x8010aebc, &(0x7f0000000640)={0x0, 0x12000}) (async) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x30) (async) 198.580783ms ago: executing program 2 (id=1307): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r2, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x48}}, 0x20000000) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @local}], 0xfffffffffffffce1) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0), &(0x7f0000000040)=0x8) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getpeername(r4, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@remote, @empty, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000200)={@private1, r6}, 0x14) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f27, 0x1f, 0x10000, 0x4, 0x3, 0xcc7, 0x4, 0x80008, 0xe, 0x6, 0x2, 0x1, 0x7, 0x1, 0x6, 0x1000, 0x0, 0x1a44d, 0x3, 0x3fff7fff, 0x89, 0x10, 0x1, 0x20001e58, 0x80000b, 0xe69, 0x3c, 0x8, 0x6, 0xffffffff, 0xeffffff8]}) 128.94915ms ago: executing program 1 (id=1309): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0c", 0x1a1, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 128.603936ms ago: executing program 1 (id=1310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000005640)={'broute\x00', 0x0, 0x0, 0x0, [0x413c, 0x0, 0x5, 0x8, 0x80000001, 0x10001]}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 65.84585ms ago: executing program 1 (id=1311): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f0000000a80)="e8700e444d50a969ff", 0x9}], 0x2}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000900)=""/83, 0x53}], 0x2}, 0x50) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000080)={0x48, 0x1, r3, 0x0, 0x0, 0x4}) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xab, @ipv4={'\x00', '\xff\xff', @empty}, 0x20000000}, 0x1c) 65.520297ms ago: executing program 1 (id=1312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001", @ANYRES32=r0, @ANYBLOB="964eab442432fe4c94e71a480f81e7e18cb6e13d66ae9997fe1acfbc57d104368c062cc995af12bf2d1ce00391ef7448fd3d00c6db60c1254e67390fb240c41894528e509881019b6acf77b2dc705843aa43ac76fb5e"], 0xa8}, 0x1, 0x0, 0x0, 0x4000050}, 0x240000c1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff160000000000000000060000", @ANYRES32=0x0, @ANYBLOB="1c37e04111d0c19df447c58db0cee636b365d5f24ecec2f389c781da24dcbab3970ff701821a5b1a9b5351c9cf1eb7d7051caabee25b4fdcc22c1e61b7cf463b516b949d173b35b90a741f527c58df89c2f3a8b254a7bf01fd44037fed7501b3ea7be7e4b07e3bf35482441a8dca54659d265a7e2a7e2538e4c75f34e15b2fabb2bc1f4a1fc9b207accc7b3d8cf3c69f2d14ec2e995aec3963e2a2f64be9adba89f005f6a0861d10d8b3b771c96e37b6063d04425bbf8d62339782ae6914dd141ba964a9367715f9dec959c2a4d3696e91056c1c517b3cfd30097cbbfc4e791367beb1aefaa4b794a046b388"], 0x40}}, 0x0) 8.86297ms ago: executing program 1 (id=1313): r0 = inotify_init() r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x20, {{0xa, 0x4e24, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffb}}}, 0x118) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) inotify_init() (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x20, {{0xa, 0x4e24, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffb}}}, 0x118) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40}}}, 0x108) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 266.41µs ago: executing program 1 (id=1314): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x18, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x0, 0x3, 0x3, 0xa, 0x1, 0x31, 0xffffffffffffffff}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x20800, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0xf0, &(0x7f00000004c0)="702d40f24d144d899cf810a154e0", 0x0, 0x100b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="016f00f801002700000027000000450000291067000504019079e8000002e0000002bd1272a4c9c809ea0e68cb11dc9eed437404d4db3dceb176fbb8d69d4a466c2f29132de98befbedbdd4c8fe6ed3a3677941fd9935df1271e43aa3025e8b6e00e257bdb735c2aa759a16313606628c3bc0100000000000000244d7eecca155badc32c19fc3222a6807dc8180033f3566f2b4348fb390045e34250e57b718eb6d7a786333533b87a28ba0a01338fddf49feb6a1b2c672e78b41436d9c6e51d"], 0x37) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x200010, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 0s ago: executing program 0 (id=1315): r0 = socket(0x10, 0x3, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000100)={0x2, 0x3, 0x9}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000000380)=0x0) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r3}, &(0x7f0000000380)=0x0) timer_settime(r4, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) ppoll(&(0x7f00000004c0)=[{r0, 0x22}, {r0, 0x21}, {r0, 0x2590}, {r0}, {r0, 0x84c8}], 0x5, &(0x7f0000000540), &(0x7f0000000580)={[0x9]}, 0x8) timer_settime(r2, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) r5 = gettid() tkill(r5, 0x16) r6 = io_uring_setup(0x2f39, &(0x7f0000000140)={0x0, 0xd052, 0x400, 0x3, 0x47}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000000500)={0x4, 0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/214, 0xd6}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000440)=""/64, 0x40}], &(0x7f00000004c0)}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001c000104000000000200000000000000865c3839459b70fd7f544cbffa9727636ab6189fd50c1f16b9127612511d6267ed69d91e924e3c6938194cc0e486c416ed9639c43aeaa88cdf4605553f51ab071bc12aee2c71292d816f2c765096b2a8a89b17de2b0a1853b7870c104a75fa485e7ac66cef1e813682f440765844d7532f84dabb98cef1850e3cf76dd3b3ff8a02160f7aec1cd38a40b3800000000eab0cadbf8cc37e92fd0cb86977305697f9c99cf6b6a6a9319269a02b874a490f32486dfc155cb5b1bc120601d5c13640becc536d95a086bd243333e7ac1ba6a0d6eba40a82b568038456bcf30d8352", @ANYRES32=0x0, @ANYBLOB="02001400"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) kernel console output (not intermixed with test programs): evsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.608604][ T102] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.612142][ T102] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.615613][ T102] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.802698][ T53] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 80.892374][ T6912] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 80.914653][ T6912] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3170034004 (101441088128 ns) > initial count (92024169792 ns). Using initial count to start timer. [ 80.965505][ T53] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 80.968111][ T53] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 80.971193][ T53] usb 7-1: config 0 interface 0 has no altsetting 0 [ 80.976146][ T53] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 80.979028][ T53] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 80.981599][ T53] usb 7-1: Product: syz [ 80.983802][ T53] usb 7-1: Manufacturer: syz [ 80.985542][ T53] usb 7-1: SerialNumber: syz [ 80.988568][ T53] usb 7-1: config 0 descriptor?? [ 80.991331][ T53] hub 7-1:0.0: bad descriptor, ignoring hub [ 80.997326][ T53] hub 7-1:0.0: probe with driver hub failed with error -5 [ 81.003399][ T53] usb 7-1: selecting invalid altsetting 0 [ 81.418624][ T63] Bluetooth: hci0: Invalid handle: 0x7830 > 0x0eff [ 81.916360][ T6002] usb 7-1: USB disconnect, device number 4 [ 82.063888][ T6002] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 82.214244][ T6002] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 82.217581][ T6002] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 82.220946][ T6002] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.225462][ T6002] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 82.228419][ T6002] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 82.231135][ T6002] usb 7-1: Product: syz [ 82.232616][ T6002] usb 7-1: Manufacturer: syz [ 82.234171][ T6002] usb 7-1: SerialNumber: syz [ 82.237908][ T6002] usb 7-1: config 0 descriptor?? [ 82.241963][ T6002] hub 7-1:0.0: bad descriptor, ignoring hub [ 82.244213][ T6002] hub 7-1:0.0: probe with driver hub failed with error -5 [ 82.247934][ T6002] usb 7-1: selecting invalid altsetting 0 [ 82.313880][ T6942] netlink: 'syz.1.293': attribute type 11 has an invalid length. [ 82.317330][ T6942] __nla_validate_parse: 19 callbacks suppressed [ 82.317344][ T6942] netlink: 132 bytes leftover after parsing attributes in process `syz.1.293'. [ 82.344349][ T53] e1000 0000:00:06.0 eth0: Reset adapter [ 82.364512][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 82.364528][ T40] audit: type=1400 audit(1775387830.668:409): avc: denied { read open } for pid=6944 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.397546][ T40] audit: type=1400 audit(1775387830.678:410): avc: denied { getattr } for pid=6944 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.409912][ T40] audit: type=1400 audit(1775387830.688:411): avc: denied { accept } for pid=6945 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.417293][ T40] audit: type=1400 audit(1775387830.698:412): avc: denied { add_name } for pid=6943 comm="dhcpcd-run-hook" name="resolv.conf.eth0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.424259][ T40] audit: type=1400 audit(1775387830.698:413): avc: denied { create } for pid=6943 comm="dhcpcd-run-hook" name="resolv.conf.eth0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.430870][ T40] audit: type=1400 audit(1775387830.698:414): avc: denied { write } for pid=6943 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth0.link" dev="tmpfs" ino=3476 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.440528][ T40] audit: type=1400 audit(1775387830.698:415): avc: denied { append } for pid=6943 comm="dhcpcd-run-hook" name="resolv.conf.eth0.link" dev="tmpfs" ino=3476 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.449480][ T40] audit: type=1400 audit(1775387830.738:416): avc: denied { remove_name } for pid=6949 comm="rm" name="resolv.conf.eth0.link" dev="tmpfs" ino=3476 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.457004][ T40] audit: type=1400 audit(1775387830.738:417): avc: denied { unlink } for pid=6949 comm="rm" name="resolv.conf.eth0.link" dev="tmpfs" ino=3476 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.466969][ T40] audit: type=1400 audit(1775387830.768:418): avc: denied { shutdown } for pid=6887 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.540167][ T6958] netlink: 'syz.1.297': attribute type 8 has an invalid length. [ 82.544196][ T6958] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 83.612971][ T9] usb 7-1: USB disconnect, device number 5 [ 84.564047][ T5996] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 86.892978][ T24] cfg80211: failed to load regulatory.db [ 95.870590][ T6988] netlink: 788 bytes leftover after parsing attributes in process `syz.0.299'. [ 95.875084][ T6988] bond0: entered allmulticast mode [ 95.877827][ T6988] bond_slave_0: entered allmulticast mode [ 95.877861][ T6988] bond_slave_1: entered allmulticast mode [ 95.952740][ T7004] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 95.956006][ T7004] netlink: 'syz.1.304': attribute type 2 has an invalid length. [ 95.958795][ T7004] netlink: 'syz.1.304': attribute type 2 has an invalid length. [ 96.048843][ T7016] macvtap1: entered promiscuous mode [ 96.050648][ T7016] macsec0: entered promiscuous mode [ 96.070363][ T7016] macsec0: left promiscuous mode [ 96.127413][ T7025] netlink: 'syz.0.311': attribute type 1 has an invalid length. [ 96.129932][ T7025] netlink: 96 bytes leftover after parsing attributes in process `syz.0.311'. [ 96.132879][ T7025] netlink: 658 bytes leftover after parsing attributes in process `syz.0.311'. [ 96.135916][ T7025] netlink: 1 bytes leftover after parsing attributes in process `syz.0.311'. [ 96.201661][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 96.201746][ T40] audit: type=1400 audit(1775387844.498:423): avc: denied { ioctl } for pid=7034 comm="syz.3.314" path="socket:[14993]" dev="sockfs" ino=14993 ioctlcmd=0x6e8b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 96.212643][ T40] audit: type=1400 audit(1775387844.508:424): avc: denied { bind } for pid=7034 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 96.230004][ T7037] /dev/loop1: Can't open blockdev [ 96.258927][ T40] audit: type=1400 audit(1775387844.558:425): avc: denied { setattr } for pid=7034 comm="syz.3.314" name="NETLINK" dev="sockfs" ino=16284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.267773][ T40] audit: type=1400 audit(1775387844.568:426): avc: denied { getopt } for pid=7034 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 96.292650][ T40] audit: type=1400 audit(1775387844.588:427): avc: denied { append } for pid=7045 comm="syz.2.318" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 96.302582][ T40] audit: type=1400 audit(1775387844.598:428): avc: denied { map } for pid=7045 comm="syz.2.318" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 96.312745][ T40] audit: type=1400 audit(1775387844.608:429): avc: denied { create } for pid=7047 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.319484][ T40] audit: type=1400 audit(1775387844.608:430): avc: denied { write } for pid=7047 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.348766][ T7052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.321'. [ 96.352164][ T7052] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7052 comm=syz.2.321 [ 96.389359][ T40] audit: type=1400 audit(1775387844.688:431): avc: denied { read } for pid=7055 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.547669][ T40] audit: type=1400 audit(1775387844.848:432): avc: denied { ioctl } for pid=7067 comm="syz.2.325" path="socket:[14256]" dev="sockfs" ino=14256 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 96.594978][ T7068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.325'. [ 96.600643][ T7078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.830100][ T7085] overlayfs: failed to resolve './file0': -2 [ 96.903990][ T7090] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.907391][ T7090] bridge0: port 1(1x9) entered disabled state [ 97.048436][ T7093] random: crng reseeded on system resumption [ 97.064726][ T7093] PM: hibernation: Image mismatch: memory size [ 97.069313][ T7093] bpf: Bad value for 'uid' [ 97.090973][ T7097] (syz.3.333,7097,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 97.093829][ T7097] (syz.3.333,7097,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 97.096784][ T7092] delete_channel: no stack [ 97.125077][ T7103] program syz.0.334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.197662][ T7117] wireguard: wg0: Could not create IPv4 socket [ 97.249591][ T7121] kvm: kvm [7120]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 97.253917][ T7121] kvm: kvm [7120]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 97.416393][ T7139] Failed to initialize the IGMP autojoin socket (err -2) [ 97.493543][ T7147] netlink: 'syz.0.347': attribute type 2 has an invalid length. [ 97.628388][ T7154] netlink: 72 bytes leftover after parsing attributes in process `syz.0.350'. [ 97.659602][ T7154] ISOFS: Unable to identify CD-ROM format. [ 97.746312][ T7163] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.352'. [ 97.749787][ T7163] netlink: Unknown conntrack attr (0) [ 97.794601][ T7163] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 97.802742][ T7163] Error validating options; rc = [-22] [ 97.888952][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 97.944335][ T7178] tun0: tun_chr_ioctl cmd 1074025675 [ 97.946338][ T7178] tun0: persist enabled [ 97.950382][ T7178] tun0: tun_chr_ioctl cmd 1074025675 [ 97.951629][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'. [ 97.952106][ T7178] tun0: persist enabled [ 97.956449][ T7175] openvswitch: netlink: Flow actions attr not present in new flow. [ 97.993956][ T7182] openvswitch: netlink: Duplicate key (type 6). [ 98.217338][ T7204] hsr_slave_1 (unregistering): left promiscuous mode [ 98.262923][ T7212] overlayfs: missing 'lowerdir' [ 98.317491][ T7224] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 98.383118][ T7233] cifs: Unknown parameter ']e' [ 98.385862][ T7233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7233 comm=syz.2.375 [ 98.391132][ T7235] netlink: 'syz.3.374': attribute type 1 has an invalid length. [ 98.395843][ T7235] netlink: 'syz.3.374': attribute type 1 has an invalid length. [ 98.406860][ T7235] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 98.412492][ T7235] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 98.420433][ T7237] nvme_fabrics: missing parameter 'transport=%s' [ 98.422759][ T7237] nvme_fabrics: missing parameter 'nqn=%s' [ 98.492322][ T7250] overlayfs: failed lookup in lower (newroot/113, name='bus', err=-40): overlapping layers [ 98.658185][ T63] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 98.714725][ T7275] Failed to initialize the IGMP autojoin socket (err -2) [ 98.782619][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 98.942642][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 98.946943][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 98.956689][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 98.960528][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.964346][ T24] usb 7-1: Product: syz [ 98.966249][ T24] usb 7-1: Manufacturer: syz [ 98.968245][ T24] usb 7-1: SerialNumber: syz [ 98.974481][ T24] usb 7-1: config 0 descriptor?? [ 98.979813][ T24] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 98.984348][ T24] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 99.584789][ T24] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 99.896974][ T7331] ceph: No source [ 100.266223][ T24] em28xx 7-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 100.270130][ T24] em28xx 7-1:0.0: board has no eeprom [ 100.472356][ T7257] em28xx 7-1:0.0: read from i2c device at 0x0 failed with unknown error (status=65) [ 100.732592][ T24] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 100.735078][ T24] em28xx 7-1:0.0: dvb set to bulk mode. [ 100.737244][ T39] em28xx 7-1:0.0: Binding DVB extension [ 100.747555][ T24] usb 7-1: USB disconnect, device number 6 [ 100.750124][ T24] em28xx 7-1:0.0: Disconnecting em28xx [ 100.777950][ T39] em28xx 7-1:0.0: Registering input extension [ 100.783546][ T24] em28xx 7-1:0.0: Closing input extension [ 100.799897][ T24] em28xx 7-1:0.0: Freeing device [ 101.069779][ T7381] 9p: Could not find request transport: v [ 101.077270][ T7381] __nla_validate_parse: 13 callbacks suppressed [ 101.077309][ T7381] netlink: 44 bytes leftover after parsing attributes in process `syz.0.419'. [ 101.274077][ T7392] gfs2: gfs2 mount does not exist [ 101.277007][ T7392] gfs2: gfs2 mount does not exist [ 101.301174][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 101.305391][ T7396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.424'. [ 101.315803][ T7396] erspan1: entered promiscuous mode [ 101.317510][ T7396] erspan1: entered allmulticast mode [ 101.407355][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 101.407397][ T40] audit: type=1400 audit(1775387849.708:469): avc: denied { write } for pid=7399 comm="syz.2.425" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 101.720114][ T7413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.430'. [ 101.723925][ T7413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.430'. [ 101.804144][ T7420] netlink: 'syz.1.432': attribute type 8 has an invalid length. [ 101.815671][ T40] audit: type=1400 audit(1775387850.118:470): avc: denied { write } for pid=7421 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.850424][ T7430] overlayfs: failed to resolve './bus': -2 [ 101.884089][ T7435] bond0: (slave bond_slave_1): Releasing backup interface [ 101.927655][ T7436] netlink: 32 bytes leftover after parsing attributes in process `syz.1.436'. [ 101.930689][ T7436] netlink: 32 bytes leftover after parsing attributes in process `syz.1.436'. [ 101.940642][ T7442] 9p: Bad value for 'trans' [ 102.016059][ T7452] netlink: 172 bytes leftover after parsing attributes in process `syz.0.443'. [ 102.047221][ T7459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.446'. [ 102.070413][ T7459] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7459 comm=syz.1.446 [ 102.107891][ T7464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.447'. [ 102.184667][ T7468] could not allocate digest TFM handle xxhash64 [ 102.193686][ T7468] vlan2: entered allmulticast mode [ 102.195350][ T7468] bond0: entered allmulticast mode [ 102.197004][ T7468] bond_slave_0: entered allmulticast mode [ 102.288635][ T40] audit: type=1400 audit(1775387850.588:471): avc: denied { bind } for pid=7490 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.326856][ T7500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=7500 comm=syz.0.458 [ 102.500977][ T40] audit: type=1400 audit(1775387850.798:472): avc: denied { mounton } for pid=7522 comm="syz.1.467" path="/127/bus" dev="tmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 102.501085][ T7523] /dev/nullb0: Can't lookup blockdev [ 102.523880][ T7523] overlay: ./bus is not a directory [ 102.549087][ T7523] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.551613][ T7523] bridge0: port 2(bridge_slave_1) entered listening state [ 102.554321][ T7523] bridge0: port 1(1x9) entered blocking state [ 102.556493][ T7523] bridge0: port 1(1x9) entered listening state [ 102.593215][ T7523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.610410][ T40] audit: type=1400 audit(1775387850.908:473): avc: denied { mount } for pid=7533 comm="syz.3.471" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 102.617941][ T7535] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 102.621403][ T7535] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 102.622224][ T7536] overlayfs: maximum fs stacking depth exceeded [ 102.628354][ T7535] overlayfs: maximum fs stacking depth exceeded [ 102.630210][ T7536] overlayfs: maximum fs stacking depth exceeded [ 102.634194][ T7536] overlayfs: maximum fs stacking depth exceeded [ 102.636629][ T7535] overlayfs: maximum fs stacking depth exceeded [ 102.639055][ T7536] overlayfs: maximum fs stacking depth exceeded [ 102.641512][ T7535] overlayfs: maximum fs stacking depth exceeded [ 102.644496][ T7536] overlayfs: maximum fs stacking depth exceeded [ 102.647865][ T7535] overlayfs: maximum fs stacking depth exceeded [ 102.650600][ T7535] overlayfs: maximum fs stacking depth exceeded [ 102.652999][ T7536] overlayfs: maximum fs stacking depth exceeded [ 102.655486][ T7535] overlayfs: maximum fs stacking depth exceeded [ 102.657940][ T7536] overlayfs: maximum fs stacking depth exceeded [ 102.661179][ T7536] overlayfs: maximum fs stacking depth exceeded [ 102.664403][ T7536] overlay: Unknown parameter 'lowe<' [ 102.699798][ T40] audit: type=1400 audit(1775387850.998:474): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 102.883050][ T40] audit: type=1400 audit(1775387851.188:475): avc: denied { append } for pid=7569 comm="syz.3.483" name="demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 102.942941][ T7578] netlink: 'syz.3.486': attribute type 4 has an invalid length. [ 102.969698][ T40] audit: type=1400 audit(1775387851.268:476): avc: denied { append } for pid=7581 comm="syz.3.487" name="pfkey" dev="proc" ino=4026533374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 103.017628][ T40] audit: type=1400 audit(1775387851.318:477): avc: denied { write } for pid=7586 comm="syz.3.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 103.029327][ T7587] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 103.060168][ T40] audit: type=1400 audit(1775387851.358:478): avc: denied { ioctl } for pid=7588 comm="syz.3.489" path="socket:[18023]" dev="sockfs" ino=18023 ioctlcmd=0x943b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 103.215010][ T7608] FAULT_INJECTION: forcing a failure. [ 103.215010][ T7608] name failslab, interval 1, probability 0, space 0, times 1 [ 103.219220][ T7608] CPU: 2 UID: 0 PID: 7608 Comm: syz.3.495 Not tainted syzkaller #0 PREEMPT(full) [ 103.219236][ T7608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.219283][ T7608] Call Trace: [ 103.219287][ T7608] [ 103.219292][ T7608] dump_stack_lvl+0x100/0x190 [ 103.219320][ T7608] should_fail_ex.cold+0x5/0xa [ 103.219336][ T7608] should_failslab+0xc2/0x120 [ 103.219348][ T7608] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 103.219364][ T7608] ? vm_area_dup+0x27/0x8e0 [ 103.219381][ T7608] vm_area_dup+0x27/0x8e0 [ 103.219395][ T7608] __split_vma+0x18c/0xd90 [ 103.219412][ T7608] ? __pfx___split_vma+0x10/0x10 [ 103.219430][ T7608] ? __pfx_mas_prev+0x10/0x10 [ 103.219450][ T7608] vms_gather_munmap_vmas+0x39f/0x1500 [ 103.219469][ T7608] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 103.219488][ T7608] ? __lock_acquire+0x4a5/0x2630 [ 103.219503][ T7608] ? __lock_acquire+0x4a5/0x2630 [ 103.219514][ T7608] do_vmi_align_munmap+0x287/0x5f0 [ 103.219531][ T7608] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 103.219565][ T7608] do_vmi_munmap+0x1f8/0x3e0 [ 103.219582][ T7608] do_munmap+0xba/0x100 [ 103.219594][ T7608] ? __pfx_do_munmap+0x10/0x10 [ 103.219613][ T7608] mremap_to+0x236/0x450 [ 103.219629][ T7608] do_mremap+0xd8d/0x2130 [ 103.219647][ T7608] ? get_pid_task+0x106/0x250 [ 103.219657][ T7608] ? proc_fail_nth_write+0x9f/0x220 [ 103.219674][ T7608] ? __pfx_do_mremap+0x10/0x10 [ 103.219690][ T7608] ? find_held_lock+0x2b/0x80 [ 103.219704][ T7608] ? ksys_write+0x190/0x250 [ 103.219713][ T7608] ? ksys_write+0x190/0x250 [ 103.219726][ T7608] __do_sys_mremap+0x126/0x170 [ 103.219742][ T7608] ? __pfx___do_sys_mremap+0x10/0x10 [ 103.219756][ T7608] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.219779][ T7608] do_syscall_64+0x106/0xf80 [ 103.219795][ T7608] ? clear_bhb_loop+0x40/0x90 [ 103.219808][ T7608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.219819][ T7608] RIP: 0033:0x7f041fb9c819 [ 103.219828][ T7608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.219838][ T7608] RSP: 002b:00007f04209ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 103.219849][ T7608] RAX: ffffffffffffffda RBX: 00007f041fe15fa0 RCX: 00007f041fb9c819 [ 103.219855][ T7608] RDX: 0000000000200000 RSI: 0000000000600a00 RDI: 0000200000000000 [ 103.219861][ T7608] RBP: 00007f04209ab090 R08: 0000200000a00000 R09: 0000000000000000 [ 103.219867][ T7608] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 103.219872][ T7608] R13: 00007f041fe16038 R14: 00007f041fe15fa0 R15: 00007ffe487dd998 [ 103.219886][ T7608] [ 103.400572][ T7634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.687458][ T7644] FAULT_INJECTION: forcing a failure. [ 103.687458][ T7644] name failslab, interval 1, probability 0, space 0, times 0 [ 103.691441][ T7644] CPU: 3 UID: 0 PID: 7644 Comm: syz.3.507 Not tainted syzkaller #0 PREEMPT(full) [ 103.691456][ T7644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.691462][ T7644] Call Trace: [ 103.691466][ T7644] [ 103.691471][ T7644] dump_stack_lvl+0x100/0x190 [ 103.691492][ T7644] should_fail_ex.cold+0x5/0xa [ 103.691507][ T7644] should_failslab+0xc2/0x120 [ 103.691519][ T7644] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 103.691535][ T7644] ? mas_alloc_nodes+0x280/0x390 [ 103.691553][ T7644] mas_alloc_nodes+0x280/0x390 [ 103.691570][ T7644] mas_preallocate+0x39c/0xf10 [ 103.691580][ T7644] ? __memcg_slab_post_alloc_hook+0x480/0x990 [ 103.691596][ T7644] ? __pfx_mas_preallocate+0x10/0x10 [ 103.691610][ T7644] ? anon_vma_name+0x5a/0x250 [ 103.691625][ T7644] __split_vma+0x33d/0xd90 [ 103.691642][ T7644] ? __pfx___split_vma+0x10/0x10 [ 103.691659][ T7644] ? __pfx_mas_prev+0x10/0x10 [ 103.691673][ T7644] vms_gather_munmap_vmas+0x39f/0x1500 [ 103.691692][ T7644] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 103.691708][ T7644] ? __lock_acquire+0x4a5/0x2630 [ 103.691722][ T7644] ? __lock_acquire+0x4a5/0x2630 [ 103.691733][ T7644] do_vmi_align_munmap+0x287/0x5f0 [ 103.691750][ T7644] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 103.691784][ T7644] do_vmi_munmap+0x1f8/0x3e0 [ 103.691801][ T7644] do_munmap+0xba/0x100 [ 103.691813][ T7644] ? __pfx_do_munmap+0x10/0x10 [ 103.691832][ T7644] mremap_to+0x236/0x450 [ 103.691849][ T7644] do_mremap+0xd8d/0x2130 [ 103.691867][ T7644] ? get_pid_task+0x106/0x250 [ 103.691877][ T7644] ? proc_fail_nth_write+0x9f/0x220 [ 103.691894][ T7644] ? __pfx_do_mremap+0x10/0x10 [ 103.691911][ T7644] ? find_held_lock+0x2b/0x80 [ 103.691924][ T7644] ? ksys_write+0x190/0x250 [ 103.691934][ T7644] ? ksys_write+0x190/0x250 [ 103.691946][ T7644] __do_sys_mremap+0x126/0x170 [ 103.691963][ T7644] ? __pfx___do_sys_mremap+0x10/0x10 [ 103.691977][ T7644] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.692000][ T7644] do_syscall_64+0x106/0xf80 [ 103.692016][ T7644] ? clear_bhb_loop+0x40/0x90 [ 103.692029][ T7644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.692040][ T7644] RIP: 0033:0x7f041fb9c819 [ 103.692049][ T7644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.692059][ T7644] RSP: 002b:00007f04209ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 103.692070][ T7644] RAX: ffffffffffffffda RBX: 00007f041fe15fa0 RCX: 00007f041fb9c819 [ 103.692076][ T7644] RDX: 0000000000200000 RSI: 0000000000600a00 RDI: 0000200000000000 [ 103.692082][ T7644] RBP: 00007f04209ab090 R08: 0000200000a00000 R09: 0000000000000000 [ 103.692088][ T7644] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 103.692093][ T7644] R13: 00007f041fe16038 R14: 00007f041fe15fa0 R15: 00007ffe487dd998 [ 103.692107][ T7644] [ 103.826268][ T7660] vlan2: entered allmulticast mode [ 103.828952][ T7660] bond0: entered allmulticast mode [ 103.830683][ T7660] bond_slave_0: entered allmulticast mode [ 103.843782][ T7660] bond_slave_1: entered allmulticast mode [ 112.482755][ T1146] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 121.758129][ T7681] kAFS: unable to lookup cell '/,cL' [ 121.765226][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 121.765236][ T40] audit: type=1400 audit(1775387870.068:483): avc: denied { create } for pid=7677 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 121.773558][ T40] audit: type=1400 audit(1775387870.068:484): avc: denied { connect } for pid=7677 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 121.779835][ T40] audit: type=1400 audit(1775387870.068:485): avc: denied { getopt } for pid=7677 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 121.994549][ T7699] netlink: 'syz.2.526': attribute type 12 has an invalid length. [ 122.021140][ T40] audit: type=1400 audit(1775387870.318:486): avc: denied { watch_reads } for pid=7701 comm="syz.2.527" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.032597][ T40] audit: type=1400 audit(1775387870.328:487): avc: denied { bind } for pid=7701 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 122.054802][ T7707] FAULT_INJECTION: forcing a failure. [ 122.054802][ T7707] name failslab, interval 1, probability 0, space 0, times 0 [ 122.059086][ T7707] CPU: 0 UID: 0 PID: 7707 Comm: syz.3.522 Not tainted syzkaller #0 PREEMPT(full) [ 122.059107][ T7707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.059114][ T7707] Call Trace: [ 122.059118][ T7707] [ 122.059122][ T7707] dump_stack_lvl+0x100/0x190 [ 122.059144][ T7707] should_fail_ex.cold+0x5/0xa [ 122.059165][ T7707] should_failslab+0xc2/0x120 [ 122.059176][ T7707] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 122.059193][ T7707] ? anon_vma_clone+0x2ba/0xcd0 [ 122.059209][ T7707] anon_vma_clone+0x2ba/0xcd0 [ 122.059225][ T7707] __split_vma+0x51f/0xd90 [ 122.059242][ T7707] ? __pfx___split_vma+0x10/0x10 [ 122.059259][ T7707] ? __pfx_mas_prev+0x10/0x10 [ 122.059273][ T7707] vms_gather_munmap_vmas+0x39f/0x1500 [ 122.059292][ T7707] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 122.059308][ T7707] ? __lock_acquire+0x4a5/0x2630 [ 122.059321][ T7707] ? __lock_acquire+0x4a5/0x2630 [ 122.059333][ T7707] do_vmi_align_munmap+0x287/0x5f0 [ 122.059350][ T7707] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 122.059383][ T7707] do_vmi_munmap+0x1f8/0x3e0 [ 122.059400][ T7707] do_munmap+0xba/0x100 [ 122.059412][ T7707] ? __pfx_do_munmap+0x10/0x10 [ 122.059431][ T7707] mremap_to+0x236/0x450 [ 122.059447][ T7707] do_mremap+0xd8d/0x2130 [ 122.059464][ T7707] ? get_pid_task+0x106/0x250 [ 122.059475][ T7707] ? proc_fail_nth_write+0x9f/0x220 [ 122.059491][ T7707] ? __pfx_do_mremap+0x10/0x10 [ 122.059508][ T7707] ? find_held_lock+0x2b/0x80 [ 122.059522][ T7707] ? ksys_write+0x190/0x250 [ 122.059531][ T7707] ? ksys_write+0x190/0x250 [ 122.059544][ T7707] __do_sys_mremap+0x126/0x170 [ 122.059560][ T7707] ? __pfx___do_sys_mremap+0x10/0x10 [ 122.059575][ T7707] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 122.059598][ T7707] do_syscall_64+0x106/0xf80 [ 122.059614][ T7707] ? clear_bhb_loop+0x40/0x90 [ 122.059627][ T7707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.059638][ T7707] RIP: 0033:0x7f041fb9c819 [ 122.059648][ T7707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.059657][ T7707] RSP: 002b:00007f04209ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 122.059668][ T7707] RAX: ffffffffffffffda RBX: 00007f041fe15fa0 RCX: 00007f041fb9c819 [ 122.059674][ T7707] RDX: 0000000000200000 RSI: 0000000000600a00 RDI: 0000200000000000 [ 122.059680][ T7707] RBP: 00007f04209ab090 R08: 0000200000a00000 R09: 0000000000000000 [ 122.059686][ T7707] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 122.059692][ T7707] R13: 00007f041fe16038 R14: 00007f041fe15fa0 R15: 00007ffe487dd998 [ 122.059705][ T7707] [ 122.070714][ T7712] __nla_validate_parse: 5 callbacks suppressed [ 122.070726][ T7712] netlink: 32 bytes leftover after parsing attributes in process `syz.2.528'. [ 122.178938][ T7712] batman_adv: batadv0: Adding interface: dummy0 [ 122.181640][ T7712] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.182034][ T40] audit: type=1400 audit(1775387870.478:488): avc: denied { ioctl } for pid=7720 comm="syz.1.530" path="socket:[17330]" dev="sockfs" ino=17330 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.191491][ T7712] batman_adv: batadv0: Interface activated: dummy0 [ 122.275689][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.535'. [ 122.388324][ T7743] macvtap0: entered allmulticast mode [ 122.390504][ T7743] veth0_macvtap: entered allmulticast mode [ 122.646398][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 122.649363][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.545'. [ 122.652929][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 122.656240][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.545'. [ 122.744572][ T7775] netlink: 'syz.1.550': attribute type 21 has an invalid length. [ 122.747898][ T7775] netlink: 128 bytes leftover after parsing attributes in process `syz.1.550'. [ 122.754025][ T7775] netlink: 3 bytes leftover after parsing attributes in process `syz.1.550'. [ 122.804313][ T7781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.889266][ T7796] openvswitch: netlink: Flow key attr not present in new flow. [ 122.904576][ T7796] bond1: entered promiscuous mode [ 123.040167][ T40] audit: type=1400 audit(1775387871.338:489): avc: denied { name_bind 0x1000000 } for pid=7820 comm="syz.0.563" path="socket:[20503]" dev="sockfs" ino=20503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.133910][ T40] audit: type=1400 audit(1775387871.428:490): avc: denied { append } for pid=7828 comm="syz.0.565" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 123.139545][ T7831] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 123.139566][ T7834] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 123.144409][ T40] audit: type=1400 audit(1775387871.438:491): avc: denied { ioctl } for pid=7828 comm="syz.0.565" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 123.147416][ T7831] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 123.154795][ T7835] netlink: 49 bytes leftover after parsing attributes in process `syz.2.566'. [ 123.248312][ T7838] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 123.250961][ T7838] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 123.310104][ T7847] netlink: 20 bytes leftover after parsing attributes in process `syz.2.571'. [ 123.345785][ T40] audit: type=1400 audit(1775387871.648:492): avc: denied { relabelfrom } for pid=7850 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 123.606707][ T7865] tmpfs: Bad value for 'mpol' [ 123.638936][ T7864] sp0: Synchronizing with TNC [ 124.071845][ T7893] netlink: 'syz.0.584': attribute type 10 has an invalid length. [ 124.181989][ T7893] mkiss: ax0: crc mode is auto. [ 124.212496][ T7913] nft_compat: unsupported protocol 0 [ 124.280935][ T7930] netlink: 'syz.2.596': attribute type 21 has an invalid length. [ 124.335192][ T7942] openvswitch: netlink: Flow actions attr not present in new flow. [ 124.489032][ T7954] mkiss: ax0: crc mode is auto. [ 124.532859][ T7962] fuse: Unknown parameter '7' [ 124.595742][ T7976] netlink: 'syz.0.608': attribute type 30 has an invalid length. [ 124.638464][ T7986] binder: 7985:7986 ioctl c018620c 200000000140 returned -1 [ 124.677668][ T7987] loop2: detected capacity change from 0 to 7 [ 124.686644][ T7675] Dev loop2: unable to read RDB block 7 [ 124.688711][ T7675] loop2: unable to read partition table [ 124.691050][ T7675] loop2: partition table beyond EOD, truncated [ 124.697255][ T7993] IPVS: Error during creation of socket; terminating [ 124.700711][ T7987] Dev loop2: unable to read RDB block 7 [ 124.704112][ T7987] loop2: unable to read partition table [ 124.706281][ T7987] loop2: partition table beyond EOD, truncated [ 124.708638][ T7987] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 124.775716][ T7998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.778390][ T7998] batadv_slave_0: entered promiscuous mode [ 124.962770][ T63] Bluetooth: hci0: command 0x0406 tx timeout [ 125.028221][ T8017] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.042433][ T5941] Bluetooth: hci0: unexpected event for opcode 0x0c7d [ 125.316006][ T8028] ALSA: seq fatal error: cannot create timer (-22) [ 125.462896][ T8033] netlink: 'syz.0.628': attribute type 4 has an invalid length. [ 125.799598][ T5941] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 125.805167][ T5941] CPU: 2 UID: 0 PID: 5941 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 125.805194][ T5941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.805246][ T5941] Workqueue: hci3 hci_rx_work [ 125.805290][ T5941] Call Trace: [ 125.805297][ T5941] [ 125.805306][ T5941] dump_stack_lvl+0x100/0x190 [ 125.805339][ T5941] sysfs_warn_dup.cold+0x1c/0x28 [ 125.805367][ T5941] sysfs_create_dir_ns+0x24b/0x2b0 [ 125.805396][ T5941] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 125.805424][ T5941] ? find_held_lock+0x2b/0x80 [ 125.805448][ T5941] ? kobject_add_internal+0x25f/0x930 [ 125.805469][ T5941] ? kobject_add_internal+0x25f/0x930 [ 125.805492][ T5941] ? do_raw_spin_unlock+0x145/0x1e0 [ 125.805517][ T5941] kobject_add_internal+0x2c8/0x930 [ 125.805542][ T5941] kobject_add+0x16a/0x1e0 [ 125.805563][ T5941] ? __pfx_kobject_add+0x10/0x10 [ 125.805582][ T5941] ? class_to_subsys+0x10f/0x150 [ 125.805655][ T5941] ? kobject_put+0xb9/0x640 [ 125.805673][ T5941] ? _raw_spin_unlock+0x28/0x50 [ 125.805702][ T5941] device_add+0x294/0x1950 [ 125.805763][ T5941] ? __pfx_dev_set_name+0x10/0x10 [ 125.805789][ T5941] ? __pfx_device_add+0x10/0x10 [ 125.805812][ T5941] ? mgmt_send_event_skb+0x2fb/0x460 [ 125.805845][ T5941] hci_conn_add_sysfs+0x1a3/0x260 [ 125.805873][ T5941] le_conn_complete_evt+0x11eb/0x1f60 [ 125.805904][ T5941] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 125.805936][ T5941] hci_le_conn_complete_evt+0x23c/0x3a0 [ 125.805962][ T5941] ? skb_pull_data+0x15f/0x1e0 [ 125.805987][ T5941] hci_le_meta_evt+0x34a/0x5f0 [ 125.806013][ T5941] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 125.806042][ T5941] hci_event_packet+0x51c/0xcd0 [ 125.806073][ T5941] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 125.806102][ T5941] ? __pfx_hci_event_packet+0x10/0x10 [ 125.806130][ T5941] ? kcov_remote_start+0x374/0x660 [ 125.806156][ T5941] ? lockdep_hardirqs_on+0x78/0x100 [ 125.806189][ T5941] hci_rx_work+0x451/0xfc0 [ 125.806219][ T5941] process_one_work+0xa23/0x19a0 [ 125.806251][ T5941] ? __pfx_process_one_work+0x10/0x10 [ 125.806281][ T5941] ? __pfx_hci_rx_work+0x10/0x10 [ 125.806307][ T5941] worker_thread+0x5ef/0xe50 [ 125.806337][ T5941] ? kthread+0x13a/0x450 [ 125.806354][ T5941] ? __pfx_worker_thread+0x10/0x10 [ 125.806372][ T5941] kthread+0x370/0x450 [ 125.806390][ T5941] ? __pfx_kthread+0x10/0x10 [ 125.806410][ T5941] ret_from_fork+0x754/0xd80 [ 125.806430][ T5941] ? __pfx_ret_from_fork+0x10/0x10 [ 125.806451][ T5941] ? __switch_to+0x7b4/0x1120 [ 125.806473][ T5941] ? __pfx_kthread+0x10/0x10 [ 125.806493][ T5941] ret_from_fork_asm+0x1a/0x30 [ 125.806529][ T5941] [ 125.806554][ T5941] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 125.917239][ T5941] Bluetooth: hci3: failed to register connection device [ 125.966276][ T88] Bluetooth: hci4: Frame reassembly failed (-84) [ 126.145907][ T8077] /dev/nullb0: Can't lookup blockdev [ 127.057309][ T8101] futex_wake_op: syz.1.648 tries to shift op by 32; fix this program [ 127.189208][ T8114] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 127.222592][ T8116] xt_l2tp: v2 tid > 0xffff: 2031748 [ 127.257283][ T8118] openvswitch: netlink: IP tunnel dst address not specified [ 127.296253][ T8123] Failed to initialize the IGMP autojoin socket (err -2) [ 127.335570][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 127.335586][ T40] audit: type=1400 audit(1775387875.638:524): avc: denied { write } for pid=8124 comm="syz.0.656" name="cpuset.effective_cpus" dev="9p" ino=79692207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.346756][ T8126] netlink: 'syz.1.655': attribute type 11 has an invalid length. [ 127.352301][ T8126] __nla_validate_parse: 15 callbacks suppressed [ 127.352313][ T8126] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.655'. [ 127.852690][ T5336] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.012737][ T5941] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 128.012746][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 128.026255][ T5336] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 128.029898][ T5336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.046361][ T5336] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 128.049583][ T5336] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 128.052080][ T5336] usb 5-1: Manufacturer: syz [ 128.055688][ T8145] netlink: 32 bytes leftover after parsing attributes in process `syz.1.661'. [ 128.058191][ T5336] usb 5-1: config 0 descriptor?? [ 128.059139][ T8145] netlink: 32 bytes leftover after parsing attributes in process `syz.1.661'. [ 128.090082][ T40] audit: type=1400 audit(1775387876.388:525): avc: denied { connect } for pid=8149 comm="syz.1.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.091621][ T5941] Bluetooth: hci3: link tx timeout [ 128.094179][ T8147] netlink: 56 bytes leftover after parsing attributes in process `syz.2.662'. [ 128.098653][ T40] audit: type=1400 audit(1775387876.398:526): avc: denied { remount } for pid=8149 comm="syz.1.663" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 128.100620][ T5941] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.115996][ T63] Bluetooth: hci3: link tx timeout [ 128.116440][ T5336] rc_core: IR keymap rc-hauppauge not found [ 128.117682][ T63] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.119579][ T5336] Registered IR keymap rc-empty [ 128.125584][ T40] audit: type=1400 audit(1775387876.428:527): avc: denied { unmount } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 128.126705][ T5336] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 128.139416][ T5336] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 128.276354][ T6017] usb 5-1: USB disconnect, device number 5 [ 128.322375][ T40] audit: type=1400 audit(1775387876.618:528): avc: denied { connect } for pid=8168 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.412034][ T40] audit: type=1400 audit(1775387876.708:529): avc: denied { read } for pid=8176 comm="syz.1.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.447953][ T8180] efs: device does not support 512 byte blocks [ 128.450787][ T8180] device does not support 512 byte blocks [ 128.450787][ T8180] [ 128.463543][ T8181] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.466887][ T40] audit: type=1400 audit(1775387876.768:530): avc: denied { ioctl } for pid=8176 comm="syz.1.672" path="socket:[20962]" dev="sockfs" ino=20962 ioctlcmd=0x5872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.467055][ T8181] netlink: 92 bytes leftover after parsing attributes in process `syz.1.672'. [ 128.499208][ T40] audit: type=1400 audit(1775387876.798:531): avc: denied { accept } for pid=8182 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 128.666451][ T8190] netlink: 'syz.3.676': attribute type 1 has an invalid length. [ 128.678733][ T8190] autofs: Unknown parameter 'װNK*zYaY njPdUwf)}xVjMx-`zR06p)9B' [ 128.692102][ T40] audit: type=1400 audit(1775387876.988:532): avc: denied { mount } for pid=8189 comm="syz.3.676" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 128.708830][ T40] audit: type=1400 audit(1775387877.008:533): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 128.742138][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 128.768226][ T8201] input: syz0 as /devices/virtual/input/input14 [ 128.827401][ T8213] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 128.830476][ T8213] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 128.873900][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.684'. [ 129.038651][ T8228] binder: Bad value for 'max' [ 129.040559][ T8228] binder: Bad value for 'max' [ 129.042270][ T8228] binder: Bad value for 'max' [ 129.044721][ T8228] binder: Bad value for 'max' [ 129.046425][ T8228] binder: Bad value for 'max' [ 129.048088][ T8228] binder: Bad value for 'max' [ 129.049770][ T8228] binder: Bad value for 'max' [ 129.051638][ T8228] binder: Bad value for 'max' [ 129.053775][ T8228] binder: Bad value for 'max' [ 129.055439][ T8228] binder: Bad value for 'max' [ 129.057104][ T8228] binder: Bad value for 'max' [ 129.058798][ T8228] binder: Bad value for 'max' [ 129.060552][ T8228] binder: Bad value for 'max' [ 129.062476][ T8228] binder: Bad value for 'max' [ 129.063348][ T5336] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 129.064684][ T8228] binder: Bad value for 'max' [ 129.069758][ T8228] binder: Bad value for 'max' [ 129.071678][ T8228] binder: Bad value for 'max' [ 129.073825][ T8228] binder: Bad value for 'max' [ 129.075508][ T8228] binder: Bad value for 'max' [ 129.077269][ T8228] binder: Bad value for 'max' [ 129.078945][ T8228] binder: Bad value for 'max' [ 129.114632][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 129.213830][ T5336] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 129.216204][ T5336] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 129.219551][ T5336] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.224520][ T5336] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 129.228069][ T5336] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 129.232618][ T5336] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 129.234973][ T5336] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 129.238377][ T5336] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.242162][ T5336] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 129.247099][ T5336] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 129.251881][ T5336] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 129.255196][ T5336] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 129.259711][ T5336] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.264773][ T5336] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 129.269432][ T5336] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 129.277386][ T5336] usb 7-1: string descriptor 0 read error: -22 [ 129.280326][ T5336] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 129.283784][ T5336] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.313559][ T5336] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 129.384501][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.694'. [ 129.507218][ T8292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.699'. [ 129.510048][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 129.579867][ T8199] delete_channel: no stack [ 129.614172][ T8302] delete_channel: no stack [ 129.642287][ T8307] fuse: Bad value for 'fd' [ 129.927469][ T8322] netlink: 'syz.1.709': attribute type 1 has an invalid length. [ 129.948793][ T8321] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.949949][ T8321] bond1: (slave bond2): making interface the new active one [ 129.954539][ T8321] bond1: (slave bond2): Enslaving as an active interface with an up link [ 129.959734][ T8321] bond1: (slave gretap2): Enslaving as a backup interface with an up link [ 129.961783][ T8321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.101209][ T8332] bond3: option xmit_hash_policy: invalid value (6) [ 130.104569][ T8332] bond3 (unregistering): Released all slaves [ 130.163769][ T5943] Bluetooth: hci3: command 0x0406 tx timeout [ 130.291494][ T8344] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 130.690848][ T8364] netlink: 'syz.0.723': attribute type 1 has an invalid length. [ 130.702750][ T8364] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 130.803417][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 130.804417][ T5941] Bluetooth: hci4: command 0x1003 tx timeout [ 130.909489][ T8390] usb usb8: usbfs: process 8390 (syz.3.731) did not claim interface 0 before use [ 130.914476][ T8390] netlink: 'syz.3.731': attribute type 4 has an invalid length. [ 131.087445][ T8409] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 131.298238][ T8425] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 131.303031][ T8425] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 131.313896][ T8425] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 131.316017][ T8425] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 131.325895][ T8425] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 131.327791][ T8425] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 131.344812][ T8425] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.346721][ T8425] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 131.426698][ T8437] trusted_key: encrypted_key: master key parameter '0' is invalid [ 131.505854][ T8444] netlink: 'syz.1.747': attribute type 1 has an invalid length. [ 131.518135][ T8444] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.591836][ T8458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8458 comm=syz.0.749 [ 131.620481][ T8461] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8461 comm=syz.1.751 [ 131.625887][ T8461] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8461 comm=syz.1.751 [ 131.731903][ T8480] netlink: 'syz.1.756': attribute type 1 has an invalid length. [ 131.765238][ T8480] 8021q: adding VLAN 0 to HW filter on device bond5 [ 131.768304][ T8480] bond4: (slave bond5): making interface the new active one [ 131.770873][ T8480] bond4: (slave bond5): Enslaving as an active interface with an up link [ 131.776139][ T8480] netlink: 'syz.1.756': attribute type 10 has an invalid length. [ 131.778779][ T8480] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 131.785343][ T8480] 8021q: adding VLAN 0 to HW filter on device bond4 [ 131.815162][ T53] usb 7-1: USB disconnect, device number 7 [ 131.932680][ T5996] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 132.086784][ T5996] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 132.090295][ T5996] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.097295][ T5996] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.101296][ T5996] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 132.107564][ T5996] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 132.111237][ T5996] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 132.115445][ T5996] usb 5-1: Manufacturer: syz [ 132.123952][ T5996] usb 5-1: config 0 descriptor?? [ 132.519189][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 132.519204][ T40] audit: type=1400 audit(1775387880.818:551): avc: denied { listen } for pid=8534 comm="syz.2.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.530040][ T40] audit: type=1400 audit(1775387880.818:552): avc: denied { accept } for pid=8534 comm="syz.2.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.729971][ T8472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.734710][ T8472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.748030][ T5996] usbhid 5-1:0.0: can't add hid device: -71 [ 132.749952][ T5996] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 132.754125][ T5996] usb 5-1: USB disconnect, device number 6 [ 132.963912][ C3] bridge0: port 1(1x9) entered learning state [ 132.966544][ C3] bridge0: port 2(bridge_slave_1) entered learning state [ 133.532653][ T1025] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 133.684220][ T1025] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 133.687014][ T1025] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 133.690037][ T1025] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 133.693626][ T1025] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 133.697956][ T1025] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 133.700946][ T1025] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 133.712890][ T1025] usb 5-1: string descriptor 0 read error: -22 [ 133.714964][ T1025] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 133.720111][ T8558] __nla_validate_parse: 15 callbacks suppressed [ 133.720123][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.773'. [ 133.720763][ T1025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.733042][ T1025] usb 5-1: config 0 descriptor?? [ 133.735190][ T8556] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.739174][ T1025] hub 5-1:0.0: bad descriptor, ignoring hub [ 133.741088][ T1025] hub 5-1:0.0: probe with driver hub failed with error -5 [ 133.745306][ T1025] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input15 [ 133.747185][ T8558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.753753][ C3] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.0-1/input0, status -1 [ 134.010511][ T5336] usb 5-1: USB disconnect, device number 7 [ 134.033879][ T1125] sr 2:0:0:0: [sr0] tag#12 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 134.037671][ T1125] sr 2:0:0:0: [sr0] tag#12 Sense Key : Illegal Request [current] [ 134.038879][ T8567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.776'. [ 134.040511][ T1125] sr 2:0:0:0: [sr0] tag#12 Add. Sense: Invalid command operation code [ 134.046178][ T1125] sr 2:0:0:0: [sr0] tag#12 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 134.048978][ T1125] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 134.052372][ T1125] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 134.067683][ T8570] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8570 comm=syz.3.776 [ 134.189328][ T8580] netlink: 'syz.3.779': attribute type 1 has an invalid length. [ 134.203916][ T8580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.210533][ T8580] bond1: entered allmulticast mode [ 134.245062][ T8583] loop4: detected capacity change from 0 to 7 [ 134.248811][ T8583] Buffer I/O error on dev loop4, logical block 0, async page read [ 134.251417][ T8583] Buffer I/O error on dev loop4, logical block 0, async page read [ 134.253977][ T8583] Buffer I/O error on dev loop4, logical block 0, async page read [ 134.256458][ T8583] Buffer I/O error on dev loop4, logical block 0, async page read [ 134.259244][ T8583] Buffer I/O error on dev loop4, logical block 0, async page read [ 134.261733][ T8583] Buffer I/O error on dev loop4, logical block 0, async page read [ 134.264699][ T8583] Buffer I/O error on dev loop4, logical block 0, async page read [ 134.267092][ T8583] ldm_validate_partition_table(): Disk read failed. [ 134.269244][ T8583] Buffer I/O error on dev loop4, logical block 0, async page read [ 134.271691][ T8583] Buffer I/O error on dev loop4, logical block 0, async page read [ 134.274206][ T8583] Dev loop4: unable to read RDB block 0 [ 134.276015][ T8583] loop4: unable to read partition table [ 134.277835][ T8583] loop4: partition table beyond EOD, truncated [ 134.279905][ T8583] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 134.298989][ T5337] ldm_validate_partition_table(): Disk read failed. [ 134.301278][ T5337] Dev loop4: unable to read RDB block 0 [ 134.303837][ T5337] loop4: unable to read partition table [ 134.305759][ T5337] loop4: partition table beyond EOD, truncated [ 134.478066][ T8591] kvm: emulating exchange as write [ 134.483986][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 134.487665][ T8591] netlink: 16 bytes leftover after parsing attributes in process `syz.3.783'. [ 134.494254][ T40] audit: type=1400 audit(1775387882.798:553): avc: denied { map } for pid=8590 comm="syz.3.783" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 134.511940][ T40] audit: type=1400 audit(1775387882.798:554): avc: denied { execute } for pid=8590 comm="syz.3.783" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 134.880609][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 135.087311][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.791'. [ 135.384654][ T8623] netlink: 'syz.0.795': attribute type 1 has an invalid length. [ 135.410430][ T8623] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.447923][ T8623] bond3: (slave veth3): Enslaving as an active interface with a down link [ 135.458420][ T8623] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 135.461910][ T8623] bond3: (slave batadv1): making interface the new active one [ 135.466868][ T8623] batadv1: entered promiscuous mode [ 135.468900][ T8623] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 135.475511][ T8623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8623 comm=syz.0.795 [ 135.541423][ T40] audit: type=1400 audit(1775387883.838:555): avc: denied { connect } for pid=8631 comm="syz.0.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 135.678861][ T8641] binder: 8640:8641 ioctl 7001 0 returned -22 [ 135.731656][ T40] audit: type=1400 audit(1775387884.028:556): avc: denied { map } for pid=8636 comm="syz.3.800" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 135.755219][ T8639] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 135.758586][ T8639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'. [ 135.761683][ T8639] netlink: 'syz.0.801': attribute type 5 has an invalid length. [ 135.784828][ T8650] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 135.917069][ T8655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.920274][ T8655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.925102][ T8655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.928637][ T8655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.968529][ T40] audit: type=1326 audit(1775387884.268:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.0.806" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1372d9c819 code=0x0 [ 136.025000][ T40] audit: type=1400 audit(1775387884.328:558): avc: denied { execute } for pid=8656 comm="syz.2.807" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 136.034319][ T8657] openvswitch: netlink: IP tunnel TTL not specified. [ 136.073354][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.806'. [ 136.143517][ T8666] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 136.266044][ T8672] smb3: Unknown parameter 'nocasend/timer' [ 136.468002][ T8683] netlink: 124 bytes leftover after parsing attributes in process `syz.2.815'. [ 136.572869][ T53] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 136.594479][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.816'. [ 136.713577][ T40] audit: type=1400 audit(1775387885.018:559): avc: denied { read } for pid=8701 comm="syz.1.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 136.753965][ T53] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 136.757086][ T53] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 136.762574][ T53] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 136.765763][ T53] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 136.769286][ T53] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 136.783420][ T53] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 136.793702][ T53] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 136.796501][ T53] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 136.799050][ T53] usb 5-1: Product: syz [ 136.800377][ T53] usb 5-1: Manufacturer: syz [ 136.814199][ T8681] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 136.817598][ T53] cdc_wdm 5-1:1.0: skipping garbage [ 136.819669][ T53] cdc_wdm 5-1:1.0: skipping garbage [ 136.825689][ T53] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 136.827621][ T53] cdc_wdm 5-1:1.0: Unknown control protocol [ 137.050892][ T40] audit: type=1400 audit(1775387885.348:560): avc: denied { read write } for pid=8680 comm="syz.0.814" name="cdc-wdm0" dev="devtmpfs" ino=3106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 137.052452][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 137.060930][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 137.064157][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 137.066241][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 137.068329][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 137.070466][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 137.072651][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 137.074710][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 137.076820][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 137.079024][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 137.081188][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 137.083210][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 137.085492][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 137.087581][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 137.089758][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 137.091828][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 137.093913][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 137.095916][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 137.098085][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 137.100222][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 137.108403][ T1025] usb 5-1: USB disconnect, device number 8 [ 137.110359][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 137.306755][ T8681] netlink: 'syz.0.814': attribute type 7 has an invalid length. [ 137.309247][ T8681] netlink: 'syz.0.814': attribute type 8 has an invalid length. [ 137.500284][ T8721] vcan0: entered allmulticast mode [ 137.551216][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 137.551232][ T40] audit: type=1400 audit(1775387885.848:563): avc: denied { bind } for pid=8722 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.559496][ T40] audit: type=1400 audit(1775387885.848:562): avc: denied { bind } for pid=8722 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.660024][ T40] audit: type=1400 audit(1775387885.958:565): avc: denied { mounton } for pid=8722 comm="syz.1.828" path="/syzcgroup/unified/syz1" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 137.660150][ T8723] /dev/sr0: Can't lookup blockdev [ 137.660151][ T8725] /dev/sr0: Can't lookup blockdev [ 137.668323][ T40] audit: type=1400 audit(1775387885.958:564): avc: denied { mounton } for pid=8722 comm="syz.1.828" path="/syzcgroup/unified/syz1" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 137.712742][ T40] audit: type=1400 audit(1775387886.008:566): avc: denied { execute } for pid=8726 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 137.734103][ T40] audit: type=1400 audit(1775387886.038:567): avc: denied { execute_no_trans } for pid=8726 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 137.812962][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.816505][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.820028][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.824510][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.827232][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 137.835319][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.842483][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.846283][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.850149][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.855771][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 137.872293][ T8727] Failed to initialize the IGMP autojoin socket (err -2) [ 137.932099][ T8737] blktrace: Concurrent blktraces are not allowed on sg0 [ 138.056692][ T8727] chnl_net:caif_netlink_parms(): no params data found [ 138.087027][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.089162][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.183499][ T1025] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 138.206988][ T8727] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.209818][ T8727] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.215098][ T8727] bridge_slave_0: entered allmulticast mode [ 138.218672][ T8727] bridge_slave_0: entered promiscuous mode [ 138.223797][ T8727] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.226250][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.228863][ T8727] bridge_slave_1: entered allmulticast mode [ 138.231746][ T8727] bridge_slave_1: entered promiscuous mode [ 138.279776][ T8727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.303560][ T8727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.354666][ T1025] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 138.356819][ T8727] team0: Port device team_slave_0 added [ 138.364922][ T1025] usb 5-1: config 0 has no interface number 0 [ 138.367160][ T1025] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 37791, setting to 8 [ 138.380296][ T8727] team0: Port device team_slave_1 added [ 138.388491][ T1025] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 138.391903][ T1025] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.398917][ T1025] usb 5-1: config 0 descriptor?? [ 138.401200][ T8735] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.407821][ T1025] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 138.415384][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.417969][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.427554][ T8727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.438164][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.440295][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.451855][ T8727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.504932][ T8752] : entered promiscuous mode [ 138.533275][ T8727] hsr_slave_0: entered promiscuous mode [ 138.535566][ T8727] hsr_slave_1: entered promiscuous mode [ 138.537765][ T8727] debugfs: 'hsr0' already exists in 'hsr' [ 138.539530][ T8727] Cannot create hsr debugfs directory [ 138.550516][ T40] audit: type=1400 audit(1775387886.848:568): avc: denied { getopt } for pid=8756 comm="syz.1.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 138.615466][ T1025] usb 5-1: USB disconnect, device number 9 [ 138.623312][ T8768] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.634803][ T40] audit: type=1400 audit(1775387886.938:569): avc: denied { setopt } for pid=8734 comm="syz.0.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.770237][ T8778] fuse: Bad value for 'fd' [ 138.772121][ T8778] fuse: Bad value for 'fd' [ 138.791523][ T40] audit: type=1400 audit(1775387887.088:570): avc: denied { read } for pid=8785 comm="syz.2.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 138.837223][ T8727] netdevsim netdevsim4 netdevsim0: renamed from eth2 [ 138.850626][ T8727] netdevsim netdevsim4 netdevsim1: renamed from eth3 [ 138.861588][ T5996] libceph: mon0 (1)[c::]:6789 connect error [ 138.868298][ T8727] netdevsim netdevsim4 netdevsim2: renamed from eth4 [ 138.868889][ T5996] libceph: mon0 (1)[b::]:6789 connect error [ 138.877934][ T8727] netdevsim netdevsim4 netdevsim3: renamed from eth5 [ 138.939243][ T8790] netlink: 'syz.0.848': attribute type 10 has an invalid length. [ 138.942177][ T8804] netlink: 'syz.0.848': attribute type 10 has an invalid length. [ 139.017579][ T8727] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.032818][ T8244] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.035144][ T8244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.081781][ T8244] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.085567][ T8244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.125322][ T5996] libceph: mon0 (1)[c::]:6789 connect error [ 139.133405][ T5996] libceph: mon0 (1)[b::]:6789 connect error [ 139.290330][ T8727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.451016][ T8841] netlink: 'syz.1.855': attribute type 1 has an invalid length. [ 139.471345][ T8727] veth0_vlan: entered promiscuous mode [ 139.480537][ T8727] veth1_vlan: entered promiscuous mode [ 139.503358][ T1328] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 139.541276][ T8727] veth0_macvtap: entered promiscuous mode [ 139.551504][ T8727] veth1_macvtap: entered promiscuous mode [ 139.598498][ T8727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.615031][ T8727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.621816][ T8727] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 139.629397][ T8727] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 139.634110][ T5996] libceph: mon0 (1)[c::]:6789 connect error [ 139.635916][ T8727] wireguard: wg0: Could not create IPv4 socket [ 139.639596][ T8727] wireguard: wg1: Could not create IPv4 socket [ 139.643464][ T8727] wireguard: wg2: Could not create IPv4 socket [ 139.643563][ T5996] libceph: mon0 (1)[b::]:6789 connect error [ 139.662816][ T1328] usb 5-1: Using ep0 maxpacket: 8 [ 139.664001][ T8797] ceph: No mds server is up or the cluster is laggy [ 139.664001][ T8793] ceph: No mds server is up or the cluster is laggy [ 139.666301][ T1328] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 139.677319][ T1328] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 139.680845][ T1328] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.691298][ T1328] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.696456][ T1328] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 139.704801][ T1328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.928193][ T1328] usb 5-1: GET_CAPABILITIES returned 0 [ 139.929945][ T1328] usbtmc 5-1:16.0: can't read capabilities [ 140.041249][ T40] audit: type=1400 audit(1775387888.338:571): avc: denied { map } for pid=8857 comm="syz.2.861" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 140.052306][ T8858] netlink: 'syz.2.861': attribute type 1 has an invalid length. [ 140.057047][ T8858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.060370][ T8858] binder: 8857:8858 ioctl c0306201 2000000003c0 returned -14 [ 140.130500][ T8831] __nla_validate_parse: 5 callbacks suppressed [ 140.130519][ T8831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'. [ 140.158738][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 140.165310][ T8831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.854'. [ 140.172435][ T1025] usb 5-1: USB disconnect, device number 10 [ 140.217252][ T8872] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.220496][ T8872] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.234779][ T8872] erspan1: left promiscuous mode [ 140.437059][ T8912] XFS (nbd2): no-recovery mounts must be read-only. [ 141.018483][ T8952] netlink: 'syz.0.881': attribute type 4 has an invalid length. [ 141.030275][ T8952] netlink: 'syz.0.881': attribute type 4 has an invalid length. [ 141.307286][ T8978] /dev/nullb0: Can't lookup blockdev [ 141.436397][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'. [ 141.440440][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'. [ 141.453904][ T8993] netlink: 7 bytes leftover after parsing attributes in process `syz.1.891'. [ 141.584153][ T5297] IPVS: starting estimator thread 0... [ 141.672754][ T9012] IPVS: using max 44 ests per chain, 105600 per kthread [ 141.737772][ T9020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.896'. [ 142.500350][ T9057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.899'. [ 142.503596][ T9057] netlink: 8456 bytes leftover after parsing attributes in process `syz.1.899'. [ 142.716946][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 142.720803][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 142.728204][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 142.732882][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 142.737084][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 142.751645][ T9077] Failed to initialize the IGMP autojoin socket (err -2) [ 142.925550][ T1025] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 143.082751][ T9092] Failed to initialize the IGMP autojoin socket (err -2) [ 143.087942][ T1025] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 143.090854][ T1025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.094360][ T1025] usb 5-1: Product: syz [ 143.096599][ T1025] usb 5-1: Manufacturer: syz [ 143.098158][ T1025] usb 5-1: SerialNumber: syz [ 143.104518][ T1025] usb 5-1: config 0 descriptor?? [ 143.272388][ T9108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.906'. [ 143.297781][ T9113] IPv6: NLM_F_CREATE should be specified when creating new route [ 143.313601][ T1025] usb 5-1: USB disconnect, device number 11 [ 143.638870][ T9131] netlink: 'syz.2.908': attribute type 1 has an invalid length. [ 143.939189][ T9152] GUP no longer grows the stack in syz.0.910 (9152): 200000004000-200000006000 (200000002000) [ 143.943017][ T9152] CPU: 1 UID: 0 PID: 9152 Comm: syz.0.910 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.943044][ T9152] Tainted: [L]=SOFTLOCKUP [ 143.943049][ T9152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.943056][ T9152] Call Trace: [ 143.943060][ T9152] [ 143.943066][ T9152] dump_stack_lvl+0x100/0x190 [ 143.943089][ T9152] gup_vma_lookup.cold+0x83/0x96 [ 143.943105][ T9152] __get_user_pages+0x241/0x34d0 [ 143.943125][ T9152] ? find_held_lock+0x2b/0x80 [ 143.943139][ T9152] ? mtree_load+0x311/0xa40 [ 143.943157][ T9152] ? __pfx___get_user_pages+0x10/0x10 [ 143.943174][ T9152] get_user_pages_remote+0x3d2/0xb10 [ 143.943187][ T9152] ? mas_new_root+0x690/0x6e0 [ 143.943206][ T9152] ? __pfx_get_user_pages_remote+0x10/0x10 [ 143.943219][ T9152] ? __access_remote_vm+0x84d/0xa70 [ 143.943239][ T9152] __access_remote_vm+0x3ba/0xa70 [ 143.943260][ T9152] ? do_raw_spin_lock+0x128/0x260 [ 143.943273][ T9152] ? __pfx___access_remote_vm+0x10/0x10 [ 143.943293][ T9152] ? alloc_pages_noprof+0x238/0x390 [ 143.943306][ T9152] proc_pid_cmdline_read+0x4f2/0x8c0 [ 143.943324][ T9152] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 143.943342][ T9152] ? rw_verify_area+0xce/0x6d0 [ 143.943358][ T9152] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 143.943389][ T9152] vfs_readv+0x5d8/0x8d0 [ 143.943409][ T9152] ? __pfx_vfs_readv+0x10/0x10 [ 143.943435][ T9152] ? __fget_files+0x21f/0x3d0 [ 143.943453][ T9152] ? do_preadv+0x1ac/0x270 [ 143.943468][ T9152] do_preadv+0x1ac/0x270 [ 143.943486][ T9152] ? __pfx_do_preadv+0x10/0x10 [ 143.943508][ T9152] do_syscall_64+0x106/0xf80 [ 143.943527][ T9152] ? clear_bhb_loop+0x40/0x90 [ 143.943546][ T9152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.943564][ T9152] RIP: 0033:0x7f1372d9c819 [ 143.943578][ T9152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.943594][ T9152] RSP: 002b:00007f1373cd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 143.943613][ T9152] RAX: ffffffffffffffda RBX: 00007f1373015fa0 RCX: 00007f1372d9c819 [ 143.943623][ T9152] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 143.943631][ T9152] RBP: 00007f1372e32c91 R08: 00000000fffffff9 R09: 0000000000000000 [ 143.943640][ T9152] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 143.943650][ T9152] R13: 00007f1373016038 R14: 00007f1373015fa0 R15: 00007ffdc6509e28 [ 143.943672][ T9152] [ 144.037686][ C1] hpet_rtc_timer_reinit: 3 callbacks suppressed [ 144.037703][ C1] hpet: Lost 5 RTC interrupts [ 144.168601][ T40] audit: type=1400 audit(1775387892.468:575): avc: denied { firmware_load } for pid=9130 comm="syz.2.908" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 144.234238][ T9179] overlay: Bad value for 'workdir' [ 144.294176][ T9189] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 144.347803][ T9200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.490836][ T9200] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.493344][ T9200] bridge0: port 1(1x9) entered disabled state [ 144.532910][ T5336] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 144.587510][ T9200] batadv_slave_0: left promiscuous mode [ 144.594522][ T9200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.692755][ T5336] usb 5-1: Using ep0 maxpacket: 16 [ 144.697009][ T5336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.700454][ T5336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.704169][ T5336] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 144.707516][ T5336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.711825][ T5336] usb 5-1: config 0 descriptor?? [ 144.716234][ T9200] vlan2: left allmulticast mode [ 144.717937][ T9200] bond0: left allmulticast mode [ 144.719433][ T9200] bond_slave_0: left allmulticast mode [ 144.723491][ T1328] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 144.749069][ T9200] vcan0: left allmulticast mode [ 144.779707][ T9219] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.783166][ T9219] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.786409][ T9219] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.789564][ T9219] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.806790][ T5941] Bluetooth: hci2: command tx timeout [ 144.817066][ T40] audit: type=1400 audit(1775387893.118:576): avc: denied { mounton } for pid=9244 comm="syz.1.925" path="/294/file0" dev="tmpfs" ino=1549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 144.817113][ T9246] 9pnet_fd: Insufficient options for proto=fd [ 144.885594][ T1328] usb 7-1: Using ep0 maxpacket: 16 [ 144.889487][ T1328] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.891150][ T40] audit: type=1400 audit(1775387893.188:577): avc: denied { bind } for pid=9248 comm="syz.1.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 144.898427][ T1328] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.903813][ T9249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9249 comm=syz.1.926 [ 144.907049][ T1328] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 144.917954][ T1328] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.922907][ T1328] usb 7-1: config 0 descriptor?? [ 145.005075][ T9077] netdevsim netdevsim4 netdevsim0: renamed from eth2 [ 145.016765][ T9077] netdevsim netdevsim4 netdevsim1: renamed from eth3 [ 145.025594][ T9077] netdevsim netdevsim4 netdevsim2: renamed from eth4 [ 145.034425][ T9077] netdevsim netdevsim4 netdevsim3: renamed from eth5 [ 145.138190][ T5336] corsair 0003:1B1C:1B02.0002: hidraw1: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 145.160384][ T1328] usbhid 7-1:0.0: can't add hid device: -71 [ 145.163459][ T1328] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 145.172758][ T1328] usb 7-1: USB disconnect, device number 8 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x8f000) [ 145.227536][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 145.229911][ T1115] ata1: failed to read log page 10h (errno=-5) [ 145.234683][ T1115] ata1.00: NCQ disabled due to excessive errors [ 145.237587][ T1115] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 145.240374][ T1115] ata1.00: irq_stat 0x41000008 [ 145.242040][ T1115] ata1.00: failed command: READ FPDMA QUEUED [ 145.248875][ T1115] ata1.00: cmd 60/78:70:de:84:03/04:00:00:00:00/40 tag 14 ncq dma 585728 in [ 145.248875][ T1115] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 145.254841][ T1115] ata1.00: status: { DRDY } [ 145.256463][ T1115] ata1.00: error: { ABRT } [ 145.259249][ T1115] ata1.00: configured for UDMA/100 [ 145.261248][ T1115] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 145.264394][ T1115] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 145.266865][ T1115] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 145.269531][ T1115] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 03 84 de 00 04 78 00 [ 145.272695][ T1115] I/O error, dev sda, sector 230622 op 0x0:(READ) flags 0x80700 phys_seg 101 prio class 2 [ 145.276554][ T1115] ata1: EH complete [ 145.360391][ T5336] corsair 0003:1B1C:1B02.0002: Failed to get K90 initial state (error -71). [ 145.380766][ T5336] usb 5-1: USB disconnect, device number 12 [ 145.401132][ T9077] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 145.410488][ T9077] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 145.421017][ T9077] wireguard: wg0: Could not create IPv4 socket [ 145.430814][ T9077] wireguard: wg1: Could not create IPv4 socket [ 145.434455][ T9077] wireguard: wg2: Could not create IPv4 socket [ 145.530711][ T9284] __nla_validate_parse: 5 callbacks suppressed [ 145.530723][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 145.705764][ T9297] Failed to initialize the IGMP autojoin socket (err -2) [ 145.897515][ T9313] batman_adv: batadv0: Interface deactivated: dummy0 [ 145.906769][ T9313] batman_adv: batadv0: Removing interface: dummy0 [ 145.910900][ T9312] netlink: 14 bytes leftover after parsing attributes in process `syz.2.933'. [ 146.085268][ T9333] Failed to initialize the IGMP autojoin socket (err -2) [ 146.115981][ T9330] Failed to get privilege flags for destination (handle=0x2:0x0) [ 146.183201][ T9343] Failed to initialize the IGMP autojoin socket (err -2) [ 146.213224][ T9349] xt_limit: Overflow, try lower: 271964/0 [ 146.217313][ T40] audit: type=1400 audit(1775387894.518:578): avc: denied { mounton } for pid=9345 comm="syz.0.939" path="/proc/734/task" dev="proc" ino=28394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 146.217858][ T9349] netlink: 'syz.1.940': attribute type 1 has an invalid length. [ 146.277747][ T9357] netlink: 112 bytes leftover after parsing attributes in process `syz.1.941'. [ 146.324658][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.942'. [ 146.439073][ T9374] netlink: 'syz.1.945': attribute type 1 has an invalid length. [ 146.442280][ T9374] netlink: 'syz.1.945': attribute type 3 has an invalid length. [ 146.452614][ T9374] netlink: 224 bytes leftover after parsing attributes in process `syz.1.945'. [ 146.494696][ T9379] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 146.544179][ T9384] xfs: Unknown parameter 'norecovery' [ 146.581339][ T9387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.948'. [ 146.589169][ T9389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.948'. [ 146.665143][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'. [ 146.669309][ T9395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.951'. [ 146.696868][ T8252] batadv1: left promiscuous mode [ 146.977520][ T9428] netlink: 'syz.1.957': attribute type 1 has an invalid length. [ 146.980258][ T9428] netlink: 192 bytes leftover after parsing attributes in process `syz.1.957'. [ 147.135284][ T9436] ip6gre1: entered promiscuous mode [ 147.137729][ T9436] ip6gre1: entered allmulticast mode [ 147.143016][ T8239] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.152872][ T8239] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.172830][ T5297] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.202812][ T5336] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.376600][ T5336] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.464012][ T9464] bond2: Unable to set up delay as MII monitoring is disabled [ 147.468939][ T9464] bond2 (unregistering): Released all slaves [ 147.533457][ T40] audit: type=1400 audit(1775387895.828:579): avc: denied { setopt } for pid=9469 comm="syz.0.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 147.542363][ T40] audit: type=1400 audit(1775387895.838:580): avc: denied { ioctl } for pid=9469 comm="syz.0.965" path="socket:[30868]" dev="sockfs" ino=30868 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 147.552804][ T40] audit: type=1400 audit(1775387895.838:581): avc: denied { write } for pid=9469 comm="syz.0.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 147.662413][ T40] audit: type=1400 audit(1775387895.958:582): avc: denied { ioctl } for pid=9482 comm="syz.0.968" path="socket:[30891]" dev="sockfs" ino=30891 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 147.689516][ T40] audit: type=1400 audit(1775387895.968:583): avc: denied { write } for pid=9482 comm="syz.0.968" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 147.830602][ T9512] Illegal XDP return value 3732587310 on prog (id 174) dev N/A, expect packet loss! [ 148.542857][ T5996] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 148.695139][ T5996] usb 7-1: Using ep0 maxpacket: 32 [ 148.699006][ T5996] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 148.702434][ T5996] usb 7-1: config 0 has no interface number 0 [ 148.705523][ T5996] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 148.710190][ T5996] usb 7-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 148.717767][ T5996] usb 7-1: config 0 interface 196 has no altsetting 0 [ 148.723129][ T5996] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 148.727224][ T5996] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.730548][ T5996] usb 7-1: Product: syz [ 148.732295][ T5996] usb 7-1: Manufacturer: syz [ 148.734437][ T5996] usb 7-1: SerialNumber: syz [ 148.741232][ T5996] usb 7-1: config 0 descriptor?? [ 148.744486][ T9567] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.954307][ T5996] ipheth 7-1:0.196: Unable to find endpoints [ 148.963754][ T5996] usb 7-1: USB disconnect, device number 9 [ 149.098847][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 149.098862][ T40] audit: type=1400 audit(1775387897.398:589): avc: denied { accept } for pid=9610 comm="syz.0.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 149.102000][ T9611] overlayfs: missing 'workdir' [ 150.065318][ T9671] netlink: 'syz.2.1003': attribute type 11 has an invalid length. [ 150.069686][ T40] audit: type=1400 audit(1775387898.368:590): avc: denied { connect } for pid=9670 comm="syz.2.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 150.093310][ T40] audit: type=1400 audit(1775387898.368:591): avc: denied { ioctl } for pid=9670 comm="syz.2.1003" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 150.318795][ T9696] ubi0: attaching mtd0 [ 150.320644][ T9696] ubi0 error: ubi_attach_mtd_dev: bad VID header (2097410) or data offsets (2097474) [ 150.751660][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.757797][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.762314][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.766251][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.769614][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.787950][ T9721] Failed to initialize the IGMP autojoin socket (err -2) [ 150.802769][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.803273][ T9727] __nla_validate_parse: 5 callbacks suppressed [ 150.803287][ T9727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 150.824286][ T9727] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 150.830327][ T9727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1015'. [ 151.459557][ T9721] netdevsim netdevsim4 netdevsim0: renamed from eth2 [ 151.483678][ T9721] netdevsim netdevsim4 netdevsim1: renamed from eth3 [ 151.496321][ T9721] netdevsim netdevsim4 netdevsim2: renamed from eth4 [ 151.506142][ T9721] netdevsim netdevsim4 netdevsim3: renamed from eth5 [ 151.920093][ T9721] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 151.933655][ T9721] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 151.941569][ T9721] wireguard: wg0: Could not create IPv4 socket [ 151.948123][ T9721] wireguard: wg1: Could not create IPv4 socket [ 151.952168][ T9721] wireguard: wg2: Could not create IPv4 socket [ 152.189719][ T9810] Failed to initialize the IGMP autojoin socket (err -2) [ 152.225301][ T9813] overlayfs: conflicting options: userxattr,redirect_dir=on [ 152.370420][ T9825] overlay: Bad value for 'workdir' [ 152.512659][ T5297] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 152.683893][ T5297] usb 7-1: config 0 has no interfaces? [ 152.685743][ T5297] usb 7-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 152.688839][ T5297] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.692898][ T5297] usb 7-1: config 0 descriptor?? [ 152.718674][ T9838] futex_wake_op: syz.0.1038 tries to shift op by -1; fix this program [ 152.731107][ T9830] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1038'. [ 152.797223][ T40] audit: type=1400 audit(1775387901.098:592): avc: denied { module_request } for pid=9841 comm="syz.1.1040" kmod="can-proto-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 152.821327][ T9842] can: request_module (can-proto-0) failed. [ 152.975833][ T40] audit: type=1400 audit(1775387901.278:593): avc: denied { bpf } for pid=9853 comm="syz.1.1041" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.063255][ T9870] overlayfs: conflicting lowerdir path [ 153.092681][ T9873] netlink: 'syz.1.1045': attribute type 16 has an invalid length. [ 153.095247][ T9873] netlink: 'syz.1.1045': attribute type 17 has an invalid length. [ 153.146959][ T9879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1047'. [ 153.990995][ T9920] /dev/sr0: Can't lookup blockdev [ 153.995785][ T9920] fuse: Bad value for 'fd' [ 154.041148][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'. [ 154.045116][ T40] audit: type=1400 audit(1775387902.348:594): avc: denied { mount } for pid=9923 comm="syz.1.1052" name="/" dev="autofs" ino=30229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 154.064716][ T40] audit: type=1400 audit(1775387902.368:595): avc: denied { perfmon } for pid=9923 comm="syz.1.1052" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.126068][ T40] audit: type=1400 audit(1775387902.428:596): avc: denied { write } for pid=9931 comm="syz.1.1054" name="icmp" dev="proc" ino=4026533068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 154.215764][ T40] audit: type=1400 audit(1775387902.518:597): avc: denied { setopt } for pid=9943 comm="syz.1.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.140078][ T9983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.175788][ T40] audit: type=1800 audit(1775387903.478:598): pid=9814 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1030" name="/" dev="fuse" ino=9 res=0 errno=0 [ 155.192232][ T1328] usb 7-1: USB disconnect, device number 10 [ 155.237228][ T9989] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 155.240063][ T9989] team0: Device ipvlan2 is already an upper device of the team interface [ 155.359407][ T9996] overlayfs: failed to set uuid (261/file1, err=-1); falling back to uuid=null. [ 155.362465][ T9996] overlayfs: failed to verify upper root origin [ 155.454741][ T40] audit: type=1400 audit(1775387903.758:599): avc: denied { bind } for pid=10001 comm="syz.2.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.500377][T10006] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1064'. [ 155.556459][T10010] loop9: detected capacity change from 0 to 7 [ 155.568959][T10010] Dev loop9: unable to read RDB block 7 [ 155.570868][T10010] loop9: unable to read partition table [ 155.574410][T10010] loop9: partition table beyond EOD, truncated [ 155.577314][T10010] loop_reread_partitions: partition scan of loop9 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 155.595151][ T40] audit: type=1400 audit(1775387903.888:600): avc: denied { getopt } for pid=10009 comm="syz.2.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.766650][T10021] comedi comedi0: pcl812: a I/O base address must be specified [ 155.844822][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1069'. [ 156.108493][ T40] audit: type=1400 audit(1775387904.408:601): avc: denied { mount } for pid=10052 comm="syz.0.1076" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 156.168457][T10060] overlayfs: missing 'lowerdir' [ 156.182070][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'. [ 156.194781][T10068] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 156.252059][ T40] audit: type=1400 audit(1775387904.548:602): avc: denied { setopt } for pid=10077 comm="syz.0.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 156.252214][T10078] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1081'. [ 156.300629][T10082] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1082'. [ 156.312777][T10085] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1082'. [ 156.346979][ T40] audit: type=1400 audit(1775387904.648:603): avc: denied { getopt } for pid=10086 comm="syz.1.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.472050][ T40] audit: type=1326 audit(1775387904.768:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.1.1090" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fab9c819 code=0x7ffc0000 [ 156.485105][ T40] audit: type=1326 audit(1775387904.768:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.1.1090" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fab9c819 code=0x7ffc0000 [ 156.839115][T10165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1101'. [ 157.349201][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.360620][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.370210][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.377893][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.387367][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.409115][T10241] Failed to initialize the IGMP autojoin socket (err -2) [ 157.547444][T10262] tun0: tun_chr_ioctl cmd 1074025675 [ 157.549815][T10262] tun0: persist disabled [ 157.574461][ T6017] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 157.743063][ T6017] usb 7-1: Using ep0 maxpacket: 8 [ 157.752986][ T6017] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 157.762682][ T6017] usb 7-1: config 179 has no interface number 0 [ 157.765113][ T6017] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 157.768672][ T6017] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 157.772289][ T6017] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 157.779937][ T6017] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 157.786896][ T6017] usb 7-1: config 179 interface 65 has no altsetting 0 [ 157.789365][ T6017] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 157.792263][ T6017] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.819223][ T6017] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input17 [ 157.825020][T10298] netlink: 'syz.1.1119': attribute type 1 has an invalid length. [ 157.882828][ T5321] input input17: unable to receive magic message: -110 [ 157.894035][ T5321] input input17: unable to receive magic message: -32 [ 157.898592][ T5321] input input17: unable to receive magic message: -32 [ 157.914876][ T5321] input input17: unable to receive magic message: -32 [ 157.928877][ T5321] input input17: unable to receive magic message: -32 [ 157.943129][ T5321] input input17: unable to receive magic message: -32 [ 158.010769][T10240] input input17: unable to receive magic message: -32 [ 158.055269][T10321] bridge6: entered promiscuous mode [ 158.129664][T10319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1124'. [ 158.135406][T10319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1124'. [ 158.146777][T10241] netdevsim netdevsim4 netdevsim0: renamed from eth2 [ 158.155471][T10241] netdevsim netdevsim4 netdevsim1: renamed from eth3 [ 158.164492][T10241] netdevsim netdevsim4 netdevsim2: renamed from eth4 [ 158.174218][T10241] netdevsim netdevsim4 netdevsim3: renamed from eth5 [ 158.254708][T10343] netlink: 'syz.1.1129': attribute type 9 has an invalid length. [ 158.257650][T10343] netlink: 'syz.1.1129': attribute type 11 has an invalid length. [ 158.260120][T10343] netlink: 'syz.1.1129': attribute type 12 has an invalid length. [ 158.264028][T10343] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1129'. [ 158.414352][T10367] IPv6: NLM_F_CREATE should be specified when creating new route [ 158.421083][T10367] overlay: Bad value for 'workdir' [ 158.472218][T10241] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 158.472501][T10371] netlink: 'syz.1.1134': attribute type 32 has an invalid length. [ 158.492675][T10241] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 158.501584][T10241] wireguard: wg0: Could not create IPv4 socket [ 158.509177][T10241] wireguard: wg1: Could not create IPv4 socket [ 158.514909][T10241] wireguard: wg2: Could not create IPv4 socket [ 158.572754][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.701636][T10391] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1136'. [ 158.704674][T10391] openvswitch: netlink: Missing key (keys=40, expected=100) [ 158.992494][T10402] fuse: Bad value for 'fd' [ 159.033350][T10415] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 159.037750][T10415] block device autoloading is deprecated and will be removed. [ 159.377438][T10469] netlink: 'syz.0.1155': attribute type 21 has an invalid length. [ 159.413688][T10476] syz.0.1157 (10476): /proc/10472/oom_adj is deprecated, please use /proc/10472/oom_score_adj instead. [ 159.705355][T10510] fuse: Bad value for 'fd' [ 159.727382][T10515] netlink: 'syz.1.1166': attribute type 1 has an invalid length. [ 159.822449][ T40] kauditd_printk_skb: 124 callbacks suppressed [ 159.822462][ T40] audit: type=1400 audit(1775387908.118:730): avc: denied { read } for pid=10523 comm="syz.0.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 159.851666][ T40] audit: type=1400 audit(1775387908.148:731): avc: denied { setopt } for pid=10525 comm="syz.1.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 160.263425][ T6017] usb 7-1: USB disconnect, device number 11 [ 160.265395][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 160.404800][ T40] audit: type=1400 audit(1775387908.708:732): avc: denied { mounton } for pid=10567 comm="syz.2.1175" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 160.404936][T10568] nfs4: Bad value for 'source' [ 160.456120][T10573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.479389][ T40] audit: type=1400 audit(1775387908.778:733): avc: denied { set_context_mgr } for pid=10578 comm="syz.2.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 160.492764][T10579] binder: 10578:10579 ioctl c0405610 200000000280 returned -22 [ 160.496097][T10579] binder: 10578:10579 unknown command 0 [ 160.497958][T10579] binder: 10578:10579 ioctl c0306201 200000000280 returned -22 [ 160.534900][T10586] fuse: Bad value for 'fd' [ 160.537485][ T40] audit: type=1400 audit(1775387908.838:734): avc: denied { mounton } for pid=10584 comm="syz.1.1180" path="/416/file0" dev="tmpfs" ino=2200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 161.990696][T10704] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 161.999312][T10704] netlink: 'syz.2.1193': attribute type 1 has an invalid length. [ 162.019914][T10704] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 162.025953][T10704] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 162.037329][T10713] overlayfs: failed lookup in lower (newroot/421, name='file0', err=-40): overlapping layers [ 162.045708][T10713] __nla_validate_parse: 2 callbacks suppressed [ 162.045723][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1195'. [ 162.067479][ T40] audit: type=1400 audit(1775387910.368:735): avc: denied { create } for pid=10703 comm="syz.2.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 162.073693][T10715] bond2: (slave gretap1): making interface the new active one [ 162.078529][ T40] audit: type=1400 audit(1775387910.368:736): avc: denied { write } for pid=10703 comm="syz.2.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 162.078730][T10715] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 162.096406][T10704] trusted_key: syz.2.1193 sent an empty control message without MSG_MORE. [ 162.186009][T10723] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1196'. [ 162.188932][T10723] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 162.252483][T10729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1198'. [ 162.731799][T10748] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1202'. [ 162.734982][T10748] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1202'. [ 162.738340][T10748] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1202'. [ 162.742054][T10748] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1202'. [ 162.745461][T10748] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1202'. [ 162.748467][T10748] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1202'. [ 162.751379][T10748] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1202'. [ 162.886675][T10755] fuse: Bad value for 'fd' [ 163.346560][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.350608][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.353403][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.356035][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.359071][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.376938][T10767] Failed to initialize the IGMP autojoin socket (err -2) [ 163.422953][ T40] audit: type=1400 audit(1775387911.718:737): avc: denied { map } for pid=10774 comm="syz.0.1209" path="/310/file0/blkio.bfq.io_wait_time" dev="9p" ino=79692217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.632385][T10788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10788 comm=syz.0.1210 [ 163.636451][T10788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=10788 comm=syz.0.1210 [ 163.809634][ T40] audit: type=1400 audit(1775387912.108:738): avc: denied { write } for pid=10796 comm="syz.1.1215" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 163.870200][ T40] audit: type=1400 audit(1775387912.168:739): avc: denied { listen } for pid=10796 comm="syz.1.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.060408][T10767] netdevsim netdevsim4 netdevsim0: renamed from eth2 [ 164.076281][T10767] netdevsim netdevsim4 netdevsim1: renamed from eth3 [ 164.081174][T10767] netdevsim netdevsim4 netdevsim2: renamed from eth4 [ 164.095944][T10767] netdevsim netdevsim4 netdevsim3: renamed from eth5 [ 164.467970][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.469999][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.472023][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.475198][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.477835][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.480024][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.482195][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.484589][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.487148][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.489403][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.491744][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.494598][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.496734][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.499515][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.501680][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.505741][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.508061][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.510986][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.514420][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.516627][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.519243][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.521461][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.523832][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.526066][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.528376][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.530638][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.533662][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.535789][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.538032][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.540124][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.542384][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.544977][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.547174][T10852] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.625519][T10767] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 164.641701][T10767] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 164.654498][T10767] wireguard: wg0: Could not create IPv4 socket [ 164.668038][T10767] wireguard: wg1: Could not create IPv4 socket [ 164.676107][T10767] wireguard: wg2: Could not create IPv4 socket [ 164.722481][T10872] program syz.2.1233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.765340][T10873] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 164.927976][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 164.928029][ T40] audit: type=1400 audit(1775387913.228:744): avc: denied { setattr } for pid=10882 comm="syz.0.1237" name="XDP" dev="sockfs" ino=35385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 164.929143][T10883] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 164.930186][ T40] audit: type=1400 audit(1775387913.228:745): avc: denied { mounton } for pid=10882 comm="syz.0.1237" path="/bus" dev="ramfs" ino=35387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 164.937309][T10883] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 164.953371][T10883] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 165.014185][ T40] audit: type=1400 audit(1775387913.308:746): avc: denied { create } for pid=10892 comm="syz.0.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 165.515577][ T40] audit: type=1400 audit(1775387913.818:747): avc: denied { unlink } for pid=5929 comm="syz-executor" name="file1" dev="tmpfs" ino=2347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 165.857444][T10927] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10927 comm=syz.1.1249 [ 165.954178][T10932] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 166.222631][T10963] netlink: 'syz.2.1262': attribute type 10 has an invalid length. [ 166.342058][T10970] ip_vti0: entered promiscuous mode [ 167.222711][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 167.361570][T11032] macsec1: entered promiscuous mode [ 167.363774][T11032] ip6gretap0: entered promiscuous mode [ 167.365896][T11032] macsec1: entered allmulticast mode [ 167.367753][T11032] ip6gretap0: entered allmulticast mode [ 167.372684][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 167.379855][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 167.383584][ T9] usb 5-1: config 179 has no interface number 0 [ 167.385676][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 167.389519][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 167.393541][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 167.397128][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 167.400826][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 167.407354][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 167.410790][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.419342][T11020] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 167.437904][T11036] sit2: entered promiscuous mode [ 167.518807][T11040] /dev/nullb0: Can't lookup blockdev [ 167.583285][ T40] audit: type=1400 audit(1775387915.888:748): avc: denied { create } for pid=11041 comm="syz.1.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 167.603731][ T40] audit: type=1400 audit(1775387915.908:749): avc: denied { write } for pid=11041 comm="syz.1.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 167.650039][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input18 [ 167.787259][ T40] audit: type=1400 audit(1775387916.088:750): avc: denied { create } for pid=11048 comm="syz.1.1293" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 167.787840][T11050] (syz.1.1293,11050,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 167.832274][ T40] audit: type=1400 audit(1775387916.128:751): avc: denied { connect } for pid=11019 comm="syz.0.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 167.872638][ T9279] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 167.929411][ T6017] usb 5-1: USB disconnect, device number 13 [ 167.931400][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 167.931426][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 168.032661][ T9279] usb 7-1: Using ep0 maxpacket: 8 [ 168.043418][ T9279] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 168.046147][ T9279] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 168.049696][ T9279] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 168.053815][ T9279] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.057896][ T9279] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 168.061261][ T9279] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 168.064472][ T9279] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 168.068870][ T9279] usb 7-1: config 168 interface 0 has no altsetting 0 [ 168.072026][ T9279] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 168.074536][ T9279] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 168.078038][ T9279] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 168.081564][ T9279] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.086383][ T9279] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 168.090015][ T9279] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 168.093708][ T9279] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 168.098408][ T9279] usb 7-1: config 168 interface 0 has no altsetting 0 [ 168.101450][ T9279] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 168.103971][ T9279] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 168.107473][ T9279] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 168.111084][ T9279] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.115082][ T9279] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 168.119078][ T9279] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 168.122608][ T9279] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 168.126698][ T9279] usb 7-1: config 168 interface 0 has no altsetting 0 [ 168.131040][ T9279] usb 7-1: string descriptor 0 read error: -22 [ 168.133248][ T9279] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 168.136137][ T9279] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.143222][ T9279] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 168.344597][ T9279] usb 7-1: USB disconnect, device number 12 [ 168.550224][T11047] __nla_validate_parse: 39 callbacks suppressed [ 168.550236][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1292'. [ 168.635545][T11067] netlink: 'syz.0.1301': attribute type 10 has an invalid length. [ 168.638962][T11067] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1301'. [ 168.672711][ T40] audit: type=1400 audit(1775387916.968:752): avc: denied { lock } for pid=11066 comm="syz.0.1301" path="/340/file0/cpuset.effective_cpus" dev="9p" ino=79692207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 170.033599][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.041464][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.045936][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.049507][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.053006][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.068084][T11087] Failed to initialize the IGMP autojoin socket (err -2) [ 171.637022][T11071] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.667343][T11087] netdevsim netdevsim4 netdevsim0: renamed from eth2 [ 171.686602][T11087] netdevsim netdevsim4 netdevsim1: renamed from eth3 [ 171.701738][T11087] netdevsim netdevsim4 netdevsim2: renamed from eth4 [ 171.717107][T11087] netdevsim netdevsim4 netdevsim3: renamed from eth5 [ 171.858497][ T40] audit: type=1400 audit(1775387920.158:753): avc: denied { getopt } for pid=11109 comm="syz.0.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 171.894713][T11121] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1312'. [ 171.995363][T11100] nbd1: detected capacity change from 0 to 128 [ 171.999667][ T8747] [ 172.000497][ T8747] ====================================================== [ 172.002760][ T8747] WARNING: possible circular locking dependency detected [ 172.005108][ T8747] syzkaller #0 Tainted: G L [ 172.007142][ T8747] ------------------------------------------------------ [ 172.009273][ T8747] udevd/8747 is trying to acquire lock: [ 172.010989][ T8747] ffff88803430cc70 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x428/0x1080 [ 172.013816][ T8747] [ 172.013816][ T8747] but task is already holding lock: [ 172.016233][ T8747] ffff888013b98180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080 [ 172.019006][ T8747] [ 172.019006][ T8747] which lock already depends on the new lock. [ 172.019006][ T8747] [ 172.022287][ T8747] [ 172.022287][ T8747] the existing dependency chain (in reverse order) is: [ 172.025019][ T8747] [ 172.025019][ T8747] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 172.027348][ T8747] __mutex_lock+0x1a2/0x1b90 [ 172.029149][ T8747] nbd_queue_rq+0xba/0x1080 [ 172.030830][ T8747] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 172.032781][ T8747] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 172.035005][ T8747] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 172.037023][ T8747] blk_mq_run_hw_queue+0x23c/0x670 [ 172.038793][ T8747] blk_mq_dispatch_list+0x51d/0x1360 [ 172.040591][ T8747] blk_mq_flush_plug_list+0x130/0x600 [ 172.042396][ T8747] __blk_flush_plug+0x2c4/0x4b0 [ 172.044014][ T8747] __submit_bio+0x584/0x6c0 [ 172.045693][ T8747] submit_bio_noacct_nocheck+0x562/0xc10 [ 172.047724][ T8747] submit_bio_noacct+0xd17/0x2010 [ 172.049549][ T8747] submit_bh_wbc+0x59c/0x770 [ 172.051163][ T8747] block_read_full_folio+0x4c8/0x8e0 [ 172.053036][ T8747] filemap_read_folio+0xfc/0x3b0 [ 172.054736][ T8747] do_read_cache_folio+0x2d7/0x6b0 [ 172.056527][ T8747] read_part_sector+0xd1/0x370 [ 172.058176][ T8747] adfspart_check_ICS+0x93/0x910 [ 172.059816][ T8747] bdev_disk_changed+0x7f8/0xc80 [ 172.061541][ T8747] blkdev_get_whole+0x187/0x290 [ 172.063376][ T8747] bdev_open+0x2c7/0xe40 [ 172.064967][ T8747] blkdev_open+0x34e/0x4f0 [ 172.066489][ T8747] do_dentry_open+0x6d8/0x1660 [ 172.068453][ T8747] vfs_open+0x82/0x3f0 [ 172.070223][ T8747] path_openat+0x208c/0x31a0 [ 172.072174][ T8747] do_file_open+0x20e/0x430 [ 172.074105][ T8747] do_sys_openat2+0x10d/0x1e0 [ 172.076085][ T8747] __x64_sys_openat+0x12d/0x210 [ 172.078175][ T8747] do_syscall_64+0x106/0xf80 [ 172.080051][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.082509][ T8747] [ 172.082509][ T8747] -> #5 (set->srcu){.+.+}-{0:0}: [ 172.082606][ T5943] Bluetooth: hci2: command tx timeout [ 172.085302][ T8747] __synchronize_srcu+0xa2/0x300 [ 172.088997][ T8747] blk_mq_quiesce_queue+0x149/0x1c0 [ 172.091176][ T8747] elevator_switch+0x17b/0x7e0 [ 172.093317][ T8747] elevator_change+0x352/0x530 [ 172.095482][ T8747] elevator_set_default+0x29e/0x360 [ 172.097785][ T8747] blk_register_queue+0x412/0x590 [ 172.100006][ T8747] __add_disk+0x73f/0xe40 [ 172.101939][ T8747] add_disk_fwnode+0x118/0x5c0 [ 172.104031][ T8747] nbd_dev_add+0x77a/0xb10 [ 172.106001][ T8747] nbd_init+0x291/0x2b0 [ 172.108020][ T8747] do_one_initcall+0x11d/0x760 [ 172.110138][ T8747] kernel_init_freeable+0x6e5/0x7a0 [ 172.112469][ T8747] kernel_init+0x1f/0x1e0 [ 172.114482][ T8747] ret_from_fork+0x754/0xd80 [ 172.116547][ T8747] ret_from_fork_asm+0x1a/0x30 [ 172.118632][ T8747] [ 172.118632][ T8747] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 172.121727][ T8747] __mutex_lock+0x1a2/0x1b90 [ 172.123745][ T8747] elevator_change+0x1bc/0x530 [ 172.125843][ T8747] elevator_set_none+0x92/0xf0 [ 172.127956][ T8747] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 172.130451][ T8747] nbd_start_device+0x1a6/0xbd0 [ 172.132597][ T8747] nbd_genl_connect+0xff2/0x1a40 [ 172.134702][ T8747] genl_family_rcv_msg_doit+0x214/0x300 [ 172.137127][ T8747] genl_rcv_msg+0x560/0x800 [ 172.139171][ T8747] netlink_rcv_skb+0x159/0x420 [ 172.141237][ T8747] genl_rcv+0x28/0x40 [ 172.143044][ T8747] netlink_unicast+0x5aa/0x870 [ 172.145147][ T8747] netlink_sendmsg+0x8b0/0xda0 [ 172.147218][ T8747] ____sys_sendmsg+0x9e1/0xb70 [ 172.149306][ T8747] ___sys_sendmsg+0x190/0x1e0 [ 172.151401][ T8747] __sys_sendmsg+0x170/0x220 [ 172.153482][ T8747] do_syscall_64+0x106/0xf80 [ 172.155504][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.157993][ T8747] [ 172.157993][ T8747] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 172.161316][ T8747] blk_alloc_queue+0x610/0x790 [ 172.163441][ T8747] blk_mq_alloc_queue+0x174/0x290 [ 172.165634][ T8747] __blk_mq_alloc_disk+0x29/0x120 [ 172.167833][ T8747] nbd_dev_add+0x492/0xb10 [ 172.169815][ T8747] nbd_init+0x291/0x2b0 [ 172.171686][ T8747] do_one_initcall+0x11d/0x760 [ 172.173769][ T8747] kernel_init_freeable+0x6e5/0x7a0 [ 172.175999][ T8747] kernel_init+0x1f/0x1e0 [ 172.177910][ T8747] ret_from_fork+0x754/0xd80 [ 172.179870][ T8747] ret_from_fork_asm+0x1a/0x30 [ 172.181960][ T8747] [ 172.181960][ T8747] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 172.184722][ T8747] fs_reclaim_acquire+0xc4/0x100 [ 172.186652][ T8747] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 172.188887][ T8747] __alloc_skb+0x140/0x710 [ 172.190807][ T8747] tcp_stream_alloc_skb+0x34/0x660 [ 172.192995][ T8747] tcp_sendmsg_locked+0x1396/0x45e0 [ 172.195216][ T8747] tcp_sendmsg+0x2e/0x50 [ 172.197097][ T8747] inet_sendmsg+0xb9/0x140 [ 172.199012][ T8747] sock_write_iter+0x4ea/0x5a0 [ 172.201079][ T8747] vfs_write+0x6ac/0x1070 [ 172.203011][ T8747] ksys_write+0x1f8/0x250 [ 172.204946][ T8747] do_syscall_64+0x106/0xf80 [ 172.206958][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.209490][ T8747] [ 172.209490][ T8747] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 172.212432][ T8747] lock_sock_nested+0x41/0xf0 [ 172.214504][ T8747] inet_shutdown+0x67/0x410 [ 172.216482][ T8747] nbd_mark_nsock_dead+0xae/0x5c0 [ 172.218706][ T8747] recv_work+0x5fb/0x8c0 [ 172.220571][ T8747] process_one_work+0xa23/0x19a0 [ 172.222614][ T8747] worker_thread+0x5ef/0xe50 [ 172.224701][ T8747] kthread+0x370/0x450 [ 172.226445][ T8747] ret_from_fork+0x754/0xd80 [ 172.228481][ T8747] ret_from_fork_asm+0x1a/0x30 [ 172.230581][ T8747] [ 172.230581][ T8747] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 172.233542][ T8747] __lock_acquire+0x14b8/0x2630 [ 172.235627][ T8747] lock_acquire+0x1cf/0x380 [ 172.237616][ T8747] __mutex_lock+0x1a2/0x1b90 [ 172.239646][ T8747] nbd_queue_rq+0x428/0x1080 [ 172.241675][ T8747] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 172.244056][ T8747] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 172.246727][ T8747] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 172.249288][ T8747] blk_mq_run_hw_queue+0x23c/0x670 [ 172.251495][ T8747] blk_mq_dispatch_list+0x51d/0x1360 [ 172.253755][ T8747] blk_mq_flush_plug_list+0x130/0x600 [ 172.256088][ T8747] __blk_flush_plug+0x2c4/0x4b0 [ 172.258189][ T8747] __submit_bio+0x584/0x6c0 [ 172.260144][ T8747] submit_bio_noacct_nocheck+0x562/0xc10 [ 172.262570][ T8747] submit_bio_noacct+0xd17/0x2010 [ 172.264751][ T8747] submit_bh_wbc+0x59c/0x770 [ 172.266752][ T8747] block_read_full_folio+0x4c8/0x8e0 [ 172.269150][ T8747] filemap_read_folio+0xfc/0x3b0 [ 172.271530][ T8747] do_read_cache_folio+0x2d7/0x6b0 [ 172.273753][ T8747] read_part_sector+0xd1/0x370 [ 172.275802][ T8747] adfspart_check_ICS+0x93/0x910 [ 172.277949][ T8747] bdev_disk_changed+0x7f8/0xc80 [ 172.280009][ T8747] blkdev_get_whole+0x187/0x290 [ 172.282133][ T8747] bdev_open+0x2c7/0xe40 [ 172.284010][ T8747] blkdev_open+0x34e/0x4f0 [ 172.285960][ T8747] do_dentry_open+0x6d8/0x1660 [ 172.288103][ T8747] vfs_open+0x82/0x3f0 [ 172.289967][ T8747] path_openat+0x208c/0x31a0 [ 172.291974][ T8747] do_file_open+0x20e/0x430 [ 172.293992][ T8747] do_sys_openat2+0x10d/0x1e0 [ 172.296054][ T8747] __x64_sys_openat+0x12d/0x210 [ 172.298199][ T8747] do_syscall_64+0x106/0xf80 [ 172.300199][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.302731][ T8747] [ 172.302731][ T8747] other info that might help us debug this: [ 172.302731][ T8747] [ 172.306856][ T8747] Chain exists of: [ 172.306856][ T8747] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 172.306856][ T8747] [ 172.311753][ T8747] Possible unsafe locking scenario: [ 172.311753][ T8747] [ 172.314325][ T8747] CPU0 CPU1 [ 172.315979][ T8747] ---- ---- [ 172.317721][ T8747] lock(&cmd->lock); [ 172.319002][ T8747] lock(set->srcu); [ 172.321017][ T8747] lock(&cmd->lock); [ 172.323092][ T8747] lock(&nsock->tx_lock); [ 172.324497][ T8747] [ 172.324497][ T8747] *** DEADLOCK *** [ 172.324497][ T8747] [ 172.326890][ T8747] 3 locks held by udevd/8747: [ 172.328332][ T8747] #0: ffff888028d3b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 172.331159][ T8747] #1: ffff888028007198 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x22e/0x670 [ 172.334181][ T8747] #2: ffff888013b98180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080 [ 172.336987][ T8747] [ 172.336987][ T8747] stack backtrace: [ 172.338847][ T8747] CPU: 2 UID: 0 PID: 8747 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 172.338864][ T8747] Tainted: [L]=SOFTLOCKUP [ 172.338870][ T8747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.338939][ T8747] Call Trace: [ 172.338945][ T8747] [ 172.338950][ T8747] dump_stack_lvl+0x100/0x190 [ 172.338969][ T8747] print_circular_bug.cold+0x178/0x1c7 [ 172.338987][ T8747] check_noncircular+0x146/0x160 [ 172.339005][ T8747] __lock_acquire+0x14b8/0x2630 [ 172.339017][ T8747] lock_acquire+0x1cf/0x380 [ 172.339027][ T8747] ? nbd_queue_rq+0x428/0x1080 [ 172.339038][ T8747] ? __pfx___might_resched+0x10/0x10 [ 172.339051][ T8747] __mutex_lock+0x1a2/0x1b90 [ 172.339062][ T8747] ? nbd_queue_rq+0x428/0x1080 [ 172.339072][ T8747] ? nbd_queue_rq+0x428/0x1080 [ 172.339083][ T8747] ? __pfx___mutex_lock+0x10/0x10 [ 172.339094][ T8747] ? lock_acquire+0x1cf/0x380 [ 172.339105][ T8747] ? nbd_queue_rq+0x428/0x1080 [ 172.339114][ T8747] nbd_queue_rq+0x428/0x1080 [ 172.339125][ T8747] ? finish_task_switch.isra.0+0x205/0xb80 [ 172.339141][ T8747] ? __pfx_nbd_queue_rq+0x10/0x10 [ 172.339154][ T8747] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 172.339173][ T8747] ? sbitmap_get+0x1d7/0x360 [ 172.339223][ T8747] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 172.339238][ T8747] ? __blk_mq_alloc_driver_tag+0x27a/0x7a0 [ 172.339253][ T8747] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 172.339269][ T8747] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 172.339286][ T8747] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 172.339300][ T8747] blk_mq_run_hw_queue+0x23c/0x670 [ 172.339312][ T8747] ? blk_mq_run_hw_queue+0x22e/0x670 [ 172.339324][ T8747] blk_mq_dispatch_list+0x51d/0x1360 [ 172.339339][ T8747] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 172.339354][ T8747] ? blk_add_trace_plug+0xf5/0x290 [ 172.339366][ T8747] blk_mq_flush_plug_list+0x130/0x600 [ 172.339381][ T8747] ? trace_block_plug+0x6e/0x240 [ 172.339390][ T8747] ? blk_add_rq_to_plug+0x30a/0x540 [ 172.339405][ T8747] ? __pfx_wbt_track+0x10/0x10 [ 172.339468][ T8747] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 172.339483][ T8747] ? blk_mq_submit_bio+0x9aa/0x2bf0 [ 172.339499][ T8747] __blk_flush_plug+0x2c4/0x4b0 [ 172.339514][ T8747] ? __pfx___blk_flush_plug+0x10/0x10 [ 172.339528][ T8747] __submit_bio+0x584/0x6c0 [ 172.339541][ T8747] ? __pfx___submit_bio+0x10/0x10 [ 172.339556][ T8747] ? submit_bio_noacct_nocheck+0x562/0xc10 [ 172.339570][ T8747] submit_bio_noacct_nocheck+0x562/0xc10 [ 172.339584][ T8747] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 172.339599][ T8747] ? __pfx___might_resched+0x10/0x10 [ 172.339611][ T8747] ? bio_alloc_bioset+0x309/0x850 [ 172.339622][ T8747] submit_bio_noacct+0xd17/0x2010 [ 172.339636][ T8747] submit_bh_wbc+0x59c/0x770 [ 172.339654][ T8747] block_read_full_folio+0x4c8/0x8e0 [ 172.339675][ T8747] ? __pfx_blkdev_get_block+0x10/0x10 [ 172.339695][ T8747] ? __pfx_blkdev_read_folio+0x10/0x10 [ 172.339715][ T8747] filemap_read_folio+0xfc/0x3b0 [ 172.339733][ T8747] ? __pfx_filemap_read_folio+0x10/0x10 [ 172.339755][ T8747] do_read_cache_folio+0x2d7/0x6b0 [ 172.339781][ T8747] ? __pfx_blkdev_read_folio+0x10/0x10 [ 172.339801][ T8747] read_part_sector+0xd1/0x370 [ 172.339822][ T8747] adfspart_check_ICS+0x93/0x910 [ 172.339839][ T8747] ? snprintf+0xc7/0x100 [ 172.339859][ T8747] ? __pfx_snprintf+0x10/0x10 [ 172.339877][ T8747] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 172.339889][ T8747] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 172.339902][ T8747] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 172.339915][ T8747] bdev_disk_changed+0x7f8/0xc80 [ 172.339929][ T8747] ? __pfx_bdev_disk_changed+0x10/0x10 [ 172.339942][ T8747] blkdev_get_whole+0x187/0x290 [ 172.339954][ T8747] bdev_open+0x2c7/0xe40 [ 172.339968][ T8747] blkdev_open+0x34e/0x4f0 [ 172.339982][ T8747] do_dentry_open+0x6d8/0x1660 [ 172.339993][ T8747] ? __pfx_blkdev_open+0x10/0x10 [ 172.340008][ T8747] vfs_open+0x82/0x3f0 [ 172.340021][ T8747] path_openat+0x208c/0x31a0 [ 172.340035][ T8747] ? __pfx_path_openat+0x10/0x10 [ 172.340048][ T8747] do_file_open+0x20e/0x430 [ 172.340059][ T8747] ? __pfx_do_file_open+0x10/0x10 [ 172.340075][ T8747] ? alloc_fd+0x476/0x790 [ 172.340086][ T8747] ? do_getname+0x191/0x390 [ 172.340100][ T8747] do_sys_openat2+0x10d/0x1e0 [ 172.340113][ T8747] ? __pfx_do_sys_openat2+0x10/0x10 [ 172.340129][ T8747] ? __sys_recvmsg+0x18c/0x220 [ 172.340145][ T8747] ? __pfx___sys_recvmsg+0x10/0x10 [ 172.340160][ T8747] __x64_sys_openat+0x12d/0x210 [ 172.340174][ T8747] ? __pfx___x64_sys_openat+0x10/0x10 [ 172.340189][ T8747] do_syscall_64+0x106/0xf80 [ 172.340205][ T8747] ? clear_bhb_loop+0x40/0x90 [ 172.340217][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.340228][ T8747] RIP: 0033:0x7f4a8cea7407 [ 172.340238][ T8747] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 172.340248][ T8747] RSP: 002b:00007fff213d1a10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 172.340259][ T8747] RAX: ffffffffffffffda RBX: 00007f4a8d659880 RCX: 00007f4a8cea7407 [ 172.340265][ T8747] RDX: 00000000000a0800 RSI: 000055cec8567630 RDI: ffffffffffffff9c [ 172.340271][ T8747] RBP: 000055cec831d2c0 R08: 0000000000000000 R09: 0000000000000000 [ 172.340277][ T8747] R10: 0000000000000000 R11: 0000000000000202 R12: 000055cec85684e0 [ 172.340283][ T8747] R13: 000055cec85588d0 R14: 0000000000000000 R15: 000055cec85684e0 [ 172.340292][ T8747] [ 172.396773][T11130] overlayfs: invalid origin (0000) [ 172.404446][T11087] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 172.405943][ T63] block nbd1: Receive control failed (result -32) [ 172.406013][ T5941] block nbd1: Receive control failed (result -32) [ 172.487283][ T8747] block nbd1: Send control failed (result -32) [ 172.532224][ T8747] block nbd1: Request send failed, requeueing [ 172.537589][ T25] block nbd1: Dead connection, failed to find a fallback [ 172.540547][ T25] block nbd1: shutting down sockets [ 172.543204][T11087] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 172.550291][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 172.554617][ T25] buffer_io_error: 29 callbacks suppressed [ 172.554631][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 172.573718][ T8747] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 172.578101][ T8747] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.581425][ T8747] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 172.585806][ T8747] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.589130][ T8747] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 172.593183][ T8747] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.596521][ T8747] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 172.600560][ T8747] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.603900][ T8747] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 172.607814][ T8747] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.611302][ T8747] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 172.615380][ T8747] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.618661][ T8747] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 172.622564][ T8747] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.625819][ T8747] ldm_validate_partition_table(): Disk read failed. [ 172.628667][ T8747] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 172.632858][ T8747] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.636043][ T8747] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 172.640063][ T8747] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.644414][ T8747] Dev nbd1: unable to read RDB block 0 [ 172.646955][ T8747] nbd1: unable to read partition table [ 172.652065][ T8747] ldm_validate_partition_table(): Disk read failed. [ 172.663045][ T8747] Dev nbd1: unable to read RDB block 0 [ 172.665007][ T8747] nbd1: unable to read partition table [ 172.810237][ T8260] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.822624][ T8260] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.965880][ T8260] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.969370][ T8260] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.087251][ T8260] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.090808][ T8260] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.147456][ T8260] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.150695][ T8260] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.228653][ T8260] bridge_slave_1: left allmulticast mode [ 173.231334][ T8260] bridge_slave_1: left promiscuous mode [ 173.233480][ T8260] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.236871][ T8260] bridge_slave_0: left allmulticast mode [ 173.238845][ T8260] bridge_slave_0: left promiscuous mode [ 173.241109][ T8260] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.282657][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 173.752081][ T8260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.757048][ T8260] bond_slave_0: left allmulticast mode [ 173.760674][ T8260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.765623][ T8260] bond_slave_1: left allmulticast mode [ 173.768447][ T8260] bond0 (unregistering): Released all slaves [ 173.773031][ T8260] bond1 (unregistering): Released all slaves [ 173.778857][ T8260] bond2 (unregistering): Released all slaves [ 173.786406][ T8260] bond3 (unregistering): (slave veth3): Releasing active interface [ 173.789516][ T8260] batadv1: entered promiscuous mode [ 173.793437][ T8260] bond3 (unregistering): (slave batadv1): Releasing active interface [ 173.797587][ T8260] bond3 (unregistering): Released all slaves [ 173.945265][ T8260] IPVS: stopping backup sync thread 6202 ... [ 174.139559][ T8260] hsr_slave_0: left promiscuous mode [ 174.143558][ T8260] veth1_vlan: left promiscuous mode [ 174.146273][ T8260] veth0_vlan: left promiscuous mode [ 174.195833][ T8260] team0 (unregistering): Port device team_slave_1 removed [ 174.200629][ T8260] team0 (unregistering): Port device team_slave_0 removed [ 175.015781][ T8260] bridge_slave_1: left allmulticast mode [ 175.017626][ T8260] bridge_slave_1: left promiscuous mode [ 175.019462][ T8260] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.022706][ T8260] x9: left allmulticast mode [ 175.024365][ T8260] x9: left promiscuous mode [ 175.025931][ T8260] bridge0: port 1(1x9) entered disabled state [ 175.043403][ T8260] ip6gretap0 (unregistering): left allmulticast mode [ 175.045653][ T8260] ip6gretap0 (unregistering): left promiscuous mode [ 175.083190][ T8260] bond1 (unregistering): (slave gretap2): Releasing backup interface [ 175.516728][ T8260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.520033][ T8260] bond0 (unregistering): Released all slaves [ 175.524888][ T8260] bond1 (unregistering): (slave bond2): Releasing backup interface [ 175.528074][ T8260] bond1 (unregistering): Released all slaves [ 175.532472][ T8260] bond2 (unregistering): Released all slaves [ 175.538125][ T8260] bond3 (unregistering): Released all slaves [ 175.545731][ T8260] bond4 (unregistering): (slave bond5): Releasing backup interface [ 175.549006][ T8260] bond4 (unregistering): Released all slaves [ 175.555113][ T8260] bond5 (unregistering): Released all slaves [ 175.559776][ T8260] bond6 (unregistering): Released all slaves [ 175.628295][ T8260] : left promiscuous mode [ 176.135979][ T8260] hsr_slave_0: left promiscuous mode [ 176.138892][ T8260] hsr_slave_1: left promiscuous mode [ 176.141581][ T8260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.157348][ T8260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.206739][ T8260] team0 (unregistering): Port device team_slave_1 removed [ 176.217704][ T8260] team0 (unregistering): Port device team_slave_0 removed [ 176.677106][ T8260] IPVS: stop unused estimator thread 0...