last executing test programs: 20.559490457s ago: executing program 2 (id=1294): socket$key(0xf, 0x3, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x54, 0x0, 0x10, 0x0, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x81) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet_icmp(0x2, 0x2, 0x1) bind$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0xf50}], 0x2) 18.972312976s ago: executing program 2 (id=1297): r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9"], 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0x0, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYRES16=r0], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043607812aaaa1aaaa10"], 0xa) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x7, 0xe}, {0xfc4c, 0x44, 0x3, 0x5, [0x7fff, 0xde2b, 0x3ff]}}}}, 0x1b) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) r3 = getpid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r5, &(0x7f0000000100)='reno\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000035717a229b3acb1b1db4f187d5073d7500bef1790a16e1a79e42a0ed4b83d5ed45a8fc201367cd74c361c9a4f5d8f16c796fcf08d155cafa103d9b9799b782d83a17bd169c6c16088acb1631889645324d8196454c9ff21aee74ce463879261e070c380d3957f0ff5769c83019dc1046271d2cbd79746013ddf322d344a4c120be9aa9bf586d6ec792641f49472a3d042069dd7be750a88a5fd265e4c49090740225fc584117049aad46931344dfd360bf3368d493f5018f931330254bf5df5dc57558148c743d611bfbd6f3c4d3bd169a12fcc77e"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) openat$cgroup_int(r7, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 16.25067657s ago: executing program 2 (id=1305): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r0, 0x0, 0x2f) 15.976838506s ago: executing program 2 (id=1308): socket$kcm(0x2, 0x3, 0x2) r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 15.770331381s ago: executing program 2 (id=1309): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0xda, &(0x7f00000004c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0xa4, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "1b2f4c7f41ec9a8b6647d543b164ef60"}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x2}, @timestamp={0x8, 0xa}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @fastopen={0x22, 0xe, "ce2781a9dfe9bc8597d90a8c"}, @mptcp=@remove_addr={0x1e, 0x44, 0x0, 0x0, "9be9c2cefdc4c1e2a4136ba7c11421e0e735ac59102ae435c3c6cbf8405f8cfbcffc37b6b84333e835112ad6edf9b450872913e94db74ffeefed76caec6455cb35"}]}}}}}}}}, 0x0) 15.579818371s ago: executing program 2 (id=1311): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="540100001000130700000000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) r2 = syz_usbip_server_init(0x3) write$usbip_server(r2, &(0x7f0000000080)=@ret_unlink={{0x4, 0x5, 0x0, 0x0, 0x3}, {0x5}}, 0x30) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000d00)) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f0000001940)=""/4086, 0xff6) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000340)=&(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES8=r5, @ANYRES16=r2, @ANYRES16=r2, @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c0000000e0a010300000000000000000500000008000442fa53e8dad7ddcd9600cd000000010900020073797a320000000008000440000000030900010073797a30000000004c000000030a010800000000000000000a0000000900010073797a30000000000900030073797a31000000000900030073797a31000000000a000700726f757465000000080005400000000020000000120a01020000000000000000000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000011c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000002", @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) open(&(0x7f0000000080)='./bus\x00', 0x145042, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f00000008c0)="bc607c5d8caef5d06db62280b8f1ce145b62b58e61f5f1b66a012f9afa43bcbac78535f12bec5e78d6113eb0744f232cd0f3a7043a01578a40b47a00"/71, &(0x7f0000000800)=""/171}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x14, &(0x7f0000000200)={&(0x7f0000000940)=@delqdisc={0x0, 0x25, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xe}, {0xfff3}, {0xfff3, 0xb}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x9}, @TCA_RATE={0x0, 0x5, {0x80, 0x8}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x7, 0x5, 0x1, 0x4, 0x2, 0x7, 0x4}}, {0x0, 0x2, [0x33, 0x3, 0x2, 0x8, 0x5, 0x8, 0x5, 0xd, 0x4]}}, {{0x0, 0x1, {0xc, 0x8, 0x0, 0x100, 0x1, 0x2, 0x2}}, {0x0, 0x2, [0x3ff, 0x8001]}}, {{0x0, 0x1, {0xe, 0xfe, 0x0, 0x7fffffff, 0x1, 0x8000, 0x5}}, {0x0, 0x2, [0x2, 0x7ff, 0xf09]}}, {{0x0, 0x1, {0x2, 0xb, 0x5, 0x6, 0x2, 0x200, 0x2}}, {0x0, 0x2, [0x200, 0x8, 0x9]}}, {{0x0, 0x1, {0x6, 0x0, 0x61a6, 0x3ff, 0x2, 0xffff, 0x1d8}}, {0x0, 0x2, [0x6, 0x401]}}, {{0x0, 0x1, {0x1, 0x3, 0xfc4b, 0x400, 0x0, 0x7ff, 0xe6c}}, {0x0, 0x2, [0x8, 0x35f8, 0x1, 0x3]}}, {{0x0, 0x1, {0x4, 0x4, 0x100, 0x9, 0x0, 0x7, 0xb9c}}, {0x0, 0x2, [0x8, 0x7, 0x100, 0x2, 0x7ff, 0x3, 0xfff]}}, {{0x0, 0x1, {0x9, 0x7, 0x0, 0xd6f, 0x1, 0x4}}, {0x0, 0x2, [0x4]}}, {{0x0, 0x1, {0x4e, 0x5, 0xa6, 0x2, 0x0, 0x4, 0x5}}, {0x0, 0x2, [0x5, 0x1, 0xfff7]}}, {{0x0, 0x1, {0x2, 0x1, 0x1, 0x3, 0x1, 0x4, 0x5}}, {0x0, 0x2, [0x5, 0x9, 0x1, 0x0, 0x1ff, 0x81, 0x1, 0x3, 0x5, 0x1]}}]}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xde, 0x7, 0x8, 0x9, 0x0, 0x5, 0x6}}, {0x0, 0x2, [0x81, 0x4]}}, {{0x0, 0x1, {0xa8, 0x80, 0x81, 0xa, 0x2, 0x7, 0x9}}, {0x0, 0x2, [0x81, 0x8, 0x3, 0x5]}}, {{0x0, 0x1, {0xa, 0x3, 0x4163, 0x0, 0x2, 0x1000, 0x7fff}}, {0x0, 0x2, [0x7, 0x10, 0x4]}}, {{0x0, 0x1, {0xf8, 0x44, 0x5612, 0xffff, 0x0, 0xfffffff7, 0x1}}, {0x0, 0x2, [0x2, 0x7, 0xfff8]}}]}]}, 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 7.765946363s ago: executing program 4 (id=1343): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x21, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@remote, 0x8000}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@remote}, {@multicast2}, {@private}, {}, {@broadcast}]}, @noop, @noop, @rr={0x7, 0xb, 0x0, [@loopback, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.26891182s ago: executing program 4 (id=1348): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x61f285}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r4, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.180232224s ago: executing program 1 (id=1352): r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 6.139789929s ago: executing program 4 (id=1353): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'erspan0\x00', 0x0}) 5.920679097s ago: executing program 1 (id=1355): socket$kcm(0x2, 0x3, 0x2) r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5.91908763s ago: executing program 4 (id=1356): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$sock(r1, &(0x7f0000003800)=[{{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x3, @mcast1, 0x38536017}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)="f3a3709219cd856bc1fa4747aeca5d52e1f550b5610171a2f73fdd9a3430f221b94aff72ebed0bc63121445fff75bc613d62f3dffd01c8d199cd252c41dee0e132cf46a1586c5a3dd8e498a668985408b8e3fc509396a24c54441e13b1a19dfdb666489ee9a256b812db943375c261a364776ae389621c7c1492989b733a020aebd0ccf1c8", 0x85}, {&(0x7f0000000540)="a4499d4ff21e30edde6a6774c05be626939cdc721c7505b7775b6e1b6d2cb6ac2a32d5093caab37fc26e56b895b6bf41fc47b6299407a378185ac7af72c272a5fe292706fc5cd81d7ea8962e43ec5af8fdb4c3bf5ad4a9687cfc5f1ca37f4b489665444f273a6b74ad9779614fda0b5bfd3c60fd1adac39a1b7893ea26c82eb3a15fa3f0369d3cea212570d01fe53673b9250e61529e37deb49bd7ddbce66872f26415359c77cd5f00b3d2adb93fd0318167ff9300901bf0ee6bf07abf97557615a6c3b036b81bde5da05bb86f34a2f5d455e6b2ea76234f7dbe83d545c5413717e2348a12a9814e71567d810a64d29ce3340cb814c986b2f6", 0xf9}], 0x2, &(0x7f0000000680)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x87}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0xef6a}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xf0}}, {{&(0x7f0000000780)=@llc={0x1a, 0x101, 0x40, 0x4, 0xaf, 0x6}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000800)="600d0b748aa16bbc90209027b5c9f47714b78f94609d5d8fc7af2f5d2c923c75e200e6f747fb2342aa6f53735019b98603aa53c8343bdc3ab7037446b5923b48e895e027e7b8efb7bf2e87dcb83fffb54c00b727acdf9e362e3ed3a21e914c305fe2f476c6d1b28cf2083e2f4995a34a2a5321f3f592ab40ae933e0e82cd327486f49f64f01c9c957c48c80445cd74e5d7b7683877f47d69ba04ca3a9971c9686e162b04be27940c2ed12ac315eab3c347dfe7e74fe7717e2d8a39d8adbb0cecb335a0b40caa93d12e2b9b5a87f5f752c51ef19adeec2e13d2c18ea84b81e85a9b", 0xe1}, {&(0x7f0000000900)="e40e6a9e23bcff30bf3aaa15e697bf52d6c7af8a1721c27f4b4a67a4f672e8feca32a690760216bfe5593a6e3d46339e116713873195d8088224e461a4cb63b9c735a69a397a2ff2cb824ad12ca141e33efd24b84a4ee76cce18c82b49755051f15b42d8979021f3ef4cc07f34438ededcab774a8b689603d8185ca23597484d8cf02fc67099b2813997f29c0a6b3ef1b326cecd66b5a259a8", 0x99}, {&(0x7f00000009c0)="135807c3529983e1ddea7d5f34f29d525abc68598aff7def33b3277da01caa30cb40295a9c8c2919e08863cbed6b1e83a73f47ac6cbeba949c4ac2182f0664725a9c55fc8d1397a8374869967808747c20552b750af35c7e47517b18190bcb3d170656087c127640bc5310ffffc902f2be6ebe1fcdf1c77e67a96ff5048580c02b3318819613165ae2bdff38ebdf914308d29afaeb32c77d2319a70f66a488b61382e000b973973718237a1051f31db0e52bd4def0f09601f606c300b95707c5156ae571f756da4371de", 0xca}], 0x3}}, {{&(0x7f0000001b00)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x9, 0x59, "48258c93b3f5b3fe8fd8f38b78939a9f4daea357006c84bddade90eb7a0ab833fc17d9c858e89ef547da7d7825b72e00cfa05de379c7c381241c7f66bf97a1", 0x23}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001b80)="9f5856023f9f72ff61ef28c1ba3762c1fcc1502fef065de532714a49c8393d001d264d8c9ad2e815e83162a22e0c411ce97949be7877effec4cd8e3455f2cd20bdb2d295f10ebc70dfe4d70b744cd7d39ea0", 0x52}, {&(0x7f0000001c00)="792ee76b91b7f7a7dace77a090bcc2da0bd5f77448f20c62429957a022e7625c98c135c62833490240fcbd96d3b62fdaafa9d2aeb2a8790a534d1c6171648ab6282e0bd7fcb0f8b977e3cb6290bde08edaa9266ffc70fbcbaa3fa30a498f46f1b810bc8f196956bdebccf00cbf2582a212f980ba72934bb5730189fc008ddf212e0f7e6ea94aa3a19de01d0946", 0x8d}, {&(0x7f0000001cc0)="1b19642b6b4bec55c583a7fa58dc0a78d36c85fa5b00823e0fffce6eacd204c4a20ec4b368ea6aec751a06e77eb6752e8c1d036f45262bb00871f26df9e68c47cc33eca2e8cbefefa06c211578f6243db01b0ebc021920d81f1cc57dca6263aa013feb03d8516a53a54e42c6b22fb04360902787c77533882268a78d1999d96e4b636ae089e33cbe9eb9e21e7fc0f0cde941b2acda4d1a86", 0x98}, {&(0x7f0000001d80)="940ad412698f98247d466d4d9379e743139a78f1c94f34fe0216bdbe94f4ef03fa984dbad33cd933dd5e1d1e1a3bad2997b3c93ca0bde1ad108ff6fefd190d4d73adfbb937ad6bb4f4ee59d2db990211bfe348156ebd29325cb3e74dd33e84f73498ccf542630c4a9d6b5f26c96809d07785a7b016714a3489430a29f5dde3a7bf4dfbd4609ba8f18fc2bb7da92dd3b0b478cb86b70cc79a57675e9e697b4d0d915f1251147c3bc05a70b2aae88ae601dde8049fbf43e30cb4fbd169e4367ae9993b3025250d5078f236cadca1fc3c9b2c3c62037124", 0xd6}, {0x0}, {&(0x7f0000001f40)="22c4178fd8e5042df2a0205be56999", 0xf}, {&(0x7f0000001f80)="4d64189dac336c603466358bbf98ba31fa3ed5d33480eef14f94ed8c7157370bf9187868761ee070dafa6d99b18d820deab213126a054a0e1f3f337f24fba96aa513", 0x42}], 0x7}}, {{&(0x7f0000002080)=@hci={0x1f, 0x4, 0x1}, 0x80, &(0x7f0000002180)=[{&(0x7f0000002100)="45a8f891934bd3f2b908eca1cbaa47fe4126a57fe86bd272421b44040ce06c5191e4fb6cb8d0373cdb3a37dbdd525f4f6a905513b8d37ea61ac24ce21cb550fe90490bdec5bc2cfd2f569b438da272b241734ec94391354377cd688fa35f57259672cb8fad47db590dab53731356a63e669c26976c05", 0x76}], 0x1, &(0x7f00000021c0)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xa4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xf9}}], 0x60}}, {{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000002240)="4a76cad5fa1b6a325d67dc72f91692efa2c2c2e68f24567eb753f6bff7a44c42636c7e544ad5cb1f2a7006f26c6ca84927f93ceee181f39bec09cc9af8264c2564cbf4126a87ddc3b8ef682bc3e4e935f4378552976239e2da1482978b6e9815c9cbdcbc529a1f74ef3a440e050e31538229dd04130f9ec3", 0x78}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000032c0)="692bcb908446cbea330466bb363247cb3f9ea44d175a4de3f37c00510c0027cce793985f28d67cd0d49727e14ae5989cb57a40cd1555656eba022887e08ecf3c198eaf0d74f2f0fcd473b93d588d2fc472e655f5d3f7c1b8d637c3dc7b2f10bd33071de32fad2caa2f01cc5d3269ba6c62fad1a84fd86fe0c20f38499ca39ac7f31c212a4849d568bea98a4434e505403534515683462d80abfcaa4318528300adb615435e409ae27733d813ddef171276a471c5dbd4d543e508793b4be074542f248538566bc9bed6e0366c58a842ffb3b162eae0faa29819a1e9b9640313a7007ed5f7ccbccf", 0xe7}, {&(0x7f00000033c0)="f515c5098af1293744d13434cc6e19957fe569e4288e542b02ce132ae47151cafa95b62511e18adf5b", 0x29}, {&(0x7f0000003400)="9455681c053ad7dd76b928ecffd8a8e5b7d593ee1d8b2e3cbe75949ea08b72443c3c7715c8cf618f814ef13ee43a4c38affe6844a2480711e36edacc576171f48dacbc534f0c9aa977d36d47493dc14214fffa71abd08e47d165f0af3a7dc618dc88925916b937e1cf0a28c4abb7eeb969c271f5f0b92efd61cf121be55de943493d54925a15472d73850d77a5e102a15b48f68758987c5b7a2b6bc6f5638cad222c9fbe54b2e41e096a8deafaab70710911", 0xb2}, {&(0x7f00000034c0)="4e2bb97c4c6f242d8042b1cdedc72821acaa43035b832a5af52f5b5a1a0a681039276146f42ce6c60f12cfede9f9ab405bf2bfa96deffaa2f06d8631400da003e5c63b9cb7e9230e72cc5208900896f3d5aeb372c93c9db61d5e20f6be6393b4287ef896c3974d8c23b365d45bb0eb03190a1fac1b64a2d3497899f1a40604e9bc0f7729fb6f8272", 0x88}, {&(0x7f0000003580)="46d6ae8f10e64235f94d99a65cdca83cdec0b1230f863fe175b67111946098", 0x1f}, {&(0x7f00000035c0)="7bfbc3b8d0b513", 0x7}, {&(0x7f0000003600)="0e625342e8b120b93b619fd07e84856992c00d542824c5997dd048fe397b5ec228594fda401eb10ed0b3a276f2e66b626d79d9c459317fba64d4c78c18ad3289a92510b957522d6b1c871c9f8b6b645e924a84e051cc202bde24f1c6806f68904f75c917198c97516c5592af84388fd481dd3b5ddb0516", 0x77}], 0x9, &(0x7f0000003780)=[@txtime={{0x18, 0x1, 0x3d, 0xe2e3}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x97}}], 0x78}}], 0x5, 0x40040d0) ppoll(&(0x7f0000000280)=[{r4, 0x9004}], 0x10, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) r5 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x4, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003940)='/sys/module/configfs', 0x200, 0x40) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000003980)={{{@in=@local, @in6=@mcast2}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000003a80)=0xe8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x6) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="6401010000000a010100ac141413e0000002ac1414b7ac1414bbffff52ffff7f000001e000000200"/52], 0x34) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x0, 0x0, 0xffffff9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 5.84896934s ago: executing program 1 (id=1357): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000900020073797a30000000000c000780080012400000100014000300686173683a69702c706f72742c697000050005000a000000050004"], 0x58}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x54) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x90, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x90}}, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) 5.375061383s ago: executing program 1 (id=1361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) r5 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280), &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd"}, 0x48, r3) keyctl$KEYCTL_MOVE(0x1e, r5, r3, r4, 0x0) 4.355660567s ago: executing program 0 (id=1364): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x61f285}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r4, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.984327676s ago: executing program 3 (id=1365): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x6, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xecb}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000900020073797a30000000000c000780080012400000100014000300686173683a69702c706f72742c697000050005000a000000050004"], 0x58}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x11, &(0x7f0000000080)={r5}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="00ea802f13f37831b2e5df049f15cc4a75b26e0af9c04e712b134807714c306b7e45dd8cb3108d8c6014b1b36ab904f184f2c639dbcdfb6b242645896fa1a8d0a12cee8f91", @ANYRES32], 0xffda) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xac, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4c}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x320}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0xac}}, 0x0) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3.472552652s ago: executing program 4 (id=1366): r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 3.429201642s ago: executing program 3 (id=1367): socket$kcm(0x2, 0x3, 0x2) r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.310604589s ago: executing program 3 (id=1368): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'erspan0\x00', 0x0}) 3.268813268s ago: executing program 0 (id=1369): socket$inet6_sctp(0xa, 0x0, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}]}], {0x14}}, 0x84}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet(0x2, 0xa, 0x0) bind$inet(r3, &(0x7f0000000040), 0x10) 3.188793881s ago: executing program 4 (id=1370): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="540100001000130700000000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) r2 = syz_usbip_server_init(0x3) write$usbip_server(r2, &(0x7f0000000080)=@ret_unlink={{0x4, 0x5, 0x0, 0x0, 0x3}, {0x5}}, 0x30) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000d00)) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f0000001940)=""/4086, 0xff6) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000340)=&(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES8=r5, @ANYRES16=r2, @ANYRES16=r2, @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c0000000e0a010300000000000000000500000008000442fa53e8dad7ddcd9600cd000000010900020073797a320000000008000440000000030900010073797a30000000004c000000030a010800000000000000000a0000000900010073797a30000000000900030073797a31000000000900030073797a31000000000a000700726f757465000000080005400000000020000000120a01020000000000000000000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000011c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000002", @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) open(&(0x7f0000000080)='./bus\x00', 0x145042, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f00000008c0)="bc607c5d8caef5d06db62280b8f1ce145b62b58e61f5f1b66a012f9afa43bcbac78535f12bec5e78d6113eb0744f232cd0f3a7043a01578a40b47a00"/71, &(0x7f0000000800)=""/171}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x14, &(0x7f0000000200)={&(0x7f0000000940)=@delqdisc={0x0, 0x25, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xe}, {0xfff3}, {0xfff3, 0xb}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x9}, @TCA_RATE={0x0, 0x5, {0x80, 0x8}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x7, 0x5, 0x1, 0x4, 0x2, 0x7, 0x4}}, {0x0, 0x2, [0x33, 0x3, 0x2, 0x8, 0x5, 0x8, 0x5, 0xd, 0x4]}}, {{0x0, 0x1, {0xc, 0x8, 0x0, 0x100, 0x1, 0x2, 0x2}}, {0x0, 0x2, [0x3ff, 0x8001]}}, {{0x0, 0x1, {0xe, 0xfe, 0x3, 0x0, 0x1, 0x8000, 0x5}}, {0x0, 0x2, [0x2, 0x7ff, 0xf09]}}, {{0x0, 0x1, {0x2, 0xb, 0x5, 0x6, 0x2, 0x200, 0x2}}, {0x0, 0x2, [0x200, 0x8, 0x9]}}, {{0x0, 0x1, {0x6, 0x0, 0x61a6, 0x3ff, 0x2, 0xffff, 0x1d8}}, {0x0, 0x2, [0x6, 0x401]}}, {{0x0, 0x1, {0x1, 0x3, 0xfc4b, 0x400, 0x0, 0x7ff, 0xe6c}}, {0x0, 0x2, [0x8, 0x35f8, 0x1, 0x3]}}, {{0x0, 0x1, {0x4, 0x4, 0x100, 0x9, 0x0, 0x7, 0xb9c}}, {0x0, 0x2, [0x8, 0x7, 0x100, 0x2, 0x7ff, 0x3, 0xfff]}}, {{0x0, 0x1, {0x9, 0x7, 0x0, 0xd6f, 0x1, 0x4}}, {0x0, 0x2, [0x4]}}, {{0x0, 0x1, {0x4e, 0x5, 0xa6, 0x2, 0x0, 0x4, 0x5}}, {0x0, 0x2, [0x5, 0x1, 0xfff7]}}, {{0x0, 0x1, {0x2, 0x1, 0x1, 0x3, 0x1, 0x4, 0x5}}, {0x0, 0x2, [0x5, 0x9, 0x1, 0x0, 0x1ff, 0x81, 0x1, 0x3, 0x5, 0x1]}}]}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xde, 0x7, 0x8, 0x9, 0x0, 0x5, 0x6}}, {0x0, 0x2, [0x81, 0x4]}}, {{0x0, 0x1, {0xa8, 0x80, 0x81, 0xa, 0x2, 0x7, 0x9}}, {0x0, 0x2, [0x81, 0x8, 0x3, 0x5]}}, {{0x0, 0x1, {0xa, 0x3, 0x4163, 0x0, 0x2, 0x1000, 0x7fff}}, {0x0, 0x2, [0x7, 0x10, 0x4]}}, {{0x0, 0x1, {0xf8, 0x44, 0x5612, 0xffff, 0x0, 0xfffffff7, 0x1}}, {0x0, 0x2, [0x2, 0x7, 0xfff8]}}]}]}, 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 3.149857445s ago: executing program 3 (id=1371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4100, 0xf0cb2f4a0c2cfc5d, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000400)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000440)={r3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x26f}]}) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x0, 0x1}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x40}, 0x18) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x13, @string={0x13, 0x3, "5d95b5db2648b4c56db3094885239e187f"}}, 0x0, 0x0}, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) connect(0xffffffffffffffff, &(0x7f0000000140)=@rc={0x1f, @any, 0x5}, 0x80) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) syz_usb_disconnect(r5) ioctl$EVIOCGMASK(r6, 0x541b, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 2.86674273s ago: executing program 1 (id=1372): io_setup(0x3, &(0x7f0000000140)=0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x264e33, 0x0) io_submit(r0, 0x1, &(0x7f0000000a40)=[0x0]) 2.144025614s ago: executing program 1 (id=1373): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x21, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@remote, 0x8000}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@remote}, {@multicast2}, {@private}, {}, {@broadcast}]}, @noop, @noop, @rr={0x7, 0xb, 0x0, [@loopback, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.005163872s ago: executing program 0 (id=1374): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000040)={0x3ff}, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.261360722s ago: executing program 3 (id=1375): socket$key(0xf, 0x3, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x54, 0x0, 0x10, 0x0, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x81) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet_icmp(0x2, 0x2, 0x1) bind$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0xf50}], 0x2) 1.065747073s ago: executing program 0 (id=1376): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x6, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xecb}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000900020073797a30000000000c000780080012400000100014000300686173683a69702c706f72742c697000050005000a000000050004"], 0x58}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x11, &(0x7f0000000080)={r5}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="00ea802f13f37831b2e5df049f15cc4a75b26e0af9c04e712b134807714c306b7e45dd8cb3108d8c6014b1b36ab904f184f2c639dbcdfb6b242645896fa1a8d0a12cee8f91", @ANYRES32], 0xffda) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xac, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4c}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x320}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0xac}}, 0x0) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 224.464255ms ago: executing program 0 (id=1377): socket$kcm(0x2, 0x3, 0x2) r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 11.714454ms ago: executing program 0 (id=1378): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffe, 0xa000000000, 0x0, 0x0, 0x195f5cd, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffffffc, 0x7f}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101005, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') pread64(r5, &(0x7f0000004180)=""/4096, 0x1000, 0x0) sendto$packet(r4, &(0x7f0000000700)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1379): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x61f285}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r4, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): : config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 459.207618][ T81] hsr_slave_1: left promiscuous mode [ 459.217869][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.218957][ T5142] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 459.237804][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.257812][ T5142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.259479][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.298458][ T5142] usb 2-1: config 0 descriptor?? [ 459.309301][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.333051][ T5142] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 459.407472][ T81] veth1_macvtap: left promiscuous mode [ 459.435774][ T8945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=8945 comm=syz.4.794 [ 459.450764][ T8945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=8945 comm=syz.4.794 [ 459.473771][ T81] veth0_macvtap: left promiscuous mode [ 459.485059][ T81] veth1_vlan: left promiscuous mode [ 459.495842][ T81] veth0_vlan: left promiscuous mode [ 459.543734][ T5142] usb 2-1: USB disconnect, device number 7 [ 459.543808][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 459.579394][ T8947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.796'. [ 459.604764][ T5142] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 459.703635][ T8947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.796'. [ 459.969183][ T8947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.796'. [ 460.244858][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.797'. [ 460.512910][ T8959] binder: 8958:8959 ioctl c0306201 0 returned -14 [ 461.231781][ T81] team0 (unregistering): Port device team_slave_1 removed [ 461.366572][ T81] team0 (unregistering): Port device team_slave_0 removed [ 462.354270][ T5142] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 462.595892][ T5142] usb 2-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=2b.e7 [ 462.628522][ T5142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.650481][ T5142] usb 2-1: Product: syz [ 462.656283][ T5142] usb 2-1: Manufacturer: syz [ 462.677897][ T5142] usb 2-1: SerialNumber: syz [ 462.699234][ T5142] usb 2-1: config 0 descriptor?? [ 462.759602][ T5142] hub 2-1:0.0: bad descriptor, ignoring hub [ 462.765596][ T5142] hub 2-1:0.0: probe with driver hub failed with error -5 [ 462.828718][ T5142] mct_u232 2-1:0.0: MCT U232 converter detected [ 462.849694][ T5142] mct_u232 ttyUSB0: expected endpoint missing [ 463.130371][ T5142] usb 2-1: USB disconnect, device number 8 [ 463.162148][ T5142] mct_u232 2-1:0.0: device disconnected [ 463.530325][ T8434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.746782][ T29] audit: type=1326 audit(1720509618.992:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8986 comm="syz.4.803" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e42775bd9 code=0x0 [ 463.974508][ T8993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.803'. [ 464.003932][ T8434] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.064136][ T8987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.123232][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.130574][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.164713][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.171965][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.181890][ T8987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.259354][ T8993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.764832][ T8661] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 464.834888][ T8661] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 464.969913][ T8661] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 465.068020][ T8661] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 465.151528][ T9013] fuse: Unknown parameter '0x0000000000000004' [ 465.328953][ T9019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.808'. [ 465.537675][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 465.571037][ T8434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.726022][ T8661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.788834][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 465.823409][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 465.858593][ T8] usb 4-1: config 0 has no interface number 0 [ 465.876795][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 465.901757][ T8661] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.932017][ T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 465.977790][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.031524][ T8] usb 4-1: config 0 descriptor?? [ 466.081922][ T8] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 466.083762][ T5074] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.099609][ T5074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.195238][ T8434] veth0_vlan: entered promiscuous mode [ 466.332681][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.340499][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.369475][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 466.379507][ T5227] usb 4-1: USB disconnect, device number 9 [ 466.409720][ T5227] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 466.475003][ T8434] veth1_vlan: entered promiscuous mode [ 466.806321][ T8434] veth0_macvtap: entered promiscuous mode [ 466.872716][ T8434] veth1_macvtap: entered promiscuous mode [ 467.007183][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.051789][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.084971][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.145312][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.187801][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.255481][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.305336][ T8434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.340531][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.379687][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.401577][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.425989][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.450121][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.477560][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.526000][ T8434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.572197][ T8434] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.620412][ T8434] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.657576][ T8434] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.821905][ T29] audit: type=1326 audit(1720509623.072:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9057 comm="syz.3.816" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8fe8775bd9 code=0x0 [ 467.858729][ T8434] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.922143][ T9064] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9064 comm=syz.1.818 [ 467.969164][ T29] audit: type=1400 audit(1720509623.212:412): avc: denied { read } for pid=9062 comm="syz.1.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 468.032186][ T9061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.816'. [ 468.087623][ T5142] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 468.105343][ T9067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.322728][ T9071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.335655][ T5142] usb 5-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=2b.e7 [ 468.370904][ T5142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.381813][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.413713][ T5142] usb 5-1: Product: syz [ 468.415120][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.432376][ T9073] netlink: 40 bytes leftover after parsing attributes in process `syz.1.819'. [ 468.435228][ T5142] usb 5-1: Manufacturer: syz [ 468.447912][ T8661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.473627][ T5142] usb 5-1: SerialNumber: syz [ 468.506486][ T5142] usb 5-1: config 0 descriptor?? [ 468.529014][ T5142] hub 5-1:0.0: bad descriptor, ignoring hub [ 468.547489][ T5142] hub 5-1:0.0: probe with driver hub failed with error -5 [ 468.559608][ T5142] mct_u232 5-1:0.0: MCT U232 converter detected [ 468.582340][ T5142] mct_u232 ttyUSB0: expected endpoint missing [ 468.645185][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.683634][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.692420][ T9073] netlink: 40 bytes leftover after parsing attributes in process `syz.1.819'. [ 468.989297][ T5074] usb 5-1: USB disconnect, device number 10 [ 469.009656][ T5074] mct_u232 5-1:0.0: device disconnected [ 469.037527][ T8661] veth0_vlan: entered promiscuous mode [ 469.151329][ T8661] veth1_vlan: entered promiscuous mode [ 469.463780][ T8661] veth0_macvtap: entered promiscuous mode [ 469.506043][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.820'. [ 469.521914][ T8661] veth1_macvtap: entered promiscuous mode [ 469.849767][ T9090] netlink: 40 bytes leftover after parsing attributes in process `syz.2.822'. [ 469.868592][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.925837][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.984045][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.113492][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.143667][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.159215][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.176890][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.215115][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.218005][ T9097] fuse: Unknown parameter '0x0000000000000004' [ 470.229800][ T8661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.313287][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 470.385462][ T9093] bridge0: entered promiscuous mode [ 470.396098][ T9090] netlink: 40 bytes leftover after parsing attributes in process `syz.2.822'. [ 470.414998][ T9093] macvtap1: entered promiscuous mode [ 470.435914][ T9093] macvtap1: entered allmulticast mode [ 470.466266][ T9093] bridge0: entered allmulticast mode [ 470.521903][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 470.539959][ T9096] bridge0: left allmulticast mode [ 470.553950][ T9096] bridge0: left promiscuous mode [ 470.579449][ T9096] macvtap1: left promiscuous mode [ 470.584817][ T9096] macvtap1: left allmulticast mode [ 470.617373][ T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 470.626649][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.688191][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.801717][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.839970][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.850121][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 470.870274][ T45] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 470.885906][ T45] usb 2-1: config 0 has no interface number 0 [ 470.898372][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.927634][ T45] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 470.957825][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.003036][ T45] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 471.017942][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.080184][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.080221][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.083127][ T8661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.925140][ T5098] Bluetooth: hci4: command tx timeout [ 471.950063][ T45] usb 2-1: config 0 descriptor?? [ 472.037920][ T45] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 472.049655][ T8661] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.068727][ T8661] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.088723][ T29] audit: type=1326 audit(1720509627.332:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9112 comm="syz.2.829" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2162975bd9 code=0x0 [ 472.114205][ T8661] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.142067][ T8661] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.202142][ T25] usb 2-1: USB disconnect, device number 9 [ 472.222165][ T9108] lo speed is unknown, defaulting to 1000 [ 472.269118][ T9121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.829'. [ 472.278756][ T25] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 472.318403][ T9108] lo speed is unknown, defaulting to 1000 [ 472.325642][ T29] audit: type=1326 audit(1720509627.572:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9117 comm="syz.3.830" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8fe8775bd9 code=0x0 [ 472.350889][ T9108] lo speed is unknown, defaulting to 1000 [ 472.391979][ T29] audit: type=1400 audit(1720509627.602:415): avc: denied { mount } for pid=9107 comm="syz.4.828" name="/" dev="autofs" ino=28365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 472.462385][ T9123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.656473][ T9121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.690223][ T9125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.713208][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.738446][ T9124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.830'. [ 472.773376][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.897574][ T9126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.915899][ T2427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.925207][ T2427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.986071][ T9118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.095753][ T9124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.397664][ T9108] infiniband syz1: set active [ 473.407957][ T25] lo speed is unknown, defaulting to 1000 [ 473.415522][ T9108] infiniband syz1: added lo [ 473.436265][ T9108] syz1: rxe_create_cq: returned err = -12 [ 473.465269][ T9108] infiniband syz1: Couldn't create ib_mad CQ [ 473.492277][ T9108] infiniband syz1: Couldn't open port 1 [ 473.642135][ T9108] RDS/IB: syz1: added [ 473.649549][ T9108] smc: adding ib device syz1 with port count 1 [ 473.659203][ T9134] 9pnet_fd: Insufficient options for proto=fd [ 473.661120][ T9108] smc: ib device syz1 port 1 has pnetid [ 473.724754][ T9108] lo speed is unknown, defaulting to 1000 [ 473.744878][ T25] lo speed is unknown, defaulting to 1000 [ 474.196337][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'. [ 474.209541][ T5098] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 474.306554][ T9145] bridge0: entered promiscuous mode [ 474.324271][ T9145] macvtap1: entered promiscuous mode [ 474.335387][ T9145] macvtap1: entered allmulticast mode [ 474.351091][ T9145] bridge0: entered allmulticast mode [ 474.380672][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'. [ 474.640393][ T9148] bridge0: left allmulticast mode [ 475.675614][ T9148] bridge0: left promiscuous mode [ 475.681927][ T9148] macvtap1: left promiscuous mode [ 475.687233][ T9148] macvtap1: left allmulticast mode [ 475.775838][ T9154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.835'. [ 475.957022][ T9154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.835'. [ 476.009390][ T9160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.839'. [ 476.109204][ T29] audit: type=1326 audit(1720509631.362:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz.0.839" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d52d75bd9 code=0x0 [ 476.345333][ T9108] lo speed is unknown, defaulting to 1000 [ 476.645356][ T9108] lo speed is unknown, defaulting to 1000 [ 477.018940][ T9168] netlink: 40 bytes leftover after parsing attributes in process `syz.1.840'. [ 477.249754][ T9168] netlink: 40 bytes leftover after parsing attributes in process `syz.1.840'. [ 477.267377][ T29] audit: type=1326 audit(1720509632.492:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9173 comm="syz.0.843" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d52d75bd9 code=0x0 [ 477.709593][ T9181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.843'. [ 477.786662][ T9185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.935317][ T9181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.016091][ T9108] lo speed is unknown, defaulting to 1000 [ 478.041278][ T9181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.840784][ T9211] 9pnet_fd: Insufficient options for proto=fd [ 480.025249][ T9213] ======================================================= [ 480.025249][ T9213] WARNING: The mand mount option has been deprecated and [ 480.025249][ T9213] and is ignored by this kernel. Remove the mand [ 480.025249][ T9213] option from the mount to silence this warning. [ 480.025249][ T9213] ======================================================= [ 480.060275][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.258889][ T9108] lo speed is unknown, defaulting to 1000 [ 480.474937][ T29] audit: type=1400 audit(1720509635.722:418): avc: denied { unmount } for pid=7152 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 482.277519][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 482.446323][ T2427] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.505874][ T8] usb 3-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=2b.e7 [ 482.515953][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.525274][ T8] usb 3-1: Product: syz [ 482.529763][ T8] usb 3-1: Manufacturer: syz [ 482.534472][ T8] usb 3-1: SerialNumber: syz [ 482.569398][ T8] usb 3-1: config 0 descriptor?? [ 482.594903][ T8] hub 3-1:0.0: bad descriptor, ignoring hub [ 482.601715][ T8] hub 3-1:0.0: probe with driver hub failed with error -5 [ 482.612055][ T8] mct_u232 3-1:0.0: MCT U232 converter detected [ 482.656962][ T8] mct_u232 ttyUSB0: expected endpoint missing [ 482.739168][ T2427] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.938087][ T8] usb 3-1: USB disconnect, device number 6 [ 482.967939][ T8] mct_u232 3-1:0.0: device disconnected [ 483.191127][ T2427] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.303302][ T29] audit: type=1326 audit(1720509638.552:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.0.859" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d52d75bd9 code=0x0 [ 483.393213][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 483.419523][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 483.429949][ T5091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 483.449037][ T9234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.859'. [ 483.469756][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 483.478824][ T5091] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 483.486532][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 483.510300][ T9239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.667195][ T9234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.773302][ T9234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.930162][ T2427] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.211953][ T9236] lo speed is unknown, defaulting to 1000 [ 484.359191][ T5088] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 484.410063][ T5088] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 484.428779][ T5088] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 484.447038][ T5088] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 484.470603][ T5088] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 484.498821][ T5088] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 484.942876][ T2427] bridge_slave_1: left allmulticast mode [ 484.967650][ T2427] bridge_slave_1: left promiscuous mode [ 484.973547][ T2427] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.057175][ T2427] bridge_slave_0: left allmulticast mode [ 485.091409][ T2427] bridge_slave_0: left promiscuous mode [ 485.129270][ T2427] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.747678][ T5088] Bluetooth: hci2: command tx timeout [ 485.992222][ T5142] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 486.296786][ T5142] usb 4-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=2b.e7 [ 486.333551][ T5142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.372485][ T5142] usb 4-1: Product: syz [ 486.385708][ T5142] usb 4-1: Manufacturer: syz [ 486.406525][ T5142] usb 4-1: SerialNumber: syz [ 486.445526][ T5142] usb 4-1: config 0 descriptor?? [ 486.479251][ T5142] hub 4-1:0.0: bad descriptor, ignoring hub [ 486.504051][ T5142] hub 4-1:0.0: probe with driver hub failed with error -5 [ 486.531291][ T5142] mct_u232 4-1:0.0: MCT U232 converter detected [ 486.540531][ T5142] mct_u232 ttyUSB0: expected endpoint missing [ 486.630624][ T5088] Bluetooth: hci5: command tx timeout [ 486.870602][ T5142] usb 4-1: USB disconnect, device number 10 [ 486.899331][ T5142] mct_u232 4-1:0.0: device disconnected [ 487.141786][ T2427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.179608][ T2427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.202470][ T2427] bond0 (unregistering): Released all slaves [ 487.394299][ T9245] lo speed is unknown, defaulting to 1000 [ 487.827635][ T5088] Bluetooth: hci2: command tx timeout [ 488.289255][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'. [ 488.298405][ T9289] veth1_to_hsr: entered promiscuous mode [ 488.304108][ T9289] veth1_to_hsr: entered allmulticast mode [ 488.317379][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'. [ 488.378257][ T9289] veth1_to_hsr: left promiscuous mode [ 488.408018][ T9289] veth1_to_hsr: left allmulticast mode [ 488.718923][ T5088] Bluetooth: hci5: command tx timeout [ 489.488822][ T29] audit: type=1326 audit(1720509644.742:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9312 comm="syz.3.871" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8fe8775bd9 code=0x0 [ 489.918956][ T5088] Bluetooth: hci2: command tx timeout [ 489.974435][ T9313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.871'. [ 490.026373][ T9321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.106509][ T2427] hsr_slave_0: left promiscuous mode [ 490.132652][ T2427] hsr_slave_1: left promiscuous mode [ 490.153977][ T2427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.189103][ T9321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.199236][ T2427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.222357][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 490.231479][ T2427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.265327][ T2427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.350145][ T9321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.380225][ T2427] veth1_macvtap: left promiscuous mode [ 490.428684][ T2427] veth0_macvtap: left promiscuous mode [ 490.434553][ T2427] veth1_vlan: left promiscuous mode [ 490.457695][ T2427] veth0_vlan: left promiscuous mode [ 490.479638][ T8] usb 3-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=2b.e7 [ 490.505135][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.532061][ T8] usb 3-1: Product: syz [ 490.536599][ T8] usb 3-1: Manufacturer: syz [ 490.550349][ T8] usb 3-1: SerialNumber: syz [ 490.580612][ T8] usb 3-1: config 0 descriptor?? [ 490.605439][ T8] hub 3-1:0.0: bad descriptor, ignoring hub [ 490.632765][ T8] hub 3-1:0.0: probe with driver hub failed with error -5 [ 490.678946][ T8] mct_u232 3-1:0.0: MCT U232 converter detected [ 490.695083][ T8] mct_u232 ttyUSB0: expected endpoint missing [ 490.788099][ T5088] Bluetooth: hci5: command tx timeout [ 490.950111][ T5139] usb 3-1: USB disconnect, device number 7 [ 490.977116][ T5139] mct_u232 3-1:0.0: device disconnected [ 491.960685][ T9336] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 491.967288][ T9336] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 491.984487][ T9336] vhci_hcd vhci_hcd.0: Device attached [ 491.992966][ T5088] Bluetooth: hci2: command tx timeout [ 492.065428][ T9336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=9336 comm=syz.2.873 [ 492.232022][ T2427] team0 (unregistering): Port device team_slave_1 removed [ 492.258417][ T8] usb 13-1: new high-speed USB device number 3 using vhci_hcd [ 492.301445][ T2427] team0 (unregistering): Port device team_slave_0 removed [ 492.877791][ T5088] Bluetooth: hci5: command tx timeout [ 492.965076][ T9236] chnl_net:caif_netlink_parms(): no params data found [ 493.099890][ T9337] vhci_hcd: connection reset by peer [ 493.123712][ T2456] vhci_hcd: stop threads [ 493.128122][ T2456] vhci_hcd: release socket [ 493.132706][ T2456] vhci_hcd: disconnect device [ 493.577236][ T9236] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.585503][ T29] audit: type=1400 audit(1720509648.832:421): avc: denied { read } for pid=9353 comm="syz.0.875" laddr=172.20.20.170 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 493.587862][ T9236] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.677054][ T9236] bridge_slave_0: entered allmulticast mode [ 493.714701][ T9236] bridge_slave_0: entered promiscuous mode [ 494.071212][ T9236] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.103417][ T9236] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.137850][ T9236] bridge_slave_1: entered allmulticast mode [ 494.183596][ T9236] bridge_slave_1: entered promiscuous mode [ 494.825091][ T9370] binder: BINDER_SET_CONTEXT_MGR already set [ 494.833892][ T9370] binder: 9368:9370 ioctl 4018620d 20000040 returned -16 [ 494.852055][ T9370] FAULT_INJECTION: forcing a failure. [ 494.852055][ T9370] name failslab, interval 1, probability 0, space 0, times 0 [ 494.866441][ T9370] CPU: 1 PID: 9370 Comm: syz.2.880 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 494.876498][ T9370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 494.886592][ T9370] Call Trace: [ 494.889881][ T9370] [ 494.892823][ T9370] dump_stack_lvl+0x16c/0x1f0 [ 494.897525][ T9370] should_fail_ex+0x497/0x5b0 [ 494.902222][ T9370] should_failslab+0x9/0x20 [ 494.906750][ T9370] __kmalloc_noprof+0xcf/0x410 [ 494.911527][ T9370] ? __pfx_lock_acquire+0x10/0x10 [ 494.916579][ T9370] tomoyo_realpath_from_path+0xb9/0x720 [ 494.922160][ T9370] ? tomoyo_profile+0x47/0x60 [ 494.926873][ T9370] tomoyo_path_number_perm+0x245/0x590 [ 494.932372][ T9370] ? tomoyo_path_number_perm+0x232/0x590 [ 494.938043][ T9370] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 494.944087][ T9370] ? __fget_files+0x256/0x400 [ 494.948806][ T9370] security_file_ioctl+0x75/0xc0 [ 494.953779][ T9370] __x64_sys_ioctl+0xbb/0x220 [ 494.958499][ T9370] do_syscall_64+0xcd/0x250 [ 494.963049][ T9370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.969002][ T9370] RIP: 0033:0x7f2162975bd9 [ 494.973453][ T9370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.993183][ T9370] RSP: 002b:00007f2163750048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.001628][ T9370] RAX: ffffffffffffffda RBX: 00007f2162b03f60 RCX: 00007f2162975bd9 [ 495.009625][ T9370] RDX: 0000000020000140 RSI: 00000000c0306201 RDI: 0000000000000003 [ 495.017620][ T9370] RBP: 00007f21637500a0 R08: 0000000000000000 R09: 0000000000000000 [ 495.025614][ T9370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.033610][ T9370] R13: 000000000000000b R14: 00007f2162b03f60 R15: 00007fff215503b8 [ 495.041612][ T9370] [ 495.071154][ T9236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.113058][ T9370] ERROR: Out of memory at tomoyo_realpath_from_path. [ 495.205623][ T9236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.464902][ T9245] chnl_net:caif_netlink_parms(): no params data found [ 495.558183][ T9236] team0: Port device team_slave_0 added [ 495.647872][ T29] audit: type=1326 audit(1720509650.892:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.2.882" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2162975bd9 code=0x0 [ 495.675137][ T9236] team0: Port device team_slave_1 added [ 495.873354][ T9386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.882'. [ 496.002698][ T9390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.340448][ T9377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.407688][ T9390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.583934][ T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 496.622274][ T2427] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.524502][ T8] vhci_hcd: vhci_device speed not set [ 499.715621][ T45] usb 1-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=2b.e7 [ 499.725910][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.755714][ T45] usb 1-1: Product: syz [ 499.770023][ T45] usb 1-1: Manufacturer: syz [ 499.779763][ T45] usb 1-1: SerialNumber: syz [ 499.790044][ T45] usb 1-1: config 0 descriptor?? [ 499.802997][ T45] hub 1-1:0.0: bad descriptor, ignoring hub [ 499.809155][ T45] hub 1-1:0.0: probe with driver hub failed with error -5 [ 499.821279][ T45] mct_u232 1-1:0.0: MCT U232 converter detected [ 499.829734][ T45] mct_u232 ttyUSB0: expected endpoint missing [ 499.916060][ T9236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.944845][ T9236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.024900][ T9236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.096152][ T9236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.127968][ T9236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.170817][ T9236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.186059][ T45] usb 1-1: USB disconnect, device number 7 [ 500.219386][ T45] mct_u232 1-1:0.0: device disconnected [ 500.311220][ T2427] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.836293][ T2427] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.136276][ T9236] hsr_slave_0: entered promiscuous mode [ 501.189778][ T9236] hsr_slave_1: entered promiscuous mode [ 501.416050][ T2427] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.160841][ T9245] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.180232][ T9245] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.203114][ T9245] bridge_slave_0: entered allmulticast mode [ 502.226552][ T9245] bridge_slave_0: entered promiscuous mode [ 502.355337][ T9245] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.447828][ T9245] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.455202][ T9245] bridge_slave_1: entered allmulticast mode [ 502.492534][ T9245] bridge_slave_1: entered promiscuous mode [ 503.619765][ T29] audit: type=1326 audit(1720509658.872:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9449 comm="syz.2.894" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2162975bd9 code=0x0 [ 503.713995][ T9245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.797831][ T7616] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 503.883815][ T9453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.894'. [ 503.955714][ T9245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.970668][ T9450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.025576][ T7616] usb 4-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=2b.e7 [ 504.039274][ T7616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.071995][ T7616] usb 4-1: Product: syz [ 504.091907][ T7616] usb 4-1: Manufacturer: syz [ 504.096630][ T7616] usb 4-1: SerialNumber: syz [ 504.101906][ T9450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.130350][ T7616] usb 4-1: config 0 descriptor?? [ 504.175815][ T7616] hub 4-1:0.0: bad descriptor, ignoring hub [ 504.204358][ T9450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.214250][ T7616] hub 4-1:0.0: probe with driver hub failed with error -5 [ 504.215514][ T7616] mct_u232 4-1:0.0: MCT U232 converter detected [ 504.247318][ T7616] mct_u232 ttyUSB0: expected endpoint missing [ 504.440442][ T7616] usb 4-1: USB disconnect, device number 11 [ 504.504501][ T7616] mct_u232 4-1:0.0: device disconnected [ 504.654817][ T9245] team0: Port device team_slave_0 added [ 504.754624][ T2427] bridge_slave_1: left allmulticast mode [ 504.774182][ T2427] bridge_slave_1: left promiscuous mode [ 504.794369][ T2427] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.835379][ T2427] bridge_slave_0: left allmulticast mode [ 504.853706][ T2427] bridge_slave_0: left promiscuous mode [ 504.864148][ T2427] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.402486][ T9477] binder: 9476:9477 ioctl c0306201 0 returned -14 [ 507.113772][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.120528][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.246491][ T9496] 9pnet_fd: Insufficient options for proto=fd [ 507.281012][ T9497] 9pnet_fd: Insufficient options for proto=fd [ 507.746330][ T9507] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.903'. [ 508.449241][ T2427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.498207][ T2427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.521992][ T2427] bond0 (unregistering): Released all slaves [ 508.801666][ T9245] team0: Port device team_slave_1 added [ 509.651441][ T9245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.667784][ T9245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.737915][ T9245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.985622][ T9535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.912'. [ 510.044307][ T9245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.062648][ T9245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.133939][ T9245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.831708][ T9245] hsr_slave_0: entered promiscuous mode [ 510.890450][ T9245] hsr_slave_1: entered promiscuous mode [ 510.917607][ T9245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.925333][ T9245] Cannot create hsr debugfs directory [ 511.946804][ T2427] hsr_slave_0: left promiscuous mode [ 512.002120][ T2427] hsr_slave_1: left promiscuous mode [ 512.051854][ T2427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.108775][ T2427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.150684][ T2427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.197600][ T2427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.364351][ T2427] veth1_macvtap: left promiscuous mode [ 512.428096][ T2427] veth0_macvtap: left promiscuous mode [ 512.434002][ T2427] veth1_vlan: left promiscuous mode [ 512.487374][ T2427] veth0_vlan: left promiscuous mode [ 513.242206][ T2427] infiniband syz1: set down [ 514.288758][ T2427] team0 (unregistering): Port device team_slave_1 removed [ 514.355602][ T2427] team0 (unregistering): Port device team_slave_0 removed [ 515.015029][ T2447] smc: removing ib device syz1 [ 515.385705][ T5227] lo speed is unknown, defaulting to 1000 [ 515.537154][ T9236] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 515.664134][ T9236] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 516.002526][ T9236] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 516.093882][ T9236] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 518.951327][ T29] audit: type=1400 audit(1720509674.192:424): avc: denied { create } for pid=9630 comm="syz.3.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 519.072293][ T29] audit: type=1400 audit(1720509674.202:425): avc: denied { ioctl } for pid=9630 comm="syz.3.936" path="socket:[30499]" dev="sockfs" ino=30499 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 519.156159][ T29] audit: type=1400 audit(1720509674.202:426): avc: denied { setopt } for pid=9630 comm="syz.3.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 519.767846][ T9637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.937'. [ 520.815389][ T9236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.056647][ T9236] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.235076][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.242375][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.301482][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.308855][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.685705][ T9245] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 521.718109][ T9245] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 521.757969][ T9245] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 521.781037][ T9245] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 522.975697][ T9245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.087294][ T9245] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.170784][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.178130][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.286879][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.294557][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.492989][ T9236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.616080][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 523.701675][ T9686] bond_slave_0: entered promiscuous mode [ 523.707553][ T9686] bond_slave_1: entered promiscuous mode [ 523.741056][ T9686] macvtap1: entered promiscuous mode [ 523.764838][ T9686] bond0: entered promiscuous mode [ 523.781061][ T9686] macvtap1: entered allmulticast mode [ 523.798415][ T9686] bond0: entered allmulticast mode [ 523.834314][ T9686] bond_slave_0: entered allmulticast mode [ 523.848584][ T9686] bond_slave_1: entered allmulticast mode [ 523.875094][ T9686] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 523.896309][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 523.940059][ T9688] bond0: left allmulticast mode [ 523.946794][ T9688] bond_slave_0: left allmulticast mode [ 523.985891][ T9688] bond_slave_1: left allmulticast mode [ 524.003241][ T9688] bond0: left promiscuous mode [ 524.029050][ T9688] bond_slave_0: left promiscuous mode [ 524.034678][ T9688] bond_slave_1: left promiscuous mode [ 524.137807][ T9688] macvtap1: left promiscuous mode [ 524.157884][ T9688] macvtap1: left allmulticast mode [ 525.633818][ T9236] veth0_vlan: entered promiscuous mode [ 525.776145][ T9236] veth1_vlan: entered promiscuous mode [ 525.835174][ T9245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.144736][ T9236] veth0_macvtap: entered promiscuous mode [ 526.216737][ T9236] veth1_macvtap: entered promiscuous mode [ 526.259995][ T9245] veth0_vlan: entered promiscuous mode [ 526.351154][ T9245] veth1_vlan: entered promiscuous mode [ 526.395792][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.410248][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.425171][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.453329][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.473435][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.513513][ T9737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.953'. [ 526.524356][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.549538][ T9236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.611798][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.631265][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.646253][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.661450][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.697822][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.708926][ T29] audit: type=1326 audit(1720509681.952:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.0.953" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d52d75bd9 code=0x0 [ 526.760359][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.807100][ T9236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.863984][ T9236] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.915210][ T9236] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.939885][ T9236] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.977652][ T9236] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.229754][ T9245] veth0_macvtap: entered promiscuous mode [ 527.307144][ T9245] veth1_macvtap: entered promiscuous mode [ 527.607541][ T9245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.627483][ T9245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.657506][ T9245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.707518][ T9245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.747583][ T9245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.773765][ T9245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.817481][ T9245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.882010][ T9245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.941174][ T9245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.473419][ T2447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.500580][ T2447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.594999][ T9245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.647525][ T9245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.676315][ T9245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.707687][ T9245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.732529][ T9245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.756609][ T9245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.776703][ T9245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.837633][ T9245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.860917][ T9245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.003780][ T9245] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.040411][ T9245] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.082716][ T9245] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.104953][ T9245] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.455848][ T2427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.488168][ T2427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.752622][ T9787] netlink: 36 bytes leftover after parsing attributes in process `syz.0.960'. [ 531.134267][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.185877][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.234153][ T9800] netlink: 104 bytes leftover after parsing attributes in process `syz.4.962'. [ 531.562128][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.596541][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.963381][ T9810] netlink: 25 bytes leftover after parsing attributes in process `syz.4.964'. [ 533.067195][ T9833] FAULT_INJECTION: forcing a failure. [ 533.067195][ T9833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.113039][ T9833] CPU: 0 PID: 9833 Comm: syz.4.967 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 533.123105][ T9833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 533.133204][ T9833] Call Trace: [ 533.136518][ T9833] [ 533.139490][ T9833] dump_stack_lvl+0x16c/0x1f0 [ 533.144231][ T9833] should_fail_ex+0x497/0x5b0 [ 533.148964][ T9833] _copy_from_user+0x30/0xf0 [ 533.153607][ T9833] l2cap_sock_setsockopt+0x1903/0x2230 [ 533.159157][ T9833] ? __pfx_sock_has_perm+0x10/0x10 [ 533.164345][ T9833] ? selinux_netlbl_socket_setsockopt+0x142/0x440 [ 533.170824][ T9833] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 533.176700][ T9833] ? find_held_lock+0x2d/0x110 [ 533.181608][ T9833] ? selinux_socket_setsockopt+0x6a/0x80 [ 533.187282][ T9833] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 533.193124][ T9833] do_sock_setsockopt+0x222/0x480 [ 533.198193][ T9833] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 533.203781][ T9833] ? __fget_light+0x173/0x210 [ 533.208494][ T9833] __sys_setsockopt+0x1a4/0x270 [ 533.213380][ T9833] ? __pfx___sys_setsockopt+0x10/0x10 [ 533.218787][ T9833] ? fput+0x32/0x390 [ 533.222706][ T9833] ? ksys_write+0x1ab/0x260 [ 533.227240][ T9833] ? __pfx_ksys_write+0x10/0x10 [ 533.232131][ T9833] __x64_sys_setsockopt+0xbd/0x160 [ 533.237276][ T9833] ? do_syscall_64+0x91/0x250 [ 533.241987][ T9833] ? lockdep_hardirqs_on+0x7c/0x110 [ 533.247218][ T9833] do_syscall_64+0xcd/0x250 [ 533.251796][ T9833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.257737][ T9833] RIP: 0033:0x7f7d46975bd9 [ 533.262173][ T9833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.281812][ T9833] RSP: 002b:00007f7d477a0048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 533.290261][ T9833] RAX: ffffffffffffffda RBX: 00007f7d46b03f60 RCX: 00007f7d46975bd9 [ 533.298254][ T9833] RDX: 000000000000000d RSI: 0000000000000112 RDI: 0000000000000004 [ 533.306246][ T9833] RBP: 00007f7d477a00a0 R08: 0000000000000002 R09: 0000000000000000 [ 533.314239][ T9833] R10: 00000000200009c0 R11: 0000000000000246 R12: 0000000000000001 [ 533.322228][ T9833] R13: 000000000000000b R14: 00007f7d46b03f60 R15: 00007ffd4884b6c8 [ 533.330228][ T9833] [ 537.620233][ T9857] netlink: 36 bytes leftover after parsing attributes in process `syz.1.972'. [ 537.849168][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.971'. [ 539.557623][ T29] audit: type=1326 audit(1720509694.802:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.4.971" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d46975bd9 code=0x0 [ 539.615573][ T9865] fuse: Bad value for 'fd' [ 545.690465][ T9880] netlink: 25 bytes leftover after parsing attributes in process `syz.1.977'. [ 546.284763][ T9887] netlink: 'syz.2.979': attribute type 29 has an invalid length. [ 546.337554][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'. [ 546.358062][ T9887] netlink: 'syz.2.979': attribute type 29 has an invalid length. [ 546.366514][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'. [ 546.492738][ T9891] FAULT_INJECTION: forcing a failure. [ 546.492738][ T9891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.565048][ T9891] CPU: 0 PID: 9891 Comm: syz.1.980 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 546.575159][ T9891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 546.585349][ T9891] Call Trace: [ 546.588670][ T9891] [ 546.591641][ T9891] dump_stack_lvl+0x16c/0x1f0 [ 546.596477][ T9891] should_fail_ex+0x497/0x5b0 [ 546.601211][ T9891] _copy_from_user+0x30/0xf0 [ 546.605857][ T9891] copy_msghdr_from_user+0x99/0x160 [ 546.611120][ T9891] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 546.616992][ T9891] ? find_held_lock+0x2d/0x110 [ 546.621819][ T9891] ? __pfx___lock_acquire+0x10/0x10 [ 546.627094][ T9891] ___sys_sendmsg+0xff/0x1e0 [ 546.631746][ T9891] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.637016][ T9891] ? ksys_write+0x21c/0x260 [ 546.641593][ T9891] ? __fget_light+0x173/0x210 [ 546.646331][ T9891] __sys_sendmsg+0x117/0x1f0 [ 546.650984][ T9891] ? __pfx___sys_sendmsg+0x10/0x10 [ 546.656188][ T9891] do_syscall_64+0xcd/0x250 [ 546.660760][ T9891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.666723][ T9891] RIP: 0033:0x7fd9bd375bd9 [ 546.670611][ T5091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 546.671154][ T9891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.671192][ T9891] RSP: 002b:00007fd9be158048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.706486][ T9891] RAX: ffffffffffffffda RBX: 00007fd9bd503f60 RCX: 00007fd9bd375bd9 [ 546.714508][ T9891] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 546.722528][ T9891] RBP: 00007fd9be1580a0 R08: 0000000000000000 R09: 0000000000000000 [ 546.730553][ T9891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.738570][ T9891] R13: 000000000000000b R14: 00007fd9bd503f60 R15: 00007fff02463d58 [ 546.746596][ T9891] [ 546.749766][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.751433][ T9896] binder: 9895:9896 ioctl c0306201 0 returned -14 [ 546.819700][ T5091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 546.833083][ T5091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 546.853238][ T5091] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 546.867502][ T5091] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 546.878839][ T5091] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 546.890338][ T5091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 546.938622][ T5091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 546.953451][ T5091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 546.963708][ T5091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 546.972657][ T5091] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 546.980367][ T5091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 547.327788][ T2447] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.708834][ T2447] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.953899][ T9921] netlink: 36 bytes leftover after parsing attributes in process `syz.4.984'. [ 547.983127][ T2447] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.118315][ T29] audit: type=1326 audit(1720509703.372:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.2.985" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2162975bd9 code=0x0 [ 548.140924][ C0] vkms_vblank_simulate: vblank timer overrun [ 548.325480][ T2447] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.368251][ T9922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.985'. [ 548.462897][ T9936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.602547][ T9936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.749587][ T9922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.957675][ T5091] Bluetooth: hci1: command tx timeout [ 549.027706][ T5091] Bluetooth: hci0: command tx timeout [ 549.451225][ T29] audit: type=1326 audit(1720509704.662:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9932 comm="syz.1.986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9bd375bd9 code=0x0 [ 550.146433][ T9958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.988'. [ 550.156378][ T5091] Bluetooth: hci4: command 0x0406 tx timeout [ 550.196942][ T2447] bridge_slave_1: left allmulticast mode [ 550.204098][ T2447] bridge_slave_1: left promiscuous mode [ 550.216349][ T2447] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.250316][ T2447] bridge_slave_0: left allmulticast mode [ 550.302604][ T2447] bridge_slave_0: left promiscuous mode [ 550.333013][ T2447] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.405407][ T29] audit: type=1326 audit(1720509705.652:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9954 comm="syz.2.988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2162975bd9 code=0x0 [ 551.027691][ T5098] Bluetooth: hci1: command tx timeout [ 551.107547][ T5098] Bluetooth: hci0: command tx timeout [ 551.153388][ T29] audit: type=1326 audit(1720509706.382:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9972 comm="syz.1.991" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9bd375bd9 code=0x0 [ 551.442783][ T9975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.991'. [ 551.524344][ T9981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.654806][ T9983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.752587][ T9981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.016924][ T2447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.030539][ T2447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.045660][ T2447] bond0 (unregistering): Released all slaves [ 552.173984][ T9897] chnl_net:caif_netlink_parms(): no params data found [ 552.280354][ T9989] binder: 9988:9989 ioctl c0306201 0 returned -14 [ 552.691335][ T9890] chnl_net:caif_netlink_parms(): no params data found [ 552.816034][T10001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.995'. [ 553.107785][ T5098] Bluetooth: hci1: command tx timeout [ 553.190709][ T5098] Bluetooth: hci0: command tx timeout [ 553.554676][ T2447] hsr_slave_0: left promiscuous mode [ 553.614901][ T2447] hsr_slave_1: left promiscuous mode [ 553.644714][ T2447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.659315][ T2447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.723068][ T2447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.755959][ T2447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.903032][ T2447] veth1_macvtap: left promiscuous mode [ 553.924001][ T2447] veth0_macvtap: left promiscuous mode [ 553.946228][ T2447] veth1_vlan: left promiscuous mode [ 553.996186][ T2447] veth0_vlan: left promiscuous mode [ 554.826696][ T29] audit: type=1400 audit(1720509710.072:433): avc: denied { getopt } for pid=10038 comm="syz.1.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 555.187701][ T5098] Bluetooth: hci1: command tx timeout [ 555.267789][ T5098] Bluetooth: hci0: command tx timeout [ 555.401423][ T2447] team0 (unregistering): Port device team_slave_1 removed [ 555.470600][ T2447] team0 (unregistering): Port device team_slave_0 removed [ 556.130293][ T9897] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.145360][ T9897] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.154403][ T9897] bridge_slave_0: entered allmulticast mode [ 556.168013][ T9897] bridge_slave_0: entered promiscuous mode [ 556.266440][ T9897] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.312321][ T9897] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.326173][ T9897] bridge_slave_1: entered allmulticast mode [ 556.338618][ T9897] bridge_slave_1: entered promiscuous mode [ 557.717632][ T9890] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.740905][ T9890] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.752793][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1001'. [ 557.762462][ T9890] bridge_slave_0: entered allmulticast mode [ 557.776792][ T9890] bridge_slave_0: entered promiscuous mode [ 557.824984][ T9897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.866846][ T9890] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.927630][ T9890] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.957575][ T9890] bridge_slave_1: entered allmulticast mode [ 557.980746][ T9890] bridge_slave_1: entered promiscuous mode [ 558.013169][ T29] audit: type=1326 audit(1720509713.262:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10050 comm="syz.1.1001" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9bd375bd9 code=0x0 [ 558.057870][T10067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1005'. [ 558.186736][ T9897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.312187][ T9890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.544700][ T9890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.987715][ T9897] team0: Port device team_slave_0 added [ 559.066339][ T9897] team0: Port device team_slave_1 added [ 559.333683][ T9890] team0: Port device team_slave_0 added [ 560.004217][ T9890] team0: Port device team_slave_1 added [ 560.055729][ T9897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.083500][ T9897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.181118][ T9897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.473158][ T9897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.508269][ T9897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.624573][ T9897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.703853][ T8] IPVS: starting estimator thread 0... [ 560.705734][ T9890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.757062][ T9890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.770268][T10106] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 560.797591][ T29] audit: type=1400 audit(1720509716.012:435): avc: denied { connect } for pid=10100 comm="syz.4.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 560.847800][T10107] IPVS: using max 15 ests per chain, 36000 per kthread [ 560.879581][ T9890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.897881][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 560.932283][ T9890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.947081][ T9890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.993437][ T9890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.004831][T10112] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1010'. [ 561.056832][T10101] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1010'. [ 561.086516][T10103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1010'. [ 561.112860][T10103] IPv6: NLM_F_REPLACE set, but no existing node found! [ 561.505431][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.707130][ T9890] hsr_slave_0: entered promiscuous mode [ 561.736815][T10115] fuse: Unknown parameter 'user_i00000000000000000000' [ 561.747231][ T9890] hsr_slave_1: entered promiscuous mode [ 561.763002][ T9890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 561.772689][ T9890] Cannot create hsr debugfs directory [ 561.899906][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.986274][ T9897] hsr_slave_0: entered promiscuous mode [ 562.144946][ T9897] hsr_slave_1: entered promiscuous mode [ 562.168948][ T9897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.181111][ T9897] Cannot create hsr debugfs directory [ 562.200487][T10120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1014'. [ 568.576298][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.708893][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.324027][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.360102][T10128] FAULT_INJECTION: forcing a failure. [ 569.360102][T10128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.387637][T10128] CPU: 0 PID: 10128 Comm: syz.2.1015 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 569.398040][T10128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 569.408120][T10128] Call Trace: [ 569.411417][T10128] [ 569.414366][T10128] dump_stack_lvl+0x16c/0x1f0 [ 569.419080][T10128] should_fail_ex+0x497/0x5b0 [ 569.423792][T10128] _copy_from_user+0x30/0xf0 [ 569.428421][T10128] copy_msghdr_from_user+0x99/0x160 [ 569.433657][T10128] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 569.439502][T10128] ? find_held_lock+0x2d/0x110 [ 569.444298][T10128] ? __pfx___lock_acquire+0x10/0x10 [ 569.449539][T10128] ___sys_sendmsg+0xff/0x1e0 [ 569.454170][T10128] ? __pfx____sys_sendmsg+0x10/0x10 [ 569.459443][T10128] ? ksys_write+0x21c/0x260 [ 569.463989][T10128] ? __fget_light+0x173/0x210 [ 569.468788][T10128] __sys_sendmsg+0x117/0x1f0 [ 569.473415][T10128] ? __pfx___sys_sendmsg+0x10/0x10 [ 569.478568][T10128] do_syscall_64+0xcd/0x250 [ 569.483112][T10128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.489050][T10128] RIP: 0033:0x7f2162975bd9 [ 569.493487][T10128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.513212][T10128] RSP: 002b:00007f2163750048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.521671][T10128] RAX: ffffffffffffffda RBX: 00007f2162b03f60 RCX: 00007f2162975bd9 [ 569.529665][T10128] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000003 [ 569.537658][T10128] RBP: 00007f21637500a0 R08: 0000000000000000 R09: 0000000000000000 [ 569.545649][T10128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.553641][T10128] R13: 000000000000000b R14: 00007f2162b03f60 R15: 00007fff215503b8 [ 569.561641][T10128] [ 569.944340][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.976630][ T29] audit: type=1326 audit(1720509725.192:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10129 comm="syz.4.1016" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d46975bd9 code=0x0 [ 570.235681][ T29] audit: type=1400 audit(1720509725.462:437): avc: denied { getopt } for pid=10137 comm="syz.1.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 570.474086][ T29] audit: type=1326 audit(1720509725.722:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10132 comm="syz.2.1017" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2162975bd9 code=0x0 [ 572.314971][T10164] fuse: Unknown parameter 'user_id00000000000000000000' [ 572.348238][ T12] bridge_slave_1: left allmulticast mode [ 572.364682][ T12] bridge_slave_1: left promiscuous mode [ 572.395448][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.471104][ T12] bridge_slave_0: left allmulticast mode [ 572.498154][ T12] bridge_slave_0: left promiscuous mode [ 572.527919][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.781567][T10171] FAULT_INJECTION: forcing a failure. [ 572.781567][T10171] name failslab, interval 1, probability 0, space 0, times 0 [ 572.886868][T10171] CPU: 1 PID: 10171 Comm: syz.2.1023 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 572.897202][T10171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 572.907276][T10171] Call Trace: [ 572.910579][T10171] [ 572.913517][T10171] dump_stack_lvl+0x16c/0x1f0 [ 572.918247][T10171] should_fail_ex+0x497/0x5b0 [ 572.922945][T10171] should_failslab+0x9/0x20 [ 572.927496][T10171] kmem_cache_alloc_node_noprof+0x71/0x310 [ 572.933432][T10171] ? __alloc_skb+0x2b1/0x380 [ 572.938058][T10171] __alloc_skb+0x2b1/0x380 [ 572.942691][T10171] ? __pfx___alloc_skb+0x10/0x10 [ 572.947661][T10171] ? __lock_acquire+0x1400/0x3b30 [ 572.952718][T10171] tcp_stream_alloc_skb+0x34/0x570 [ 572.957872][T10171] tcp_sendmsg_locked+0xecc/0x3550 [ 572.963001][T10171] ? __pfx_avc_has_perm+0x10/0x10 [ 572.968051][T10171] ? lock_acquire+0x1b1/0x560 [ 572.972766][T10171] ? find_held_lock+0x2d/0x110 [ 572.977564][T10171] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 572.983147][T10171] ? tcp_sendmsg+0x20/0x50 [ 572.987588][T10171] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 572.993018][T10171] ? __local_bh_enable_ip+0xa4/0x120 [ 572.998354][T10171] tcp_sendmsg+0x2e/0x50 [ 573.002617][T10171] ? __pfx_tcp_sendmsg+0x10/0x10 [ 573.007575][T10171] inet_sendmsg+0xb9/0x140 [ 573.012035][T10171] __sys_sendto+0x42c/0x4e0 [ 573.016571][T10171] ? __pfx___sys_sendto+0x10/0x10 [ 573.021623][T10171] ? ksys_write+0x1ab/0x260 [ 573.026172][T10171] ? __pfx_ksys_write+0x10/0x10 [ 573.031049][T10171] __x64_sys_sendto+0xe0/0x1c0 [ 573.035841][T10171] ? do_syscall_64+0x91/0x250 [ 573.040727][T10171] ? lockdep_hardirqs_on+0x7c/0x110 [ 573.045956][T10171] do_syscall_64+0xcd/0x250 [ 573.050484][T10171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.056409][T10171] RIP: 0033:0x7f2162975bd9 [ 573.060838][T10171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.080549][T10171] RSP: 002b:00007f2163750048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 573.089079][T10171] RAX: ffffffffffffffda RBX: 00007f2162b03f60 RCX: 00007f2162975bd9 [ 573.097098][T10171] RDX: 000000000000fe6a RSI: 0000000020000700 RDI: 0000000000000003 [ 573.105102][T10171] RBP: 00007f21637500a0 R08: 0000000000000000 R09: fffffffffffffe93 [ 573.113122][T10171] R10: 0000000000040040 R11: 0000000000000246 R12: 0000000000000001 [ 573.121106][T10171] R13: 000000000000000b R14: 00007f2162b03f60 R15: 00007fff215503b8 [ 573.129094][T10171] [ 573.132232][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.506065][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 578.526837][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.581433][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.619466][ T12] bond0 (unregistering): Released all slaves [ 580.740250][T10213] fuse: Unknown parameter 'user_id00000000000000000000' [ 580.836028][ T29] audit: type=1326 audit(1720509736.082:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10211 comm="syz.1.1031" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9bd375bd9 code=0x0 [ 581.067231][ T12] hsr_slave_0: left promiscuous mode [ 581.110518][ T12] hsr_slave_1: left promiscuous mode [ 581.132784][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.150176][T10214] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1031'. [ 581.159285][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.168877][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.199218][T10220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.208905][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.271418][ T12] veth1_macvtap: left promiscuous mode [ 581.284819][ T12] veth0_macvtap: left promiscuous mode [ 581.307152][ T12] veth1_vlan: left promiscuous mode [ 581.325838][ T12] veth0_vlan: left promiscuous mode [ 581.423911][T10223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.808794][T10220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.628747][ T12] team0 (unregistering): Port device team_slave_1 removed [ 583.817703][ T12] team0 (unregistering): Port device team_slave_0 removed [ 584.576210][ T29] audit: type=1326 audit(1720509739.812:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.4.1036" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d46975bd9 code=0x0 [ 585.749297][T10237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1036'. [ 585.805655][T10247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.917848][T10247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.049224][T10253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.778647][T10258] fuse: Unknown parameter 'user_id00000000000000000000' [ 587.025711][ T9897] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 587.075643][ T9897] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 587.239514][ T9897] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 587.405611][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1042'. [ 587.668171][ T29] audit: type=1326 audit(1720509742.912:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10262 comm="syz.1.1042" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9bd375bd9 code=0x0 [ 587.704199][ T9897] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 588.630577][ T9897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.727090][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'. [ 588.757260][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'. [ 588.916291][ T9897] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.009930][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.017490][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.061611][T10298] fuse: Unknown parameter '0x0000000000000004' [ 589.070094][ T9890] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 589.152451][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.159810][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.241155][ T9890] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 589.319087][ T9890] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 589.415034][ T29] audit: type=1326 audit(1720509744.662:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10299 comm="syz.1.1049" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9bd375bd9 code=0x0 [ 589.438714][ T9890] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 589.447848][ T5087] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 589.648472][ T5087] usb 5-1: Using ep0 maxpacket: 8 [ 589.669309][ T5087] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 589.700493][ T5087] usb 5-1: config 0 has no interface number 0 [ 589.715146][ T9897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 589.732140][ T5087] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 589.732753][T10304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1049'. [ 589.751551][ T5087] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 589.787512][ T5087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.809930][ T5087] usb 5-1: config 0 descriptor?? [ 589.846631][T10306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.863821][ T5087] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 590.034500][T10304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.183812][T10306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.229651][T10310] fuse: Bad value for 'fd' [ 590.337864][ T9890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.476131][ T9890] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.603930][ T45] usb 5-1: USB disconnect, device number 11 [ 590.604076][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 590.622680][ T45] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 590.633270][ T1793] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.640618][ T1793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.682371][ T1793] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.689710][ T1793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.851771][ T9897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.433142][ T9897] veth0_vlan: entered promiscuous mode [ 591.546585][ T9897] veth1_vlan: entered promiscuous mode [ 591.865576][ T9897] veth0_macvtap: entered promiscuous mode [ 600.019135][ T9897] veth1_macvtap: entered promiscuous mode [ 600.247970][ T9897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.297540][ T9897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.347578][ T9897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.388440][ T9897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.437450][ T9897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.477498][ T9897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.548976][ T9897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.685232][ T9897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.718824][ T9897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.737421][ T9897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.767676][ T9897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.790731][ T9897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.827570][ T9897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.858822][ T9897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.960899][ T9897] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.027593][ T9897] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.036375][ T9897] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.100013][T10354] binder: 10353:10354 ioctl c0306201 0 returned -14 [ 601.106751][ T9897] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.173988][ T9890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.307782][ T5091] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 601.336384][ T5091] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 601.385892][ T5091] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 601.414839][ T5091] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 601.436006][ T5091] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 601.444051][ T5091] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 601.621161][T10365] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 601.627766][T10365] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 601.700002][T10365] vhci_hcd vhci_hcd.0: Device attached [ 601.751278][T10365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=10365 comm=syz.1.1058 [ 601.956113][ T9890] veth0_vlan: entered promiscuous mode [ 601.985698][ T2456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.009107][ T5087] usb 11-1: new high-speed USB device number 3 using vhci_hcd [ 602.027259][ T2456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.047760][T10366] vhci_hcd: connection closed [ 602.057069][T10124] vhci_hcd: stop threads [ 602.087644][T10124] vhci_hcd: release socket [ 602.107997][T10124] vhci_hcd: disconnect device [ 602.147788][ T9890] veth1_vlan: entered promiscuous mode [ 602.224842][ T1100] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.273238][T10381] fuse: Bad value for 'fd' [ 602.503251][ T1100] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.585803][T10125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.641625][T10125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.827339][ T1100] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.254981][ T1100] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.465735][ T9890] veth0_macvtap: entered promiscuous mode [ 603.529015][T10403] netlink: 25 bytes leftover after parsing attributes in process `syz.3.976'. [ 603.587807][ T5098] Bluetooth: hci3: command tx timeout [ 603.717031][ T9890] veth1_macvtap: entered promiscuous mode [ 604.825916][ T1100] bridge_slave_1: left allmulticast mode [ 604.857500][ T1100] bridge_slave_1: left promiscuous mode [ 604.883700][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.908013][T10425] fuse: Unknown parameter '0x0000000000000004' [ 604.959796][ T1100] bridge_slave_0: left allmulticast mode [ 604.975753][ T1100] bridge_slave_0: left promiscuous mode [ 604.993916][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.125990][T10429] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 605.132567][T10429] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 605.165946][T10429] vhci_hcd vhci_hcd.0: Device attached [ 605.232584][T10429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=10429 comm=syz.2.1068 [ 605.257511][T10342] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 605.430241][ T25] usb 13-1: new high-speed USB device number 4 using vhci_hcd [ 605.471526][T10342] usb 2-1: Using ep0 maxpacket: 8 [ 605.487229][T10342] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 605.505865][T10342] usb 2-1: config 0 has no interface number 0 [ 605.527923][T10342] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 605.550710][T10342] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 605.562943][T10342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.599607][T10342] usb 2-1: config 0 descriptor?? [ 605.648417][T10342] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 605.667563][ T5098] Bluetooth: hci3: command tx timeout [ 605.987077][T10342] usb 2-1: USB disconnect, device number 10 [ 605.987158][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 606.036374][T10342] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 606.524772][ T5091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 606.540145][ T5091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 606.550422][ T5091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 606.551199][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.568261][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 606.581197][ T5091] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 606.596763][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 606.606315][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.665564][ T1100] bond0 (unregistering): Released all slaves [ 606.772115][T10432] vhci_hcd: connection reset by peer [ 606.830999][ T2427] vhci_hcd: stop threads [ 606.835320][ T2427] vhci_hcd: release socket [ 606.870006][ T2427] vhci_hcd: disconnect device [ 607.031726][T10360] chnl_net:caif_netlink_parms(): no params data found [ 607.217609][ T5087] vhci_hcd: vhci_device speed not set [ 607.827669][ T5098] Bluetooth: hci3: command tx timeout [ 608.087344][T10456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1069'. [ 608.440024][ T29] audit: type=1326 audit(1720509763.692:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10448 comm="syz.2.1069" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2162975bd9 code=0x0 [ 608.707607][ T5098] Bluetooth: hci2: command tx timeout [ 609.176527][ T1100] hsr_slave_0: left promiscuous mode [ 609.200541][ T1100] hsr_slave_1: left promiscuous mode [ 609.229976][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.251739][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.320217][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.346184][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.507815][ T1100] veth1_macvtap: left promiscuous mode [ 609.531253][ T1100] veth0_macvtap: left promiscuous mode [ 609.582347][ T1100] veth1_vlan: left promiscuous mode [ 609.615438][ T1100] veth0_vlan: left promiscuous mode [ 609.895209][T10488] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 609.901802][T10488] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 609.907907][ T5091] Bluetooth: hci3: command tx timeout [ 609.944866][T10488] vhci_hcd vhci_hcd.0: Device attached [ 609.956922][T10491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=10491 comm=syz.3.1077 [ 610.359879][ T5139] usb 15-1: new high-speed USB device number 8 using vhci_hcd [ 610.558825][ T25] vhci_hcd: vhci_device speed not set [ 610.788434][ T5091] Bluetooth: hci2: command tx timeout [ 611.060324][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 611.156522][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 611.590949][ T5091] Bluetooth: hci5: command 0x0406 tx timeout [ 611.917470][T10489] vhci_hcd: connection reset by peer [ 611.924206][ T81] vhci_hcd: stop threads [ 611.961159][ T81] vhci_hcd: release socket [ 611.970680][ T81] vhci_hcd: disconnect device [ 612.144383][T10360] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.162982][T10360] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.182314][T10360] bridge_slave_0: entered allmulticast mode [ 612.192935][T10360] bridge_slave_0: entered promiscuous mode [ 612.449722][T10512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1081'. [ 612.712742][T10360] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.728440][T10360] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.746457][T10360] bridge_slave_1: entered allmulticast mode [ 612.798842][T10360] bridge_slave_1: entered promiscuous mode [ 612.807293][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1081'. [ 612.870160][ T5098] Bluetooth: hci2: command tx timeout [ 613.195060][T10360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.275282][T10527] IPVS: Scheduler module ip_vs_sip not found [ 613.313372][T10360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.939686][T10360] team0: Port device team_slave_0 added [ 613.975137][T10360] team0: Port device team_slave_1 added [ 614.106240][ T1100] IPVS: stop unused estimator thread 0... [ 614.441150][ T5098] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 614.450199][T10360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.457194][T10360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.497602][T10559] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 614.504197][T10559] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 614.557929][T10360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.594557][T10440] chnl_net:caif_netlink_parms(): no params data found [ 614.607881][T10563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=10563 comm=syz.3.1090 [ 614.644600][T10559] vhci_hcd vhci_hcd.0: Device attached [ 614.678474][T10360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.687753][T10360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.715745][T10360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.856684][T10560] vhci_hcd: connection closed [ 614.860109][ T2427] vhci_hcd: stop threads [ 614.907162][ T2427] vhci_hcd: release socket [ 614.921880][ T2427] vhci_hcd: disconnect device [ 614.948742][ T5098] Bluetooth: hci2: command tx timeout [ 615.120694][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1092'. [ 615.148947][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1092'. [ 615.255633][ T29] audit: type=1326 audit(1720509770.502:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10578 comm="syz.2.1093" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2162975bd9 code=0x0 [ 615.355212][T10360] hsr_slave_0: entered promiscuous mode [ 615.595801][T10360] hsr_slave_1: entered promiscuous mode [ 616.387745][ T5139] vhci_hcd: vhci_device speed not set [ 616.472443][T10585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1093'. [ 616.626606][T10589] IPVS: Scheduler module ip_vs_sip not found [ 616.637092][T10579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.656214][T10596] binder: 10595:10596 ioctl c0306201 0 returned -14 [ 616.675732][T10592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.744524][T10579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.805596][T10440] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.813525][T10440] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.823261][T10440] bridge_slave_0: entered allmulticast mode [ 616.836488][T10440] bridge_slave_0: entered promiscuous mode [ 618.073163][ T5098] Bluetooth: hci0: link tx timeout [ 618.079652][ T5098] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 618.140196][T10440] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.216460][T10440] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.257734][T10440] bridge_slave_1: entered allmulticast mode [ 618.265921][T10440] bridge_slave_1: entered promiscuous mode [ 618.794531][T10440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.885793][T10440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.987855][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1102'. [ 619.063299][T10622] bridge0: entered promiscuous mode [ 619.099623][T10622] macvtap1: entered promiscuous mode [ 619.118148][T10622] macvtap1: entered allmulticast mode [ 619.130994][T10622] bridge0: entered allmulticast mode [ 619.247994][T10623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1102'. [ 619.261589][T10623] bridge0: left allmulticast mode [ 619.266990][T10623] bridge0: left promiscuous mode [ 619.278777][T10623] macvtap1: left promiscuous mode [ 619.297668][T10623] macvtap1: left allmulticast mode [ 619.444321][T10440] team0: Port device team_slave_0 added [ 619.719834][T10636] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 619.726453][T10636] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 619.790732][T10636] vhci_hcd vhci_hcd.0: Device attached [ 619.851465][T10440] team0: Port device team_slave_1 added [ 620.079894][ T5139] usb 13-1: new high-speed USB device number 5 using vhci_hcd [ 620.130276][T10636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=10636 comm=syz.2.1103 [ 620.154885][ T5091] Bluetooth: hci0: command 0x0406 tx timeout [ 620.745367][T10639] vhci_hcd: connection reset by peer [ 620.783982][ T81] vhci_hcd: stop threads [ 620.789725][ T81] vhci_hcd: release socket [ 620.794319][ T81] vhci_hcd: disconnect device [ 620.809989][ T1100] bridge_slave_1: left allmulticast mode [ 620.817260][ T1100] bridge_slave_1: left promiscuous mode [ 620.846466][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.870996][ T1100] bridge_slave_0: left allmulticast mode [ 620.876719][ T1100] bridge_slave_0: left promiscuous mode [ 620.896876][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.979608][T10651] IPVS: Scheduler module ip_vs_sip not found [ 621.461027][ T5098] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 623.975277][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.007959][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.053444][ T1100] bond0 (unregistering): Released all slaves [ 624.145822][T10440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.182542][T10440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.253934][T10440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.429311][ T1100] hsr_slave_0: left promiscuous mode [ 624.454493][ T1100] hsr_slave_1: left promiscuous mode [ 624.485325][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.519090][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.647728][ T1100] veth1_macvtap: left promiscuous mode [ 624.663625][ T1100] veth0_macvtap: left promiscuous mode [ 624.673967][ T1100] veth1_vlan: left promiscuous mode [ 624.683975][ T1100] veth0_vlan: left promiscuous mode [ 625.938230][ T5139] vhci_hcd: vhci_device speed not set [ 626.150741][T10691] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 626.157343][T10691] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 626.197302][T10691] vhci_hcd vhci_hcd.0: Device attached [ 626.256173][T10691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=10691 comm=syz.3.1117 [ 626.448854][ T25] usb 15-1: new high-speed USB device number 9 using vhci_hcd [ 626.594868][ T5098] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 627.273509][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 627.332146][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 628.676098][T10440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.685472][T10440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.785521][T10440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.037411][T10692] vhci_hcd: connection reset by peer [ 629.065628][ T81] vhci_hcd: stop threads [ 629.070051][ T81] vhci_hcd: release socket [ 629.074644][ T81] vhci_hcd: disconnect device [ 630.054243][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.061458][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.327883][ T5098] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 630.404741][T10440] hsr_slave_0: entered promiscuous mode [ 630.480098][T10440] hsr_slave_1: entered promiscuous mode [ 630.527594][T10440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 630.537433][T10440] Cannot create hsr debugfs directory [ 630.540805][T10731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1124'. [ 631.447044][T10731] fuse: Bad value for 'fd' [ 631.737569][ T25] vhci_hcd: vhci_device speed not set [ 632.168320][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'. [ 633.277568][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'. [ 634.563596][T10763] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 634.570206][T10763] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 634.609112][T10763] vhci_hcd vhci_hcd.0: Device attached [ 634.665123][T10360] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 634.674819][ T5098] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 634.696196][T10763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=10763 comm=syz.1.1131 [ 634.845569][T10360] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 634.885693][T10774] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1132'. [ 634.897963][ T5227] usb 11-1: new high-speed USB device number 4 using vhci_hcd [ 634.926014][T10764] vhci_hcd: connection reset by peer [ 634.931221][T10360] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 634.972736][T10360] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 634.987433][ T81] vhci_hcd: stop threads [ 634.991742][ T81] vhci_hcd: release socket [ 635.021238][ T81] vhci_hcd: disconnect device [ 635.098874][T10774] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1132'. [ 636.920391][T10360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.927231][ T5098] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 637.046147][ T5098] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:910' [ 637.056190][ T5098] CPU: 0 PID: 5098 Comm: kworker/u9:6 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 637.066719][ T5098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 637.076833][ T5098] Workqueue: hci0 hci_rx_work [ 637.081738][ T5098] Call Trace: [ 637.085022][ T5098] [ 637.087976][ T5098] dump_stack_lvl+0x16c/0x1f0 [ 637.092687][ T5098] sysfs_warn_dup+0x7f/0xa0 [ 637.097232][ T5098] sysfs_create_dir_ns+0x24d/0x2b0 [ 637.102403][ T5098] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 637.108069][ T5098] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 637.113467][ T5098] ? do_raw_spin_unlock+0x172/0x230 [ 637.118685][ T5098] kobject_add_internal+0x2c8/0x990 [ 637.123908][ T5098] kobject_add+0x16f/0x240 [ 637.128365][ T5098] ? __pfx_kobject_add+0x10/0x10 [ 637.133328][ T5098] ? do_raw_spin_unlock+0x172/0x230 [ 637.138546][ T5098] ? kobject_put+0xbe/0x5b0 [ 637.143072][ T5098] device_add+0x289/0x1a70 [ 637.147557][ T5098] ? __pfx_dev_set_name+0x10/0x10 [ 637.152628][ T5098] ? __pfx_device_add+0x10/0x10 [ 637.157526][ T5098] ? mgmt_send_event_skb+0x2f0/0x460 [ 637.162850][ T5098] hci_conn_add_sysfs+0x17e/0x230 [ 637.167915][ T5098] le_conn_complete_evt+0x1078/0x1d80 [ 637.173319][ T5098] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 637.179082][ T5098] ? trace_contention_end+0xea/0x140 [ 637.184394][ T5098] ? __mutex_lock+0x1a6/0x9c0 [ 637.189115][ T5098] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 637.195045][ T5098] ? skb_pull_data+0x166/0x210 [ 637.199851][ T5098] hci_le_meta_evt+0x2e2/0x5d0 [ 637.204668][ T5098] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 637.211126][ T5098] hci_event_packet+0x664/0x1170 [ 637.216100][ T5098] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 637.221429][ T5098] ? __pfx_hci_event_packet+0x10/0x10 [ 637.226832][ T5098] ? mark_held_locks+0x9f/0xe0 [ 637.231650][ T5098] ? kcov_remote_start+0x3d1/0x6e0 [ 637.236788][ T5098] ? lockdep_hardirqs_on+0x7c/0x110 [ 637.242025][ T5098] hci_rx_work+0x2c4/0x1610 [ 637.246566][ T5098] process_one_work+0x9c5/0x1b40 [ 637.251970][ T5098] ? __pfx_lock_acquire+0x10/0x10 [ 637.257037][ T5098] ? __pfx_process_one_work+0x10/0x10 [ 637.262443][ T5098] ? assign_work+0x1a0/0x250 [ 637.267078][ T5098] worker_thread+0x6c8/0xf30 [ 637.271713][ T5098] ? __pfx_worker_thread+0x10/0x10 [ 637.276865][ T5098] kthread+0x2c1/0x3a0 [ 637.280981][ T5098] ? _raw_spin_unlock_irq+0x23/0x50 [ 637.286229][ T5098] ? __pfx_kthread+0x10/0x10 [ 637.290860][ T5098] ret_from_fork+0x45/0x80 [ 637.295321][ T5098] ? __pfx_kthread+0x10/0x10 [ 637.299950][ T5098] ret_from_fork_asm+0x1a/0x30 [ 637.304765][ T5098] [ 637.311042][ T5098] kobject: kobject_add_internal failed for hci0:910 with -EEXIST, don't try to register things with the same name in the same directory. [ 637.325239][ T5098] Bluetooth: hci0: failed to register connection device [ 637.333130][ T5098] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 638.007123][T10440] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 638.070005][T10440] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 638.088166][T10800] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1136'. [ 638.134528][T10360] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.227170][T10440] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 638.348949][T10440] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 638.423689][ T1793] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.431135][ T1793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.488101][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'. [ 638.516771][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'. [ 638.560379][ T1793] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.567709][ T1793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.537938][T10828] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 639.544525][T10828] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 639.584769][T10360] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 639.639779][T10828] vhci_hcd vhci_hcd.0: Device attached [ 639.791046][T10828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=10828 comm=syz.2.1142 [ 639.928900][ T25] usb 13-1: new high-speed USB device number 6 using vhci_hcd [ 639.990171][ T5227] vhci_hcd: vhci_device speed not set [ 640.048408][T10830] vhci_hcd: connection reset by peer [ 640.058239][ T1100] vhci_hcd: stop threads [ 640.062580][ T1100] vhci_hcd: release socket [ 640.113730][ T1100] vhci_hcd: disconnect device [ 640.151419][T10440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.354895][T10440] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.433963][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.441350][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.983273][ T1793] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.990619][ T1793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.474507][T10360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.551232][T10855] IPVS: Scheduler module ip_vs_sip not found [ 641.811354][T10865] netlink: 'syz.3.1148': attribute type 11 has an invalid length. [ 641.852746][T10869] fuse: Unknown parameter '0x0000000000000003' [ 642.252136][T10880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1150'. [ 642.390682][ T29] audit: type=1326 audit(1720509797.632:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10877 comm="syz.2.1150" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2162975bd9 code=0x0 [ 642.413703][ C1] vkms_vblank_simulate: vblank timer overrun [ 643.553523][T10440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.939917][T10898] binder: 10895:10898 ioctl c0306201 0 returned -14 [ 643.966506][T10360] veth0_vlan: entered promiscuous mode [ 644.021234][T10440] veth0_vlan: entered promiscuous mode [ 644.094636][T10440] veth1_vlan: entered promiscuous mode [ 644.131682][T10360] veth1_vlan: entered promiscuous mode [ 644.146664][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1152'. [ 644.190530][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1152'. [ 644.434245][T10360] veth0_macvtap: entered promiscuous mode [ 644.519756][T10360] veth1_macvtap: entered promiscuous mode [ 644.545735][T10440] veth0_macvtap: entered promiscuous mode [ 644.643264][T10440] veth1_macvtap: entered promiscuous mode [ 644.695161][T10360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.737864][T10360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.766299][T10360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.792803][T10360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.827765][T10360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.870005][T10360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.923031][T10360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.037081][T10360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.108004][ T25] vhci_hcd: vhci_device speed not set [ 645.305686][T10360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.477695][T10360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.520424][T10360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.563764][T10360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.605310][T10360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.669080][T10910] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 645.675068][T10910] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 645.686520][T10360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.793386][T10360] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.844607][T10360] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.897673][T10360] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.940857][T10360] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.986811][T10440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.025618][T10440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.055762][T10440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.086335][T10440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.115066][T10440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.163977][T10440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.197629][T10440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.228256][T10440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.276580][T10440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.361309][T10923] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1156'. [ 646.487023][T10440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.537988][T10440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.558049][T10440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.594924][T10440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.617977][T10440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.637694][T10440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.648259][T10440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.663537][T10440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.686639][T10440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.803704][T10910] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 646.837391][T10910] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 646.893413][T10440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.933901][T10440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.964053][T10440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.990819][T10440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.175691][T10939] netlink: 'syz.1.1159': attribute type 11 has an invalid length. [ 647.209436][ T5098] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 647.221967][ T5098] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 647.258236][T10910] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 647.275180][T10910] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 647.392129][T10910] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 647.400325][T10948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1160'. [ 647.436761][T10910] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 647.713009][T10948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1160'. [ 647.787302][T10910] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 647.808367][T10910] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 648.358833][T10963] fuse: Unknown parameter '0x0000000000000003' [ 648.365580][T10125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.397256][T10125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.747662][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 648.812975][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 650.169202][T10125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.742696][T10125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.846823][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.883785][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.080793][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.090002][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.226722][T10983] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1166'. [ 651.799442][T10995] netlink: 'syz.1.1169': attribute type 11 has an invalid length. [ 652.889929][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'. [ 652.920150][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'. [ 656.028874][T11043] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1179'. [ 656.057030][T11042] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1180'. [ 656.674257][T11061] netlink: 'syz.0.1183': attribute type 11 has an invalid length. [ 657.030584][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1186'. [ 657.076696][T11068] batadv0: entered promiscuous mode [ 657.125227][T11068] batadv0: entered allmulticast mode [ 657.142474][T11074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1186'. [ 657.199092][T11074] batadv0: left promiscuous mode [ 657.227083][T11074] batadv0: left allmulticast mode [ 657.560501][T11078] binder: 11077:11078 ioctl c0306201 0 returned -14 [ 660.642220][T11104] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1193'. [ 661.761235][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1200'. [ 661.932748][T11127] bridge0: entered promiscuous mode [ 661.949248][T11127] macvtap1: entered promiscuous mode [ 661.978370][T11127] macvtap1: entered allmulticast mode [ 661.983785][T11127] bridge0: entered allmulticast mode [ 662.061136][T11134] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1201'. [ 662.091121][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1200'. [ 662.174359][T11129] bridge0: left allmulticast mode [ 662.192381][T11129] bridge0: left promiscuous mode [ 662.226153][T11129] macvtap1: left promiscuous mode [ 662.248383][T11129] macvtap1: left allmulticast mode [ 662.374523][T11134] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1201'. [ 662.832817][T11153] fuse: Unknown parameter 'fd0x0000000000000003' [ 665.275475][T11174] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1211'. [ 665.797216][T11191] Zero length message leads to an empty skb [ 666.914861][T11198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1216'. [ 667.393497][T11222] netlink: 'syz.1.1221': attribute type 11 has an invalid length. [ 669.211333][T11245] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1226'. [ 670.909511][T11262] fuse: Bad value for 'fd' [ 671.262911][T11269] netlink: 'syz.2.1235': attribute type 11 has an invalid length. [ 671.275120][T11274] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1232'. [ 671.580223][T11274] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1232'. [ 672.227873][T11299] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1241'. [ 674.304174][T11335] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1250'. [ 674.538034][T11335] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1250'. [ 674.949619][T11335] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1250'. [ 674.968456][T11349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1254'. [ 675.163889][T11349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1254'. [ 675.471658][T11349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1254'. [ 675.827250][T11365] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1257'. [ 679.003897][T11403] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1266'. [ 680.104061][T11416] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1270'. [ 680.464576][T11428] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1272'. [ 680.526953][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1273'. [ 680.608906][T11431] bridge0: entered promiscuous mode [ 680.633317][T11431] macvtap1: entered promiscuous mode [ 680.656435][T11431] macvtap1: entered allmulticast mode [ 680.689945][T11431] bridge0: entered allmulticast mode [ 680.747128][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1273'. [ 680.782827][T11435] bridge0: left allmulticast mode [ 680.818403][T11435] bridge0: left promiscuous mode [ 680.837951][T11435] macvtap1: left promiscuous mode [ 680.850162][T11435] macvtap1: left allmulticast mode [ 684.178288][T11461] fuse: Unknown parameter '0x0000000000000004' [ 684.598834][ T5227] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 685.323539][ T5227] usb 3-1: Using ep0 maxpacket: 8 [ 685.351483][T11478] hfsplus: unable to find HFS+ superblock [ 685.401848][ T5227] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 685.425462][ T5227] usb 3-1: config 0 has no interface number 0 [ 685.445884][ T5227] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 685.511583][ T5227] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 685.541684][ T5227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.619279][ T5227] usb 3-1: config 0 descriptor?? [ 685.660710][ T5227] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 685.853795][ T5227] usb 3-1: USB disconnect, device number 8 [ 686.713966][T11500] blktrace: Concurrent blktraces are not allowed on loop0 [ 687.612280][T11502] binder: 11501:11502 ioctl c0306201 0 returned -14 [ 691.449593][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.456115][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.703453][T11538] hfsplus: unable to find HFS+ superblock [ 691.979862][T11546] fuse: Unknown parameter '0x0000000000000004' [ 692.169263][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1307'. [ 692.247862][T11552] bridge0: entered promiscuous mode [ 692.264016][T11552] macvtap2: entered promiscuous mode [ 692.289827][T11552] macvtap2: entered allmulticast mode [ 692.311506][T11552] bridge0: entered allmulticast mode [ 692.331754][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 692.368299][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1307'. [ 692.398256][T11557] bridge0: left allmulticast mode [ 692.417733][T11557] bridge0: left promiscuous mode [ 692.437253][T11557] macvtap2: left promiscuous mode [ 692.445722][T11557] macvtap2: left allmulticast mode [ 692.537528][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 692.551503][ T45] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 692.577453][ T45] usb 1-1: config 0 has no interface number 0 [ 692.588637][ T45] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 692.623564][ T45] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 692.645746][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.668094][ T45] usb 1-1: config 0 descriptor?? [ 692.801367][T11566] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 692.807972][T11566] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 692.866827][T11564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=11564 comm=syz.2.1311 [ 692.947603][T11566] vhci_hcd vhci_hcd.0: Device attached [ 692.988784][ T45] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 693.582202][ T45] usb 1-1: USB disconnect, device number 8 [ 694.007561][ T5227] usb 13-1: new high-speed USB device number 7 using vhci_hcd [ 697.230460][T11634] fuse: Unknown parameter '0x0000000000000004' [ 697.577532][ T5073] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 697.767883][ T5073] usb 1-1: Using ep0 maxpacket: 8 [ 697.797200][ T5073] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 697.815693][ T5073] usb 1-1: config 0 has no interface number 0 [ 697.825903][ T5073] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 697.858663][ T5073] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 697.873499][ T5073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.902052][ T5073] usb 1-1: config 0 descriptor?? [ 697.939866][ T5073] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 698.257930][ T45] usb 1-1: USB disconnect, device number 9 [ 698.823270][T11664] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 700.935577][T11699] binder: 11698:11699 ioctl c0306201 0 returned -14 [ 701.238567][T11706] fuse: Unknown parameter '0x0000000000000004' [ 701.577500][ T5139] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 701.787448][ T5139] usb 4-1: Using ep0 maxpacket: 8 [ 701.797122][ T5139] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 701.817464][ T5139] usb 4-1: config 0 has no interface number 0 [ 701.823656][ T5139] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 701.874438][ T5139] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 701.908740][ T5139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.953698][ T5139] usb 4-1: config 0 descriptor?? [ 701.989892][ T5139] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 702.263446][ T5139] usb 4-1: USB disconnect, device number 12 [ 703.830849][T11749] binder: 11748:11749 ioctl c0306201 0 returned -14 [ 705.047296][T11767] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 705.053903][T11767] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 705.082927][T11772] fuse: Unknown parameter '0x0000000000000004' [ 705.107912][T11767] vhci_hcd vhci_hcd.0: Device attached [ 705.236419][T11771] vhci_hcd: cannot find the pending unlink 5 [ 705.254258][T11767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=11767 comm=syz.4.1370 [ 705.379268][ T45] usb 17-1: new high-speed USB device number 3 using vhci_hcd [ 705.437505][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 705.627667][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 705.657283][ T25] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 705.683380][ T25] usb 4-1: config 0 has no interface number 0 [ 705.706811][ T25] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 705.741386][ T25] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 705.776173][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.811599][ T25] usb 4-1: config 0 descriptor?? [ 705.830997][ T25] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 706.062948][ T5139] usb 4-1: USB disconnect, device number 13 [ 708.168989][T11804] binder: 11803:11804 ioctl c0306201 0 returned -14 [ 708.248184][T11806] fuse: Bad value for 'fd' [ 708.318546][T11808] fuse: Bad value for 'fd' [ 752.872678][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.882230][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.311846][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.320350][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 837.987634][ T30] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 837.995262][ T30] Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 838.004013][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 838.012810][ T30] task:kworker/0:0 state:D stack:23616 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 838.023380][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 838.030566][ T30] Call Trace: [ 838.033881][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 838.036821][ T30] __schedule+0xf15/0x5d00 [ 838.041858][ T30] ? __pfx_mark_lock+0x10/0x10 [ 838.046709][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 838.052828][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 838.058745][ T30] ? __pfx___schedule+0x10/0x10 [ 838.063734][ T30] ? schedule+0x298/0x350 [ 838.071805][ T30] ? __pfx_lock_release+0x10/0x10 [ 838.076913][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 838.082917][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 838.088990][ T30] schedule+0xe7/0x350 [ 838.093120][ T30] schedule_preempt_disabled+0x13/0x30 [ 838.129389][ T30] __mutex_lock+0x5b8/0x9c0 [ 838.134001][ T30] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 838.164492][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 838.172270][ T30] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 838.180165][ T30] rfkill_global_led_trigger_worker+0x1b/0x160 [ 838.186422][ T30] process_one_work+0x9c5/0x1b40 [ 838.192128][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 838.197616][ T30] ? __pfx_process_one_work+0x10/0x10 [ 838.203043][ T30] ? assign_work+0x1a0/0x250 [ 838.207754][ T30] worker_thread+0x6c8/0xf30 [ 838.212436][ T30] ? __pfx_worker_thread+0x10/0x10 [ 838.217653][ T30] kthread+0x2c1/0x3a0 [ 838.221799][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 838.227021][ T30] ? __pfx_kthread+0x10/0x10 [ 838.232098][ T30] ret_from_fork+0x45/0x80 [ 838.236584][ T30] ? __pfx_kthread+0x10/0x10 [ 838.241626][ T30] ret_from_fork_asm+0x1a/0x30 [ 838.246491][ T30] [ 838.249989][ T30] INFO: task kworker/0:3:5087 blocked for more than 143 seconds. [ 838.259055][ T30] Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 838.266715][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 838.275572][ T30] task:kworker/0:3 state:D stack:22256 pid:5087 tgid:5087 ppid:2 flags:0x00004000 [ 838.285811][ T30] Workqueue: events rfkill_sync_work [ 838.291493][ T30] Call Trace: [ 838.294803][ T30] [ 838.300306][ T30] __schedule+0xf15/0x5d00 [ 838.304784][ T30] ? __pfx_mark_lock+0x10/0x10 [ 838.310335][ T30] ? __pfx___schedule+0x10/0x10 [ 838.315240][ T30] ? schedule+0x298/0x350 [ 838.319745][ T30] ? __pfx_lock_release+0x10/0x10 [ 838.324889][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 838.330282][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 838.335553][ T30] schedule+0xe7/0x350 [ 838.339747][ T30] schedule_preempt_disabled+0x13/0x30 [ 838.345284][ T30] __mutex_lock+0x5b8/0x9c0 [ 838.350015][ T30] ? nfc_dev_down+0x2d/0x2e0 [ 838.354677][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 838.359814][ T30] ? find_held_lock+0x2d/0x110 [ 838.364631][ T30] ? rfkill_set_block+0x198/0x560 [ 838.371957][ T30] ? __pfx_lock_release+0x10/0x10 [ 838.377056][ T30] ? nfc_dev_down+0x2d/0x2e0 [ 838.382042][ T30] nfc_dev_down+0x2d/0x2e0 [ 838.386525][ T30] nfc_rfkill_set_block+0x39/0xe0 [ 838.391894][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 838.397857][ T30] rfkill_set_block+0x203/0x560 [ 838.402775][ T30] rfkill_sync+0x10a/0x1c0 [ 838.407209][ T30] rfkill_sync_work+0x27/0x40 [ 838.412178][ T30] process_one_work+0x9c5/0x1b40 [ 838.417158][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 838.422305][ T30] ? __pfx_process_one_work+0x10/0x10 [ 838.427819][ T30] ? assign_work+0x1a0/0x250 [ 838.432483][ T30] worker_thread+0x6c8/0xf30 [ 838.437093][ T30] ? __kthread_parkme+0x148/0x220 [ 838.442197][ T30] ? __pfx_worker_thread+0x10/0x10 [ 838.447407][ T30] kthread+0x2c1/0x3a0 [ 838.451524][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 838.456738][ T30] ? __pfx_kthread+0x10/0x10 [ 838.461457][ T30] ret_from_fork+0x45/0x80 [ 838.465938][ T30] ? __pfx_kthread+0x10/0x10 [ 838.470843][ T30] ret_from_fork_asm+0x1a/0x30 [ 838.475686][ T30] [ 838.479470][ T30] INFO: task syz.2.1311:11561 blocked for more than 143 seconds. [ 838.487232][ T30] Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 838.495645][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 838.505243][ T30] task:syz.2.1311 state:D stack:27024 pid:11561 tgid:11561 ppid:8434 flags:0x00004004 [ 838.515496][ T30] Call Trace: [ 838.519067][ T30] [ 838.522009][ T30] __schedule+0xf15/0x5d00 [ 838.526482][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 838.534622][ T30] ? __pfx_lockdep_lock+0x10/0x10 [ 838.539842][ T30] ? hlock_class+0x4e/0x130 [ 838.544402][ T30] ? __pfx___schedule+0x10/0x10 [ 838.549601][ T30] ? schedule+0x298/0x350 [ 838.553996][ T30] ? __pfx_lock_release+0x10/0x10 [ 838.559174][ T30] ? _find_first_zero_bit+0x94/0xb0 [ 838.564421][ T30] schedule+0xe7/0x350 [ 838.568608][ T30] schedule_timeout+0x258/0x2a0 [ 838.573521][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 838.579018][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 838.584269][ T30] __wait_for_common+0x3de/0x5f0 [ 838.589427][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 838.594868][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 838.601263][ T30] ? __virt_addr_valid+0x5e/0x580 [ 838.606361][ T30] __flush_work+0x5bd/0xc60 [ 838.611296][ T30] ? __pfx___flush_work+0x10/0x10 [ 838.616392][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 838.621802][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 838.626994][ T30] ? __pfx___might_resched+0x10/0x10 [ 838.632973][ T30] __cancel_work_sync+0x10c/0x130 [ 838.639453][ T30] rfkill_unregister+0x95/0x2c0 [ 838.644400][ T30] nfc_unregister_device+0x94/0x330 [ 838.649792][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 838.655580][ T30] virtual_ncidev_close+0x51/0xb0 [ 838.660741][ T30] __fput+0x408/0xbb0 [ 838.664773][ T30] task_work_run+0x14e/0x250 [ 838.669486][ T30] ? __pfx_task_work_run+0x10/0x10 [ 838.674668][ T30] syscall_exit_to_user_mode+0x275/0x2a0 [ 838.680433][ T30] do_syscall_64+0xda/0x250 [ 838.684994][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.691006][ T30] RIP: 0033:0x7f2162975bd9 [ 838.695582][ T30] RSP: 002b:00007fff21550498 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 838.704127][ T30] RAX: 0000000000000000 RBX: 00000000000a917d RCX: 00007f2162975bd9 [ 838.712282][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 838.723834][ T30] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000001d215507bf [ 838.731978][ T30] R10: 00007f2162800000 R11: 0000000000000246 R12: 00007f2162b03f6c [ 838.740056][ T30] R13: 0000000000000032 R14: 00007f2162b05a60 R15: 00007f2162b03f60 [ 838.748237][ T30] [ 838.751314][ T30] [ 838.751314][ T30] Showing all locks held in the system: [ 838.759250][ T30] 3 locks held by kworker/0:0/8: [ 838.764214][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 838.774810][ T30] #1: ffffc900000d7d80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 838.788196][ T30] #2: ffffffff8fbcca48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 838.800070][ T30] 2 locks held by kworker/u8:1/12: [ 838.805308][ T30] #0: ffff8880b923ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 838.815494][ T30] #1: ffff8880b9228a08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2d9/0x900 [ 838.827071][ T30] 1 lock held by khungtaskd/30: [ 838.833253][ T30] #0: ffffffff8dbb1620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 838.843486][ T30] 5 locks held by kworker/1:1/45: [ 838.849188][ T30] #0: ffff88801baf1948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 838.860330][ T30] #1: ffffc90000b57d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 838.871797][ T30] #2: ffff8880241f7190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e20 [ 838.880856][ T30] #3: ffff88802424a518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2802/0x4e20 [ 838.890918][ T30] #4: ffff888023f8ba68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x282b/0x4e20 [ 838.900855][ T30] 2 locks held by getty/4840: [ 838.905560][ T30] #0: ffff88802aa310a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 838.915451][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 838.925698][ T30] 4 locks held by kworker/0:3/5087: [ 838.930993][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 838.941742][ T30] #1: ffffc9000314fd80 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 838.957073][ T30] #2: ffffffff8fbcca48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_sync_work+0x1b/0x40 [ 838.967185][ T30] #3: ffff88802e703100 (&dev->mutex){....}-{3:3}, at: nfc_dev_down+0x2d/0x2e0 [ 838.976290][ T30] 5 locks held by kworker/0:7/5227: [ 838.981608][ T30] #0: ffff88801baf1948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 838.992562][ T30] #1: ffffc9000359fd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 839.003961][ T30] #2: ffff8880240eb190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e20 [ 839.012971][ T30] #3: ffff88802406d518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2802/0x4e20 [ 839.023032][ T30] #4: ffff88801b745868 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x282b/0x4e20 [ 839.033093][ T30] 2 locks held by kworker/u8:13/10125: [ 839.038692][ T30] #0: ffff8880b923ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 839.048747][ T30] #1: ffff8880b9228a08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x20c/0x900 [ 839.063912][ T30] 1 lock held by syz.2.1311/11561: [ 839.069112][ T30] #0: ffff88802e703100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x60/0x330 [ 839.079035][ T30] 2 locks held by syz-executor/11743: [ 839.084431][ T30] #0: ffff88807d642118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_write+0x2bb/0x470 [ 839.093931][ T30] #1: ffffffff8fbcca48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x3a/0xb40 [ 839.104038][ T30] 3 locks held by syz.4.1370/11775: [ 839.109339][ T30] #0: ffffffff8e7d4ac8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 839.117979][ T30] #1: ffff88801fcb9100 (&dev->mutex){....}-{3:3}, at: nfc_register_device+0x9a/0x3c0 [ 839.127766][ T30] #2: ffffffff8fbcca48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x3a/0xb40 [ 839.137899][ T30] 1 lock held by syz.1.1373/11784: [ 839.143114][ T30] #0: ffffffff8e7d4ac8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 839.151716][ T30] 1 lock held by syz.0.1378/11802: [ 839.156864][ T30] #0: ffffffff8e7d4ac8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 839.165519][ T30] 1 lock held by syz.0.1378/11805: [ 839.172587][ T30] #0: ffffffff8e7d4ac8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 839.181460][ T30] 1 lock held by syz.3.1379/11804: [ 839.186632][ T30] #0: ffffffff8e7d4ac8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 839.195195][ T30] 1 lock held by syz.3.1379/11807: [ 839.200458][ T30] #0: ffffffff8e7d4ac8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 839.209111][ T30] 1 lock held by syz-executor/11810: [ 839.214448][ T30] #0: ffffffff8e7d4ac8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 839.223067][ T30] 1 lock held by syz-executor/11812: [ 839.228424][ T30] #0: ffffffff8e7d4ac8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 839.236969][ T30] 1 lock held by syz-executor/11815: [ 839.242341][ T30] #0: ffffffff8e7d4ac8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 839.250950][ T30] 1 lock held by syz-executor/11816: [ 839.256258][ T30] #0: ffffffff8e7d4ac8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 839.264860][ T30] 1 lock held by syz-executor/11818: [ 839.270404][ T30] #0: ffffffff8e7d4ac8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 839.280541][ T30] 1 lock held by syz-executor/11820: [ 839.285866][ T30] #0: ffffffff8e7d4ac8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 839.294628][ T30] 1 lock held by syz-executor/11822: [ 839.300454][ T30] #0: ffffffff8e7d4ac8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 839.309063][ T30] 1 lock held by syz-executor/11825: [ 839.314381][ T30] #0: ffffffff8e7d4ac8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 839.323018][ T30] 1 lock held by syz-executor/11826: [ 839.328381][ T30] #0: ffffffff8e7d4ac8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 839.336924][ T30] 1 lock held by syz-executor/11832: [ 839.342819][ T30] #0: ffffffff8e7d4ac8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 839.352282][ T30] 1 lock held by syz-executor/11834: [ 839.357958][ T30] #0: ffffffff8e7d4ac8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 839.366519][ T30] 1 lock held by syz-executor/11836: [ 839.371893][ T30] #0: ffffffff8e7d4ac8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 839.380469][ T30] [ 839.382813][ T30] ============================================= [ 839.382813][ T30] [ 839.394642][ T30] NMI backtrace for cpu 1 [ 839.399005][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 839.408919][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 839.418997][ T30] Call Trace: [ 839.422291][ T30] [ 839.425236][ T30] dump_stack_lvl+0x116/0x1f0 [ 839.430039][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 839.435015][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 839.441031][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 839.447137][ T30] watchdog+0xf86/0x1240 [ 839.451422][ T30] ? __pfx_watchdog+0x10/0x10 [ 839.456126][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 839.461361][ T30] ? __kthread_parkme+0x148/0x220 [ 839.466417][ T30] ? __pfx_watchdog+0x10/0x10 [ 839.471122][ T30] kthread+0x2c1/0x3a0 [ 839.475228][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 839.480454][ T30] ? __pfx_kthread+0x10/0x10 [ 839.485092][ T30] ret_from_fork+0x45/0x80 [ 839.489550][ T30] ? __pfx_kthread+0x10/0x10 [ 839.494180][ T30] ret_from_fork_asm+0x1a/0x30 [ 839.498986][ T30] [ 839.502394][ T30] Sending NMI from CPU 1 to CPUs 0: [ 839.507792][ C0] NMI backtrace for cpu 0 [ 839.507818][ C0] CPU: 0 PID: 10125 Comm: kworker/u8:13 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 839.507849][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 839.507866][ C0] Workqueue: bat_events batadv_nc_worker [ 839.507893][ C0] RIP: 0010:__rcu_read_lock+0x2a/0xf0 [ 839.507942][ C0] Code: f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 53 65 48 8b 1d 98 b6 8f 7e 48 8d bb 44 04 00 00 48 89 fa 48 c1 ea 03 0f b6 14 02 <48> 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 a6 00 00 00 65 [ 839.507968][ C0] RSP: 0018:ffffc9000371fb78 EFLAGS: 00000a03 [ 839.507988][ C0] RAX: dffffc0000000000 RBX: ffff888020ddda00 RCX: ffff88807e6aa100 [ 839.508006][ C0] RDX: 0000000000000000 RSI: ffffffff8aac131a RDI: ffff888020ddde44 [ 839.508023][ C0] RBP: 000000000000005a R08: 0000000000000004 R09: 000000000000005a [ 839.508039][ C0] R10: 0000000000000400 R11: 0000000000000002 R12: ffff88807e6aa100 [ 839.508056][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000001 [ 839.508073][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 839.508099][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 839.508119][ C0] CR2: 00007fff53fc8f68 CR3: 000000000d97a000 CR4: 00000000003506f0 [ 839.508135][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 839.508151][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 839.508168][ C0] Call Trace: [ 839.508177][ C0] [ 839.508185][ C0] ? show_regs+0x8c/0xa0 [ 839.508223][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 839.508262][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 839.508297][ C0] ? nmi_handle+0x1a9/0x5c0 [ 839.508336][ C0] ? __rcu_read_lock+0x2a/0xf0 [ 839.508375][ C0] ? default_do_nmi+0x6a/0x160 [ 839.508399][ C0] ? exc_nmi+0x170/0x1e0 [ 839.508422][ C0] ? end_repeat_nmi+0xf/0x53 [ 839.508448][ C0] ? batadv_nc_worker+0x12a/0x10f0 [ 839.508472][ C0] ? __rcu_read_lock+0x2a/0xf0 [ 839.508512][ C0] ? __rcu_read_lock+0x2a/0xf0 [ 839.508552][ C0] ? __rcu_read_lock+0x2a/0xf0 [ 839.508591][ C0] [ 839.508598][ C0] [ 839.508606][ C0] batadv_nc_worker+0x14b/0x10f0 [ 839.508635][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 839.508659][ C0] ? __pfx_lock_release+0x10/0x10 [ 839.508702][ C0] process_one_work+0x9c5/0x1b40 [ 839.508731][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 839.508756][ C0] ? __pfx_process_one_work+0x10/0x10 [ 839.508785][ C0] ? assign_work+0x1a0/0x250 [ 839.508825][ C0] worker_thread+0x6c8/0xf30 [ 839.508854][ C0] ? __kthread_parkme+0x148/0x220 [ 839.508886][ C0] ? __pfx_worker_thread+0x10/0x10 [ 839.508917][ C0] kthread+0x2c1/0x3a0 [ 839.508948][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 839.508975][ C0] ? __pfx_kthread+0x10/0x10 [ 839.509007][ C0] ret_from_fork+0x45/0x80 [ 839.509044][ C0] ? __pfx_kthread+0x10/0x10 [ 839.509075][ C0] ret_from_fork_asm+0x1a/0x30 [ 839.509118][ C0] [ 839.513192][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 839.811060][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 839.820987][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 839.831150][ T30] Call Trace: [ 839.834446][ T30] [ 839.837396][ T30] dump_stack_lvl+0x3d/0x1f0 [ 839.842018][ T30] panic+0x6f5/0x7a0 [ 839.845962][ T30] ? __pfx_panic+0x10/0x10 [ 839.850435][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 839.855834][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 839.861847][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 839.867242][ T30] ? watchdog+0xd3d/0x1240 [ 839.871689][ T30] ? watchdog+0xd30/0x1240 [ 839.876126][ T30] watchdog+0xd4e/0x1240 [ 839.880395][ T30] ? __pfx_watchdog+0x10/0x10 [ 839.885092][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 839.890323][ T30] ? __kthread_parkme+0x148/0x220 [ 839.895379][ T30] ? __pfx_watchdog+0x10/0x10 [ 839.900079][ T30] kthread+0x2c1/0x3a0 [ 839.904183][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 839.909415][ T30] ? __pfx_kthread+0x10/0x10 [ 839.914037][ T30] ret_from_fork+0x45/0x80 [ 839.918490][ T30] ? __pfx_kthread+0x10/0x10 [ 839.923108][ T30] ret_from_fork_asm+0x1a/0x30 [ 839.927916][ T30] [ 839.931240][ T30] Kernel Offset: disabled [ 839.935575][ T30] Rebooting in 86400 seconds..