last executing test programs: 15m9.601000923s ago: executing program 3 (id=4): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x224181, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ppoll(&(0x7f0000000280), 0x20000275, 0x0, 0x0, 0xfffffffffffffd8c) chdir(&(0x7f0000000080)='./file1\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xeffffdff, 0x0, [{0x0, 0x0, 0x10}, {0x0, 0x5}, {0x0, 0x10}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}]}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) 15m8.148673453s ago: executing program 3 (id=8): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x2, 0x2, 0xf, 0x7}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f0000000580)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000000300)=0x10000}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000017c0), 0x40000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan1\x00'}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005200)=[{{&(0x7f0000000380)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000440)=""/214, 0xd6}], 0x1}, 0x6}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/31, 0x1f}, {&(0x7f0000003dc0)=""/110, 0x6e}], 0x3}, 0x7f}, {{&(0x7f00000005c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000580)}, {&(0x7f0000001740)=""/43, 0x2b}], 0x2, &(0x7f0000002a00)=""/201, 0xc9}, 0xfffffff9}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002b00)=""/133, 0x85}, {0x0}], 0x2, &(0x7f0000002cc0)=""/33, 0x21}, 0x9b4}, {{&(0x7f0000002d00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000005100)=[{&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000005300)=""/249, 0xf9}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/181, 0xb5}, {&(0x7f0000004f40)=""/71, 0x47}, {&(0x7f0000004fc0)=""/230, 0xe6}, {&(0x7f00000050c0)=""/38, 0x26}], 0x7, &(0x7f0000005140)=""/144, 0x90}, 0x3}], 0x5, 0x8100, &(0x7f00000052c0)={0x0, 0x989680}) sendfile(r6, r5, 0x0, 0x23d) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 14m53.053178889s ago: executing program 32 (id=8): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x2, 0x2, 0xf, 0x7}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f0000000580)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000000300)=0x10000}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000017c0), 0x40000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan1\x00'}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005200)=[{{&(0x7f0000000380)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000440)=""/214, 0xd6}], 0x1}, 0x6}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/31, 0x1f}, {&(0x7f0000003dc0)=""/110, 0x6e}], 0x3}, 0x7f}, {{&(0x7f00000005c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000580)}, {&(0x7f0000001740)=""/43, 0x2b}], 0x2, &(0x7f0000002a00)=""/201, 0xc9}, 0xfffffff9}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002b00)=""/133, 0x85}, {0x0}], 0x2, &(0x7f0000002cc0)=""/33, 0x21}, 0x9b4}, {{&(0x7f0000002d00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000005100)=[{&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000005300)=""/249, 0xf9}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/181, 0xb5}, {&(0x7f0000004f40)=""/71, 0x47}, {&(0x7f0000004fc0)=""/230, 0xe6}, {&(0x7f00000050c0)=""/38, 0x26}], 0x7, &(0x7f0000005140)=""/144, 0x90}, 0x3}], 0x5, 0x8100, &(0x7f00000052c0)={0x0, 0x989680}) sendfile(r6, r5, 0x0, 0x23d) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 2m35.294244571s ago: executing program 0 (id=2528): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x104}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000004200cd2a"], 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x30, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xa0100fe}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}}, 0x0) 2m34.922503132s ago: executing program 0 (id=2531): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000ec0)=""/224, 0xe0}, {&(0x7f0000003140)=""/4065, 0xfe1}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f0000000a00)=""/203, 0xcb}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f0000000b00)=""/225, 0xe1}, {0x0}, {&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000940)=""/162, 0xa2}, {&(0x7f0000000c40)=""/236, 0xec}, {&(0x7f0000000240)=""/153, 0x99}], 0xb}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ustat(0x801, &(0x7f0000000300)) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') rmdir(&(0x7f0000000100)='./file0/../file0\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x75}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x2000484d) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="d2d9d3f1db6d5b61cfce1db3d6d0f4a22c2a0a0291940fce1b407a78f40f315f5ee8d531cd57ee49acb54ec468c02a6294adce192b7cca454bc90b65ad72187273378cca01678aa30c008af56a08dac9e33d6d4f4ce987430f86883742cafc1b7ac1f805605c65ba2ba46800c1c6a7a6a79cc317cfb8b0", @ANYRES16=0x0, @ANYBLOB="0004fbffffff000040001300000004000980"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = open(&(0x7f0000001940)='./file1\x00', 0x400141042, 0x169) close_range(r4, r4, 0x2) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='GPL\x00', &(0x7f00000003c0)='\x7f\xcfsd$\xa5>\xa5<\x95<<\xa7\xdd\xffYvH\rF\x90\x06_\xbd\xab\x1a\x81\a\xa2\xff\x1e\x0f\xeb~\xbc\x15L\xa5\x1bxl)\xf1\x12y\xd6\xfc\x067u\x1c\xc4\xb7\x1cZ5\x82\xb2\xac\x93jz$\xdf\xd6l\x91>\x92[]\x04\xd9\xeag\xaa\xe9>\xfe\xf2\x03\"Z;\xcb\xc8NCt0>\b\xbc4\x01\x00\x00\x00\x00\x00\x00\x00o)\xe1\x1e\x90\x9b$D\xcf\x1c\x81\xde\x89\x00\xae;i\x9e\x87\t\xd3\xb7Y\x88E$\x11:\a\xb3f\xdc\xe2G\xbd\x83BG\x19\xa7\xb8\xa7\x87\xb4\xdc\xe8\x1f\xcf\xc0\xf6\xc7\xdc\x96\x02x\xebx\x19@\x8e\x85\x1d\xdf8\xa3\x97eS\x9e#\xa51\xb6\x165 \xdc\xb6\xab\n\xb6\xcc\x02\xc1\x8eX\xd68\xe8\x9aQ<\xea\xc4\xa4\x89\x86\xae\xf9Ex\xc6eTtA[\xe9\x8dY\x0f#\x9f\x11]B\n\x16_\xcd\\\xef\x8f`\xb2\xc1q\xbf_vl\'\xdd\xb6X\x04r\x8f\xfc\xff}\xe2\xd4\x99\x88\x00|\x15\xddY\xf1L\xf5\xb3\xf6,2\x14T', 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000000b0603000000000000000000010000060500010007000000100007800900120073797a3100000000a735d08e5ec0b4a50b1760090aa446a977ca628819175cd4c0cfd4cd0a8c1cf3d1145693635cac2eea793b0a861c234e731b3589bc3223369348c35676e86acce5c33c3e0750c06ab01759c520890745"], 0x2c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="4bcf52d32e0400000000d40e7a0c1f7bff000000af000000000b4af975cda4", 0x1f) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f751ae40510410341eef0102030109022400000905ee02000000561d289500000009058202"], 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m31.628944341s ago: executing program 0 (id=2540): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x60c40) r2 = dup3(r1, r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x5210c0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r7, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="9306d813d7dcd35750a7408871cdd4a61fe4d48beecb38f12aae45f2f226fe45b578c97ff4bf7fdf7504c5c08a0f1e6bdbaa7b79ce572f50574943f7972d5b84424ff66e3f4143a7fc5e2b4d4cf6018d1cab4e37ecd6531fb3dde7cbebef87c81a", 0x61, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4140aecd, &(0x7f00000001c0)=ANY=[]) read$FUSE(r2, 0x0, 0x0) 2m31.397824741s ago: executing program 0 (id=2543): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 64) mount$bind(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) (async, rerun: 32) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) (async, rerun: 64) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) sendmmsg$inet6(r2, &(0x7f00000004c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@tclass={{0x14, 0x29, 0x43, 0x4}}], 0x18}}], 0x1, 0x0) 2m31.332775219s ago: executing program 0 (id=2544): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x44800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000001440)) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) syz_open_dev$loop(&(0x7f00000001c0), 0x4000000000, 0x94b382) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eN\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x50, r3, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x17}, [{@nsim={{0xe}, {0x2c, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) ioprio_set$pid(0x1, 0x0, 0x2000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mount$cgroup(0xf000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 2m30.409953688s ago: executing program 33 (id=2546): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000003680)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200035c0, 0x0, 0x0, 0x200035f0, 0x20003620], 0x0, 0x0, 0x0}, 0xd5) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x50, r3, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x17}, [{@nsim={{0xe}, {0x2c, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) ioprio_set$pid(0x1, 0x0, 0x2000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mount$cgroup(0xf000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 43.232730266s ago: executing program 4 (id=2839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0, 0x0, 0x9}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x5) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x1}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) dup(0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc0) pipe(&(0x7f0000000240)) unshare(0x26020280) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 42.587336042s ago: executing program 4 (id=2841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) io_uring_setup(0x1d06, &(0x7f00000003c0)={0x0, 0x4, 0x2, 0x0, 0xa7}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 39.116396032s ago: executing program 2 (id=2847): pipe(&(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000004295267ccd7d30ebaa6c4393fdff0000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001e40)={r1, 0x3, 0x6}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 39.116146797s ago: executing program 4 (id=2848): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}]}, 0x1c}}, 0x0) 38.972645625s ago: executing program 4 (id=2849): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x5) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) dup(0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc0) unshare(0x26020280) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 38.928907316s ago: executing program 6 (id=2850): syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xa180, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x8042, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x0, 0x0}, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2fd1}}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x20, 0x400, 0x1c4c6b3a, 0x3, 0x20000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800300000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r11, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xd, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0x27}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f00000001c0)='GPL\x00', 0x2, 0xc, &(0x7f0000000200)=""/12, 0x41100, 0x50, '\x00', r3, @fallback=0x31, r4, 0x8, &(0x7f0000000280)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xb, 0x3, 0x10}, 0x10, r5, r6, 0x0, &(0x7f0000000440)=[r7, r8, 0xffffffffffffffff, 0xffffffffffffffff, r11], 0x0, 0x10, 0x4, @void, @value}, 0x94) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) 38.749614545s ago: executing program 2 (id=2851): sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, '\x00', 0x7}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getrlimit(0x0, &(0x7f0000000040)) write$binfmt_elf64(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049e9) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0xfffffffffffffffc, {0x0, 0x0, 0x1}, 0xff}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r5, 0x5, {0x2, 0x0, 0x3}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c4}, 0x4004004) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r7) socket$igmp(0x2, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 37.821610393s ago: executing program 2 (id=2852): socket$rxrpc(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x101) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000000)=""/124, 0x7c}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) 37.199305885s ago: executing program 2 (id=2853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x5) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) pipe(&(0x7f0000000240)) unshare(0x26020280) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 36.695796215s ago: executing program 2 (id=2854): io_uring_setup(0x34c6, &(0x7f0000004000)={0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x1c0}) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r0, &(0x7f0000000800)="3703c70f70e244b7878fedf0d0286e72651d1af212c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31241a900518bef75ab52d7df9d091c4c601dc1cb4f1c7ed7a1d442806cc98e35646b37f83f3bb3e4f02ec50ea98886238588d3026c58accd40e86c0e0b35299466ff4c5", 0x88, 0x2000000000009) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) unshare(0x62040200) openat$ppp(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_4={0x3, 0x0, 0x9, "84e5821a"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x1, "08d91ea3"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @main=@item_4={0x3, 0x0, 0x8, "04043800"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}]}}, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/231, 0xe7}], 0x2, 0x0, 0x1ff) epoll_create1(0x0) r2 = epoll_create1(0x80000) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r1, @ANYRES16, @ANYRES64, @ANYRES32=r2, @ANYRESHEX, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 36.131716575s ago: executing program 6 (id=2856): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x0, 0x401}) 35.891772401s ago: executing program 4 (id=2857): unshare(0x62040200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendto$inet6(r0, &(0x7f0000000440)="264f7e9708dc53a46de6ff26cef5f7c3513271c78056e3a1ce3f3bc10c11b16f7297745e430514c803c049f55c1a1c240831c6935d644e9f8dd749bac387a959257958eb1f8cd0b2e92dce05d508c5851fcdd2a8ed9e2da074e9fb24fb229234c13efbd14d4aee6977171f21e25837263b201f", 0x73, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/111, 0x6f}, {&(0x7f0000000180)=""/4, 0x4}], 0x2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x14, 0x2, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 35.764364307s ago: executing program 6 (id=2858): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82200000904000002ca744d00090503034d00ff"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r8, 0x0, 0x1, 0x0, 0x10000, 0x0, 0x32bf91}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ee222}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001600)='p', 0x1}], 0x1) 33.099949899s ago: executing program 2 (id=2865): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x110, &(0x7f0000000240)={0x0, 0xa096, 0x20, 0x2, 0x22c}, &(0x7f0000000100), &(0x7f0000000340)) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000000c300)=""/102400, 0x19000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70fff000000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0xffffffffffffffff, 0x0, 0xc1ff, 0x2, 0x3ff}}) connect$inet(r4, &(0x7f0000000480)={0x2, 0xfffd, @multicast1}, 0x10) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x0, 0x8000000}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400000000fcdbdf", @ANYRES32=0x0, @ANYBLOB="00210000000000001c0012800b00010062726964676500000c000280050029000300bdd5"], 0x3c}}, 0x0) clock_gettime(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) 32.929535823s ago: executing program 4 (id=2866): io_uring_setup(0x34c6, &(0x7f0000004000)={0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x1c0}) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r0, &(0x7f0000000800)="3703c70f70e244b7878fedf0d0286e72651d1af212c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31241a900518bef75ab52d7df9d091c4c601dc1cb4f1c7ed7a1d442806cc98e35646b37f83f3bb3e4f02ec50ea98886238588d3026c58accd40e86c0e0b35299466ff4c5", 0x88, 0x2000000000009) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) unshare(0x62040200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000002000010000000000000000000a8010000000000118000100140001007c01000000000000000000000000000008000f00ffffffff1400020000000000000000000000ffff0a0101021400030067656e65766530"], 0x60}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000001400)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000200012800b00010067656e6576650000100002"], 0x40}}, 0x44004) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_4={0x3, 0x0, 0x9, "84e5821a"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x1, "08d91ea3"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @main=@item_4={0x3, 0x0, 0x8, "04043800"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}]}}, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/231, 0xe7}], 0x2, 0x0, 0x1ff) epoll_create1(0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r4, @ANYRES16, @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 31.013554012s ago: executing program 6 (id=2869): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x381182, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x23894) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) open$dir(&(0x7f0000000100)='./file0\x00', 0x6400, 0x100) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340), 0x1a1402, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000a00)=0x40000) syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x1020}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000060000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_submit(r8, r9, &(0x7f0000000e40)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x28}, &(0x7f0000000100)='./file0\x00', 0x18}) syz_open_dev$tty1(0xc, 0x4, 0x4) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x10000) 29.484348596s ago: executing program 6 (id=2870): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r6, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000540)=""/119, 0x77}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000380)=""/17, 0x11}, {&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000740)=""/159, 0x9f}], 0x6, &(0x7f0000000a40)=""/212, 0xd4}, 0x5}, {{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000002180)=[{&(0x7f0000000b40)=""/142, 0x8e}, {&(0x7f0000000c00)=""/91, 0x5b}, {&(0x7f0000000c80)=""/118, 0x76}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/65, 0x41}, {&(0x7f0000001d80)=""/147, 0x93}, {&(0x7f0000001e40)=""/84, 0x54}, {&(0x7f0000001ec0)=""/207, 0xcf}, {&(0x7f0000001fc0)=""/170, 0xaa}, {&(0x7f0000002080)=""/245, 0xf5}], 0xa}, 0x8001}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/62, 0x3e}], 0x1, &(0x7f0000002240)=""/217, 0xd9}, 0x6599}, {{&(0x7f0000002340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000024c0)=[{&(0x7f00000023c0)=""/42, 0x2a}, {&(0x7f0000002400)=""/191, 0xbf}], 0x2, &(0x7f0000002500)=""/128, 0x80}, 0xff}, {{&(0x7f0000002580)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002600)=""/101, 0x65}, {&(0x7f0000002680)=""/58, 0x3a}, {&(0x7f00000026c0)=""/11, 0xb}, {&(0x7f0000002700)=""/87, 0x57}, {&(0x7f0000002780)=""/202, 0xca}], 0x5}, 0x5}], 0x5, 0x40000022, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x192}}, 0x20}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r4}, 0x0, &(0x7f0000000900)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) write$selinux_load(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="8cff7cf908"], 0x2000) 27.848010864s ago: executing program 6 (id=2874): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pidfd_send_signal(r1, 0x0, 0x0, 0x4) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 22.719389483s ago: executing program 1 (id=2882): socket$netlink(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000100)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') flock(r2, 0x2) syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') flock(r3, 0x1) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x800, 0x0) close_range(r2, r4, 0x0) 22.5266422s ago: executing program 1 (id=2883): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r2, 0x1, {}, 0xff}, 0x18) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = syz_open_dev$dri(&(0x7f0000000280), 0xb, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r5, 0x7, 0x20, 0x0, 0x2, [], [0xb66, 0x5, 0x42, 0x10], [0x1, 0x0, 0xa, 0xfffffff5], [0x80000000000bf0, 0x4c9d57ac, 0xf95000000000, 0x7ffd]}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000180)={0x18, r7, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}]}) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, 0x0) ioctl$IOMMU_IOAS_UNMAP(r6, 0x3b86, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r7, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r7}) socket$igmp(0x2, 0x3, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001) 19.759433551s ago: executing program 1 (id=2886): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001200)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2}, 0x18) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000340)=[{0x0, 0x2, {0x2, 0x1, 0x1}, {0x1, 0x0, 0x4}, 0x2, 0xff}], 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 19.595810788s ago: executing program 1 (id=2887): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000020000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 18.735393339s ago: executing program 5 (id=2890): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0, 0x0, 0x9}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x5) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x1}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) dup(0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc0) pipe(&(0x7f0000000240)) unshare(0x26020280) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 18.52035038s ago: executing program 1 (id=2891): syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), 0xffffffffffffffff) syz_io_uring_setup(0x110, &(0x7f0000000240)={0x0, 0xa096, 0x20, 0x2, 0x22c}, &(0x7f0000000100), &(0x7f0000000340)) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000000c300)=""/102400, 0x19000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70fff000000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0xffffffffffffffff, 0x0, 0xc1ff, 0x2, 0x3ff}}) connect$inet(r4, &(0x7f0000000480)={0x2, 0xfffd, @multicast1}, 0x10) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x0, 0x8000000}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400000000fcdbdf", @ANYRES32=0x0, @ANYBLOB="00210000000000001c0012800b00010062726964676500000c000280050029000300bdd5"], 0x3c}}, 0x0) clock_gettime(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) 18.315258881s ago: executing program 5 (id=2892): socket$netlink(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000100)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') flock(r2, 0x2) syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') flock(r3, 0x1) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x800, 0x0) close_range(r2, r4, 0x0) 17.899367819s ago: executing program 1 (id=2893): r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000140)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x80, 0x0, 0x3, 0x0, 0x3, 0xfff}, {0x0, 0x0, 0x7, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xf9}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'macvlan0\x00', 0x0}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2004cb, 0x0, 0xf674, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffffffffffe], 0x0, 0x802}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000003f80)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000400)="2310c60496f8a914eaf68dc1255d24ae3add1ff8fbfc9006d6bcd2b89c235232f21d50c8", 0x24}, {&(0x7f00000004c0)="d021db38725ece70f458e8b8f589d3cfb2bf2cdbd625ef6fdeb747b720bcb662429a7256bb928955b218fec72b366191c78f94b752f607e7d3da6b76571f86e4f19e6b708a01471b8aee2577958396782829ea1ca807184174429fbf2b83bcbe0e42027c44d26d1375dca9ed43f3e28d2a0cabba04e09b28986a01d4427045d8ebc98a871230c3b8265bfc5dc61f05a0d6b06dd08437bd653c746a07beff262d6563c90cce4f5d18681975", 0xab}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="1e00020800000000", @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x20000000}}, {{&(0x7f0000000740)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a80)=[{&(0x7f00000007c0)="055bb9c8a5dfa8be362ff8a127865194ff0bfd3fba615c6caf897fab803c5f3f1abd9192010d1363c23becd5c5dd244cc6235e1ee445252b889776cb39390a2b5f42e7f4c301876aff7550838c77a649f4801d4491b50c4b248cbb407085290b19a9d2cea29115b4f959c633fa1ac868", 0x70}, {&(0x7f0000000840)="cc7f96f0bab07d9a728c96c14b1165c394780104a0a89e0680d66b1c2801b5de6a9e522f0e9e4c9a221d9fb7b381ca4f01f5a59e6acb335c6fe62563db773c97803829d242db8ab0e58833e97a7d79de2573f625f6c2966b6cce4f8283f81b4c9209567ca2d638d77a5f4f1f731c85a6034b91cf8332d3a7e3195fa67db7c26ccbc0987dc3fff8158d05058edb4fcb6c8ff92aa728a23a7240b78c57386b01ecbf9f61b2615a5a822b9345d71a5269b7cd619699cecb7ef9730468f555c8ee8d44512de8e988b1abcb8c0c9444087d86a1b956", 0xd3}, {&(0x7f0000000940)="11ec28e338013662c0d4ae8358b8d961075d245df8eefd687b640fe2fc26974c6ba8462f95fdbf8eaf22fbf88cadbdbc129b3a7699daf3eb9b34e20f8213348c1e90104f3683043ff4f2eea123bc088143c69febd7405f99468dc93428d9413e6105c17e1afd7ed3876a25b2627522a1899999e3502c21db9e6afce40135a09239a319fffd03b00157087a5a5d2ee26decb5b80ad0ab8c9a885b81bd6063dbf29ddef3daf1e4ef7fb1f9a332974915a7653bbc6ebcffb3e636c33f0f5d82", 0xbe}, {&(0x7f0000000a00)="a8a327089d3c285c7e1971bd27db66121ed6bacfba6dd8538527ab12aa8c45e09ae200b0eb7466ad4208b680dc194532ba0b146d5e0d96b9c17d9286068707f194a09364c56707848cbabb20d2792e508e9c6024a807911b897a8e2b17ef095aa885abaf8ded0866ba1e703e69d620cc1728828e", 0x74}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="10feffffff00000001000000010000001c000000000000000100000002000000220a908460051dff83ada1c8145a99e5efd35703626dccaa777b740697e6ddbca126e91dfbd89dfd5ed3bf2324b69c9d85515fa680cacc064e3fb47c2235680e37b14821ecc48916b5b4360e348c9484fd4d937f6fd862d8c27cddb8d8a232e47d82b819f4fd7fd859449662da80919479477e05408e49feb2af8ce3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x58}}, {{&(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000000bc0)="6f7b68bd93b3acb90b97af6be993d4bce51d2dac30afc0", 0x17}, {&(0x7f0000000c00)}, {&(0x7f0000000c40)="8dc0fc9292a465baceb3ee48d001154904d522e2d19876ef7db6fc68e1a05d725b5a31d610831ab6", 0x28}, {0x0}, {&(0x7f0000000d80)="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", 0xfff}], 0x5, &(0x7f0000001f40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000003800000000000032cd9e2aeb000800000001000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x24040040}}], 0x3, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r8, 0x0, 0x0, 0x100000, 0x0, 0x2}]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 17.861790273s ago: executing program 34 (id=2866): io_uring_setup(0x34c6, &(0x7f0000004000)={0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x1c0}) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r0, &(0x7f0000000800)="3703c70f70e244b7878fedf0d0286e72651d1af212c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31241a900518bef75ab52d7df9d091c4c601dc1cb4f1c7ed7a1d442806cc98e35646b37f83f3bb3e4f02ec50ea98886238588d3026c58accd40e86c0e0b35299466ff4c5", 0x88, 0x2000000000009) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) unshare(0x62040200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000002000010000000000000000000a8010000000000118000100140001007c01000000000000000000000000000008000f00ffffffff1400020000000000000000000000ffff0a0101021400030067656e65766530"], 0x60}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000001400)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000200012800b00010067656e6576650000100002"], 0x40}}, 0x44004) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_4={0x3, 0x0, 0x9, "84e5821a"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x1, "08d91ea3"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @main=@item_4={0x3, 0x0, 0x8, "04043800"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}]}}, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/231, 0xe7}], 0x2, 0x0, 0x1ff) epoll_create1(0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r4, @ANYRES16, @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 17.839034888s ago: executing program 5 (id=2895): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='environ\x00') preadv(r1, &(0x7f0000000a80)=[{&(0x7f0000000040)=""/113, 0x71}, {&(0x7f0000000980)=""/210, 0xd2}, {&(0x7f0000000b00)=""/140, 0x8c}], 0x3, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000580)={0xfffffffffffffd35, 0x4, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x40000000000003}) sendto$inet6(r2, 0x0, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x200, 0x220, 0x220, 0x200, 0x220, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffff00], [0xff000000, 0x0, 0xff, 0xffffffff], 'batadv_slave_1\x00', 'virt_wifi0\x00', {0xff}, {}, 0x33, 0x2, 0x4, 0x31}, 0x0, 0x100, 0x120, 0x0, {0x0, 0x25e}, [@common=@inet=@l2tp={{0x30}, {0x4, 0x4, 0x3, 0x1, 0x7}}, @common=@unspec=@state={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x3}, {0x4, 0x1, 0x2}, {0xffffffffffffffff, 0x3, 0x4}, 0x9, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000640)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) memfd_create(0x0, 0x3) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendto$inet6(r6, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000280)={0x0, 0x0, 0x0}) 17.13811611s ago: executing program 5 (id=2896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x381182, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x23894) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) open$dir(&(0x7f0000000100)='./file0\x00', 0x6400, 0x100) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340), 0x1a1402, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000a00)=0x40000) syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x1020}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000060000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_submit(r8, r9, &(0x7f0000000e40)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x28}, &(0x7f0000000100)='./file0\x00', 0x18}) syz_open_dev$tty1(0xc, 0x4, 0x4) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x10000) 16.235841865s ago: executing program 5 (id=2897): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000080), 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x74, 0x0, 0x1, 0x2, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x52, 0x33, @beacon={{{}, {}, @broadcast, @broadcast}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x6, 0xb5, 0xab}}, @val={0x2d, 0x1a, {0x40, 0x3, 0x0, 0x0, {0x5, 0x0, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1}, 0x300, 0xfffffeff, 0x4}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x8082) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'pim6reg1\x00', 0x800}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x50) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x841}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000100000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) 15.959291025s ago: executing program 5 (id=2898): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) r1 = socket$netlink(0x10, 0x3, 0x6) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_pts(r3, 0x801) r8 = dup3(r7, r0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x15) write$UHID_INPUT(r8, &(0x7f00000001c0)={0xa, {"08c39ee52f329f1698b1c4865f8b540a5eee9f496a0809c3d20325867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76023256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000040)=ANY=[@ANYRESDEC=r8]) ioctl$KDGKBTYPE(r9, 0x4b48, &(0x7f0000002340)) dup3(0xffffffffffffffff, r2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001280)=@deltclass={0x64, 0x29, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffe0}, {0x0, 0xa}, {0x8, 0xd}}, [@tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x4, 0x81}}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x80000000}, @TCA_QFQ_LMAX={0x8, 0x2, 0x420}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x40}}, @tclass_kind_options=@c_red={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000200)={&(0x7f0000000780)={{@hyper, 0x8}, {@host}, 0x400, "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"}, 0x418, 0x4}) r10 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000000040), 0x0) 12.012221186s ago: executing program 35 (id=2874): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pidfd_send_signal(r1, 0x0, 0x0, 0x4) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2.505457015s ago: executing program 36 (id=2893): r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000140)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x80, 0x0, 0x3, 0x0, 0x3, 0xfff}, {0x0, 0x0, 0x7, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xf9}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'macvlan0\x00', 0x0}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2004cb, 0x0, 0xf674, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffffffffffe], 0x0, 0x802}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000003f80)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000400)="2310c60496f8a914eaf68dc1255d24ae3add1ff8fbfc9006d6bcd2b89c235232f21d50c8", 0x24}, {&(0x7f00000004c0)="d021db38725ece70f458e8b8f589d3cfb2bf2cdbd625ef6fdeb747b720bcb662429a7256bb928955b218fec72b366191c78f94b752f607e7d3da6b76571f86e4f19e6b708a01471b8aee2577958396782829ea1ca807184174429fbf2b83bcbe0e42027c44d26d1375dca9ed43f3e28d2a0cabba04e09b28986a01d4427045d8ebc98a871230c3b8265bfc5dc61f05a0d6b06dd08437bd653c746a07beff262d6563c90cce4f5d18681975", 0xab}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="1e00020800000000", @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x20000000}}, {{&(0x7f0000000740)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a80)=[{&(0x7f00000007c0)="055bb9c8a5dfa8be362ff8a127865194ff0bfd3fba615c6caf897fab803c5f3f1abd9192010d1363c23becd5c5dd244cc6235e1ee445252b889776cb39390a2b5f42e7f4c301876aff7550838c77a649f4801d4491b50c4b248cbb407085290b19a9d2cea29115b4f959c633fa1ac868", 0x70}, {&(0x7f0000000840)="cc7f96f0bab07d9a728c96c14b1165c394780104a0a89e0680d66b1c2801b5de6a9e522f0e9e4c9a221d9fb7b381ca4f01f5a59e6acb335c6fe62563db773c97803829d242db8ab0e58833e97a7d79de2573f625f6c2966b6cce4f8283f81b4c9209567ca2d638d77a5f4f1f731c85a6034b91cf8332d3a7e3195fa67db7c26ccbc0987dc3fff8158d05058edb4fcb6c8ff92aa728a23a7240b78c57386b01ecbf9f61b2615a5a822b9345d71a5269b7cd619699cecb7ef9730468f555c8ee8d44512de8e988b1abcb8c0c9444087d86a1b956", 0xd3}, {&(0x7f0000000940)="11ec28e338013662c0d4ae8358b8d961075d245df8eefd687b640fe2fc26974c6ba8462f95fdbf8eaf22fbf88cadbdbc129b3a7699daf3eb9b34e20f8213348c1e90104f3683043ff4f2eea123bc088143c69febd7405f99468dc93428d9413e6105c17e1afd7ed3876a25b2627522a1899999e3502c21db9e6afce40135a09239a319fffd03b00157087a5a5d2ee26decb5b80ad0ab8c9a885b81bd6063dbf29ddef3daf1e4ef7fb1f9a332974915a7653bbc6ebcffb3e636c33f0f5d82", 0xbe}, {&(0x7f0000000a00)="a8a327089d3c285c7e1971bd27db66121ed6bacfba6dd8538527ab12aa8c45e09ae200b0eb7466ad4208b680dc194532ba0b146d5e0d96b9c17d9286068707f194a09364c56707848cbabb20d2792e508e9c6024a807911b897a8e2b17ef095aa885abaf8ded0866ba1e703e69d620cc1728828e", 0x74}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="10feffffff00000001000000010000001c000000000000000100000002000000220a908460051dff83ada1c8145a99e5efd35703626dccaa777b740697e6ddbca126e91dfbd89dfd5ed3bf2324b69c9d85515fa680cacc064e3fb47c2235680e37b14821ecc48916b5b4360e348c9484fd4d937f6fd862d8c27cddb8d8a232e47d82b819f4fd7fd859449662da80919479477e05408e49feb2af8ce3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x58}}, {{&(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000000bc0)="6f7b68bd93b3acb90b97af6be993d4bce51d2dac30afc0", 0x17}, {&(0x7f0000000c00)}, {&(0x7f0000000c40)="8dc0fc9292a465baceb3ee48d001154904d522e2d19876ef7db6fc68e1a05d725b5a31d610831ab6", 0x28}, {0x0}, {&(0x7f0000000d80)="9ee29db8730ff374145a7a9afe9e8233971574592edac18472be80dc4e3e7921d6278a89bdd0c8ed3ae5a6a3efe103a71fa40f35eb170fa2baf3b0e424e49bab7529aa8591696fd14b934394e097f7f37a28c0a6a3435e6772b18e85430c3eb087d2774b15e22535678ea4863b86cdd152e46e86ecb5f6308d98c9e99c912452670f255589ef857a56c888f61a5778fd69b64507d93213e673ab58a693413d44bc3c558cf1ab5221df2d96639626980b4a6b60a2d4d9f197ef6b6236ab847cf98d809fc260e05be3d4076da85b89d57f7c6a77bbce132fb7ef61e3b9af1943d54cec788755c8160daff0bfa3b633f3e452e09a29e8849964497eecc26997abfda706a395e63ba5381d4331ab2d682d6e0a5c7651642c1a8b237f430e6fba83a0604445241a78eed6495e3ffc3a4c15fb9442b3aeb0b77d0a662ddf79905ee32b35dfa0a2c7907cc9706de1f8b425fae4af4a4b8c572ae05f4f0290ab7680f5694ed55997b7265e146ef4a29d1cf7f6af8206bf9c886895af5a4c1e22aef00792eeaddea1a610bef03d3f26636fa0a111407ee390107404557edb4a9d06635df71be951eb291848475a86323d09dcb6f1e54e827d444fbf5b9fba5671a42399e297cfa82a259eb9485723871741b8b8d014ce9c303a447e62ee389bbe995101f723f0e0e467ac024e55dad4527ec485f08e78ba7bd3e58cbb29855cce4cb823b6c04a05e62e770e4aa810eb076942581573e7d7afd94def6b81be92ca10b33baf84ad8fa3df04d1c256b4faafb57804874e9d40ac57e000f7dffdece435a1cd2e42a79a1713364970d8a9540226bf0a4758841eb732d80869ee64d333b6a7c899c74c03be9c4a9ef5b9ca9c8e4af8b38d7fc32e887178abd0d2efd1f1dc9618ccd70d8f7c6d5155cf9500f00e03b1982636fde3cab8b5b278e3ed234a480b4b163bea0375fa804550e9c16f2a35fd56d81fdb8ff42f8780bbf8e80c754a478c3dc35c9a9860698527e9434091f871f5ebc6055695e01cce46e1200d23a8650a20df3923251fbfbfd42a762fb516114f6bae69f7b9177b9375f9ad806894bb08422de304ab2626076ce8bfe9f3f5e4c36e2220ecdabf200efeb60a46978be53be69512aa37903531c472ef67ed54e632b719fb685db60fbbc0233a6eaac9f94d5174c62595756eedb0e89ea0a21729851f0fddd1839cad9b93efc56cbd9ad1bcb14dfc1a05f2d81026ad1f0f019be316d3f53d9e67ebb6d5c175fdd80c49ce9814d1c4e84800604ff52f11ec0b3ef191ad0f8abc4033ea5bbbfc757a806ce7dcce06d7a0aa5a357f22e5c5e5d87043effb6186775a9fdadf9452796de5ab2b67a5ad7973461b8d9beeaf9b86286d40f70f4482f92201f519e0730866ee82ff04e399a5a6fca59f0c0c8507847cc44a774b9ec3c9349923143daf7514351873096a54ff5521d25fc2edfc2bea8a454aadee91b06048fbe681a6263f318d168ec75a3dca4b1279786865223d21874f44b64fb43243e47c0e971ffc0dad013e55dd56a8fae0d00ab85d109bf88cec6e4fe9dcc92e41f87b01291635446ced5b3adf466915c3fffaaaf843a3dacdd500f2e6309925acf353e24392e53fea20b5d7929a8185e17d6cbc782c7670ad8e844e55e7b21171402901572ef21cf521ac0b20d354aaa1cf767d5b34645177a040772e3552258ed282639e6d87b9f89c7f39dcb748644513a53ed0995eee08b7de5fb9e669dc01e4bfc65e6edd808c62be850dcf1dd4ff667456c4afe06416699f1a263be17c6f5eb15717f0f9a852cd871060b235a138c4b4de73fefe1f9f4a336f4c2846e4f484a8531abbd608a134d1d288714b2b48c1b2800d6bea67d129fe0c7a8d60935f2c2e48bf4a862f61caed5a649689d75762a43be3c2952cc2c3128dc08cbfa0b3f74b9d2d56bd1b6020a8779216bfcdda681f826e12d61e3762d11ea8016656f0831f09a9ae4dea7259bb3bd87c43435d3c2985a6b5814c2c3e06e78fac96eae3978c277d9c66e41a7687d29fc9add7a7e6ae16b140cc93be0d4a322b30b1252e3d7d11114afad00f1172fc287c316d2b81aa928a4c8d97bb937f950cd2f5e6cc30ca7b00469637fa518577738aab512402440ebb8d80ca8ccb5450331d59d9143351cf12c1245be582507ce82d128226ca94317afdb5df80c310770bc238adfcd89f9473c5776b054b759a15f9a2b92a0f114441ca565d300e75c9e1ccf4444e4ab6cb6081735055532903f01332079004cb3a5445520aab251464a50359530cf086b9789337aa61db371bf8158b14c186570e8b2982a8a5a66b556623c62015d54ea028945107ab4ef09979e6ccb26869fc886fcbeb6f72c29d718b8cae8628d94bc1a5a3c32e4d6b94e43e37a677baed4fe9381894f3d089c571ae68f8efd022e8d82de78439801a482a789545752529e87554b525c8a60f04582dc2a1dd617e64ed246f8b77b7716b12308e57d66438ed43a776b643c57fa0da5e259c1c914e049c3daea976eb39d7742487c7fba98ab1ac0477139cfc25f97fb13b52a154a92d329e01b7ad7b00fced2f54267ec1a1176f2dd2b47f23e3aa2f817ed5a49dead56fb31f4be3c0ef948298ffa1f3abc2a17b7a41e589b9f56d4f3ed28fa266415ce22a4deda5d733367516dba59217c0cffab777b2d7f4954a83443ef97f986ad972c9613223dc7778f3c6b14f0fe1c7565b0c12fb2330aa5b6a26da7a2bdf96b1bcd2f5fb4d395f1c0207146406e8cc142e833bcf85f260f95570fdd75a6e068b7d40f634f513780057886e35d257efa456eb0305bc9b5239f12bdfeb35f844329223a29f9821614bdcd57005fe1a8a040aa3a6bcb8b6bd58fabec7783a6df0606bdf0e5ad0ba4d523fa40bfd43024064b6dc0a416883366c02a4d5adf539269cc2f7fe4823ad6e2222fbe3a87d22ff3cb77f2b997241fa9609bf243af2af8c1c17b6c409afd1a85a1eb92cd0faa7e2f990fd33e9d8ae1440c7a0f2d8b527fc92b33d9f9cca0c0a71567d5054b66cfa72d6e0df2c6e68e8ab41374f89a16bb65543c02ee3b7236a2f5f7de7f7248eaaae1b3c20bf633251415ac0baf69d599893b6dc7f62517659ad4b7d59e10a30aad105012500a6734ec3c206616770f76f858dc1bbe53160297cf16afc1298e0c61517a7c29eda9b7fcd667b4f8e4aa8a590cdeb3d0ab10b8cebb3d8f892549ef5cca15e0f12125abfd3d66984f72dd8654ba9ae66d409244aa19631643f3328bdda988474012b5980be01a79dfbcd66ea19919d6143c282cc60e598ea4ad31e229cf0771cc7ee33b2c74fe49dc009fc87ec60270aa350e3ac0cc79716fb9e2b9ccfc48d6c07ce2f7183b84356496248ab7e363ea6a9d4118688644f68ed8240d8a8962a513b98ef05892392cff1a85f992d11d8978da76f64d5da965dcd4b428226831574ae069bcd99b1de538b950e641a623a88037f53c6d4da5961aea160fa140ef8c2091c46e4a9eb1e0cfc474c8c8dfc53efcad8daa9c3da9eabf37e31c6693c047493d9c7abadc12f637bab02ba38de79d9e67b5213729418ca5f6f12fe019cdfe6603b5c66f6128d532371eb50b29f97595c4b7177c2daebcd8adffaec93cfe47eecc76a1d9f129409bead3ab43a1b8fb86a15a35ad8476fdd6f53bc0b400495a31edf14bcbd8cc48320431751b4bf9317b4e84f7e8f9cc0ea9cdb9401919007e3c3590e3ca6cb8f1051688f8b08afd2e83dc21c81b028c440994ba2ad625b40800f2d0a7e882d39fd5d27a9dc9b9f957274e807112885063a4d14a89b51ac3c720acea2066d94ffd0507cd75f99dc471e2480aff6ec53ddaf4e327707f517952460b293938e74cc3217d69df2ae51ad958c1526b83a273c72c26841bf636edc7f5e32c085ebfa29274c5e358609296be82bb643f60a2aa827870a56b1d575ff383c18cc936e324f0e68b907a5b5de1c4238d6950ab2746c6e5e541cbd55b3c49700cf9a3539c83c533d814e7f79558bc9b04cf0e60f090ea7a19f744fcbe1dd2d93069471c15396fd2818f84dd82b41a055296b006f958457d8bf39e4f213cea5290fa82255f821b7187440dfaa40f6dbece7a3b0d3d82fce447a266a248c24d3139742da8258c5c00eff36bb3e00bd844292f96b63201884d07c4945cd13bc5c61a79bce610d23c7444a9b94fc78b7dfc2ee7aafcd05abfa6f7b19a72327484fed53f132ae2fa9261196def63d33be3ff872381cf7dedcbab457af4688d9a3e82e7c1bb0dbcdf62e1b22026fd03c056927cd9795608158f6728fe15b091f9e1aeec784dca8e97d33bc966f701310fd02b78fdfa16dc794feb0c8b41bb3ada0255f7ebb3ff6d18168b6aae1aabaa8a38f6fdb785d0fd7742fd26f48b8bc7ec91fa377f79da73f6d8a53a45aac2e44bbc3a8e51a0606da1ef56c3a16fae9b812a2dbb1906212fce8a7c8c40feb83896c2bf19b866bfd40c6ab961261d4af8fbee2a2570442c268e1ee7c7e2e6185b3458fe8b7f11a22f2353513ca0b77c0d4a3db63564eb7f728a438c7e8cefe04612b7145b1262a6b21f7bfa2d84b2d24035b7a38d02a217a5d16fc63ff062257f510851109d5a25b73704372b34440527eb4ce6c03f0c14a31db3ae15d334ae61e4c17d1358d4336e1074443c3bd541b0dae0f38cad3052a6052a8734aee7a37513dc29a9dbd70308598cb66349d6487a9345eb44a236e153afaabd44dba626d61422c3a8637f566324344d0f86a4418962801c12f61635838ffc18e07f552e12866f5d6e76e02c85066f495a9562f212d7cf8dc7579883955e886af74e0cbd805fb4a7971bb43d67e6b46fce581659f48216dfa8bd0bf343994042de592db293b596f2f933d144cd110838ef0cef94363e1d9957c28b36eb8ef5d4d0c18e3a20274f805cf57bd4c7b7f7df700ccc111d3065480edd37b228cd81034e3b8f66e1bdf4861dc81fef9aa2b5a76896a2baf7bc9231d54e458fb20337e43a86f83400f02f660666f54e262b5acb72ba3015ea27aadbf6c03ef5059a84c8edf58baccd2ed71fdb279a10ad55ac2248df111a27fa12a168cd06ca0d9aca962442bdb9846e82dd1ed671a4cf2f4ae028394433b104970a8553612c35d615f66d3673a811d0050ce59c5c1e5b02f72506f62ff717f4255bc5bc316ec4683238b041a6a401f303387bc16e750cd53984e63909479782b5ac934b1b11457e721f1dd8f3b0e42d7904873e9e097a8696673769e4f59f25afce62731e553b95b6328e89dfd3efe2789beb0832e8d8cae5c976306019cb5a450aa963169b93523484107ec504b7efef8f00658d1bce8386f2295b767852dfe82a0661f4366da99a8d8a5ebefdef40bb2da0e6f064a305546494e1f2f57e4eb664daf1d667c879a7d948529a8628914bf5ee5966f1048184b24da0d7dbd284d264228d3f4fe21d1bec12baf4807b205b233eb2e2bdf111c1f5da6857d5a4c145531c2afb14c282dd60c36ce7a6287281aa636996cf4caa1a52224278248302c381ba25eef213759a3bc3eea9a51af42dcf37acbf49c8511ea572968a213747ee57eaa2a2c214a7827e609c5fef5bba565e0002a17e4589bb71a5c22a7d2374399c0a9d741199769f86d68c97f77c0e830e3542af936baaef00d7e18bf2bbbf603ff3838bc8476125ed0782fde0797001dc166da07e8257c1f2dc36c8b986cebf984c1c68c0b50ec6555b570e1a2de9c2d15dd7b6b15775d2899a79e2e52bfcda12f03c2ddbf398ea2526132c232cbddf035a46c6ae2fc05", 0xfff}], 0x5, &(0x7f0000001f40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000003800000000000032cd9e2aeb000800000001000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x24040040}}], 0x3, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r8, 0x0, 0x0, 0x100000, 0x0, 0x2}]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 37 (id=2898): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) r1 = socket$netlink(0x10, 0x3, 0x6) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_pts(r3, 0x801) r8 = dup3(r7, r0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x15) write$UHID_INPUT(r8, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000040)=ANY=[@ANYRESDEC=r8]) ioctl$KDGKBTYPE(r9, 0x4b48, &(0x7f0000002340)) dup3(0xffffffffffffffff, r2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001280)=@deltclass={0x64, 0x29, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffe0}, {0x0, 0xa}, {0x8, 0xd}}, [@tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x4, 0x81}}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x80000000}, @TCA_QFQ_LMAX={0x8, 0x2, 0x420}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x40}}, @tclass_kind_options=@c_red={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000200)={&(0x7f0000000780)={{@hyper, 0x8}, {@host}, 0x400, "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"}, 0x418, 0x4}) r10 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000000040), 0x0) kernel console output (not intermixed with test programs): ybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input95 [ 793.802755][ T5900] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 793.831824][ T5900] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 793.860456][ T5900] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 793.880741][ T5900] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 793.900649][ T5900] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 793.920242][ T5900] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 793.950462][ T5900] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 793.980642][ T5900] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 794.001638][ T5900] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 794.030589][ T5900] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 794.099248][ T5900] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 794.148821][ T5900] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 794.334732][ T5900] usb 1-1: USB disconnect, device number 88 [ 794.465727][T14719] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 794.658059][T11503] usb 6-1: USB disconnect, device number 91 [ 795.347457][T14730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2463'. [ 795.353379][T14731] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 796.194053][T14747] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2470'. [ 796.225488][T14749] overlayfs: failed to resolve './file1': -2 [ 796.490673][ T46] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 796.654474][ T46] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 796.701086][ T46] usb 3-1: config 9 has no interfaces? [ 796.750043][ T46] usb 3-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 796.796543][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.942010][ T46] usb 3-1: Product: syz [ 797.072272][ T46] usb 3-1: Manufacturer: syz [ 797.077062][ T46] usb 3-1: SerialNumber: syz [ 797.470178][T14760] program syz.4.2473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 797.945798][ T29] audit: type=1400 audit(1867939405.666:916): avc: denied { bind } for pid=14764 comm="syz.1.2475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 798.229839][T14769] Illegal XDP return value 4294967282 on prog (id 417) dev N/A, expect packet loss! [ 798.490609][ T5900] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 798.660743][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 798.701670][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.717240][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 798.729713][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 798.740446][ T5900] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 798.751268][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 798.772573][ T5900] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 798.784667][ T5900] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 798.797389][ T5900] usb 5-1: Manufacturer: syz [ 798.835590][ T5900] usb 5-1: config 0 descriptor?? [ 798.971234][ T29] audit: type=1400 audit(1867939406.686:917): avc: denied { write } for pid=14764 comm="syz.1.2475" path="socket:[51315]" dev="sockfs" ino=51315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 798.994561][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.104544][ T46] usb 3-1: USB disconnect, device number 107 [ 799.146060][ T5900] rc_core: IR keymap rc-hauppauge not found [ 799.158464][ T5900] Registered IR keymap rc-empty [ 799.163949][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 799.200735][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 799.224216][ T5900] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 799.309205][ T5900] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input96 [ 799.439214][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 799.634235][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 799.783506][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 799.859382][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 800.271435][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 800.422158][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 800.484241][T14793] overlay: Unknown parameter 'permit_directio' [ 800.620084][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 800.650719][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 800.680948][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 800.731191][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 800.860059][ T5900] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 800.880370][ T5900] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 800.981927][T14802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2481'. [ 801.088274][T14800] ip6gretap0 speed is unknown, defaulting to 1000 [ 801.288445][T14800] lo speed is unknown, defaulting to 1000 [ 801.507475][ T5900] usb 5-1: USB disconnect, device number 100 [ 801.955650][T14819] program syz.1.2486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 802.820558][ T5862] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 803.370891][ T5862] usb 6-1: Using ep0 maxpacket: 16 [ 803.386053][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.460443][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.474529][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 803.488863][ T5862] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 803.559990][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.655534][ T5862] usb 6-1: config 0 descriptor?? [ 803.898844][T14831] overlayfs: failed to resolve './file1': -2 [ 803.948260][T14835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2490'. [ 804.277102][ T5862] usb 6-1: can't set config #0, error -71 [ 804.289375][ T5862] usb 6-1: USB disconnect, device number 92 [ 804.394741][T14838] FAULT_INJECTION: forcing a failure. [ 804.394741][T14838] name failslab, interval 1, probability 0, space 0, times 0 [ 804.419739][T14838] CPU: 0 UID: 0 PID: 14838 Comm: syz.5.2491 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 804.430626][T14838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 804.440692][T14838] Call Trace: [ 804.443973][T14838] [ 804.446905][T14838] dump_stack_lvl+0x16c/0x1f0 [ 804.451601][T14838] should_fail_ex+0x497/0x5b0 [ 804.456285][T14838] ? fs_reclaim_acquire+0xae/0x150 [ 804.461415][T14838] should_failslab+0xc2/0x120 [ 804.466103][T14838] __kmalloc_noprof+0xcb/0x510 [ 804.470881][T14838] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 804.478006][T14838] ? cred_has_capability.isra.0+0x192/0x2f0 [ 804.483922][T14838] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 804.489396][T14838] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 804.495523][T14838] ? bpf_lsm_capable+0x9/0x10 [ 804.500211][T14838] ? security_capable+0x7e/0x260 [ 804.505165][T14838] genl_rcv_msg+0x565/0x800 [ 804.509677][T14838] ? __pfx_genl_rcv_msg+0x10/0x10 [ 804.514708][T14838] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 804.520185][T14838] ? __pfx_nl802154_new_interface+0x10/0x10 [ 804.526084][T14838] ? __pfx_nl802154_post_doit+0x10/0x10 [ 804.531638][T14838] ? __pfx___lock_acquire+0x10/0x10 [ 804.536820][T14838] netlink_rcv_skb+0x16b/0x440 [ 804.541588][T14838] ? __pfx_genl_rcv_msg+0x10/0x10 [ 804.546628][T14838] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 804.551946][T14838] ? down_read+0xc9/0x330 [ 804.556299][T14838] ? __pfx_down_read+0x10/0x10 [ 804.561085][T14838] ? netlink_deliver_tap+0x1ae/0xd30 [ 804.566390][T14838] genl_rcv+0x28/0x40 [ 804.570377][T14838] netlink_unicast+0x53c/0x7f0 [ 804.575161][T14838] ? __pfx_netlink_unicast+0x10/0x10 [ 804.580459][T14838] netlink_sendmsg+0x8b8/0xd70 [ 804.585221][T14838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 804.590501][T14838] ____sys_sendmsg+0xaaf/0xc90 [ 804.595267][T14838] ? copy_msghdr_from_user+0x10b/0x160 [ 804.600729][T14838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 804.606009][T14838] ___sys_sendmsg+0x135/0x1e0 [ 804.610670][T14838] ? __pfx____sys_sendmsg+0x10/0x10 [ 804.616297][T14838] ? __pfx_lock_release+0x10/0x10 [ 804.621314][T14838] ? trace_lock_acquire+0x14e/0x1f0 [ 804.626527][T14838] ? __fget_files+0x206/0x3a0 [ 804.631281][T14838] __sys_sendmsg+0x16e/0x220 [ 804.635861][T14838] ? __pfx___sys_sendmsg+0x10/0x10 [ 804.640965][T14838] do_syscall_64+0xcd/0x250 [ 804.645456][T14838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.651338][T14838] RIP: 0033:0x7fd39e57fed9 [ 804.655734][T14838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.675330][T14838] RSP: 002b:00007fd39c3f6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 804.683745][T14838] RAX: ffffffffffffffda RBX: 00007fd39e745fa0 RCX: 00007fd39e57fed9 [ 804.691783][T14838] RDX: 0000000000000000 RSI: 0000000020000700 RDI: 0000000000000004 [ 804.699737][T14838] RBP: 00007fd39c3f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 804.707690][T14838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.715643][T14838] R13: 0000000000000000 R14: 00007fd39e745fa0 R15: 00007ffcdc1540b8 [ 804.723610][T14838] [ 804.726704][ C0] vkms_vblank_simulate: vblank timer overrun [ 804.810238][ T5858] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 804.920280][ T46] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 805.081829][ T5858] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 805.105992][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 805.115345][ T46] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 805.122858][ T5858] usb 3-1: config 9 has no interfaces? [ 805.123824][ T46] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 805.178838][ T5858] usb 3-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 805.188287][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.189214][ T46] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 805.212886][ T46] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 805.226756][ T46] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 805.236231][ T46] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 805.248887][ T46] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 805.251836][ T5858] usb 3-1: Product: syz [ 805.267015][ T46] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 805.282243][ T46] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 805.289801][ T46] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 805.295374][ T5858] usb 3-1: Manufacturer: syz [ 805.324230][ T5858] usb 3-1: SerialNumber: syz [ 805.336383][ T46] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 805.359222][ T46] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 805.377658][ T46] usb 1-1: string descriptor 0 read error: -22 [ 805.387505][ T46] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 805.454716][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.478709][ T46] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 805.590533][T14854] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 806.250867][ T5899] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 806.420386][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 806.435335][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 806.789485][ T5858] usb 3-1: USB disconnect, device number 108 [ 806.916571][ T5899] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 806.926850][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.935085][ T5899] usb 2-1: Product: syz [ 806.939346][ T5899] usb 2-1: Manufacturer: syz [ 806.948470][ T5899] usb 2-1: SerialNumber: syz [ 806.984427][ T5899] usb 2-1: config 0 descriptor?? [ 807.002345][ T5899] hub 2-1:0.0: bad descriptor, ignoring hub [ 807.009892][ T5899] hub 2-1:0.0: probe with driver hub failed with error -5 [ 807.027224][ T5899] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input97 [ 807.512151][ T5899] usb 2-1: USB disconnect, device number 83 [ 807.706104][T14870] FAULT_INJECTION: forcing a failure. [ 807.706104][T14870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.719499][T14870] CPU: 1 UID: 0 PID: 14870 Comm: syz.5.2500 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 807.730287][T14870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 807.740355][T14870] Call Trace: [ 807.743641][T14870] [ 807.746581][T14870] dump_stack_lvl+0x16c/0x1f0 [ 807.751282][T14870] should_fail_ex+0x497/0x5b0 [ 807.755982][T14870] _copy_to_user+0x32/0xd0 [ 807.760420][T14870] simple_read_from_buffer+0xd0/0x160 [ 807.765827][T14870] proc_fail_nth_read+0x198/0x270 [ 807.770868][T14870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 807.776408][T14870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 807.781949][T14870] vfs_read+0x1df/0xbe0 [ 807.786096][T14870] ? __fget_files+0x1fc/0x3a0 [ 807.790765][T14870] ? __pfx___mutex_lock+0x10/0x10 [ 807.797451][T14870] ? __pfx_vfs_read+0x10/0x10 [ 807.797488][T14870] ? __fget_files+0x206/0x3a0 [ 807.806822][T14870] ksys_read+0x12b/0x250 [ 807.811066][T14870] ? __pfx_ksys_read+0x10/0x10 [ 807.815839][T14870] do_syscall_64+0xcd/0x250 [ 807.820348][T14870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.826243][T14870] RIP: 0033:0x7fd39e57e8ec [ 807.830654][T14870] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 807.850257][T14870] RSP: 002b:00007fd39c3f6050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 807.858663][T14870] RAX: ffffffffffffffda RBX: 00007fd39e745fa0 RCX: 00007fd39e57e8ec [ 807.866630][T14870] RDX: 000000000000000f RSI: 00007fd39c3f60b0 RDI: 0000000000000003 [ 807.874597][T14870] RBP: 00007fd39c3f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 807.882563][T14870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.890526][T14870] R13: 0000000000000000 R14: 00007fd39e745fa0 R15: 00007ffcdc1540b8 [ 807.898504][T14870] [ 808.036287][ T5900] usb 1-1: USB disconnect, device number 89 [ 808.551487][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.557760][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.900757][T14903] overlayfs: failed to resolve './file1': -2 [ 810.220170][T11503] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 810.406288][T11503] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 810.416538][T11503] usb 5-1: config 9 has no interfaces? [ 810.432216][T11503] usb 5-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 810.441916][T11503] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.449955][T11503] usb 5-1: Product: syz [ 810.469489][T11503] usb 5-1: Manufacturer: syz [ 810.484307][T11503] usb 5-1: SerialNumber: syz [ 810.924056][T14910] FAULT_INJECTION: forcing a failure. [ 810.924056][T14910] name failslab, interval 1, probability 0, space 0, times 0 [ 810.937730][T14910] CPU: 1 UID: 0 PID: 14910 Comm: syz.1.2513 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 810.948514][T14910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 810.958559][T14910] Call Trace: [ 810.961838][T14910] [ 810.964773][T14910] dump_stack_lvl+0x16c/0x1f0 [ 810.969447][T14910] should_fail_ex+0x497/0x5b0 [ 810.974124][T14910] should_failslab+0xc2/0x120 [ 810.978809][T14910] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 810.984183][T14910] ? skb_clone+0x190/0x3f0 [ 810.988601][T14910] skb_clone+0x190/0x3f0 [ 810.992858][T14910] netlink_deliver_tap+0xabd/0xd30 [ 810.997981][T14910] netlink_unicast+0x5e1/0x7f0 [ 811.002752][T14910] ? __pfx_netlink_unicast+0x10/0x10 [ 811.008053][T14910] netlink_sendmsg+0x8b8/0xd70 [ 811.012813][T14910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 811.018333][T14910] ____sys_sendmsg+0xaaf/0xc90 [ 811.018366][T14910] ? copy_msghdr_from_user+0x10b/0x160 [ 811.028557][T14910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 811.033861][T14910] ___sys_sendmsg+0x135/0x1e0 [ 811.038535][T14910] ? __pfx____sys_sendmsg+0x10/0x10 [ 811.043739][T14910] ? __pfx_lock_release+0x10/0x10 [ 811.048759][T14910] ? trace_lock_acquire+0x14e/0x1f0 [ 811.053968][T14910] ? __fget_files+0x206/0x3a0 [ 811.058733][T14910] __sys_sendmsg+0x16e/0x220 [ 811.063928][T14910] ? __pfx___sys_sendmsg+0x10/0x10 [ 811.069049][T14910] do_syscall_64+0xcd/0x250 [ 811.073555][T14910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.079447][T14910] RIP: 0033:0x7f1a1bb7fed9 [ 811.083856][T14910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.103463][T14910] RSP: 002b:00007f1a1c9f8058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 811.111873][T14910] RAX: ffffffffffffffda RBX: 00007f1a1bd45fa0 RCX: 00007f1a1bb7fed9 [ 811.119843][T14910] RDX: 0000000024044884 RSI: 0000000020000300 RDI: 0000000000000003 [ 811.127805][T14910] RBP: 00007f1a1c9f80a0 R08: 0000000000000000 R09: 0000000000000000 [ 811.135768][T14910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.143731][T14910] R13: 0000000000000000 R14: 00007f1a1bd45fa0 R15: 00007ffc80ab4948 [ 811.151710][T14910] [ 811.243886][T14914] No buffer was provided with the request [ 811.330258][ T46] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 811.354966][T14915] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2514'. [ 811.545020][ T29] audit: type=1400 audit(1867939419.256:918): avc: denied { append } for pid=14916 comm="syz.1.2516" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 811.612620][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 811.621190][ T46] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 811.683552][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.775071][ T46] usb 3-1: Product: syz [ 811.792251][ T46] usb 3-1: Manufacturer: syz [ 811.796963][ T46] usb 3-1: SerialNumber: syz [ 811.939501][ T29] audit: type=1400 audit(1867939419.536:919): avc: denied { create } for pid=14919 comm="syz.1.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 811.960502][ C0] vkms_vblank_simulate: vblank timer overrun [ 811.995986][ T46] usb 3-1: config 0 descriptor?? [ 812.038532][T14920] FAULT_INJECTION: forcing a failure. [ 812.038532][T14920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.294011][T14920] CPU: 1 UID: 0 PID: 14920 Comm: syz.1.2518 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 812.304809][T14920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 812.314857][T14920] Call Trace: [ 812.318139][T14920] [ 812.321057][T14920] dump_stack_lvl+0x16c/0x1f0 [ 812.325728][T14920] should_fail_ex+0x497/0x5b0 [ 812.330406][T14920] _copy_from_user+0x2e/0xd0 [ 812.335007][T14920] generic_map_update_batch+0x3ff/0x5f0 [ 812.340566][T14920] ? __pfx_generic_map_update_batch+0x10/0x10 [ 812.346618][T14920] ? __fget_files+0x206/0x3a0 [ 812.351282][T14920] ? __pfx_generic_map_update_batch+0x10/0x10 [ 812.357337][T14920] bpf_map_do_batch+0x5a8/0x670 [ 812.362191][T14920] __sys_bpf+0x1ce4/0x49c0 [ 812.366594][T14920] ? finish_task_switch.isra.0+0x217/0xcc0 [ 812.372382][T14920] ? __switch_to+0x730/0x1190 [ 812.377047][T14920] ? __pfx___sys_bpf+0x10/0x10 [ 812.381795][T14920] ? __schedule+0xe60/0x5ad0 [ 812.386365][T14920] ? __pfx___schedule+0x10/0x10 [ 812.391212][T14920] __x64_sys_bpf+0x78/0xc0 [ 812.395612][T14920] ? lockdep_hardirqs_on+0x7c/0x110 [ 812.400798][T14920] do_syscall_64+0xcd/0x250 [ 812.405286][T14920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.411166][T14920] RIP: 0033:0x7f1a1bb7fed9 [ 812.415557][T14920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.435142][T14920] RSP: 002b:00007f1a1c9f8058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 812.443533][T14920] RAX: ffffffffffffffda RBX: 00007f1a1bd45fa0 RCX: 00007f1a1bb7fed9 [ 812.451484][T14920] RDX: 0000000000000038 RSI: 0000000020000300 RDI: 000000000000001a [ 812.459449][T14920] RBP: 00007f1a1c9f80a0 R08: 0000000000000000 R09: 0000000000000000 [ 812.467399][T14920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.475348][T14920] R13: 0000000000000000 R14: 00007f1a1bd45fa0 R15: 00007ffc80ab4948 [ 812.483308][T14920] [ 812.667148][ T46] gspca_main: spca500-2.14.0 probing 046d:0900 [ 812.932166][T11503] usb 5-1: USB disconnect, device number 101 [ 813.236263][ T46] gspca_spca500: reg write: error -71 [ 813.243229][ T46] gspca_spca500: reg write: error -71 [ 813.248833][ T46] gspca_spca500: reg write: error -71 [ 813.271260][ T46] gspca_spca500: reg write: error -71 [ 813.276927][ T46] gspca_spca500: reg write: error -71 [ 813.283090][ T46] gspca_spca500: reg write: error -71 [ 813.288727][ T46] gspca_spca500: reg write: error -71 [ 813.294792][ T46] gspca_spca500: reg write: error -71 [ 813.869044][ T46] gspca_spca500: reg write: error -71 [ 813.890954][ T46] gspca_spca500: reg write: error -71 [ 813.920181][T13240] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 814.118765][T14944] ip6gretap0 speed is unknown, defaulting to 1000 [ 814.127719][T14944] lo speed is unknown, defaulting to 1000 [ 814.133699][ T46] gspca_spca500: reg write: error -71 [ 814.187154][T14940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2523'. [ 814.272073][T13240] usb 1-1: config 1 has an invalid interface number: 250 but max is 2 [ 814.280603][T13240] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 814.336375][T13240] usb 1-1: config 1 has no interface number 1 [ 814.378193][T13240] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 814.438871][T13240] usb 1-1: config 1 interface 250 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 814.495611][T13240] usb 1-1: config 1 interface 250 has no altsetting 0 [ 814.507840][ T46] gspca_spca500: reg write: error -71 [ 814.513724][ T46] gspca_spca500: reg write: error -71 [ 814.534168][ T46] usb 3-1: USB disconnect, device number 109 [ 814.535793][T13240] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 814.562900][T13240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.576027][T13240] usb 1-1: Product: syz [ 814.595245][T13240] usb 1-1: Manufacturer: syz [ 814.614496][T13240] usb 1-1: SerialNumber: syz [ 814.638417][T14935] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 814.882157][T13240] usb 1-1: USB disconnect, device number 90 [ 815.061074][T14695] udevd[14695]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 815.429071][ T29] audit: type=1400 audit(1867939423.126:920): avc: denied { nlmsg_write } for pid=14956 comm="syz.4.2526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 816.109853][T14965] openvswitch: netlink: IPv4 tunnel dst address is zero [ 816.576872][T14977] overlayfs: failed to resolve './file1': -2 [ 816.640167][T13240] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 816.668490][T14979] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2532'. [ 816.679135][T14979] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2532'. [ 816.868062][T13240] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 816.876846][T13240] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 816.890121][T13240] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 816.940265][ T5899] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 816.945038][T13240] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 817.187416][ T5899] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 817.187552][T13240] usb 2-1: config 1 has no interface number 0 [ 817.198457][ T5899] usb 1-1: config 9 has no interfaces? [ 817.203842][T13240] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 817.203871][T13240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.287517][T13240] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 817.453072][ T5899] usb 1-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 817.466178][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.474308][ T5899] usb 1-1: Product: syz [ 818.023766][ T5899] usb 1-1: Manufacturer: syz [ 818.028427][ T5899] usb 1-1: SerialNumber: syz [ 818.076716][T13240] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 818.093450][T13240] snd_usb_pod 2-1:1.1: invalid control EP [ 818.112848][T13240] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 818.218944][T13240] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 818.229795][T13240] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 818.518965][T14996] program syz.4.2535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 819.030844][ T29] audit: type=1400 audit(1867939426.726:921): avc: denied { read write } for pid=14966 comm="syz.1.2529" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 819.236344][ T29] audit: type=1400 audit(1867939426.736:922): avc: denied { open } for pid=14966 comm="syz.1.2529" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 819.546312][ T5858] usb 2-1: USB disconnect, device number 84 [ 819.598460][ T5899] usb 1-1: USB disconnect, device number 91 [ 819.850214][T13240] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 820.030469][T13240] usb 3-1: Using ep0 maxpacket: 8 [ 820.043127][T13240] usb 3-1: config 0 interface 0 has no altsetting 0 [ 820.053521][T13240] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 820.062788][T13240] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 820.075426][T13240] usb 3-1: Product: syz [ 820.079583][T13240] usb 3-1: Manufacturer: syz [ 820.095322][T13240] usb 3-1: config 0 descriptor?? [ 820.123217][T13240] hub 3-1:0.0: bad descriptor, ignoring hub [ 820.129172][T13240] hub 3-1:0.0: probe with driver hub failed with error -5 [ 820.165643][T15013] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 820.167843][T13240] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 820.228104][T15026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2545'. [ 820.450374][T14999] fuse: Bad value for 'user_id' [ 820.455607][T14999] fuse: Bad value for 'user_id' [ 820.542545][T13240] gspca_zc3xx: reg_w_i err -71 [ 821.380235][T13240] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 821.386681][T13240] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 821.440619][T15034] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 821.452111][T15034] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 821.461691][T15034] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 821.476109][T15034] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 821.490426][T15034] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 821.499795][T15034] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 821.575919][T15031] ip6gretap0 speed is unknown, defaulting to 1000 [ 821.581241][T13240] usb 3-1: reset high-speed USB device number 110 using dummy_hcd [ 821.583744][T15031] lo speed is unknown, defaulting to 1000 [ 821.596543][T13240] usb 3-1: device reset changed ep0 maxpacket size! [ 821.615393][T13240] usb 3-1: USB disconnect, device number 110 [ 821.732107][T15043] overlayfs: failed to resolve './file1': -2 [ 821.748080][T15031] chnl_net:caif_netlink_parms(): no params data found [ 821.770597][ T46] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 821.813319][ T29] audit: type=1400 audit(1867939429.536:923): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 821.877767][T15031] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.885543][T15031] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.893503][T15031] bridge_slave_0: entered allmulticast mode [ 821.900772][T15031] bridge_slave_0: entered promiscuous mode [ 821.911008][T15031] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.918173][T15031] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.926222][T15031] bridge_slave_1: entered allmulticast mode [ 821.936694][T15031] bridge_slave_1: entered promiscuous mode [ 821.950300][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 821.961049][ T46] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 821.979343][T15031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.979559][ T46] usb 2-1: config 0 has no interface number 0 [ 821.988689][ T5862] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 822.010950][ T46] usb 2-1: config 0 interface 214 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 822.012281][T15031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.037086][ T46] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 822.054403][ T46] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 822.103519][T15031] team0: Port device team_slave_0 added [ 822.109670][ T46] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 822.119848][ T46] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 822.123166][T15031] team0: Port device team_slave_1 added [ 822.128196][ T46] usb 2-1: Manufacturer: syz [ 822.148382][ T46] usb 2-1: SerialNumber: syz [ 822.165133][ T46] usb 2-1: config 0 descriptor?? [ 822.179864][T15033] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 822.192263][T15031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.199817][ T5862] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 822.205114][T15031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.223433][ T5862] usb 5-1: config 9 has no interfaces? [ 822.243516][T15031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.260585][T15031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.267695][T15031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.273174][ T5862] usb 5-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 822.296195][T15031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.329343][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.338986][ T5862] usb 5-1: Product: syz [ 822.354242][ T5862] usb 5-1: Manufacturer: syz [ 822.358892][ T5862] usb 5-1: SerialNumber: syz [ 822.667854][T15031] hsr_slave_0: entered promiscuous mode [ 822.785651][T15031] hsr_slave_1: entered promiscuous mode [ 822.830709][T15031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 822.838308][T15031] Cannot create hsr debugfs directory [ 823.826392][T15034] Bluetooth: hci1: command tx timeout [ 824.286953][T15031] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 824.308111][T15031] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 824.577188][T15031] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 824.717991][ T5862] usb 5-1: USB disconnect, device number 102 [ 824.808426][T15031] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 824.951663][ T46] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 824.958683][ T46] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 825.029589][T15031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.044997][T15031] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.074927][T15031] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 825.085838][T15031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 825.103397][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.110554][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.123518][ T46] usb 2-1: USB disconnect, device number 85 [ 825.187070][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.194271][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.498848][T15031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.975652][ T5128] Bluetooth: hci1: command tx timeout [ 826.053025][ T29] audit: type=1400 audit(1867939433.656:924): avc: denied { connect } for pid=15087 comm="syz.2.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 826.321468][T15102] afs: Unknown parameter ' Hý³ÄKOm' [ 826.341203][T15102] x_tables: ip6_tables: SNPT target: used from hooks PREROUTING, but only usable from INPUT/POSTROUTING [ 827.284836][ T5899] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 827.619497][T15091] syz.2.2561 (15091): drop_caches: 2 [ 827.670255][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 827.696479][ T5899] usb 2-1: config 1 has an invalid interface number: 236 but max is 0 [ 827.736470][ T5899] usb 2-1: config 1 has no interface number 0 [ 827.742790][ T5899] usb 2-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024 [ 827.753558][ T5899] usb 2-1: config 1 interface 236 has no altsetting 0 [ 827.768079][ T5899] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 827.769072][T15031] veth0_vlan: entered promiscuous mode [ 827.777253][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.792322][ T5899] usb 2-1: Product: syz [ 827.796587][ T5899] usb 2-1: Manufacturer: syz [ 827.803559][ T5899] usb 2-1: SerialNumber: syz [ 827.811485][T15110] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 827.816374][T15031] veth1_vlan: entered promiscuous mode [ 827.820266][ T5899] ti_usb_3410_5052 2-1:1.236: TI USB 5052 2 port adapter converter detected [ 827.867100][T15031] veth0_macvtap: entered promiscuous mode [ 827.878350][T15031] veth1_macvtap: entered promiscuous mode [ 827.899669][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.915769][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.919276][T15123] overlayfs: failed to resolve './file1': -2 [ 827.937111][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.947870][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.961936][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.975112][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.987633][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.998915][ T5128] Bluetooth: hci1: command tx timeout [ 828.008120][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.018529][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.041500][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.057828][T15031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 828.075006][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.085954][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.096450][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.107355][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.117914][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.128629][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.139093][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.157446][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.170476][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.181359][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.194320][T15031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 828.207807][T15031] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.216717][T15031] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.220154][ T46] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 828.225951][T15031] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.242358][T15031] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.363464][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.376069][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.395818][ T46] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 828.407089][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.423960][ T46] usb 3-1: config 9 has no interfaces? [ 828.429628][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.443959][ T46] usb 3-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 828.461588][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.470824][ T46] usb 3-1: Product: syz [ 828.475616][ T46] usb 3-1: Manufacturer: syz [ 828.481193][ T46] usb 3-1: SerialNumber: syz [ 828.529473][ T29] audit: type=1400 audit(1867939436.246:925): avc: denied { mounton } for pid=15031 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 829.876241][ T7368] usb 2-1: USB disconnect, device number 86 [ 830.070127][ T5128] Bluetooth: hci1: command tx timeout [ 830.199445][T15143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=15143 comm=syz.6.2574 [ 830.219343][T11503] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 830.247951][T15145] netlink: zone id is out of range [ 830.253624][ T29] audit: type=1326 audit(1867939437.956:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15142 comm="syz.6.2574" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1217f7fed9 code=0x0 [ 830.276454][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.283109][T15145] netlink: zone id is out of range [ 830.288403][T15145] netlink: zone id is out of range [ 830.291227][T15146] netlink: 'syz.6.2574': attribute type 1 has an invalid length. [ 830.293623][T15145] netlink: zone id is out of range [ 830.316288][T15146] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2574'. [ 830.406894][T11503] usb 6-1: config 252 has an invalid interface number: 250 but max is 0 [ 830.415493][T11503] usb 6-1: config 252 has no interface number 0 [ 830.423026][T11503] usb 6-1: config 252 interface 250 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 830.434260][T11503] usb 6-1: config 252 interface 250 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 830.447910][T11503] usb 6-1: New USB device found, idVendor=f706, idProduct=1048, bcdDevice=ff.fc [ 830.457802][T11503] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.466613][T11503] usb 6-1: Product: syz [ 830.471519][T11503] usb 6-1: Manufacturer: syz [ 830.476266][T11503] usb 6-1: SerialNumber: syz [ 830.722397][ T5858] usb 6-1: USB disconnect, device number 93 [ 830.817436][ T46] usb 3-1: USB disconnect, device number 112 [ 831.887075][T15155] xt_l2tp: missing protocol rule (udp|l2tpip) [ 833.540135][T15181] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 834.262297][T15171] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2580'. [ 835.202748][T15193] overlayfs: failed to resolve './file1': -2 [ 835.510149][ T5900] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 835.688070][ T5900] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 835.700687][ T5900] usb 2-1: config 9 has no interfaces? [ 835.722453][ T5900] usb 2-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 835.735410][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.896087][ T5900] usb 2-1: Product: syz [ 835.991822][ T5900] usb 2-1: Manufacturer: syz [ 836.059197][ T5900] usb 2-1: SerialNumber: syz [ 836.754744][T11503] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 837.145857][T11503] usb 6-1: Using ep0 maxpacket: 8 [ 837.221531][T15210] veth0_to_team: entered promiscuous mode [ 837.227333][T15210] veth0_to_team: entered allmulticast mode [ 838.007839][T11503] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 838.017101][T11503] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.048276][T11503] usb 6-1: Product: syz [ 838.053091][T11503] usb 6-1: Manufacturer: syz [ 838.057728][T11503] usb 6-1: SerialNumber: syz [ 838.065008][T11503] usb 6-1: config 0 descriptor?? [ 838.068331][T15215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2594'. [ 838.216883][ T5900] usb 2-1: USB disconnect, device number 87 [ 838.250162][ T29] audit: type=1400 audit(1867939445.926:927): avc: denied { setattr } for pid=15219 comm="syz.2.2596" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 838.278070][T11503] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 838.308768][ T29] audit: type=1400 audit(1867939445.936:928): avc: denied { write } for pid=15219 comm="syz.2.2596" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 838.692245][T15228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 840.217015][T15238] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 840.628168][T11503] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 840.669085][T11503] usb 6-1: USB disconnect, device number 94 [ 841.552935][T15255] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 843.929613][T15268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2606'. [ 844.088739][T15268] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2606'. [ 844.226495][T15271] overlayfs: failed to resolve './file1': -2 [ 844.307177][T15265] syz.5.2605 (15265): drop_caches: 2 [ 844.500163][ T5862] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 844.676901][ T5862] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 844.699725][ T5862] usb 5-1: config 9 has no interfaces? [ 844.713616][ T5862] usb 5-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 844.730103][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.745777][ T5862] usb 5-1: Product: syz [ 844.760552][ T5862] usb 5-1: Manufacturer: syz [ 844.765165][ T5862] usb 5-1: SerialNumber: syz [ 846.467185][T15294] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 846.937711][ T5862] usb 5-1: USB disconnect, device number 103 [ 849.151699][ T29] audit: type=1400 audit(1867939456.876:929): avc: denied { read write } for pid=15320 comm="syz.1.2619" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 849.176728][ T29] audit: type=1400 audit(1867939456.896:930): avc: denied { open } for pid=15320 comm="syz.1.2619" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 849.644945][T11503] IPVS: starting estimator thread 0... [ 849.670181][ T5858] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 849.747374][T15328] IPVS: using max 32 ests per chain, 76800 per kthread [ 850.415397][ T5858] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 850.427677][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.455080][ T5858] usb 6-1: config 0 descriptor?? [ 850.479232][ T5858] cp210x 6-1:0.0: cp210x converter detected [ 850.523772][ T29] audit: type=1400 audit(1867939458.236:931): avc: denied { read } for pid=15342 comm="syz.1.2624" lport=58898 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 850.633750][T15344] ip6gretap0 speed is unknown, defaulting to 1000 [ 850.652928][T15339] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2622'. [ 850.677068][T15344] lo speed is unknown, defaulting to 1000 [ 850.753764][T15339] geneve2: entered promiscuous mode [ 850.766064][T15339] geneve2: entered allmulticast mode [ 850.885723][ T29] audit: type=1400 audit(1867939458.606:932): avc: denied { map } for pid=15325 comm="syz.5.2621" path="pipe:[54122]" dev="pipefs" ino=54122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 850.909429][ T5858] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 850.965886][T15357] xt_l2tp: missing protocol rule (udp|l2tpip) [ 850.980553][ T7368] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 851.090205][T11503] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 851.121142][ T5858] cp210x 6-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 851.128878][ T5858] cp210x 6-1:0.0: GPIO initialisation failed: -121 [ 851.144804][ T5858] usb 6-1: cp210x converter now attached to ttyUSB0 [ 851.160732][ T7368] usb 7-1: Using ep0 maxpacket: 16 [ 851.167435][ T7368] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.168787][T15353] FAULT_INJECTION: forcing a failure. [ 851.168787][T15353] name failslab, interval 1, probability 0, space 0, times 0 [ 851.191216][ T7368] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.201687][ T7368] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 851.214752][ T7368] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 851.224076][ T7368] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.235838][ T7368] usb 7-1: config 0 descriptor?? [ 851.250150][T11503] usb 3-1: Using ep0 maxpacket: 8 [ 851.259460][T11503] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 851.269310][T11503] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.277849][T11503] usb 3-1: Product: syz [ 851.282795][T11503] usb 3-1: Manufacturer: syz [ 851.287531][T11503] usb 3-1: SerialNumber: syz [ 851.306868][T15353] CPU: 0 UID: 0 PID: 15353 Comm: syz.4.2625 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 851.308124][T11503] usb 3-1: config 0 descriptor?? [ 851.317641][T15353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 851.317657][T15353] Call Trace: [ 851.317664][T15353] [ 851.317673][T15353] dump_stack_lvl+0x16c/0x1f0 [ 851.317706][T15353] should_fail_ex+0x497/0x5b0 [ 851.317725][T15353] ? fs_reclaim_acquire+0xae/0x150 [ 851.317756][T15353] should_failslab+0xc2/0x120 [ 851.317780][T15353] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 851.317805][T15353] ? __pfx_mark_lock+0x10/0x10 [ 851.368101][T15353] ? vm_area_dup+0x21/0x2f0 [ 851.372620][T15353] vm_area_dup+0x21/0x2f0 [ 851.376964][T15353] __split_vma+0x181/0x1160 [ 851.381465][T15353] ? vma_merge_existing_range+0x931/0x1fa0 [ 851.387286][T15353] ? __pfx___split_vma+0x10/0x10 [ 851.392253][T15353] ? ima_file_mprotect+0x1b9/0x690 [ 851.397384][T15353] vma_modify.constprop.0+0x2ed/0x3b0 [ 851.402762][T15353] vma_modify_flags+0x209/0x2a0 [ 851.407606][T15353] ? __pfx_vma_modify_flags+0x10/0x10 [ 851.413013][T15353] mprotect_fixup+0x2c2/0xbe0 [ 851.417712][T15353] ? __pfx_mprotect_fixup+0x10/0x10 [ 851.422905][T15353] ? selinux_file_mprotect+0x161/0x610 [ 851.428380][T15353] do_mprotect_pkey+0x981/0xcf0 [ 851.433252][T15353] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 851.438636][T15353] ? __fget_files+0x206/0x3a0 [ 851.443326][T15353] ? __pfx_ksys_write+0x10/0x10 [ 851.448189][T15353] __x64_sys_mprotect+0x78/0xc0 [ 851.453060][T15353] ? lockdep_hardirqs_on+0x7c/0x110 [ 851.458277][T15353] do_syscall_64+0xcd/0x250 [ 851.462801][T15353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.468717][T15353] RIP: 0033:0x7f5bc517fed9 [ 851.473139][T15353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 851.492766][T15353] RSP: 002b:00007f5bc5ee1058 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 851.501205][T15353] RAX: ffffffffffffffda RBX: 00007f5bc5345fa0 RCX: 00007f5bc517fed9 [ 851.509196][T15353] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020000000 [ 851.517181][T15353] RBP: 00007f5bc5ee10a0 R08: 0000000000000000 R09: 0000000000000000 [ 851.525161][T15353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.528745][T11503] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 851.533128][T15353] R13: 0000000000000000 R14: 00007f5bc5345fa0 R15: 00007ffd615b30e8 [ 851.533160][T15353] [ 851.562836][T15326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.572143][T15326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.584644][ T5858] usb 6-1: USB disconnect, device number 95 [ 851.593717][ T5858] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 851.608236][ T5858] cp210x 6-1:0.0: device disconnected [ 851.785104][ T7368] microsoft 0003:045E:07DA.0023: ignoring exceeding usage max [ 851.828383][ T7368] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0023/input/input100 [ 852.695282][ T7368] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 852.928030][ T46] usb 7-1: USB disconnect, device number 2 [ 853.674039][T11503] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 853.812382][T11503] usb 3-1: USB disconnect, device number 113 [ 854.041615][T15379] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2634'. [ 854.523185][T15383] tipc: Enabling of bearer rejected, failed to enable media [ 854.560169][T15384] netlink: 'syz.5.2635': attribute type 21 has an invalid length. [ 854.568950][T15384] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2635'. [ 855.042778][T15386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2637'. [ 855.059795][T15390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2640'. [ 855.711987][ T5858] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 855.980098][ T5862] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 855.989265][ T5858] usb 3-1: Using ep0 maxpacket: 8 [ 856.059502][ T5858] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 856.068094][ T5858] usb 3-1: config 179 has no interface number 0 [ 856.074802][ T5858] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 856.088448][ T5858] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 856.104334][ T5858] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 856.119705][ T5858] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 856.138927][ T5858] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 856.152750][ T5858] usb 3-1: config 179 interface 65 has no altsetting 0 [ 856.160269][ T5858] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 856.169627][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.188386][ T5862] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 856.200592][ T5862] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 856.212079][ T5862] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 856.221175][ T5862] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 856.233359][ T5862] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 856.246061][ T5862] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 856.280390][T15391] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 857.245776][ T5858] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input101 [ 857.265168][T15406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 857.320335][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 857.333863][ T5862] usb 5-1: Product: syz [ 857.338622][ T5862] usb 5-1: Manufacturer: syz [ 857.699202][ T5862] cdc_wdm 5-1:1.0: skipping garbage [ 857.710946][ T5862] cdc_wdm 5-1:1.0: skipping garbage [ 857.786477][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 857.795651][ T5858] usb 3-1: USB disconnect, device number 114 [ 857.803863][ T5858] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 857.852852][ T5862] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 857.858978][ T5862] cdc_wdm 5-1:1.0: Unknown control protocol [ 857.906247][ T5862] usb 5-1: USB disconnect, device number 104 [ 858.532430][T15434] bond_slave_0: entered promiscuous mode [ 858.538649][T15434] bond_slave_1: entered promiscuous mode [ 858.546900][T15434] bond_slave_0: left promiscuous mode [ 858.552780][T15434] bond_slave_1: left promiscuous mode [ 859.263342][ T29] audit: type=1326 audit(1867939466.986:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15440 comm="syz.1.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bb7fed9 code=0x7ffc0000 [ 859.310219][ T29] audit: type=1326 audit(1867939467.006:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15440 comm="syz.1.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bb7fed9 code=0x7ffc0000 [ 859.380878][ T5862] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 859.534133][ T29] audit: type=1326 audit(1867939467.016:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15440 comm="syz.1.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a1bb7fed9 code=0x7ffc0000 [ 859.570135][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 859.579827][ T5862] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 860.460032][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.468060][ T5862] usb 5-1: Product: syz [ 860.478752][ T5862] usb 5-1: Manufacturer: syz [ 860.520208][ T29] audit: type=1326 audit(1867939467.016:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15440 comm="syz.1.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bb7fed9 code=0x7ffc0000 [ 860.543577][ C0] vkms_vblank_simulate: vblank timer overrun [ 860.554422][ T5862] usb 5-1: SerialNumber: syz [ 860.596132][ T5862] usb 5-1: config 0 descriptor?? [ 860.821045][ T29] audit: type=1326 audit(1867939467.016:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15440 comm="syz.1.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bb7fed9 code=0x7ffc0000 [ 860.983369][ T5862] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 860.996588][T15460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2655'. [ 861.432554][ T29] audit: type=1326 audit(1867939467.026:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15440 comm="syz.1.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f1a1bb7fed9 code=0x7ffc0000 [ 861.456532][ T29] audit: type=1326 audit(1867939467.026:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15440 comm="syz.1.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bb7fed9 code=0x7ffc0000 [ 861.480073][ T29] audit: type=1326 audit(1867939467.026:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15440 comm="syz.1.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bb7fed9 code=0x7ffc0000 [ 861.504013][ T29] audit: type=1326 audit(1867939467.026:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15440 comm="syz.1.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a1bb7fed9 code=0x7ffc0000 [ 861.527700][ T29] audit: type=1326 audit(1867939467.026:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15440 comm="syz.1.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bb7fed9 code=0x7ffc0000 [ 863.208629][ T5862] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 863.294089][ T5862] usb 5-1: USB disconnect, device number 105 [ 866.199714][T15511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'. [ 866.392022][T15519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 867.851053][T13240] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 868.040197][T13240] usb 6-1: Using ep0 maxpacket: 16 [ 868.047697][T13240] usb 6-1: config 1 interface 0 altsetting 14 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 868.061141][T13240] usb 6-1: config 1 interface 0 has no altsetting 0 [ 868.073189][T13240] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 868.082449][T13240] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.090964][T13240] usb 6-1: Product: í’²æ…⾈컻í‹ìŽ»à²¼ï¶‚ì½ä¿œé¥¼é‡œð£¹‘떀⼣ 臲䛒ᲄ쀼쯶ᒲ褪 [ 868.110237][T13240] usb 6-1: SerialNumber: â [ 868.836181][T13240] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 868.857834][T13240] usb 6-1: USB disconnect, device number 96 [ 868.927187][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 868.927203][ T29] audit: type=1400 audit(1867939476.646:953): avc: denied { setopt } for pid=15529 comm="syz.4.2674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 870.011484][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.352661][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.510728][T15559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=15559 comm=syz.5.2683 [ 870.539243][ T29] audit: type=1326 audit(1867939478.256:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15556 comm="syz.5.2683" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd39e57fed9 code=0x0 [ 870.561992][ C0] vkms_vblank_simulate: vblank timer overrun [ 871.604431][T15568] netlink: 'syz.5.2683': attribute type 1 has an invalid length. [ 872.113895][T15568] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2683'. [ 872.132878][ T29] audit: type=1326 audit(1867939479.856:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15569 comm="syz.1.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bb7fed9 code=0x7ffc0000 [ 872.193250][ T29] audit: type=1326 audit(1867939479.856:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15569 comm="syz.1.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bb7fed9 code=0x7ffc0000 [ 872.340717][T15579] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 872.400115][ T29] audit: type=1326 audit(1867939479.876:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15569 comm="syz.1.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a1bb7fed9 code=0x7ffc0000 [ 872.445842][ T29] audit: type=1326 audit(1867939479.876:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15569 comm="syz.1.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bb7fed9 code=0x7ffc0000 [ 872.685117][ T29] audit: type=1326 audit(1867939479.876:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15569 comm="syz.1.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bb7fed9 code=0x7ffc0000 [ 872.856337][ T29] audit: type=1326 audit(1867939479.886:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15569 comm="syz.1.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1a1bb7fed9 code=0x7ffc0000 [ 872.883513][ T29] audit: type=1326 audit(1867939479.886:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15569 comm="syz.1.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bb7fed9 code=0x7ffc0000 [ 873.074654][T15589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2687'. [ 873.080138][ T29] audit: type=1326 audit(1867939479.896:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15569 comm="syz.1.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bb7fed9 code=0x7ffc0000 [ 873.953585][T15596] netlink: 'syz.1.2688': attribute type 21 has an invalid length. [ 873.970136][T15596] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2688'. [ 874.899835][T15601] ip6gretap0 speed is unknown, defaulting to 1000 [ 874.945327][T15601] lo speed is unknown, defaulting to 1000 [ 875.203637][T15605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2692'. [ 875.519644][T15614] ip6gretap0 speed is unknown, defaulting to 1000 [ 875.532084][T15614] lo speed is unknown, defaulting to 1000 [ 875.784626][ T46] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 875.860134][T13240] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 875.868069][T15620] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2695'. [ 875.960181][ T46] usb 7-1: Using ep0 maxpacket: 16 [ 875.968128][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.020172][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 876.027790][T15620] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2695'. [ 876.031501][ T46] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 876.053935][ T46] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 876.063069][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.081168][ T46] usb 7-1: config 0 descriptor?? [ 876.090405][T15597] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 876.103663][T13240] usb 5-1: Using ep0 maxpacket: 16 [ 876.121301][T13240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.143386][T13240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.206466][T13240] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 876.275413][T13240] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 876.291613][T13240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.309129][T13240] usb 5-1: config 0 descriptor?? [ 876.859139][ T46] microsoft 0003:045E:07DA.0024: ignoring exceeding usage max [ 876.922543][ T46] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0024/input/input102 [ 877.221427][T13240] microsoft 0003:045E:07DA.0025: ignoring exceeding usage max [ 877.422509][T13240] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0025/input/input103 [ 877.435816][ T46] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 877.503268][T13240] microsoft 0003:045E:07DA.0025: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 877.537393][ T46] usb 7-1: USB disconnect, device number 3 [ 877.543153][T13240] usb 5-1: USB disconnect, device number 106 [ 877.611234][T15635] netlink: 'syz.5.2698': attribute type 21 has an invalid length. [ 877.625454][T15635] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2698'. [ 878.469805][T15641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 878.877446][T15656] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2704'. [ 878.952758][T15657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2703'. [ 880.607792][T15681] ip6gretap0 speed is unknown, defaulting to 1000 [ 880.617794][T15681] lo speed is unknown, defaulting to 1000 [ 880.991124][ T5862] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 881.409503][T15701] ip6gretap0 speed is unknown, defaulting to 1000 [ 881.420475][T15701] lo speed is unknown, defaulting to 1000 [ 881.461057][T15696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2714'. [ 881.483103][ T5862] usb 7-1: Using ep0 maxpacket: 16 [ 881.527591][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.557497][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 881.578804][ T5862] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 881.579856][T15696] geneve2: entered promiscuous mode [ 881.599873][ T5862] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 881.603950][T15696] geneve2: entered allmulticast mode [ 881.614092][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.780226][ T7368] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 881.994953][ T5862] usb 7-1: config 0 descriptor?? [ 882.010835][T15686] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 882.160609][ T7368] usb 3-1: Using ep0 maxpacket: 16 [ 882.174398][ T7368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.196665][ T7368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.257292][ T7368] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 882.317075][ T7368] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 882.334451][ T7368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.380740][ T7368] usb 3-1: config 0 descriptor?? [ 882.506953][T15712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 882.580324][ T5862] microsoft 0003:045E:07DA.0026: ignoring exceeding usage max [ 882.894133][ T5862] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0026/input/input104 [ 882.996219][ T5862] microsoft 0003:045E:07DA.0026: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 883.080049][ T5862] usb 7-1: USB disconnect, device number 4 [ 883.212334][T15722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2717'. [ 883.223239][ T7368] microsoft 0003:045E:07DA.0027: ignoring exceeding usage max [ 883.682827][ T7368] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0027/input/input105 [ 883.825188][ T7368] microsoft 0003:045E:07DA.0027: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 883.978671][ T7368] usb 3-1: USB disconnect, device number 115 [ 884.604351][ T46] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 884.819294][ T46] usb 7-1: unable to get BOS descriptor or descriptor too short [ 884.820977][T15745] overlayfs: failed to resolve './file1': -2 [ 884.869575][ T46] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 884.957268][ T46] usb 7-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 885.266794][ T46] usb 7-1: config 1 interface 0 has no altsetting 1 [ 885.288779][ T46] usb 7-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 885.316461][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.343785][ T46] usb 7-1: Product: syz [ 885.348009][ T46] usb 7-1: Manufacturer: syz [ 885.353579][ T46] usb 7-1: SerialNumber: syz [ 885.363915][ T46] smsusb:smsusb_probe: board id=8, interface number 0 [ 886.431140][ T46] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 886.438136][ T46] smsusb 7-1:1.0: probe with driver smsusb failed with error -71 [ 886.456909][ T46] usb 7-1: USB disconnect, device number 5 [ 887.063728][ T7368] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 887.314309][ T7368] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 887.330187][ T7368] usb 6-1: config 9 has no interfaces? [ 887.377363][ T7368] usb 6-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 887.477411][ T7368] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.540288][ T7368] usb 6-1: Product: syz [ 887.549825][ T7368] usb 6-1: Manufacturer: syz [ 887.554745][ T7368] usb 6-1: SerialNumber: syz [ 887.790643][ T7368] usb 6-1: USB disconnect, device number 97 [ 888.445511][T15765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2728'. [ 889.565582][T15779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2731'. [ 890.628386][ T5858] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 891.120786][ T5858] usb 2-1: Using ep0 maxpacket: 8 [ 891.127749][ T5858] usb 2-1: config 0 interface 0 has no altsetting 0 [ 891.141512][ T5858] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 891.165639][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 891.173813][ T5858] usb 2-1: Product: syz [ 891.179517][ T5858] usb 2-1: Manufacturer: syz [ 891.200351][ T5858] usb 2-1: config 0 descriptor?? [ 891.211860][ T5858] hub 2-1:0.0: bad descriptor, ignoring hub [ 891.217792][ T5858] hub 2-1:0.0: probe with driver hub failed with error -5 [ 891.234252][ T5858] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 891.264971][T15809] overlayfs: failed to resolve './file1': -2 [ 891.370335][ T8] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 891.520502][T15811] fuse: Bad value for 'user_id' [ 891.525535][T15811] fuse: Bad value for 'user_id' [ 891.530076][ T46] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 891.530650][ T5862] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 891.687443][ T46] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 891.706213][ T5858] gspca_zc3xx: reg_w_i err -71 [ 891.707419][ T46] usb 6-1: config 9 has no interfaces? [ 891.809586][ T8] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 891.819787][ T8] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 891.831437][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 891.838188][ T46] usb 6-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 891.842347][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 891.842380][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 891.881901][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.887086][ T8] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 891.889900][ T46] usb 6-1: Product: syz [ 891.903542][ T46] usb 6-1: Manufacturer: syz [ 891.904557][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.908130][ T46] usb 6-1: SerialNumber: syz [ 891.924248][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.936300][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.946431][ T5862] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 891.956130][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.965335][ T8] usb 7-1: config 0 descriptor?? [ 891.973521][T15804] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 891.986260][ T5862] usb 5-1: config 0 descriptor?? [ 892.199637][T15810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.217266][T15810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.340308][ T5858] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 892.347095][ T5858] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 892.427856][ T8] plantronics 0003:047F:FFFF.0028: unknown main item tag 0xd [ 892.444327][ T5862] usbhid 5-1:0.0: can't add hid device: -71 [ 892.467224][ T5862] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 892.485145][ T8] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 892.504423][ T5862] usb 5-1: USB disconnect, device number 107 [ 892.546598][ T8] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 892.593840][ T5858] usb 2-1: reset high-speed USB device number 88 using dummy_hcd [ 892.800985][ T5858] usb 2-1: device reset changed ep0 maxpacket size! [ 892.835137][ T5858] usb 2-1: USB disconnect, device number 88 [ 892.942319][T15804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.951230][T15804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.170143][ T5858] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 893.708223][T15822] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 893.714856][T15822] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 893.730120][T15822] vhci_hcd vhci_hcd.0: Device attached [ 893.960442][T11503] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 893.994023][T15827] vhci_hcd: connection reset by peer [ 894.051945][ T3498] vhci_hcd: stop threads [ 894.056334][ T3498] vhci_hcd: release socket [ 894.061855][ T3498] vhci_hcd: disconnect device [ 894.120623][ T7368] usb 7-1: reset high-speed USB device number 6 using dummy_hcd [ 895.231176][ T46] usb 6-1: USB disconnect, device number 98 [ 895.966563][T15850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2748'. [ 895.977752][T15759] usb 7-1: USB disconnect, device number 6 [ 896.040119][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 896.040131][ T29] audit: type=1400 audit(1867939503.746:991): avc: denied { mount } for pid=15837 comm="syz.5.2747" name="/" dev="pstore" ino=2596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 896.114929][T15850] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2748'. [ 896.249340][ T29] audit: type=1400 audit(1867939503.966:992): avc: denied { unmount } for pid=6071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 896.462107][ T29] audit: type=1400 audit(1867939503.996:993): avc: denied { unmount } for pid=6071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 896.716484][T15858] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2751'. [ 899.127913][ T29] audit: type=1400 audit(1867939506.846:994): avc: denied { write } for pid=15892 comm="syz.5.2761" name="igmp" dev="proc" ino=4026533934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 899.160151][T11503] vhci_hcd: vhci_device speed not set [ 900.980437][T15885] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 902.817511][ T7368] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 903.192880][ T7368] usb 7-1: Using ep0 maxpacket: 8 [ 903.201946][ T7368] usb 7-1: config 0 interface 0 has no altsetting 0 [ 903.218032][ T7368] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 903.230713][ T7368] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 903.247982][ T7368] usb 7-1: Product: syz [ 903.292419][ T7368] usb 7-1: Manufacturer: syz [ 903.324380][ T7368] usb 7-1: config 0 descriptor?? [ 903.355004][ T7368] hub 7-1:0.0: bad descriptor, ignoring hub [ 903.376644][ T7368] hub 7-1:0.0: probe with driver hub failed with error -5 [ 903.408412][ T7368] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 903.522855][ T8] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 903.608476][T15917] fuse: Bad value for 'user_id' [ 903.613609][T15917] fuse: Bad value for 'user_id' [ 903.872669][ T7368] gspca_zc3xx: reg_w_i err -71 [ 904.046647][T15934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2770'. [ 904.056054][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 905.041196][ T7368] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 905.047483][ T7368] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 905.487011][ T8] usb 6-1: config 1 interface 0 altsetting 14 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 905.503384][ T8] usb 6-1: config 1 interface 0 has no altsetting 0 [ 905.573151][ T7368] usb 7-1: reset high-speed USB device number 7 using dummy_hcd [ 905.581482][ T7368] usb 7-1: device reset changed ep0 maxpacket size! [ 905.582810][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 905.597255][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.610824][ T8] usb 6-1: Product: í’²æ…⾈컻í‹ìŽ»à²¼ï¶‚ì½ä¿œé¥¼é‡œð£¹‘떀⼣ 臲䛒ᲄ쀼쯶ᒲ褪 [ 905.618047][ T7368] usb 7-1: USB disconnect, device number 7 [ 905.621557][ T8] usb 6-1: SerialNumber: â [ 906.092111][ T8] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 906.121605][ T8] usb 6-1: USB disconnect, device number 99 [ 907.247803][T15959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 907.644277][T15962] xt_l2tp: missing protocol rule (udp|l2tpip) [ 909.654102][T15986] program syz.6.2785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 912.311096][ T8] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 912.378277][T16007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 912.520163][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 912.527846][ T8] usb 5-1: config 1 interface 0 altsetting 14 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 912.547511][ T8] usb 5-1: config 1 interface 0 has no altsetting 0 [ 912.654336][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 912.700506][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.702056][T16017] xt_l2tp: missing protocol rule (udp|l2tpip) [ 912.932698][ T8] usb 5-1: Product: í’²æ…⾈컻í‹ìŽ»à²¼ï¶‚ì½ä¿œé¥¼é‡œð£¹‘떀⼣ 臲䛒ᲄ쀼쯶ᒲ褪 [ 913.007410][ T8] usb 5-1: SerialNumber: â [ 913.332627][T16022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2795'. [ 913.789695][T16022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2795'. [ 914.290978][T16033] program syz.5.2797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 914.426141][ T8] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 914.457102][ T29] audit: type=1400 audit(1867939522.166:995): avc: denied { getopt } for pid=16036 comm="syz.2.2799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 914.490728][ T8] usb 5-1: USB disconnect, device number 108 [ 914.680149][ T7368] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 914.930331][ T7368] usb 2-1: Using ep0 maxpacket: 16 [ 915.063856][ T7368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 915.364840][ T7368] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 915.399497][ T7368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.580248][ T7368] usb 2-1: Product: syz [ 915.584922][ T7368] usb 2-1: Manufacturer: syz [ 915.589612][ T7368] usb 2-1: SerialNumber: syz [ 915.651588][ T7368] usb 2-1: config 0 descriptor?? [ 915.669920][ T7368] hub 2-1:0.0: bad descriptor, ignoring hub [ 915.694904][ T7368] hub 2-1:0.0: probe with driver hub failed with error -5 [ 915.990103][ T7368] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input107 [ 916.190350][T16060] netlink: 'syz.4.2805': attribute type 21 has an invalid length. [ 916.207510][T16060] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2805'. [ 917.916459][T16079] xt_l2tp: missing protocol rule (udp|l2tpip) [ 918.481279][T15034] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 918.493059][T15034] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 918.515820][T15759] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 918.524759][T15034] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 918.536574][T15034] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 918.545847][T15034] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 918.615522][T15034] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 918.736110][T15759] usb 6-1: Using ep0 maxpacket: 8 [ 919.016747][T15759] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 919.031225][T15759] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.086124][T16085] ip6gretap0 speed is unknown, defaulting to 1000 [ 919.092798][T15759] usb 6-1: Product: syz [ 919.096946][T15759] usb 6-1: Manufacturer: syz [ 919.123602][T16085] lo speed is unknown, defaulting to 1000 [ 919.130792][T15759] usb 6-1: SerialNumber: syz [ 919.165487][T15759] usb 6-1: config 0 descriptor?? [ 919.450596][ T5861] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 919.455787][T15759] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 919.700020][ T5861] usb 7-1: Using ep0 maxpacket: 16 [ 919.725457][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 919.755865][ T5861] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 919.938476][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.045929][ T5861] usb 7-1: Product: syz [ 920.072308][ T5861] usb 7-1: Manufacturer: syz [ 920.084611][ T5861] usb 7-1: SerialNumber: syz [ 920.097486][ T5861] usb 7-1: config 0 descriptor?? [ 920.111377][ T5861] hub 7-1:0.0: bad descriptor, ignoring hub [ 920.134638][ T5861] hub 7-1:0.0: probe with driver hub failed with error -5 [ 920.171697][ T5861] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input108 [ 920.401598][T16085] chnl_net:caif_netlink_parms(): no params data found [ 920.500980][ T5861] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 920.811023][T15034] Bluetooth: hci3: command tx timeout [ 920.904518][T16085] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.911776][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 920.918221][T16085] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.925692][ T5861] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 920.936413][ T5861] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 920.949742][T16085] bridge_slave_0: entered allmulticast mode [ 920.956751][T16085] bridge_slave_0: entered promiscuous mode [ 920.963856][ T5861] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 920.977101][T16085] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.984522][ T5861] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 921.003588][T16085] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.031144][ T5861] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 921.042077][T16085] bridge_slave_1: entered allmulticast mode [ 921.049004][T16085] bridge_slave_1: entered promiscuous mode [ 921.060509][ T5861] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 921.098519][ T5861] usb 5-1: string descriptor 0 read error: -22 [ 921.114033][ T5861] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 921.124561][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.146307][T16085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.160180][ T5861] adutux 5-1:168.0: interrupt endpoints not found [ 921.162298][ T5900] usb 2-1: USB disconnect, device number 90 [ 921.196451][T16085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.255903][T15759] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 921.288551][T15759] usb 6-1: USB disconnect, device number 100 [ 921.298620][T16122] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2823'. [ 921.339177][T16085] team0: Port device team_slave_0 added [ 921.376713][T16085] team0: Port device team_slave_1 added [ 921.417823][T16085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.427338][T16085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.613295][T16085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.629644][T16085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.181190][T16085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.241617][T16085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.346117][T16085] hsr_slave_0: entered promiscuous mode [ 922.364451][T16085] hsr_slave_1: entered promiscuous mode [ 922.365522][T16129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2824'. [ 922.379149][T16129] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2824'. [ 922.388546][T16085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 922.397735][T16085] Cannot create hsr debugfs directory [ 922.649372][T16133] ip6gretap0 speed is unknown, defaulting to 1000 [ 922.662476][T16138] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2826'. [ 922.695044][T16133] lo speed is unknown, defaulting to 1000 [ 922.870069][T15034] Bluetooth: hci3: command tx timeout [ 922.880307][ T5174] usb 7-1: reset high-speed USB device number 8 using dummy_hcd [ 922.897813][T16085] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 922.927337][T16085] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.033319][ T5174] usb 7-1: device firmware changed [ 923.042455][ T5861] usb 7-1: USB disconnect, device number 8 [ 923.118119][T16085] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.144193][T16085] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.241451][ T5861] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 923.277980][T16085] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.290794][T16085] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.381131][ T5858] usb 5-1: USB disconnect, device number 109 [ 923.456288][T16085] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.474003][T16085] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.484592][ T5861] usb 7-1: Using ep0 maxpacket: 16 [ 923.496619][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.508185][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.522320][ T5861] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 923.535577][ T5861] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 923.547682][ T5861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.588066][ T5861] usb 7-1: config 0 descriptor?? [ 923.686090][T16085] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 923.743654][T16085] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 923.900540][T16085] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 924.102129][T16085] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 924.154467][T16150] ip6gretap0 speed is unknown, defaulting to 1000 [ 924.187732][T16150] lo speed is unknown, defaulting to 1000 [ 924.190899][T16147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2829'. [ 924.312271][T16085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.342536][ T5861] microsoft 0003:045E:07DA.0029: ignoring exceeding usage max [ 924.376568][T16085] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.402518][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.409663][ T6536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.423490][ T5861] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0029/input/input109 [ 924.461462][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.468568][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.520164][T15759] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 924.522891][ T5861] microsoft 0003:045E:07DA.0029: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 924.614317][ T5861] usb 7-1: USB disconnect, device number 9 [ 924.670087][T15759] usb 3-1: Using ep0 maxpacket: 16 [ 924.675531][T16085] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 924.677627][T15759] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.720686][T16085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 924.725057][T15759] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.782987][T15759] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 924.869170][T15759] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 924.923353][T15759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.952094][T15034] Bluetooth: hci3: command tx timeout [ 924.961269][T15759] usb 3-1: config 0 descriptor?? [ 925.065597][T16085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.095775][T16085] veth0_vlan: entered promiscuous mode [ 925.106669][T16085] veth1_vlan: entered promiscuous mode [ 925.175521][T16085] veth0_macvtap: entered promiscuous mode [ 925.192800][T16085] veth1_macvtap: entered promiscuous mode [ 925.227097][T16085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.320191][T16085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.337913][T16085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.364874][T16085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.404686][T16085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.427706][T16085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.428507][T16171] FAULT_INJECTION: forcing a failure. [ 925.428507][T16171] name failslab, interval 1, probability 0, space 0, times 0 [ 925.443107][T16085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.451247][T16171] CPU: 1 UID: 0 PID: 16171 Comm: syz.6.2833 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 925.469390][T16085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.471825][T16171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 925.471840][T16171] Call Trace: [ 925.471848][T16171] [ 925.471857][T16171] dump_stack_lvl+0x16c/0x1f0 [ 925.471889][T16171] should_fail_ex+0x497/0x5b0 [ 925.482312][T16085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.491689][T16171] should_failslab+0xc2/0x120 [ 925.491720][T16171] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 925.491745][T16171] ? skb_clone+0x190/0x3f0 [ 925.491771][T16171] skb_clone+0x190/0x3f0 [ 925.491794][T16171] netlink_deliver_tap+0xabd/0xd30 [ 925.491827][T16171] netlink_unicast+0x5e1/0x7f0 [ 925.491858][T16171] ? __pfx_netlink_unicast+0x10/0x10 [ 925.491893][T16171] netlink_sendmsg+0x8b8/0xd70 [ 925.496498][T16085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.498074][T16171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 925.571289][T16171] ____sys_sendmsg+0xaaf/0xc90 [ 925.576058][T16171] ? copy_msghdr_from_user+0x10b/0x160 [ 925.581510][T16171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 925.586805][T16171] ___sys_sendmsg+0x135/0x1e0 [ 925.591479][T16171] ? __pfx____sys_sendmsg+0x10/0x10 [ 925.596683][T16171] ? __pfx_lock_release+0x10/0x10 [ 925.601706][T16171] ? trace_lock_acquire+0x14e/0x1f0 [ 925.606916][T16171] ? __fget_files+0x206/0x3a0 [ 925.611594][T16171] __sys_sendmsg+0x16e/0x220 [ 925.616179][T16171] ? __pfx___sys_sendmsg+0x10/0x10 [ 925.621303][T16171] do_syscall_64+0xcd/0x250 [ 925.625809][T16171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.631700][T16171] RIP: 0033:0x7f1217f7fed9 [ 925.636140][T16171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.655777][T16171] RSP: 002b:00007f1218cca058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 925.664194][T16171] RAX: ffffffffffffffda RBX: 00007f1218145fa0 RCX: 00007f1217f7fed9 [ 925.672159][T16171] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 925.680126][T16171] RBP: 00007f1218cca0a0 R08: 0000000000000000 R09: 0000000000000000 [ 925.688093][T16171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.696063][T16171] R13: 0000000000000000 R14: 00007f1218145fa0 R15: 00007ffd7d4a6e38 [ 925.704043][T16171] [ 925.707118][ C1] vkms_vblank_simulate: vblank timer overrun [ 925.709505][T16085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.724435][T16085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.725822][T15759] microsoft 0003:045E:07DA.002A: ignoring exceeding usage max [ 925.737578][T16085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 925.789482][T15759] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002A/input/input110 [ 925.844576][T16085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 925.870933][T15759] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 925.917798][T16085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.951789][T16085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 925.965073][ T5861] usb 3-1: USB disconnect, device number 116 [ 925.989692][T16085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.004879][T16085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.046074][T16085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.059760][T16085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.080102][T16085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.094909][T16085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.110354][T16085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.125060][T16085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.139153][T16085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.286182][T16085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.313767][T16085] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.329618][T16085] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.340236][T16085] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.349152][T16085] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.499438][ T29] audit: type=1326 audit(1867939534.216:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16177 comm="syz.5.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39e57fed9 code=0x7ffc0000 [ 926.553919][ T29] audit: type=1326 audit(1867939534.216:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16177 comm="syz.5.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fd39e57fed9 code=0x7ffc0000 [ 926.615989][ T29] audit: type=1326 audit(1867939534.246:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16177 comm="syz.5.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39e57fed9 code=0x7ffc0000 [ 926.643285][ T29] audit: type=1326 audit(1867939534.246:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16177 comm="syz.5.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39e57fed9 code=0x7ffc0000 [ 926.705920][ T7117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.719464][ T29] audit: type=1326 audit(1867939534.246:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16177 comm="syz.5.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd39e57fed9 code=0x7ffc0000 [ 926.731888][ T7117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.755063][ T29] audit: type=1326 audit(1867939534.246:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16177 comm="syz.5.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39e57fed9 code=0x7ffc0000 [ 926.807981][ T29] audit: type=1326 audit(1867939534.246:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16177 comm="syz.5.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd39e57fed9 code=0x7ffc0000 [ 926.834582][ T7117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.834954][ T29] audit: type=1326 audit(1867939534.246:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16177 comm="syz.5.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39e57fed9 code=0x7ffc0000 [ 926.852529][ T7117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.872961][ T29] audit: type=1326 audit(1867939534.246:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16177 comm="syz.5.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd39e57fed9 code=0x7ffc0000 [ 926.896329][T16182] ip6gretap0 speed is unknown, defaulting to 1000 [ 926.905264][ T29] audit: type=1326 audit(1867939534.246:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16177 comm="syz.5.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39e57fed9 code=0x7ffc0000 [ 926.949326][T16182] lo speed is unknown, defaulting to 1000 [ 927.000587][ T5862] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 927.030304][T15034] Bluetooth: hci3: command tx timeout [ 927.165419][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 927.176867][ T5862] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 927.187712][ T5862] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 927.248114][ T5862] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 927.612057][ T5862] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 927.690700][ T5862] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 927.720241][T13240] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 927.974900][ T5862] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 928.076936][ T5862] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 928.087905][ T5862] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 928.116000][ T5862] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 928.350552][T13240] usb 6-1: Using ep0 maxpacket: 16 [ 928.401346][T13240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.430079][T13240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.444651][T13240] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 928.463005][T13240] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 928.483684][T13240] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.501085][T13240] usb 6-1: config 0 descriptor?? [ 928.508786][ T5862] usb 3-1: string descriptor 0 read error: -22 [ 928.530432][ T5862] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 928.550245][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.617409][ T5862] adutux 3-1:168.0: interrupt endpoints not found [ 930.170509][T16207] veth0_to_team: entered promiscuous mode [ 930.176262][T16207] veth0_to_team: entered allmulticast mode [ 930.309377][T16201] trusted_key: encrypted_key: insufficient parameters specified [ 930.381567][T13240] usbhid 6-1:0.0: can't add hid device: -71 [ 930.387637][T13240] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 930.418265][T13240] usb 6-1: USB disconnect, device number 101 [ 931.486757][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.501652][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.997906][T15759] usb 3-1: USB disconnect, device number 117 [ 932.175236][T16229] bond_slave_0: entered promiscuous mode [ 932.180967][T16229] bond_slave_1: entered promiscuous mode [ 932.231379][T16226] bond_slave_0: left promiscuous mode [ 932.236830][T16226] bond_slave_1: left promiscuous mode [ 932.382635][T16237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2846'. [ 932.398934][T16237] geneve2: entered promiscuous mode [ 932.407929][T16237] geneve2: entered allmulticast mode [ 932.420025][T16235] ip6gretap0 speed is unknown, defaulting to 1000 [ 932.427508][T16235] lo speed is unknown, defaulting to 1000 [ 933.311305][T13240] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 933.319045][ T5862] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 933.405714][T16245] IPVS: set_ctl: invalid protocol: 11612 172.30.1.5:20003 [ 933.476261][T13240] usb 7-1: Using ep0 maxpacket: 16 [ 933.490144][T13240] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 933.550594][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 933.563078][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.596686][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.609386][ T5862] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 933.624824][T13240] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 933.641533][T13240] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.650386][T13240] usb 7-1: Product: syz [ 933.654781][ T5862] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 933.666197][T13240] usb 7-1: Manufacturer: syz [ 933.671140][T13240] usb 7-1: SerialNumber: syz [ 933.678908][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.744501][ T5862] usb 2-1: config 0 descriptor?? [ 933.767439][T13240] usb 7-1: config 0 descriptor?? [ 933.813629][T13240] hub 7-1:0.0: bad descriptor, ignoring hub [ 933.830213][T13240] hub 7-1:0.0: probe with driver hub failed with error -5 [ 933.875327][T13240] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input111 [ 934.269021][ T5862] microsoft 0003:045E:07DA.002B: ignoring exceeding usage max [ 934.501437][ T5862] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002B/input/input112 [ 934.615568][T16257] ip6gretap0 speed is unknown, defaulting to 1000 [ 934.623050][T16257] lo speed is unknown, defaulting to 1000 [ 934.658877][ T5862] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 934.693396][ T5862] usb 2-1: USB disconnect, device number 91 [ 934.900034][T15759] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 935.070560][T15759] usb 3-1: Using ep0 maxpacket: 16 [ 935.078701][T15759] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.126000][T15759] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.158487][T15759] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 935.234738][T15759] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 935.277238][T15759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.429392][T15759] usb 3-1: config 0 descriptor?? [ 935.603529][T16270] ip6gretap0 speed is unknown, defaulting to 1000 [ 935.624673][T16270] lo speed is unknown, defaulting to 1000 [ 935.710276][ T5174] usb 7-1: reset high-speed USB device number 10 using dummy_hcd [ 935.719882][ T5174] usb 7-1: device reset changed ep0 maxpacket size! [ 935.751020][ T5861] usb 7-1: USB disconnect, device number 10 [ 935.866222][T15759] microsoft 0003:045E:07DA.002C: ignoring exceeding usage max [ 935.895469][T15759] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002C/input/input113 [ 935.917953][ T5861] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 935.963164][T15759] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 936.086193][T15759] usb 3-1: USB disconnect, device number 118 [ 936.141115][T16270] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 936.210180][ T5861] usb 7-1: Using ep0 maxpacket: 8 [ 936.216715][ T5861] usb 7-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 936.229006][ T5861] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 937.204228][ T5861] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 937.567659][ T5861] usb 7-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 937.578081][ T5861] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 937.589375][ T5861] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 937.757866][ T5861] usb 7-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 937.854711][ T5861] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 937.871856][ T5861] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 937.888933][ T5861] usb 7-1: string descriptor 0 read error: -22 [ 937.895218][ T5861] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 937.904812][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.966706][ T5861] adutux 7-1:168.0: interrupt endpoints not found [ 938.328428][T16294] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2863'. [ 939.496029][T16312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2866'. [ 939.680561][T16311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2865'. [ 939.953159][T16309] ip6gretap0 speed is unknown, defaulting to 1000 [ 940.186889][ T5861] usb 7-1: USB disconnect, device number 11 [ 940.192899][T13240] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 940.370088][T16309] lo speed is unknown, defaulting to 1000 [ 940.489449][ T5128] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 940.990054][T13240] usb 5-1: Using ep0 maxpacket: 16 [ 941.375790][ T5128] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 941.429574][ T5128] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 941.441702][ T5128] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 941.453076][ T5128] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 941.463108][ T5128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 942.435105][T16336] SELinux: policydb string does not match my string SE Linux [ 942.443452][T16336] SELinux: failed to load policy [ 942.909097][T16337] xt_l2tp: missing protocol rule (udp|l2tpip) [ 942.943147][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 942.943191][ T29] audit: type=1400 audit(1867939550.156:1027): avc: denied { load_policy } for pid=16324 comm="syz.6.2870" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 943.212042][T16335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.295215][T16335] batadv_slave_0: entered promiscuous mode [ 943.649093][ T5128] Bluetooth: hci4: command tx timeout [ 943.750625][ T5128] Bluetooth: hci1: command 0x0406 tx timeout [ 943.845474][T16318] ip6gretap0 speed is unknown, defaulting to 1000 [ 943.855978][T16345] KVM: debugfs: duplicate directory 16345-4 [ 944.149319][ T3498] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.216532][T16318] lo speed is unknown, defaulting to 1000 [ 944.245083][T16340] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 944.260285][T16340] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 944.379363][ T3498] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.715641][ T3498] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.867310][T16340] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 944.879419][T16340] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 945.840606][ T5823] Bluetooth: hci4: command tx timeout [ 945.874594][ T3498] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.578864][T13240] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 946.586689][T13240] usb 5-1: can't read configurations, error -71 [ 946.612755][ T3498] bridge_slave_1: left allmulticast mode [ 946.618420][ T3498] bridge_slave_1: left promiscuous mode [ 946.624342][ T3498] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.723624][T15759] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 946.742102][ T3498] bridge_slave_0: left allmulticast mode [ 946.748172][ T3498] bridge_slave_0: left promiscuous mode [ 946.754064][ T3498] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.880875][T15759] usb 6-1: Using ep0 maxpacket: 16 [ 946.914507][T15759] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 946.948906][T15759] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 946.976319][T15759] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.985159][T15759] usb 6-1: Product: syz [ 946.992235][T15759] usb 6-1: Manufacturer: syz [ 946.996850][T15759] usb 6-1: SerialNumber: syz [ 947.021238][T15759] usb 6-1: config 0 descriptor?? [ 947.044632][T15759] hub 6-1:0.0: bad descriptor, ignoring hub [ 947.052897][T15759] hub 6-1:0.0: probe with driver hub failed with error -5 [ 947.075052][T15759] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input114 [ 947.774467][ T3498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.785480][ T3498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.795677][ T3498] bond0 (unregistering): Released all slaves [ 947.820381][T16318] chnl_net:caif_netlink_parms(): no params data found [ 947.917561][ T5823] Bluetooth: hci4: command tx timeout [ 948.055574][T16379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2880'. [ 948.566395][T16318] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.589030][T16318] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.605578][T16318] bridge_slave_0: entered allmulticast mode [ 948.617666][T16318] bridge_slave_0: entered promiscuous mode [ 948.635518][T16318] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.643348][T16318] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.664798][T16318] bridge_slave_1: entered allmulticast mode [ 948.677857][T16318] bridge_slave_1: entered promiscuous mode [ 948.759429][T16318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 948.787280][T16318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 948.836270][T16392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 948.897038][T16318] team0: Port device team_slave_0 added [ 948.907479][T16318] team0: Port device team_slave_1 added [ 948.931796][T16318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.938999][T16318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.970409][T16318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.982720][T16318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.989842][T16318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.020811][T16318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 949.075853][T16318] hsr_slave_0: entered promiscuous mode [ 949.083496][T16318] hsr_slave_1: entered promiscuous mode [ 949.089745][T16318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 949.101356][T16318] Cannot create hsr debugfs directory [ 949.606747][T16318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 949.623412][T16318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 949.636393][T16318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 949.648022][T16318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 949.761591][T16318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.821718][T16318] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.853829][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.861000][ T4494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.995665][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.000339][ T5823] Bluetooth: hci4: command tx timeout [ 950.002812][ T4494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.402670][T16318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.447188][T16318] veth0_vlan: entered promiscuous mode [ 950.461779][T16318] veth1_vlan: entered promiscuous mode [ 950.487389][T16318] veth0_macvtap: entered promiscuous mode [ 950.499939][T16318] veth1_macvtap: entered promiscuous mode [ 950.515721][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.526538][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.539734][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.560360][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.570573][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.581533][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.592134][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.603088][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.613610][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.624437][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.635363][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.646319][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.658205][T16318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.682726][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.754672][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.765207][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.779056][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.792196][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.802826][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.812825][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.823929][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.834063][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.442733][ T5861] usb 6-1: USB disconnect, device number 102 [ 951.449710][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.459664][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.470873][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.494613][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.507935][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.538973][T16318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 951.555455][T16318] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.558812][ C1] vxcan0: j1939_tp_txtimer: 0xffff88805a2aa000: tx aborted with unknown reason: -2 [ 951.564339][T16318] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.575854][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805a2a9c00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 951.582614][T16318] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.602258][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805a2aa000: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 951.625597][ C1] vkms_vblank_simulate: vblank timer overrun [ 951.640147][T16318] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.095432][T16422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2891'. [ 953.563323][T16430] xt_l2tp: missing protocol rule (udp|l2tpip) [ 955.704800][T16447] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=16447 comm=syz.5.2898 [ 992.881428][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.887775][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.311102][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.317460][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1066.639614][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 1097.830294][ T30] INFO: task kworker/u8:6:3498 blocked for more than 143 seconds. [ 1097.838146][ T30] Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 1097.845902][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1097.854633][ T30] task:kworker/u8:6 state:D stack:23392 pid:3498 tgid:3498 ppid:2 flags:0x00004000 [ 1097.864899][ T30] Workqueue: netns cleanup_net [ 1097.869682][ T30] Call Trace: [ 1097.873173][ T30] [ 1097.876115][ T30] __schedule+0xe58/0x5ad0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1097.880640][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1097.885880][ T30] ? __pfx___schedule+0x10/0x10 [ 1097.899067][ T30] ? schedule+0x298/0x350 [ 1097.903512][ T30] ? __pfx_lock_release+0x10/0x10 [ 1097.920481][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1097.925975][ T30] ? lock_acquire+0x2f/0xb0 [ 1097.940657][ T30] ? schedule+0x1fd/0x350 [ 1097.945029][ T30] schedule+0xe7/0x350 [ 1097.949110][ T30] schedule_preempt_disabled+0x13/0x30 [ 1097.964062][ T30] __mutex_lock+0x62b/0xa60 [ 1097.969311][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 1097.980902][ T30] ? rfkill_unregister+0xde/0x2c0 [ 1097.985977][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1097.991057][ T30] ? device_del+0x6b6/0x9f0 [ 1097.995588][ T30] ? __pfx_device_del+0x10/0x10 [ 1098.000550][ T30] ? rfkill_unregister+0xde/0x2c0 [ 1098.005593][ T30] rfkill_unregister+0xde/0x2c0 [ 1098.010491][ T30] wiphy_unregister+0x134/0xc20 [ 1098.015330][ T30] ? __pfx_wiphy_unregister+0x10/0x10 [ 1098.020739][ T30] ? rate_control_deinitialize+0x113/0x160 [ 1098.026569][ T30] ieee80211_unregister_hw+0x248/0x3a0 [ 1098.032057][ T30] hwsim_exit_net+0x3ad/0x7d0 [ 1098.036722][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1098.041993][ T30] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 1098.047389][ T30] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 1098.053170][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1098.058379][ T30] ops_exit_list+0xb0/0x180 [ 1098.062930][ T30] cleanup_net+0x5b7/0xb40 [ 1098.067384][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 1098.072954][ T30] ? lock_acquire+0x2f/0xb0 [ 1098.077468][ T30] ? process_one_work+0x921/0x1ba0 [ 1098.082645][ T30] process_one_work+0x9c5/0x1ba0 [ 1098.087595][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 1098.092557][ T30] ? __pfx_process_one_work+0x10/0x10 [ 1098.097932][ T30] ? rcu_is_watching+0x12/0xc0 [ 1098.102742][ T30] ? assign_work+0x1a0/0x250 [ 1098.107334][ T30] worker_thread+0x6c8/0xf00 [ 1098.111996][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1098.117111][ T30] kthread+0x2c1/0x3a0 [ 1098.121252][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1098.126457][ T30] ? __pfx_kthread+0x10/0x10 [ 1098.131105][ T30] ret_from_fork+0x45/0x80 [ 1098.135546][ T30] ? __pfx_kthread+0x10/0x10 [ 1098.140175][ T30] ret_from_fork_asm+0x1a/0x30 [ 1098.144972][ T30] [ 1098.148014][ T30] INFO: task syz-executor:5811 blocked for more than 143 seconds. [ 1098.155920][ T30] Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 1098.163614][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1098.172347][ T30] task:syz-executor state:D stack:22112 pid:5811 tgid:5811 ppid:1 flags:0x00004006 [ 1098.182635][ T30] Call Trace: [ 1098.185919][ T30] [ 1098.188861][ T30] __schedule+0xe58/0x5ad0 [ 1098.193333][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1098.198545][ T30] ? __pfx___schedule+0x10/0x10 [ 1098.203476][ T30] ? schedule+0x298/0x350 [ 1098.207843][ T30] ? __pfx_lock_release+0x10/0x10 [ 1098.212888][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1098.218353][ T30] ? lock_acquire+0x2f/0xb0 [ 1098.222907][ T30] ? schedule+0x1fd/0x350 [ 1098.227245][ T30] schedule+0xe7/0x350 [ 1098.231358][ T30] schedule_preempt_disabled+0x13/0x30 [ 1098.236857][ T30] __mutex_lock+0x62b/0xa60 [ 1098.241441][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 1098.246653][ T30] ? rfkill_unregister+0xde/0x2c0 [ 1098.251704][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1098.256742][ T30] ? device_del+0x6b6/0x9f0 [ 1098.261284][ T30] ? __pfx_device_del+0x10/0x10 [ 1098.266156][ T30] ? _raw_read_unlock+0x28/0x50 [ 1098.271072][ T30] ? rfkill_unregister+0xde/0x2c0 [ 1098.276106][ T30] rfkill_unregister+0xde/0x2c0 [ 1098.281070][ T30] hci_unregister_dev+0x323/0x620 [ 1098.286118][ T30] ? __pfx_vhci_release+0x10/0x10 [ 1098.291193][ T30] vhci_release+0x79/0xf0 [ 1098.295525][ T30] __fput+0x3f8/0xb60 [ 1098.299496][ T30] task_work_run+0x14e/0x250 [ 1098.304124][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1098.309254][ T30] do_exit+0xadd/0x2d70 [ 1098.313781][ T30] ? get_signal+0x8f7/0x26c0 [ 1098.318384][ T30] ? __pfx_do_exit+0x10/0x10 [ 1098.323050][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 1098.328082][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1098.333489][ T30] do_group_exit+0xd3/0x2a0 [ 1098.338001][ T30] get_signal+0x24ed/0x26c0 [ 1098.342542][ T30] ? __pfx_child_wait_callback+0x10/0x10 [ 1098.348192][ T30] ? __pfx_get_signal+0x10/0x10 [ 1098.353086][ T30] ? __do_sys_wait4+0xd2/0x170 [ 1098.357851][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 1098.363473][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1098.369649][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 1098.375308][ T30] do_syscall_64+0xda/0x250 [ 1098.379821][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.385760][ T30] RIP: 0033:0x7f5bc5176157 [ 1098.393570][ T30] RSP: 002b:00007ffd615b3440 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 1098.403325][ T30] RAX: fffffffffffffe00 RBX: 0000000000000759 RCX: 00007f5bc5176157 [ 1098.411395][ T30] RDX: 0000000040000000 RSI: 00007ffd615b349c RDI: 00000000ffffffff [ 1098.419382][ T30] RBP: 00007ffd615b349c R08: 0000000000000000 R09: 00007f5bc5ee2000 [ 1098.427678][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555891a25eb [ 1098.436229][ T30] R13: 00005555891a2590 R14: 00000000000e5168 R15: 00007ffd615b34f0 [ 1098.444405][ T30] [ 1098.447444][ T30] INFO: task kworker/0:4:5858 blocked for more than 143 seconds. [ 1098.455375][ T30] Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 1098.463591][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1098.473317][ T30] task:kworker/0:4 state:D stack:22448 pid:5858 tgid:5858 ppid:2 flags:0x00004000 [ 1098.483719][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 1098.490954][ T30] Call Trace: [ 1098.494232][ T30] [ 1098.497161][ T30] __schedule+0xe58/0x5ad0 [ 1098.501725][ T30] ? __pfx___schedule+0x10/0x10 [ 1098.506605][ T30] ? schedule+0x298/0x350 [ 1098.511042][ T30] ? __pfx_lock_release+0x10/0x10 [ 1098.516096][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1098.521907][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1098.527117][ T30] schedule+0xe7/0x350 [ 1098.531417][ T30] schedule_preempt_disabled+0x13/0x30 [ 1098.536889][ T30] __mutex_lock+0x62b/0xa60 [ 1098.541506][ T30] ? lock_acquire+0x2f/0xb0 [ 1098.546038][ T30] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 1098.553128][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1098.558179][ T30] ? rcu_is_watching+0x12/0xc0 [ 1098.563100][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 1098.568326][ T30] ? process_one_work+0x921/0x1ba0 [ 1098.573512][ T30] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 1098.579856][ T30] rfkill_global_led_trigger_worker+0x1b/0x160 [ 1098.586679][ T30] process_one_work+0x9c5/0x1ba0 [ 1098.591720][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1098.597359][ T30] ? __pfx_process_one_work+0x10/0x10 [ 1098.602872][ T30] ? rcu_is_watching+0x12/0xc0 [ 1098.607650][ T30] ? assign_work+0x1a0/0x250 [ 1098.612684][ T30] worker_thread+0x6c8/0xf00 [ 1098.617291][ T30] ? __kthread_parkme+0x148/0x220 [ 1098.622383][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1098.627501][ T30] kthread+0x2c1/0x3a0 [ 1098.631645][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1098.636847][ T30] ? __pfx_kthread+0x10/0x10 [ 1098.642028][ T30] ret_from_fork+0x45/0x80 [ 1098.646439][ T30] ? __pfx_kthread+0x10/0x10 [ 1098.651091][ T30] ret_from_fork_asm+0x1a/0x30 [ 1098.655873][ T30] [ 1098.658897][ T30] INFO: task syz.4.2866:16309 blocked for more than 144 seconds. [ 1098.666681][ T30] Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 1098.674602][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1098.683312][ T30] task:syz.4.2866 state:D stack:26208 pid:16309 tgid:16300 ppid:5811 flags:0x00004006 [ 1098.693578][ T30] Call Trace: [ 1098.696848][ T30] [ 1098.699760][ T30] __schedule+0xe58/0x5ad0 [ 1098.704775][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1098.710331][ T30] ? __pfx___schedule+0x10/0x10 [ 1098.715237][ T30] ? schedule+0x298/0x350 [ 1098.719575][ T30] ? __pfx_lock_release+0x10/0x10 [ 1098.724655][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1098.730680][ T30] ? lock_acquire+0x2f/0xb0 [ 1098.735189][ T30] ? schedule+0x1fd/0x350 [ 1098.739523][ T30] schedule+0xe7/0x350 [ 1098.743652][ T30] schedule_preempt_disabled+0x13/0x30 [ 1098.749123][ T30] __mutex_lock+0x62b/0xa60 [ 1098.753881][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 1098.759107][ T30] ? rfkill_unregister+0xde/0x2c0 [ 1098.764550][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1098.769570][ T30] ? device_del+0x6b6/0x9f0 [ 1098.774147][ T30] ? __pfx_device_del+0x10/0x10 [ 1098.779010][ T30] ? rfkill_unregister+0xde/0x2c0 [ 1098.784097][ T30] rfkill_unregister+0xde/0x2c0 [ 1098.788963][ T30] nfc_unregister_device+0x94/0x330 [ 1098.794614][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1098.800409][ T30] virtual_ncidev_close+0x4b/0xa0 [ 1098.805442][ T30] __fput+0x3f8/0xb60 [ 1098.809412][ T30] task_work_run+0x14e/0x250 [ 1098.814049][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1098.819161][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 1098.824889][ T30] do_exit+0xadd/0x2d70 [ 1098.829045][ T30] ? get_signal+0x8f7/0x26c0 [ 1098.833705][ T30] ? __pfx_do_exit+0x10/0x10 [ 1098.838310][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 1098.843394][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1098.848753][ T30] do_group_exit+0xd3/0x2a0 [ 1098.853797][ T30] get_signal+0x24ed/0x26c0 [ 1098.858298][ T30] ? __pfx_get_signal+0x10/0x10 [ 1098.863393][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1098.868609][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 1098.874209][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1098.880985][ T30] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 1098.887063][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 1098.892765][ T30] do_syscall_64+0xda/0x250 [ 1098.897274][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.903197][ T30] RIP: 0033:0x7f5bc517fed9 [ 1098.907629][ T30] RSP: 002b:00007f5bc5ec0058 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1098.916527][ T30] RAX: fffffffffffffffc RBX: 00007f5bc5346080 RCX: 00007f5bc517fed9 [ 1098.924522][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 1098.932562][ T30] RBP: 00007f5bc51f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 1098.941071][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1098.949057][ T30] R13: 0000000000000001 R14: 00007f5bc5346080 R15: 00007ffd615b30e8 [ 1098.957103][ T30] [ 1098.960206][ T30] INFO: task syz-executor:16318 blocked for more than 144 seconds. [ 1098.968101][ T30] Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 1098.976422][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1098.985143][ T30] task:syz-executor state:D stack:23744 pid:16318 tgid:16318 ppid:1 flags:0x00000004 [ 1098.995398][ T30] Call Trace: [ 1098.998663][ T30] [ 1099.002143][ T30] __schedule+0xe58/0x5ad0 [ 1099.006570][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1099.011842][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1099.017046][ T30] ? __pfx___schedule+0x10/0x10 [ 1099.021919][ T30] ? schedule+0x298/0x350 [ 1099.026248][ T30] ? __pfx_lock_release+0x10/0x10 [ 1099.031906][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1099.037373][ T30] ? lock_acquire+0x2f/0xb0 [ 1099.041914][ T30] ? schedule+0x1fd/0x350 [ 1099.046247][ T30] schedule+0xe7/0x350 [ 1099.050401][ T30] schedule_preempt_disabled+0x13/0x30 [ 1099.055864][ T30] __mutex_lock+0x62b/0xa60 [ 1099.060901][ T30] ? rfkill_fop_open+0x13b/0x750 [ 1099.065874][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1099.070980][ T30] ? lockdep_init_map_type+0x16d/0x7d0 [ 1099.076452][ T30] ? __pfx_rfkill_fop_open+0x10/0x10 [ 1099.081949][ T30] ? rfkill_fop_open+0x13b/0x750 [ 1099.086893][ T30] rfkill_fop_open+0x13b/0x750 [ 1099.092202][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 1099.097860][ T30] ? __pfx_rfkill_fop_open+0x10/0x10 [ 1099.103208][ T30] misc_open+0x35a/0x420 [ 1099.107462][ T30] ? __pfx_misc_open+0x10/0x10 [ 1099.112609][ T30] chrdev_open+0x237/0x6a0 [ 1099.117039][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1099.122506][ T30] do_dentry_open+0xf59/0x1ea0 [ 1099.127266][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1099.132264][ T30] ? inode_permission+0xdd/0x5f0 [ 1099.137212][ T30] vfs_open+0x82/0x3f0 [ 1099.141315][ T30] ? may_open+0x1f2/0x400 [ 1099.145650][ T30] path_openat+0x1e6a/0x2d60 [ 1099.150823][ T30] ? __pfx_path_openat+0x10/0x10 [ 1099.155763][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1099.161000][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 1099.166288][ T30] ? find_held_lock+0x2d/0x110 [ 1099.171099][ T30] do_filp_open+0x20c/0x470 [ 1099.175608][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1099.181168][ T30] ? find_held_lock+0x2d/0x110 [ 1099.185961][ T30] ? alloc_fd+0x41f/0x760 [ 1099.190571][ T30] do_sys_openat2+0x17a/0x1e0 [ 1099.195282][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1099.200571][ T30] ? kmem_cache_free+0x31d/0x4c0 [ 1099.205518][ T30] ? security_file_free+0xb9/0x180 [ 1099.211204][ T30] ? __fput+0x686/0xb60 [ 1099.215367][ T30] __x64_sys_openat+0x175/0x210 [ 1099.220273][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1099.225679][ T30] do_syscall_64+0xcd/0x250 [ 1099.230255][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.236164][ T30] RIP: 0033:0x7fb746b7e840 [ 1099.241125][ T30] RSP: 002b:00007ffc8ca0b120 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1099.249547][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb746b7e840 [ 1099.257559][ T30] RDX: 0000000000000002 RSI: 00007fb746bf4700 RDI: 00000000ffffff9c [ 1099.265566][ T30] RBP: 00007fb746bf4700 R08: 0000000000000000 R09: 0000000000000000 [ 1099.274075][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 1099.282099][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1099.290141][ T30] [ 1099.293203][ T30] INFO: task syz.6.2874:16340 blocked for more than 144 seconds. [ 1099.301472][ T30] Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 1099.309083][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1099.317795][ T30] task:syz.6.2874 state:D stack:25216 pid:16340 tgid:16338 ppid:15031 flags:0x00004006 [ 1099.328048][ T30] Call Trace: [ 1099.331873][ T30] [ 1099.334800][ T30] __schedule+0xe58/0x5ad0 [ 1099.339201][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1099.344460][ T30] ? __pfx___schedule+0x10/0x10 [ 1099.349316][ T30] ? schedule+0x298/0x350 [ 1099.353750][ T30] ? __pfx_lock_release+0x10/0x10 [ 1099.358784][ T30] ? lock_acquire+0x2f/0xb0 [ 1099.363815][ T30] ? schedule+0x1fd/0x350 [ 1099.368168][ T30] schedule+0xe7/0x350 [ 1099.372346][ T30] schedule_preempt_disabled+0x13/0x30 [ 1099.377822][ T30] __mutex_lock+0x62b/0xa60 [ 1099.382372][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1099.387583][ T30] ? nfc_dev_down+0x2d/0x2e0 [ 1099.392728][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1099.397764][ T30] ? find_held_lock+0x2d/0x110 [ 1099.402602][ T30] ? rfkill_set_block+0x198/0x560 [ 1099.407661][ T30] ? __pfx_lock_release+0x10/0x10 [ 1099.412940][ T30] ? nfc_dev_down+0x2d/0x2e0 [ 1099.417546][ T30] nfc_dev_down+0x2d/0x2e0 [ 1099.422467][ T30] nfc_rfkill_set_block+0x39/0xe0 [ 1099.427518][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1099.433344][ T30] rfkill_set_block+0x203/0x560 [ 1099.438217][ T30] rfkill_fop_write+0x2ce/0x570 [ 1099.443196][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1099.448645][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 1099.454593][ T30] ? security_file_permission+0x71/0x210 [ 1099.460383][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1099.465766][ T30] vfs_write+0x24c/0x1150 [ 1099.470155][ T30] ? __fget_files+0x1fc/0x3a0 [ 1099.474833][ T30] ? __pfx_lock_release+0x10/0x10 [ 1099.479843][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1099.485036][ T30] ? do_futex+0x123/0x350 [ 1099.489353][ T30] ? lock_acquire+0x2f/0xb0 [ 1099.493918][ T30] ? __fget_files+0x40/0x3a0 [ 1099.498526][ T30] ? __fget_files+0x206/0x3a0 [ 1099.503295][ T30] ksys_write+0x207/0x250 [ 1099.507642][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1099.513144][ T30] do_syscall_64+0xcd/0x250 [ 1099.517642][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.523752][ T30] RIP: 0033:0x7f1217f7fed9 [ 1099.528171][ T30] RSP: 002b:00007f1218cca058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1099.536639][ T30] RAX: ffffffffffffffda RBX: 00007f1218145fa0 RCX: 00007f1217f7fed9 [ 1099.544900][ T30] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000006 [ 1099.552929][ T30] RBP: 00007f1217ff3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 1099.560943][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1099.568909][ T30] R13: 0000000000000000 R14: 00007f1218145fa0 R15: 00007ffd7d4a6e38 [ 1099.577352][ T30] [ 1099.580431][ T30] INFO: task syz.1.2893:16426 blocked for more than 145 seconds. [ 1099.588137][ T30] Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 1099.595818][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1099.605027][ T30] task:syz.1.2893 state:D stack:25440 pid:16426 tgid:16425 ppid:16085 flags:0x00000004 [ 1099.615306][ T30] Call Trace: [ 1099.618576][ T30] [ 1099.621639][ T30] __schedule+0xe58/0x5ad0 [ 1099.626069][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1099.631999][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1099.637223][ T30] ? __pfx___schedule+0x10/0x10 [ 1099.642240][ T30] ? schedule+0x298/0x350 [ 1099.646582][ T30] ? __pfx_lock_release+0x10/0x10 [ 1099.651669][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1099.657133][ T30] ? lock_acquire+0x2f/0xb0 [ 1099.662147][ T30] ? schedule+0x1fd/0x350 [ 1099.666488][ T30] schedule+0xe7/0x350 [ 1099.670640][ T30] schedule_preempt_disabled+0x13/0x30 [ 1099.676107][ T30] __mutex_lock+0x62b/0xa60 [ 1099.680680][ T30] ? misc_open+0x63/0x420 [ 1099.685021][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1099.690596][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 1099.695906][ T30] ? chrdev_open+0x10e/0x6a0 [ 1099.700552][ T30] ? __pfx_lock_release+0x10/0x10 [ 1099.705579][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 1099.711264][ T30] ? __pfx_misc_open+0x10/0x10 [ 1099.716039][ T30] ? misc_open+0x63/0x420 [ 1099.720906][ T30] misc_open+0x63/0x420 [ 1099.725075][ T30] ? __pfx_misc_open+0x10/0x10 [ 1099.729843][ T30] chrdev_open+0x237/0x6a0 [ 1099.734311][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1099.739254][ T30] do_dentry_open+0xf59/0x1ea0 [ 1099.744259][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1099.749206][ T30] ? inode_permission+0xdd/0x5f0 [ 1099.755199][ T30] vfs_open+0x82/0x3f0 [ 1099.759584][ T30] ? may_open+0x1f2/0x400 [ 1099.764592][ T30] path_openat+0x1e6a/0x2d60 [ 1099.769249][ T30] ? __pfx_path_openat+0x10/0x10 [ 1099.774528][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1099.779746][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 1099.785848][ T30] ? find_held_lock+0x2d/0x110 [ 1099.790949][ T30] do_filp_open+0x20c/0x470 [ 1099.795478][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1099.800806][ T30] ? find_held_lock+0x2d/0x110 [ 1099.805597][ T30] ? alloc_fd+0x41f/0x760 [ 1099.810591][ T30] do_sys_openat2+0x17a/0x1e0 [ 1099.815310][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1099.820557][ T30] ? __pfx___might_resched+0x10/0x10 [ 1099.825854][ T30] __x64_sys_openat+0x175/0x210 [ 1099.830848][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1099.836237][ T30] do_syscall_64+0xcd/0x250 [ 1099.841263][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.847167][ T30] RIP: 0033:0x7f8f1cb7fed9 [ 1099.851788][ T30] RSP: 002b:00007f8f1d993058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1099.860255][ T30] RAX: ffffffffffffffda RBX: 00007f8f1cd45fa0 RCX: 00007f8f1cb7fed9 [ 1099.868225][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1099.876701][ T30] RBP: 00007f8f1cbf3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 1099.884737][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1099.892778][ T30] R13: 0000000000000000 R14: 00007f8f1cd45fa0 R15: 00007ffc5845c1c8 [ 1099.901294][ T30] [ 1099.904352][ T30] INFO: task syz-executor:16432 blocked for more than 145 seconds. [ 1099.912329][ T30] Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 1099.920002][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1099.928917][ T30] task:syz-executor state:D stack:28416 pid:16432 tgid:16432 ppid:1 flags:0x00000000 [ 1099.939490][ T30] Call Trace: [ 1099.942813][ T30] [ 1099.945742][ T30] __schedule+0xe58/0x5ad0 [ 1099.950214][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1099.955440][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1099.961151][ T30] ? __pfx___schedule+0x10/0x10 [ 1099.966081][ T30] ? schedule+0x298/0x350 [ 1099.970456][ T30] ? __pfx_lock_release+0x10/0x10 [ 1099.975491][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1099.981014][ T30] ? lock_acquire+0x2f/0xb0 [ 1099.985529][ T30] ? schedule+0x1fd/0x350 [ 1099.989869][ T30] schedule+0xe7/0x350 [ 1099.994335][ T30] schedule_preempt_disabled+0x13/0x30 [ 1099.999789][ T30] __mutex_lock+0x62b/0xa60 [ 1100.004325][ T30] ? misc_open+0x63/0x420 [ 1100.008664][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1100.013793][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 1100.019090][ T30] ? chrdev_open+0x10e/0x6a0 [ 1100.024070][ T30] ? __pfx_lock_release+0x10/0x10 [ 1100.029087][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 1100.034770][ T30] ? __pfx_misc_open+0x10/0x10 [ 1100.039541][ T30] ? misc_open+0x63/0x420 [ 1100.043932][ T30] misc_open+0x63/0x420 [ 1100.048095][ T30] ? __pfx_misc_open+0x10/0x10 [ 1100.053420][ T30] chrdev_open+0x237/0x6a0 [ 1100.057854][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1100.062853][ T30] do_dentry_open+0xf59/0x1ea0 [ 1100.067636][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1100.072874][ T30] ? inode_permission+0xdd/0x5f0 [ 1100.077826][ T30] vfs_open+0x82/0x3f0 [ 1100.082242][ T30] ? may_open+0x1f2/0x400 [ 1100.086605][ T30] path_openat+0x1e6a/0x2d60 [ 1100.091264][ T30] ? __pfx_path_openat+0x10/0x10 [ 1100.096201][ T30] ? handle_mm_fault+0x497/0xaa0 [ 1100.101216][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1100.106426][ T30] do_filp_open+0x20c/0x470 [ 1100.111475][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1100.116513][ T30] ? find_held_lock+0x2d/0x110 [ 1100.121355][ T30] ? alloc_fd+0x41f/0x760 [ 1100.125697][ T30] do_sys_openat2+0x17a/0x1e0 [ 1100.130435][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1100.135647][ T30] ? fd_install+0x242/0x750 [ 1100.140683][ T30] __x64_sys_openat+0x175/0x210 [ 1100.145552][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1100.151005][ T30] do_syscall_64+0xcd/0x250 [ 1100.155522][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.161461][ T30] RIP: 0033:0x7fd5fd57e7c1 [ 1100.165892][ T30] RSP: 002b:00007ffc1c500710 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1100.174856][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd5fd57e7c1 [ 1100.182974][ T30] RDX: 0000000000000002 RSI: 00007fd5fd5f4655 RDI: 00000000ffffff9c [ 1100.191079][ T30] RBP: 00007fd5fd5f4655 R08: 0000000000000000 R09: 00007fd5fe27d6c0 [ 1100.199063][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1100.207583][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1100.215649][ T30] [ 1100.218672][ T30] [ 1100.218672][ T30] Showing all locks held in the system: [ 1100.226460][ T30] 1 lock held by khungtaskd/30: [ 1100.232168][ T30] #0: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 1100.242119][ T30] 4 locks held by kworker/u8:6/3498: [ 1100.247398][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1100.257823][ T30] #1: ffffc9000c717d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1100.268069][ T30] #2: ffffffff8fec4950 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xbb/0xb40 [ 1100.277433][ T30] #3: ffffffff90369aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xde/0x2c0 [ 1100.287596][ T30] 2 locks held by getty/5571: [ 1100.292740][ T30] #0: ffff88803226a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1100.302722][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 1100.312910][ T30] 1 lock held by syz-executor/5811: [ 1100.318120][ T30] #0: ffffffff90369aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xde/0x2c0 [ 1100.328781][ T30] 3 locks held by kworker/0:4/5858: [ 1100.334033][ T30] #0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1100.344545][ T30] #1: ffffc90003f9fd80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1100.357987][ T30] #2: ffffffff90369aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 1100.369501][ T30] 6 locks held by kworker/u8:10/6451: [ 1100.374926][ T30] 2 locks held by syz.4.2866/16309: [ 1100.380685][ T30] #0: ffff88807d071100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 1100.391568][ T30] #1: ffffffff90369aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xde/0x2c0 [ 1100.401781][ T30] 2 locks held by syz-executor/16318: [ 1100.407175][ T30] #0: ffffffff8eea8668 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1100.416101][ T30] #1: ffffffff90369aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x13b/0x750 [ 1100.426139][ T30] 2 locks held by syz.6.2874/16340: [ 1100.431408][ T30] #0: ffffffff90369aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x168/0x570 [ 1100.442074][ T30] #1: ffff88807d071100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 1100.451104][ T30] 1 lock held by syz.1.2893/16426: [ 1100.456190][ T30] #0: ffffffff8eea8668 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1100.464701][ T30] 1 lock held by syz-executor/16432: [ 1100.470513][ T30] #0: ffffffff8eea8668 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1100.479086][ T30] 1 lock held by syz.5.2898/16443: [ 1100.484251][ T30] #0: ffffffff8eea8668 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1100.492749][ T30] 1 lock held by syz-executor/16449: [ 1100.498030][ T30] #0: ffffffff8eea8668 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1100.507038][ T30] 1 lock held by syz-executor/16451: [ 1100.512388][ T30] #0: ffffffff8eea8668 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1100.521110][ T30] 1 lock held by syz-executor/16453: [ 1100.526421][ T30] #0: ffffffff8eea8668 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1100.535256][ T30] 1 lock held by syz-executor/16455: [ 1100.540579][ T30] #0: ffffffff8eea8668 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1100.549049][ T30] 1 lock held by syz-executor/16457: [ 1100.554983][ T30] #0: ffffffff8eea8668 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1100.564021][ T30] 1 lock held by syz-executor/16459: [ 1100.569299][ T30] #0: ffffffff8eea8668 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1100.577807][ T30] 1 lock held by syz-executor/16461: [ 1100.583122][ T30] #0: ffffffff8eea8668 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1100.592186][ T30] 1 lock held by syz-executor/16463: [ 1100.597466][ T30] #0: ffffffff8eea8668 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1100.605945][ T30] 1 lock held by syz-executor/16465: [ 1100.611282][ T30] #0: ffffffff8eea8668 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1100.619771][ T30] 1 lock held by syz-executor/16468: [ 1100.625551][ T30] #0: ffffffff8eea8668 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1100.634206][ T30] 1 lock held by syz-executor/16470: [ 1100.639492][ T30] #0: ffffffff8eea8668 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1100.647986][ T30] 1 lock held by syz-executor/16472: [ 1100.653833][ T30] #0: ffffffff8eea8668 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1100.662347][ T30] 1 lock held by syz-executor/16474: [ 1100.667637][ T30] #0: ffffffff8eea8668 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1100.676175][ T30] [ 1100.678502][ T30] ============================================= [ 1100.678502][ T30] [ 1100.687358][ T30] NMI backtrace for cpu 1 [ 1100.691682][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 1100.702174][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1100.712212][ T30] Call Trace: [ 1100.715469][ T30] [ 1100.718382][ T30] dump_stack_lvl+0x116/0x1f0 [ 1100.723046][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1100.727963][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1100.733922][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1100.739883][ T30] watchdog+0xf14/0x1240 [ 1100.744132][ T30] ? __pfx_watchdog+0x10/0x10 [ 1100.748838][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1100.754032][ T30] ? __kthread_parkme+0x148/0x220 [ 1100.759220][ T30] ? __pfx_watchdog+0x10/0x10 [ 1100.763890][ T30] kthread+0x2c1/0x3a0 [ 1100.767944][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1100.773129][ T30] ? __pfx_kthread+0x10/0x10 [ 1100.777709][ T30] ret_from_fork+0x45/0x80 [ 1100.782119][ T30] ? __pfx_kthread+0x10/0x10 [ 1100.786717][ T30] ret_from_fork_asm+0x1a/0x30 [ 1100.791504][ T30] [ 1100.795349][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1100.800625][ C0] NMI backtrace for cpu 0 [ 1100.800636][ C0] CPU: 0 UID: 0 PID: 5171 Comm: syslogd Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 1100.800660][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1100.800672][ C0] RIP: 0010:const_folio_flags.constprop.0+0x56/0x150 [ 1100.800706][ C0] Code: 8b 6b 08 31 ff 83 e5 01 48 89 ee e8 e4 ac ca ff 48 85 ed 0f 85 d4 00 00 00 e8 66 aa ca ff 66 90 e8 5f aa ca ff e8 5a aa ca ff <48> 89 d8 5b 5d 41 5c c3 cc cc cc cc e8 49 aa ca ff 48 89 dd 31 ff [ 1100.800725][ C0] RSP: 0018:ffffc90003ebfbb0 EFLAGS: 00000293 [ 1100.800742][ C0] RAX: 0000000000000000 RBX: ffffea00006bd3c0 RCX: ffffffff81cf5bcc [ 1100.800756][ C0] RDX: ffff888079de2440 RSI: ffffffff81cf5be6 RDI: 0000000000000007 [ 1100.800769][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1100.800781][ C0] R10: 0000000000000000 R11: 0000000000000003 R12: dffffc0000000000 [ 1100.800795][ C0] R13: ffffea00006bd3c0 R14: ffffffff8b792be0 R15: ffffc90003ebfdb0 [ 1100.800809][ C0] FS: 00007f873c4cc500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1100.800829][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1100.800844][ C0] CR2: 00005638923720a8 CR3: 00000000354e4000 CR4: 00000000003526f0 [ 1100.800858][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1100.800870][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1100.800883][ C0] Call Trace: [ 1100.800889][ C0] [ 1100.800896][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1100.800919][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1100.800939][ C0] ? nmi_handle+0x1ac/0x5d0 [ 1100.800961][ C0] ? const_folio_flags.constprop.0+0x56/0x150 [ 1100.800990][ C0] ? default_do_nmi+0x6a/0x160 [ 1100.801010][ C0] ? exc_nmi+0x170/0x1e0 [ 1100.801028][ C0] ? end_repeat_nmi+0xf/0x53 [ 1100.801059][ C0] ? const_folio_flags.constprop.0+0x3c/0x150 [ 1100.801087][ C0] ? const_folio_flags.constprop.0+0x56/0x150 [ 1100.801115][ C0] ? const_folio_flags.constprop.0+0x56/0x150 [ 1100.801144][ C0] ? const_folio_flags.constprop.0+0x56/0x150 [ 1100.801174][ C0] ? const_folio_flags.constprop.0+0x56/0x150 [ 1100.801202][ C0] [ 1100.801209][ C0] [ 1100.801216][ C0] generic_perform_write+0x2e8/0x920 [ 1100.801249][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 1100.801279][ C0] ? inode_needs_update_time.part.0+0x191/0x270 [ 1100.801307][ C0] shmem_file_write_iter+0x10e/0x140 [ 1100.801331][ C0] vfs_write+0x5ae/0x1150 [ 1100.801351][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1100.801375][ C0] ? __pfx_vfs_write+0x10/0x10 [ 1100.801396][ C0] ? rcu_is_watching+0x12/0xc0 [ 1100.801428][ C0] ksys_write+0x12b/0x250 [ 1100.801447][ C0] ? __pfx_ksys_write+0x10/0x10 [ 1100.801475][ C0] do_syscall_64+0xcd/0x250 [ 1100.801501][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.801528][ C0] RIP: 0033:0x7f873c620bf2 [ 1100.801542][ C0] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83 [ 1100.801561][ C0] RSP: 002b:00007ffd2cc257a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1100.801579][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f873c620bf2 [ 1100.801592][ C0] RDX: 00000000000000a2 RSI: 000055ed94a8b600 RDI: 0000000000000003 [ 1100.801605][ C0] RBP: 000055ed94a8b600 R08: 0000000000000001 R09: 0000000000000000 [ 1100.801618][ C0] R10: 00007f873c7bf3a3 R11: 0000000000000246 R12: 00000000000000a2 [ 1100.801631][ C0] R13: 00007f873c4cc480 R14: 0000000000000004 R15: 000055ed94a8b410 [ 1100.801650][ C0] [ 1100.803034][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1101.159135][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 1101.169631][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1101.179677][ T30] Call Trace: [ 1101.182947][ T30] [ 1101.185868][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1101.190462][ T30] panic+0x71d/0x800 [ 1101.194357][ T30] ? __pfx_panic+0x10/0x10 [ 1101.198770][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1101.204138][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1101.210108][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1101.215473][ T30] ? watchdog+0xd7e/0x1240 [ 1101.219887][ T30] ? watchdog+0xd71/0x1240 [ 1101.224304][ T30] watchdog+0xd8f/0x1240 [ 1101.228548][ T30] ? __pfx_watchdog+0x10/0x10 [ 1101.233221][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1101.238418][ T30] ? __kthread_parkme+0x148/0x220 [ 1101.243445][ T30] ? __pfx_watchdog+0x10/0x10 [ 1101.248116][ T30] kthread+0x2c1/0x3a0 [ 1101.252179][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1101.257375][ T30] ? __pfx_kthread+0x10/0x10 [ 1101.261963][ T30] ret_from_fork+0x45/0x80 [ 1101.266551][ T30] ? __pfx_kthread+0x10/0x10 [ 1101.271137][ T30] ret_from_fork_asm+0x1a/0x30 [ 1101.275910][ T30] [ 1101.279127][ T30] Kernel Offset: disabled [ 1101.283434][ T30] Rebooting in 86400 seconds..