last executing test programs: 10m4.045732325s ago: executing program 1 (id=43): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x7d7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000300)='(', 0x1) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x86, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x9, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x3, 0x24, 0x2a, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x3, 0x5, 0x3c, 0x8f, 0x5, 0x6, 0x3, 0x5, 0x8, 0x3, 0x0, 0x80, 0x0, 0x5, 0xfffffff7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf6, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x32, 0xe, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x800009, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0xffff, 0x9, 0x4f31, 0x0, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x9, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0x0, 0x2f9, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x10000, 0x202, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0xfffffff9, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x2, 0x101, 0x10003, 0x6, 0x7fff, 0xffff, 0xa620, 0x8, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x80000009, 0x1, 0x2c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x20) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000b, 0x11, r3, 0x0) 10m3.018093458s ago: executing program 1 (id=49): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) 10m2.914224877s ago: executing program 1 (id=50): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="91e5b8fec8115a372cc540a830", 0xd}, {&(0x7f0000000340)='\f', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000640)="d5345033e80d7ff02c718ac9f3a41106ebcb60fb407954da9f6076fc50cacb0e4e26c2a67200186552", 0x29}, {&(0x7f0000000540)="14f4b7f928ddec8eef19a645cbd1ca1c44f58174a7ce1f84169305564a7a3edd839d5bf8c69d582bdb", 0x29}, {&(0x7f0000001740)="1f127ffe2d7ca16aed89ab90f1d41b27469e22823dddfb5b31", 0x19}, {&(0x7f00000017c0)="46db3e19ce1a26b491cd83b959551e3e325c41657b62ef800a36f3fa8db2fcb2a887", 0x22}], 0x4}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000001c40)="aa1b895acae9510937460c4cea988e493bf436e400be4374bbe63e4116f8d3f6f5ec", 0x22}, {&(0x7f0000001c80)="d5bef22d20e418c1f7f7cd0010709b9e47303ff0fe6c5b8994fbb6d6ff8790d8fb5db6", 0xfffffdac}], 0x2}}], 0x3, 0x8010) 10m0.372326951s ago: executing program 1 (id=55): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 10m0.099621413s ago: executing program 1 (id=57): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10410, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7) 9m59.822873213s ago: executing program 1 (id=59): socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0xe, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001e80)=0x14) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x20, 0x11, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) 9m59.449838413s ago: executing program 32 (id=59): socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0xe, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001e80)=0x14) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x20, 0x11, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) 7m35.128263327s ago: executing program 2 (id=445): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0xd191, 0x10100, 0x0, 0xa4}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x402}}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 7m33.319063868s ago: executing program 2 (id=451): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4104, 0x1008}], 0x1}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 7m31.388068758s ago: executing program 2 (id=457): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x3678, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0xa000}], 0x1) close(r0) 7m28.143802022s ago: executing program 2 (id=465): mkdir(&(0x7f00000003c0)='./file1\x00', 0x16) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87, r1}, './file0\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x20c00, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 7m26.793751631s ago: executing program 2 (id=469): ioperm(0x0, 0xf4, 0x10000007f) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x77359400}}, 0xfffffffffffffffc) r1 = timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{0x0, 0x989680}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010700000000000000000500000008003e01"], 0x1c}}, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000020c0)=""/4106, 0x8}], 0x8) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) connect$netlink(0xffffffffffffffff, &(0x7f0000000180)=@proc={0x10, 0x0, 0x8}, 0xc) 7m22.582700007s ago: executing program 2 (id=479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23b) 7m21.862042092s ago: executing program 33 (id=479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23b) 6m46.738771862s ago: executing program 3 (id=576): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x12) openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x400300, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) 6m44.26170939s ago: executing program 3 (id=587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc) close(r5) 6m42.654009907s ago: executing program 3 (id=592): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 6m40.941824245s ago: executing program 3 (id=594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x23) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 6m40.034766616s ago: executing program 3 (id=597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup2(r0, r2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$UFFDIO_CONTINUE(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000af1000/0x1000)=nil, 0x1000}, 0x1}) 6m39.574148262s ago: executing program 3 (id=599): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x1000, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000300)=""/104, 0x68) 6m38.826326802s ago: executing program 34 (id=599): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x1000, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000300)=""/104, 0x68) 2m39.384879936s ago: executing program 0 (id=1253): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x67d0, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x2d, 0x0) 2m37.036338618s ago: executing program 0 (id=1258): socket$inet(0x2, 0x4000000000000001, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m35.932503169s ago: executing program 7 (id=1259): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) open$dir(&(0x7f00000001c0)='./file1\x00', 0x8000, 0x100) unlink(&(0x7f0000000180)='./file1\x00') r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x10000, 0x0) renameat2(r3, &(0x7f00000004c0)='./bus\x00', r1, &(0x7f0000000500)='./file0\x00', 0x0) 2m35.01865692s ago: executing program 0 (id=1261): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000004100)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x40007fffffff) 2m34.44974095s ago: executing program 7 (id=1263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x2, 0x2, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000002c0)=0x1000020, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) readv(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/212, 0xd4}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000080)="0fc064aabaa100ecf36d2ef30f09ba2000ecbaf80c66b82f794d8366ef0f67430ab002ee0fc7af1da26665650f060f20c06635020000000f22c0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m33.63408653s ago: executing program 0 (id=1264): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r3], 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r8, r7, 0x2, 0x6, 0x4000, @void, @value}, 0x10) 2m31.998513148s ago: executing program 0 (id=1267): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m31.591671306s ago: executing program 7 (id=1269): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2e, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x1a103e43) syz_emit_ethernet(0x5e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}}, 0x0) socket(0x2b, 0x80801, 0x1) syz_open_dev$evdev(0x0, 0x2000000000000, 0x802) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000f8ff05"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0x6) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) 2m30.412169354s ago: executing program 7 (id=1271): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2d) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r4, r3, 0x0, 0x80000000) 2m29.951209705s ago: executing program 7 (id=1275): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0xf000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB='\b\x00', @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x10008001}, 0x40) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x404c880) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) socket$inet6(0xa, 0x1, 0x9) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000414010026bd7000ffdbdf250800010000000000080003"], 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) 2m27.597598993s ago: executing program 7 (id=1279): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0xfffffffe, 0x1, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x7ffc}, {@empty}, {@multicast1, 0xffd200}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101, 0x2}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) open(&(0x7f0000000000)='./file0\x00', 0x84ff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m26.727076761s ago: executing program 35 (id=1279): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0xfffffffe, 0x1, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x7ffc}, {@empty}, {@multicast1, 0xffd200}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101, 0x2}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) open(&(0x7f0000000000)='./file0\x00', 0x84ff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m26.710667307s ago: executing program 0 (id=1281): r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m17.600367705s ago: executing program 6 (id=1299): creat(0x0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xd2, @time}) creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'veth0_to_bridge\x00', &(0x7f0000000440)=@ethtool_gstrings={0x1b, 0x8}}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000002840)={0xff}, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x1b) socket$unix(0x1, 0x5, 0x0) 2m13.059172608s ago: executing program 6 (id=1306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000005c0)={0x1, 0x0, [{0x80000008, 0x0, 0x5, 0x0, 0x101}]}) 2m12.541308107s ago: executing program 6 (id=1309): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000000000900000000ff0300000000000008000100ac"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000100)={0x9, 0x100}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000001c0)="240066b8010000000f01c1660f3880310f01cfbaf80c66b8b81acb8f66efbafc0cecbaf80c66b8bcb4ea8866efbafc0cedba430066ed66b8579e00000f23d00f21f866352000000f0f23f8643e660f6db79a5f6766c7442400993f19006766c7442402000001006766c744240600000000670f011c24", 0x76}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m12.146835721s ago: executing program 6 (id=1310): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1ff}}, 0x50) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) 2m10.862490826s ago: executing program 6 (id=1313): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) read(0xffffffffffffffff, &(0x7f00000004c0)=""/152, 0x98) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x48, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x80000001}, {}, 0x0, 0x0, 0x0, 0x1f77104cdd89d482}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}}}, 0xe8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 2m8.554289437s ago: executing program 6 (id=1317): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setresuid(0x0, 0xffffffffffffffff, 0xee00) getresuid(&(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080)=0x0) setresuid(0x0, r4, 0xffffffffffffffff) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) 1m52.675744105s ago: executing program 36 (id=1317): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setresuid(0x0, 0xffffffffffffffff, 0xee00) getresuid(&(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080)=0x0) setresuid(0x0, r4, 0xffffffffffffffff) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) 1m0.148289099s ago: executing program 4 (id=1417): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@cswp={0x58, 0x114, 0x7, {{0x4, 0x8}, 0x0, 0x0, 0x5, 0x4, 0x6, 0x0, 0x0, 0x9}}], 0x58, 0x4000}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, 0x0) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) vmsplice(0xffffffffffffffff, &(0x7f0000e79000), 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x4) 58.664226239s ago: executing program 4 (id=1420): openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x240000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001a0001000000000000000000e00000020000000000000000000000002001000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000003c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000014000e00000000000000000000000000000000004c37e0faa1f16f4957d5903e3b5d2bf009c51bb4445a7f258ebc25ef80896aa8771bf43fc8037e9a7ca6b5fdc08287363991dc6a33377ce8830960bdb161f701980a116f877d3ea245a915166b86a538fe3a4a1254a52fe63090973a3d00e4e52f00edd541"], 0x104}}, 0x0) 57.600658687s ago: executing program 4 (id=1421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, {0xa, 0xfffc, 0x0, @mcast2}, r4, 0xffffffff}}, 0x48) 56.557639235s ago: executing program 4 (id=1422): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000880)=""/4096, 0x1000}, {0x0}], 0x2}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/43, 0x2b}, 0x4}], 0x2, 0x40000023, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000840)=0x4, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x8000, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xc6}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0) read$watch_queue(r2, &(0x7f0000000400)=""/122, 0x7a) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 55.918363832s ago: executing program 4 (id=1424): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = dup(r0) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 53.610637834s ago: executing program 4 (id=1427): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, 0x0, 0x20000000}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 37.620881686s ago: executing program 37 (id=1427): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, 0x0, 0x20000000}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 7.956368811s ago: executing program 5 (id=1488): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@gettaction={0x2c, 0x32, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffff}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) syz_usb_connect(0x0, 0x41, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x3, 0x0) 6.466488218s ago: executing program 5 (id=1491): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014976ab94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000200)=[{}, {}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x61, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x2}, {0x3, 0xf}, {0xfff2, 0x1}}}, 0x24}}, 0x20000811) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.089251611s ago: executing program 8 (id=1492): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) poll(&(0x7f0000000240)=[{r5}], 0x1, 0x10000) dup3(r2, r3, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000040)={0x90000004}) 4.898084495s ago: executing program 5 (id=1493): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711215"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) creat(0x0, 0x101) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x80000000}) 3.638914699s ago: executing program 5 (id=1494): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) r2 = socket(0x18, 0x0, 0x1) getsockopt$nfc_llcp(r2, 0x111, 0x0, 0x0, 0x90aa62107f0000) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000021c0)='fd/3\x00') r4 = semget$private(0x0, 0x4000000009, 0x0) semctl$GETALL(r4, 0x0, 0xd, &(0x7f00000003c0)=""/160) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000080)=[0x8, 0xd, 0xe, 0x2000, 0x2]) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x82100, 0x0) fcntl$setstatus(r5, 0x4, 0x40000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x250, 0xa, 0x0, 0x0, 0x3e, 0x180, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfcc2bb8dafb2b72d}) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271d, 0x0, &(0x7f0000000040)) close_range(r0, r3, 0x0) 3.467290408s ago: executing program 8 (id=1495): socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x3, 0x0, &(0x7f00000002c0)) clock_gettime(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) finit_module(r3, 0x0, 0x0) 3.047627683s ago: executing program 5 (id=1496): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x400caed0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0xb, 0x100008b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2.121081006s ago: executing program 8 (id=1497): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 1.401063269s ago: executing program 8 (id=1498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4000000000001ac, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, 0x0, &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000002c0)={r4, &(0x7f0000000200), 0x20000000}, 0x20) 352.278076ms ago: executing program 8 (id=1499): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x36}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) 286.874566ms ago: executing program 5 (id=1500): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) 0s ago: executing program 8 (id=1501): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) close_range(r0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, 0x0) fsync(r5) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000180)) kernel console output (not intermixed with test programs): 9 [ 318.166512][ T5891] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 318.175972][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.185892][ T8402] bridge_slave_0: entered allmulticast mode [ 318.208615][ T8402] bridge_slave_0: entered promiscuous mode [ 318.226439][ T8402] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.273234][ T5891] usb 7-1: config 0 descriptor?? [ 318.283675][ T8402] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.291070][ T8402] bridge_slave_1: entered allmulticast mode [ 318.300271][ T8402] bridge_slave_1: entered promiscuous mode [ 318.466310][ T63] hsr_slave_0: left promiscuous mode [ 318.473246][ T63] hsr_slave_1: left promiscuous mode [ 318.484752][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.499256][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.513741][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.541849][ T29] audit: type=1800 audit(1732218361.039:86): pid=8494 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.629" name="/" dev="9p" ino=2 res=0 errno=0 [ 318.555282][ T63] veth1_macvtap: left promiscuous mode [ 318.566427][ T63] veth0_macvtap: left promiscuous mode [ 318.572120][ T63] veth1_vlan: left promiscuous mode [ 318.577494][ T63] veth0_vlan: left promiscuous mode [ 318.579229][ T29] audit: type=1804 audit(1732218361.079:87): pid=8494 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.629" name="/newroot/99/file0" dev="9p" ino=2 res=1 errno=0 [ 318.604131][ T5924] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 318.700252][ T5891] microsoft 0003:045E:07DA.0003: item fetching failed at offset 30/34 [ 318.717141][ T5891] microsoft 0003:045E:07DA.0003: parse failed [ 318.733521][ T5891] microsoft 0003:045E:07DA.0003: probe with driver microsoft failed with error -22 [ 318.802338][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 318.822208][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.858499][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.890864][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 318.931596][ T5924] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 318.966884][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.995399][ T5924] usb 5-1: config 0 descriptor?? [ 319.006886][ T3071] usb 7-1: USB disconnect, device number 2 [ 319.282082][ T5854] Bluetooth: hci0: command tx timeout [ 319.381166][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 319.445465][ T5924] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 319.480412][ T5924] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0004/input/input11 [ 319.875862][ T29] audit: type=1107 audit(1732218362.309:88): pid=8524 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 320.676884][ T63] team0 (unregistering): Port device team_slave_1 removed [ 320.736467][ T5924] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 321.250588][ T63] team0 (unregistering): Port device team_slave_0 removed [ 321.553219][ T5924] usb 5-1: USB disconnect, device number 9 [ 321.785856][ T8539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.637'. [ 322.443928][ T8521] macvtap1: entered promiscuous mode [ 322.449431][ T8521] bridge0: entered promiscuous mode [ 322.461951][ T8521] macvtap1: entered allmulticast mode [ 322.584766][ T8542] ipvlan2: entered promiscuous mode [ 322.796080][ T8548] ptrace attach of "./syz-executor exec"[7916] was attempted by "./syz-executor exec"[8548] [ 322.911511][ T8548] netlink: 'syz.6.639': attribute type 3 has an invalid length. [ 322.920983][ T8548] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.639'. [ 323.243970][ T8402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.360555][ T8402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.559641][ T8402] team0: Port device team_slave_0 added [ 323.718721][ T8557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.110095][ T8559] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input12 [ 324.201210][ T8402] team0: Port device team_slave_1 added [ 325.378213][ T8402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.386902][ T8402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.501532][ T8402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.556344][ T8402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.583335][ T8402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.689247][ T8402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.955482][ T8402] hsr_slave_0: entered promiscuous mode [ 326.072188][ T8402] hsr_slave_1: entered promiscuous mode [ 326.078674][ T8402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.157170][ T8402] Cannot create hsr debugfs directory [ 328.177947][ T8612] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 328.943631][ T8402] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 329.126436][ T8402] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 329.315353][ T8402] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 329.463862][ T8402] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 329.767216][ T8402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.892663][ T8402] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.908321][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.915564][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.582531][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.589726][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.732442][ T8402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.758799][ T8402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.008416][ T8402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.228921][ T8693] tipc: Failed to remove unknown binding: 66,2,2/0:3508310928/3508310932 [ 335.362760][ T8402] veth0_vlan: entered promiscuous mode [ 335.417281][ T8402] veth1_vlan: entered promiscuous mode [ 335.706331][ T8722] tmpfs: Cannot change global quota limit on remount [ 335.826797][ T8402] veth0_macvtap: entered promiscuous mode [ 335.837663][ T8402] veth1_macvtap: entered promiscuous mode [ 335.992403][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.039939][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.085390][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.096163][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.107401][ T8402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.150652][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.166478][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.153054][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.383223][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.476845][ T8402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.594514][ T8402] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.612860][ T8402] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.637660][ T8402] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.647257][ T8402] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.706913][ T8748] netlink: 'syz.4.679': attribute type 1 has an invalid length. [ 337.717471][ T8748] netlink: 'syz.4.679': attribute type 4 has an invalid length. [ 337.726411][ T8748] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.679'. [ 338.705401][ T6157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.743978][ T6157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.840251][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.871503][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.880104][ T8759] mac80211_hwsim hwsim16 syzkaller0: entered allmulticast mode [ 339.116122][ T8769] geneve0: entered allmulticast mode [ 339.546891][ T5850] Bluetooth: hci1: unexpected event for opcode 0x003d [ 344.206563][ T8832] random: crng reseeded on system resumption [ 345.431263][ C1] dccp_v6_rcv: dropped packet with invalid checksum [ 345.439354][ C1] dccp_v6_rcv: dropped packet with invalid checksum [ 345.446093][ C1] dccp_v6_rcv: dropped packet with invalid checksum [ 347.170917][ T8861] binder: BINDER_SET_CONTEXT_MGR already set [ 347.243070][ T8861] binder: 8858:8861 ioctl 4018620d 20000000 returned -16 [ 351.070710][ T8897] lo speed is unknown, defaulting to 1000 [ 351.627645][ T8922] Bluetooth: MGMT ver 1.23 [ 354.045755][ T8960] nbd: must specify a device to reconfigure [ 362.869946][ T9052] netlink: 11 bytes leftover after parsing attributes in process `syz.0.744'. [ 363.016771][ T9052] netlink: 7 bytes leftover after parsing attributes in process `syz.0.744'. [ 366.982328][ T5890] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 367.143406][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.211690][ T5890] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 367.220800][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.298498][ T5890] usb 5-1: config 0 descriptor?? [ 367.758306][ T9121] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 367.784995][ T5890] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 367.810984][ T9121] Cannot find add_set index 0 as target [ 367.827548][ T5890] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input13 [ 367.842078][ T9124] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 368.031185][ T5890] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 368.115018][ T5890] usb 5-1: USB disconnect, device number 10 [ 368.153792][ T9130] tipc: Started in network mode [ 368.187297][ T9130] tipc: Node identity f7, cluster identity 4711 [ 368.211918][ T9130] tipc: Node number set to 247 [ 368.390477][ T5850] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1 [ 370.489381][ T9160] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 374.302936][ T9203] netlink: 60 bytes leftover after parsing attributes in process `syz.4.776'. [ 374.319530][ T9203] unsupported nlmsg_type 40 [ 374.650091][ T9201] dummy0: entered promiscuous mode [ 374.697196][ T9201] dummy0: left promiscuous mode [ 378.330009][ T9263] xt_l2tp: wrong L2TP version: 0 [ 379.352108][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.358473][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.488442][ T9268] netlink: 'syz.4.792': attribute type 4 has an invalid length. [ 379.565016][ T8] lo speed is unknown, defaulting to 1000 [ 379.565072][ T9272] netlink: 'syz.4.792': attribute type 4 has an invalid length. [ 379.571121][ T3071] lo speed is unknown, defaulting to 1000 [ 379.702124][ T9273] fuse: Invalid rootmode [ 379.711873][ T970] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 381.385339][ T970] usb 1-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 381.395191][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.406594][ T970] usb 1-1: Product: syz [ 381.410927][ T970] usb 1-1: Manufacturer: syz [ 381.417334][ T970] usb 1-1: SerialNumber: syz [ 381.462492][ T970] usb 1-1: config 0 descriptor?? [ 381.482394][ T970] rndis_host 1-1:0.0: More than one union descriptor, skipping ... [ 381.532331][ T970] usb 1-1: bad CDC descriptors [ 381.537578][ T970] cdc_acm 1-1:0.0: More than one union descriptor, skipping ... [ 381.674287][ T29] audit: type=1326 audit(1732218424.179:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9305 comm="syz.7.802" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4dedd7e819 code=0x0 [ 381.807328][ T970] usb 1-1: USB disconnect, device number 10 [ 383.012120][ T5850] Bluetooth: hci3: Malformed Event: 0x02 [ 383.465848][ T9335] netlink: 'syz.0.809': attribute type 4 has an invalid length. [ 383.581533][ T9345] vxcan2: entered allmulticast mode [ 385.943139][ T9367] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 385.991803][ T9367] kvm: pic: single mode not supported [ 385.998797][ T9367] kvm: pic: non byte read [ 386.019638][ T9367] kvm: pic: level sensitive irq not supported [ 386.020488][ T9367] kvm: pic: non byte read [ 386.242368][ T5890] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 386.369689][ T9383] netlink: 72 bytes leftover after parsing attributes in process `syz.6.821'. [ 386.437049][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.529644][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 386.631650][ T5890] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 387.582406][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.606860][ T5890] usb 5-1: config 0 descriptor?? [ 388.326961][ T5890] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 388.586631][ T5890] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 388.638922][ T5890] usb 5-1: USB disconnect, device number 11 [ 391.208792][ T5854] Bluetooth: hci3: command 0x040f tx timeout [ 393.797327][ T9468] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.806817][ T9468] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.815923][ T9468] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.824833][ T9468] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.921189][ T9468] vxlan0: entered allmulticast mode [ 393.929926][ T9468] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 396.666395][ T9516] lo speed is unknown, defaulting to 1000 [ 398.655821][ T9537] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 398.662376][ T9537] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 399.443054][ T9537] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 399.449191][ T9537] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 399.488757][ T9537] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 399.494807][ T9537] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 399.634784][ T9537] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 399.687280][ T9537] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 400.248622][ T9537] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 400.254981][ T9537] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 407.814475][ T9631] lo speed is unknown, defaulting to 1000 [ 410.013555][ T29] audit: type=1326 audit(1732218452.519:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9662 comm="syz.4.875" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf6117e819 code=0x0 [ 411.358044][ T9685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.880'. [ 411.731733][ T3071] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 411.922034][ T3071] usb 1-1: Using ep0 maxpacket: 16 [ 411.973814][ T3071] usb 1-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 412.123110][ T3071] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 412.341649][ T3071] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 413.092059][ T3071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.581374][ T3071] usb 1-1: config 0 descriptor?? [ 413.878887][ T3071] usb 1-1: string descriptor 0 read error: -71 [ 413.911969][ T3071] usb 1-1: USB disconnect, device number 11 [ 415.031729][ T5924] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 415.311520][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.368856][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.889'. [ 415.509172][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.648581][ T5924] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 415.809820][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.987813][ T9733] CUSE: DEVNAME unspecified [ 416.042305][ T5924] usb 5-1: config 0 descriptor?? [ 417.362458][ T5924] usbhid 5-1:0.0: can't add hid device: -71 [ 417.397533][ T5924] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 417.441680][ T5924] usb 5-1: USB disconnect, device number 12 [ 417.584383][ T9746] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 417.591532][ T9746] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 417.632031][ T9753] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 417.778252][ T9756] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 417.785834][ T9756] PKCS7: Only support pkcs7_signedData type [ 418.134114][ T9757] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 418.171653][ T9746] vhci_hcd vhci_hcd.0: Device attached [ 418.185543][ T9758] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 418.228310][ T9746] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 418.279279][ T9753] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 418.305049][ T9746] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 418.484807][ T25] vhci_hcd: vhci_device speed not set [ 418.526671][ T9753] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 418.566604][ T25] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 419.497966][ T9746] vhci_hcd vhci_hcd.0: port 0 already used [ 420.428621][ T9776] xt_CT: No such helper "snmp_trap" [ 420.490908][ T9780] tipc: Started in network mode [ 420.496918][ T9780] tipc: Node identity ac14140f, cluster identity 4711 [ 420.563378][ T9780] tipc: New replicast peer: 255.255.255.255 [ 420.571719][ T9749] vhci_hcd: connection reset by peer [ 420.585444][ T9780] tipc: Enabled bearer , priority 10 [ 420.591330][ T63] vhci_hcd: stop threads [ 420.598084][ T63] vhci_hcd: release socket [ 420.686301][ T63] vhci_hcd: disconnect device [ 421.651653][ T5924] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 421.704685][ T8] tipc: Node number set to 2886997007 [ 421.712575][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 421.850271][ T5924] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 421.901525][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.937370][ T5924] usb 5-1: config 0 descriptor?? [ 422.122681][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 422.366358][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 423.105679][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 423.112423][ T63] bridge0: port 3(vlan2) entered disabled state [ 423.116620][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.162812][ T9788] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 423.198341][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 423.260711][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 423.302488][ T5924] usb 5-1: Cannot read MAC address [ 423.317073][ T5924] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 423.381565][ T5924] usb 5-1: USB disconnect, device number 13 [ 423.721821][ T9] usb 1-1: USB disconnect, device number 12 [ 423.831818][ T25] vhci_hcd: vhci_device speed not set [ 424.459590][ T5893] IPVS: starting estimator thread 0... [ 424.473549][ T9853] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 424.592044][ T9855] IPVS: using max 19 ests per chain, 45600 per kthread [ 426.106625][ T9874] lo speed is unknown, defaulting to 1000 [ 430.101571][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 430.273073][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.304137][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 430.348831][ T8] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 430.401822][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.422615][ T8] usb 1-1: config 0 descriptor?? [ 430.751337][ T8] usb 1-1: USB disconnect, device number 13 [ 431.762516][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 432.032154][ T29] audit: type=1326 audit(1732218474.529:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9933 comm="syz.4.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6117e819 code=0x7ffc0000 [ 432.141890][ T29] audit: type=1326 audit(1732218474.529:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9933 comm="syz.4.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6117e819 code=0x7ffc0000 [ 432.181549][ T29] audit: type=1326 audit(1732218474.529:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9933 comm="syz.4.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf6117e819 code=0x7ffc0000 [ 432.277801][ T29] audit: type=1326 audit(1732218474.529:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9933 comm="syz.4.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6117e819 code=0x7ffc0000 [ 432.310835][ T9937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.369557][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.942'. [ 432.379587][ T9937] batadv_slave_0: entered promiscuous mode [ 432.379643][ T29] audit: type=1326 audit(1732218474.529:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9933 comm="syz.4.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6117e819 code=0x7ffc0000 [ 432.432702][ T29] audit: type=1326 audit(1732218474.529:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9933 comm="syz.4.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcf6117e819 code=0x7ffc0000 [ 432.505094][ T9941] vlan2: entered promiscuous mode [ 432.510214][ T9941] vlan2: entered allmulticast mode [ 432.525425][ T29] audit: type=1326 audit(1732218474.539:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9933 comm="syz.4.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6117e819 code=0x7ffc0000 [ 432.584662][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.7.944'. [ 432.637125][ T29] audit: type=1326 audit(1732218474.539:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9933 comm="syz.4.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf6117e819 code=0x7ffc0000 [ 432.720360][ T29] audit: type=1326 audit(1732218474.539:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9933 comm="syz.4.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6117e819 code=0x7ffc0000 [ 432.728258][ T9946] bridge0: entered promiscuous mode [ 432.743377][ T29] audit: type=1326 audit(1732218474.539:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9933 comm="syz.4.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6117e819 code=0x7ffc0000 [ 432.968022][ T9946] macvtap1: entered promiscuous mode [ 433.244118][ T9946] macvtap1: entered allmulticast mode [ 433.461235][ T9946] bridge0: entered allmulticast mode [ 433.573953][ T9961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.948'. [ 433.639549][ T9961] bridge_slave_1: left promiscuous mode [ 433.663275][ T9961] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.692607][ T9961] bridge1: port 1(bridge_slave_1) entered blocking state [ 433.700270][ T9961] bridge1: port 1(bridge_slave_1) entered disabled state [ 433.720371][ T9961] bridge_slave_1: entered promiscuous mode [ 439.519067][T10010] ISOFS: Unable to identify CD-ROM format. [ 440.075265][T10019] netlink: 256 bytes leftover after parsing attributes in process `syz.7.964'. [ 440.231727][ T970] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 440.297308][T10019] netlink: 'syz.7.964': attribute type 3 has an invalid length. [ 440.305949][T10019] netlink: 48 bytes leftover after parsing attributes in process `syz.7.964'. [ 440.317225][T10019] netlink: 'syz.7.964': attribute type 3 has an invalid length. [ 440.328301][T10019] netlink: 48 bytes leftover after parsing attributes in process `syz.7.964'. [ 440.357390][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.364229][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.542008][ T970] usb 5-1: Using ep0 maxpacket: 8 [ 440.629803][ T970] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 440.671598][ T970] usb 5-1: config 0 has no interface number 0 [ 440.681610][ T970] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 440.702263][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.745220][ T970] usb 5-1: config 0 descriptor?? [ 440.862666][ T970] viperboard 5-1:0.143: version 0.00 found at bus 005 address 014 [ 441.670467][ T970] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 441.679344][ T970] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 441.862107][ T25] usb 5-1: USB disconnect, device number 14 [ 446.629321][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.7.978'. [ 449.340092][T10101] netlink: 'syz.0.987': attribute type 4 has an invalid length. [ 450.151513][T10111] 9pnet: p9_errstr2errno: server reported unknown error [ 450.726844][T10118] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 450.735493][T10118] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 450.744005][T10118] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 452.158760][T10133] block nbd0: not configured, cannot reconfigure [ 457.938644][T10177] capability: warning: `syz.5.1010' uses deprecated v2 capabilities in a way that may be insecure [ 458.191623][ T5893] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 458.253385][T10198] fuse: Bad value for 'user_id' [ 458.258599][T10198] fuse: Bad value for 'user_id' [ 458.391896][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 458.417108][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 458.474385][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 458.516413][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 458.745503][ T5893] usb 1-1: New USB device found, idVendor=19d2, idProduct=ff51, bcdDevice=a9.fa [ 458.780847][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.827684][ T5893] usb 1-1: Product: syz [ 459.011610][ T5893] usb 1-1: Manufacturer: syz [ 459.016299][ T5893] usb 1-1: SerialNumber: syz [ 459.074193][ T5893] usb 1-1: config 0 descriptor?? [ 459.115549][ T5893] option 1-1:0.0: GSM modem (1-port) converter detected [ 459.871552][ T8] usb 1-1: USB disconnect, device number 14 [ 459.922501][ T8] option 1-1:0.0: device disconnected [ 461.429721][T10227] vlan2: entered promiscuous mode [ 461.436556][T10227] team0: entered promiscuous mode [ 461.469313][T10227] team_slave_0: entered promiscuous mode [ 461.488781][T10227] team_slave_1: entered promiscuous mode [ 461.511333][T10227] team0: Device vlan2 is already an upper device of the team interface [ 461.994040][T10227] team0: left promiscuous mode [ 462.144694][T10227] team_slave_0: left promiscuous mode [ 462.172330][T10227] team_slave_1: left promiscuous mode [ 463.477445][T10264] syzkaller0: entered promiscuous mode [ 463.506137][T10264] syzkaller0: entered allmulticast mode [ 463.580551][T10262] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 469.441599][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 469.441623][ T29] audit: type=1326 audit(1732218511.939:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10305 comm="syz.4.1048" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf6117e819 code=0x0 [ 469.521057][T10310] netlink: 'syz.5.1047': attribute type 1 has an invalid length. [ 469.572327][T10310] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 469.582726][T10310] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 470.617897][T10310] bond1: (slave xfrm1): making interface the new active one [ 470.662249][T10310] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 470.676283][T10325] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 472.106545][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 473.347757][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 473.564850][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 473.664338][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 473.793381][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 473.851104][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.885448][ T9] usb 1-1: Product: syz [ 473.890092][ T9] usb 1-1: Manufacturer: syz [ 473.951523][ T9] usb 1-1: SerialNumber: syz [ 473.969120][ T9] usb 1-1: config 0 descriptor?? [ 474.002683][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 474.304887][T10357] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 475.161705][ T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 475.866143][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 475.891583][ T9] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 475.912413][ T9] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 475.930166][ T9] em28xx 1-1:0.0: No AC97 audio processor [ 475.949279][ T9] usb 1-1: USB disconnect, device number 15 [ 475.958807][ T9] em28xx 1-1:0.0: Disconnecting em28xx [ 475.973139][ T9] em28xx 1-1:0.0: Freeing device [ 478.604974][T10384] hsr0: entered promiscuous mode [ 478.713877][T10384] hsr0: left promiscuous mode [ 483.617155][T10443] Attempt to restore checkpoint with obsolete wellknown handles [ 483.874066][T10449] pim6reg1: entered promiscuous mode [ 483.907858][T10449] pim6reg1: entered allmulticast mode [ 486.081670][ T5893] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 486.241523][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 486.268255][ T5893] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 486.318497][ T5893] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 486.348694][ T5893] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 486.532399][ T5893] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.546555][ T5893] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 486.556070][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.769256][T10479] hub 9-0:1.0: USB hub found [ 486.778639][T10479] hub 9-0:1.0: 1 port detected [ 487.444860][ T5893] usb 5-1: GET_CAPABILITIES returned 0 [ 487.461994][ T5893] usbtmc 5-1:16.0: can't read capabilities [ 489.662204][ T8] usb 5-1: USB disconnect, device number 15 [ 491.694264][ T5893] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 493.101559][ T5893] usb 7-1: Using ep0 maxpacket: 16 [ 493.118551][ T5893] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 493.132198][ T5893] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 493.142181][ T5893] usb 7-1: config 0 interface 0 has no altsetting 0 [ 493.153165][ T5893] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 493.169543][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.203044][ T5893] usb 7-1: Product: syz [ 493.207296][ T5893] usb 7-1: Manufacturer: syz [ 493.308497][ T5893] usb 7-1: SerialNumber: syz [ 493.392643][ T5893] usb 7-1: config 0 descriptor?? [ 494.180813][T10512] Bluetooth: MGMT ver 1.23 [ 494.728519][ T9] usb 7-1: USB disconnect, device number 3 [ 494.751871][T10546] proc: Bad value for 'gid' [ 496.461960][T10566] zonefs (nullb0) ERROR: Not a zoned block device [ 497.598216][T10569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1119'. [ 498.532454][T10569] hsr_slave_1 (unregistering): left promiscuous mode [ 501.099057][T10617] 9pnet_fd: p9_fd_create_unix (10617): problem connecting socket: ./file0: -111 [ 501.804195][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.810655][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.322068][ T29] audit: type=1800 audit(1732218545.809:132): pid=10639 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1136" name="bus" dev="overlay" ino=1314 res=0 errno=0 [ 503.339837][T10640] tipc: Started in network mode [ 503.354530][T10640] tipc: Node identity ac1414aa, cluster identity 4711 [ 503.371664][T10640] tipc: New replicast peer: 100.1.1.1 [ 503.391635][T10640] tipc: Enabled bearer , priority 10 [ 503.686929][T10647] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 504.558539][ T9793] tipc: Node number set to 2886997162 [ 505.038753][T10654] 9pnet: p9_errstr2errno: server reported unknown error [ 508.806233][ T9793] IPVS: starting estimator thread 0... [ 508.822382][T10671] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.913827][T10684] IPVS: using max 19 ests per chain, 45600 per kthread [ 510.296059][ T8] hid-generic 0001:30000:0001.0007: unknown main item tag 0xd [ 510.375847][T10671] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.443015][ T8] hid-generic 0001:30000:0001.0007: unexpected long global item [ 511.413524][ T8] hid-generic 0001:30000:0001.0007: probe with driver hid-generic failed with error -22 [ 511.590883][T10671] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.844641][T10671] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.068366][T10734] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1160'. [ 514.105734][ T8] IPVS: starting estimator thread 0... [ 514.365593][T10671] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.412787][T10740] IPVS: using max 29 ests per chain, 69600 per kthread [ 514.415280][T10671] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.533275][T10671] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.589651][T10671] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.507079][T10745] delete_channel: no stack [ 518.843853][T10777] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1171'. [ 521.823833][T10818] netlink: 'syz.7.1181': attribute type 10 has an invalid length. [ 521.837860][ T29] audit: type=1326 audit(1732218564.339:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10816 comm="syz.5.1180" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0576f7e819 code=0x0 [ 521.860262][T10818] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.870183][T10818] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.881474][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1181'. [ 521.957091][T10821] bridge_slave_1: left allmulticast mode [ 521.980174][T10821] bridge_slave_1: left promiscuous mode [ 521.987633][T10818] Cannot find set identified by id 0 to match [ 522.008979][T10821] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.040263][T10821] bridge_slave_0: left allmulticast mode [ 522.049506][T10821] bridge_slave_0: left promiscuous mode [ 522.061671][T10821] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.182061][T10821] bridge0 (unregistering): left allmulticast mode [ 522.497591][T10828] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 523.870015][T10835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1183'. [ 526.919549][T10865] random: crng reseeded on system resumption [ 527.710405][ T29] audit: type=1400 audit(1732218570.209:134): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10863 comm="syz.4.1194" name="newroot" dev="tmpfs" ino=2 [ 528.042325][T10873] audit: audit_backlog=65 > audit_backlog_limit=64 [ 528.052060][T10874] audit: audit_backlog=65 > audit_backlog_limit=64 [ 528.081743][ T7916] audit: audit_backlog=66 > audit_backlog_limit=64 [ 528.084915][T10874] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 528.088919][T10873] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 528.097252][ T29] audit: type=1400 audit(1732218570.209:135): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10863 comm="syz.4.1194" name="/" dev="devtmpfs" ino=1 [ 528.109184][ T7916] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 528.135897][T10874] audit: backlog limit exceeded [ 528.135919][T10873] audit: backlog limit exceeded [ 532.720063][ T29] kauditd_printk_skb: 9429 callbacks suppressed [ 532.720084][ T29] audit: type=1400 audit(1732218575.209:3737): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10909 comm="syz-executor" name="257" dev="tmpfs" ino=1380 [ 532.763092][T10911] audit: audit_backlog=65 > audit_backlog_limit=64 [ 532.772131][T10913] audit: audit_backlog=65 > audit_backlog_limit=64 [ 532.778705][T10913] audit: audit_lost=1954 audit_rate_limit=0 audit_backlog_limit=64 [ 532.791925][T10911] audit: audit_lost=1955 audit_rate_limit=0 audit_backlog_limit=64 [ 532.800026][T10913] audit: backlog limit exceeded [ 532.810681][ T5191] audit: audit_backlog=65 > audit_backlog_limit=64 [ 532.818771][ T5191] audit: audit_lost=1956 audit_rate_limit=0 audit_backlog_limit=64 [ 532.837949][T10911] audit: backlog limit exceeded [ 532.844798][ T29] audit: type=1400 audit(1732218575.209:3738): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=10909 comm="syz-executor" name="257" dev="tmpfs" ino=1380 [ 537.077007][T10945] kvm: kvm [10942]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x34500000800 [ 537.096119][T10945] kvm: kvm [10942]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x34600000000 [ 537.147661][T10945] kvm: kvm [10942]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x47e00000000 [ 537.186210][T10945] kvm: kvm [10942]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x64e00000000 [ 538.363643][ T29] kauditd_printk_skb: 16068 callbacks suppressed [ 538.363668][ T29] audit: type=1400 audit(1732218580.119:10982): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=10966 comm="syz.5.1219" opid=10966 ocomm="syz.5.1219" [ 538.411972][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 538.414887][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 538.418651][ C1] audit: audit_lost=4912 audit_rate_limit=0 audit_backlog_limit=64 [ 538.425153][ C0] audit: audit_lost=4913 audit_rate_limit=0 audit_backlog_limit=64 [ 538.433198][ C1] audit: backlog limit exceeded [ 538.440972][ C0] audit: backlog limit exceeded [ 538.441838][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 538.446416][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 538.450772][ C0] audit: audit_lost=4914 audit_rate_limit=0 audit_backlog_limit=64 [ 538.489707][T10973] nbd: illegal input index 15335424 [ 540.505760][T10978] kvm: kvm [10977]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6d00000800 [ 540.544480][T10978] kvm: kvm [10977]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x14500000800 [ 540.581577][T10978] kvm: kvm [10977]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x14600000000 [ 540.643569][T10978] kvm: kvm [10977]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1cd00000800 [ 540.683369][T10992] ipvlan2: entered promiscuous mode [ 540.700240][T10992] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 540.743691][T10992] team0: Device ipvlan2 is already an upper device of the team interface [ 540.950743][T10996] vlan2: entered promiscuous mode [ 540.972080][T10996] team_slave_0: entered promiscuous mode [ 540.978483][T10996] team_slave_1: entered promiscuous mode [ 541.053031][T10996] team0: entered promiscuous mode [ 541.082211][T10996] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 541.154231][T10999] debugfs: Directory 'netdev:nicvf0' with parent 'phy3' already present! [ 542.477348][T11007] vlan3: entered promiscuous mode [ 542.582899][T11007] dummy0: entered promiscuous mode [ 542.924488][T11007] vlan3: entered allmulticast mode [ 542.944753][T11007] dummy0: entered allmulticast mode [ 542.999083][T11007] dummy0: left allmulticast mode [ 543.057907][T11007] dummy0: left promiscuous mode [ 543.210445][T11010] lo speed is unknown, defaulting to 1000 [ 543.373325][ T29] kauditd_printk_skb: 14842 callbacks suppressed [ 543.373346][ T29] audit: type=1400 audit(1732218585.879:17772): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5209 comm="udevd" name="/" dev="sda1" ino=2 [ 543.411136][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 543.417746][ T8402] audit: audit_backlog=65 > audit_backlog_limit=64 [ 543.417771][ T8402] audit: audit_lost=7628 audit_rate_limit=0 audit_backlog_limit=64 [ 543.417788][ T8402] audit: backlog limit exceeded [ 543.417805][ T8402] audit: audit_backlog=65 > audit_backlog_limit=64 [ 543.417820][ T8402] audit: audit_lost=7629 audit_rate_limit=0 audit_backlog_limit=64 [ 543.438266][ T5209] audit: audit_lost=7630 audit_rate_limit=0 audit_backlog_limit=64 [ 543.463145][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 543.469737][ C0] audit: audit_lost=7631 audit_rate_limit=0 audit_backlog_limit=64 [ 545.324906][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1242'. [ 545.731706][T11044] xt_TPROXY: Can be used only with -p tcp or -p udp [ 547.174818][T11059] netlink: 'syz.4.1247': attribute type 4 has an invalid length. [ 547.468375][T11063] netlink: 'syz.7.1248': attribute type 1 has an invalid length. [ 548.381710][ T29] kauditd_printk_skb: 12600 callbacks suppressed [ 548.381731][ T29] audit: type=1400 audit(1732218590.879:23698): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8402 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 548.407791][ T5846] audit: audit_backlog=65 > audit_backlog_limit=64 [ 548.421551][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 548.428120][ T5209] audit: audit_lost=9865 audit_rate_limit=0 audit_backlog_limit=64 [ 548.441396][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 548.448011][ C0] audit: audit_lost=9866 audit_rate_limit=0 audit_backlog_limit=64 [ 548.456047][ C0] audit: backlog limit exceeded [ 548.461491][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 548.468058][ C0] audit: audit_lost=9867 audit_rate_limit=0 audit_backlog_limit=64 [ 548.476036][ C0] audit: backlog limit exceeded [ 548.547892][ T970] lo speed is unknown, defaulting to 1000 [ 553.521667][ T29] kauditd_printk_skb: 12967 callbacks suppressed [ 553.521694][ T29] audit: type=1400 audit(1732218595.979:27538): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=11112 comm="syz.0.1261" saddr=10.128.0.169 src=30008 daddr=10.128.0.240 dest=47626 netif=eth0 [ 553.572330][ T5837] audit: audit_backlog=65 > audit_backlog_limit=64 [ 553.582760][ T8402] audit: audit_backlog=65 > audit_backlog_limit=64 [ 553.588807][ T5191] audit: audit_backlog=65 > audit_backlog_limit=64 [ 553.596244][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 553.600853][ T8402] audit: audit_lost=12912 audit_rate_limit=0 audit_backlog_limit=64 [ 553.602824][ C0] audit: audit_lost=12913 audit_rate_limit=0 audit_backlog_limit=64 [ 553.602847][ C0] audit: backlog limit exceeded [ 553.603151][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 553.603184][ C0] audit: audit_lost=12914 audit_rate_limit=0 audit_backlog_limit=64 [ 556.677755][T11146] block nbd4: not configured, cannot reconfigure [ 557.895779][T11154] ======================================================= [ 557.895779][T11154] WARNING: The mand mount option has been deprecated and [ 557.895779][T11154] and is ignored by this kernel. Remove the mand [ 557.895779][T11154] option from the mount to silence this warning. [ 557.895779][T11154] ======================================================= [ 557.979267][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 558.559338][ T29] kauditd_printk_skb: 10341 callbacks suppressed [ 558.559385][ T29] audit: type=1400 audit(1732218601.059:33456): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5846 comm="udevd" name="/" dev="sda1" ino=2 [ 558.788311][ T5846] audit: audit_backlog=65 > audit_backlog_limit=64 [ 558.795565][ T6142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 558.897922][ T6142] audit: audit_lost=14402 audit_rate_limit=0 audit_backlog_limit=64 [ 558.929887][ T5846] audit: audit_lost=14403 audit_rate_limit=0 audit_backlog_limit=64 [ 558.960172][ T29] audit: type=1400 audit(1732218601.089:33457): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5846 comm="udevd" name="/" dev="tmpfs" ino=1 [ 558.988696][ T29] audit: type=1400 audit(1732218601.089:33458): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5846 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 559.007340][ T6142] audit: backlog limit exceeded [ 559.018973][ T6142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 559.034216][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 559.607468][T11176] vivid-008: disconnect [ 561.091584][ T970] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 561.273021][ T970] usb 5-1: Using ep0 maxpacket: 32 [ 561.280678][ T970] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 561.287837][ T1149] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.308799][ T970] usb 5-1: config 0 has no interface number 0 [ 561.329397][ T970] usb 5-1: config 0 interface 2 has no altsetting 0 [ 561.358375][ T970] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 561.384613][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.406652][ T970] usb 5-1: Product: syz [ 561.411001][ T970] usb 5-1: Manufacturer: syz [ 561.426288][ T970] usb 5-1: SerialNumber: syz [ 561.445803][ T970] usb 5-1: config 0 descriptor?? [ 561.473672][ T1149] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.838167][ T1149] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.446972][ T1149] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.742026][T11176] vivid-008: reconnect [ 562.833305][ T970] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 562.860908][ T970] usb 5-1: invalid MIDI in EP 0 [ 563.272507][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.284397][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.562841][ T29] kauditd_printk_skb: 8654 callbacks suppressed [ 563.562862][ T29] audit: type=1400 audit(1732218606.069:37716): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5209 comm="udevd" name="/" dev="sda1" ino=2 [ 563.583329][ T970] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 563.590478][ T29] audit: type=1400 audit(1732218606.069:37717): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5209 comm="udevd" name="/" dev="tmpfs" ino=1 [ 563.615181][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 563.616017][ T29] audit: type=1400 audit(1732218606.069:37718): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5209 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 563.641298][ T5209] audit: audit_lost=15889 audit_rate_limit=0 audit_backlog_limit=64 [ 563.645007][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 563.650660][T11200] audit: audit_backlog=65 > audit_backlog_limit=64 [ 563.662623][ T29] audit: type=1400 audit(1732218606.069:37719): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=5209 comm="udevd" name="queue" dev="tmpfs" ino=7019 [ 563.685242][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 563.694174][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 563.710169][ T5209] audit: backlog limit exceeded [ 563.714075][ T1149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 563.722605][ T1149] audit: audit_lost=15890 audit_rate_limit=0 audit_backlog_limit=64 [ 563.731120][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 563.739038][ T5854] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 563.746584][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 563.768454][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 563.768468][ T970] usb 5-1: USB disconnect, device number 16 [ 563.788830][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 563.801066][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 563.815137][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 563.823873][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 563.832185][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 564.136436][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.217111][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 564.230292][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 564.239204][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 564.247399][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 564.256815][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 564.264262][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 564.493024][T11209] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1287'. [ 565.075469][T11218] kvm: kvm [11217]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x86 [ 565.085518][T11218] kvm: kvm [11217]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xe8 [ 565.107228][T11218] kvm: kvm [11217]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x876 [ 565.116059][T11218] kvm: kvm [11217]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8da [ 565.139977][T11218] kvm: kvm [11217]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xd5 [ 565.156010][T11218] kvm: kvm [11217]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x88f [ 565.178088][T11218] kvm: kvm [11217]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8d4 [ 565.189721][T11218] kvm: kvm [11217]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8bd [ 565.208642][T11218] kvm: kvm [11217]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x7 [ 565.223003][T11218] kvm: kvm [11217]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8b1 [ 565.227267][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.256700][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.301975][ T1149] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 565.322713][ T1149] team0: left promiscuous mode [ 565.328116][ T1149] team_slave_0: left promiscuous mode [ 565.334140][ T1149] team_slave_1: left promiscuous mode [ 565.363595][ T1149] bond0 (unregistering): Released all slaves [ 565.408610][T11209] dummy0: entered promiscuous mode [ 565.451266][T11209] dummy0: left promiscuous mode [ 565.505408][T11211] netlink: 'syz.4.1288': attribute type 12 has an invalid length. [ 565.620438][T11201] lo speed is unknown, defaulting to 1000 [ 565.731700][T11206] lo speed is unknown, defaulting to 1000 [ 565.921842][ T5854] Bluetooth: hci0: command tx timeout [ 566.414066][ T5854] Bluetooth: hci2: command tx timeout [ 567.398462][ T1149] hsr_slave_0: left promiscuous mode [ 568.002236][ T5854] Bluetooth: hci0: command tx timeout [ 568.084006][ T1149] hsr_slave_1: left promiscuous mode [ 568.101117][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.109374][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.126708][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.296524][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.389034][ T1149] veth1_macvtap: left promiscuous mode [ 568.486235][ T5854] Bluetooth: hci2: command tx timeout [ 568.574919][ T29] kauditd_printk_skb: 22709 callbacks suppressed [ 568.575059][ T29] audit: type=1400 audit(1732218611.079:43112): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=11250 comm="sed" path="/lib/libbusybox.so.1.35.0" dev="sda1" ino=1104 [ 568.584186][T11251] audit: audit_backlog=65 > audit_backlog_limit=64 [ 568.602428][ T29] audit: type=1400 audit(1732218611.079:43113): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11251 comm="modprobe" name="/" dev="sda1" ino=2 [ 568.610430][T11250] audit: audit_backlog=65 > audit_backlog_limit=64 [ 568.627144][ T29] audit: type=1400 audit(1732218611.079:43114): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11251 comm="modprobe" name="etc" dev="sda1" ino=115 [ 568.642109][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 568.663723][ T1149] veth0_macvtap: left promiscuous mode [ 568.669879][ T1149] veth1_vlan: left promiscuous mode [ 568.692135][ T1149] veth0_vlan: left promiscuous mode [ 568.735711][ T29] audit: type=1400 audit(1732218611.079:43115): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11251 comm="modprobe" name="/" dev="sda1" ino=2 [ 568.739662][T11251] audit: audit_lost=21681 audit_rate_limit=0 audit_backlog_limit=64 [ 568.765471][ T5209] audit: audit_lost=21682 audit_rate_limit=0 audit_backlog_limit=64 [ 568.803145][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 570.084749][ T5854] Bluetooth: hci0: command tx timeout [ 570.561611][ T5854] Bluetooth: hci2: command tx timeout [ 571.482774][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 572.744900][ T5854] Bluetooth: hci0: command tx timeout [ 572.750466][ T5854] Bluetooth: hci2: command tx timeout [ 572.949807][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 573.610524][ T29] kauditd_printk_skb: 7721 callbacks suppressed [ 573.610575][ T29] audit: type=1400 audit(1732218616.009:47502): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=11287 comm="syz.4.1303" saddr=10.128.0.169 src=30008 daddr=10.128.0.240 dest=47626 netif=eth0 [ 573.811933][ T5846] audit: audit_backlog=65 > audit_backlog_limit=64 [ 573.823212][ T5209] audit: audit_backlog=66 > audit_backlog_limit=64 [ 573.846797][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 573.853412][ C1] audit: audit_lost=22801 audit_rate_limit=0 audit_backlog_limit=64 [ 573.861475][ C1] audit: backlog limit exceeded [ 573.866731][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 573.873302][ C1] audit: audit_lost=22802 audit_rate_limit=0 audit_backlog_limit=64 [ 573.881386][ C1] audit: backlog limit exceeded [ 574.010390][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 574.177385][T11292] dccp_close: ABORT with 85 bytes unread [ 574.919120][T11291] lo speed is unknown, defaulting to 1000 [ 575.580466][T11201] chnl_net:caif_netlink_parms(): no params data found [ 575.846646][T11206] chnl_net:caif_netlink_parms(): no params data found [ 576.015577][ T1149] IPVS: stop unused estimator thread 0... [ 576.026792][T11201] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.064393][T11201] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.117694][T11201] bridge_slave_0: entered allmulticast mode [ 576.153004][T11201] bridge_slave_0: entered promiscuous mode [ 576.288375][T11201] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.295957][T11201] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.306073][T11201] bridge_slave_1: entered allmulticast mode [ 576.319086][T11201] bridge_slave_1: entered promiscuous mode [ 577.028889][T11331] tipc: Enabling of bearer rejected, failed to enable media [ 577.375748][T11201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.272640][ T5209] audit_log_start: 15532 callbacks suppressed [ 579.272662][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 579.285739][ T5837] audit: audit_backlog=65 > audit_backlog_limit=64 [ 579.285862][ T29] audit: type=1400 audit(1732218620.019:53951): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=11340 comm="syz.4.1312" saddr=10.128.0.169 src=30008 daddr=10.128.0.240 dest=47626 netif=eth0 [ 579.315466][ T5846] audit: audit_backlog=65 > audit_backlog_limit=64 [ 579.318727][ T5837] audit: audit_lost=25843 audit_rate_limit=0 audit_backlog_limit=64 [ 579.322273][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 579.322294][ C0] audit: audit_lost=25844 audit_rate_limit=0 audit_backlog_limit=64 [ 579.322310][ C0] audit: backlog limit exceeded [ 579.322823][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 579.356668][ C0] audit: audit_lost=25845 audit_rate_limit=0 audit_backlog_limit=64 [ 579.423564][T11201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.684907][T11206] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.872018][T11206] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.879352][T11206] bridge_slave_0: entered allmulticast mode [ 579.909251][T11206] bridge_slave_0: entered promiscuous mode [ 581.105017][ T63] Bluetooth: hci5: Frame reassembly failed (-84) [ 581.151886][T11201] team0: Port device team_slave_0 added [ 581.241076][T11201] team0: Port device team_slave_1 added [ 581.435382][T11206] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.471708][T11206] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.510129][T11206] bridge_slave_1: entered allmulticast mode [ 581.543613][T11206] bridge_slave_1: entered promiscuous mode [ 581.727941][T11201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.762028][T11201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.856015][T11201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.985701][T11201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.011580][T11201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.079082][T11201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.493750][T11206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.705057][T11206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.271406][ T5854] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 584.042653][T11201] hsr_slave_0: entered promiscuous mode [ 584.133101][T11201] hsr_slave_1: entered promiscuous mode [ 584.165265][T11201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 584.174457][T11201] Cannot create hsr debugfs directory [ 584.291043][ T6142] audit_log_start: 18765 callbacks suppressed [ 584.291063][ T6142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 584.304398][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 584.304428][ C0] audit: audit_lost=29897 audit_rate_limit=0 audit_backlog_limit=64 [ 584.304448][ C0] audit: backlog limit exceeded [ 584.311673][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 584.311699][ C0] audit: audit_lost=29898 audit_rate_limit=0 audit_backlog_limit=64 [ 584.311719][ C0] audit: backlog limit exceeded [ 584.325325][T11206] team0: Port device team_slave_0 added [ 584.327824][T11206] team0: Port device team_slave_1 added [ 584.332414][ T29] audit: type=1400 audit(1732218626.789:60664): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6142 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 584.332462][ T29] audit: type=1400 audit(1732218626.789:60665): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6142 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 584.332500][ T29] audit: type=1400 audit(1732218626.789:60666): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6142 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 586.072711][T11206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.079729][T11206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.096944][T11206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.148896][T11206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.501479][T11206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.527457][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.705232][T11206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.021492][T11206] hsr_slave_0: entered promiscuous mode [ 588.028796][T11206] hsr_slave_1: entered promiscuous mode [ 588.057752][T11206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 588.081887][T11206] Cannot create hsr debugfs directory [ 589.470248][ T29] kauditd_printk_skb: 4389 callbacks suppressed [ 589.470269][ T29] audit: type=1400 audit(1732218631.829:63578): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11468 comm="dhcpcd-run-hook" name="etc" dev="sda1" ino=115 [ 589.500292][T11468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 589.507514][T11468] audit: audit_lost=30392 audit_rate_limit=0 audit_backlog_limit=64 [ 589.516134][ T5191] audit: audit_backlog=65 > audit_backlog_limit=64 [ 589.527682][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 589.531404][ T5191] audit: audit_lost=30393 audit_rate_limit=0 audit_backlog_limit=64 [ 589.534385][ C0] audit: audit_lost=30394 audit_rate_limit=0 audit_backlog_limit=64 [ 589.550295][ C0] audit: backlog limit exceeded [ 589.556936][T11464] audit: audit_backlog=65 > audit_backlog_limit=64 [ 589.563689][T11464] audit: audit_lost=30395 audit_rate_limit=0 audit_backlog_limit=64 [ 590.253724][T11201] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 590.394341][T11201] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 590.403634][T11476] input: syz1 as /devices/virtual/input/input18 [ 591.543469][T11206] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.714824][T11201] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 591.762262][T11201] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 591.905530][T11206] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.582824][T11206] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.769710][T11201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.970181][T11206] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.828203][T11201] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.930862][T11421] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.938574][T11421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.014470][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.021736][ T6024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.127579][ T29] kauditd_printk_skb: 9989 callbacks suppressed [ 595.127606][ T29] audit: type=1400 audit(1732218636.829:68184): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=11508 comm="syz.5.1338" opid=11508 ocomm="syz.5.1338" [ 595.158467][ T6142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 595.166337][ T5191] audit: audit_backlog=65 > audit_backlog_limit=64 [ 595.231849][T11510] audit: audit_backlog=65 > audit_backlog_limit=64 [ 595.238513][T11510] audit: audit_lost=32192 audit_rate_limit=0 audit_backlog_limit=64 [ 595.241519][ T5191] audit: audit_lost=32193 audit_rate_limit=0 audit_backlog_limit=64 [ 595.253363][T11506] audit: audit_backlog=65 > audit_backlog_limit=64 [ 595.254726][ T5191] audit: backlog limit exceeded [ 595.261904][T11206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 595.265966][ T5191] audit: audit_backlog=65 > audit_backlog_limit=64 [ 595.770162][T11206] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 595.888561][T11206] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 596.070127][T11206] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 596.134341][T11206] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 596.967981][T11201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.003021][T11206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.078155][T11206] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.206085][T11421] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.213288][T11421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.269576][T10115] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.276757][T10115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.373411][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 597.401844][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 597.413697][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 597.444148][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 597.454794][ T5854] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 597.463551][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 597.709491][T11206] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 598.696535][T11206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 599.761700][ T5850] Bluetooth: hci5: command tx timeout [ 600.200105][ T5209] audit_log_start: 9235 callbacks suppressed [ 600.200125][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 600.200186][T11560] audit: audit_backlog=65 > audit_backlog_limit=64 [ 600.219890][T11554] audit: audit_backlog=66 > audit_backlog_limit=64 [ 600.226526][ T29] audit: type=1400 audit(1732218642.519:72339): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11560 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 600.243250][T11555] audit: audit_backlog=66 > audit_backlog_limit=64 [ 600.302424][T11562] audit: audit_backlog=66 > audit_backlog_limit=64 [ 600.309115][T11562] audit: audit_lost=33895 audit_rate_limit=0 audit_backlog_limit=64 [ 600.317416][T11562] audit: backlog limit exceeded [ 600.322863][T11562] audit: audit_backlog=66 > audit_backlog_limit=64 [ 600.329830][T11562] audit: audit_lost=33896 audit_rate_limit=0 audit_backlog_limit=64 [ 601.182499][T11543] lo speed is unknown, defaulting to 1000 [ 601.841421][ T5850] Bluetooth: hci5: command tx timeout [ 603.383933][T11543] chnl_net:caif_netlink_parms(): no params data found [ 603.987890][ T5850] Bluetooth: hci5: command tx timeout [ 604.074418][T11206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.120343][T11201] veth0_vlan: entered promiscuous mode [ 604.275231][T11598] Bluetooth: MGMT ver 1.23 [ 605.012480][T11201] veth1_vlan: entered promiscuous mode [ 605.086914][T11543] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.109218][T11543] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.129529][T11543] bridge_slave_0: entered allmulticast mode [ 605.140915][T11543] bridge_slave_0: entered promiscuous mode [ 605.201555][ T29] kauditd_printk_skb: 12032 callbacks suppressed [ 605.201576][ T29] audit: type=1400 audit(1732218647.699:76006): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5209 comm="udevd" name="/" dev="sda1" ino=2 [ 605.228338][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 605.228629][T11542] audit: audit_backlog=65 > audit_backlog_limit=64 [ 605.234956][ C0] audit: audit_lost=36688 audit_rate_limit=0 audit_backlog_limit=64 [ 605.249573][ C0] audit: backlog limit exceeded [ 605.261649][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 605.261974][ T1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 605.268226][ C0] audit: audit_lost=36689 audit_rate_limit=0 audit_backlog_limit=64 [ 605.282932][ C0] audit: backlog limit exceeded [ 605.292364][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 605.432296][T11419] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.390993][ T5850] Bluetooth: hci5: command tx timeout [ 606.463368][T11206] veth0_vlan: entered promiscuous mode [ 606.512086][T11543] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.532490][T11543] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.542750][T11543] bridge_slave_1: entered allmulticast mode [ 606.563696][T11543] bridge_slave_1: entered promiscuous mode [ 606.721277][T11419] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.963605][T11201] veth0_macvtap: entered promiscuous mode [ 607.030779][T11543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.465208][T11623] syz.4.1356: attempt to access beyond end of device [ 607.465208][T11623] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 607.479473][T11623] gfs2: error -5 reading superblock [ 608.063872][T11419] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.120036][T11201] veth1_macvtap: entered promiscuous mode [ 608.154605][T11543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.780942][T11419] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.232594][T11206] veth1_vlan: entered promiscuous mode [ 609.382688][T11543] team0: Port device team_slave_0 added [ 609.697511][T11543] team0: Port device team_slave_1 added [ 610.017991][T11201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.041010][T11201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.092822][T11201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.161282][T11201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.188939][T11201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.215522][T11201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.218378][T11641] audit_log_start: 6025 callbacks suppressed [ 610.218397][T11641] audit: audit_backlog=65 > audit_backlog_limit=64 [ 610.230897][T11201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.232580][ T29] audit: type=1400 audit(1732218652.709:78809): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11641 comm="modprobe" name="/" dev="sda1" ino=2 [ 610.242159][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 610.271666][ T29] audit: type=1400 audit(1732218652.709:78810): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11641 comm="modprobe" name="usr" dev="sda1" ino=1409 [ 610.295383][T11201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.301666][T11641] audit: audit_lost=37768 audit_rate_limit=0 audit_backlog_limit=64 [ 610.312652][ T5191] audit: audit_backlog=65 > audit_backlog_limit=64 [ 610.314582][T11641] audit: backlog limit exceeded [ 610.319196][ T5191] audit: audit_lost=37769 audit_rate_limit=0 audit_backlog_limit=64 [ 610.324667][T11641] audit: audit_backlog=65 > audit_backlog_limit=64 [ 610.332649][ T6142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 610.383711][T11543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.424972][T11543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.516302][T11543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.543549][T11543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.555771][T11543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.684868][T11543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.776521][T11201] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.811464][T11201] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.827662][T11201] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.836625][T11201] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.179576][T11543] hsr_slave_0: entered promiscuous mode [ 612.205163][T11543] hsr_slave_1: entered promiscuous mode [ 612.222007][T11543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.229638][T11543] Cannot create hsr debugfs directory [ 612.310780][T11206] veth0_macvtap: entered promiscuous mode [ 612.340482][T11419] bridge_slave_1: left allmulticast mode [ 612.368872][T11419] bridge_slave_1: left promiscuous mode [ 612.410842][T11419] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.438136][T11419] bridge_slave_0: left allmulticast mode [ 612.451858][T11419] bridge_slave_0: left promiscuous mode [ 612.467967][T11419] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.241034][ T5209] audit_log_start: 10428 callbacks suppressed [ 615.241054][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 615.241097][T11680] audit: audit_backlog=65 > audit_backlog_limit=64 [ 615.260958][ T5191] audit: audit_backlog=65 > audit_backlog_limit=64 [ 615.261518][ T29] audit: type=1400 audit(1732218657.729:85156): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11680 comm="rm" name="/" dev="sda1" ino=2 [ 615.267670][ T5191] audit: audit_lost=39133 audit_rate_limit=0 audit_backlog_limit=64 [ 615.294409][ T5191] audit: backlog limit exceeded [ 615.299406][ T5191] audit: audit_backlog=65 > audit_backlog_limit=64 [ 615.299863][ T5209] audit: audit_lost=39134 audit_rate_limit=0 audit_backlog_limit=64 [ 615.306269][ T5191] audit: audit_lost=39135 audit_rate_limit=0 audit_backlog_limit=64 [ 615.322320][ T5191] audit: backlog limit exceeded [ 616.170164][T11419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.181044][T11419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.219628][T11419] bond0 (unregistering): Released all slaves [ 616.350083][T11206] veth1_macvtap: entered promiscuous mode [ 616.397261][T11688] fuse: Bad value for 'user_id' [ 616.404918][T11419] tipc: Disabling bearer [ 616.421631][T11688] fuse: Bad value for 'user_id' [ 616.441932][T11419] tipc: Left network mode [ 616.771037][T11206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.771069][T11206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.771085][T11206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.771101][T11206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.778549][T11206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.781278][T11206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.781356][T11206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.781373][T11206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.781389][T11206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.781405][T11206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.781428][T11206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.782355][T11206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.785093][T11206] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.785133][T11206] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.785163][T11206] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.785192][T11206] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.631738][T11427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.631769][T11427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.666534][T11427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.666562][T11427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.232774][T11423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.294638][T11423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.473283][T11707] xt_CT: You must specify a L4 protocol and not use inversions on it [ 619.570960][T11419] hsr_slave_0: left promiscuous mode [ 620.206038][T11419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.244108][ T29] kauditd_printk_skb: 6327 callbacks suppressed [ 620.244128][ T29] audit: type=1400 audit(1732218662.749:89234): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5209 comm="udevd" name="mq" dev="sysfs" ino=15722 [ 620.274221][ T5209] audit: audit_backlog=66 > audit_backlog_limit=64 [ 620.274220][ T6142] audit: audit_backlog=66 > audit_backlog_limit=64 [ 620.274248][ T6142] audit: audit_lost=39886 audit_rate_limit=0 audit_backlog_limit=64 [ 620.280759][ T5209] audit: audit_lost=39887 audit_rate_limit=0 audit_backlog_limit=64 [ 620.288136][ T6142] audit: backlog limit exceeded [ 620.295545][T11419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.316605][ T5209] audit: backlog limit exceeded [ 620.321845][ T5209] audit: audit_backlog=66 > audit_backlog_limit=64 [ 620.328009][ T29] audit: type=1400 audit(1732218662.779:89236): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6142 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 620.329386][T11419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.356041][T11710] audit: audit_backlog=65 > audit_backlog_limit=64 [ 620.383164][T11419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.483813][T11419] veth1_macvtap: left promiscuous mode [ 620.499653][T11419] veth0_macvtap: left promiscuous mode [ 620.508444][T11419] veth1_vlan: left promiscuous mode [ 620.518762][T11419] veth0_vlan: left promiscuous mode [ 621.462688][T11419] team0 (unregistering): Port device team_slave_1 removed [ 621.892742][T11419] team0 (unregistering): Port device team_slave_0 removed [ 624.429782][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 624.440709][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 624.449705][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 624.503103][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 624.520403][ T5854] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 624.529101][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 624.661874][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.668231][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.112246][ T6142] audit_log_start: 10767 callbacks suppressed [ 626.112268][ T6142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 626.124984][ T6142] audit: audit_lost=42268 audit_rate_limit=0 audit_backlog_limit=64 [ 626.131984][ T5191] audit: audit_backlog=65 > audit_backlog_limit=64 [ 626.134510][ T6142] audit: backlog limit exceeded [ 626.140278][ T5191] audit: audit_lost=42269 audit_rate_limit=0 audit_backlog_limit=64 [ 626.144679][ T6142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 626.153155][ T29] audit: type=1400 audit(1732218668.069:92874): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=11739 comm="syz.8.1380" saddr=10.128.0.169 src=30008 daddr=10.128.0.240 dest=47626 netif=eth0 [ 626.159174][ T6142] audit: audit_lost=42270 audit_rate_limit=0 audit_backlog_limit=64 [ 626.190065][ T6142] audit: backlog limit exceeded [ 626.195208][ T6142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 627.031615][ T5854] Bluetooth: hci3: command tx timeout [ 628.697878][T11734] lo speed is unknown, defaulting to 1000 [ 629.128536][ T5854] Bluetooth: hci3: command tx timeout [ 629.437468][T11543] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 629.642745][T11543] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 629.769165][T11543] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 629.887387][T11543] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 631.143266][T11771] audit_log_start: 12940 callbacks suppressed [ 631.143316][T11771] audit: audit_backlog=65 > audit_backlog_limit=64 [ 631.180980][ T5191] audit: audit_backlog=65 > audit_backlog_limit=64 [ 631.195851][ T29] audit: type=1400 audit(1732218673.519:97004): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5837 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 631.225656][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 631.237091][ T5854] Bluetooth: hci3: command tx timeout [ 631.261132][ T5837] audit: audit_backlog=65 > audit_backlog_limit=64 [ 631.309357][ T5191] audit: audit_lost=45214 audit_rate_limit=0 audit_backlog_limit=64 [ 631.335471][T11771] audit: audit_lost=45215 audit_rate_limit=0 audit_backlog_limit=64 [ 631.350616][ T5209] audit: audit_lost=45216 audit_rate_limit=0 audit_backlog_limit=64 [ 631.365899][T11776] audit: audit_backlog=65 > audit_backlog_limit=64 [ 631.418711][ T5837] audit: audit_lost=45217 audit_rate_limit=0 audit_backlog_limit=64 [ 631.685071][T11776] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 631.837939][T11776] overlayfs: failed to set xattr on upper [ 631.889303][T11776] overlayfs: ...falling back to redirect_dir=nofollow. [ 631.927350][T11776] overlayfs: ...falling back to index=off. [ 631.963095][T11776] overlayfs: ...falling back to uuid=null. [ 631.969036][T11776] overlayfs: ...falling back to xino=off. [ 631.976208][T11734] chnl_net:caif_netlink_parms(): no params data found [ 633.281470][ T5854] Bluetooth: hci3: command tx timeout [ 633.466540][T11419] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.826383][T11419] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.966479][T11734] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.995505][T11734] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.003902][T11734] bridge_slave_0: entered allmulticast mode [ 634.014485][T11734] bridge_slave_0: entered promiscuous mode [ 634.129963][T11419] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.270470][T11734] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.320978][T11734] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.397837][T11734] bridge_slave_1: entered allmulticast mode [ 634.450136][T11734] bridge_slave_1: entered promiscuous mode [ 634.583056][T11734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.635073][T11734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.072596][T11419] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.701053][T11543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.159153][ T29] kauditd_printk_skb: 10610 callbacks suppressed [ 636.182659][ T29] audit: type=1400 audit(1732218678.659:102707): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5209 comm="udevd" name="/" dev="sysfs" ino=1 [ 636.501793][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 636.508395][ T5209] audit: audit_lost=46853 audit_rate_limit=0 audit_backlog_limit=64 [ 636.518733][ T29] audit: type=1400 audit(1732218678.679:102708): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5209 comm="udevd" name="devices" dev="sysfs" ino=7 [ 636.541402][ T5209] audit: backlog limit exceeded [ 636.546474][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 636.554525][T11822] audit: audit_backlog=65 > audit_backlog_limit=64 [ 636.561904][T11822] audit: audit_lost=46854 audit_rate_limit=0 audit_backlog_limit=64 [ 636.569959][T11822] audit: backlog limit exceeded [ 636.583403][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 637.917170][T11734] team0: Port device team_slave_0 added [ 638.023342][T11734] team0: Port device team_slave_1 added [ 638.058658][T11832] Cannot find del_set index 1 as target [ 638.302247][T11543] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.678336][T11734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.698881][T11734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.827286][T11734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.905786][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.913098][ T6024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.984639][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.991915][ T6024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.145155][T11734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.714375][T11853] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 640.747189][T11734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.161547][ T29] kauditd_printk_skb: 6282 callbacks suppressed [ 641.161568][ T29] audit: type=1400 audit(1732218683.659:105738): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5209 comm="udevd" name="loop5" dev="sysfs" ino=15277 [ 641.171528][T11734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.223414][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 641.232883][T11852] audit: audit_backlog=65 > audit_backlog_limit=64 [ 641.239659][ T5209] audit: audit_lost=47962 audit_rate_limit=0 audit_backlog_limit=64 [ 641.248482][T11852] audit: audit_lost=47963 audit_rate_limit=0 audit_backlog_limit=64 [ 641.257488][ T5209] audit: backlog limit exceeded [ 641.263491][T11852] audit: backlog limit exceeded [ 641.268940][ T29] audit: type=1400 audit(1732218683.709:105739): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5209 comm="udevd" name="/" dev="sda1" ino=2 [ 641.298248][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 641.298389][T11419] audit: audit_backlog=66 > audit_backlog_limit=64 [ 641.404011][T11543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 641.445665][T11543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 641.850817][T11734] hsr_slave_0: entered promiscuous mode [ 641.914648][T11734] hsr_slave_1: entered promiscuous mode [ 641.951231][T11734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 641.987302][T11734] Cannot create hsr debugfs directory [ 643.301188][T11419] bridge_slave_1: left allmulticast mode [ 643.365273][T11419] bridge_slave_1: left promiscuous mode [ 643.381473][T11419] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.473115][T11419] bridge_slave_0: left allmulticast mode [ 643.505814][T11419] bridge_slave_0: left promiscuous mode [ 643.540423][T11419] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.176423][ T29] kauditd_printk_skb: 10466 callbacks suppressed [ 646.176483][ T29] audit: type=1400 audit(1732218688.679:111168): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5837 comm="syz-executor" path="/321/cgroup.net" dev="tmpfs" ino=1746 [ 646.255171][T11898] audit: audit_backlog=65 > audit_backlog_limit=64 [ 646.287976][T11898] audit: audit_lost=49655 audit_rate_limit=0 audit_backlog_limit=64 [ 646.291824][T11899] audit: audit_backlog=65 > audit_backlog_limit=64 [ 646.303297][T11898] audit: backlog limit exceeded [ 646.303335][T11898] audit: audit_backlog=65 > audit_backlog_limit=64 [ 646.303352][T11898] audit: audit_lost=49656 audit_rate_limit=0 audit_backlog_limit=64 [ 646.303369][T11898] audit: backlog limit exceeded [ 646.303567][T11898] audit: audit_backlog=65 > audit_backlog_limit=64 [ 646.303584][T11898] audit: audit_lost=49657 audit_rate_limit=0 audit_backlog_limit=64 [ 647.716545][T11419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.727772][T11419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.743593][T11419] bond0 (unregistering): Released all slaves [ 647.778702][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1413'. [ 647.818024][T11902] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1413'. [ 648.471111][T11926] Mount JFS Failure: -22 [ 648.475980][T11926] jfs_mount failed w/return code = -22 [ 651.437882][ T29] kauditd_printk_skb: 8760 callbacks suppressed [ 651.437908][ T29] audit: type=1400 audit(1732218693.179:114323): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=11935 comm="syz.4.1421" opid=11935 ocomm="syz.4.1421" [ 651.487835][T11201] audit: audit_backlog=66 > audit_backlog_limit=64 [ 651.491515][ T5837] audit: audit_backlog=67 > audit_backlog_limit=64 [ 651.494767][ C0] audit: audit_backlog=67 > audit_backlog_limit=64 [ 651.507488][ C0] audit: audit_lost=51531 audit_rate_limit=0 audit_backlog_limit=64 [ 651.508432][ T5837] audit: audit_lost=51532 audit_rate_limit=0 audit_backlog_limit=64 [ 651.515544][ C0] audit: backlog limit exceeded [ 651.515852][ C0] audit: audit_backlog=67 > audit_backlog_limit=64 [ 651.515871][ C0] audit: audit_lost=51533 audit_rate_limit=0 audit_backlog_limit=64 [ 651.515888][ C0] audit: backlog limit exceeded [ 651.844662][T11944] /dev/nullb0: Can't open blockdev [ 651.867132][T11543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.978209][T11419] hsr_slave_0: left promiscuous mode [ 652.007432][T11419] hsr_slave_1: left promiscuous mode [ 652.081878][T11419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.111634][T11419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.165197][T11419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.209463][T11419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.427458][T11419] veth1_macvtap: left promiscuous mode [ 652.457462][T11419] veth0_macvtap: left promiscuous mode [ 652.484714][T11419] veth1_vlan: left promiscuous mode [ 652.498987][T11419] veth0_vlan: left promiscuous mode [ 654.683276][T11957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.332482][ T29] kauditd_printk_skb: 9575 callbacks suppressed [ 657.332506][ T29] audit: type=1400 audit(1732218698.869:120249): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11987 comm="rm" name="/" dev="sda1" ino=2 [ 657.402983][T11201] audit: audit_backlog=65 > audit_backlog_limit=64 [ 657.403461][T11991] audit: audit_backlog=65 > audit_backlog_limit=64 [ 657.410117][T11201] audit: audit_lost=52765 audit_rate_limit=0 audit_backlog_limit=64 [ 657.428466][T11983] audit: audit_backlog=65 > audit_backlog_limit=64 [ 657.445549][ T5191] audit: audit_backlog=65 > audit_backlog_limit=64 [ 657.469666][T11983] audit: audit_lost=52766 audit_rate_limit=0 audit_backlog_limit=64 [ 657.478250][T11991] audit: audit_lost=52767 audit_rate_limit=0 audit_backlog_limit=64 [ 657.480982][ T5191] audit: audit_lost=52768 audit_rate_limit=0 audit_backlog_limit=64 [ 657.501412][T11983] audit: backlog limit exceeded [ 658.456419][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 658.544308][T12001] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1432'. [ 658.553546][T12001] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1432'. [ 658.564209][T12001] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1432'. [ 658.573665][T12001] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1432'. [ 658.817686][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 658.830514][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 658.839999][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 658.856315][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 658.864281][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 658.873733][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 660.961586][ T5850] Bluetooth: hci2: command tx timeout [ 661.288059][T12018] nbd8: detected capacity change from 0 to 131072 [ 661.334267][T12019] block nbd8: Send control failed (result -89) [ 661.355870][T12019] block nbd8: Request send failed, requeueing [ 661.399743][ T5850] block nbd8: Receive control failed (result -32) [ 661.402083][ T5846] block nbd8: Dead connection, failed to find a fallback [ 661.420580][ T41] blk_print_req_error: 72 callbacks suppressed [ 661.420605][ T41] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 661.450230][ T41] buffer_io_error: 64 callbacks suppressed [ 661.450250][ T41] Buffer I/O error on dev nbd8, logical block 0, async page read [ 661.465071][T12019] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 661.475086][T12019] Buffer I/O error on dev nbd8, logical block 0, async page read [ 661.484640][T12019] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 661.495184][T12019] Buffer I/O error on dev nbd8, logical block 0, async page read [ 661.505470][ T5846] block nbd8: shutting down sockets [ 661.505615][T12019] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 661.523503][T12019] Buffer I/O error on dev nbd8, logical block 0, async page read [ 661.533036][T12019] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 661.542403][ T5846] I/O error, dev nbd8, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 661.542793][T12019] Buffer I/O error on dev nbd8, logical block 0, async page read [ 661.563424][T12019] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 661.573871][T12019] Buffer I/O error on dev nbd8, logical block 0, async page read [ 661.582451][T12019] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 661.592046][T12019] Buffer I/O error on dev nbd8, logical block 0, async page read [ 661.593634][ T5846] I/O error, dev nbd8, sector 130944 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 661.600079][T12019] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 661.621700][T12019] Buffer I/O error on dev nbd8, logical block 0, async page read [ 661.629673][T12019] ldm_validate_partition_table(): Disk read failed. [ 661.649153][T12019] Buffer I/O error on dev nbd8, logical block 0, async page read [ 661.658488][T12019] Buffer I/O error on dev nbd8, logical block 0, async page read [ 661.674219][T12019] Dev nbd8: unable to read RDB block 0 [ 661.686974][T12019] nbd8: unable to read partition table [ 661.698818][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 661.716485][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=65535, location=65535 [ 661.720613][ T5846] ldm_validate_partition_table(): Disk read failed. [ 661.730121][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=65279, location=65279 [ 661.752893][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=65534, location=65534 [ 661.776797][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=65278, location=65278 [ 661.795310][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=65533, location=65533 [ 661.809225][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=65277, location=65277 [ 661.820082][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=65385, location=65385 [ 661.831933][ T5846] Dev nbd8: unable to read RDB block 0 [ 661.839090][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=65129, location=65129 [ 661.850053][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=65383, location=65383 [ 661.873452][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=65127, location=65127 [ 661.873728][ T5846] nbd8: unable to read partition table [ 661.895034][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 661.913589][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 661.962031][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=32767, location=32767 [ 661.993296][T11419] team0 (unregistering): Port device team_slave_1 removed [ 662.003781][ T5846] ldm_validate_partition_table(): Disk read failed. [ 662.004274][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=32511, location=32511 [ 662.011255][ T5846] Dev nbd8: unable to read RDB block 0 [ 662.031839][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=32766, location=32766 [ 662.048933][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=32510, location=32510 [ 662.066776][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=32765, location=32765 [ 662.092458][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=32509, location=32509 [ 662.129837][ T5846] nbd8: unable to read partition table [ 662.142188][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=32617, location=32617 [ 662.165756][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=32361, location=32361 [ 662.187046][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=32615, location=32615 [ 662.214355][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=32359, location=32359 [ 662.236453][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 662.262351][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 662.288148][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16383, location=16383 [ 662.332091][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16127, location=16127 [ 662.357434][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16382, location=16382 [ 662.368193][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16126, location=16126 [ 662.389096][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16381, location=16381 [ 662.394053][T11419] team0 (unregistering): Port device team_slave_0 removed [ 662.400114][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16125, location=16125 [ 662.421756][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16233, location=16233 [ 662.441808][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=15977, location=15977 [ 662.453243][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16231, location=16231 [ 662.473615][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=15975, location=15975 [ 662.494385][T12019] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 662.506055][ T29] kauditd_printk_skb: 7822 callbacks suppressed [ 662.506074][ T29] audit: type=1400 audit(1732218705.009:124352): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5191 comm="syslogd" name="/" dev="sda1" ino=2 [ 662.543710][T12019] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 662.568912][ T29] audit: type=1400 audit(1732218705.009:124353): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5191 comm="syslogd" name="var" dev="sda1" ino=1906 [ 662.600063][ T5846] audit: audit_backlog=65 > audit_backlog_limit=64 [ 662.611928][ T29] audit: type=1400 audit(1732218705.009:124354): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5191 comm="syslogd" name="var" dev="sda1" ino=1906 [ 662.636797][T11201] audit: audit_backlog=65 > audit_backlog_limit=64 [ 662.644321][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 662.650871][ C0] audit: audit_lost=54018 audit_rate_limit=0 audit_backlog_limit=64 [ 662.658951][ C0] audit: backlog limit exceeded [ 662.664293][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 662.670837][ C0] audit: audit_lost=54019 audit_rate_limit=0 audit_backlog_limit=64 [ 663.971776][ T5850] Bluetooth: hci2: command tx timeout [ 666.013105][ T5850] Bluetooth: hci2: command tx timeout [ 667.553455][ T29] kauditd_printk_skb: 2285 callbacks suppressed [ 667.553552][ T29] audit: type=1400 audit(1732218710.049:125243): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=12036 comm="syz.8.1442" opid=12036 ocomm="syz.8.1442" [ 668.331195][T11201] audit: audit_backlog=65 > audit_backlog_limit=64 [ 668.338748][ T5850] Bluetooth: hci2: command tx timeout [ 668.341400][T11201] audit: audit_lost=54486 audit_rate_limit=0 audit_backlog_limit=64 [ 668.351538][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 668.358720][ T5209] audit: audit_lost=54487 audit_rate_limit=0 audit_backlog_limit=64 [ 668.361518][ T29] audit: type=1400 audit(1732218710.089:125244): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5191 comm="syslogd" name="/" dev="sda1" ino=2 [ 668.368830][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 668.391427][T11201] audit: backlog limit exceeded [ 668.391460][T11201] audit: audit_backlog=65 > audit_backlog_limit=64 [ 668.391477][T11201] audit: audit_lost=54488 audit_rate_limit=0 audit_backlog_limit=64 [ 672.579414][ T29] kauditd_printk_skb: 4004 callbacks suppressed [ 672.579459][ T29] audit: type=1400 audit(1732218715.079:126608): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=12045 comm="udevd" path="/run/udev/data/b7:5" dev="tmpfs" ino=7509 [ 672.964184][T12058] audit: audit_backlog=65 > audit_backlog_limit=64 [ 672.970769][T12058] audit: audit_lost=55369 audit_rate_limit=0 audit_backlog_limit=64 [ 672.980323][T12045] audit: audit_backlog=66 > audit_backlog_limit=64 [ 672.989191][T12049] audit: audit_backlog=66 > audit_backlog_limit=64 [ 673.016681][ T29] audit: type=1400 audit(1732218715.159:126609): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=12054 comm="syz.8.1447" saddr=10.128.0.169 src=30008 daddr=10.128.0.240 dest=47626 netif=eth0 [ 673.040993][T12045] audit: audit_lost=55370 audit_rate_limit=0 audit_backlog_limit=64 [ 673.052374][T11201] audit: audit_backlog=65 > audit_backlog_limit=64 [ 673.058948][T11201] audit: audit_lost=55371 audit_rate_limit=0 audit_backlog_limit=64 [ 673.061453][T12049] audit: audit_lost=55372 audit_rate_limit=0 audit_backlog_limit=64 [ 674.608648][T12061] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 675.486163][T12061] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 675.486274][T12002] lo speed is unknown, defaulting to 1000 [ 675.650906][T12061] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 676.013563][T12061] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 676.966401][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 676.977576][T12061] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 677.591636][ T29] kauditd_printk_skb: 4037 callbacks suppressed [ 677.591683][ T29] audit: type=1400 audit(1732218720.069:128381): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11201 comm="syz-executor" name="/" dev="sysfs" ino=1 [ 677.643167][T12061] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 677.734860][T12079] audit: audit_backlog=65 > audit_backlog_limit=64 [ 678.072935][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 678.087426][ T6142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 678.091634][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 678.096035][T12079] audit: audit_lost=56128 audit_rate_limit=0 audit_backlog_limit=64 [ 678.100601][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 678.108640][ T6142] audit: audit_lost=56129 audit_rate_limit=0 audit_backlog_limit=64 [ 678.115084][ C0] audit: audit_lost=56130 audit_rate_limit=0 audit_backlog_limit=64 [ 678.115106][ C0] audit: backlog limit exceeded [ 678.115683][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 678.213084][T12061] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 678.269260][T12061] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 678.314137][T12061] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 678.427738][ T5854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 678.446460][ T5854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 678.456131][ T5854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 678.466476][ T5854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 678.491780][ T5854] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 678.506570][ T5854] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 679.071458][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout [ 680.301424][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout [ 680.301422][ T5854] Bluetooth: hci3: command 0x0c1a tx timeout [ 680.765026][ T5850] Bluetooth: hci6: command tx timeout [ 681.222176][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 681.289682][T11734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 682.321588][ T5854] Bluetooth: hci3: command 0x0c1a tx timeout [ 682.327742][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout [ 682.365992][T11734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 682.629199][ T29] kauditd_printk_skb: 7921 callbacks suppressed [ 682.629246][ T29] audit: type=1400 audit(1732218725.059:132057): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=12079 comm="udevd" path="/sys/devices/virtual/block/loop5" dev="sysfs" ino=15277 [ 682.648825][T12064] lo speed is unknown, defaulting to 1000 [ 682.712280][T12079] audit: audit_backlog=65 > audit_backlog_limit=64 [ 682.714874][T12118] audit: audit_backlog=65 > audit_backlog_limit=64 [ 682.720071][T12081] audit: audit_backlog=65 > audit_backlog_limit=64 [ 682.726122][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 682.757044][T12079] audit: audit_lost=57550 audit_rate_limit=0 audit_backlog_limit=64 [ 682.798780][T12081] audit: audit_lost=57551 audit_rate_limit=0 audit_backlog_limit=64 [ 682.804636][T12121] audit: audit_backlog=65 > audit_backlog_limit=64 [ 682.811928][T12079] audit: backlog limit exceeded [ 682.813635][ T5850] Bluetooth: hci6: command tx timeout [ 682.819658][ T29] audit: type=1400 audit(1732218725.109:132059): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12079 comm="udevd" name="loop5" dev="sysfs" ino=15277 [ 683.491169][T12002] chnl_net:caif_netlink_parms(): no params data found [ 684.412595][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout [ 684.890305][ T5850] Bluetooth: hci6: command tx timeout [ 685.474857][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 685.490846][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 685.501232][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 685.511580][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 685.519933][ T5854] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 685.530924][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 685.730171][T12002] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.744476][T12002] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.755632][T12002] bridge_slave_0: entered allmulticast mode [ 685.763505][T12002] bridge_slave_0: entered promiscuous mode [ 685.772240][T12002] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.779361][T12002] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.787338][T12002] bridge_slave_1: entered allmulticast mode [ 685.795282][T12002] bridge_slave_1: entered promiscuous mode [ 686.215669][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.223315][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.031462][ T5850] Bluetooth: hci6: command tx timeout [ 687.208530][T12002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.274111][T12002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.360859][T12163] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1467'. [ 687.403118][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1468'. [ 687.443237][T12146] lo speed is unknown, defaulting to 1000 [ 687.558487][T12002] team0: Port device team_slave_0 added [ 687.602044][ T5850] Bluetooth: hci1: command tx timeout [ 687.631481][ T29] kauditd_printk_skb: 11140 callbacks suppressed [ 687.631503][ T29] audit: type=1400 audit(1732218730.129:136768): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11201 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 687.637765][T12170] audit: audit_backlog=65 > audit_backlog_limit=64 [ 687.637880][T12170] audit: audit_lost=59720 audit_rate_limit=0 audit_backlog_limit=64 [ 687.637902][T12170] audit: backlog limit exceeded [ 687.670910][T12169] audit: audit_backlog=65 > audit_backlog_limit=64 [ 687.678293][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 687.678317][ C0] audit: audit_lost=59721 audit_rate_limit=0 audit_backlog_limit=64 [ 687.678336][ C0] audit: backlog limit exceeded [ 687.679106][T12002] team0: Port device team_slave_1 added [ 687.700402][T12169] audit: audit_lost=59722 audit_rate_limit=0 audit_backlog_limit=64 [ 687.728984][T12171] audit: audit_backlog=65 > audit_backlog_limit=64 [ 688.273435][T12179] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x16 (0x34324142, 8, 0, 0, 0) [ 688.931519][ T63] bridge_slave_1: left allmulticast mode [ 688.937258][ T63] bridge_slave_1: left promiscuous mode [ 688.950884][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.027028][ T63] bridge_slave_0: left allmulticast mode [ 689.052585][ T63] bridge_slave_0: left promiscuous mode [ 689.058386][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.705260][ T5850] Bluetooth: hci1: command tx timeout [ 690.380196][T12201] netlink: 'syz.8.1474': attribute type 10 has an invalid length. [ 691.209817][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.552003][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.576773][ T63] bond0 (unregistering): Released all slaves [ 691.605964][T12002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.621745][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.661567][T12002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.777755][ T5850] Bluetooth: hci1: command tx timeout [ 691.853946][T12201] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 691.913766][T12064] chnl_net:caif_netlink_parms(): no params data found [ 691.981926][T12002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.002263][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.051493][T12002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.226725][ T63] hsr_slave_0: left promiscuous mode [ 692.371131][ T63] hsr_slave_1: left promiscuous mode [ 692.378663][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.395500][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.680208][ T29] kauditd_printk_skb: 12005 callbacks suppressed [ 692.680231][ T29] audit: type=1400 audit(1732218735.179:141943): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=12213 comm="syz.8.1477" saddr=10.128.0.169 src=30008 daddr=10.128.0.240 dest=47626 netif=eth0 [ 693.258299][ T29] audit: type=1400 audit(1732218735.219:141944): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5191 comm="syslogd" name="/" dev="sda1" ino=2 [ 693.302110][ T29] audit: type=1400 audit(1732218735.219:141945): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5191 comm="syslogd" name="var" dev="sda1" ino=1906 [ 693.376434][ T29] audit: type=1400 audit(1732218735.219:141946): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5191 comm="syslogd" name="var" dev="sda1" ino=1906 [ 693.386913][T11201] audit: audit_backlog=65 > audit_backlog_limit=64 [ 693.395387][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 693.395410][ C0] audit: audit_lost=62005 audit_rate_limit=0 audit_backlog_limit=64 [ 693.395428][ C0] audit: backlog limit exceeded [ 693.396330][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 693.428223][ C0] audit: audit_lost=62006 audit_rate_limit=0 audit_backlog_limit=64 [ 693.835164][T12224] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1479'. [ 693.844555][ T5850] Bluetooth: hci1: command tx timeout [ 694.134391][T12220] tmpfs: Bad value for 'gid' [ 694.139941][T12220] tmpfs: Bad value for 'gid' [ 694.499907][ T63] team0 (unregistering): Port device team_slave_1 removed [ 694.617156][ T63] team0 (unregistering): Port device team_slave_0 removed [ 697.694915][ T29] kauditd_printk_skb: 2442 callbacks suppressed [ 697.694936][ T29] audit: type=1400 audit(1732218740.189:143336): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=12236 comm="syz.8.1482" saddr=10.128.0.169 src=30008 daddr=10.128.0.240 dest=47626 netif=eth0 [ 697.738442][T12240] audit: audit_backlog=65 > audit_backlog_limit=64 [ 697.745653][ T6142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 697.746429][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 697.759106][ C0] audit: audit_lost=62358 audit_rate_limit=0 audit_backlog_limit=64 [ 697.767167][ C0] audit: backlog limit exceeded [ 697.772862][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 697.779423][ C0] audit: audit_lost=62359 audit_rate_limit=0 audit_backlog_limit=64 [ 697.787470][ C0] audit: backlog limit exceeded [ 697.793044][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 698.139042][T12002] hsr_slave_0: entered promiscuous mode [ 698.231895][T12002] hsr_slave_1: entered promiscuous mode [ 698.238790][T12002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 698.315062][T12002] Cannot create hsr debugfs directory [ 698.446979][T12146] chnl_net:caif_netlink_parms(): no params data found [ 698.667438][T12064] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.687333][T12064] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.719674][T12064] bridge_slave_0: entered allmulticast mode [ 698.745177][T12064] bridge_slave_0: entered promiscuous mode [ 698.818202][T12064] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.842005][T12064] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.918152][T12256] ip6t_rpfilter: unknown options [ 699.025257][T12064] bridge_slave_1: entered allmulticast mode [ 699.191669][T12064] bridge_slave_1: entered promiscuous mode [ 700.112199][T12064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.248216][T12064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.372742][T12146] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.396401][T12146] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.416594][T12146] bridge_slave_0: entered allmulticast mode [ 700.473566][T12146] bridge_slave_0: entered promiscuous mode [ 700.510048][T12146] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.553699][T12146] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.561199][T12146] bridge_slave_1: entered allmulticast mode [ 700.568624][T12146] bridge_slave_1: entered promiscuous mode [ 701.420595][T12064] team0: Port device team_slave_0 added [ 701.562716][T12146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.605772][T12146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.634512][T12064] team0: Port device team_slave_1 added [ 702.772012][ T29] kauditd_printk_skb: 12188 callbacks suppressed [ 702.772051][ T29] audit: type=1400 audit(1732218745.199:147919): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=12279 comm="syz.8.1490" saddr=10.128.0.169 src=30008 daddr=10.128.0.240 dest=47626 netif=eth0 [ 702.847694][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 702.860868][ T5209] audit: audit_lost=64905 audit_rate_limit=0 audit_backlog_limit=64 [ 702.879961][T12266] audit: audit_backlog=65 > audit_backlog_limit=64 [ 702.887527][ T5209] audit: backlog limit exceeded [ 702.901604][T12073] audit: audit_backlog=66 > audit_backlog_limit=64 [ 702.909194][ T5209] audit: audit_backlog=66 > audit_backlog_limit=64 [ 702.919476][T11201] audit: audit_backlog=66 > audit_backlog_limit=64 [ 702.929555][T12266] audit: audit_lost=64906 audit_rate_limit=0 audit_backlog_limit=64 [ 702.940313][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 703.105372][T12064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.171451][T12064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.274435][T12064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.553498][T12146] team0: Port device team_slave_0 added [ 704.589994][T12146] team0: Port device team_slave_1 added [ 704.605504][T12064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.629124][T12064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.656720][T12064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.947410][T12146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.957988][T12146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.983964][ C0] vkms_vblank_simulate: vblank timer overrun [ 705.323151][T12146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.594608][T12146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.603103][T12146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.651060][T12146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.771947][T12064] hsr_slave_0: entered promiscuous mode [ 706.778994][T12064] hsr_slave_1: entered promiscuous mode [ 706.794381][T12064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 706.810068][T12064] Cannot create hsr debugfs directory [ 707.781437][ T29] kauditd_printk_skb: 7586 callbacks suppressed [ 707.781457][ T29] audit: type=1400 audit(1732218750.279:152098): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12324 comm="sed" name="/" dev="sda1" ino=2 [ 707.800998][T12324] audit: audit_backlog=65 > audit_backlog_limit=64 [ 707.806460][ T5191] audit: audit_backlog=65 > audit_backlog_limit=64 [ 707.819791][ T5191] audit: audit_lost=66047 audit_rate_limit=0 audit_backlog_limit=64 [ 707.831426][T12324] audit: audit_lost=66048 audit_rate_limit=0 audit_backlog_limit=64 [ 707.845671][ T5191] audit: backlog limit exceeded [ 707.855120][T12325] audit: audit_backlog=65 > audit_backlog_limit=64 [ 707.861612][T12002] audit: audit_backlog=65 > audit_backlog_limit=64 [ 707.861887][T12002] audit: audit_lost=66049 audit_rate_limit=0 audit_backlog_limit=64 [ 707.869825][ T63] audit: audit_backlog=65 > audit_backlog_limit=64 [ 707.990228][T12146] hsr_slave_0: entered promiscuous mode [ 708.014056][T12146] hsr_slave_1: entered promiscuous mode [ 708.030416][T12146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 708.071567][T12146] Cannot create hsr debugfs directory [ 708.952362][T12335] [ 708.954753][T12335] ====================================================== [ 708.961815][T12335] WARNING: possible circular locking dependency detected [ 708.968898][T12335] 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 Not tainted [ 708.975953][T12335] ------------------------------------------------------ [ 708.983034][T12335] syz.8.1501/12335 is trying to acquire lock: [ 708.989142][T12335] ffff888025a52330 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 708.999405][T12335] [ 708.999405][T12335] but task is already holding lock: [ 709.006895][T12335] ffff888025a51e00 (&q->q_usage_counter(io)#57){++++}-{0:0}, at: nbd_start_device+0x16c/0xaa0 [ 709.017218][T12335] [ 709.017218][T12335] which lock already depends on the new lock. [ 709.017218][T12335] [ 709.027637][T12335] [ 709.027637][T12335] the existing dependency chain (in reverse order) is: [ 709.036665][T12335] [ 709.036665][T12335] -> #4 (&q->q_usage_counter(io)#57){++++}-{0:0}: [ 709.045307][T12335] lock_acquire+0x1ed/0x550 [ 709.050351][T12335] __bio_queue_enter+0x60d/0x700 [ 709.055833][T12335] blk_mq_submit_bio+0x14b5/0x23a0 [ 709.061497][T12335] __submit_bio+0x2c6/0x560 [ 709.066536][T12335] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 709.072708][T12335] mpage_readahead+0x7da/0x930 [ 709.078005][T12335] read_pages+0x176/0x830 [ 709.082911][T12335] page_cache_ra_unbounded+0x774/0x8a0 [ 709.088917][T12335] page_cache_sync_ra+0x3c5/0xad0 [ 709.094476][T12335] filemap_get_pages+0x621/0x2540 [ 709.100063][T12335] filemap_read+0x45c/0xf50 [ 709.105130][T12335] blkdev_read_iter+0x2d8/0x430 [ 709.110525][T12335] vfs_read+0x991/0xb70 [ 709.115213][T12335] ksys_read+0x18f/0x2b0 [ 709.119988][T12335] do_syscall_64+0xf3/0x230 [ 709.125033][T12335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.131498][T12335] [ 709.131498][T12335] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 709.140140][T12335] lock_acquire+0x1ed/0x550 [ 709.145185][T12335] down_read+0xb1/0xa40 [ 709.149872][T12335] filemap_fault+0x6e8/0x1950 [ 709.155087][T12335] __do_fault+0x135/0x460 [ 709.159948][T12335] handle_pte_fault+0x1105/0x6820 [ 709.165511][T12335] handle_mm_fault+0x1053/0x1ad0 [ 709.170981][T12335] exc_page_fault+0x2b9/0x8c0 [ 709.176197][T12335] asm_exc_page_fault+0x26/0x30 [ 709.181584][T12335] rep_movs_alternative+0x4a/0x70 [ 709.187158][T12335] _copy_to_user+0x8b/0xb0 [ 709.192119][T12335] rng_dev_read+0x3e5/0x710 [ 709.197159][T12335] vfs_readv+0x6bc/0xa80 [ 709.201941][T12335] __x64_sys_preadv+0x1b7/0x2d0 [ 709.207417][T12335] do_syscall_64+0xf3/0x230 [ 709.212458][T12335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.218897][T12335] [ 709.218897][T12335] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 709.226483][T12335] lock_acquire+0x1ed/0x550 [ 709.231525][T12335] __might_fault+0xc6/0x120 [ 709.236562][T12335] _copy_from_user+0x2a/0xc0 [ 709.241694][T12335] blk_trace_ioctl+0x1ad/0x9a0 [ 709.247003][T12335] blkdev_ioctl+0x40c/0x6a0 [ 709.252053][T12335] __se_sys_ioctl+0xf5/0x170 [ 709.257181][T12335] do_syscall_64+0xf3/0x230 [ 709.262216][T12335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.268655][T12335] [ 709.268655][T12335] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 709.276502][T12335] lock_acquire+0x1ed/0x550 [ 709.281555][T12335] __mutex_lock+0x1ac/0xee0 [ 709.286642][T12335] blk_register_queue+0x156/0x460 [ 709.292204][T12335] add_disk_fwnode+0x648/0xf80 [ 709.297498][T12335] brd_alloc+0x547/0x790 [ 709.302269][T12335] brd_init+0x126/0x1b0 [ 709.306964][T12335] do_one_initcall+0x248/0x880 [ 709.312265][T12335] do_initcall_level+0x157/0x210 [ 709.317768][T12335] do_initcalls+0x3f/0x80 [ 709.322637][T12335] kernel_init_freeable+0x435/0x5d0 [ 709.328376][T12335] kernel_init+0x1d/0x2b0 [ 709.333256][T12335] ret_from_fork+0x4b/0x80 [ 709.338199][T12335] ret_from_fork_asm+0x1a/0x30 [ 709.343501][T12335] [ 709.343501][T12335] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 709.351081][T12335] validate_chain+0x18ef/0x5920 [ 709.356467][T12335] __lock_acquire+0x1397/0x2100 [ 709.361846][T12335] lock_acquire+0x1ed/0x550 [ 709.366879][T12335] __mutex_lock+0x1ac/0xee0 [ 709.371908][T12335] blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 709.378244][T12335] nbd_start_device+0x16c/0xaa0 [ 709.383632][T12335] nbd_ioctl+0x5dc/0xf40 [ 709.388417][T12335] blkdev_ioctl+0x57d/0x6a0 [ 709.393461][T12335] __se_sys_ioctl+0xf5/0x170 [ 709.398583][T12335] do_syscall_64+0xf3/0x230 [ 709.403627][T12335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.410088][T12335] [ 709.410088][T12335] other info that might help us debug this: [ 709.410088][T12335] [ 709.420342][T12335] Chain exists of: [ 709.420342][T12335] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#57 [ 709.420342][T12335] [ 709.435172][T12335] Possible unsafe locking scenario: [ 709.435172][T12335] [ 709.442632][T12335] CPU0 CPU1 [ 709.448000][T12335] ---- ---- [ 709.453373][T12335] lock(&q->q_usage_counter(io)#57); [ 709.458769][T12335] lock(mapping.invalidate_lock#2); [ 709.466595][T12335] lock(&q->q_usage_counter(io)#57); [ 709.474513][T12335] lock(&q->sysfs_lock); [ 709.478853][T12335] [ 709.478853][T12335] *** DEADLOCK *** [ 709.478853][T12335] [ 709.487001][T12335] 4 locks held by syz.8.1501/12335: [ 709.492207][T12335] #0: ffff8880260a2198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x13c/0xf40 [ 709.501560][T12335] #1: ffff8880260a20d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc2/0x1ae0 [ 709.512559][T12335] #2: ffff888025a51e00 (&q->q_usage_counter(io)#57){++++}-{0:0}, at: nbd_start_device+0x16c/0xaa0 [ 709.523313][T12335] #3: ffff888025a51e38 (&q->q_usage_counter(queue)#41){+.+.}-{0:0}, at: nbd_start_device+0x16c/0xaa0 [ 709.534312][T12335] [ 709.534312][T12335] stack backtrace: [ 709.540227][T12335] CPU: 1 UID: 0 PID: 12335 Comm: syz.8.1501 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 709.550653][T12335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 709.560727][T12335] Call Trace: [ 709.564014][T12335] [ 709.566951][T12335] dump_stack_lvl+0x241/0x360 [ 709.571668][T12335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 709.576878][T12335] ? __pfx__printk+0x10/0x10 [ 709.581493][T12335] print_circular_bug+0x13a/0x1b0 [ 709.586535][T12335] check_noncircular+0x36a/0x4a0 [ 709.591496][T12335] ? __pfx_check_noncircular+0x10/0x10 [ 709.596985][T12335] validate_chain+0x18ef/0x5920 [ 709.601948][T12335] ? __pfx_validate_chain+0x10/0x10 [ 709.607171][T12335] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 709.613162][T12335] ? mark_lock+0x9a/0x360 [ 709.617511][T12335] __lock_acquire+0x1397/0x2100 [ 709.622404][T12335] lock_acquire+0x1ed/0x550 [ 709.626923][T12335] ? blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 709.632925][T12335] ? __pfx_lock_acquire+0x10/0x10 [ 709.637967][T12335] ? blk_mq_update_nr_hw_queues+0x3db/0x1ae0 [ 709.643979][T12335] ? nbd_start_device+0x16c/0xaa0 [ 709.649017][T12335] ? __pfx___might_resched+0x10/0x10 [ 709.654328][T12335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.660537][T12335] __mutex_lock+0x1ac/0xee0 [ 709.665504][T12335] ? blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 709.671590][T12335] ? blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 709.677586][T12335] ? __pfx___mutex_lock+0x10/0x10 [ 709.682630][T12335] ? __kasan_kmalloc+0x98/0xb0 [ 709.687410][T12335] ? blk_mq_update_nr_hw_queues+0x3db/0x1ae0 [ 709.693433][T12335] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 709.699099][T12335] blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 709.704930][T12335] ? __pfx___might_resched+0x10/0x10 [ 709.710241][T12335] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 709.716505][T12335] ? rcu_is_watching+0x15/0xb0 [ 709.721296][T12335] ? trace_contention_end+0x3c/0x120 [ 709.726606][T12335] ? __mutex_lock+0x37f/0xee0 [ 709.731304][T12335] ? tomoyo_path_number_perm+0x679/0x860 [ 709.736962][T12335] ? blkdev_common_ioctl+0xfb2/0x2460 [ 709.742368][T12335] ? __lock_acquire+0x1397/0x2100 [ 709.747415][T12335] ? nbd_ioctl+0x13c/0xf40 [ 709.751858][T12335] ? __pfx___mutex_lock+0x10/0x10 [ 709.756893][T12335] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 709.762899][T12335] nbd_start_device+0x16c/0xaa0 [ 709.767771][T12335] nbd_ioctl+0x5dc/0xf40 [ 709.772034][T12335] ? __pfx_nbd_ioctl+0x10/0x10 [ 709.776809][T12335] ? __asan_memset+0x23/0x50 [ 709.781418][T12335] ? smack_file_ioctl+0x29e/0x3a0 [ 709.786462][T12335] ? __pfx_smack_file_ioctl+0x10/0x10 [ 709.791849][T12335] ? file_to_blk_mode+0xcc/0x140 [ 709.796801][T12335] ? __pfx_nbd_ioctl+0x10/0x10 [ 709.801616][T12335] blkdev_ioctl+0x57d/0x6a0 [ 709.806145][T12335] ? __pfx_blkdev_ioctl+0x10/0x10 [ 709.811189][T12335] ? __pfx_blkdev_ioctl+0x10/0x10 [ 709.816229][T12335] __se_sys_ioctl+0xf5/0x170 [ 709.820833][T12335] do_syscall_64+0xf3/0x230 [ 709.825348][T12335] ? clear_bhb_loop+0x35/0x90 [ 709.830037][T12335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.835956][T12335] RIP: 0033:0x7f1205b7e819 [ 709.840398][T12335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.860107][T12335] RSP: 002b:00007f120693f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 709.868550][T12335] RAX: ffffffffffffffda RBX: 00007f1205d36080 RCX: 00007f1205b7e819 [ 709.876532][T12335] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 709.884508][T12335] RBP: 00007f1205bf175e R08: 0000000000000000 R09: 0000000000000000 [ 709.892483][T12335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 709.900467][T12335] R13: 0000000000000000 R14: 00007f1205d36080 R15: 00007ffd13786858 [ 709.908458][T12335] [ 709.941525][ T5826] syz-executor (5826) used greatest stack depth: 17936 bytes left [ 710.071033][T12002] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 710.093275][ T5850] block nbd8: Receive control failed (result -32) [ 710.100083][ T5850] block nbd8: Receive control failed (result -32) [ 710.257482][T12333] block nbd8: shutting down sockets [ 710.668147][ T63] bridge_slave_1: left allmulticast mode [ 710.680295][ T63] bridge_slave_1: left promiscuous mode [ 710.701632][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.719483][ T63] bridge_slave_0: left allmulticast mode [ 710.725903][ T63] bridge_slave_0: left promiscuous mode [ 710.742548][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.884882][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.895313][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.907567][ T63] bond0 (unregistering): Released all slaves [ 710.995646][ T63] hsr_slave_0: left promiscuous mode [ 711.051525][ T63] hsr_slave_1: left promiscuous mode [ 711.084184][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.093580][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.267585][ T63] team0 (unregistering): Port device team_slave_1 removed [ 711.287011][ T63] team0 (unregistering): Port device team_slave_0 removed [ 712.096573][ T63] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.157854][ T63] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.229315][ T63] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.296835][ T63] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.446816][ T63] bridge_slave_1: left allmulticast mode [ 712.458086][ T63] bridge_slave_1: left promiscuous mode [ 712.466804][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.478291][ T63] bridge_slave_0: left allmulticast mode [ 712.486508][ T63] bridge_slave_0: left promiscuous mode [ 712.492649][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.502826][ T63] bridge_slave_1: left allmulticast mode [ 712.521731][ T63] bridge_slave_1: left promiscuous mode [ 712.527428][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.538913][ T63] bridge_slave_0: left allmulticast mode [ 712.544883][ T63] bridge_slave_0: left promiscuous mode [ 712.550605][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.560625][ T63] bridge_slave_1: left allmulticast mode [ 712.569154][ T63] bridge_slave_1: left promiscuous mode [ 712.575348][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.588395][ T63] bridge_slave_0: left allmulticast mode [ 712.595619][ T63] bridge_slave_0: left promiscuous mode [ 712.604478][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.613433][ T63] bridge_slave_1: left allmulticast mode [ 712.619128][ T63] bridge_slave_1: left promiscuous mode [ 712.628413][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.638979][ T63] bridge_slave_0: left allmulticast mode [ 712.647303][ T63] bridge_slave_0: left promiscuous mode [ 712.653139][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.944755][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.955087][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.966424][ T63] bond0 (unregistering): Released all slaves [ 712.976399][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.986920][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.996649][ T63] bond0 (unregistering): Released all slaves [ 713.006875][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.017486][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.027618][ T63] bond0 (unregistering): Released all slaves [ 713.044368][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.054588][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.067442][ T63] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 713.077807][ T29] kauditd_printk_skb: 22715 callbacks suppressed [ 713.077827][ T29] audit: type=1400 audit(1732218755.579:165593): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=63 comm="kworker/u8:4" name="phy23" dev="debugfs" ino=38034 [ 713.080917][ T63] bond0 (unregistering): Released all slaves [ 713.086905][ T29] audit: type=1400 audit(1732218755.579:165594): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=63 comm="kworker/u8:4" name="netdev:wlan1" dev="debugfs" ino=42039 [ 713.130890][ T29] audit: type=1400 audit(1732218755.579:165595): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=63 comm="kworker/u8:4" name="netdev:wlan1" dev="debugfs" ino=42039 [ 713.163241][ T29] audit: type=1400 audit(1732218755.579:165596): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=63 comm="kworker/u8:4" name="netdev:wlan1" dev="debugfs" ino=42039 [ 713.207413][T12073] audit: audit_backlog=65 > audit_backlog_limit=64 [ 713.207534][ T5209] audit: audit_backlog=66 > audit_backlog_limit=64 [ 713.221051][ T5502] audit: audit_backlog=66 > audit_backlog_limit=64 [ 713.222625][ T29] audit: type=1400 audit(1732218755.579:165597): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=63 comm="kworker/u8:4" name="netdev:wlan1" dev="debugfs" ino=42039 [ 713.227892][ T5502] audit: audit_lost=69168 audit_rate_limit=0 audit_backlog_limit=64 [ 713.250644][T12073] audit: audit_lost=69169 audit_rate_limit=0 audit_backlog_limit=64 [ 713.460592][ T63] hsr_slave_0: left promiscuous mode [ 713.469534][ T63] hsr_slave_1: left promiscuous mode [ 713.478855][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.493969][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.504012][ T63] hsr_slave_0: left promiscuous mode [ 713.510228][ T63] hsr_slave_1: left promiscuous mode [ 713.518790][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.527198][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.539920][ T63] hsr_slave_0: left promiscuous mode [ 713.546910][ T63] hsr_slave_1: left promiscuous mode [ 713.558553][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.567588][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.582474][ T63] hsr_slave_0: left promiscuous mode [ 713.588866][ T63] hsr_slave_1: left promiscuous mode [ 713.600422][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.610893][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.623099][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.635638][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.650296][ T63] veth1_macvtap: left promiscuous mode [ 713.656146][ T63] veth0_macvtap: left promiscuous mode [ 713.661994][ T63] veth1_vlan: left promiscuous mode [ 713.667304][ T63] veth0_vlan: left promiscuous mode [ 713.856321][ T63] team0 (unregistering): Port device team_slave_1 removed [ 713.889971][ T63] team0 (unregistering): Port device team_slave_0 removed [ 713.978056][ T63] team0 (unregistering): Port device team_slave_1 removed [ 713.994834][ T63] team0 (unregistering): Port device team_slave_0 removed [ 714.088059][ T63] team0 (unregistering): Port device team_slave_1 removed [ 714.130962][ T63] team0 (unregistering): Port device team_slave_0 removed [ 714.299604][ T63] team0 (unregistering): Port device team_slave_1 removed [ 714.313090][ T63] team0 (unregistering): Port device team_slave_0 removed [ 718.084819][ T29] kauditd_printk_skb: 42032 callbacks suppressed [ 718.084840][ T29] audit: type=1400 audit(1732218760.589:198784): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12467 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 718.098719][T12468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 718.112208][ T29] audit: type=1400 audit(1732218760.589:198785): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12467 comm="dhcpcd-run-hook" name="var" dev="sda1" ino=1906 [ 718.117016][T12468] audit: audit_lost=72127 audit_rate_limit=0 audit_backlog_limit=64 [ 718.143270][ T29] audit: type=1400 audit(1732218760.589:198786): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12467 comm="dhcpcd-run-hook" name="var" dev="sda1" ino=1906 [ 718.145026][T12468] audit: backlog limit exceeded [ 718.165116][ T29] audit: type=1400 audit(1732218760.589:198787): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12467 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 718.169680][T12468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 718.194960][T12468] audit: audit_lost=72128 audit_rate_limit=0 audit_backlog_limit=64 [ 718.203077][T12468] audit: backlog limit exceeded