last executing test programs: 2m31.500539154s ago: executing program 4 (id=581): socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socket(0x11, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$alg(0x26, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7a917000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000001c0)={0x80000, "340bcf501922d69f2827001bc50f0000002ddc7d00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7}) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000180)='syzkaller0\x00'}) socket$inet6(0xa, 0x2, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 2m30.199853901s ago: executing program 4 (id=583): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004340)="b968dd31efa90481cdad877a2b3a2e8fe873aff0e6b72d29dde21521f5421f0fc9ded029840764f5ab6767a911805e4a7d3fc940fefb8ea5ed53db82602064141984b2dacd0a22fe43a1cd0426bfa76c3b4a69f2458261d15efb1a1ca397e86731dc3446a7059d985532caf333a722de457404bd2a6294cd3333f3b7c580182e27738e8ecf25b1a86a39913e3b924439bf7331bcaab15aedb707ae1db83bb2858e76633516b48a95541928344646de334fd702ecb5c63cca7ba566bd9c927ae9f6ca2484624b4601d0202f6d04450ed3b169edd55048961d3538bf86cd39380a517fd59e9bb2d266664c39906bc0aa88c9f98b0ac963fe653aeb0351ba36d048df0a4fd75e1653c3f42327b476560411d49d3b21b011653847130ee0b87dbdd58c351bb2a3b53317797b137bebcb64edc206f9a45be3e4cbad22bf5bb9c3f0407d0d2696c0a83d15c58a194f744fe127a5561a1579f4b9698d04b47cd6408d98bde7665e82b7009eb3f81d1653b1260f71552b44830f179647b2a3faf1c1e7959df05b79611f15c08a12dcc7e6dbde87cf993cb6b8af8e553afb27673ca522d38af514b76e375e0886431a2e57ffb212d438c3b935ada2cd44cc3427be8da3c3cd09cb60ce4f231f142ed1f3045719b281d5f46a9d6c3f4dee8d66b1256325a910c91f0352cb401a21f21f0ed6cb3b3a53a120046f40b402ba196d13e614dc779f04c70cd1bb3e8a6fc118c61652c22a85bc4f70ce4652ca606a16fbcdf11d496697938a3b225f1c10a05b4381e537c2a07988c9f498b480b835d5b362e00024806d0289a8636825c9fa91a9d7cd7d1585985c95705555691c40223014514b9b8f83870abf7e768616147ee0b605cf760b6cd84d15afe1de80c81a135972c0f0ee427eb04be704c2fdaf5bb47a4f0b64d566305974efc4031365953de74bf0f80b82740ac0daaed1f607004e26e3115d1ef3e85a3acf09bd04a060bec63f66e4ef087e6abfd345f8ff0ebf67cfe16be938d1c6f6c3631d575307e597731c8640251064c4904f15aa8680cca243699de41d4286cab4acb9f822cf10d74a8951c9b1b7d737b9fad5081be34eb35ac5472b4fa1f07dd30e86b930d57fb459913bb9f4aa40b1bb154822ea90d81a41dcc5cfb2546ce3d2d23f9554d026297cbaef88417618237cc7ff1acdf2c541730c69c91e0b77cceda6c8a210cc4c4bdfa8155c1fd46fbbacc3194a8c43f5998619622039caa5381b25b7be9a24f5375d74da5bab271f7c0249c75a59944306debe6083f6e8e7da9330b2b2e5bd0b15786b908972fbfdf001b205898e2db5098cc972964e2597eeff79433cd5ab83d68eb47bce4584526a123b6ebcb621b6b36fed4fd8391a4c017ad6698daba309b029b67608d9934a2715d923a76a2fcfcb7351a356da62c61c741ea44fa5aee70947653d28da32faf40113b53f3b3dfe68d7fd9c250174710ce55cc81ad54f0b0c40fd8915341a01bfccf62d9ae701c8840c7243bd8ee915de1dfb6237b05141fd7e6685d699d257bfaf13ed618874dffdf4b7f4432a627a876431c9ba343a06ac554f8408cde51849872b3138642893639da1d39b186e453d01fe8e7ab5a23fc28ba462c9b7cc54e15b7b41c75ef667771c94367bd534f11415b7c97f8f2f48a6e6dee2e1f0f9718f3dfb567bad7666e3e2f5801621ce916e46571b21cab05dca5bd865021ad62f576c76005a50548b3adb5e2a873b1dd16819f319ef85d1340f2630dd3d1ab8ca98e97f99673d06578300341b4b6f0aedbf17d9dc370dff6cb616644aaed84e6c86f722f09b57a5fc0eed59c25c1bc28d34c40bd1b9df9bfbc4a83de28b2e80df31df2b54c82894b7daedabe7c1e6fb10c422ea4e80a1cd993ba193b369cdf2ada52d32a5e9b77df384671c4ba2181f9d0c6b680b0f30984c29864680a6fb019a33823939e59d82ed60719d7bd3aabe62eb570de5610ee3ddecf4d95ac845591f00524a21780a8dbd809e5073151d24b027b39b109698851fe4310c1d78f1ed576edb14d196715570bbb34fa800ed68c55f35069e6748f9c1458bf851a0eb91893d3160a1a765bf4ae4e3bef89eccc00f4b7c23349a7f468ce9aeb6bad6af5b99d4b1e04d7383c9d713cd87b3d42501935ec99c317e25491cd0ef91bd8d476cfbee711c636a65c309f98089fa98d4703c6c003b5ec546da7c8bc2692807e06e2d9f7032c787db964f6bb1f7161ca57a82590849b9ff6b3245e09064b4c1553123269e4691b8b071990c8d44e98dcb930f21c4d2824b979f863be9a54426d412149f1f20a7464d2f002327226b821a6d0e808f4b530f35a88f2d5dfbb2b0eeab7e2fe285a8cc63d767ea5e3896e9b15a383dfcb581d1c94b8b3be724260de874e35f3aa1fc980b7782149b265047db6c75bb9fa5ce05d07801c60b385876e605b14c8b663f0290db5d5fe75e936a0f30ce8b3cbfda5649a482d6884687af6b21a16bc6beeb9391e7bea97ee5318f0aa16fae8b7a60dda2cc6fbdf1b068a4cd9791d0592018def58b2cffc56fa7df5bd8da42458c3e2d1bc38d64d1e68b156f04c8a9e20195af1ad21557e9edf06425b2d647938a224c580fa5769b8f3430d570136cd9a1b1f706c3b54615acb023cc42f03a007a7d9fb71d28b071d8f3c2dc381a0744b46dd9f094ae7394ac0160e96247d9aaf0da86e248f3a96109ad9902fa9eeeace4137ca3ec827dd945bd99abff70a11930064a9afc13097d12a164dc5f006670a19e394fbccff35832c73f2d85804ec745b02d3157a1085a1bcc4c4975a0f8f5d98a6b88bed87363870c023548f1095a70c84de66dc751394226d8c42e3121d55e38e5e307252126fc5ca4d41b495506d6548318b0cbefb59b5d237c620f4ac35d11d2321387220d9ab1550c92f6c6d7f88760d8b7d1b8f717109370e5160ca2e634a3ec66a77122ca8458d57e4f44cd169c15f6a6bbc40ea3c3a0c0bf868827e1fda515302373fd4f63593268cedd080a20d6402393a5d8d339f790c731625763e5e263c117a8396c71c83218a41b42a37ab4b46c2071dcbdb3e2ce1601b70c7178b51d32b3a5a0772553148553a63765e47eaee9cd13e18e0612cace260ee7abe9b6bb3309a14d679f6df8ec81c438f3ed36d9d5f7b9989c589c524124a06f6e8cfe5c327ac82bc69ee7b957f6304349e8bf1417ec366e1537faaeb377d48e023d2b254e58268ad02cd833fc6c2dd7572f02306f430c454d0a4419b77a83f6036f5ffa9ac5661606e3388ff11eaef09162e24a33d9935a6610975bbedf812d17fb173c3517b9178b811fc33f7052cc7c3d7e486f3c30b8aa7af07a77e91502b8aa2dfcb44f39a93f33cd422f6d120388bfa07285ed152465f330f0c33928fd21e916616d2258157fb295cf6b0976ee959001a5f125e88ec481e0ccfac2861cd8539486c9c4095ecd22d994a55d95412ebed1c4c3a84e34d4a8fac328f12c48e85ceb416430e2c091b2d255ba092689654aa1d4e3e47a7941297ba512f3c579a6ccddcb88498c659afd42fe9a1bce9149f56e4650dbdbd1d85fa1e15745a21456c58cac9794c67b2baee2fa1f549004954cd7273857d5382c3408373362ddcf76917fbe00629b3f0d8d37ca9a0641c8a731a0b79ba32082e2522cae30ea13887afdeaa022a73c1a666846df4cc839f2f565e285038750fb3e64464ef46146b0046120856d90632d144f4e0bc3ccf0ec573bc2dec7a305d50763af30517a316f145af1b3f9a7fbafd5bb00c3e68a10208581c2cd33261a6f2513227be577ab5d23397d674d6248b3131d575f1c3f8f9db9ed493b418ed2ad216ee2981b2d85773fd4d401e836a59e982ddb629106fa3768be9d0ed40908b5fa88429a861c60896f48ae62eb8b1de6ea0a5c944a2e3669f35a814aebf9264a197ccc580051274009fe12a0f9f67b53f72c742634fe7d07f9d4747679aa7554823e78b1202e3c3cee4b080b31d9a53dd8992cf5b8f79bd0bcac6a54b6bafb3897a9df79ef3a75b055a58ed23164cee620c90b84a4602d5c703911028d591552516117f95720563c2f218a30dd2a122127179743bb21389de007928fc87ad6b0375968058546c3f45bb7365da42eb90bb83ff2a14e006ac2d2f7a5258c8d0262c06c17bfa268b8281c9cbef8e5ec3ea5f144d662eb3844289ba181eca37e1af22d0497ce4931424748e7eafd8a7b3812e1efb012062e310d36df4659effd5a0b92c91e9f9bba031c217f200a302d1e88678f58aea3fd0bf51a70ee9f88d41ae268cbd75756d14b0ebc88e04a0ff557f46cf31171b6959355ffdac3d549482b4ffbf1ef9c1861466664e416d8a65b6a0707559333ba46b7a1878f20ebefab52e766543f3fe87e71419d9a77f29e431f9535daa87994becbbfa6c4ebdfad0d36a746c1aa63c946758322fce6a89653d44000345b364ee825eb890749c288b3633e55304ecaa598f1ae2f5fc693f264b9e33e6e23020bc70f6a26fb6ed201c4b09c5de4ed238b6188e5bfbd97c8ccc9a769cb064c6387dc5aae8dfe22c18036e77c0a3792cbc332e9498abb27ef7d06ab2f417c0f5a9b391d9a830bc5b1a18f503f75901f028c379d456827933f01eaac30c7928c0429acdb899ee34c53314b9c439b8a0b3e264f5b2f2e98d73b01d0872effbf2af397e56f04fc05c322d9e2a278634e8b2d9f3b0cd329d3dbab0ceee7c37dd65481a21399af2501f2eae1ae1064904aef1a501ad026e935f10c770d923df2c3e88a6e1fe8659b1ee562ecc58d39120132a8cbbbffd4bdb965e5d528602dd4bae8df62474e6e5796735f530ca8577e79e57b648a24133791137a9c2df03cd7822507c24069ad5b99b47c4ded9c518d1ee7133d81786410b4cea036d0aad16668689283b8bef91fd1bf2521e21bf9cae2ffa384de198acf172effec92570f93a17b4dedfcd0c9501d4bef6a54b7e388aa8195a15e2e7952b96869e05b9a087f68326d03f7fa6f3c0e4d1fcd034d6c9cde522f6de2d4f7255cdc323f6ff18d8872edf6776a78f6d0b0847ab91cc3b532978d7325d92db7ebe6034e9d11f584681460915bd04942b26f2dcaa867fa798d9b75f03ca62fba2e450c2317003778f4e9f893185c0fea97d7d479e092effa08c91a3f5cb92da4ed7c69f55743b9f92c2473e83e5f10feaf818fae2e00785b1fc3570141a8aeb2526e6e19babe14afac12ad9fc21c2caba3587c0226ef15579017c20e8633820648d38c52c06c82d12b35987bd108401f28fc937bae6c78f19310cc32d8f93ce0f605795678f6231c2d26194e8baac9a29219dab7b350d0ac40e26b20e6deaaff2916b03d542338f552abad8d5db0c95474c18c6a2e91f8f7ed6c8bbecf8bdcba2cd4d61ae8746d1873e842d90bc89062f5481e5c6827ecfbc51b3db02960b303b2f7a00281654b053142f229ad4374b0c2b198a4dded506a158716edc9f916b16a46ae2fb55597c10c19a09f9d172fcd9e7b993d6fb444d203ff271ee3748b3e826e13d64a68c1efba33bcb125cbbe2aaab19e42d7fabc1d48b75113244a3239d28a2d9c9c15c4f5327345fa14db58d3b3455850c8cb23a4f99c2dfdb9924315e09464f410b92c071a79a1312d6e981d252d3678184da695d35ddd6336d0ddfed88de169a40f9a4cab7cf02e79266794766964cc62214da19513a17dd8afbe0133a59376e4a48ca82f65ea2e614f8c0699dd93fd2bf074c5143abfea0ed515d9084261c33ad8625e6055ff0f778d85fb8becf9f7fc046e37fb738cc7b72453607924480aeebf36809c40692aacf92a0320fee70a563848d4b0b3d79387dbbcc66a2b1b780078f6cfd347f519e4c36853bfb8657c3302c2349f5e490d81710e55297aadd9ad6042cc45f0f69f885c6b5bef07e9cdf30d1ef48748a6e18b5283aa11adff3b54cc7f2431a849ade36d8de5a80055d503978f5191a76481a144958719c0697051ff43178df2304559c97ddaedb50e458600b335d035b8fdeb5b1386998e238dbcd247d3b947461bc347cf8c80683b10691d6bb910037d32d728d8ba02e5821f8a76d0fab443b2649a055b615ab0a8ba65fafb1cc0f2747161e356d5d92530536aadc29ffbacb590f34ff53ed59cbe1030b3caf66f2c87d709b36d7b00044272ee1f209b5d14c1177181c7e57954dbfb5bbf6b766208614f0957f85319d03c3c2d8e2e9a7f5d40344450303187f796490af86fe33c5f06c4a5c07d952796d24ef0a01b351de23754d612d4049e48d61500995b07e882a01fff3c5f1d53900a6a323f134f3679715424ff03465ca952dd29a43794ac479512a6fa1ff82b572f0a2b9b589b6b31460198d1123402b3fed82595d24617b51013bae4080048018c58ad47ef6e688de7ddc9a985bd3838d1fa8878ef8f8b0b5a6a66f580a117ad04d8262e139d2d55fe920d2ffb8c005b364beaad1bca96e1406cf6de1b3cf6bea4b973920116956223a2e0fa017c030f9e48a1114296fdd90fec61d04ececbb705631fcaff7572605b01fe7147e4e464d1a5933bc1b6aeff929ac73082fb8b0dcac09fe7689bdc4d36c39f955d9130acce672ca25442d43f484f0a592a3974e9bad1226c57d0393b6f7d512abc0881218ecf525fd716a8a9a9ee7929724d28e652c5d43719f84851ad4d19293f801c3b9a61a37b13c3030e0cf82fe1c56e727722525520740adba1617ad60f4ddfb091d3630dedd0f8fab43fc873a7273bafaf8cab38676217370e54996f2540f70732ce7f66cb3b77b60f6f72304d54966a377425c7079d2038d4b83ed7f4da28a26c82086fb580a44491d69fd6a3b6144d69cc874b2ec5a8bdc6279a3574b808f104032bb927c8d24c4e600efdf3819b0a269d5b1ae8e4fcdd44f5d233305dce3607c86f808a830f79f0923229d62b49ca67845c1c643676f961632c9f2391ddac34c730ba9b04288d51be97a6f66a36b761ff3815ef424fef8acf3b9fff9700d532f9ea84ec63c6fcc1137830bfa5bc0dc4937cee73fa352a6ac11a70410feca104e2ad8540ae7b00aaa0b6a5117d59515877c8f0d21693214343514960124d6508c12c4bc504b169e165063b53a4747583dfc4032822edda320915da47abc58486c58d44946f4a9ad72e54d5cf439487129c00be791b72f0276394723493b140bd159dcafe9c4967cee75f38f7ed067fd177ada4c851ebd68b926f70e9d7b9c74b42f11d1d75dd5ecedae17f3d74010a7e5cb172a9953060332c29b883b0b9d3dc2026d30a786f0738af5cc8b4d2757b3be0ee9e9327b06577829f6225632ca500b26f0a372fcc573acd5a0aba5f879b50ed3ac3bcb29a8ab0f39e92a7726d4656aaa14958854028fe77310cedce63b7db9519b48462d52658c311e978a48a21df6927b8b029a935bc04894af33c9af96cc48195eddc8bc9366d404b03a2ae051fc0a46b4415ead269934eaa7399863620d9e399a2953dedd95fb730f75c269603523223db3ecb978321833f4d95d4abd64b9ac55d8cb79b4725477e154f5fd02273407cd23d1e80fc20937537a3052863106abe3e0977ebc948be6e85d69e975235849b75c04ba0155306169725866854f67a587f35acecb3674a07c0357c33d8fdc27dae204c3fcfa55c760d1a1bf14701e72e712ab044c0768750a3dc75e1fe4450a31e376c413b175943183ab0967188fd9dd0e0ec937fd503cec3c3518b9f7ca6628b8ffee8eabff19213437d93e3b1c5892d5462841ed1ab626abb046a7f4b16a43894dbc5b88aede815c26ff1a53c858bee26230b98e9a4acdcd0e8cfc19d7f1d991569dd88ce1336b63a590f0558d693ad940475a2a4324e42736fb9300b5ed0fc6992fe00519077d6b36aea298041a61e106936599e91c44e3936d88d84d0da74d98c613cfdcb59fb6ea0b848eb631292655e62c34e6af38785090eea8f5c2fc2f0735951cf831113fa4b21771738acbd629b7daa2b2e4dc15da90d2ee13a0fc7cad0841b073d194a54bd8ed0d9bc3c99201073a36317910abe5bd906e5cbe6caba927f2c1faf7e3ea95c4758abe818f40a0ef8d4aa88421bd102fbd862a51b13ae3fba6e61544043c4cdcfe851ee4ff7bbef311414777542cc1659b40985cf029d5c9b337a9a5f35df36404b6de9a9cbe8f9534858ec124b41676fa31446bdbbbb7e5ed8f3f45e0b646c39bcfc603bcf33a01ad02660bba82380afbaa6a12e19edbd03edd3b1201ca52b4b4f49bfe232d18feac1113a081b60d54a545038f1d0c746253be2e98400e933a39c0f1abeb6ffa2c3ce7c49cefba974c079ec56a8287d37c7f612f8de8c0ebb29e8ce28fec400dd4cb908ff7a6e3a904f73aa3a13eb89fa1f9e2d6a7be295087f58c8a7979b7f6517aa63855369a924df0210558e79b8a10d9436d84f340fe7bee970a30af042a55bc7ea8d3554dc41af7cdc465ed840aa244cdac11f67a23a56f153bb2551bf9af222b8681476bff8a5cdaace9d7043fbbed7718b848f5ebd5d5a9c37f6fab3e11c11baca3d3caac134849b1108e1382a356aa29c054dfcd8d9f8a1b2179ea74efd33dbc2b7225df00bb5635eebcbcd1c8bdac2b873fe25b763617f30cf837c71dbd598361bdb2010ab9665edf7760e974874aef94fca8a517b86dadc2617f3d3de0fdf8ec654e9b8f4401b2db3d320dc2a91e2b3ff0855b979184f80033d2cf2da6c29603b52fcc7ec34469e256757fedd9d4980d52ed925bacfb450582454bf53be2ff2b9b4196d960429a21b7127e0a21575bc81c10a626cca6623e7f4d71b655bfe2960d53d1ed14d459f66fa639bf62a4bfca12f9ffdb8c6b48904c074bd554f7a27837c11af69382c6282ef2144b6f960d2b369334ec87f89e767be80b79e22ef029542ea37c343268201b18c320d3bc03809e798f119e06db30612ef31ffe0f2e5b7d74ff7b03b9dbcc5c5dd62bd5f881c057bef2cd85ca4b356a7bafe309f5137fb40157e6b6de64e336de017a5556ff86bfb12615b19800eb9e06f61e0a061c1459132faf58fcd9797e19551abd2033e9a2ac02275f1a157fce7733bad51f29d5b2388057320ba7d99f1fb2fdfad1d497ce07e471636f429d1f7f741c0efd7519b350324790b07a620206a7afa35a7b3f3a3e8bc0aa51ee7591b13eaaf1f5f43b82b35cadb59210e4b642c9f117754ddb66e9067069f76446466d8af55ff2ac66adbc0ef716200c8748ebb935c82baf50a1885910831e0c4fe025539ee197fb33c5c8e1350d9d418601f5f8d4cd5fb3f37a529a82134e731724456e8faf8c9f68ce528476df627cb8c46bd137dd9a1124d5912a6e904f6c30e8560cf8575c89d92c57395fa832b41239aa379d6a12bd6c75afd73d908a5dd48e64ffc285f20ad3415bc46e5f72a89f0f20aa4cc823d660e41690bf39642e4353f3093858795ba60f71accd8d94f8d23ca03fe156f0a659c81dbec66f2518a011563d60578e339249cf129de7b23eca0e08e3fb66fe9271c26877eaa53e82ebd14f34989dac46e08dc5bddfd26d2d2bb7af83e7c91d25e4c0de5afe32ada244c7757060b3ad78f2fb2357d9c4d3e9cacbb65b54d9e7f00f444007bbf25b358edc94e0e518c7474aa23861b9531d4fb3525e2f74f64d5017546befbdeb7fcbc0c383ac4e94afe5b1474c3fbf667d44d2cd6e04d1346f46a252ce2e10d22802c8c00041263f701248f5e097bdf166779b22fc916c9e6487b06c6143c15836a93ffa451429cc5a4c019b192c1b6008ba78ed5195d38e9982995cc07d62753aa319be0230a85bf68f43d5e391a47915308aa13a2edf30da39b365024f3287c8ca635dec9349e67a706a6b200475a4d4184f7e12c082c74704f3437fd4d425e8addcc10416fe017302eb84f217c0e78eb7f0f53659e1c8c185e98c8ffd1ce9f7ecfba2fb5a5906e2f2e82d51258d09da8731647a737b42984536fadfa4cb390770f93a3fd25a525ef1b36f8687986c6cbd37958434944f93f681793e091c1b4192e1749109216aea78e2cab119a54ffc6482038d74c3c3d28b5caa4dcca9a6dab38b40486354c3d0c5f46e61c54430eeaf4ba489460951eed0b3d14ef11acbfda657b0769b830499a84d895da6515e99bcbb35f329d179704db66425ab4f59e31feebe5bd135502df250fbd1374cc4e1e377759f4a1e326d1b54e4f04221e3e54618d0ae22762bbaa3660a9e61e7754beb040d9579fd5c93d6e60a425da4fff2b8a6a46de55684d22a564f07ee3446de77bd0d7b50ef21d7d3f70215a1513515d21bf3fe7eb26b1477956b394d7aa1e2ca199bd2eca159ad4ccaf5dc2794b2127a989791dacb09863a9f061d6d8c8d77d17ef22e3b3958e4c0c42bd7713cd6ef589e86ca2cc23086748447370deb89487d4a80f888c24e80df49b115bf5c42e2412c0783ee38713cc576800217818d80958f419bad3d3cc3e01a34661db7af767d7be0856e6ec0a92982fc430854381bb0f8b5efeb81c064a0fcb9790b81c12a6a703ed241be816f318502a3e511bc9eb5dd4cb33d059496d0552f19f21974d7aab387b6c5799e54a611358cae43886b706915721ab0dab37b1fd75e6fba2e1e7bd54921bf4647a8a5620f365dcdadaa6b95f84a4163f0077b8716cc7a536ef9e835bf3e23acd5a12bb9da93ba1a666590734612cdaf8c94c7dca7aa7bd5337c4627f63f1cc31bda07a7eb0a51cc78da61f8ab6814a2120e797e0eeae193653b44a273191c4cac5bd055b643a858bb8ee04dd4d0bbe593c67001044443f7d366441045db518fb54178fc9ae6a2b926ca23a5968aff20c0b673c05624cd4098fe89cfbf13f5ff9c3e774f90cc0e8a246cbe03001519bdf2c72a92b0f55f2395cafd2599bf11567c49477bbdd31e5b7e25ac7dfda3a605910cbbdbd2df5d9bec602a0625a00800e66a8b3ec6e45e22f814235f3cddc017586f18775036977a313eb330efb0f51f5a82f0f47d7dafbe53dac9a1d8630328b6956f1997ba75b7a0cd9919f1d98f9191f26867685e193f4552716dc4f95c6609f0f610ba2cc5adffbc8e61217888f96a300ad27b1991e1211e7053bd702c7966f2b011ea48af41bf2171166680be99744c64c885ed1f3871ece8522dc4083e148052d26b6794dd6e9daad44c4393170a0b6bdb3a51bef5eaad8feff3228cbb3cf20c6ed8b27b64dba152bb377145f8a6fb4579edb3a15ac86a6d8bedfa4d4ee46cf2a32701f8d5797cfb34dd2ce75a44774b71c9cee0d86c13157e2e12815fe74b82f8916d2f514dcf51a3f1ebec273256834bedfa50db2c71ef7ba1c2ed34c4c674cfa4e49bfd99659003d4ab3c80b081f214ca688adf85f2376920cb42c573fb7fba6d78ff70d8be5b08841a119497f81a71cd7ccc225666aad5dd2edf1438624787715a678e06f005f9149a72eabab0023b9d58604e09701593d34c3963bcd55fd230dad3bfff9cf3b9757cb674221c54cf4848065cfc2ac77950a7f4bea0efc37b84f0308e226a1297904170dddf404a3d6625720b430f10e0e719e31fbbc1d80375b636f26230d5861f1ff5a8853499f7792a7ef43f3daa0e135c236807207", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x27, 0x3, 0x500000, 0x40}}, 0x50) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0) 2m28.378158387s ago: executing program 4 (id=590): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r1, 0xfbff) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000280)={r1, 0x0, 0x1000, 0x100000000}) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x4000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000440)=0x2) 2m27.228029548s ago: executing program 4 (id=593): socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socket(0x11, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$alg(0x26, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7a917000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000001c0)={0x80000, "340bcf501922d69f2827001bc50f0000002ddc7d00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7}) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000180)='syzkaller0\x00'}) socket$inet6(0xa, 0x2, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 2m26.039960376s ago: executing program 4 (id=597): r0 = syz_open_dev$sndctrl(&(0x7f0000001780), 0xb, 0x101001) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x24020400) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 2m25.996889333s ago: executing program 4 (id=598): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="b90000"], 0xb8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000840)={0x10}, 0x10) 2m10.848562789s ago: executing program 32 (id=598): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="b90000"], 0xb8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000840)={0x10}, 0x10) 18.614859258s ago: executing program 0 (id=963): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4004) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004'], 0x2a, 0xfffffffffffffffc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="06000000040000ecff000000b82fbd1bcdc3fa548a78ea5e57e3ad50cf577bacfa76686c234d4842a384446ed3a6ca660f57c8720fe32f91fd1ef39e5087ec1c334c16d6a6bc41b2a3352c6baacda40c2f5245f677f39a150a30fee20ce7beb33cfa5e0ef887a3d93b594d93eba657a811d80654c2dfff59e58328d548b5187128e66643e68e6b9c44e58772f70e", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0x0, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x40000, 0x0, 0x2, 0x0, 0xc}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 10.756318264s ago: executing program 0 (id=984): socket$netlink(0x10, 0x3, 0x10) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffc) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvmmsg(r2, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x81, 0x0) 8.229369146s ago: executing program 5 (id=991): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x31, 0x9d}}], 0x58}, 0x0) 7.501009598s ago: executing program 3 (id=992): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$getown(r4, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getrlimit(0x4, 0x0) getpriority(0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r6, 0x0) close(r6) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x24}}, 0x0) 6.651752967s ago: executing program 0 (id=993): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0200000004000000080000000100040080000000625b2a87dcf3cbe223853f922485f2a62ee15747163d1534ec9eb64b89f3132c0cea18cc301e683336023742b09305e2d7f6b0009b5c7df849ffddb551800ca982cccc81511be72e25b363fbe077", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) io_submit(0x0, 0x4, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="f4", 0x1}]) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) 6.411528397s ago: executing program 1 (id=995): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000006080)=""/241, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000500)='rxrpc_propose_ack\x00', r0, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mlock2(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8005, &(0x7f0000000000)=0x3f, 0x9, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x3d786000) rseq(&(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x208f3d63}}, 0x20, 0x0, 0x0) 6.363822254s ago: executing program 5 (id=996): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x40044591, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)) recvfrom(r0, 0x0, 0x0, 0x12060, 0x0, 0x0) 4.968543522s ago: executing program 5 (id=997): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x2, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x10, 0x100}, {0x3, 0xf}]}, @struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x6}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x2}}, @float={0xd, 0x0, 0x0, 0x10, 0x8}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}}, &(0x7f0000000140)=""/248, 0x72, 0xf8, 0x1, 0xc3, 0x0, @void, @value}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map, 0xffffffffffffffff, 0x1b, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(0x0, 0x40, 0x260, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800000}}}, 0x90) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='personality\x00') lseek(r4, 0x3, 0x0) 4.349463384s ago: executing program 1 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r4, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) sendmmsg$inet(r4, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd", 0x4f}, {0x0}], 0x7}}], 0x1, 0x0) r5 = getuid() quotactl_fd$Q_GETFMT(r3, 0xffffffff80000400, r5, &(0x7f00000000c0)) r6 = dup(r3) write$6lowpan_enable(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r7, &(0x7f0000000100)="e5786a0d000000000000c83b", 0xffffff9b, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x270}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x2, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x11de, &(0x7f0000003080)={@broadcast, @random='\x00 \x00\x00\x00\b', @void, {@ipv6={0x86dd, @icmpv6={0xd, 0x6, "91e7fd", 0x11a8, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @local}, {[@dstopts={0x21, 0x21e, '\x00', [@generic={0x0, 0x1000, "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"}, @ra={0x5, 0x2, 0x9}, @generic={0x2, 0xc7, "1fb5eac27f9452d394dc92d899cba124152bfa355c94b98444822fd9aee25ec054775960eed39828bd27f301d73ee1941bb9ca144f58bbf0f6f038e34060f3000bd1b99df35eaf91eb8639e44643ae4574b3feb4e9656508f2f0c641e53e975d20bcd40b345c16f6219c50d60bb8c5658612b98a2ca9a3ed3d714e89bf17911caa06492cf0c4b2fbc367271f3f4bc956585d49b8376e17a9f7d7ddbb821d6d9539c08d0488081d3d575f6d74b7a9b85361fd91fc1ca26b74a02b1e2444fbb329e9600d6406caa1"}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xc7}, @pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0xf, 0x4, [0x4, 0x6]}}]}, @hopopts={0x6, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @hopopts={0x87, 0x9, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1, @generic={0x9, 0x33, "12dd50907a64d6604fe93b7006bba00bc806560200733b45df34bc60f94ebc94f9dcf8d256a59f3c0bcf421b666b00abf96292"}, @jumbo={0xc2, 0x4, 0x5}]}, @srh={0x8, 0x2, 0x4, 0x1, 0x81, 0x0, 0x5, [@local]}, @routing={0x11, 0x2, 0x0, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x14}]}], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x1, 0x1, "0a70725ca395"}]}}}}}}, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r1, 0x1, 0x0, 0xfffffffe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x40080) 4.306792756s ago: executing program 3 (id=1000): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socket$inet_tcp(0x2, 0x1, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000040c0)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x40400, 0x0) fchdir(r2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), 0x0) 3.721172569s ago: executing program 5 (id=1002): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000780)={0x4, 0x395e, 0x3, {0x1, @sdr={0x3031334d, 0xdd17}}, 0x6}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000180)={0x18, r4, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f00000000c0)={0x0, 0x6, 0x201a}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) 3.720655406s ago: executing program 0 (id=1003): socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvmmsg(r2, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x81, 0x0) 3.618038634s ago: executing program 3 (id=1004): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x80, 0x6, @link_local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xc) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006640)=@newlink={0x48, 0x10, 0x401, 0xffffffff, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_usb_connect(0x6, 0xe4, 0x0, 0x0) 3.543493574s ago: executing program 5 (id=1005): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x70bd2b, 0x0, {0x2, 0x18, 0xd, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0xe}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}]}, 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 3.494320597s ago: executing program 2 (id=1006): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x31, 0x9d}}], 0x58}, 0x0) 3.398140598s ago: executing program 1 (id=1007): r0 = gettid() r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000080), 0x10) listen(r1, 0x0) accept4$llc(r1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)) chdir(0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 2.463535655s ago: executing program 1 (id=1008): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0xffffffffffffff0f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x7, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000240)={0x1, 0x1, 0xe}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x60000000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.443433402s ago: executing program 2 (id=1009): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000006080)=""/241, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000500)='rxrpc_propose_ack\x00', r0, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mlock2(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8005, &(0x7f0000000000)=0x3f, 0x9, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x3d786000) rseq(&(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x208f3d63}}, 0x20, 0x0, 0x0) 2.175063997s ago: executing program 5 (id=1010): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0x5b, 0xd, 0x20, 0x13d8, 0x1, 0xe22, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xef, 0xbd, 0x7f}}]}}]}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000140)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.028526836s ago: executing program 2 (id=1011): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000480)="36ffd955ba1a64ef6f94f133d71414ad", 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02002f7e08b6e21d96ad0200", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) unshare(0x22020600) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000300008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000040b7050000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) 1.833250127s ago: executing program 2 (id=1012): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x2, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x10, 0x100}, {0x3, 0xf}]}, @struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x6}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x2}}, @float={0xd, 0x0, 0x0, 0x10, 0x8}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}}, &(0x7f0000000140)=""/248, 0x72, 0xf8, 0x1, 0xc3, 0x0, @void, @value}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map, 0xffffffffffffffff, 0x1b, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(0x0, 0x40, 0x260, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800000}}}, 0x90) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='personality\x00') lseek(r4, 0x3, 0x0) 1.591382199s ago: executing program 3 (id=1013): socket$packet(0x11, 0x2, 0x300) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1fffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) r1 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 1.212896712s ago: executing program 3 (id=1014): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socket$inet_tcp(0x2, 0x1, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000040c0)={0x8, {"24783e245402fd60273e14c3eb090723ac476c7538b5ea19588c28b06516b72c6d73315762a6555c17a6d5554aaacc942d2328f17bd1c1121342c854847f3de3f12ce9d138093f6a5df3c89a72cb4e7b08827e473a39dffaab7929106845137921fc23a872ad3bf6cfcecbab32d6936e26f52c5ad8b0afd9102d54eec650987b229e64deac8e9aaa9c38229a701259d2b4211012b3eee1d382e7fce9a55a458c4fab7878d594718a47681c915f7fd7c502d1099140cc71538582497de53482f60ec3e66f21cab92485ed154f7283e05539487e211cf750c461ef2c76315064df74415bcdfa867d8b27fa63b3bba3230a1a9605d3091204dba17ca4b55d4f721607521f5e45c791bb45de35eb1917c1e9c1f65bdcca8822a03a1d2ef1118681e258c7e20e8bbdbdbae0b2d015d019428cc9742e92151bb7c4b2b0a36b9042249028b7b2a068b87b9dfbdd8dbd4b7e4e74801b9e2e4e112462ed6f14e2196778e27c041a3c7f6bcbf0ff4d30f692af0c8d160414d4e22427bafa7a8c2f6c8bd9883a3b70aa510654a5441343489d94ee314da0f3886e76b43c028e47138899d2ba84776eaf60da2f8340169152b42df69eb0f583d5cc986112b23650d1d8ed7310a445db4be5cd9918bb5a806a2c7ae870f3b4b1ac46dc42cbe74b51b25da2805d72b61493bdc2e04e4477978b40fd9a965bfa742224adeaae6277f57ad0b695d997a2239c2fd46eb430df27849b1a65d92e1900a1e48225f94f737f9d8c5284f2205df5732afd59bd0b3b1934c7db1581ec4684c3bcd5381e0e3be00cdfc21ba691c45c4537e9690708b68fa700814d27cb50df2b1be14a7a3e3981d6c6044a73ecbe40f2304b724ba10133ffec218b242ae97a52f16984247c28fe950d49dc7900475b777b37813e61d0cfd6da391f07ab622dec7b121967e80d67c8c7db77e05e37712b92aee01230ca29badfd714db3c03bea8e840d5dafc6a27fa98c7a6179ad39df582088e31e17ee283a76c5c9a05d0a0b4fc95a6aa46104947bac4f50b0e57925e3be186df0409e5c2c5b775347e83c9c8829e95623541603ce68589e942d3724ab7963731167f0954faa87b98aba0336469a127f3377a5d0cb91d11749d1489226c9da6abe765c2f1206ca7be3b9f7e116b7bc1baad37b14b842cbb89c348147e493a615f1972ef9baf03cc353c979865573bc40b84ac6cecf673985479ebaf24f2ad9d905874249bed88ed0c69479a0a7b53ecad68cff344866d03e4eb0cf80610af2465d64d3dceaf4fd6a5ee2eda719233fb33ef043b6019fec948bf5d0295a4f7af154475cbb3461650f7fcfc66c03db610ce8244ad432157ba91df573f3e13b430d4272d60b9a9a454bc1cafa87f1aa9c289ab6dae4f0e81f496d6767bf1bb503aebbd8a58e7dba9f643ab02e000d5f01e896e4c1d6e5b9771faacec322aa2b121d679c7941469dc233adfc5a83fe218a8ea686750e1426eb81fdd86ec193102bae34eb7e48986a18d05284ec1cffeae698ef739181f94a0c91a754f333cd44bc9053144c3f1491fc31684376a382b33e8c3d70eedbf5245dc63d86033c739c6f0f4ebab3007075c4dc66d7a8c93a718a7ec03d811b0ee727b0e695ebbc507d410f7e88204bb209beeef2b6fd0b4db48cd33a0b6591d91caf6676a4a74125afc3a04ea7eac3ce2662694999e891e77ef72ee4ec64b92b8918a3cb53cee960caf02b2cfb5449a64ad7ce57a5aa931a898d8adfc25c36d03861d5504772624b69ce823597b4488882e88a0f90362f604d4b722f9255220c3528a547b1c2d73aeb6034e549706fc467072adfd6a951b6a788b1e40a0c12cdc10f4be0e7cbb2b47704a8a684aeaf74d9e08bef07e3be8aed8ac00f398ff9f4e7cac9c5dbaadfdb0858d6d98dcfbddd609d5489e3f18b5db69aeff479281a976d30905eaf78121cf6365ff43e063e768cddd88040cc49c6961ba276f48b7e92419d0eadbf79cf8304ec48f51c5ca311d9530b6ade8702640c88ebe2f99ce88e8dc25b1373fee1aee3ca8e6a5905209205e0033ff02afcb4d1e08bfb0566ba2b07abaa07f48c37ccc147fcb627262391aa59df48450476aeaf85c6b82c3faca07679268f27260bae1ccfeaffa3af472bdd92c0b84dee9b857b2d0d72895db5e87527747fefb9906eeb4e9fc98c5d89937134a8650e1dc6a2abe84859302da2854000152043da9a8d09b4cb34ba15a6bd031cc116db6fbd5d50afaf6f7169af9794235de346b70f638e8c46a8a4c80da4844c0589e3eba83eecf0efcbab54b577448038134d169bb66fd4028c7dba7eb869a0de8ca9337633a784dcd6693c2a55621ecbb0ef025f69f234508df53d23e8bb11ff9399dc79aa79adcbbc969e55ed2e7b0a606e024457209cec002f38b18a7abf2aae9a178194ed70080f59350a44ffdc1d89332cae9923e13f36ae05d73fffd41281a0cdc6a95740082a3742350ab95b4065340154e3efaf044ee867e1b66f656bdd8c2273c03aeff9f655457863cb3419656f8f144b592b6ba56d4d2bdc4aee710e5871a10f560a237c3e357902ac150ffc23f78e81a2c71543bd89c3ed6d1e57cacae6f5141a84849d90e0e5df1ee86d18993dbb272bd2d54713c9f222802e22ee2976174caf00abe8fdd6d432dd2993b74cbb16839f11d6393c1b291c7e7f501ecc9edd433f21b80c8890883fb7b591c6486be7ed48402b618518b10445edfdc3a4ad8d3ce4b2439a1def220ba384e7cb3e69b782035087598c546bc68a72f4fe51e95ffae21091552849d02ebb1b0dda26bc3477cb3d74360587bb8712d85c6e458cf334b4c65823c22ca818dd0e81d20b6050cb8590452486ea641e6dc4c61efc3675517cdb820debd0f66f78ca88efdc6dc1679ab95a52fb85d78e43de6409805c43f63bd516610c17782377f4e6659a803e725742c05aa251d7236c8b5d45009aa62e17697f31735a3a3a56839d8ef0d68501d3f584283ce80cc371dfa0ab0724c3265429456ea4c9a27759f49e02a7b9d5028b4eda3836876a4567758ea1d5136db27be77b1656de90792c939fa3e9572bd6f7fa6662223f4d8b5c88cc7d3605b9489cf7afacdb34b04527a3d1448ab4011bc92b5ae8521b93b657a90ecba6e6a89472e31c22ae31cbb046c2964204ed9fcfcef49d0f1f96f239cf9997b70d9cffdbfca813dd723fed1d95ee994b6094e6e57905544d60e605533acc921bae751aca79515cdbb2dcc7828968252421308d95fe68dbb136ad5b611ea37912f75df2aee792b8a387f5cad76a6157a7363ef567d77b1bc476d35768079a868733513985b26f7cf79ce76c807eace09146558e85dd1bb867996500a99fc26129a16496bff1ddebd97db54bd7f78b35003a1b702c51bfceb2abc0a5fd55cb02f67458c93b0cbecb086dbf8a066a7771b29953a50089812b28901acc0d97845e6a9ade6b366b8c880753080e6c73c99165aae12ce51b723ec366cd6730634a81fabaa1f0b01c750458bf365e60dfeb605b86bd7a37b6492c483dd74e3a2fa6d152d0e230cee186f1259f97d6b9ff615fe012f58a382c2809a8e63334230b93b24de8fdd1dba7bc9f623c82f1a8e81287d08555f71e2af0aad9202e9352058e66771d813b7fb68fce040b06cc168c2c7d9fcf3bd5cdec5bd8ce2b338cedbfb6cfad342973aa2e2faedde11efc2466896c81f7842cbf25f78403e1f0f5ca5544cbecd7bba70b616f29a4388fc4896428a23d8772dc21794c20d76f55439fa66b94c56c7e01ac016820caca23f42de23c309d86b2cb207dcd096d6a44d2f681c7bc725d3f81cc6a08c2ae82ca55228125034f312fe04f2befb4c4ef6fcb803c1474988a7e07810e60d0d38d1934b135015d39b49fa48bfee6ad4ad0298bc5e66e8d357ee47fe61f215f7326de507addbf4ababa0cb928c947e91354ed232332cbde85e5dc3e173fdbc4d4dd96786bd6dce83cf1ea099b06f2a4f18dc0394951e6ee2eb72dfa6a013713590aebdeda149bc06b64ad40fa64538edd9afd408bb013d38b3cbf17c265f0295b0e085112dc490230322b1eecaf727d0fc3e67226e0f8a50af7025e960072c336d0a9838f328a68ed1d6551a5743d10504193f0e32ced3ba98b8a21b3c431efb8dd3a2cadf10e12daf461d5d9171d2ca7ae218c0bb868c363feb0487d8ffac4a654c6c551a3725902c7ebc55ed822605c039363f4e4e24ea4b3d7dfd21d07c9228a3b37c31b7124aea3faaa5930dd138ca433069a7c3807c1828dcab13ab9ff0afa6a3ff63d5811269913e4f9774a59ff9df2dbe7ff2c29e599253324b5514f4c2b634996fcd421797712b159896e9f3ba234d6ebb658c792dee2aa26001b5b6427dc311924b24264ec2155a0a32d8f51205925fe80e5fea15d957c327165791e7571b74fed1003e680b6f743fa6fa91f8e423b5cb68e86eb2e13f6b6a94ee4b992b59f6a4978d93a60ee207986bb5be365740b990d98f1866e58d5182532312b570daa8d1f9a8d0ae551480e0fad001aec5a17dc64b0ab5704780c0408b5fb1dc69a55f29514facae81b7f6e6503fea6a75a912a966f6f20ce7ee726be01c698ebd81cd81d972fd6278ff9591e4def2877cdcaee3ea046911cb5a6abc16197eda0a850f8c6acd59e845dae487e4427694fdd50b1bdf9da7e662ad05ef239e8ecb9e3156d1cf27b6b0579745f046a163eabf6e385bb617cbbf77e93bfba6a422c44d6e60bfd03928c32837e991cad562b8db3a21777b1f7b1496c1774d202a0b63f80d3f3bdcba0b8ae06ce357a6a88de0b98a4fa0bcba5e9b2cece271fbf4476b606ae02299ecb88d527af0db95e306279dc0ee14127a780586b4821b0aa0456df345e1034de046623bf53496ba41fdc2897996a90e315b9c9fd23be0e38f80e233d7cf42566e0ed721364bb8685b5bef438c136fb3a2fe1cd36a18fe1384adf503ae9c3a50f5c7c8610145b63de52183ceccb49b55940ab504943cd8b0df6bc52a47bbbec418b4af2f29ebdc8fe09460f2ca409519a10c45ecccb3e3342ea8c30152ef43416fca25a2b79b8815295fc802dd80a5f6ba72f32e54b8166dd8c9079d3ba0f06e00020b691d7d49cdde6e65f5b61624404d52509fd34a9430bb85085bda9df7f98d890d53e559ebf3c024ea90b68c32fe7b149ddd12b7386c9a6b441453f91ce3d351d0c64185795befae6bb9ce2646af1319a6b8f4daf1904c2684ebae533a3939c83b1be1bfb5f3ffb34b00532df06337f520bafe1c4bee4c2854ddfd7867a94c9a660c1311e1da75876406e8a2372bc521ef178ca0e0a6b3f587493a31aafc46490dfedb0283b3d2ba0536bc3f76ca685cad56b28499da509a925d769dad43264260ca857436a8b28e3067a70d07c87988fb30f069773b40bcfe0552f392e5c5508efde3b303231f991d6c14fc5639347bb11315237ba57fb81d4acf5f5a17f31debf3c3e69df45f5f46e34b1f8af4d712cd65d4da93634bb878eb044381f29935972b835b2fd7a75082dd67f67c94a073ebba59d57c8a828cc21ce7875c5ab42b6b342303fddad0852ab24caeaf33af93c9ba023d2b1e7eb4fcd91a8ef680d7d641dea186a5c7f20401be0c26ce5ab44d5efd932ee0dfff62ab58408e0aaa6ec1d68c9d56c3f47c2ce2df2c9e342208e8c653ef850dd622e1e7cfe70b3b23e353746a076736c3addb9247384e4424754ccfc181f60c24f940ae4b17bf8c5710cb97a28b493edad712240bf420acdf9fc2e232056558c62894c10836ea6476d751", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x40400, 0x0) fchdir(r2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), 0x0) 617.235634ms ago: executing program 2 (id=1015): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r0 = syz_io_uring_setup(0x73d, &(0x7f00000000c0), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000040)) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') 616.10781ms ago: executing program 3 (id=1016): r0 = epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) r4 = fcntl$dupfd(r3, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0x2025}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000240)) r5 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r5, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80001000004, 0x11, r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f00000001c0)={0xe000001b}) epoll_pwait2(r0, &(0x7f0000000540)=[{}], 0xfffc, 0x0, 0x0, 0x0) 551.731025ms ago: executing program 0 (id=1017): r0 = syz_open_dev$dri(0x0, 0x72, 0x4c00) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000200)=0x7fff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1, 0x0, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x3, 0x20000000, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x0, 0x1, 0x8, 0x7}]}) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x1a7, &(0x7f00008b5000/0x1000)=nil) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x172, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f00000075c0)=""/102376, 0x18fe8) syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x3, @private=0xa010100}}}, 0x108) 356.051073ms ago: executing program 1 (id=1018): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00'}, 0x10) copy_file_range(r1, 0x0, r0, 0x0, 0xfffffffffffffff8, 0x0) 54.239911ms ago: executing program 0 (id=1019): r0 = gettid() r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000080), 0x10) listen(r1, 0x0) accept4$llc(r1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)) chdir(0x0) 822.185µs ago: executing program 1 (id=1020): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x31, 0x9d}}], 0x58}, 0x0) 0s ago: executing program 2 (id=1021): r0 = syz_io_uring_setup(0x23d, &(0x7f0000000300)={0x0, 0x8edd, 0x20, 0x2, 0x233}, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000000008000200000000000800030000000000080007"], 0xc0}}, 0x40000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev, @val={@val={0x88a8, 0x1, 0x1, 0x7}, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0xac, 0x0, 0x0, 0x5, 0x32, 0x0, @loopback, @multicast1}, {0x0, 0x0, 0x98, 0x0, @opaque="5fc51f053dbb0e8b7c2cde4d581ba4e027c386170d2252f9705db231406376e95667b0b927182ffe7e9160e0ab9285ccfb7d1a1bef662a7d48c7112e69f70f3db5f5bb2b984066a851d44ad53f146974e2214e41fe824e7c91198e38007fe21b9cf4a4a9cb0006fa8d12c246a496b1993ecd5ee035654df92660c6bdecd9a011d152b81f731b5a67e6e6378d6bbaa531"}}}}}}, 0xc6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfefc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0x213a, 0x4) sendmmsg$inet(r4, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000080)=0xb, 0x4) sendmmsg$inet(r4, &(0x7f0000007180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40002110, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x148, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6tnl0\x00', {0x0, 0x0, 0x1a, 0x0, 0x0, 0x9, 0x600000}}}, @common=@dst={{0x48}, {0x0, 0x0, 0x41}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000000)=[{}, {}, {0x0, 0x0, 0x0, 0x1}]}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r6, 0xc0182101, 0x20000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) fsetxattr$security_capability(r5, &(0x7f00000004c0), &(0x7f0000000500)=@v1={0x1000000, [{0x7, 0x6}]}, 0xc, 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. [ 63.941687][ T5820] cgroup: Unknown subsys name 'net' [ 64.112006][ T5820] cgroup: Unknown subsys name 'cpuset' [ 64.119763][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.435513][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.670693][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.702530][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.721190][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.731078][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.739531][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.743136][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.746792][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.754695][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.769007][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.775667][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.776227][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.784484][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.799838][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.807780][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.815388][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.815786][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.829320][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.829627][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.838976][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.846679][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.853565][ T5841] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.857693][ T5147] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.864922][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.879722][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.889287][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.889514][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.905718][ T5147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.905877][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.920143][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.920674][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.281012][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 68.382111][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 68.465425][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.473442][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.481169][ T5830] bridge_slave_0: entered allmulticast mode [ 68.487982][ T5830] bridge_slave_0: entered promiscuous mode [ 68.496175][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 68.520464][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 68.534408][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.541733][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.549003][ T5830] bridge_slave_1: entered allmulticast mode [ 68.555530][ T5830] bridge_slave_1: entered promiscuous mode [ 68.663830][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 68.681287][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.688445][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.695941][ T5834] bridge_slave_0: entered allmulticast mode [ 68.702892][ T5834] bridge_slave_0: entered promiscuous mode [ 68.716770][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.742447][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.749773][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.756962][ T5834] bridge_slave_1: entered allmulticast mode [ 68.764111][ T5834] bridge_slave_1: entered promiscuous mode [ 68.793969][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.859536][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.883704][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.891932][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.899552][ T5846] bridge_slave_0: entered allmulticast mode [ 68.906452][ T5846] bridge_slave_0: entered promiscuous mode [ 68.918562][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.939257][ T5830] team0: Port device team_slave_0 added [ 68.945212][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.952647][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.960809][ T5846] bridge_slave_1: entered allmulticast mode [ 68.967360][ T5846] bridge_slave_1: entered promiscuous mode [ 68.984686][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.992077][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.999440][ T5838] bridge_slave_0: entered allmulticast mode [ 69.005925][ T5838] bridge_slave_0: entered promiscuous mode [ 69.015376][ T5830] team0: Port device team_slave_1 added [ 69.042144][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.052211][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.059560][ T5838] bridge_slave_1: entered allmulticast mode [ 69.066083][ T5838] bridge_slave_1: entered promiscuous mode [ 69.104775][ T5834] team0: Port device team_slave_0 added [ 69.130517][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.137488][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.163518][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.179546][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.188878][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.196017][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.204471][ T5837] bridge_slave_0: entered allmulticast mode [ 69.211684][ T5837] bridge_slave_0: entered promiscuous mode [ 69.220041][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.227164][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.234459][ T5837] bridge_slave_1: entered allmulticast mode [ 69.241730][ T5837] bridge_slave_1: entered promiscuous mode [ 69.249806][ T5834] team0: Port device team_slave_1 added [ 69.257364][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.266981][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.274533][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.300760][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.314963][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.354585][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.386965][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.415245][ T5838] team0: Port device team_slave_0 added [ 69.432038][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.454572][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.461592][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.487543][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.500539][ T5838] team0: Port device team_slave_1 added [ 69.516985][ T5846] team0: Port device team_slave_0 added [ 69.525032][ T5846] team0: Port device team_slave_1 added [ 69.539527][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.546492][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.572968][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.612928][ T5837] team0: Port device team_slave_0 added [ 69.620902][ T5837] team0: Port device team_slave_1 added [ 69.644299][ T5830] hsr_slave_0: entered promiscuous mode [ 69.650971][ T5830] hsr_slave_1: entered promiscuous mode [ 69.657884][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.664948][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.691070][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.734217][ T5834] hsr_slave_0: entered promiscuous mode [ 69.743285][ T5834] hsr_slave_1: entered promiscuous mode [ 69.749722][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.757442][ T5834] Cannot create hsr debugfs directory [ 69.764799][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.771861][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.797812][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.815442][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.822439][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.848476][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.860295][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.867268][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.893357][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.905707][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.912750][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.939678][ T5841] Bluetooth: hci0: command tx timeout [ 69.939901][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.964924][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.971998][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.998040][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.009259][ T5147] Bluetooth: hci2: command tx timeout [ 70.009301][ T5836] Bluetooth: hci3: command tx timeout [ 70.014994][ T5147] Bluetooth: hci4: command tx timeout [ 70.020714][ T5841] Bluetooth: hci1: command tx timeout [ 70.067858][ T5838] hsr_slave_0: entered promiscuous mode [ 70.074444][ T5838] hsr_slave_1: entered promiscuous mode [ 70.080794][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.088356][ T5838] Cannot create hsr debugfs directory [ 70.146861][ T5846] hsr_slave_0: entered promiscuous mode [ 70.153632][ T5846] hsr_slave_1: entered promiscuous mode [ 70.161494][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.169377][ T5846] Cannot create hsr debugfs directory [ 70.225289][ T5837] hsr_slave_0: entered promiscuous mode [ 70.231864][ T5837] hsr_slave_1: entered promiscuous mode [ 70.238142][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.246030][ T5837] Cannot create hsr debugfs directory [ 70.516987][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.529769][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.547743][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.568538][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.588557][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.602680][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.612910][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.624055][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.671637][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.690893][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.721264][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.733043][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.792252][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.804169][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.840499][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.852848][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.877655][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.895366][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.906820][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.924443][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.012218][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.032584][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.060168][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.081576][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.095011][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.104399][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.111797][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.133754][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.140909][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.174017][ T262] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.181158][ T262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.202869][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.214014][ T262] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.221158][ T262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.238049][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.280514][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.291911][ T262] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.299097][ T262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.326585][ T262] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.333765][ T262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.360925][ T262] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.368041][ T262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.388847][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.418134][ T262] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.425308][ T262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.506476][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.573457][ T5838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.609547][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.663913][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.693883][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.701069][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.738468][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.763286][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.771043][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.803087][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.846551][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.855318][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.924786][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.983652][ T5834] veth0_vlan: entered promiscuous mode [ 71.992895][ T5830] veth0_vlan: entered promiscuous mode [ 72.000320][ T5841] Bluetooth: hci0: command tx timeout [ 72.017772][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.080124][ T5841] Bluetooth: hci4: command tx timeout [ 72.080159][ T5147] Bluetooth: hci1: command tx timeout [ 72.085551][ T5841] Bluetooth: hci3: command tx timeout [ 72.092996][ T5147] Bluetooth: hci2: command tx timeout [ 72.104687][ T5830] veth1_vlan: entered promiscuous mode [ 72.116270][ T5834] veth1_vlan: entered promiscuous mode [ 72.144280][ T5837] veth0_vlan: entered promiscuous mode [ 72.157173][ T5837] veth1_vlan: entered promiscuous mode [ 72.227095][ T5837] veth0_macvtap: entered promiscuous mode [ 72.244637][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.265694][ T5830] veth0_macvtap: entered promiscuous mode [ 72.281836][ T5830] veth1_macvtap: entered promiscuous mode [ 72.307925][ T5837] veth1_macvtap: entered promiscuous mode [ 72.328305][ T5834] veth0_macvtap: entered promiscuous mode [ 72.357111][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.366779][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.377912][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.391070][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.402451][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.416860][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.427587][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.439454][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.449017][ T5834] veth1_macvtap: entered promiscuous mode [ 72.460089][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.469932][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.479350][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.488051][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.505009][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.513924][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.523470][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.532526][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.579423][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.590218][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.600457][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.611003][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.622177][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.649349][ T5846] veth0_vlan: entered promiscuous mode [ 72.657970][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.669129][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.679303][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.690940][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.702271][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.733349][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.742399][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.751951][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.761273][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.771536][ T5838] veth0_vlan: entered promiscuous mode [ 72.787470][ T5846] veth1_vlan: entered promiscuous mode [ 72.816127][ T5838] veth1_vlan: entered promiscuous mode [ 72.898968][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.907729][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.928516][ T5846] veth0_macvtap: entered promiscuous mode [ 72.939869][ T5846] veth1_macvtap: entered promiscuous mode [ 72.957416][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.974744][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.984962][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.995591][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.005476][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.016545][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.027797][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.047171][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.058810][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.068975][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.080738][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.090866][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.101374][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.112374][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.122034][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.132797][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.159157][ T5846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.167896][ T5846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.184435][ T5846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.193554][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.211829][ T5838] veth0_macvtap: entered promiscuous mode [ 73.224357][ T262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.239906][ T262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.253713][ T5838] veth1_macvtap: entered promiscuous mode [ 73.267375][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.278531][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.353281][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.386702][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.398394][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.408666][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.419747][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.430160][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.441039][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.451310][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.462263][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.473441][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.497028][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.520945][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.524060][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.545229][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.563998][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.567010][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.586239][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.598334][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.609449][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.620351][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.630747][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.641810][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.655060][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.679411][ T5916] syz.1.2: attempt to access beyond end of device [ 73.679411][ T5916] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 73.692047][ T5916] hpfs: hpfs_map_sector(): read error [ 73.741821][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.764126][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.783762][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.810378][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.006950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 74.109344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 74.134727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 74.307492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 74.318904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 74.381523][ T5841] Bluetooth: hci2: command tx timeout [ 74.390112][ T54] Bluetooth: hci3: command tx timeout [ 74.395936][ T5836] Bluetooth: hci1: command tx timeout [ 74.402794][ T5833] Bluetooth: hci4: command tx timeout [ 74.410611][ T5147] Bluetooth: hci0: command tx timeout [ 74.416624][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.432528][ T3458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.531577][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.540094][ T3458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.681431][ T3458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.690713][ T3458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.842125][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.851371][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.597110][ T5147] Bluetooth: hci0: command tx timeout [ 76.602816][ T5147] Bluetooth: hci4: command tx timeout [ 76.608288][ T5147] Bluetooth: hci1: command tx timeout [ 76.614001][ T5147] Bluetooth: hci3: command tx timeout [ 76.619643][ T5147] Bluetooth: hci2: command tx timeout [ 76.634974][ T5952] capability: warning: `syz.0.15' uses 32-bit capabilities (legacy support in use) [ 76.950904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.959783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.509528][ T5989] process 'syz.0.27' launched './file0' with NULL argv: empty string added [ 82.699929][ T51] cfg80211: failed to load regulatory.db [ 83.474194][ T6028] GUP no longer grows the stack in syz.3.40 (6028): 20004000-20005000 (20002000) [ 83.561433][ T6028] CPU: 0 UID: 0 PID: 6028 Comm: syz.3.40 Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 83.561468][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 83.561484][ T6028] Call Trace: [ 83.561491][ T6028] [ 83.561499][ T6028] dump_stack_lvl+0x241/0x360 [ 83.561537][ T6028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.561558][ T6028] ? __pfx__printk+0x10/0x10 [ 83.561582][ T6028] ? find_vma+0xf9/0x170 [ 83.561625][ T6028] __get_user_pages+0x3b07/0x4140 [ 83.561658][ T6028] ? mark_lock+0x9a/0x360 [ 83.561706][ T6028] ? __pfx___get_user_pages+0x10/0x10 [ 83.561727][ T6028] ? __gup_longterm_locked+0xd2f/0x17f0 [ 83.561751][ T6028] ? __pfx_down_read_killable+0x10/0x10 [ 83.561775][ T6028] ? __pfx_lock_acquire+0x10/0x10 [ 83.561798][ T6028] ? try_get_folio+0xf1/0x690 [ 83.561821][ T6028] ? __pfx_lock_release+0x10/0x10 [ 83.561852][ T6028] __gup_longterm_locked+0xe64/0x17f0 [ 83.561888][ T6028] ? mark_lock+0x9a/0x360 [ 83.561916][ T6028] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.561939][ T6028] ? __pfx___gup_longterm_locked+0x10/0x10 [ 83.561962][ T6028] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.561984][ T6028] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.562011][ T6028] ? gup_fast_fallback+0x207e/0x29c0 [ 83.562036][ T6028] gup_fast_fallback+0x2266/0x29c0 [ 83.562089][ T6028] ? __pfx_gup_fast_fallback+0x10/0x10 [ 83.562143][ T6028] ? __mutex_trylock_common+0x183/0x2e0 [ 83.562162][ T6028] ? __pfx___might_resched+0x10/0x10 [ 83.562181][ T6028] ? is_valid_gup_args+0x124/0x200 [ 83.562206][ T6028] get_user_pages_fast+0xcc/0x160 [ 83.562231][ T6028] ? __pfx_get_user_pages_fast+0x10/0x10 [ 83.562251][ T6028] ? rcu_is_watching+0x15/0xb0 [ 83.562269][ T6028] ? trace_contention_end+0x3c/0x120 [ 83.562287][ T6028] ? __mutex_lock+0x37f/0xee0 [ 83.562308][ T6028] __iov_iter_get_pages_alloc+0x3b4/0x8e0 [ 83.562337][ T6028] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 83.562368][ T6028] iov_iter_get_pages2+0xcf/0x130 [ 83.562396][ T6028] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 83.562431][ T6028] __se_sys_vmsplice+0x739/0x14a0 [ 83.562456][ T6028] ? plist_del+0x3f1/0x410 [ 83.562500][ T6028] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 83.562529][ T6028] ? __pfx_futex_wake+0x10/0x10 [ 83.562602][ T6028] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.562633][ T6028] ? do_syscall_64+0x100/0x230 [ 83.562655][ T6028] ? do_syscall_64+0xb6/0x230 [ 83.562676][ T6028] do_syscall_64+0xf3/0x230 [ 83.562694][ T6028] ? clear_bhb_loop+0x35/0x90 [ 83.562721][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.562744][ T6028] RIP: 0033:0x7f90bd585d29 [ 83.562767][ T6028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.562783][ T6028] RSP: 002b:00007f90be3ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 83.562803][ T6028] RAX: ffffffffffffffda RBX: 00007f90bd775fa0 RCX: 00007f90bd585d29 [ 83.562817][ T6028] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 000000000000000b [ 83.562830][ T6028] RBP: 00007f90bd601aa8 R08: 0000000000000000 R09: 0000000000000000 [ 83.562843][ T6028] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 83.562854][ T6028] R13: 0000000000000000 R14: 00007f90bd775fa0 R15: 00007ffc8d4531c8 [ 83.562884][ T6028] [ 83.900650][ T6028] netlink: 47 bytes leftover after parsing attributes in process `syz.3.40'. [ 84.615270][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.44'. [ 84.649057][ T6041] bridge_slave_1: left allmulticast mode [ 84.654852][ T6041] bridge_slave_1: left promiscuous mode [ 84.679390][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.714111][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 84.750582][ T6041] bridge_slave_0: left allmulticast mode [ 84.781903][ T6041] bridge_slave_0: left promiscuous mode [ 84.788564][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.888488][ T6051] fuse: Bad value for 'fd' [ 84.959058][ T29] audit: type=1804 audit(1734971864.750:2): pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.49" name="/newroot/9/bus/file1" dev="overlay" ino=73 res=1 errno=0 [ 86.140747][ T29] audit: type=1326 audit(1734971865.750:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.55" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f8e385d29 code=0x0 [ 86.300795][ T5884] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.490806][ T5884] usb 4-1: config 0 has an invalid interface number: 154 but max is 0 [ 86.624856][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.812645][ T5884] usb 4-1: config 0 has no interface number 0 [ 86.830532][ T6072] netlink: 47 bytes leftover after parsing attributes in process `syz.4.57'. [ 86.853636][ T5884] usb 4-1: too many endpoints for config 0 interface 154 altsetting 23: 253, using maximum allowed: 30 [ 86.901239][ T5884] usb 4-1: config 0 interface 154 altsetting 23 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 86.997738][ T5884] usb 4-1: config 0 interface 154 has no altsetting 0 [ 87.033815][ T5884] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 87.066745][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.124615][ T5884] usb 4-1: config 0 descriptor?? [ 87.151141][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'. [ 87.242884][ T6083] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.342829][ T6086] Bluetooth: MGMT ver 1.23 [ 87.545965][ T6094] netlink: 36 bytes leftover after parsing attributes in process `syz.0.65'. [ 88.709349][ T5884] usb 4-1: string descriptor 0 read error: -32 [ 89.713426][ T29] audit: type=1326 audit(1734971869.040:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.0.69" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fced7b85d29 code=0x0 [ 90.194567][ T5884] usb 4-1: USB disconnect, device number 2 [ 90.238610][ T5841] Bluetooth: hci0: command tx timeout [ 90.934847][ T6121] 9pnet_fd: Insufficient options for proto=fd [ 90.952533][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 91.169001][ T5913] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.514362][ T5913] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.524972][ T5913] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.567736][ T5913] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 91.608748][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 91.616826][ T5913] usb 3-1: SerialNumber: syz [ 91.814660][ T6143] netlink: 36 bytes leftover after parsing attributes in process `syz.1.79'. [ 91.871033][ T5913] usb 3-1: 0:2 : does not exist [ 92.465995][ T29] audit: type=1326 audit(1734971872.270:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.1.86" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5527585d29 code=0x0 [ 93.696882][ T51] usb 3-1: USB disconnect, device number 2 [ 93.774014][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'. [ 93.859391][ T6167] 9pnet_fd: Insufficient options for proto=fd [ 94.210153][ T6147] overlayfs: failed to get inode (-116) [ 94.216358][ T6147] overlayfs: failed to look up (file0) for ino (-116) [ 94.424304][ T6184] syz.2.94 uses obsolete (PF_INET,SOCK_PACKET) [ 95.135724][ T6191] netlink: 47 bytes leftover after parsing attributes in process `syz.0.97'. [ 96.018180][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 96.069945][ T29] audit: type=1326 audit(1734971875.880:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.0.102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fced7b85d29 code=0x0 [ 97.185181][ T6216] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.331064][ T6219] 9pnet_fd: Insufficient options for proto=fd [ 97.427609][ T6220] netlink: 36 bytes leftover after parsing attributes in process `syz.1.106'. [ 97.444339][ T6223] gfs2: not a GFS2 filesystem [ 97.971303][ T6223] No such timeout policy "syz0" [ 100.342926][ T6241] Zero length message leads to an empty skb [ 100.349064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.442486][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.114'. [ 101.092736][ T6261] syz.1.120: attempt to access beyond end of device [ 101.092736][ T6261] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 101.107991][ T6261] syz.1.120: attempt to access beyond end of device [ 101.107991][ T6261] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 101.121210][ T6261] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 101.131218][ T6261] syz.1.120: attempt to access beyond end of device [ 101.131218][ T6261] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 101.144058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.153352][ T6261] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 101.164713][ T6261] syz.1.120: attempt to access beyond end of device [ 101.164713][ T6261] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 101.177926][ T6261] syz.1.120: attempt to access beyond end of device [ 101.177926][ T6261] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 101.191064][ T6261] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 101.201105][ T6261] syz.1.120: attempt to access beyond end of device [ 101.201105][ T6261] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 101.215448][ T6261] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 101.230051][ T6261] syz.1.120: attempt to access beyond end of device [ 101.230051][ T6261] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 101.243380][ T6261] syz.1.120: attempt to access beyond end of device [ 101.243380][ T6261] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 101.257168][ T6261] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 101.267468][ T6261] syz.1.120: attempt to access beyond end of device [ 101.267468][ T6261] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 101.281567][ T6261] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 101.290168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.301865][ T6261] syz.1.120: attempt to access beyond end of device [ 101.301865][ T6261] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 101.315010][ T6261] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 101.324944][ T6261] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 101.334702][ T6261] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 103.827572][ T6285] gfs2: not a GFS2 filesystem [ 103.896166][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 103.909330][ T6285] No such timeout policy "syz0" [ 104.898961][ T5840] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.068829][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 105.080753][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 105.094380][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 105.163344][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 105.216606][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 105.268741][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 105.351728][ T5840] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 105.365016][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.373335][ T5840] usb 2-1: Product: syz [ 105.377692][ T5840] usb 2-1: Manufacturer: syz [ 105.382466][ T5840] usb 2-1: SerialNumber: syz [ 105.394268][ T5840] usb 2-1: config 0 descriptor?? [ 105.526498][ T6317] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 105.733847][ T6317] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 105.746204][ T6317] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 105.759547][ T6317] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 105.761361][ T5840] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 105.780756][ T6317] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 106.517270][ T6317] bio_check_eod: 10 callbacks suppressed [ 106.517306][ T6317] syz.4.138: attempt to access beyond end of device [ 106.517306][ T6317] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 106.538373][ T6317] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 106.538857][ T5840] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110 [ 106.562932][ T6317] syz.4.138: attempt to access beyond end of device [ 106.562932][ T6317] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 106.581717][ T6317] syz.4.138: attempt to access beyond end of device [ 106.581717][ T6317] nbd4: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 106.595076][ T6317] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 106.605340][ T6317] syz.4.138: attempt to access beyond end of device [ 106.605340][ T6317] nbd4: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 106.618566][ T6317] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 106.892203][ T6317] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 107.229962][ T5840] usb 2-1: USB disconnect, device number 2 [ 107.240142][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.141'. [ 108.775235][ T6353] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 111.734221][ T6377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.156'. [ 112.962793][ T6388] syz.1.160: attempt to access beyond end of device [ 112.962793][ T6388] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 112.975598][ T6388] hpfs: hpfs_map_sector(): read error [ 114.635202][ T6410] overlayfs: failed to resolve './file1': -2 [ 115.048871][ T5913] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 115.234450][ T5913] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.248508][ T5913] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.757874][ T6429] syz.4.175: attempt to access beyond end of device [ 115.757874][ T6429] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 115.770648][ T6429] hpfs: hpfs_map_sector(): read error [ 115.790591][ T5913] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 115.800073][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 115.808311][ T5913] usb 3-1: SerialNumber: syz [ 116.065767][ T5913] usb 3-1: 0:2 : does not exist [ 116.268871][ T5840] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.369173][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 116.539573][ T5840] usb 2-1: device descriptor read/64, error -32 [ 116.828979][ T5840] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.081683][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 117.102337][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 117.118741][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 117.130350][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 117.141551][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 117.153005][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.198751][ T5840] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 117.208178][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.217120][ T5840] usb 2-1: Product: syz [ 117.224444][ T5840] usb 2-1: Manufacturer: syz [ 117.245914][ T5840] usb 2-1: SerialNumber: syz [ 117.590361][ T5840] usb 2-1: config 0 descriptor?? [ 117.914575][ T5840] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 117.941238][ C1] usb 2-1: appledisplay_complete - usb_submit_urb failed with result -1 [ 117.974676][ T5840] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110 [ 118.428959][ T5840] usb 3-1: USB disconnect, device number 3 [ 118.444071][ T5884] usb 2-1: USB disconnect, device number 4 [ 118.608582][ T6467] overlayfs: failed to resolve './file1': -2 [ 120.185262][ T6480] netlink: 36 bytes leftover after parsing attributes in process `syz.0.190'. [ 122.057648][ T6506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.196'. [ 123.458969][ T5882] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 123.657644][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 123.770737][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.802122][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 123.888694][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 123.908860][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 123.928503][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.945696][ T5882] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 123.954976][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.963050][ T5882] usb 3-1: Product: syz [ 123.968212][ T5882] usb 3-1: Manufacturer: syz [ 123.972965][ T5882] usb 3-1: SerialNumber: syz [ 123.982105][ T5882] usb 3-1: config 0 descriptor?? [ 124.248995][ T5882] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 124.261408][ T5882] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 124.386938][ T9] usb 3-1: USB disconnect, device number 4 [ 124.519187][ T6518] overlayfs: failed to resolve './file1': -2 [ 126.291260][ T6548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.208'. [ 127.509090][ T6556] netlink: 47 bytes leftover after parsing attributes in process `syz.0.214'. [ 129.057060][ T5840] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.497549][ T29] audit: type=1800 audit(1734971909.300:7): pid=6586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.223" name="bus" dev="overlay" ino=254 res=0 errno=0 [ 129.518390][ T5840] usb 1-1: Using ep0 maxpacket: 8 [ 129.534230][ T5840] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 129.692676][ T5840] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 129.860687][ T5840] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 129.973358][ T5840] usb 1-1: Product: syz [ 130.179146][ T5840] usb 1-1: Manufacturer: syz [ 130.184298][ T5840] usb 1-1: SerialNumber: syz [ 130.410834][ T6592] overlayfs: failed to resolve './file1': -2 [ 130.430142][ T5840] usb 1-1: Handspring Visor / Palm OS: port 189, is for unknown use [ 130.538773][ T5840] usb 1-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 130.667684][ T5840] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 131.429073][ T5840] usb 1-1: palm_os_3_probe - error -110 getting bytes available request [ 131.460434][ T6596] block device autoloading is deprecated and will be removed. [ 131.476966][ T5840] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 131.502248][ T5840] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 131.549165][ T6595] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 131.590727][ T5840] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 132.330626][ T6612] netlink: 47 bytes leftover after parsing attributes in process `syz.3.230'. [ 132.405973][ T6617] x_tables: ip_tables: osf match: only valid for protocol 6 [ 132.789072][ T29] audit: type=1326 audit(1734971912.510:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3e185d29 code=0x7ffc0000 [ 133.195311][ T29] audit: type=1326 audit(1734971912.510:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3e185d29 code=0x7ffc0000 [ 133.248728][ T29] audit: type=1326 audit(1734971912.570:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f2a3e185d29 code=0x7ffc0000 [ 133.291729][ T29] audit: type=1326 audit(1734971912.580:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3e185d29 code=0x7ffc0000 [ 133.293758][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.330502][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.339667][ T25] usb 1-1: USB disconnect, device number 2 [ 133.344916][ T29] audit: type=1326 audit(1734971912.580:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3e185d29 code=0x7ffc0000 [ 133.398691][ T29] audit: type=1326 audit(1734971912.630:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2a3e185d29 code=0x7ffc0000 [ 133.448699][ T29] audit: type=1326 audit(1734971912.810:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3e185d29 code=0x7ffc0000 [ 133.460359][ T25] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 133.515077][ T29] audit: type=1326 audit(1734971912.810:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3e185d29 code=0x7ffc0000 [ 133.528692][ T5841] Bluetooth: hci0: command 0x0c20 tx timeout [ 133.599109][ T25] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 133.617683][ T25] visor 1-1:1.0: device disconnected [ 133.876111][ T6632] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 134.335169][ T6639] overlayfs: failed to resolve './file1': -2 [ 135.096802][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'. [ 135.795184][ T6643] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 135.828732][ T5914] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 135.992516][ T5914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.016952][ T5914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.047528][ T5914] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 136.070684][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 136.334881][ T5914] usb 2-1: SerialNumber: syz [ 136.459308][ T6658] x_tables: ip_tables: osf match: only valid for protocol 6 [ 136.641933][ T5914] usb 2-1: 0:2 : does not exist [ 136.726748][ T5914] usb 2-1: unit 5 not found! [ 137.358892][ T5841] Bluetooth: hci0: command 0x0c20 tx timeout [ 137.545010][ T6666] netlink: 64 bytes leftover after parsing attributes in process `syz.0.244'. [ 138.641309][ T25] usb 2-1: USB disconnect, device number 5 [ 138.656706][ T6674] 9pnet_fd: Insufficient options for proto=fd [ 139.108906][ T5840] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 139.339912][ T5840] usb 4-1: Using ep0 maxpacket: 8 [ 139.359635][ T5840] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 139.387877][ T5840] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 139.402456][ T5840] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 139.405243][ T6690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.253'. [ 139.411275][ T5840] usb 4-1: Product: syz [ 139.424872][ T5840] usb 4-1: Manufacturer: syz [ 139.429690][ T5840] usb 4-1: SerialNumber: syz [ 139.640847][ T5840] usb 4-1: Handspring Visor / Palm OS: port 189, is for unknown use [ 139.665109][ T5840] usb 4-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 139.684793][ T5840] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 140.066844][ T5840] usb 4-1: palm_os_3_probe - error -110 getting bytes available request [ 140.904980][ T5840] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 140.939439][ T5840] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 140.957573][ T5840] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 141.018837][ T6708] netlink: 64 bytes leftover after parsing attributes in process `syz.0.257'. [ 141.307082][ T6690] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 141.439027][ T5841] Bluetooth: hci0: command 0x0c20 tx timeout [ 141.836324][ T6717] 9pnet_fd: Insufficient options for proto=fd [ 142.720270][ T5914] usb 4-1: USB disconnect, device number 3 [ 142.769340][ T5914] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 143.168114][ T5914] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 143.178130][ T5914] visor 4-1:1.0: device disconnected [ 144.350250][ T6757] 9pnet_fd: Insufficient options for proto=fd [ 145.656999][ T6761] netlink: 47 bytes leftover after parsing attributes in process `syz.4.276'. [ 146.212662][ T6788] fuse: Bad value for 'fd' [ 146.224624][ T6784] netlink: 48 bytes leftover after parsing attributes in process `syz.2.284'. [ 148.086221][ T6799] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 148.092922][ T6799] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 148.101465][ T6799] vhci_hcd vhci_hcd.0: Device attached [ 148.190024][ T6809] vhci_hcd: connection closed [ 148.194659][ T3006] vhci_hcd: stop threads [ 148.205499][ T3006] vhci_hcd: release socket [ 148.212538][ T3006] vhci_hcd: disconnect device [ 148.218075][ T5841] Bluetooth: hci4: unexpected event for opcode 0x00ff [ 148.270347][ T6808] overlayfs: failed to resolve './file0': -40 [ 148.350764][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.293'. [ 148.997172][ T6827] x_tables: ip_tables: osf match: only valid for protocol 6 [ 149.166167][ T6818] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 150.069906][ T6832] netlink: 48 bytes leftover after parsing attributes in process `syz.4.298'. [ 150.400430][ T5841] Bluetooth: hci0: command 0x0c20 tx timeout [ 150.898791][ T5882] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 151.068880][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 151.087148][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 151.167471][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 151.261863][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 151.362436][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 151.477965][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.636475][ T5882] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 151.653353][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.665138][ T5882] usb 1-1: Product: syz [ 151.673482][ T5882] usb 1-1: Manufacturer: syz [ 151.678239][ T5882] usb 1-1: SerialNumber: syz [ 151.911419][ T5882] usb 1-1: config 0 descriptor?? [ 152.538744][ T5882] appledisplay 1-1:0.0: Error while getting initial brightness: -110 [ 152.569799][ T5882] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -110 [ 152.621227][ T5882] usb 1-1: USB disconnect, device number 3 [ 155.206667][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.309'. [ 155.886195][ T6886] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 155.894316][ T6886] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 155.902922][ T6886] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 155.910748][ T6886] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 156.399149][ T6876] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 157.248927][ T5914] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 157.318712][ T5841] Bluetooth: hci0: command 0x0c20 tx timeout [ 157.591322][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 157.615252][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.626083][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 157.658780][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 157.684769][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 157.702442][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.815107][ T5914] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 157.839369][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.877860][ T5914] usb 3-1: Product: syz [ 157.897985][ T5914] usb 3-1: Manufacturer: syz [ 157.913088][ T5914] usb 3-1: SerialNumber: syz [ 158.046068][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 158.736813][ T5914] usb 3-1: config 0 descriptor?? [ 159.005084][ T5914] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 159.074145][ T5914] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 159.252414][ T5886] usb 3-1: USB disconnect, device number 5 [ 159.353024][ T6918] x_tables: ip_tables: osf match: only valid for protocol 6 [ 160.688716][ T5886] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 160.872988][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 160.896628][ T5886] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 160.939689][ T5886] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 160.964855][ T5886] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 160.984806][ T5886] usb 4-1: Product: syz [ 160.995872][ T5886] usb 4-1: Manufacturer: syz [ 161.011342][ T5886] usb 4-1: SerialNumber: syz [ 161.269554][ T5886] usb 4-1: Handspring Visor / Palm OS: port 189, is for unknown use [ 161.279010][ T5886] usb 4-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 161.286865][ T5886] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 162.038727][ T5886] usb 4-1: palm_os_3_probe - error -110 getting bytes available request [ 162.047182][ T5886] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 162.471162][ T5886] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 162.529058][ T5886] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 163.241148][ T6969] x_tables: ip_tables: osf match: only valid for protocol 6 [ 164.030370][ T6972] netlink: 47 bytes leftover after parsing attributes in process `syz.2.339'. [ 164.548891][ T5886] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 164.720549][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 164.812687][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.930495][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 164.964968][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 165.001347][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 165.024691][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.068967][ T25] usb 4-1: USB disconnect, device number 4 [ 165.077325][ T25] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 165.103677][ T5886] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 165.143428][ T25] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 165.173160][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.210619][ T5886] usb 2-1: Product: syz [ 165.215479][ T25] visor 4-1:1.0: device disconnected [ 165.238253][ T5886] usb 2-1: Manufacturer: syz [ 165.281070][ T5886] usb 2-1: SerialNumber: syz [ 165.323226][ T5886] usb 2-1: config 0 descriptor?? [ 165.720860][ T5886] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 165.731877][ T5886] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110 [ 165.844794][ T7001] netlink: 64 bytes leftover after parsing attributes in process `syz.0.351'. [ 165.955968][ T5886] usb 2-1: USB disconnect, device number 6 [ 167.081137][ T7013] netlink: 76 bytes leftover after parsing attributes in process `syz.1.356'. [ 167.305110][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 168.119924][ T29] audit: type=1326 audit(1734971947.880:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7020 comm="syz.3.359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90bd585d29 code=0x0 [ 169.131420][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 169.780221][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.790677][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.801644][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 169.931388][ T7036] syz.4.365: attempt to access beyond end of device [ 169.931388][ T7036] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 169.944255][ T7036] syz.4.365: attempt to access beyond end of device [ 169.944255][ T7036] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 169.957234][ T7036] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 169.966885][ T7036] syz.4.365: attempt to access beyond end of device [ 169.966885][ T7036] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 169.978793][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 170.742653][ T9] usb 2-1: SerialNumber: syz [ 170.874381][ T7036] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 170.884686][ T7036] syz.4.365: attempt to access beyond end of device [ 170.884686][ T7036] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 170.897562][ T7036] syz.4.365: attempt to access beyond end of device [ 170.897562][ T7036] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 170.910441][ T7036] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 170.920144][ T7036] syz.4.365: attempt to access beyond end of device [ 170.920144][ T7036] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 170.933083][ T7036] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 170.943714][ T7036] syz.4.365: attempt to access beyond end of device [ 170.943714][ T7036] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 170.956598][ T7036] syz.4.365: attempt to access beyond end of device [ 170.956598][ T7036] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 170.969551][ T7036] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 170.980199][ T7036] syz.4.365: attempt to access beyond end of device [ 170.980199][ T7036] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 170.993194][ T7036] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 171.003056][ T7036] syz.4.365: attempt to access beyond end of device [ 171.003056][ T7036] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 171.015925][ T7036] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 171.025575][ T7036] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 171.035072][ T7036] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 171.125784][ T9] usb 2-1: 0:2 : does not exist [ 171.189876][ T9] usb 2-1: USB disconnect, device number 7 [ 171.234770][ T7049] netlink: 76 bytes leftover after parsing attributes in process `syz.2.368'. [ 172.199032][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.329243][ T29] audit: type=1326 audit(1734971952.110:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.0.373" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fced7b85d29 code=0x0 [ 174.533157][ T7077] x_tables: ip_tables: osf match: only valid for protocol 6 [ 175.640004][ T7090] bio_check_eod: 2 callbacks suppressed [ 175.640017][ T7090] syz.4.380: attempt to access beyond end of device [ 175.640017][ T7090] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 175.658875][ T7090] syz.4.380: attempt to access beyond end of device [ 175.658875][ T7090] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 175.671684][ T7090] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 175.681355][ T7090] syz.4.380: attempt to access beyond end of device [ 175.681355][ T7090] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 175.694266][ T7090] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 175.704126][ T7090] syz.4.380: attempt to access beyond end of device [ 175.704126][ T7090] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 175.716981][ T7090] syz.4.380: attempt to access beyond end of device [ 175.716981][ T7090] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 175.729875][ T7090] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 175.739454][ T7090] syz.4.380: attempt to access beyond end of device [ 175.739454][ T7090] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 175.752374][ T7090] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 175.762145][ T7090] syz.4.380: attempt to access beyond end of device [ 175.762145][ T7090] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 175.775005][ T7090] syz.4.380: attempt to access beyond end of device [ 175.775005][ T7090] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 175.787912][ T7090] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 175.797577][ T7090] syz.4.380: attempt to access beyond end of device [ 175.797577][ T7090] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 175.810480][ T7090] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 175.820227][ T7090] syz.4.380: attempt to access beyond end of device [ 175.820227][ T7090] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 175.833043][ T7090] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 175.842667][ T7090] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 175.852148][ T7090] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 177.037207][ T29] audit: type=1326 audit(1734971956.840:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.4.386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a3e185d29 code=0x0 [ 179.593320][ T7128] x_tables: ip_tables: osf match: only valid for protocol 6 [ 180.874876][ T7133] dvmrp0: entered allmulticast mode [ 180.876185][ T7133] dvmrp0: left allmulticast mode [ 181.479779][ T7131] tty tty4: ldisc open failed (-12), clearing slot 3 [ 181.608653][ T7138] bio_check_eod: 2 callbacks suppressed [ 181.608671][ T7138] syz.4.391: attempt to access beyond end of device [ 181.608671][ T7138] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 181.632797][ T7138] syz.4.391: attempt to access beyond end of device [ 181.632797][ T7138] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 181.647523][ T7138] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 181.662675][ T7138] syz.4.391: attempt to access beyond end of device [ 181.662675][ T7138] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 181.676241][ T7138] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 181.775955][ T7138] syz.4.391: attempt to access beyond end of device [ 181.775955][ T7138] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 181.789910][ T7138] syz.4.391: attempt to access beyond end of device [ 181.789910][ T7138] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 181.819100][ T7138] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 181.830339][ T7138] syz.4.391: attempt to access beyond end of device [ 181.830339][ T7138] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 181.849019][ T7138] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 181.868502][ T7138] syz.4.391: attempt to access beyond end of device [ 181.868502][ T7138] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 181.892130][ T7138] syz.4.391: attempt to access beyond end of device [ 181.892130][ T7138] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 181.908092][ T7138] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 181.918313][ T7138] syz.4.391: attempt to access beyond end of device [ 181.918313][ T7138] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 182.458865][ T7138] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 182.470882][ T7138] syz.4.391: attempt to access beyond end of device [ 182.470882][ T7138] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 182.489034][ T7138] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 182.501840][ T7138] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 182.511670][ T7138] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 183.678142][ T7161] tipc: Started in network mode [ 183.684310][ T7161] tipc: Node identity f6c4e6bd3017, cluster identity 4711 [ 183.696035][ T7161] tipc: Enabled bearer , priority 0 [ 184.137285][ T29] audit: type=1326 audit(1734971963.940:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.1.398" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5527585d29 code=0x0 [ 185.470619][ T25] tipc: Node number set to 3335775933 [ 185.696408][ T7179] x_tables: ip_tables: osf match: only valid for protocol 6 [ 188.618215][ T7193] gfs2: not a GFS2 filesystem [ 189.462465][ T7198] overlayfs: missing 'lowerdir' [ 190.744284][ T7225] x_tables: ip_tables: osf match: only valid for protocol 6 [ 191.493098][ T7224] netlink: 47 bytes leftover after parsing attributes in process `syz.4.416'. [ 191.773189][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 191.779378][ T5841] Bluetooth: hci0: command 0x0c20 tx timeout [ 191.785416][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 191.792113][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 192.240126][ T7240] gfs2: not a GFS2 filesystem [ 192.966133][ T7242] overlayfs: missing 'lowerdir' [ 194.974019][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.980463][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.088930][ T7271] x_tables: ip_tables: osf match: only valid for protocol 6 [ 196.133749][ T7285] dvmrp0: entered allmulticast mode [ 196.140201][ T7285] dvmrp0: left allmulticast mode [ 196.978446][ T7292] overlayfs: missing 'lowerdir' [ 197.069912][ T7297] gfs2: not a GFS2 filesystem [ 198.170510][ T7304] 9pnet: Could not find request transport: fd0x0000000000000004 [ 198.387278][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'. [ 199.596583][ T7327] x_tables: ip_tables: osf match: only valid for protocol 6 [ 201.597398][ T7346] dvmrp0: entered allmulticast mode [ 201.802441][ T7346] dvmrp0: left allmulticast mode [ 202.317829][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'. [ 202.382121][ T7355] 9pnet_fd: Insufficient options for proto=fd [ 202.394696][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 202.513226][ T7349] bridge_slave_1: left allmulticast mode [ 202.521016][ T7349] bridge_slave_1: left promiscuous mode [ 202.527790][ T7359] loop2: detected capacity change from 0 to 7 [ 202.559051][ T7359] Dev loop2: unable to read RDB block 7 [ 202.564911][ T7359] loop2: AHDI p1 [ 202.568816][ T7359] loop2: partition table partially beyond EOD, truncated [ 202.584123][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.068731][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.455'. [ 203.774443][ T7349] bridge_slave_0: left allmulticast mode [ 203.809514][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 203.839018][ T7349] bridge_slave_0: left promiscuous mode [ 203.869530][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.274311][ T7368] x_tables: ip_tables: osf match: only valid for protocol 6 [ 206.128763][ T5914] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 206.379977][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 206.392315][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 206.403225][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 206.415526][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 206.427139][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 206.438462][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.471485][ T5914] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 206.480755][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.488928][ T5914] usb 3-1: Product: syz [ 206.493118][ T5914] usb 3-1: Manufacturer: syz [ 206.497729][ T5914] usb 3-1: SerialNumber: syz [ 206.842442][ T5914] usb 3-1: config 0 descriptor?? [ 207.193258][ T5914] appledisplay 3-1:0.0: Error while getting initial brightness: -71 [ 207.211500][ T5914] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -71 [ 207.265167][ T5914] usb 3-1: USB disconnect, device number 6 [ 208.346110][ T7400] 9pnet_fd: Insufficient options for proto=fd [ 212.585814][ T7437] 9pnet_fd: Insufficient options for proto=fd [ 217.015346][ T7484] 9pnet_fd: Insufficient options for proto=fd [ 218.220861][ T7502] mmap: syz.3.499 (7502) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 218.298110][ T7506] netlink: 47 bytes leftover after parsing attributes in process `syz.0.501'. [ 219.775773][ T7525] 9pnet_fd: Insufficient options for proto=fd [ 220.730924][ T7545] dvmrp0: entered allmulticast mode [ 220.787426][ T7545] dvmrp0: left allmulticast mode [ 221.477867][ T7557] xt_policy: too many policy elements [ 221.568871][ T5840] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 221.738237][ T5840] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.841874][ T5840] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.932147][ T5840] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 222.005857][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 222.075038][ T5840] usb 1-1: SerialNumber: syz [ 222.476783][ T7576] loop2: detected capacity change from 0 to 7 [ 223.087876][ T7576] Dev loop2: unable to read RDB block 7 [ 223.093544][ T7576] loop2: AHDI p1 [ 223.097206][ T7576] loop2: partition table partially beyond EOD, truncated [ 223.097316][ T5840] usb 1-1: 0:2 : does not exist [ 223.178081][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 223.614360][ T910] usb 1-1: USB disconnect, device number 4 [ 223.904104][ T29] audit: type=1326 audit(1734972003.710:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bd585d29 code=0x7ffc0000 [ 223.945862][ T29] audit: type=1326 audit(1734972003.710:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bd585d29 code=0x7ffc0000 [ 224.028375][ T29] audit: type=1326 audit(1734972003.710:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f90bd585d29 code=0x7ffc0000 [ 224.064700][ T29] audit: type=1326 audit(1734972003.780:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bd585d29 code=0x7ffc0000 [ 224.149661][ T29] audit: type=1326 audit(1734972003.780:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bd585d29 code=0x7ffc0000 [ 224.455073][ T7608] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 224.463655][ T7608] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 224.472252][ T7608] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 226.322041][ T7622] loop2: detected capacity change from 0 to 7 [ 226.353806][ T7622] Dev loop2: unable to read RDB block 7 [ 226.359648][ T7622] loop2: AHDI p1 [ 226.363420][ T7622] loop2: partition table partially beyond EOD, truncated [ 227.132511][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 229.708779][ T5840] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 229.873043][ T5840] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.949268][ T5840] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.005403][ T5840] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 230.137634][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 230.242669][ T5840] usb 1-1: SerialNumber: syz [ 230.531341][ T5840] usb 1-1: 0:2 : does not exist [ 230.932192][ T5840] usb 1-1: USB disconnect, device number 5 [ 233.031649][ T7700] bridge_slave_0: left allmulticast mode [ 233.082148][ T7700] bridge_slave_0: left promiscuous mode [ 233.088064][ T7700] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.127955][ T7700] bridge_slave_1: left allmulticast mode [ 233.179229][ T7700] bridge_slave_1: left promiscuous mode [ 233.187783][ T7700] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.290739][ T7700] bond0: (slave bond_slave_0): Releasing backup interface [ 233.313346][ T7700] bond0: (slave bond_slave_1): Releasing backup interface [ 233.371065][ T7700] team0: Port device team_slave_0 removed [ 233.403680][ T7700] team0: Port device team_slave_1 removed [ 233.419351][ T7700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.426786][ T7700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.453772][ T7700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.488939][ T7700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.582779][ T7702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.626754][ T7702] bond0: (slave ipip0): The slave device specified does not support setting the MAC address [ 233.648345][ T7702] bond0: (slave ipip0): Error -95 calling set_mac_address [ 233.923916][ T7713] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 236.647874][ T7747] x_tables: ip_tables: osf match: only valid for protocol 6 [ 238.517523][ T7764] trusted_key: encrypted_key: insufficient parameters specified [ 245.788803][ T5886] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 245.929338][ T29] audit: type=1326 audit(1734972025.730:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5527585d29 code=0x7fc00000 [ 245.951413][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.957645][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 245.970409][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short [ 245.984152][ T5886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.995170][ T5886] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.009906][ T5886] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.019282][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.027464][ T5886] usb 3-1: Product: syz [ 246.040910][ T5886] usb 3-1: Manufacturer: syz [ 246.045689][ T5886] usb 3-1: SerialNumber: syz [ 246.272831][ T5886] usb 3-1: 0:3 : does not exist [ 246.290526][ T5886] usb 3-1: 0:132 : does not exist [ 246.321170][ T5886] usb 3-1: USB disconnect, device number 7 [ 246.533369][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.649008][ T29] audit: type=1326 audit(1734972026.410:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5527585d29 code=0x7fc00000 [ 247.180564][ T7855] gfs2: not a GFS2 filesystem [ 247.187663][ T7855] No such timeout policy "syz0" [ 248.832371][ T7870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.607'. [ 249.848867][ T7870] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 250.958893][ T5836] Bluetooth: hci0: command 0x0c20 tx timeout [ 251.583584][ T7905] gfs2: not a GFS2 filesystem [ 251.731434][ T7905] No such timeout policy "syz0" [ 253.469994][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.620'. [ 253.753578][ T7926] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 254.307103][ T7921] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 254.643215][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.651917][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.660161][ T5886] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 254.820204][ T5886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.836649][ T5886] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.862156][ T5886] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 254.873888][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 254.888422][ T5886] usb 3-1: SerialNumber: syz [ 255.108028][ T5886] usb 3-1: 0:2 : does not exist [ 255.517629][ T5840] usb 3-1: USB disconnect, device number 8 [ 255.523706][ T5836] Bluetooth: hci0: command 0x0c20 tx timeout [ 256.809028][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.815359][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.370846][ T7976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.636'. [ 258.214925][ T7976] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 259.175802][ T8003] netlink: 'syz.3.644': attribute type 9 has an invalid length. [ 259.184077][ T8003] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.644'. [ 259.572679][ T7992] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 260.067218][ T8013] bond0: (slave bond_slave_0): Releasing backup interface [ 260.085857][ T8013] bond0: (slave bond_slave_1): Releasing backup interface [ 260.223936][ T8016] loop2: detected capacity change from 0 to 7 [ 260.233249][ T8016] Dev loop2: unable to read RDB block 7 [ 260.239030][ T8016] loop2: AHDI p1 [ 260.242870][ T8016] loop2: partition table partially beyond EOD, truncated [ 260.552589][ T8013] team0: Port device team_slave_0 removed [ 260.832460][ T8013] team0: Port device team_slave_1 removed [ 260.974604][ T8013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.999952][ T8013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.137136][ T8013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.144764][ T8013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.268498][ T8028] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 262.310760][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 262.360232][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 262.377054][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 262.472175][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.557211][ T5833] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 262.575379][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 263.817475][ T8020] chnl_net:caif_netlink_parms(): no params data found [ 264.176402][ T8020] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.203343][ T8020] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.229013][ T8020] bridge_slave_0: entered allmulticast mode [ 264.238914][ T8020] bridge_slave_0: entered promiscuous mode [ 264.260472][ T8020] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.288567][ T8020] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.308376][ T8020] bridge_slave_1: entered allmulticast mode [ 264.319768][ T8020] bridge_slave_1: entered promiscuous mode [ 264.393704][ T8051] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.412662][ T8020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.424854][ T8020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.432367][ T5882] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 264.499271][ T8020] team0: Port device team_slave_0 added [ 264.517220][ T8020] team0: Port device team_slave_1 added [ 264.614039][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.634106][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.650808][ T8020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.657866][ T8020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.674826][ T5882] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 264.694501][ T8020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.725849][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.735939][ T8020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.750241][ T5882] usb 3-1: config 0 descriptor?? [ 264.762064][ T8020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.847888][ T8020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.886477][ T5833] Bluetooth: hci5: command tx timeout [ 264.992817][ T8020] hsr_slave_0: entered promiscuous mode [ 265.018535][ T8020] hsr_slave_1: entered promiscuous mode [ 265.034563][ T8020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.044677][ T8020] Cannot create hsr debugfs directory [ 265.278261][ T5882] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 265.368488][ T5882] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 265.528758][ T5882] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 265.542506][ T5882] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 265.579472][ T5882] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 265.629219][ T5882] usb 3-1: USB disconnect, device number 9 [ 265.651273][ T8020] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 265.664405][ T5882] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 265.715370][ T8020] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 265.761596][ T8020] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 265.791121][ T8020] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 266.957047][ T8020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.965592][ T8080] netlink: 47 bytes leftover after parsing attributes in process `syz.0.667'. [ 266.989604][ T5833] Bluetooth: hci5: command tx timeout [ 267.087849][ T8084] overlayfs: failed to resolve './file1': -2 [ 267.546620][ T8020] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.576466][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.583623][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.651719][ T8020] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 267.662199][ T8020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.682280][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.689424][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.854650][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.673'. [ 268.117120][ T8020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.653094][ T8113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.676'. [ 269.530231][ T5833] Bluetooth: hci5: command tx timeout [ 270.053797][ T8122] overlayfs: failed to resolve './file1': -2 [ 270.357367][ T8020] veth0_vlan: entered promiscuous mode [ 270.419497][ T8020] veth1_vlan: entered promiscuous mode [ 270.507712][ T8020] veth0_macvtap: entered promiscuous mode [ 270.532118][ T8020] veth1_macvtap: entered promiscuous mode [ 270.588078][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.598768][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.608773][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.619834][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.630018][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.641004][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.657131][ T8020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.677406][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.688011][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.697987][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.708571][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.718850][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.810786][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.822398][ T8020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.832204][ T8020] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.840978][ T8020] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.849709][ T8020] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.858410][ T8020] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.599365][ T5833] Bluetooth: hci5: command tx timeout [ 271.614339][ T262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.659224][ T262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.697256][ T262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.707027][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 271.727864][ T262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.901582][ T8164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.689'. [ 273.710360][ T8161] (syz.5.649,8161,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 273.727504][ T8161] (syz.5.649,8161,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 274.054227][ T8178] x_tables: ip_tables: osf match: only valid for protocol 6 [ 274.720707][ T29] audit: type=1326 audit(1734972053.770:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.0.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced7b85d29 code=0x7ffc0000 [ 274.757834][ T29] audit: type=1326 audit(1734972053.770:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.0.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced7b85d29 code=0x7ffc0000 [ 274.998679][ T29] audit: type=1326 audit(1734972053.770:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.0.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fced7b85d29 code=0x7ffc0000 [ 275.548752][ T5882] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 275.562528][ T29] audit: type=1326 audit(1734972053.770:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.0.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced7b85d29 code=0x7ffc0000 [ 275.653412][ T8181] overlayfs: failed to resolve './file1': -2 [ 275.655094][ T29] audit: type=1326 audit(1734972053.770:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.0.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced7b85d29 code=0x7ffc0000 [ 275.691245][ T29] audit: type=1326 audit(1734972053.770:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.0.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fced7b85d29 code=0x7ffc0000 [ 275.713227][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.719454][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 275.724676][ T29] audit: type=1326 audit(1734972055.220:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.0.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced7b85d29 code=0x7ffc0000 [ 275.747370][ T29] audit: type=1326 audit(1734972055.220:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.0.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced7b85d29 code=0x7ffc0000 [ 275.768210][ T5882] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 275.788744][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.841309][ T5882] usb 4-1: Product: syz [ 275.870275][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.696'. [ 275.902181][ T5882] usb 4-1: Manufacturer: syz [ 275.947011][ T5882] usb 4-1: SerialNumber: syz [ 276.200777][ T5882] usb 4-1: config 0 descriptor?? [ 276.431476][ T5882] appledisplay 4-1:0.0: Could not find int-in endpoint [ 276.480621][ T5882] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 277.735976][ T910] usb 4-1: USB disconnect, device number 5 [ 278.165519][ T8207] netlink: 24 bytes leftover after parsing attributes in process `syz.5.701'. [ 283.889409][ T8245] loop2: detected capacity change from 0 to 7 [ 284.213203][ T8245] Dev loop2: unable to read RDB block 7 [ 284.218988][ T8245] loop2: AHDI p1 [ 284.222781][ T8245] loop2: partition table partially beyond EOD, truncated [ 285.678832][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 285.908871][ T5883] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 285.969411][ T8261] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 286.078846][ T5883] usb 6-1: device descriptor read/64, error -71 [ 287.546094][ T8275] netlink: 'syz.1.721': attribute type 9 has an invalid length. [ 287.554023][ T8275] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.721'. [ 287.891566][ T29] audit: type=1326 audit(1734972067.650:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced7b85d29 code=0x7ffc0000 [ 288.042420][ T29] audit: type=1326 audit(1734972067.650:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced7b85d29 code=0x7ffc0000 [ 288.172153][ T5883] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 288.190338][ T29] audit: type=1326 audit(1734972067.650:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fced7b85d29 code=0x7ffc0000 [ 288.213740][ T29] audit: type=1326 audit(1734972067.650:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced7b85d29 code=0x7ffc0000 [ 288.237931][ T29] audit: type=1326 audit(1734972067.650:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced7b85d29 code=0x7ffc0000 [ 288.341685][ T29] audit: type=1326 audit(1734972067.650:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fced7b85d29 code=0x7ffc0000 [ 288.850879][ T29] audit: type=1326 audit(1734972067.680:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced7b85d29 code=0x7ffc0000 [ 289.057813][ T29] audit: type=1326 audit(1734972067.680:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced7b85d29 code=0x7ffc0000 [ 289.242000][ T8297] loop2: detected capacity change from 0 to 7 [ 289.251621][ T8297] Dev loop2: unable to read RDB block 7 [ 289.258273][ T8297] loop2: AHDI p1 [ 289.262080][ T8297] loop2: partition table partially beyond EOD, truncated [ 290.089023][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 290.973607][ T8306] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 292.032681][ T8317] netlink: 'syz.0.735': attribute type 9 has an invalid length. [ 292.040437][ T8317] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.735'. [ 292.538966][ T5886] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 292.957450][ T5886] usb 6-1: device descriptor read/64, error -71 [ 293.081921][ T8327] block device autoloading is deprecated and will be removed. [ 293.308423][ T5886] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 293.532575][ T5886] usb 6-1: device descriptor read/64, error -71 [ 293.681065][ T5886] usb usb6-port1: attempt power cycle [ 294.798824][ T5886] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 294.886067][ T29] audit: type=1326 audit(1734972074.670:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b63785d29 code=0x7ffc0000 [ 295.102228][ T5886] usb 6-1: device not accepting address 6, error -71 [ 295.119684][ T29] audit: type=1326 audit(1734972074.670:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b63785d29 code=0x7ffc0000 [ 295.142121][ T29] audit: type=1326 audit(1734972074.670:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f6b63785d29 code=0x7ffc0000 [ 295.164347][ T29] audit: type=1326 audit(1734972074.670:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b63785d29 code=0x7ffc0000 [ 295.186651][ T29] audit: type=1326 audit(1734972074.670:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b63785d29 code=0x7ffc0000 [ 295.255427][ T29] audit: type=1326 audit(1734972074.670:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6b63785d29 code=0x7ffc0000 [ 296.011972][ T29] audit: type=1326 audit(1734972074.690:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b63785d29 code=0x7ffc0000 [ 296.034240][ T29] audit: type=1326 audit(1734972074.690:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b63785d29 code=0x7ffc0000 [ 298.063782][ T8381] dvmrp0: entered allmulticast mode [ 298.080859][ T8381] dvmrp0: left allmulticast mode [ 300.989616][ T8409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.761'. [ 301.905973][ T8417] evm: overlay not supported [ 303.034022][ T3477] Bluetooth: (null): Too short H5 packet [ 303.118282][ T8429] dvmrp0: entered allmulticast mode [ 303.135596][ T8429] dvmrp0: left allmulticast mode [ 303.182566][ T3477] Bluetooth: (null): Invalid header checksum [ 303.560892][ T3477] Bluetooth: (null): Invalid header checksum [ 313.571251][ T8550] bridge_slave_0: left allmulticast mode [ 313.584314][ T8550] bridge_slave_0: left promiscuous mode [ 313.600021][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.625287][ T8550] bridge_slave_1: left allmulticast mode [ 313.638751][ T8550] bridge_slave_1: left promiscuous mode [ 313.650636][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.706571][ T8550] bond0: (slave bond_slave_0): Releasing backup interface [ 313.860697][ T8550] bond0: (slave bond_slave_1): Releasing backup interface [ 313.879979][ T8550] team0: Port device team_slave_0 removed [ 314.051996][ T8550] team0: Port device team_slave_1 removed [ 314.608362][ T8550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.648815][ T8550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.667193][ T8550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.698926][ T8550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.786218][ T8551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.809795][ T8551] bond0: (slave ipip0): The slave device specified does not support setting the MAC address [ 314.821016][ T8551] bond0: (slave ipip0): Error -95 calling set_mac_address [ 316.669259][ T8571] netlink: 'syz.0.810': attribute type 9 has an invalid length. [ 316.677081][ T8571] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.810'. [ 317.662706][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.669193][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.950369][ T8586] netlink: 36 bytes leftover after parsing attributes in process `syz.0.816'. [ 320.207474][ T8599] netlink: 'syz.5.819': attribute type 9 has an invalid length. [ 320.215235][ T8599] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.819'. [ 322.225681][ T29] audit: type=1326 audit(1734972102.020:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8608 comm="syz.5.823" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b63785d29 code=0x0 [ 322.247241][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.198960][ T8625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.213713][ T8625] bond0: (slave ipip0): The slave device specified does not support setting the MAC address [ 324.229926][ T8625] bond0: (slave ipip0): Error -95 calling set_mac_address [ 325.977430][ T8638] gfs2: not a GFS2 filesystem [ 325.983355][ T8638] No such timeout policy "syz0" [ 327.553875][ T8663] netlink: 48 bytes leftover after parsing attributes in process `syz.0.837'. [ 327.666963][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'. [ 333.759800][ T8721] netlink: 48 bytes leftover after parsing attributes in process `syz.2.851'. [ 333.775428][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.851'. [ 334.028732][ T910] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 335.132302][ T910] usb 4-1: Using ep0 maxpacket: 16 [ 336.549434][ T910] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 336.562544][ T910] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 336.575591][ T910] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 336.679471][ T910] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 337.915888][ T910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.924173][ T910] usb 4-1: Product: syz [ 337.925949][ T51] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 337.929343][ T910] usb 4-1: Manufacturer: syz [ 337.946923][ T910] usb 4-1: SerialNumber: syz [ 337.993939][ T910] usb 4-1: config 0 descriptor?? [ 338.130021][ T51] usb 6-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice=f5.87 [ 338.334567][ T51] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.678331][ T910] usb 4-1: can't set config #0, error -71 [ 338.686485][ T910] usb 4-1: USB disconnect, device number 6 [ 338.701547][ T51] usb 6-1: config 0 descriptor?? [ 338.710515][ T51] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input6 [ 339.357753][ T5193] bcm5974 6-1:0.0: could not read from device [ 339.589916][ T51] usb 6-1: USB disconnect, device number 8 [ 341.908947][ T8330] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 342.208786][ T8330] usb 4-1: Using ep0 maxpacket: 16 [ 342.308390][ T8330] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 342.435382][ T8330] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 342.704605][ T8330] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 342.719983][ T8330] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 342.729141][ T8330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.737240][ T8330] usb 4-1: Product: syz [ 342.742010][ T8330] usb 4-1: Manufacturer: syz [ 342.746642][ T8330] usb 4-1: SerialNumber: syz [ 342.792138][ T8330] usb 4-1: config 0 descriptor?? [ 343.209418][ T8330] appledisplay 4-1:0.0: Could not find int-in endpoint [ 343.242851][ T8330] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 344.040181][ T5886] usb 4-1: USB disconnect, device number 7 [ 344.328324][ T8817] overlayfs: missing 'lowerdir' [ 347.134961][ T29] audit: type=1326 audit(1734972126.480:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.5.882" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b63785d29 code=0x0 [ 348.251717][ T8846] netlink: 'syz.5.889': attribute type 3 has an invalid length. [ 348.259511][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.889'. [ 349.039744][ T8852] overlayfs: missing 'lowerdir' [ 349.630003][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 349.733910][ T8858] netlink: 47 bytes leftover after parsing attributes in process `syz.5.895'. [ 351.624610][ T8870] uprobe: syz.0.896:8870 failed to unregister, leaking uprobe [ 355.111567][ T8900] netlink: 'syz.5.905': attribute type 9 has an invalid length. [ 355.119350][ T8900] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.905'. [ 355.720538][ T8902] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 355.729435][ T8902] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 356.247329][ T29] audit: type=1326 audit(1734972135.670:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8903 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8e385d29 code=0x7ffc0000 [ 356.269668][ T29] audit: type=1326 audit(1734972135.670:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8903 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8e385d29 code=0x7ffc0000 [ 356.291733][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.332900][ T8911] bridge_slave_0: left allmulticast mode [ 356.338714][ T8911] bridge_slave_0: left promiscuous mode [ 356.344507][ T29] audit: type=1326 audit(1734972135.670:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8903 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f4f8e385d29 code=0x7ffc0000 [ 356.368388][ T8911] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.382261][ T29] audit: type=1326 audit(1734972135.670:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8903 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8e385d29 code=0x7ffc0000 [ 356.404623][ T29] audit: type=1326 audit(1734972135.680:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8903 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8e385d29 code=0x7ffc0000 [ 356.426709][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.484966][ T29] audit: type=1326 audit(1734972135.680:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8903 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4f8e385d29 code=0x7ffc0000 [ 356.547316][ T29] audit: type=1326 audit(1734972135.710:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8903 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8e385d29 code=0x7ffc0000 [ 356.575498][ T29] audit: type=1326 audit(1734972135.710:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8903 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8e385d29 code=0x7ffc0000 [ 356.610209][ T8911] bridge_slave_1: left allmulticast mode [ 356.615892][ T8911] bridge_slave_1: left promiscuous mode [ 356.647449][ T8911] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.840472][ T8911] bond0: (slave bond_slave_0): Releasing backup interface [ 356.861853][ T8911] bond0: (slave bond_slave_1): Releasing backup interface [ 358.644076][ T8911] team0: Port device team_slave_0 removed [ 358.732507][ T8911] team0: Port device team_slave_1 removed [ 358.740796][ T8911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.748939][ T8911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.975999][ T8911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.988457][ T8911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.177074][ T8914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.467720][ T8914] bond0: (slave ipip0): The slave device specified does not support setting the MAC address [ 359.857612][ T8914] bond0: (slave ipip0): Error -95 calling set_mac_address [ 359.927537][ T8948] netlink: 48 bytes leftover after parsing attributes in process `syz.0.918'. [ 359.969207][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.918'. [ 360.623759][ T8954] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 360.764343][ T8954] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 363.010915][ T5914] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 363.402125][ T5914] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.698354][ T5914] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.149206][ T5914] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 364.158554][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 364.305920][ T5914] usb 6-1: SerialNumber: syz [ 364.417982][ T8993] fuse: Bad value for 'fd' [ 364.739887][ T5914] usb 6-1: 0:2 : does not exist [ 364.769316][ T5914] usb 6-1: unit 5 not found! [ 365.197329][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'. [ 365.920105][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 366.000162][ T9010] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 366.038882][ T9010] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 366.137719][ T5886] usb 6-1: USB disconnect, device number 9 [ 367.742681][ T9035] fuse: Bad value for 'fd' [ 370.885985][ T9061] netlink: 'syz.3.949': attribute type 9 has an invalid length. [ 370.893816][ T9061] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.949'. [ 372.332058][ T9071] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.339547][ T9071] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.347231][ T9071] bridge0: entered allmulticast mode [ 372.629690][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.959'. [ 376.089918][ T9116] x_tables: ip_tables: osf match: only valid for protocol 6 [ 376.283244][ T9125] bridge0: entered allmulticast mode [ 377.499361][ T9142] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 377.507936][ T9142] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 377.516534][ T9142] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 379.054552][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.061217][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.992675][ T9163] bond0: (slave ipip0): The slave device specified does not support setting the MAC address [ 381.003686][ T9163] bond0: (slave ipip0): Error -95 calling set_mac_address [ 382.216359][ T9179] bridge0: left allmulticast mode [ 383.440511][ T9191] netlink: 'syz.2.989': attribute type 10 has an invalid length. [ 383.531074][ T9191] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 383.991786][ T9196] hub 9-0:1.0: USB hub found [ 384.003846][ T9196] hub 9-0:1.0: 1 port detected [ 388.309640][ T9239] bond0: (slave bond_slave_0): Releasing backup interface [ 388.336892][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1005'. [ 388.366189][ T9239] bond0: (slave bond_slave_1): Releasing backup interface [ 388.414727][ T9239] team0: Port device team_slave_0 removed [ 388.461103][ T9239] team0: Port device team_slave_1 removed [ 388.480611][ T9239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.500099][ T9239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.532886][ T9239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.557802][ T9239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.942359][ T9240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.269938][ T9240] bond0: (slave ipip0): The slave device specified does not support setting the MAC address [ 389.324041][ T9240] bond0: (slave ipip0): Error -95 calling set_mac_address [ 389.845022][ T9260] kvm: kvm [9258]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x34e00000090 [ 389.866200][ T9260] kvm: kvm [9258]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x5ee00000002 [ 390.048740][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 390.218904][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 390.310382][ T9] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 390.338260][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.368498][ T9] usb 6-1: Product: syz [ 390.377516][ T9] usb 6-1: Manufacturer: syz [ 390.397291][ T9] usb 6-1: SerialNumber: syz [ 390.480137][ T9] usb 6-1: config 0 descriptor?? [ 391.115547][ T9] usb 6-1: selecting invalid altsetting 3 [ 391.121665][ T9] comedi comedi0: could not set alternate setting 3 in high speed [ 391.129570][ T9] usbdux 6-1:0.0: driver 'usbdux' failed to auto-configure device. [ 391.140625][ T9] usbdux 6-1:0.0: probe with driver usbdux failed with error -22 [ 391.520287][ T5886] usb 6-1: USB disconnect, device number 10 [ 391.841333][ T30] INFO: task syz.4.598:7841 blocked for more than 143 seconds. [ 391.853028][ T30] Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 391.860464][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.869247][ T30] task:syz.4.598 state:D stack:22040 pid:7841 tgid:7840 ppid:5838 flags:0x00004004 [ 391.879666][ T30] Call Trace: [ 391.882969][ T30] [ 391.885923][ T30] __schedule+0x189f/0x4c80 [ 391.890825][ T30] ? __pfx___schedule+0x10/0x10 [ 391.895714][ T30] ? __pfx_lock_release+0x10/0x10 [ 391.900939][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 391.908154][ T30] ? schedule+0x90/0x320 [ 391.912629][ T30] schedule+0x14b/0x320 [ 391.916827][ T30] bit_wait+0x12/0xd0 [ 391.921529][ T30] __wait_on_bit+0xb0/0x2f0 [ 391.926079][ T30] ? __pfx_bit_wait+0x10/0x10 [ 391.931043][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 391.936541][ T30] ? __pfx_bit_wait+0x10/0x10 [ 391.941341][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 391.947355][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 391.952912][ T30] ? iov_iter_iovec_advance+0x1fc/0x2c0 [ 391.958522][ T30] netfs_unbuffered_read_iter_locked+0xd83/0x1540 [ 391.965315][ T30] netfs_unbuffered_read_iter+0xbf/0xe0 [ 391.970978][ T30] __kernel_read+0x52e/0xa00 [ 391.975618][ T30] ? do_sys_openat2+0x13e/0x1d0 [ 391.980548][ T30] ? __pfx___kernel_read+0x10/0x10 [ 391.985714][ T30] integrity_kernel_read+0xb0/0x100 [ 391.991065][ T30] ? __pfx_integrity_kernel_read+0x10/0x10 [ 391.996899][ T30] ? __kmalloc_cache_noprof+0x243/0x390 [ 392.002523][ T30] ? ima_calc_file_hash+0xaae/0x1b30 [ 392.007869][ T30] ima_calc_file_hash+0xae6/0x1b30 [ 392.013091][ T30] ? is_bpf_text_address+0x26/0x2a0 [ 392.018335][ T30] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 392.024005][ T30] ? mark_lock+0x9a/0x360 [ 392.028367][ T30] ? __lock_acquire+0x1397/0x2100 [ 392.033484][ T30] ? make_vfsgid+0x51/0xa0 [ 392.037926][ T30] ? generic_fillattr+0x58f/0x830 [ 392.043065][ T30] ? v9fs_vfs_getattr+0x106/0x370 [ 392.048128][ T30] ima_collect_measurement+0x520/0xb10 [ 392.053724][ T30] ? __pfx_ima_collect_measurement+0x10/0x10 [ 392.059794][ T30] ? rcu_is_watching+0x15/0xb0 [ 392.064839][ T30] ? trace_contention_end+0x3c/0x120 [ 392.070233][ T30] ? __asan_memset+0x23/0x50 [ 392.074904][ T30] ? ima_get_hash_algo+0x156/0x4d0 [ 392.080231][ T30] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 392.085728][ T30] process_measurement+0x1351/0x1fb0 [ 392.091142][ T30] ? __pfx_process_measurement+0x10/0x10 [ 392.096806][ T30] ? __pfx_lock_release+0x10/0x10 [ 392.101900][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 392.107012][ T30] ? mnt_get_write_access+0x68/0x2b0 [ 392.112450][ T30] ? file_set_fsnotify_mode+0x12a/0x510 [ 392.118020][ T30] ? inode_to_bdi+0x69/0xf0 [ 392.122634][ T30] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 392.129055][ T30] ima_file_check+0xd9/0x120 [ 392.133674][ T30] ? __pfx_ima_file_check+0x10/0x10 [ 392.138971][ T30] security_file_post_open+0xb9/0x280 [ 392.144372][ T30] path_openat+0x2cbd/0x3580 [ 392.149080][ T30] ? __pfx_path_openat+0x10/0x10 [ 392.154162][ T30] do_filp_open+0x27f/0x4e0 [ 392.158863][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 392.164148][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 392.169351][ T30] do_sys_openat2+0x13e/0x1d0 [ 392.174098][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 392.179367][ T30] ? __se_sys_mount+0x379/0x3c0 [ 392.184251][ T30] __x64_sys_openat+0x247/0x2a0 [ 392.189220][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 392.194618][ T30] ? do_syscall_64+0x100/0x230 [ 392.199448][ T30] ? do_syscall_64+0xb6/0x230 [ 392.204671][ T30] do_syscall_64+0xf3/0x230 [ 392.209258][ T30] ? clear_bhb_loop+0x35/0x90 [ 392.213966][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.219920][ T30] RIP: 0033:0x7f2a3e185d29 [ 392.224387][ T30] RSP: 002b:00007f2a3f04b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 392.232909][ T30] RAX: ffffffffffffffda RBX: 00007f2a3e375fa0 RCX: 00007f2a3e185d29 [ 392.240955][ T30] RDX: 0000000000020842 RSI: 000000002000c380 RDI: ffffffffffffff9c [ 392.249015][ T30] RBP: 00007f2a3e201aa8 R08: 0000000000000000 R09: 0000000000000000 [ 392.257032][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.265084][ T30] R13: 0000000000000000 R14: 00007f2a3e375fa0 R15: 00007ffca1421a88 [ 392.273403][ T30] [ 392.276481][ T30] [ 392.276481][ T30] Showing all locks held in the system: [ 392.284256][ T30] 1 lock held by khungtaskd/30: [ 392.289338][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 392.299277][ T30] 2 locks held by kworker/u8:5/262: [ 392.304492][ T30] 1 lock held by kworker/u8:6/773: [ 392.309714][ T30] 2 locks held by getty/5593: [ 392.314397][ T30] #0: ffff88803581a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 392.324446][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 392.334684][ T30] 2 locks held by syz.4.598/7841: [ 392.340636][ T30] #0: ffff888030eda5b8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7a6/0x1fb0 [ 392.351755][ T29] audit: type=1326 audit(1734972171.930:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9293 comm="syz.2.1021" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f8e385d29 code=0x0 [ 392.373400][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.385684][ T30] #1: ffff888078208148 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: netfs_start_io_direct+0x1d4/0x210 [ 392.397101][ T30] 1 lock held by syz.3.1016/9286: [ 392.402257][ T30] 2 locks held by syz.2.1021/9293: [ 392.407413][ T30] [ 392.409889][ T30] ============================================= [ 392.409889][ T30] [ 392.418309][ T30] NMI backtrace for cpu 0 [ 392.418325][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 392.418342][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 392.418348][ T30] Call Trace: [ 392.418352][ T30] [ 392.418357][ T30] dump_stack_lvl+0x241/0x360 [ 392.418374][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.418384][ T30] ? __pfx__printk+0x10/0x10 [ 392.418405][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 392.418422][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 392.418434][ T30] ? _printk+0xd5/0x120 [ 392.418453][ T30] ? __pfx__printk+0x10/0x10 [ 392.418474][ T30] ? __wake_up_klogd+0xcc/0x110 [ 392.418494][ T30] ? __pfx__printk+0x10/0x10 [ 392.418517][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 392.418538][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 392.418559][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 392.418583][ T30] watchdog+0xff6/0x1040 [ 392.418598][ T30] ? watchdog+0x1ea/0x1040 [ 392.418619][ T30] ? __pfx_watchdog+0x10/0x10 [ 392.418639][ T30] kthread+0x7a9/0x920 [ 392.418658][ T30] ? __pfx_kthread+0x10/0x10 [ 392.418680][ T30] ? __pfx_watchdog+0x10/0x10 [ 392.418698][ T30] ? __pfx_kthread+0x10/0x10 [ 392.418717][ T30] ? __pfx_kthread+0x10/0x10 [ 392.418740][ T30] ? __pfx_kthread+0x10/0x10 [ 392.418759][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.418780][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 392.418803][ T30] ? __pfx_kthread+0x10/0x10 [ 392.418826][ T30] ret_from_fork+0x4b/0x80 [ 392.418847][ T30] ? __pfx_kthread+0x10/0x10 [ 392.418868][ T30] ret_from_fork_asm+0x1a/0x30 [ 392.418901][ T30] [ 392.581108][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.587659][ T30] Sending NMI from CPU 0 to CPUs 1: [ 392.592992][ C1] NMI backtrace for cpu 1 [ 392.593004][ C1] CPU: 1 UID: 0 PID: 3561 Comm: kworker/u8:10 Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 392.593024][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 392.593035][ C1] Workqueue: bat_events batadv_nc_worker [ 392.593074][ C1] RIP: 0010:kasan_check_range+0x4f/0x290 [ 392.593101][ C1] Code: 89 fd 48 c1 ed 2f 81 fd fe ff 01 00 0f 86 43 02 00 00 48 89 fb 48 c1 eb 03 49 ba 00 00 00 00 00 fc ff df 4e 8d 1c 13 49 ff c8 <4d> 89 c1 49 c1 e9 03 49 be 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c [ 392.593115][ C1] RSP: 0018:ffffc9000c56f910 EFLAGS: 00000282 [ 392.593129][ C1] RAX: 0000000000000001 RBX: 1ffffffff203563e RCX: ffffffff819a8b24 [ 392.593142][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901ab1f0 [ 392.593154][ C1] RBP: 000000000001ffff R08: ffffffff901ab1f7 R09: 0000000000000000 [ 392.593165][ C1] R10: dffffc0000000000 R11: fffffbfff203563e R12: 1ffff920018adf30 [ 392.593178][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 392.593190][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 392.593204][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 392.593215][ C1] CR2: 0000000000000000 CR3: 000000000e736000 CR4: 00000000003526f0 [ 392.593231][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 392.593240][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 392.593251][ C1] Call Trace: [ 392.593257][ C1] [ 392.593265][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 392.593285][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 392.593308][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 392.593327][ C1] ? nmi_handle+0x2a/0x5a0 [ 392.593357][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 392.593375][ C1] ? nmi_handle+0x14f/0x5a0 [ 392.593397][ C1] ? nmi_handle+0x2a/0x5a0 [ 392.593419][ C1] ? kasan_check_range+0x4f/0x290 [ 392.593442][ C1] ? default_do_nmi+0x63/0x160 [ 392.593467][ C1] ? exc_nmi+0x123/0x1f0 [ 392.593485][ C1] ? end_repeat_nmi+0xf/0x53 [ 392.593511][ C1] ? lock_acquire+0xd4/0x550 [ 392.593531][ C1] ? kasan_check_range+0x4f/0x290 [ 392.593554][ C1] ? kasan_check_range+0x4f/0x290 [ 392.593578][ C1] ? kasan_check_range+0x4f/0x290 [ 392.593601][ C1] [ 392.593607][ C1] [ 392.593614][ C1] lock_acquire+0xd4/0x550 [ 392.593637][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 392.593658][ C1] ? batadv_nc_worker+0xcb/0x610 [ 392.593676][ C1] ? __pfx_lock_release+0x10/0x10 [ 392.593698][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 392.593723][ C1] batadv_nc_worker+0xec/0x610 [ 392.593741][ C1] ? batadv_nc_worker+0xcb/0x610 [ 392.593758][ C1] ? batadv_nc_worker+0xcb/0x610 [ 392.593776][ C1] ? process_scheduled_works+0x976/0x1840 [ 392.593795][ C1] process_scheduled_works+0xa66/0x1840 [ 392.593826][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 392.593849][ C1] ? assign_work+0x364/0x3d0 [ 392.593868][ C1] worker_thread+0x870/0xd30 [ 392.593890][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 392.593914][ C1] ? __kthread_parkme+0x169/0x1d0 [ 392.593934][ C1] ? __pfx_worker_thread+0x10/0x10 [ 392.593953][ C1] kthread+0x7a9/0x920 [ 392.593972][ C1] ? __pfx_kthread+0x10/0x10 [ 392.593993][ C1] ? __pfx_worker_thread+0x10/0x10 [ 392.594012][ C1] ? __pfx_kthread+0x10/0x10 [ 392.594031][ C1] ? __pfx_kthread+0x10/0x10 [ 392.594053][ C1] ? __pfx_kthread+0x10/0x10 [ 392.594073][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.594093][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 392.594114][ C1] ? __pfx_kthread+0x10/0x10 [ 392.594135][ C1] ret_from_fork+0x4b/0x80 [ 392.594154][ C1] ? __pfx_kthread+0x10/0x10 [ 392.594175][ C1] ret_from_fork_asm+0x1a/0x30 [ 392.594200][ C1] [ 392.961738][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.968373][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 392.975239][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 392.985219][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 392.995271][ T30] Call Trace: [ 392.998566][ T30] [ 393.001514][ T30] dump_stack_lvl+0x241/0x360 [ 393.006213][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.011428][ T30] ? __pfx__printk+0x10/0x10 [ 393.016042][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 393.022044][ T30] ? vscnprintf+0x5d/0x90 [ 393.026374][ T30] panic+0x349/0x880 [ 393.030272][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 393.036419][ T30] ? __pfx_panic+0x10/0x10 [ 393.040826][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 393.046187][ T30] ? __irq_work_queue_local+0x137/0x410 [ 393.051728][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 393.057093][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 393.063238][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 393.069388][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 393.075535][ T30] watchdog+0x1035/0x1040 [ 393.079858][ T30] ? watchdog+0x1ea/0x1040 [ 393.084275][ T30] ? __pfx_watchdog+0x10/0x10 [ 393.088943][ T30] kthread+0x7a9/0x920 [ 393.093018][ T30] ? __pfx_kthread+0x10/0x10 [ 393.097604][ T30] ? __pfx_watchdog+0x10/0x10 [ 393.102271][ T30] ? __pfx_kthread+0x10/0x10 [ 393.106852][ T30] ? __pfx_kthread+0x10/0x10 [ 393.111438][ T30] ? __pfx_kthread+0x10/0x10 [ 393.116020][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 393.121211][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 393.126403][ T30] ? __pfx_kthread+0x10/0x10 [ 393.130985][ T30] ret_from_fork+0x4b/0x80 [ 393.135394][ T30] ? __pfx_kthread+0x10/0x10 [ 393.139980][ T30] ret_from_fork_asm+0x1a/0x30 [ 393.144747][ T30] [ 393.148006][ T30] Kernel Offset: disabled [ 393.152318][ T30] Rebooting in 86400 seconds..