last executing test programs: 12m2.004612123s ago: executing program 32 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) clock_gettime(0x6, &(0x7f0000000300)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0x2, 0x0}, 0x0, 0x0, 0x1, 0x3}, 0x20) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') ioctl$TUNGETVNETHDRSZ(r4, 0x8004b707, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r6 = dup2(r3, r4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0xffffc348, 0x8}}, './file0\x00'}) preadv(r5, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000180)=""/250, 0xfa}], 0x2, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @random="98fed5cf006c"}, {0xa}]}]}}}]}, 0x50}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r8 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x0, 0x0, 0x1011, 0x0, 0x0, 0x0, 0x0, 0x2}}) 10m42.669808971s ago: executing program 33 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) clock_gettime(0x6, &(0x7f0000000300)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0x2, 0x0}, 0x0, 0x0, 0x1, 0x3}, 0x20) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') ioctl$TUNGETVNETHDRSZ(r4, 0x8004b707, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r6 = dup2(r3, r4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0xffffc348, 0x8}}, './file0\x00'}) preadv(r5, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000180)=""/250, 0xfa}], 0x2, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @random="98fed5cf006c"}, {0xa}]}]}}}]}, 0x50}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r8, &(0x7f0000002440)={'#! ', '', [], 0xa, '\\'}, 0x5) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r10, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x0, 0x0, 0x1011, 0x0, 0x0, 0x0, 0x0, 0x2}}) 6m26.378980827s ago: executing program 34 (id=1271): mq_open(0x0, 0x1, 0xf3, &(0x7f0000000180)={0x6, 0xd7, 0x6, 0x3}) r0 = socket(0x2, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="24000000010006", 0x7) r5 = socket(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) write(r5, &(0x7f0000000140), 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, 0x0, &(0x7f0000000500)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffd, @remote}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[], 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) 5m48.300153662s ago: executing program 7 (id=1442): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x6, 0xfb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 5m48.118929277s ago: executing program 7 (id=1444): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x8}, {}, {0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x68}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m47.197004341s ago: executing program 7 (id=1447): ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x181900, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x8001, &(0x7f0000000880)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 5m46.979968358s ago: executing program 7 (id=1450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x18d6, &(0x7f0000000040), &(0x7f0000ffe000), &(0x7f0000ffe000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r2}, 0x20) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, 0x0, 0xfe) 5m46.858423635s ago: executing program 7 (id=1453): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m46.721477173s ago: executing program 7 (id=1455): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[]) 5m30.748376104s ago: executing program 35 (id=1455): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[]) 4m47.064493371s ago: executing program 5 (id=1683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x6, 0x1, 0x8, 0x0, 0xeb2, 0x7, 0x53, 0x64, 0x4, 0xfc, 0x6, 0x3, 0x0, 0x1, 0xf21, 0xdf, 0x5, 0x6, 0x10, '\x00', 0x5, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m45.177806458s ago: executing program 5 (id=1688): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3c}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/91, 0x5b, 0x0, 0x26}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 4m44.233382222s ago: executing program 5 (id=1692): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3c}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 4m43.906159035s ago: executing program 5 (id=1694): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="130000001000000008"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r3, &(0x7f0000000300), 0x0}, 0x20) 4m43.676204724s ago: executing program 5 (id=1696): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, 0x0) setpgid(0x0, r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x42}, 0x18) 4m43.210233596s ago: executing program 5 (id=1698): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) dup3(r1, r0, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x5, 0x1c23, 0x0, {r2, r3/1000+10000}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x7, 0x1, 0x0, 0x0, "72928546d962c2a2"}}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x803, 0x0) r4 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg$inet(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001200)="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", 0x267}, {&(0x7f00000014c0)="2054ce9fa34fbc4a1d8599d1a76a4eed8f72f60371dddce7359a1148790a0c992a07daee0eb1228fb2f9f181950dc0e31e832382fff7f4ddad1cfcd672cb1a056e38d318caa400d7337babdaeaf27ff333d856ee2db5efc6273fa1d97845266598d153006ed06c406f44161b416c8208fd03985252ffc7c27b03a6e66a31d3cc7b1997622b12c3063c2cdd27a3b6fd00e1c4456e65f0804e61b29c97264b5653e220b61068a81d10655f50c4e0bb8589252a06a232496b908b8d68c5446ea1c6b9a2832aeac13a643984457a8597ece1e2868285626d0c4eb5f22efc1dd7423e7029836c6b2b41e328b9d6b09be4223f40e7ec5bbc84c2bc28237f3d7aa5d8456f40348b1f3fe8139e054d93829c118a5c24752b26bf1dcb4181e150071c7fc99f1797601336a04c605e4638a1bba163b59d4222ec646999d4b14c128d259a146831be912405859c11e3aefb26fd95cee8076233f762e8b32025d30b5824674a2bb11c0519a8636f869a8731a999f33302d861f0742e8faa239c14a7f1d62d9b8b480dae7a5c48e1f3750b9ceacf8290c74e09fda12dfffd44f79efe4dc5ec6df844c048543c5f41a85185fdb54c69a99f229c197b1366", 0x1b7}, {&(0x7f0000000040)="f610e61ac81cc3edc86f05f10dfd1ecda0fd0ed9a444b7fb732446a7e20f366cdd", 0x21}, {&(0x7f0000000640)="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", 0x117}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc906", 0x56}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x800) 4m27.764061554s ago: executing program 36 (id=1698): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) dup3(r1, r0, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x5, 0x1c23, 0x0, {r2, r3/1000+10000}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x7, 0x1, 0x0, 0x0, "72928546d962c2a2"}}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x803, 0x0) r4 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg$inet(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001200)="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", 0x267}, {&(0x7f00000014c0)="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", 0x1b7}, {&(0x7f0000000040)="f610e61ac81cc3edc86f05f10dfd1ecda0fd0ed9a444b7fb732446a7e20f366cdd", 0x21}, {&(0x7f0000000640)="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", 0x117}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc906", 0x56}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x800) 3m27.776128867s ago: executing program 4 (id=1956): r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x4c, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02000201100081006000000002000020d3"]) sendmsg$nl_route(r0, 0x0, 0x0) 3m25.596676727s ago: executing program 4 (id=1963): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x0, 0x1000000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x6000000}, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3m25.245540521s ago: executing program 4 (id=1967): syz_emit_ethernet(0xfed7, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000000)="0f01c366b9f709000066b8a000000066ba000000000f306766c7442400440000006766c7442402fdffff7f6766c744240600000000670f0114240f20c06635010000000f22c0660f3833dd66b80500000066b9947500000f01d90f20c06635000000400f22c0660f65800c000f01cab825018ec0", 0x74}], 0x1, 0x8, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffffd, 0x12) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_PRIORITY={0x8, 0x1e, 0x400}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x40810) 3m24.135898114s ago: executing program 4 (id=1973): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x2008000, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 3m23.169685484s ago: executing program 4 (id=1979): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xaf}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}]}, 0x98}}, 0x4000010) 3m21.173594544s ago: executing program 4 (id=1984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2, 0x2, 0x0, @void, @value}, 0x10) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getuid() sendmsg$nl_netfilter(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000002d00)={0x24, 0xa, 0xa, 0x301, 0x70bd27, 0x25dfdbfe, {0x5, 0x0, 0x4}, [@nested={0x10, 0x8, 0x0, 0x1, [@typed={0x8, 0x146, 0x0, 0x0, @str='GPL\x00'}, @typed={0x4, 0x85}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008800}, 0x40) 3m19.689459676s ago: executing program 37 (id=1984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2, 0x2, 0x0, @void, @value}, 0x10) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getuid() sendmsg$nl_netfilter(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000002d00)={0x24, 0xa, 0xa, 0x301, 0x70bd27, 0x25dfdbfe, {0x5, 0x0, 0x4}, [@nested={0x10, 0x8, 0x0, 0x1, [@typed={0x8, 0x146, 0x0, 0x0, @str='GPL\x00'}, @typed={0x4, 0x85}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008800}, 0x40) 2m36.748165107s ago: executing program 6 (id=2099): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, 0x0, 0x0) listen(r0, 0x3f) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000300)=""/147, 0x93}], 0x1, 0x0, 0x6) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) r3 = io_uring_setup(0x28d5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x211}) close(r3) ioctl$TCSETSW2(r2, 0x5425, 0x0) 2m35.024050166s ago: executing program 6 (id=2105): socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x600, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r1, 0x0, 0x100000000000000}, 0x38) 2m32.972186601s ago: executing program 6 (id=2108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xfb2, @loopback}, 0x1c) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00003b7000/0x3000)=nil, 0x3000}, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m31.088226946s ago: executing program 6 (id=2116): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$media(&(0x7f0000001480), 0x6, 0x101a02) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 2m27.913482908s ago: executing program 6 (id=2127): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m26.764001942s ago: executing program 6 (id=2129): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) creat(&(0x7f0000000240)='./file0\x00', 0x148) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff000) utime(&(0x7f0000003000)='./file0\x00', 0x0) 2m11.597340182s ago: executing program 38 (id=2129): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) creat(&(0x7f0000000240)='./file0\x00', 0x148) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff000) utime(&(0x7f0000003000)='./file0\x00', 0x0) 1m43.55680843s ago: executing program 8 (id=2222): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socket(0x3, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x3) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0xfffe, 0x0, @local}}, 0x0, 0x0, 0x2, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r6 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="2d28082e2900b7594394143acd190b5de9a4080f34a0e9b1ae014c1066e3c71b5353d6aa7202570f4d750940ab8c2acb55efa55bc499720832b8a3245774578abfa5e3a6709c9c96d3b00a8eab43925ff952a227fd294bb0f1428f96ffe43aa86e2f72d97829fc6cc5570b3d11dcd7fbcc74f83a1b74f8597867b154539f335cda9417bba823fc78c24ce75c24f954ba4f19a5119c9a8e08fd8253f559a2b8a973056aa44807d82737"], 0x6) socket$netlink(0x10, 0x3, 0x8000000004) 1m42.266655885s ago: executing program 8 (id=2226): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f0000000440)="bb699ad135cc241d3bebde2c24cb27cb9fe9ee0c34e804a364fc0eb46ff49fe5561375eac2516ac7ed1d57cad8df2a2e42927453480cc6c40a2287d46723d368104e43d2fb1c4ff855377f4e24d7d4a746f0cf7265cb4d4e9e10422c307254b6d8eac510b1b2c19bcee483019731a9eb03de7e6541e527f2021644e1527fb2d278753b3ae2f47ee3312d06a47b38412fbabe447a8c6d1b3fb67e6f5f3a21fc08407b3153d8a76e73491379cfe5f5f639db801f52174c742639a8a96f257a55acdee4ab551b1a84c003d1bde109972a1794e7eadb2d4bc27d2a50a0dac7e46a32e3d13cc0b8c5221b514720d094ebe88c63e07fa8aaacc9135c9f1f1b4c2cb6c7cc636fd0548fc1a0b807b800f3dd92cd4e06013891ecd5a72ee4622dbca8bcd7772f2715c6047ce8b30b7a4a7dbffe607494dd8bdc50c2b9428ddfb0d00a1b76ec88be09e6d4fe113d1549d50f52c149a0a25de0c383f32eb8d89e7df23831a7aa8ed93aa1f48c3c0d4df42d229fab2ccd5c473ccfa226519714536a8d0bdb1255a399b547887beeef8dd6b18d68f484edb2514b5e5fdc2f328e3160246fb0065e9958e51745d96bf501855d13b51ff03e2fa0c40d0530349a92888712d5", 0xfff4, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 1m41.987411811s ago: executing program 8 (id=2227): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000000300)=@delsa={0x74, 0x11, 0x400, 0x70bd2d, 0x25dfdbfc, {@in=@dev={0xac, 0x14, 0x14, 0x2f}, 0x4d2, 0x2, 0x33}, [@user_kmaddress={0x2c, 0x13, {@in=@empty, @in=@multicast2, 0x0, 0xa}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd25, 0x70bd29, 0x70bd2d, 0x70bd28, 0x5, [0xfffffc01]}}]}, 0x74}}, 0x4004000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m41.800338768s ago: executing program 8 (id=2229): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socket(0x3, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) r4 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="2d28082e2900b7594394143acd190b5de9a4080f34a0e9b1ae014c1066e3c71b5353d6aa7202570f4d750940ab8c2acb55efa55bc499720832b8a3245774578abfa5e3a6709c9c96d3b00a8eab43925ff952a227fd294bb0f1428f96ffe43aa86e2f72d97829fc6cc5570b3d11dcd7fbcc74f83a1b74f8597867b154539f335cda9417bba823fc78c24ce75c24f954ba4f19a5119c9a8e08fd8253f559a2b8a973056aa44807d82737"], 0x6) socket$netlink(0x10, 0x3, 0x8000000004) 1m39.675352167s ago: executing program 8 (id=2233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) bind$unix(r3, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0x0) r4 = syz_io_uring_setup(0x48a5, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x40}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 1m37.553130735s ago: executing program 8 (id=2236): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000340)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='percpu_alloc_percpu\x00', r3}, 0x18) sync() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) accept4(r1, 0x0, &(0x7f00000001c0), 0x80000) openat$rdma_cm(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) 1m22.273526628s ago: executing program 39 (id=2236): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000340)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='percpu_alloc_percpu\x00', r3}, 0x18) sync() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) accept4(r1, 0x0, &(0x7f00000001c0), 0x80000) openat$rdma_cm(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) 22.20273735s ago: executing program 1 (id=2368): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x54, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0\x00') mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x208000, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x5, 0x0, 0x41c}}}, 0x7) 19.740345599s ago: executing program 2 (id=2373): socket$tipc(0x1e, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0xea60}, 0x1f, 0x8, 0x8}, 0x18) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/138, 0x8a}, 0x800}], 0x1, 0x2102, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d55549b, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0xe3, 0x400]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15.508946376s ago: executing program 2 (id=2376): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x300) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xb8, 0x0, 0x0, [{{0x2, 0x2, 0x5, 0x80, 0x2, 0x6, {0x5, 0x8000000000000000, 0x7, 0x3, 0x0, 0x4, 0x100, 0x7, 0x800, 0x1000, 0x1, r4, 0x0, 0x0, 0xfec}}, {0x2, 0x8000000000000000, 0xd, 0x4, 'sched_switch\x00'}}]}, 0x0, 0x0, 0x0}) r6 = openat$vcs(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r6, 0x0, 0x0, 0x7fce) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000080)=0x200000000) preadv(r7, &(0x7f0000000600), 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.46733887s ago: executing program 3 (id=2377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setresgid(0x0, 0xffffffffffffffff, 0x0) setfsgid(0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x31, 0x1, @thr={&(0x7f0000000200)="f8605e745841b4d873915cb654440b4039d4ab232dfc539db7238d20005bdd3889827e0bf31aac4fad3e2b364346af5abd1929fc3370b6f470e9bd9caeb4aa818b71bb9629c86e35b9694c0f70", &(0x7f0000000040)="3e292c699894e990c1e164562302d02d4b200bd2bcd32f10a1d75a75a23a98285e"}}, &(0x7f0000000280)) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000003580)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 15.271399604s ago: executing program 9 (id=2378): write$bt_hci(0xffffffffffffffff, 0x0, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) socket$rds(0x15, 0x5, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fcntl$setsig(r1, 0xa, 0x21) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x804000000000000) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) setresuid(0x0, 0xee00, 0x0) unshare(0x2a020480) socket$nl_generic(0x10, 0x3, 0x10) 14.077583072s ago: executing program 0 (id=2379): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getrlimit(0xd, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x49d0, 0x4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000040)=0xaf2, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local}, 0x1c) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) recvmmsg(r1, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}}], 0x1, 0x2000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = timerfd_create(0x9, 0x0) timerfd_gettime(r2, &(0x7f0000000100)) 13.981866443s ago: executing program 1 (id=2380): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan1\x00', @ifru_map={0x20000000000004}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000200)="2227a019d5e7f8e7f37b8483f12eb9716ddff30653c2fcc91a7b93d9032615e616b9cce3b11b24eaacf7cd5730342f767c2264cea4847dd424cf02e86f062c640259dca922a664d47b586c99e65c4f1ef29c5911746568639e844f7ab079f91b7e24d3cf0f21", 0x66}], 0x1}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000340)=""/206) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 12.590771782s ago: executing program 3 (id=2381): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @local, @dev}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884) 12.566717455s ago: executing program 0 (id=2382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5}, 0x18) r7 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)=r1}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1e, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r11 = dup2(r9, r10) readv(r11, &(0x7f0000001400)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x9, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd7}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f00000003c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000000e80)=""/4096, 0x41100, 0x20, '\x00', r5, @fallback=0x1c, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x3, 0x7fffffff, 0x2, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000005c0)=[r3, r3, r3], &(0x7f0000000600)=[{0x5, 0x4, 0x7, 0x9}, {0x1, 0x1, 0xf, 0x4}], 0x10, 0x7, @void, @value}, 0x94) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000c40)=ANY=[@ANYBLOB="710100c89d6d4e473c5083051156ed01102ed3b7ee5f687f6f6fbfcfdcb30b1a3aa37d1fde623c3c82b3", @ANYRES16, @ANYBLOB="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"], 0x210}}, 0x0) write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8) sendmsg$can_j1939(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xee) 12.404693398s ago: executing program 2 (id=2383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ppoll(&(0x7f0000000180)=[{r3, 0x4047, 0x700}], 0x1, 0x0, 0x0, 0x0) close(r3) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x6559, 0x13580, 0x3}, &(0x7f0000000040), &(0x7f0000000140)) 12.401242618s ago: executing program 9 (id=2384): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) madvise(&(0x7f00000ec000/0x1000)=nil, 0x1000, 0x9) times(0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB]) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfe00, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9a02fff0}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 12.372458987s ago: executing program 1 (id=2385): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x8000f, 0x200) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) syz_init_net_socket$ax25(0x3, 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000000, 0x7, 0x8001, 0x3, 0x0, 0x5, 0x8000000000000000}) 11.979983562s ago: executing program 0 (id=2386): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xa2902) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESHEX=r1], 0x20) 9.986812357s ago: executing program 2 (id=2387): openat$iommufd(0xffffffffffffff9c, 0x0, 0x8280, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ptrace$setregs(0xf, 0x0, 0x5c000000000, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x44094) fsopen(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141aa2, 0x91) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, 0x0) ppoll(&(0x7f0000000080)=[{r3, 0x42c0}], 0x1, 0x0, 0x0, 0x0) 9.98608288s ago: executing program 3 (id=2388): syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r4, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 9.798763901s ago: executing program 9 (id=2389): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48940, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x14f8d, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x100, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000002c0)={r3, 0xa9ac}, &(0x7f0000000300)=0x8) 9.156015221s ago: executing program 1 (id=2390): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f00000001c0)={0x0, 0x7, 0x4, {0x2, @raw_data="93f6a5f2d18177c3e62dc3591412ac8d0b62159ae089adf892c08b17db368b92d72605031293b7b28bbcb776dadf7f66bb5eebe8cf26eec8b5379e0759990e582bc49dacbd977b9592edd3223d69a2e72a14047bd3001ad16e1c7b2484f10955c5a9bf0c342383399065321bc09856277f2b8ece58c3f17e934f04326fe0658f583d334a07ced0046f8ba7ad4bdcada26f421c16433eddfc8f30c1907b269112dccfb031df1a0236c1c386c8d53340565cb474cdbf5ec5755ea388be5298aaa5b8c99c613440ee8f"}}) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f00000003c0)={0x0, 0x0, 0x4, {0xa, @vbi}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffffffffffff8f, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r10, 0xe, 0x7f, 0x0, 0x0, [0x0], [0x0, 0x29, 0x2], [], [0x0, 0x0, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000003da2595f78946add8e88ec8ce6ed7007f9b815fb", @ANYRES16=r2], 0x50}, 0x1, 0x0, 0x0, 0x40c40c0}, 0x20004010) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x38}, 0x0) 8.427119422s ago: executing program 3 (id=2391): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8480, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x4000000) r1 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f00000001c0)={0x0, "be3ff4f2d3b71ad35cbc5ad31906b40f70ea0177f7f3f12a503b7e8e589e845a"}) 7.789037427s ago: executing program 0 (id=2392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x8000000000080001, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r3) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)={0x14, r4, 0x607}, 0x14}}, 0x0) 6.285120154s ago: executing program 3 (id=2393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000002180), 0x0, 0x40) ioctl$I2C_RDWR(r0, 0x707, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @none}, 0x8) shutdown(r3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6.283109636s ago: executing program 9 (id=2394): ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x20, r7, 0x1, 0x0, 0x0, {0x1e}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) 3.98432109s ago: executing program 3 (id=2395): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = syz_open_procfs(r2, &(0x7f0000000540)='net/ip_vs\x00') syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10006}) pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0e05403, &(0x7f0000000000)={{0xffffffffffffffff, 0x2, 0xffffffff, 0x3, 0x6}, 0xf3e, 0x3, 'id1\x00', 'timer1\x00', 0x0, 0x10000, 0x1, 0x400, 0x77c1907b}) 3.983948733s ago: executing program 0 (id=2396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000080)=@secondary) keyctl$get_persistent(0x16, 0x0, r1) add_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000300)="5c98b85e84e78408b7e678fcfddb51", 0xf, r1) r2 = syz_io_uring_setup(0x5c1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8004}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}) io_uring_enter(r2, 0x8aa, 0x0, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f00000004c0)) 2.710243364s ago: executing program 9 (id=2397): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) fstat(0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x5f0827ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r5) 2.660846675s ago: executing program 1 (id=2398): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200001c4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x3, 0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x60, 0x0, 0x1f4, 0x0, 0x3, 0x0, 0x0, 0x40}, [], "3eff9b74"}, 0x44) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f00000002c0)={0x3c, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @generic={0x9, 0x47, "63d7684cf0e1df71df21e8f14c3bb25a223dd357283c2c82e80fdd1dec16627c982b46c69cd6953771eaf86560c7f57f66f08d891636f2df701e4f333d2dd59ac5b28010e85e03"}]}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r3}, 0x10) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r4, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='auxv\x00') preadv(r5, &(0x7f0000000000), 0x0, 0x4, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="08000000fffe7aad202bb9dbf5cc0fd9566ca325de232e4e1f9d0bd14eafb66d622326b939818d8decef36173b8f32d13dd3ab40bc884320e1deb7456f7c24dc3197410adaea9353d335d5f236f095434c81ddb6d39e08c694d79485070000009e0a36beefa9d4c56e10b2ecf000004746ee8b418ad0bcea77db866352be3e024808a728c6a27aa274d26af2527a981330eb20c9d885e919cf7ec4c757b6f42f226a15d4e8a8a139a8cdd4c88d06d6fa637db670550936472da12f7a8dff271869728ef5f479"]) r6 = socket(0x10, 0x3, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r7, 0x80084522, &(0x7f0000001f40)=""/231) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=@ipv6_delrule={0x40, 0x21, 0x1, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x3, 0x10}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x2}, @FRA_SRC={0x14, 0x2, @mcast2}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x1}]}, 0x40}}, 0x4008000) 2.63067699s ago: executing program 2 (id=2399): socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfb84e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000880), 0x800, 0x0) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) syz_io_uring_setup(0x5edb, &(0x7f0000019080)={0x0, 0x4291, 0x200, 0x3, 0x392}, &(0x7f0000019100)=0x0, &(0x7f0000019140)) syz_io_uring_complete(r5) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') 1.448549408s ago: executing program 9 (id=2400): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0xfe, &(0x7f0000000200)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0xc8, 0x3a, 0x0, @remote, @local, {[], @ni={0x8c, 0x0, 0x0, 0x1, 0x2, 0x100, "537fe71b04b5fd00dff6ba984671a082663c169a4d3772735f1e10d30e5963253f048b7169aa7c5b527dcdd257f922c8d8add6519af00ce45a12b1f6d575e5477a3c499a77cdcb8c660ed7b1e22b54b994c25fd459fe2017495ad26dbde5d50cf903ca15361d218d707cb61628090a7d7c91021e01c8fc5c64d19f9b4339c0c3119e4a1a78e66fba5995f658f8e5464888abcd583801ddd547b8563b2d860d671226daf91b8f1c7b6f21982decd4c8fc691fe652e81c85fe"}}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0x0, 0xb}, 0x8) fcntl$notify(r1, 0x402, 0x8000003d) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x2) 1.250710401s ago: executing program 1 (id=2401): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioperm(0x0, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x7f, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) 212.220387ms ago: executing program 2 (id=2402): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000740)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040), 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_open_dev$loop(0x0, 0x75f, 0xa382) pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{0x0}], 0x1, 0x800000, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$LOOP_CLR_FD(r4, 0x4c01) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c000280080004000000000008001500000000000500"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 0s ago: executing program 0 (id=2403): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000140)={r4, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r5, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x1000000, 0x2000}) fsopen(&(0x7f0000000100)='cifs\x00', 0x0) kernel console output (not intermixed with test programs): mode [ 556.554847][ T5874] usb 5-1: 0:2 : does not exist [ 556.578683][T11636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.583045][ T5874] usb 5-1: USB disconnect, device number 29 [ 556.613529][T11636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.642806][T11636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.665199][T11636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.688866][T11636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.709691][T11636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.723543][T11636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.734222][T11636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.754014][T11636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.766190][T11636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.787509][T11636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.818207][T11636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.835737][T11636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.860817][T11636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.866783][T10515] udevd[10515]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 556.955954][T11636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.966645][T11636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.978501][T11636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.988948][T11636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.000573][T11636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.029926][T11636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.046934][T11636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.087752][T11636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.147535][T11636] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.409435][T11636] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.571352][T11636] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.604849][ T8] gspca_sunplus: reg_r err -71 [ 557.789095][ T8] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 557.816626][T11636] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.836027][ T8] usb 6-1: USB disconnect, device number 24 [ 559.144492][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.235374][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.958069][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.975470][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.541435][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1607'. [ 560.596893][ T5876] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 560.640634][T11928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 560.647935][T11928] IPv6: NLM_F_CREATE should be set when creating new route [ 560.662203][T11928] netlink: 'syz.3.1608': attribute type 27 has an invalid length. [ 560.758630][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.804890][ T5876] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 560.882533][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.911965][T11928] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.921222][T11928] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.925613][ T5876] usb 6-1: config 0 descriptor?? [ 561.591730][ T5876] keytouch 0003:0926:3333.0027: fixing up Keytouch IEC report descriptor [ 562.012506][ T5876] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0027/input/input34 [ 562.298772][ T5876] keytouch 0003:0926:3333.0027: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 562.614378][T11928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.706903][T11928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.896702][T11947] usb 6-1: USB disconnect, device number 25 [ 563.184159][T11928] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.212523][T11928] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.235233][T11928] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.253964][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.259938][T11928] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.420421][T11928] bond1: left promiscuous mode [ 563.438915][T11928] bond2: left promiscuous mode [ 564.017224][T11968] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 564.280362][T11968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.336752][T11968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.399682][T11968] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 564.422635][T11968] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 564.434440][T11968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.481357][T11968] usb 4-1: config 0 descriptor?? [ 565.384591][T11968] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 565.468014][T12011] ptrace attach of "./syz-executor exec"[7393] was attempted by ""[12011] [ 565.498631][T11968] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 565.652955][T11968] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 565.736680][T11968] usb 4-1: USB disconnect, device number 19 [ 565.905111][T12021] binder: BINDER_SET_CONTEXT_MGR already set [ 565.911503][T12021] binder: 12020:12021 ioctl 4018620d 20000040 returned -16 [ 566.090446][ T29] audit: type=1326 audit(1737411086.170:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.8.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ad185d29 code=0x7ffc0000 [ 566.139652][ T29] audit: type=1326 audit(1737411086.180:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.8.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ad185d29 code=0x7ffc0000 [ 566.161170][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.270078][ T29] audit: type=1326 audit(1737411086.210:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.8.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28ad185d29 code=0x7ffc0000 [ 566.347032][ T29] audit: type=1326 audit(1737411086.210:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.8.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ad185d29 code=0x7ffc0000 [ 566.488629][ T29] audit: type=1326 audit(1737411086.210:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.8.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ad185d29 code=0x7ffc0000 [ 566.510141][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.823275][ T29] audit: type=1326 audit(1737411086.210:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.8.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28ad185d29 code=0x7ffc0000 [ 566.844853][ C1] vkms_vblank_simulate: vblank timer overrun [ 567.283174][T12040] tipc: Started in network mode [ 567.305202][T12040] tipc: Node identity a6db320c5914, cluster identity 4711 [ 567.322999][ T29] audit: type=1326 audit(1737411086.210:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.8.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ad185d29 code=0x7ffc0000 [ 567.344603][ C1] vkms_vblank_simulate: vblank timer overrun [ 567.363122][ T29] audit: type=1326 audit(1737411086.210:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.8.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f28ad185d29 code=0x7ffc0000 [ 567.367357][T12040] tipc: Enabled bearer , priority 0 [ 567.449137][ T29] audit: type=1326 audit(1737411086.210:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.8.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ad185d29 code=0x7ffc0000 [ 567.492210][T12043] syzkaller0: entered promiscuous mode [ 567.518736][T12043] syzkaller0: entered allmulticast mode [ 567.546652][ T29] audit: type=1326 audit(1737411086.210:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.8.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f28ad185d29 code=0x7ffc0000 [ 567.586891][T12043] tipc: Resetting bearer [ 567.834706][T12038] tipc: Resetting bearer [ 568.696994][T11968] tipc: Node number set to 4291768844 [ 569.887701][T12083] kvm: emulating exchange as write [ 572.365535][T12038] tipc: Disabling bearer [ 574.090488][T12124] kvm: pic: non byte read [ 574.393427][T11960] IPVS: starting estimator thread 0... [ 574.601582][T12132] IPVS: using max 17 ests per chain, 40800 per kthread [ 576.629382][T11939] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 576.958619][T11939] usb 6-1: Using ep0 maxpacket: 32 [ 577.134054][T11939] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.475769][T11939] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 577.601078][T11939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.685946][T11939] usb 6-1: Product: syz [ 577.726972][T11939] usb 6-1: Manufacturer: syz [ 577.768502][T11939] usb 6-1: SerialNumber: syz [ 577.828382][T11939] usb 6-1: config 0 descriptor?? [ 577.861943][T11939] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 578.146828][T11968] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 578.319493][T11968] usb 5-1: Using ep0 maxpacket: 16 [ 578.343493][T11968] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 578.382487][T11968] usb 5-1: config 0 has no interface number 0 [ 579.188320][T11968] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 579.206562][T11968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.214608][T11968] usb 5-1: Product: syz [ 579.238724][T11968] usb 5-1: Manufacturer: syz [ 579.266824][T11968] usb 5-1: SerialNumber: syz [ 579.317699][T11968] usb 5-1: config 0 descriptor?? [ 579.390461][T11968] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 579.648721][T12228] netlink: 88 bytes leftover after parsing attributes in process `syz.8.1663'. [ 579.890139][T12254] batadv_slave_1: entered allmulticast mode [ 579.920308][T12254] batadv_slave_1: left allmulticast mode [ 580.378004][T11939] gspca_sunplus: reg_r err -71 [ 580.384746][T11939] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 580.422857][T11939] usb 6-1: USB disconnect, device number 26 [ 581.278037][T11968] gspca_spca1528: reg_r err -71 [ 581.286779][T11968] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 581.358113][T11968] usb 5-1: USB disconnect, device number 30 [ 583.505165][ T5826] block nbd6: Receive control failed (result -32) [ 583.531665][ T5826] block nbd6: Receive control failed (result -32) [ 583.662576][T12268] block nbd6: shutting down sockets [ 587.844409][T12335] tipc: Enabled bearer , priority 0 [ 588.004120][T12336] syzkaller0: entered promiscuous mode [ 588.055351][T12336] syzkaller0: entered allmulticast mode [ 588.088054][T12336] tipc: Resetting bearer [ 588.164752][T12324] tipc: Resetting bearer [ 588.389045][T12362] kvm: pic: non byte write [ 591.000337][ T5834] Bluetooth: hci5: command 0xfc11 tx timeout [ 591.007626][ T5826] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 591.269211][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 591.269232][ T29] audit: type=1326 audit(1737411111.360:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12393 comm="syz.4.1702" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b0f385d29 code=0x0 [ 591.296330][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.666444][T12324] tipc: Disabling bearer [ 595.289961][T11972] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 595.456656][T11972] usb 5-1: Using ep0 maxpacket: 16 [ 595.463725][T11972] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 595.484126][T11972] usb 5-1: config 0 has no interface number 0 [ 595.496548][T11972] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 595.513257][T11972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.533427][T11972] usb 5-1: Product: syz [ 595.549327][T11972] usb 5-1: Manufacturer: syz [ 595.554000][T11972] usb 5-1: SerialNumber: syz [ 595.561701][T11972] usb 5-1: config 0 descriptor?? [ 595.572115][T11972] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 595.957075][T11939] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 596.042898][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 596.126930][T11939] usb 4-1: Using ep0 maxpacket: 32 [ 596.150175][T11939] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 596.158799][T11939] usb 4-1: config 0 has no interface number 0 [ 596.165123][T11939] usb 4-1: config 0 interface 184 has no altsetting 0 [ 596.206598][T11939] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 596.215703][T11939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.234243][T11939] usb 4-1: Product: syz [ 596.263639][T11939] usb 4-1: Manufacturer: syz [ 596.269787][T11939] usb 4-1: SerialNumber: syz [ 596.281536][T11939] usb 4-1: config 0 descriptor?? [ 596.299183][T11939] smsc75xx v1.0.0 [ 596.936635][T11939] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 596.948241][T11939] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 597.828673][T11972] gspca_spca1528: reg_r err -71 [ 597.855088][T11972] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 597.867575][T11972] usb 5-1: USB disconnect, device number 31 [ 598.415334][T11939] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 598.432964][T11939] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 598.444417][T11939] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 598.457536][T11939] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 598.473390][T11972] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 598.475797][T11939] usb 4-1: USB disconnect, device number 20 [ 598.651686][T11972] usb 7-1: Using ep0 maxpacket: 32 [ 598.685444][T11972] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 598.698753][T11972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.709136][T11972] usb 7-1: Product: syz [ 598.713455][T11972] usb 7-1: Manufacturer: syz [ 598.718265][T11972] usb 7-1: SerialNumber: syz [ 598.728166][T11972] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 599.057064][T12473] binder_alloc: 12472: binder_alloc_buf, no vma [ 599.948083][T11972] gspca_stk1135: reg_w 0x3 err -110 [ 599.954530][T11972] gspca_stk1135: serial bus timeout: status=0x00 [ 600.219601][T11972] gspca_stk1135: Sensor write failed [ 600.363642][T11972] gspca_stk1135: serial bus timeout: status=0x00 [ 600.399493][T11972] gspca_stk1135: Sensor write failed [ 600.404878][T11972] gspca_stk1135: serial bus timeout: status=0x00 [ 600.454241][T11972] gspca_stk1135: Sensor read failed [ 600.474404][T11972] gspca_stk1135: serial bus timeout: status=0x00 [ 600.743377][T11972] gspca_stk1135: Sensor read failed [ 600.859760][T11972] gspca_stk1135: Detected sensor type unknown (0x0) [ 600.867264][T11972] gspca_stk1135: serial bus timeout: status=0x00 [ 600.874022][T11972] gspca_stk1135: Sensor read failed [ 600.879389][T11972] gspca_stk1135: serial bus timeout: status=0x00 [ 600.885794][T11972] gspca_stk1135: Sensor read failed [ 600.891185][T11972] gspca_stk1135: serial bus timeout: status=0x00 [ 600.897666][T11972] gspca_stk1135: Sensor write failed [ 600.903010][T11972] gspca_stk1135: serial bus timeout: status=0x00 [ 600.909933][T11972] gspca_stk1135: Sensor write failed [ 600.915398][T11972] stk1135 7-1:64.0: probe with driver stk1135 failed with error -110 [ 601.364822][T12498] overlayfs: failed to clone upperpath [ 601.547023][T11972] usb 7-1: USB disconnect, device number 20 [ 601.615187][T12503] binder: 12502:12503 ioctl c0306201 20000bc0 returned -14 [ 604.633631][T12534] netlink: 'syz.3.1747': attribute type 10 has an invalid length. [ 604.656596][T12534] syz_tun: entered promiscuous mode [ 604.678667][T12534] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 606.196088][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1756'. [ 606.328742][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 606.355194][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 606.367959][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 606.378887][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 606.388791][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 606.404104][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 606.679558][T12563] chnl_net:caif_netlink_parms(): no params data found [ 607.139026][ T29] audit: type=1800 audit(1737411127.220:59): pid=12579 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1760" name="/" dev="fuse" ino=1 res=0 errno=0 [ 607.391055][T12563] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.406756][T12563] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.425052][T12563] bridge_slave_0: entered allmulticast mode [ 607.435596][T12563] bridge_slave_0: entered promiscuous mode [ 607.452755][T12563] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.465450][T12563] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.482400][T12563] bridge_slave_1: entered allmulticast mode [ 607.492290][T12563] bridge_slave_1: entered promiscuous mode [ 607.566292][T12563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.587951][T12563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.637291][T11959] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 607.693274][T12563] team0: Port device team_slave_0 added [ 607.715028][T12563] team0: Port device team_slave_1 added [ 607.784195][T12563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.806825][T12563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.848229][T11959] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 607.852134][T12563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.893716][T11959] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.894980][T12563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.930237][T12563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.958851][T11959] usb 7-1: config 0 descriptor?? [ 608.009131][T12563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.087861][T12597] syz.8.1765[12597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 608.087983][T12597] syz.8.1765[12597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 608.127191][T12597] syz.8.1765[12597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 608.160736][T12563] hsr_slave_0: entered promiscuous mode [ 608.392078][T12563] hsr_slave_1: entered promiscuous mode [ 608.411915][T12563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 608.432036][T12563] Cannot create hsr debugfs directory [ 608.437946][ T5826] Bluetooth: hci0: command tx timeout [ 609.741399][T12563] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 609.773285][T12563] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 609.820126][T12563] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 609.859632][T12563] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 610.121799][T12563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.168641][T12563] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.190043][T12206] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.197285][T12206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.206630][T11959] usb 7-1: Cannot set autoneg [ 610.211542][T11959] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 610.267798][T11971] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 610.398567][T12206] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.406622][T12206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.418884][T11959] usb 7-1: USB disconnect, device number 21 [ 610.516667][ T5826] Bluetooth: hci0: command tx timeout [ 610.526723][T11971] usb 5-1: Using ep0 maxpacket: 32 [ 610.549473][T11971] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 610.562003][T11971] usb 5-1: config 0 has no interface number 0 [ 610.590526][T11971] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 610.605402][T11971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.616859][T11971] usb 5-1: Product: syz [ 610.621846][T11971] usb 5-1: Manufacturer: syz [ 610.629528][T11971] usb 5-1: SerialNumber: syz [ 610.673213][T11971] usb 5-1: config 0 descriptor?? [ 610.715417][T11971] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 610.911660][T11971] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 610.969931][T11971] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 611.117781][T12612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.167163][T12612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.531221][T12563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.608625][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 611.618969][T11972] usb 5-1: USB disconnect, device number 32 [ 611.648330][T11972] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 611.689606][T11972] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 611.727142][T11972] quatech2 5-1:0.51: device disconnected [ 611.948920][T12563] veth0_vlan: entered promiscuous mode [ 611.986115][T12563] veth1_vlan: entered promiscuous mode [ 612.039674][T12563] veth0_macvtap: entered promiscuous mode [ 612.052134][T12563] veth1_macvtap: entered promiscuous mode [ 612.070743][T12563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.082047][T12563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.092008][T12563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.103489][T12563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.115039][T12563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.129859][T12563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.142571][T12563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.156411][T12563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.173933][T12563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.185675][T12563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.197895][T12563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.217420][T12563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.229866][T12563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.242336][T12563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.253203][T12563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.263517][T12563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.275008][T12563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.285570][T12563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.296773][T12563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.312341][T12563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.325356][T12563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.338561][T12563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.351875][T12563] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.362133][T12563] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.374937][T12563] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.388877][T12563] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.597719][ T5826] Bluetooth: hci0: command tx timeout [ 613.197425][ T6137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.205326][ T6137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.286056][ T6137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.306013][ T6137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.331408][T12675] Bluetooth: MGMT ver 1.23 [ 614.948195][ T5826] Bluetooth: hci0: command tx timeout [ 615.887374][T12693] syzkaller0: create flow: hash 1746384019 index 1 [ 615.890667][T12210] syzkaller0: tun_net_xmit 76 [ 615.928886][ T5876] syzkaller0: tun_net_xmit 76 [ 615.934252][T12210] syzkaller0: tun_net_xmit 48 [ 615.981769][ T5876] syzkaller0: tun_net_xmit 76 [ 616.247684][T11939] syzkaller0: tun_net_xmit 76 [ 616.300820][T12689] syzkaller0: delete flow: hash 1746384019 index 1 [ 618.228654][ T29] audit: type=1804 audit(1737411138.310:60): pid=12718 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.9.1803" name="/newroot/3/bus/bus" dev="overlay" ino=41 res=1 errno=0 [ 618.251336][T12718] Invalid ELF header magic: != ELF [ 618.344330][T12721] netfs: Couldn't get user pages (rc=-14) [ 619.933092][T12739] overlayfs: failed to clone upperpath [ 620.002782][T12739] Invalid ELF header len 8 [ 620.336895][T12748] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1814'. [ 620.463013][T12732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.708963][ T29] audit: type=1326 audit(1737411143.800:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12764 comm="syz.8.1820" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28ad185d29 code=0x0 [ 624.167091][T11961] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 624.312335][T12787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 624.382751][T11961] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.403368][T11961] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 624.424204][T11961] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 624.447259][T11961] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 624.455447][T11961] usb 10-1: SerialNumber: syz [ 624.720246][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.131432][T11961] usb 10-1: 0:2 : does not exist [ 625.258579][T11961] usb 10-1: USB disconnect, device number 2 [ 625.537336][T12542] udevd[12542]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 626.378001][T12812] overlayfs: failed to clone upperpath [ 626.857841][T11971] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 627.006848][T11959] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 627.129379][T11971] usb 4-1: Using ep0 maxpacket: 16 [ 627.138505][T11971] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 627.160411][T11971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 627.188340][T11971] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 627.206248][T11971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.216272][T11971] usb 4-1: Product: syz [ 627.233578][T11959] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 627.260301][T11959] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 627.273209][T12825] netlink: 'syz.4.1841': attribute type 3 has an invalid length. [ 627.285967][T12825] netlink: 'syz.4.1841': attribute type 3 has an invalid length. [ 627.286879][T11959] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 627.303335][T11971] usb 4-1: Manufacturer: syz [ 627.303358][T11971] usb 4-1: SerialNumber: syz [ 627.305593][T11971] usb 4-1: config 0 descriptor?? [ 627.308853][T11959] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 627.346537][T11959] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 627.348505][T11971] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 627.383794][T12826] bridge_slave_0: left allmulticast mode [ 627.390276][T12826] bridge_slave_0: left promiscuous mode [ 627.396363][T12826] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.415147][T11959] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 627.431843][T11959] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 627.432969][T11971] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 627.456189][T11959] usb 7-1: string descriptor 0 read error: -22 [ 627.480620][T12826] bridge_slave_1: left allmulticast mode [ 627.490043][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1842'. [ 627.507860][T12826] bridge_slave_1: left promiscuous mode [ 627.514223][T11959] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 627.524710][T12826] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.532945][T11959] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.550240][T11959] usb 7-1: config 0 descriptor?? [ 627.558781][T12826] bond0: (slave bond_slave_0): Releasing backup interface [ 627.567871][T12820] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 627.578849][T11959] hub 7-1:0.0: bad descriptor, ignoring hub [ 627.585262][T11959] hub 7-1:0.0: probe with driver hub failed with error -5 [ 627.616177][T12826] bond0: (slave bond_slave_1): Releasing backup interface [ 627.628029][T11959] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input35 [ 627.680915][T12830] netfs: Couldn't get user pages (rc=-14) [ 627.695229][ C1] usb_acecad 7-1:0.0: can't resubmit intr, dummy_hcd.6-1/input0, status -1 [ 627.738174][T12826] team0: Port device team_slave_0 removed [ 627.781950][T12826] team0: Port device team_slave_1 removed [ 627.809627][T12826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.835962][T12826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.864850][T12826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.897564][T12826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.926258][T12820] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 627.932880][T12820] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 627.953291][T11971] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 627.964230][T11971] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 627.987090][T12820] vhci_hcd vhci_hcd.0: Device attached [ 628.092837][T12831] vhci_hcd: connection closed [ 628.100904][ T5919] vhci_hcd: stop threads [ 628.110887][T12828] : entered promiscuous mode [ 628.122637][T11972] usb 7-1: USB disconnect, device number 22 [ 628.166847][T11968] vhci_hcd: vhci_device speed not set [ 628.182622][ T5919] vhci_hcd: release socket [ 628.218157][ T5919] vhci_hcd: disconnect device [ 628.238602][T11968] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 628.271528][T11968] usb 45-1: enqueue for inactive port 0 [ 628.357040][T11968] vhci_hcd: vhci_device speed not set [ 628.656308][T11971] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 628.970382][T11971] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 629.557008][T11961] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 629.761164][T11961] usb 10-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.4a [ 629.777826][T11961] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.800272][T11971] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 629.814858][T11961] usb 10-1: config 0 descriptor?? [ 629.826572][T11971] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 629.846057][T11961] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 629.846619][T11971] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 629.899214][T11971] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 629.934642][T11971] usb 4-1: USB disconnect, device number 21 [ 630.051033][T12846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 630.078555][T11961] gspca_sn9c2028: read1 error 0 [ 630.296119][T11961] gspca_sn9c2028: read1 error -71 [ 630.384089][T11961] gspca_sn9c2028: read1 error -71 [ 630.435138][T11961] sn9c2028 10-1:0.0: probe with driver sn9c2028 failed with error -71 [ 630.517779][T11961] usb 10-1: USB disconnect, device number 3 [ 633.296007][T12896] binder: BINDER_SET_CONTEXT_MGR already set [ 633.306157][T12896] binder: 12895:12896 ioctl 4018620d 20000100 returned -16 [ 633.324712][T12896] binder: BINDER_SET_CONTEXT_MGR already set [ 633.335924][T12896] binder: 12895:12896 ioctl 4018620d 20000040 returned -16 [ 633.765405][T12904] syzkaller0: entered promiscuous mode [ 633.773450][T12904] syzkaller0: entered allmulticast mode [ 634.348743][ T29] audit: type=1326 audit(1737411154.440:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12914 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631f585d29 code=0x7ffc0000 [ 634.414083][ T29] audit: type=1326 audit(1737411154.440:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12914 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631f585d29 code=0x7ffc0000 [ 634.495895][ T29] audit: type=1326 audit(1737411154.460:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12914 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f631f585d29 code=0x7ffc0000 [ 634.576905][ T29] audit: type=1326 audit(1737411154.460:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12914 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631f585d29 code=0x7ffc0000 [ 634.720693][ T29] audit: type=1326 audit(1737411154.460:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12914 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631f585d29 code=0x7ffc0000 [ 634.742226][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.052481][ T29] audit: type=1326 audit(1737411154.460:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12914 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f631f584690 code=0x7ffc0000 [ 635.073989][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.041984][T12918] Set syz1 is full, maxelem 65536 reached [ 636.065007][ T29] audit: type=1326 audit(1737411154.460:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12914 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f631f584690 code=0x7ffc0000 [ 636.415325][ T29] audit: type=1326 audit(1737411154.460:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12914 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631f585d29 code=0x7ffc0000 [ 636.652419][ T29] audit: type=1326 audit(1737411154.460:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12914 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631f585d29 code=0x7ffc0000 [ 636.776522][ T29] audit: type=1326 audit(1737411154.460:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12914 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f631f584690 code=0x7ffc0000 [ 638.170502][T12940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 640.739349][T11961] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 641.024087][T11961] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz0] on syz0 [ 644.195935][T12985] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 645.906794][T11959] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 646.103301][T11959] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 646.127775][T11959] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.137895][T11959] usb 7-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 646.147176][T11959] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.157538][T11959] usb 7-1: config 0 descriptor?? [ 646.622134][T11959] aquacomputer_d5next 0003:0C70:F012.002A: unknown main item tag 0x0 [ 647.850754][T11959] aquacomputer_d5next 0003:0C70:F012.002A: hidraw0: USB HID v0.00 Device [HID 0c70:f012] on usb-dummy_hcd.6-1/input0 [ 647.923675][T11959] usb 7-1: USB disconnect, device number 23 [ 652.139920][T13084] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1915'. [ 652.218636][T11970] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 652.758957][T11970] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 652.786519][T11970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 652.813152][T11970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 652.866529][T11970] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 652.909924][T11970] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 652.934449][T11970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.966239][T11970] usb 5-1: config 0 descriptor?? [ 653.223991][T13100] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1921'. [ 653.246615][T13100] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1921'. [ 653.435074][T11970] plantronics 0003:047F:FFFF.002B: ignoring exceeding usage max [ 653.500119][T11970] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 653.528266][T11970] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 653.705795][T13088] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 653.720478][T13088] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 653.957881][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1923'. [ 654.013441][T13088] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 654.045867][T13088] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 654.143110][T13088] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 654.164444][T13088] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 654.317405][T11961] usb 5-1: USB disconnect, device number 33 [ 655.168010][T13088] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 655.203850][T13088] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 656.141698][T13088] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 656.173223][T13088] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 656.305948][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1933'. [ 656.368110][T13139] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1933'. [ 656.616273][T13144] netlink: 'syz.9.1936': attribute type 4 has an invalid length. [ 656.672881][T13144] netlink: 'syz.9.1936': attribute type 4 has an invalid length. [ 656.701805][T13149] overlayfs: failed to clone upperpath [ 656.763935][T13142] binder: 13141:13142 ioctl c0306201 20000680 returned -14 [ 661.764074][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1946'. [ 661.831107][T13180] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer. [ 663.632472][T11971] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 663.812095][T11971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.392825][T11971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.403376][T11971] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 664.427344][T11971] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 664.455702][T11971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.614447][T11971] usb 4-1: config 0 descriptor?? [ 665.145455][T13211] usb usb9: usbfs: process 13211 (syz.4.1956) did not claim interface 0 before use [ 665.780007][T13218] overlayfs: failed to clone upperpath [ 665.789347][T13220] block nbd9: NBD_DISCONNECT [ 665.790632][T13215] block nbd9: shutting down sockets [ 665.806316][T13220] block nbd9: Send disconnect failed -32 [ 665.819101][T13199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.829846][T13199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.844451][T11971] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 665.875769][T11971] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 665.921293][T11971] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 666.525416][T11971] usb 4-1: USB disconnect, device number 22 [ 667.159991][T13243] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.177328][T13243] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.899573][T13254] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1968'. [ 668.187794][T13261] overlayfs: upper fs does not support tmpfile. [ 669.118376][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 669.126034][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 669.175209][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 669.189027][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 669.204947][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 669.236672][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 669.276288][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 669.323494][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 670.297323][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 670.304802][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 670.313064][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 670.320898][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 670.734652][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 670.742336][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 670.749824][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 670.758711][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 670.766139][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 670.773647][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 670.781144][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 670.788625][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 670.796187][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 670.803736][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 670.811228][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 670.840309][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 670.868402][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 670.910029][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 670.951606][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 671.013300][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 671.251099][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 671.259619][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 671.267469][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 671.278268][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 671.285720][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 671.295658][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 671.306532][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 671.313974][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 671.373696][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 671.443161][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 671.553535][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 672.056202][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 672.115389][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 672.146367][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 672.223792][ T6137] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.243694][T11970] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 672.313593][T11970] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 672.541363][ T6137] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.348239][ T6137] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.034427][ T6137] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.325438][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 674.336136][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 674.354646][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 674.364975][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 674.373212][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 674.406886][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 675.296840][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 675.306869][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 675.314273][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 675.324547][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 675.376881][ T5826] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 675.389164][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 677.486621][ T5826] Bluetooth: hci4: command tx timeout [ 678.701924][ T6137] bond0 (unregistering): Released all slaves [ 679.023800][T13381] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 679.393889][T13322] chnl_net:caif_netlink_parms(): no params data found [ 679.483230][ T6137] hsr_slave_0: left promiscuous mode [ 679.493239][ T6137] hsr_slave_1: left promiscuous mode [ 679.557176][ T5826] Bluetooth: hci4: command tx timeout [ 679.691709][ T6137] veth1_macvtap: left promiscuous mode [ 679.699812][ T6137] veth0_macvtap: left promiscuous mode [ 680.593872][T13398] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2013'. [ 680.606837][T13398] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2013'. [ 680.619155][T13398] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2013'. [ 680.696734][ T6137] veth1_vlan: left promiscuous mode [ 680.757110][ T6137] veth0_vlan: left promiscuous mode [ 681.877244][ T5826] Bluetooth: hci4: command tx timeout [ 683.956852][ T5834] Bluetooth: hci4: command tx timeout [ 686.132531][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.778566][T13322] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.785698][T13322] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.813121][T13322] bridge_slave_0: entered allmulticast mode [ 686.842421][T13322] bridge_slave_0: entered promiscuous mode [ 686.872327][T13322] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.880237][T13322] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.923926][T13322] bridge_slave_1: entered allmulticast mode [ 686.951209][T13322] bridge_slave_1: entered promiscuous mode [ 687.089759][T13322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.112420][T13322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.398516][T13322] team0: Port device team_slave_0 added [ 688.452047][T13322] team0: Port device team_slave_1 added [ 688.541789][ T6137] IPVS: stop unused estimator thread 0... [ 688.549868][T13322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.567653][T13322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.674662][T13322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.691504][T13322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.700749][T13322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.726931][ T5876] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 688.743983][T13322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.906655][ T5876] usb 10-1: Using ep0 maxpacket: 8 [ 690.055322][ T5876] usb 10-1: config index 0 descriptor too short (expected 6427, got 27) [ 690.063910][ T5876] usb 10-1: config 0 has an invalid interface number: 21 but max is 0 [ 690.078216][ T5876] usb 10-1: config 0 has no interface number 0 [ 690.084446][ T5876] usb 10-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 690.118171][T13322] hsr_slave_0: entered promiscuous mode [ 690.156311][T13322] hsr_slave_1: entered promiscuous mode [ 690.164473][ T5876] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 690.196722][T13322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 690.200987][ T5876] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 690.204333][T13322] Cannot create hsr debugfs directory [ 690.650867][ T5876] usb 10-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 690.666655][ T5876] usb 10-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 690.675976][ T5876] usb 10-1: Product: syz [ 690.686134][ T5876] usb 10-1: Manufacturer: syz [ 690.711358][ T5876] usb 10-1: config 0 descriptor?? [ 690.736994][T13466] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 693.252667][ T5876] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.21/input/input36 [ 693.658301][T11971] usb 10-1: USB disconnect, device number 4 [ 693.664257][ C0] keyspan_remote 10-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 698.339709][T13553] atomic_op ffff88805d043198 conn xmit_atomic 0000000000000000 [ 699.426618][T11968] IPVS: starting estimator thread 0... [ 699.446738][T11961] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 699.458866][T13322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 699.488234][T13322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 699.503006][T13322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 699.525124][T13322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 699.576862][T13555] IPVS: using max 19 ests per chain, 45600 per kthread [ 699.628979][T11961] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 699.676641][T11961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.739822][T13322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.761007][T13322] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.773751][T11961] usb 7-1: config 0 descriptor?? [ 699.785573][T11961] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 699.798091][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.805259][ T5919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.222650][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.229921][ T5919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.707201][T11961] gp8psk: usb in 128 operation failed. [ 701.303528][T11961] gp8psk: FW Version = 144.22.38 (0x901626) Build 2022/167/212 [ 701.359295][T13576] pim6reg1: entered promiscuous mode [ 701.365862][T11961] gp8psk: usb in 149 operation failed. [ 701.396210][T11961] gp8psk: failed to get FPGA version [ 701.413440][T11961] gp8psk: usb in 138 operation failed. [ 701.607870][T11961] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 701.619383][T11961] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 701.638021][T11961] usb 7-1: USB disconnect, device number 24 [ 701.698894][T13576] pim6reg1: entered allmulticast mode [ 703.580529][T13322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.696200][T13322] veth0_vlan: entered promiscuous mode [ 703.717831][T13322] veth1_vlan: entered promiscuous mode [ 703.963187][T13600] syz.3.2071: attempt to access beyond end of device [ 703.963187][T13600] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 703.980000][T13322] veth0_macvtap: entered promiscuous mode [ 703.989852][T13600] hpfs: hpfs_map_sector(): read error [ 704.012366][T13322] veth1_macvtap: entered promiscuous mode [ 704.057628][T13322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.076779][T13322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.087424][T13322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.111232][T13322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.130510][T13322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.404459][T13322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.515133][T13322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.638450][T13322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.655004][T13322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.682565][T13322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.710278][T13322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.739481][T13322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.906514][T13322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.917147][T13322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.941429][T13322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.736575][T13322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.932919][T13322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.563540][T13322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.931214][T13322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.948785][T13322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.006492][T13322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.764247][T13322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.939791][T13322] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.986947][T13322] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.995742][T13322] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.050792][T13322] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.294388][T12212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.339010][T12212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.433561][ T2978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.720284][ T2978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.306964][T11944] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 713.816085][T11944] usb 7-1: config 0 has an invalid interface number: 95 but max is 0 [ 713.928015][T11944] usb 7-1: config 0 has no interface number 0 [ 713.934199][T11944] usb 7-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 713.993786][T11944] usb 7-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 714.013378][T11944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.033883][T11944] usb 7-1: Product: syz [ 714.057382][T11944] usb 7-1: Manufacturer: syz [ 714.095815][T11944] usb 7-1: SerialNumber: syz [ 714.120437][T11944] usb 7-1: config 0 descriptor?? [ 714.144356][T13680] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 714.544384][T11944] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 714.573734][T11944] usb 7-1: MIDIStreaming interface descriptor not found [ 714.717113][T11944] usb 7-1: USB disconnect, device number 25 [ 715.843608][T13712] udevd[13712]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 719.012542][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 719.012563][ T29] audit: type=1326 audit(1737411239.100:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13740 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631f585d29 code=0x7ffc0000 [ 719.054833][T13739] overlayfs: failed to clone upperpath [ 719.155168][ T29] audit: type=1326 audit(1737411239.100:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13740 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631f585d29 code=0x7ffc0000 [ 719.216843][ T29] audit: type=1326 audit(1737411239.110:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13740 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f631f585d29 code=0x7ffc0000 [ 719.248428][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2106'. [ 719.330306][ T29] audit: type=1326 audit(1737411239.110:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13740 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631f585d29 code=0x7ffc0000 [ 719.456936][ T29] audit: type=1326 audit(1737411239.110:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13740 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631f585d29 code=0x7ffc0000 [ 719.536820][ T29] audit: type=1326 audit(1737411239.110:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13740 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f631f585d29 code=0x7ffc0000 [ 719.573217][ T29] audit: type=1326 audit(1737411239.110:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13740 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631f585d29 code=0x7ffc0000 [ 719.608847][ T29] audit: type=1326 audit(1737411239.110:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13740 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631f585d29 code=0x7ffc0000 [ 719.641245][ T29] audit: type=1326 audit(1737411239.110:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13740 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f631f585d29 code=0x7ffc0000 [ 719.671558][ T29] audit: type=1326 audit(1737411239.110:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13740 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631f585d29 code=0x7ffc0000 [ 721.406759][T11971] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 721.706537][T11971] usb 7-1: Using ep0 maxpacket: 16 [ 721.737884][T11971] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 721.776588][T11971] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 721.823570][T11971] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 721.847660][T11971] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.864885][T11971] usb 7-1: Product: syz [ 721.869227][T11971] usb 7-1: Manufacturer: syz [ 721.873952][T11971] usb 7-1: SerialNumber: syz [ 722.667777][T11971] usb 7-1: 0:2 : does not exist [ 722.716085][T11971] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 722.821685][T11971] usb 7-1: USB disconnect, device number 26 [ 722.840986][T13796] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2122'. [ 723.897509][T13807] : entered promiscuous mode [ 723.959007][T13710] udevd[13710]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 729.641906][T13852] hpfs: Bad magic ... probably not HPFS [ 735.495157][T13884] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.2147'. [ 735.504975][T13884] openvswitch: netlink: Flow actions attr not present in new flow. [ 735.528138][T13883] overlayfs: failed to clone upperpath [ 738.289147][T13907] 9pnet: bogus RREAD count (69 > 41) [ 738.426547][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 738.426600][ T29] audit: type=1800 audit(1737411258.470:119): pid=13907 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2154" name="/" dev="9p" ino=2 res=0 errno=0 [ 738.989910][T13915] syz.8.2157 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 740.710038][T13930] kvm: kvm [13925]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4000 [ 744.426295][T13950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.465227][T13950] bond0: (slave rose0): Enslaving as an active interface with an up link [ 744.775599][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 744.790782][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 744.801836][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 744.820029][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 744.828709][ T5826] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 744.836743][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 746.950076][ T5834] Bluetooth: hci5: command tx timeout [ 747.579746][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.049949][T13994] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 748.828308][T13970] chnl_net:caif_netlink_parms(): no params data found [ 748.996747][ T5826] Bluetooth: hci5: command tx timeout [ 749.624623][ T29] audit: type=1326 audit(1737411269.500:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14010 comm="syz.9.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12df785d29 code=0x7ffc0000 [ 749.783828][ T29] audit: type=1326 audit(1737411269.500:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14010 comm="syz.9.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12df785d29 code=0x7ffc0000 [ 750.053453][T13970] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.083722][T13970] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.161288][T13970] bridge_slave_0: entered allmulticast mode [ 750.197077][ T29] audit: type=1326 audit(1737411269.510:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14010 comm="syz.9.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f12df785d29 code=0x7ffc0000 [ 750.319688][T13970] bridge_slave_0: entered promiscuous mode [ 750.487829][T13970] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.577688][ T29] audit: type=1326 audit(1737411269.510:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14010 comm="syz.9.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12df785d29 code=0x7ffc0000 [ 750.629236][T13970] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.961688][T13970] bridge_slave_1: entered allmulticast mode [ 751.106838][ T5826] Bluetooth: hci5: command tx timeout [ 751.440986][T13970] bridge_slave_1: entered promiscuous mode [ 751.447643][ T29] audit: type=1326 audit(1737411269.510:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14010 comm="syz.9.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12df785d29 code=0x7ffc0000 [ 751.447692][ T29] audit: type=1326 audit(1737411269.510:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14010 comm="syz.9.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f12df785d29 code=0x7ffc0000 [ 751.526725][ T29] audit: type=1326 audit(1737411269.510:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14010 comm="syz.9.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12df785d29 code=0x7ffc0000 [ 751.637262][T13970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.656834][ T29] audit: type=1326 audit(1737411269.510:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14010 comm="syz.9.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12df785d29 code=0x7ffc0000 [ 751.670960][T13970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.710378][ T29] audit: type=1326 audit(1737411269.510:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14010 comm="syz.9.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f12df785d29 code=0x7ffc0000 [ 751.749481][ T29] audit: type=1326 audit(1737411269.510:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14010 comm="syz.9.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12df785d29 code=0x7ffc0000 [ 752.231902][T13970] team0: Port device team_slave_0 added [ 752.241572][T13970] team0: Port device team_slave_1 added [ 752.278216][T13970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.296293][T13970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.350731][T13970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.369690][T13970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.377280][T13970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.414862][T13970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.609423][T13970] hsr_slave_0: entered promiscuous mode [ 752.687775][T13970] hsr_slave_1: entered promiscuous mode [ 752.705224][T13970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 752.713137][T13970] Cannot create hsr debugfs directory [ 753.089944][T14037] netlink: 'syz.8.2188': attribute type 1 has an invalid length. [ 753.176860][ T5826] Bluetooth: hci5: command tx timeout [ 756.651989][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 756.652066][ T29] audit: type=1400 audit(1737411276.730:131): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14065 comm="syz.0.2197" saddr=10.128.0.169 src=30008 daddr=10.128.1.8 dest=41596 netif=eth0 [ 756.757998][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 756.764578][ T5193] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 756.776164][T13885] audit: audit_backlog=65 > audit_backlog_limit=64 [ 756.793727][T13885] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 756.796571][ T29] audit: type=1400 audit(1737411276.750:132): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14068 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 756.827458][T13885] audit: backlog limit exceeded [ 756.832582][ T5193] audit: backlog limit exceeded [ 756.847488][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2198'. [ 756.862290][T13885] audit: audit_backlog=65 > audit_backlog_limit=64 [ 756.869031][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 758.306868][T14080] ipt_ECN: cannot use operation on non-tcp rule [ 759.522338][T13970] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 759.523984][T14088] syz.8.2204: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 759.627797][T13970] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 759.634695][T14088] CPU: 0 UID: 0 PID: 14088 Comm: syz.8.2204 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 759.645193][T14088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 759.655295][T14088] Call Trace: [ 759.658612][T14088] [ 759.661581][T14088] dump_stack_lvl+0x241/0x360 [ 759.666316][T14088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 759.671581][T14088] ? __pfx__printk+0x10/0x10 [ 759.676225][T14088] ? __rcu_read_unlock+0xa1/0x110 [ 759.681297][T14088] warn_alloc+0x278/0x410 [ 759.685684][T14088] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 759.691809][T14088] ? __pfx_warn_alloc+0x10/0x10 [ 759.696878][T14088] ? kasan_save_track+0x3f/0x80 [ 759.701773][T14088] ? __kasan_kmalloc+0x98/0xb0 [ 759.706590][T14088] ? xsk_setsockopt+0x598/0x950 [ 759.711474][T14088] ? do_sock_setsockopt+0x3af/0x720 [ 759.716715][T14088] ? __x64_sys_setsockopt+0x1ee/0x280 [ 759.722107][T14088] ? do_syscall_64+0xf3/0x230 [ 759.726820][T14088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.732903][T14088] __vmalloc_node_range_noprof+0x126/0x1380 [ 759.738871][T14088] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 759.745260][T14088] ? __kasan_kmalloc+0x98/0xb0 [ 759.750075][T14088] vmalloc_user_noprof+0x74/0x80 [ 759.755032][T14088] ? xskq_create+0xb6/0x170 [ 759.759540][T14088] xskq_create+0xb6/0x170 [ 759.763880][T14088] xsk_init_queue+0xa1/0x100 [ 759.768485][T14088] xsk_setsockopt+0x598/0x950 [ 759.773215][T14088] ? __pfx_xsk_setsockopt+0x10/0x10 [ 759.778431][T14088] ? __pfx_lock_acquire+0x10/0x10 [ 759.783465][T14088] ? __fget_files+0x2a/0x410 [ 759.788074][T14088] ? __pfx_xsk_setsockopt+0x10/0x10 [ 759.793324][T14088] do_sock_setsockopt+0x3af/0x720 [ 759.798409][T14088] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 759.804013][T14088] ? __fget_files+0x395/0x410 [ 759.808783][T14088] ? __fget_files+0x2a/0x410 [ 759.813389][T14088] __x64_sys_setsockopt+0x1ee/0x280 [ 759.818611][T14088] do_syscall_64+0xf3/0x230 [ 759.823121][T14088] ? clear_bhb_loop+0x35/0x90 [ 759.827822][T14088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.833742][T14088] RIP: 0033:0x7f28ad185d29 [ 759.838170][T14088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.857807][T14088] RSP: 002b:00007f28adf9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 759.866235][T14088] RAX: ffffffffffffffda RBX: 00007f28ad375fa0 RCX: 00007f28ad185d29 [ 759.874217][T14088] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 759.882219][T14088] RBP: 00007f28ad201b08 R08: 0000000000000020 R09: 0000000000000000 [ 759.890206][T14088] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 759.898192][T14088] R13: 0000000000000000 R14: 00007f28ad375fa0 R15: 00007ffed89888b8 [ 759.906188][T14088] [ 759.956988][T13970] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 759.977550][T14088] Mem-Info: [ 759.980885][T14088] active_anon:324 inactive_anon:6387 isolated_anon:0 [ 759.980885][T14088] active_file:22251 inactive_file:34787 isolated_file:0 [ 759.980885][T14088] unevictable:768 dirty:454 writeback:16 [ 759.980885][T14088] slab_reclaimable:8884 slab_unreclaimable:111183 [ 759.980885][T14088] mapped:33876 shmem:1407 pagetables:1055 [ 759.980885][T14088] sec_pagetables:0 bounce:0 [ 759.980885][T14088] kernel_misc_reclaimable:0 [ 759.980885][T14088] free:1291737 free_pcp:387 free_cma:0 [ 760.040870][T13970] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 760.048888][T14088] Node 0 active_anon:1296kB inactive_anon:25548kB active_file:88928kB inactive_file:139148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135504kB dirty:1816kB writeback:64kB shmem:4092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13392kB pagetables:4220kB sec_pagetables:0kB all_unreclaimable? no [ 760.370496][T14088] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 760.453727][T14088] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 760.556581][T14088] lowmem_reserve[]: 0 2492 2493 0 0 [ 760.566501][T14088] Node 0 DMA32 free:1242636kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1296kB inactive_anon:25432kB active_file:88156kB inactive_file:139096kB unevictable:1536kB writepending:1936kB present:3129332kB managed:2552744kB mlocked:0kB bounce:0kB free_pcp:1340kB local_pcp:772kB free_cma:0kB [ 760.573384][T13970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.636583][T14088] lowmem_reserve[]: 0 0 0 0 0 [ 760.651875][T14088] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:772kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 760.780878][T14088] lowmem_reserve[]: 0 0 0 0 0 [ 760.828511][T14088] Node 1 Normal free:3907792kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 760.941954][T13970] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.943595][T14103] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 761.022147][T14088] lowmem_reserve[]: 0 0 0 0 0 [ 761.052895][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.064505][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.067533][T14088] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 761.171070][T14088] Node 0 DMA32: 211*4kB (UM) 687*8kB (ME) 608*16kB (UME) 384*32kB (UME) 239*64kB (UME) 58*128kB (ME) 27*256kB (UME) 28*512kB (UME) 19*1024kB (UME) 8*2048kB (UM) 277*4096kB (M) = 1242756kB [ 761.194707][T14095] kvm: pic: non byte read [ 761.195609][T14095] kvm: pic: level sensitive irq not supported [ 761.286734][T14088] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 761.327052][T14095] kvm: pic: non byte read [ 761.337580][T14095] kvm: pic: level sensitive irq not supported [ 761.337750][T14095] kvm: pic: non byte read [ 761.358249][T14088] Node 1 Normal: 222*4kB (UM) 59*8kB (UME) 42*16kB (UME) 223*32kB (UME) 98*64kB (UME) 27*128kB (UME) 17*256kB (UM) 9*512kB (UME) 5*1024kB (UME) 4*2048kB (UE) 944*4096kB (M) = 3907792kB [ 761.377400][T14095] kvm: pic: level sensitive irq not supported [ 761.377493][T14095] kvm: pic: non byte read [ 761.405195][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.412495][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.447232][T14088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 761.508224][T14088] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 761.557734][T14088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 761.596713][T14088] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 761.647900][T14088] 59475 total pagecache pages [ 761.656708][ T29] kauditd_printk_skb: 8864 callbacks suppressed [ 761.656726][ T29] audit: type=1400 audit(1737411281.740:3678): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14106 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 761.696679][T14088] 0 pages in swap cache [ 761.713914][T14088] Free swap = 124608kB [ 761.734265][T14088] Total swap = 124996kB [ 761.751241][T14107] audit: audit_backlog=65 > audit_backlog_limit=64 [ 761.759241][T14108] audit: audit_backlog=65 > audit_backlog_limit=64 [ 761.765801][T14108] audit: audit_lost=1780 audit_rate_limit=0 audit_backlog_limit=64 [ 761.786886][T14088] 2097051 pages RAM [ 761.788659][ T29] audit: type=1400 audit(1737411281.740:3679): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14106 comm="syz-executor" name="403" dev="tmpfs" ino=2097 [ 761.802669][T14088] 0 pages HighMem/MovableOnly [ 761.816492][ T29] audit: type=1400 audit(1737411281.740:3680): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=14106 comm="syz-executor" opid=14106 ocomm="syz-executor" [ 761.838731][ T29] audit: type=1400 audit(1737411281.740:3681): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14106 comm="syz-executor" name="403" dev="tmpfs" ino=2097 [ 761.857946][ T29] audit: type=1400 audit(1737411281.740:3682): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14106 comm="syz-executor" name="403" dev="tmpfs" ino=2097 [ 761.877942][T14088] 427013 pages reserved [ 761.878506][T14108] audit: backlog limit exceeded [ 761.882424][T14088] 0 pages cma reserved [ 761.890934][T14107] audit: audit_lost=1781 audit_rate_limit=0 audit_backlog_limit=64 [ 762.982596][T14116] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2210'. [ 764.274029][T13970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.014417][T13970] veth0_vlan: entered promiscuous mode [ 765.063277][T13970] veth1_vlan: entered promiscuous mode [ 765.172951][T13970] veth0_macvtap: entered promiscuous mode [ 765.209004][T13970] veth1_macvtap: entered promiscuous mode [ 765.311156][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.335764][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.356309][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.396374][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.418189][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.459720][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.486690][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.516592][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.546558][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.586511][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.606543][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.628909][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.671157][T13970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.737784][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.823924][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.015679][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.786535][ T29] kauditd_printk_skb: 5643 callbacks suppressed [ 766.786559][ T29] audit: type=1400 audit(1737411286.130:6663): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.8 dest=41596 netif=eth0 [ 766.817082][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.827417][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.841734][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.853372][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.865225][ T29] audit: type=1400 audit(1737411286.250:6664): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14145 comm="syz.3.2218" saddr=10.128.0.169 src=30008 daddr=10.128.1.8 dest=41596 netif=eth0 [ 766.888794][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.900774][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.912692][ T5175] audit: audit_backlog=65 > audit_backlog_limit=64 [ 766.922070][ T5175] audit: audit_lost=2673 audit_rate_limit=0 audit_backlog_limit=64 [ 766.931459][ T29] audit: type=1400 audit(1737411286.290:6665): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14145 comm="syz.3.2218" name="405" dev="tmpfs" ino=2109 [ 766.955044][ T5175] audit: backlog limit exceeded [ 766.956606][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.970717][T14153] audit: audit_backlog=65 > audit_backlog_limit=64 [ 766.977684][ T29] audit: type=1400 audit(1737411286.290:6666): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14145 comm="syz.3.2218" name="405" dev="tmpfs" ino=2109 [ 766.997496][ T29] audit: type=1400 audit(1737411286.290:6667): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=14145 comm="syz.3.2218" name="405" dev="tmpfs" ino=2109 [ 767.000498][T14153] audit: audit_lost=2674 audit_rate_limit=0 audit_backlog_limit=64 [ 767.016817][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.037287][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.063701][T13970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.103118][T13970] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.130108][T13970] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.141738][T13970] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.185644][T13970] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.979601][T14164] vivid-007: disconnect [ 769.509700][T14161] vivid-007: reconnect [ 769.709941][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.745356][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.911119][T12204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.934181][T12204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.166945][T12563] audit_log_start: 6407 callbacks suppressed [ 772.166983][T12563] audit: audit_backlog=65 > audit_backlog_limit=64 [ 772.169535][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 772.173024][T12563] audit: audit_lost=3649 audit_rate_limit=0 audit_backlog_limit=64 [ 772.173053][T12563] audit: backlog limit exceeded [ 772.173077][T12563] audit: audit_backlog=65 > audit_backlog_limit=64 [ 772.173090][T12563] audit: audit_lost=3650 audit_rate_limit=0 audit_backlog_limit=64 [ 772.173104][T12563] audit: backlog limit exceeded [ 772.179984][ C1] audit: audit_lost=3651 audit_rate_limit=0 audit_backlog_limit=64 [ 772.180006][ C1] audit: backlog limit exceeded [ 772.181133][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 776.110161][T14249] kvm: kvm [14245]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 776.119788][T14249] kvm: kvm [14245]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 776.131346][T14249] kvm: kvm [14245]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 776.140682][T14249] kvm: kvm [14245]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 776.168847][T14249] kvm: kvm [14245]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 777.184459][ T29] kauditd_printk_skb: 4427 callbacks suppressed [ 777.184480][ T29] audit: type=1400 audit(1737411297.260:12911): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14235 comm="syz.8.2236" saddr=10.128.0.169 src=30008 daddr=10.128.1.8 dest=41596 netif=eth0 [ 777.227793][ T7631] audit: audit_backlog=65 > audit_backlog_limit=64 [ 777.236473][ T7631] audit: audit_lost=4214 audit_rate_limit=0 audit_backlog_limit=64 [ 777.243587][T13322] audit: audit_backlog=65 > audit_backlog_limit=64 [ 777.266245][ T7631] audit: backlog limit exceeded [ 777.273120][T13322] audit: audit_lost=4215 audit_rate_limit=0 audit_backlog_limit=64 [ 777.276727][ T29] audit: type=1400 audit(1737411297.290:12912): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5175 comm="syslogd" name="/" dev="sda1" ino=2 [ 777.282056][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 777.305756][ C1] audit: audit_lost=4216 audit_rate_limit=0 audit_backlog_limit=64 [ 777.313734][ C1] audit: backlog limit exceeded [ 782.993346][ T29] kauditd_printk_skb: 6230 callbacks suppressed [ 782.993366][ T29] audit: type=1400 audit(1737411302.250:15089): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14286 comm="syz.1.2248" name="newroot" dev="tmpfs" ino=2 [ 783.008364][T12563] audit: audit_backlog=65 > audit_backlog_limit=64 [ 783.056670][ T5175] audit: audit_backlog=65 > audit_backlog_limit=64 [ 783.063219][ T5175] audit: audit_lost=5568 audit_rate_limit=0 audit_backlog_limit=64 [ 783.071425][ T29] audit: type=1400 audit(1737411302.250:15090): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14286 comm="syz.1.2248" name="/" dev="devtmpfs" ino=1 [ 783.092326][T12563] audit: audit_lost=5569 audit_rate_limit=0 audit_backlog_limit=64 [ 783.107993][T12563] audit: backlog limit exceeded [ 783.113091][T12563] audit: audit_backlog=65 > audit_backlog_limit=64 [ 783.126531][ T29] audit: type=1400 audit(1737411302.250:15091): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14286 comm="syz.1.2248" name="cpu" dev="devtmpfs" ino=85 [ 783.157274][ T7631] audit: audit_backlog=65 > audit_backlog_limit=64 [ 786.993165][T14320] netlink: 1788 bytes leftover after parsing attributes in process `syz.1.2257'. [ 787.996499][ T29] kauditd_printk_skb: 5890 callbacks suppressed [ 787.996517][ T29] audit: type=1400 audit(1737411308.080:17193): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=13857 comm="udevd" path="/run/udev/data/c10:232.tmp" dev="tmpfs" ino=5984 [ 788.029308][ T29] audit: type=1400 audit(1737411308.080:17194): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13857 comm="udevd" name="/" dev="sda1" ino=2 [ 788.060730][T13857] audit: audit_backlog=65 > audit_backlog_limit=64 [ 788.076585][T13857] audit: audit_lost=6845 audit_rate_limit=0 audit_backlog_limit=64 [ 788.084623][T13857] audit: backlog limit exceeded [ 788.100871][T13857] audit: audit_backlog=65 > audit_backlog_limit=64 [ 788.108907][T14325] audit: audit_backlog=65 > audit_backlog_limit=64 [ 788.115448][T14325] audit: audit_lost=6846 audit_rate_limit=0 audit_backlog_limit=64 [ 788.153659][T13857] audit: audit_lost=6847 audit_rate_limit=0 audit_backlog_limit=64 [ 788.176948][T12563] audit: audit_backlog=65 > audit_backlog_limit=64 [ 793.347798][ T29] kauditd_printk_skb: 3268 callbacks suppressed [ 793.347821][ T29] audit: type=1400 audit(1737411313.280:19689): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14362 comm="syz.0.2267" saddr=10.128.0.169 src=30008 daddr=10.128.1.8 dest=41596 netif=eth0 [ 793.418334][T13322] audit: audit_backlog=65 > audit_backlog_limit=64 [ 793.424897][T13322] audit: audit_lost=7106 audit_rate_limit=0 audit_backlog_limit=64 [ 793.475674][T13322] audit: backlog limit exceeded [ 793.480816][T14338] audit: audit_backlog=65 > audit_backlog_limit=64 [ 793.489146][T14361] audit: audit_backlog=65 > audit_backlog_limit=64 [ 793.495893][T14361] audit: audit_lost=7107 audit_rate_limit=0 audit_backlog_limit=64 [ 793.504525][T14361] audit: backlog limit exceeded [ 793.510026][T14369] audit: audit_backlog=65 > audit_backlog_limit=64 [ 793.516597][T13322] audit: audit_backlog=65 > audit_backlog_limit=64 [ 793.823060][T14373] 9pnet_fd: Insufficient options for proto=fd [ 795.686194][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 795.706778][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 795.729021][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 795.760867][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 795.768992][ T5834] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 795.777018][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 796.116740][T14390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 796.961368][T14389] kvm: kvm [14377]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 797.018652][T14389] kvm: kvm [14377]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 797.084756][T14389] kvm: kvm [14377]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 797.098956][T14389] kvm: kvm [14377]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 797.581263][T14384] chnl_net:caif_netlink_parms(): no params data found [ 798.069084][ T5826] Bluetooth: hci6: command tx timeout [ 798.713586][T14404] audit_log_start: 6029 callbacks suppressed [ 798.713639][T14404] audit: audit_backlog=65 > audit_backlog_limit=64 [ 798.727277][T14404] audit: audit_lost=8103 audit_rate_limit=0 audit_backlog_limit=64 [ 798.737805][T14404] audit: backlog limit exceeded [ 798.742811][T14404] audit: audit_backlog=65 > audit_backlog_limit=64 [ 798.749478][T14404] audit: audit_lost=8104 audit_rate_limit=0 audit_backlog_limit=64 [ 798.759175][T14404] audit: backlog limit exceeded [ 798.762785][T11951] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 798.764289][T14404] audit: audit_backlog=65 > audit_backlog_limit=64 [ 798.778445][T14404] audit: audit_lost=8105 audit_rate_limit=0 audit_backlog_limit=64 [ 798.787186][T14404] audit: backlog limit exceeded [ 798.818165][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 799.499666][T14384] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.535117][T14384] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.551667][T14384] bridge_slave_0: entered allmulticast mode [ 799.561896][T14384] bridge_slave_0: entered promiscuous mode [ 799.570785][T14384] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.590386][T14384] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.605760][T14384] bridge_slave_1: entered allmulticast mode [ 799.633961][T14384] bridge_slave_1: entered promiscuous mode [ 800.716572][ T5834] Bluetooth: hci6: command tx timeout [ 801.056915][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 801.180570][T14384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.206072][T11951] usb 10-1: device descriptor read/all, error -71 [ 801.272910][T14384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.701325][T14384] team0: Port device team_slave_0 added [ 801.810495][T14427] syz.0.2278: attempt to access beyond end of device [ 801.810495][T14427] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 801.824161][T14427] qnx6: unable to read the first superblock [ 801.831503][T14427] syz.0.2278: attempt to access beyond end of device [ 801.831503][T14427] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 801.844546][T14427] qnx6: unable to read the first superblock [ 801.850631][T14427] qnx6: unable to read the first superblock [ 802.604474][T14384] team0: Port device team_slave_1 added [ 802.672913][T14384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.691382][T14384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.719600][T14384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.732180][T14384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.740324][T14384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.766650][ T5826] Bluetooth: hci6: command tx timeout [ 802.777575][T14384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.989427][T14384] hsr_slave_0: entered promiscuous mode [ 804.005585][ T29] kauditd_printk_skb: 2369 callbacks suppressed [ 804.005619][ T29] audit: type=1400 audit(1737411324.070:24619): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14436 comm="syz.3.2283" name="/" dev="mqueue" ino=16638 [ 804.044811][T14384] hsr_slave_1: entered promiscuous mode [ 804.056318][ T29] audit: type=1400 audit(1737411324.080:24620): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=14436 comm="syz.3.2283" name="/" dev="mqueue" ino=16638 [ 804.075890][ T29] audit: type=1400 audit(1737411324.080:24621): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=14436 comm="syz.3.2283" path=2F65EE51926F dev="mqueue" ino=50712 [ 804.095962][ T29] audit: type=1400 audit(1737411324.100:24622): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5175 comm="syslogd" name="/" dev="sda1" ino=2 [ 804.106161][T14439] audit: audit_backlog=65 > audit_backlog_limit=64 [ 804.117187][ T29] audit: type=1400 audit(1737411324.100:24623): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5175 comm="syslogd" name="var" dev="sda1" ino=1906 [ 804.122241][T14439] audit: audit_lost=8278 audit_rate_limit=0 audit_backlog_limit=64 [ 804.148212][T14439] audit: backlog limit exceeded [ 804.153373][T14439] audit: audit_backlog=65 > audit_backlog_limit=64 [ 804.159982][T14439] audit: audit_lost=8279 audit_rate_limit=0 audit_backlog_limit=64 [ 804.421162][T14384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 804.506003][T14384] Cannot create hsr debugfs directory [ 804.846547][ T5826] Bluetooth: hci6: command tx timeout [ 806.354997][T14445] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2284'. [ 809.428135][T14384] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.515893][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.540324][ T29] kauditd_printk_skb: 5657 callbacks suppressed [ 809.540345][ T29] audit: type=1400 audit(1737411328.800:27329): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14468 comm="syz.1.2291" saddr=10.128.0.169 src=30008 daddr=10.128.1.8 dest=41596 netif=eth0 [ 809.547488][T13970] audit: audit_backlog=65 > audit_backlog_limit=64 [ 809.577376][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 809.583936][ C1] audit: audit_lost=9275 audit_rate_limit=0 audit_backlog_limit=64 [ 809.591128][T14467] audit: audit_backlog=65 > audit_backlog_limit=64 [ 809.591933][ C1] audit: backlog limit exceeded [ 809.599439][T12563] audit: audit_backlog=66 > audit_backlog_limit=64 [ 809.603827][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 809.610666][T13970] audit: audit_lost=9276 audit_rate_limit=0 audit_backlog_limit=64 [ 809.617089][ C1] audit: audit_lost=9277 audit_rate_limit=0 audit_backlog_limit=64 [ 809.952290][T14384] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.448714][T14384] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.134172][T14384] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.219699][T14495] overlayfs: failed to resolve './file0': -2 [ 814.846835][ T29] kauditd_printk_skb: 4588 callbacks suppressed [ 814.846859][ T29] audit: type=1400 audit(1737411334.810:29705): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14497 comm="syz.3.2299" saddr=10.128.0.169 src=30008 daddr=10.128.1.8 dest=41596 netif=eth0 [ 814.882391][T13322] audit: audit_backlog=65 > audit_backlog_limit=64 [ 814.889784][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 814.896349][ C1] audit: audit_lost=10018 audit_rate_limit=0 audit_backlog_limit=64 [ 814.904422][ C1] audit: backlog limit exceeded [ 814.909856][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 814.916471][ C1] audit: audit_lost=10019 audit_rate_limit=0 audit_backlog_limit=64 [ 814.924490][ C1] audit: backlog limit exceeded [ 814.930094][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 814.936683][ C1] audit: audit_lost=10020 audit_rate_limit=0 audit_backlog_limit=64 [ 816.410722][T14384] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 816.609940][T14384] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 816.681067][T14384] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 816.741168][T14384] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 816.941212][T14526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2306'. [ 819.317873][T14384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.348427][T14384] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.373966][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.381182][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.443352][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.450567][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.493984][T14542] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2309'. [ 819.872700][T14546] audit_log_start: 7764 callbacks suppressed [ 819.872720][T14546] audit: audit_backlog=65 > audit_backlog_limit=64 [ 819.888258][T14549] audit: audit_backlog=65 > audit_backlog_limit=64 [ 819.915074][T14549] audit: audit_lost=11331 audit_rate_limit=0 audit_backlog_limit=64 [ 819.934200][ T5175] audit: audit_backlog=65 > audit_backlog_limit=64 [ 819.943945][T14546] audit: audit_lost=11332 audit_rate_limit=0 audit_backlog_limit=64 [ 819.956793][ T5175] audit: audit_lost=11333 audit_rate_limit=0 audit_backlog_limit=64 [ 819.964843][ T5175] audit: backlog limit exceeded [ 819.970136][ T29] audit: type=1400 audit(1737411339.940:33543): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14546 comm="modprobe" name="/" dev="sda1" ino=2 [ 820.014096][T14550] audit: audit_backlog=65 > audit_backlog_limit=64 [ 820.023710][T14546] audit: backlog limit exceeded [ 820.905427][T14384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.064817][T14384] veth0_vlan: entered promiscuous mode [ 822.620420][T14384] veth1_vlan: entered promiscuous mode [ 822.788772][T14384] veth0_macvtap: entered promiscuous mode [ 822.833759][T14384] veth1_macvtap: entered promiscuous mode [ 823.808965][T14384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.836507][T14384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.856707][T14384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.887587][T14384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.937635][T14384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.966565][T14384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.049739][T14384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.081141][T14384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.111879][T14384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.163120][T14384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.216909][T14384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.230958][T14384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.245359][T14384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.935233][ T29] kauditd_printk_skb: 3348 callbacks suppressed [ 824.935253][ T29] audit: type=1400 audit(1737411345.020:35614): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=12563 comm="syz-executor" opid=14567 ocomm="syz.9.2317" [ 824.967123][T14384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.004803][ T29] audit: type=1400 audit(1737411345.060:35615): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5175 comm="syslogd" name="/" dev="sda1" ino=2 [ 825.012792][T14384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.023870][ T29] audit: type=1400 audit(1737411345.060:35616): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5175 comm="syslogd" name="var" dev="sda1" ino=1906 [ 825.049458][ T29] audit: type=1400 audit(1737411345.060:35617): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5175 comm="syslogd" name="var" dev="sda1" ino=1906 [ 825.072979][ T29] audit: type=1400 audit(1737411345.060:35618): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5175 comm="syslogd" name="/" dev="sda1" ino=2 [ 825.091407][ T29] audit: type=1400 audit(1737411345.060:35619): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 [ 825.195724][T14384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.215723][T13970] audit: audit_backlog=65 > audit_backlog_limit=64 [ 825.226907][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 825.233528][ C1] audit: audit_lost=11761 audit_rate_limit=0 audit_backlog_limit=64 [ 825.236566][ T29] audit: type=1400 audit(1737411345.060:35620): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wa pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=9 [ 825.306507][T14384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.346511][T14384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.399615][T14384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.426486][T14384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.466502][T14384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.506792][T14384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.558792][T14384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.607466][T14384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.668337][T14384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.709016][T14384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.771281][T14384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.874566][T14384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.952825][T14384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.184378][T14384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.569056][T14384] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.579501][T14384] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.589761][T14384] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.602367][T14384] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.828537][ T5952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.858590][ T5952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.119605][T12210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.138677][T12210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.357008][ T5834] Bluetooth: hci6: command 0x0405 tx timeout [ 830.256118][ T29] kauditd_printk_skb: 5012 callbacks suppressed [ 830.256140][ T29] audit: type=1400 audit(1737411349.460:39282): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14630 comm="syz.1.2332" name="newroot" dev="tmpfs" ino=2 [ 830.330425][T13970] audit: audit_backlog=65 > audit_backlog_limit=64 [ 830.337176][T13970] audit: audit_lost=12214 audit_rate_limit=0 audit_backlog_limit=64 [ 830.345311][T13970] audit: backlog limit exceeded [ 830.345970][T14637] audit: audit_backlog=65 > audit_backlog_limit=64 [ 830.356932][T13970] audit: audit_backlog=65 > audit_backlog_limit=64 [ 830.356951][T13970] audit: audit_lost=12215 audit_rate_limit=0 audit_backlog_limit=64 [ 830.356967][T13970] audit: backlog limit exceeded [ 830.356989][T13970] audit: audit_backlog=65 > audit_backlog_limit=64 [ 830.357002][T13970] audit: audit_lost=12216 audit_rate_limit=0 audit_backlog_limit=64 [ 831.721521][T14646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2335'. [ 831.730543][T14646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2335'. [ 835.414249][T13322] audit_log_start: 3469 callbacks suppressed [ 835.414268][T13322] audit: audit_backlog=65 > audit_backlog_limit=64 [ 835.422431][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 835.434271][ C1] audit: audit_lost=12664 audit_rate_limit=0 audit_backlog_limit=64 [ 835.437077][T14384] audit: audit_backlog=65 > audit_backlog_limit=64 [ 835.442337][ C1] audit: backlog limit exceeded [ 835.449877][T14071] audit: audit_backlog=65 > audit_backlog_limit=64 [ 835.454308][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 835.460813][ T29] audit: type=1400 audit(1737411355.250:41411): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=14677 comm="syz.9.2344" opid=14677 ocomm="syz.9.2344" [ 835.466799][ C1] audit: audit_lost=12665 audit_rate_limit=0 audit_backlog_limit=64 [ 835.466827][ C1] audit: backlog limit exceeded [ 836.736561][ T5876] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 837.310103][ T5876] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.322637][ T5876] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 837.333091][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.345016][ T5876] usb 1-1: config 0 descriptor?? [ 837.354505][ T5876] pwc: Askey VC010 type 2 USB webcam detected. [ 838.398686][ T5876] pwc: recv_control_msg error -32 req 02 val 2b00 [ 838.426767][ T5876] pwc: recv_control_msg error -32 req 02 val 2700 [ 838.445669][ T5876] pwc: recv_control_msg error -32 req 02 val 2c00 [ 838.464595][ T5876] pwc: recv_control_msg error -32 req 04 val 1000 [ 838.475916][ T5876] pwc: recv_control_msg error -32 req 04 val 1300 [ 838.494003][ T5876] pwc: recv_control_msg error -32 req 04 val 1400 [ 838.512787][ T5876] pwc: recv_control_msg error -32 req 02 val 2000 [ 838.718941][ T5876] pwc: recv_control_msg error -32 req 02 val 2100 [ 838.828819][T11971] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 839.571771][ T5876] pwc: recv_control_msg error -32 req 04 val 1500 [ 839.936516][T11971] usb 3-1: Using ep0 maxpacket: 32 [ 840.116692][T11971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.136545][T11971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.192234][ T5876] pwc: recv_control_msg error -71 req 02 val 2500 [ 840.207935][T11971] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 840.221526][ T5876] pwc: recv_control_msg error -71 req 02 val 2400 [ 840.422630][ T5876] pwc: recv_control_msg error -71 req 02 val 2600 [ 840.432609][ T29] kauditd_printk_skb: 4211 callbacks suppressed [ 840.432629][ T29] audit: type=1400 audit(1737411360.530:43763): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14071 comm="udevd" name="/" dev="sda1" ino=2 [ 840.457850][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 840.520277][T14714] audit: audit_backlog=65 > audit_backlog_limit=64 [ 840.527130][T14714] audit: audit_lost=13287 audit_rate_limit=0 audit_backlog_limit=64 [ 840.535220][T14714] audit: backlog limit exceeded [ 840.540366][T14714] audit: audit_backlog=65 > audit_backlog_limit=64 [ 840.547033][T14714] audit: audit_lost=13288 audit_rate_limit=0 audit_backlog_limit=64 [ 840.555097][T14714] audit: backlog limit exceeded [ 840.560398][T14714] audit: audit_backlog=65 > audit_backlog_limit=64 [ 840.567287][T14714] audit: audit_lost=13289 audit_rate_limit=0 audit_backlog_limit=64 [ 841.246500][T11971] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 841.255619][T11971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.264097][ T5876] pwc: recv_control_msg error -71 req 02 val 2900 [ 841.280310][ T5876] pwc: recv_control_msg error -71 req 02 val 2800 [ 841.290036][ T5876] pwc: recv_control_msg error -71 req 04 val 1100 [ 841.322936][T11971] usb 3-1: config 0 descriptor?? [ 841.341140][ T5876] pwc: recv_control_msg error -71 req 04 val 1200 [ 841.652414][ T5876] pwc: Registered as video103. [ 841.681313][ T5876] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 841.763210][T14720] overlayfs: conflicting lowerdir path [ 842.497495][T14722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2356'. [ 842.600175][T11971] usbhid 3-1:0.0: can't add hid device: -71 [ 842.606260][T11971] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 842.688059][ T5876] usb 1-1: USB disconnect, device number 2 [ 842.726815][T11971] usb 3-1: USB disconnect, device number 26 [ 845.442063][ T29] kauditd_printk_skb: 7348 callbacks suppressed [ 845.442084][ T29] audit: type=1400 audit(1737411365.530:45393): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12563 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 845.485061][T14384] audit: audit_backlog=65 > audit_backlog_limit=64 [ 845.491868][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 845.499654][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 845.500390][T13322] audit: audit_backlog=65 > audit_backlog_limit=64 [ 845.506225][ C1] audit: audit_lost=15209 audit_rate_limit=0 audit_backlog_limit=64 [ 845.506250][ C1] audit: backlog limit exceeded [ 845.506946][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 845.513333][T13322] audit: audit_lost=15210 audit_rate_limit=0 audit_backlog_limit=64 [ 845.521284][ C1] audit: audit_lost=15211 audit_rate_limit=0 audit_backlog_limit=64 [ 850.095931][ T5826] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 850.106224][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: kworker/u9:3 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 850.116814][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 850.126915][ T5826] Workqueue: hci4 hci_rx_work [ 850.131657][ T5826] Call Trace: [ 850.134962][ T5826] [ 850.137923][ T5826] dump_stack_lvl+0x241/0x360 [ 850.142659][ T5826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 850.147908][ T5826] ? __pfx__printk+0x10/0x10 [ 850.152556][ T5826] ? __kmalloc_cache_noprof+0x243/0x390 [ 850.159448][ T5826] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 850.159527][ T5826] sysfs_create_dir_ns+0x2ce/0x3a0 [ 850.159562][ T5826] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 850.159603][ T5826] kobject_add_internal+0x435/0x8d0 [ 850.181106][ T5826] kobject_add+0x152/0x220 [ 850.185560][ T5826] ? do_raw_spin_unlock+0x13c/0x8b0 [ 850.190803][ T5826] ? device_add+0x3e7/0xbf0 [ 850.195341][ T5826] ? __pfx_kobject_add+0x10/0x10 [ 850.200293][ T5826] ? _raw_spin_unlock+0x28/0x50 [ 850.205155][ T5826] ? get_device_parent+0x165/0x410 [ 850.210639][ T5826] device_add+0x4e5/0xbf0 [ 850.215000][ T5826] hci_conn_add_sysfs+0xe8/0x200 [ 850.219954][ T5826] le_conn_complete_evt+0xc9f/0x12e0 [ 850.225266][ T5826] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 850.231005][ T5826] ? irqentry_exit+0x63/0x90 [ 850.235607][ T5826] ? lockdep_hardirqs_on+0x99/0x150 [ 850.240862][ T5826] hci_le_conn_complete_evt+0x18c/0x420 [ 850.246464][ T5826] hci_event_packet+0xa55/0x1540 [ 850.251451][ T5826] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 850.256792][ T5826] ? __pfx_hci_event_packet+0x10/0x10 [ 850.262180][ T5826] ? mark_lock+0x9a/0x360 [ 850.266530][ T5826] ? hci_send_to_monitor+0xd8/0x7f0 [ 850.271781][ T5826] ? kcov_remote_start+0x97/0x7d0 [ 850.276862][ T5826] hci_rx_work+0x3f3/0xdb0 [ 850.281341][ T5826] ? process_scheduled_works+0x976/0x1840 [ 850.287131][ T5826] process_scheduled_works+0xa66/0x1840 [ 850.287203][ T5826] ? __pfx_process_scheduled_works+0x10/0x10 [ 850.299006][ T5826] ? assign_work+0x364/0x3d0 [ 850.303642][ T5826] worker_thread+0x870/0xd30 [ 850.308262][ T5826] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 850.314171][ T5826] ? __kthread_parkme+0x169/0x1d0 [ 850.319214][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 850.324355][ T5826] kthread+0x2f0/0x390 [ 850.328460][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 850.333605][ T5826] ? __pfx_kthread+0x10/0x10 [ 850.338204][ T5826] ret_from_fork+0x4b/0x80 [ 850.342619][ T5826] ? __pfx_kthread+0x10/0x10 [ 850.347240][ T5826] ret_from_fork_asm+0x1a/0x30 [ 850.352026][ T5826] [ 850.361801][ T5826] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 850.376236][ T5826] Bluetooth: hci4: failed to register connection device [ 850.670524][ T29] kauditd_printk_skb: 6614 callbacks suppressed [ 850.670561][ T29] audit: type=1400 audit(1737411370.760:47557): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12563 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 850.898057][ T7631] audit: audit_backlog=65 > audit_backlog_limit=64 [ 850.904648][ T7631] audit: audit_lost=16704 audit_rate_limit=0 audit_backlog_limit=64 [ 850.921396][T12563] audit: audit_backlog=66 > audit_backlog_limit=64 [ 850.921786][ T7631] audit: backlog limit exceeded [ 850.928105][ T29] audit: type=1400 audit(1737411370.800:47559): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12563 comm="syz-executor" name="/" dev="sysfs" ino=1 [ 850.933224][ T7631] audit: audit_backlog=65 > audit_backlog_limit=64 [ 850.951994][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 850.952020][ C1] audit: audit_lost=16705 audit_rate_limit=0 audit_backlog_limit=64 [ 850.952037][ C1] audit: backlog limit exceeded [ 855.850164][ T29] kauditd_printk_skb: 3731 callbacks suppressed [ 855.850218][ T29] audit: type=1400 audit(1737411375.860:48659): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14800 comm="syz.9.2375" saddr=10.128.0.169 src=30008 daddr=10.128.1.8 dest=41596 netif=eth0 [ 856.641524][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 856.648201][ C1] audit: audit_lost=17594 audit_rate_limit=0 audit_backlog_limit=64 [ 856.656238][ C1] audit: backlog limit exceeded [ 856.661192][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 856.667746][ C1] audit: audit_lost=17595 audit_rate_limit=0 audit_backlog_limit=64 [ 856.675748][ C1] audit: backlog limit exceeded [ 856.681894][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 856.688514][ C1] audit: audit_lost=17596 audit_rate_limit=0 audit_backlog_limit=64 [ 856.696566][ C1] audit: backlog limit exceeded [ 857.967411][T14776] Bluetooth: hci4: command 0x0406 tx timeout [ 858.313232][T14818] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 858.404920][T14818] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 858.777108][T14818] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 858.803259][T14818] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 859.009198][T14818] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 859.417668][T14818] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 859.449006][T14818] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 859.468031][T14818] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 859.528029][T14818] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 860.448790][T14776] Bluetooth: hci4: command 0x0406 tx timeout [ 861.106933][ T5826] Bluetooth: hci5: command 0x0c1a tx timeout [ 861.116580][ T29] kauditd_printk_skb: 4930 callbacks suppressed [ 861.116599][ T29] audit: type=1400 audit(1737411380.460:50727): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14840 comm="syz.9.2384" name="newroot" dev="tmpfs" ino=2 [ 861.309708][ T29] audit: type=1400 audit(1737411380.460:50728): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14840 comm="syz.9.2384" name="/" dev="proc" ino=1 [ 861.949274][ T5826] Bluetooth: hci6: command 0x0405 tx timeout [ 861.996463][ T29] audit: type=1400 audit(1737411380.460:50729): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14840 comm="syz.9.2384" name="sys" dev="proc" ino=4026531856 [ 862.037525][ T29] audit: type=1400 audit(1737411380.460:50730): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14840 comm="syz.9.2384" name="fs" dev="proc" ino=39898 [ 862.073234][ T29] audit: type=1400 audit(1737411380.460:50731): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14840 comm="syz.9.2384" name="/" dev="binfmt_misc" ino=1 [ 862.097659][T14384] audit: audit_backlog=65 > audit_backlog_limit=64 [ 862.104223][T14384] audit: audit_lost=18552 audit_rate_limit=0 audit_backlog_limit=64 [ 862.124248][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 862.130965][ C1] audit: audit_lost=18553 audit_rate_limit=0 audit_backlog_limit=64 [ 862.139032][ C1] audit: backlog limit exceeded [ 863.158552][T14776] Bluetooth: hci5: command 0x0c1a tx timeout [ 863.966453][T14776] Bluetooth: hci6: command 0x0405 tx timeout [ 864.047462][T14776] Bluetooth: hci4: command 0x0406 tx timeout [ 865.236740][T14776] Bluetooth: hci5: command 0x0c1a tx timeout [ 865.353838][ T8] kworker/0:0 (8) used greatest stack depth: 17784 bytes left [ 866.086454][T14776] Bluetooth: hci6: command 0x0405 tx timeout [ 866.116876][T14776] Bluetooth: hci4: command 0x0406 tx timeout [ 866.126536][ T29] kauditd_printk_skb: 2880 callbacks suppressed [ 866.126555][ T29] audit: type=1400 audit(1737411386.215:52117): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="/" dev="sysfs" ino=1 [ 866.131491][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 866.132854][ T29] audit: type=1400 audit(1737411386.215:52118): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="devices" dev="sysfs" ino=7 [ 866.235834][T14882] audit: audit_backlog=65 > audit_backlog_limit=64 [ 866.242615][T14882] audit: audit_lost=19052 audit_rate_limit=0 audit_backlog_limit=64 [ 866.250790][T14882] audit: backlog limit exceeded [ 866.256227][T14882] audit: audit_backlog=65 > audit_backlog_limit=64 [ 866.263095][T14882] audit: audit_lost=19053 audit_rate_limit=0 audit_backlog_limit=64 [ 866.271493][T14882] audit: backlog limit exceeded [ 866.276995][T14882] audit: audit_backlog=65 > audit_backlog_limit=64 [ 870.066501][ T5826] Bluetooth: hci6: command 0x0405 tx timeout [ 870.478728][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.142763][T14907] audit_log_start: 2745 callbacks suppressed [ 871.142811][T14907] audit: audit_backlog=65 > audit_backlog_limit=64 [ 871.155539][T14907] audit: audit_lost=19580 audit_rate_limit=0 audit_backlog_limit=64 [ 871.163844][T14907] audit: backlog limit exceeded [ 871.169010][T14907] audit: audit_backlog=65 > audit_backlog_limit=64 [ 871.175595][T14907] audit: audit_lost=19581 audit_rate_limit=0 audit_backlog_limit=64 [ 871.184157][T14907] audit: backlog limit exceeded [ 871.189880][T14907] audit: audit_backlog=65 > audit_backlog_limit=64 [ 871.196542][T14907] audit: audit_lost=19582 audit_rate_limit=0 audit_backlog_limit=64 [ 871.204610][T14907] audit: backlog limit exceeded [ 871.209810][T14907] audit: audit_backlog=65 > audit_backlog_limit=64 [ 873.636684][ T30] INFO: task syz.6.2129:13817 blocked for more than 143 seconds. [ 873.687287][ T30] Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 873.836432][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 873.870778][ T30] task:syz.6.2129 state:D stack:23544 pid:13817 tgid:13816 ppid:7393 flags:0x00004006 [ 873.938874][ T30] Call Trace: [ 873.955383][ T30] [ 873.960441][ T30] __schedule+0x17fb/0x4be0 [ 873.965403][ T30] ? __pfx___schedule+0x10/0x10 [ 873.970517][ T30] ? __pfx_lock_release+0x10/0x10 [ 873.975595][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 873.981682][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 873.987996][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 873.994633][ T30] ? schedule+0x90/0x320 [ 873.998985][ T30] schedule+0x14b/0x320 [ 874.003500][ T30] schedule_preempt_disabled+0x13/0x30 [ 874.009677][ T30] __mutex_lock+0x7e7/0xee0 [ 874.014235][ T30] ? __mutex_lock+0x5ef/0xee0 [ 874.019169][ T30] ? netfs_writepages+0x12b/0x9e0 [ 874.024253][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 874.069966][ T30] netfs_writepages+0x12b/0x9e0 [ 874.074994][ T30] ? mark_lock+0x9a/0x360 [ 874.084858][ T30] ? __pfx_lock_release+0x10/0x10 [ 874.287373][ T30] ? __lock_acquire+0x1397/0x2100 [ 874.450079][ T30] ? __pfx_netfs_writepages+0x10/0x10 [ 874.867192][ T30] ? __pfx_netfs_writepages+0x10/0x10 [ 874.886484][ T30] do_writepages+0x35f/0x880 [ 874.926484][ T30] ? __pfx_do_writepages+0x10/0x10 [ 874.931699][ T30] ? filemap_fdatawrite+0x1e8/0x2a0 [ 874.968510][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 875.007668][ T30] ? __pfx_lock_release+0x10/0x10 [ 875.012812][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 875.029887][ T30] ? wbc_attach_and_unlock_inode+0x561/0x580 [ 875.038581][ T30] filemap_fdatawrite+0x1f3/0x2a0 [ 875.043690][ T30] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 875.051472][ T30] ? kmem_cache_free+0x30e/0x410 [ 875.059846][ T30] ? __pfx_ima_file_free+0x10/0x10 [ 875.072318][ T30] v9fs_dir_release+0x151/0x560 [ 875.081831][ T30] ? __pfx___might_resched+0x10/0x10 [ 875.087713][ T30] ? __pfx_v9fs_dir_release+0x10/0x10 [ 875.093622][ T30] ? __pfx_call_rcu+0x10/0x10 [ 875.098923][ T30] ? evm_file_release+0x105/0x1e0 [ 875.104520][ T30] ? __pfx_v9fs_dir_release+0x10/0x10 [ 875.110346][ T30] __fput+0x23c/0xa50 [ 875.114872][ T30] task_work_run+0x24f/0x310 [ 875.120066][ T30] ? __phys_addr+0xba/0x170 [ 875.125334][ T30] ? __pfx_task_work_run+0x10/0x10 [ 875.130945][ T30] ? task_work_add+0x321/0x490 [ 875.136213][ T30] get_signal+0x15f7/0x1750 [ 875.141264][ T30] ? fput+0x1fa/0x290 [ 875.145650][ T30] ? __pfx_get_signal+0x10/0x10 [ 875.159120][ T30] arch_do_signal_or_restart+0x96/0x860 [ 875.168174][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 875.174433][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 875.181006][ T30] ? syscall_exit_to_user_mode+0xa3/0x340 [ 875.187099][ T30] syscall_exit_to_user_mode+0xce/0x340 [ 875.192738][ T30] do_syscall_64+0x100/0x230 [ 875.197489][ T30] ? clear_bhb_loop+0x35/0x90 [ 875.202216][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.208251][ T30] RIP: 0033:0x7f7c67785d29 [ 875.212701][ T30] RSP: 002b:00007f7c655f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 875.221318][ T30] RAX: 00000000000d0000 RBX: 00007f7c67975fa0 RCX: 00007f7c67785d29 [ 875.229460][ T30] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000009 [ 875.248339][ T30] RBP: 00007f7c67801b08 R08: 0000000000000000 R09: 0000000000000000 [ 875.267719][ T30] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 875.282921][ T30] R13: 0000000000000000 R14: 00007f7c67975fa0 R15: 00007ffeb63fde88 [ 875.291089][ T30] [ 875.294836][ T30] [ 875.294836][ T30] Showing all locks held in the system: [ 875.302672][ T30] 1 lock held by rcu_exp_gp_kthr/19: [ 875.308060][ T30] 1 lock held by khungtaskd/30: [ 875.312938][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 875.322957][ T30] 2 locks held by kworker/u8:6/2978: [ 875.328351][ T30] 2 locks held by getty/5573: [ 875.333054][ T30] #0: ffff8880361c20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 875.343067][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 875.353744][ T30] 3 locks held by kworker/u8:3/12204: [ 875.391700][ T30] #0: ffff88802068a148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 875.453177][ T30] #1: ffffc900050efd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 875.571211][ T30] #2: ffff88807ce38b70 (&ctx->wb_lock){+.+.}-{4:4}, at: netfs_writepages+0x12b/0x9e0 [ 875.644765][ T30] 2 locks held by kworker/u8:9/12206: [ 875.681156][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 875.770801][ T30] #1: ffffc90005127d00 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 875.865531][ T30] 1 lock held by syz.6.2129/13817: [ 875.980569][ T30] #0: ffff88807ce38b70 (&ctx->wb_lock){+.+.}-{4:4}, at: netfs_writepages+0x12b/0x9e0 [ 876.000893][ T30] 3 locks held by syz.6.2129/13822: [ 876.011805][ T30] #0: ffff888053684420 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 876.031567][ T30] #1: ffff88807ce387b8 (&sb->s_type->i_mutex_key#31){++++}-{4:4}, at: vfs_utimes+0x44d/0x770 [ 876.053493][ T30] #2: ffff88807ce38b70 (&ctx->wb_lock){+.+.}-{4:4}, at: netfs_writepages+0xcf/0x9e0 [ 876.081641][ T30] 2 locks held by syz.8.2236/14239: [ 876.092850][ T30] #0: ffff8880536840e0 (&type->s_umount_key#74){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 876.116328][ T30] #1: ffff8880536867d0 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x26e/0xb50 [ 876.137535][ T30] [ 876.140001][ T30] ============================================= [ 876.140001][ T30] [ 876.152148][ T30] NMI backtrace for cpu 1 [ 876.156524][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 876.165549][ T7631] audit_log_start: 2733 callbacks suppressed [ 876.165567][ T7631] audit: audit_backlog=65 > audit_backlog_limit=64 [ 876.166694][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 876.166710][ T30] Call Trace: [ 876.166719][ T30] [ 876.166728][ T30] dump_stack_lvl+0x241/0x360 [ 876.166765][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 876.166795][ T30] ? __pfx__printk+0x10/0x10 [ 876.166835][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 876.166876][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 876.166908][ T30] ? _printk+0xd5/0x120 [ 876.172908][ T29] audit: type=1400 audit(1737411396.255:54849): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7631 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 876.179363][ T30] ? __pfx__printk+0x10/0x10 [ 876.179391][ T30] ? __wake_up_klogd+0xcc/0x110 [ 876.179413][ T30] ? __pfx__printk+0x10/0x10 [ 876.179457][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 876.179496][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 876.179529][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 876.179566][ T30] watchdog+0xff6/0x1040 [ 876.179598][ T30] ? watchdog+0x1ea/0x1040 [ 876.283636][ T30] ? __pfx_watchdog+0x10/0x10 [ 876.288335][ T30] kthread+0x2f0/0x390 [ 876.292422][ T30] ? __pfx_watchdog+0x10/0x10 [ 876.297118][ T30] ? __pfx_kthread+0x10/0x10 [ 876.301715][ T30] ret_from_fork+0x4b/0x80 [ 876.306140][ T30] ? __pfx_kthread+0x10/0x10 [ 876.310748][ T30] ret_from_fork_asm+0x1a/0x30 [ 876.315542][ T30] [ 876.319912][ T30] Sending NMI from CPU 1 to CPUs 0: [ 876.325179][ C0] NMI backtrace for cpu 0 [ 876.325193][ C0] CPU: 0 UID: 0 PID: 5808 Comm: syz-executor Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 876.325212][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 876.325223][ C0] RIP: 0010:fdget_pos+0x102/0x320 [ 876.325244][ C0] Code: 03 4c 03 3b 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 9e da e5 ff 49 8b 1f 4c 89 f6 48 21 de 31 ff e8 4e ff 81 ff <49> 21 de 0f 84 91 00 00 00 e8 60 fa 81 ff 4c 89 f7 48 83 c7 48 48 [ 876.325259][ C0] RSP: 0018:ffffc90003c4fe10 EFLAGS: 00000293 [ 876.325281][ C0] RAX: 0000000000000000 RBX: ffff8880275b4a80 RCX: ffff88802f940000 [ 876.325293][ C0] RDX: ffff88802f940000 RSI: ffff8880275b4a80 RDI: 0000000000000000 [ 876.325305][ C0] RBP: 0000000000000001 R08: ffffffff821d7a42 R09: 1ffff110068739e0 [ 876.325317][ C0] R10: dffffc0000000000 R11: ffffed10068739e1 R12: dffffc0000000000 [ 876.325330][ C0] R13: 00007ffd74bac2cc R14: ffffffffffffffff R15: ffff888035820018 [ 876.325343][ C0] FS: 000055557d79a500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 876.325358][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 876.325370][ C0] CR2: 000055557a0bc5c8 CR3: 000000006dd96000 CR4: 00000000003526f0 [ 876.325385][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 876.325395][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 876.325406][ C0] Call Trace: [ 876.325412][ C0] [ 876.325420][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 876.325448][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 876.325470][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 876.325496][ C0] ? nmi_handle+0x2a/0x5a0 [ 876.325524][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 876.325550][ C0] ? nmi_handle+0x14f/0x5a0 [ 876.325569][ C0] ? nmi_handle+0x2a/0x5a0 [ 876.325590][ C0] ? fdget_pos+0x102/0x320 [ 876.325606][ C0] ? default_do_nmi+0x63/0x160 [ 876.325633][ C0] ? exc_nmi+0x123/0x1f0 [ 876.325657][ C0] ? end_repeat_nmi+0xf/0x53 [ 876.325683][ C0] ? fdget_pos+0x102/0x320 [ 876.325701][ C0] ? fdget_pos+0x102/0x320 [ 876.325718][ C0] ? fdget_pos+0x102/0x320 [ 876.325736][ C0] ? fdget_pos+0x102/0x320 [ 876.325753][ C0] [ 876.325758][ C0] [ 876.325766][ C0] ksys_read+0x7c/0x2b0 [ 876.325788][ C0] ? __pfx_ksys_read+0x10/0x10 [ 876.325820][ C0] ? do_syscall_64+0x100/0x230 [ 876.325842][ C0] ? do_syscall_64+0xb6/0x230 [ 876.325864][ C0] do_syscall_64+0xf3/0x230 [ 876.325885][ C0] ? clear_bhb_loop+0x35/0x90 [ 876.325908][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.325930][ C0] RIP: 0033:0x7f053f9846fd [ 876.325944][ C0] Code: a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b5 e8 a8 48 00 00 0f 1f 84 00 00 00 00 00 80 3d 41 7e 1c 00 00 74 17 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 5b c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec [ 876.325959][ C0] RSP: 002b:00007ffd74bac2b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 876.325975][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f053f9846fd [ 876.325987][ C0] RDX: 0000000000000004 RSI: 00007ffd74bac2cc RDI: 0000000000000003 [ 876.325998][ C0] RBP: 0000000000000000 R08: 00000000275de526 R09: 7fffffffffffffff [ 876.326009][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd74bac6e0 [ 876.326020][ C0] R13: 0000000000000004 R14: 00007ffd74bac2cc R15: 00007ffd74bac360 [ 876.326046][ C0] [ 876.658035][ T29] audit: type=1400 audit(1737411396.255:54850): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7631 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 876.677432][ T29] audit: type=1400 audit(1737411396.255:54851): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7631 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 876.694492][ T7631] audit: audit_lost=19975 audit_rate_limit=0 audit_backlog_limit=64 [ 876.696611][ T29] audit: type=1400 audit(1737411396.255:54852): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7631 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 876.696652][ T29] audit: type=1400 audit(1737411396.255:54853): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=7631 comm="syz-executor" name="438" dev="tmpfs" ino=2284 [ 876.696688][ T29] audit: type=1400 audit(1737411396.255:54854): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=7631 comm="syz-executor" path="/438" dev="tmpfs" ino=2284 [ 876.696731][ T29] audit: type=1400 audit(1737411396.255:54855): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=7631 comm="syz-executor" path="/438" dev="tmpfs" ino=2284 [ 876.696769][ T29] audit: type=1400 audit(1737411396.255:54856): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7631 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 876.713240][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 876.713264][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 876.713292][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 876.713307][ T30] Call Trace: [ 876.713316][ T30] [ 876.713327][ T30] dump_stack_lvl+0x241/0x360 [ 876.713368][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 876.713400][ T30] ? __pfx__printk+0x10/0x10 [ 876.713425][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 876.713460][ T30] ? vscnprintf+0x5d/0x90 [ 876.713498][ T30] panic+0x349/0x880 [ 876.713532][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 876.713566][ T30] ? __pfx_panic+0x10/0x10 [ 876.713589][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 876.713626][ T30] ? __irq_work_queue_local+0x137/0x410 [ 876.713654][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 876.713679][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 876.713714][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 876.713753][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 876.713802][ T30] watchdog+0x1035/0x1040 [ 876.713831][ T30] ? watchdog+0x1ea/0x1040 [ 876.713872][ T30] ? __pfx_watchdog+0x10/0x10 [ 876.713898][ T30] kthread+0x2f0/0x390 [ 876.713926][ T30] ? __pfx_watchdog+0x10/0x10 [ 876.713951][ T30] ? __pfx_kthread+0x10/0x10 [ 876.713979][ T30] ret_from_fork+0x4b/0x80 [ 876.714001][ T30] ? __pfx_kthread+0x10/0x10 [ 876.714028][ T30] ret_from_fork_asm+0x1a/0x30 [ 876.714077][ T30] [ 876.724383][ T30] Kernel Offset: disabled