last executing test programs: 1m20.294320159s ago: executing program 2 (id=2601): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)=""/26, &(0x7f0000000340)=0x1a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071123b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x48) close_range(r1, 0xffffffffffffffff, 0x0) setitimer(0x0, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x8) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10, 0x0, {0x0, 0xff, 0x1}}, 0x18) sendmsg$nl_route(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 1m19.946845663s ago: executing program 2 (id=2603): r0 = userfaultfd(0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) 1m19.904875797s ago: executing program 2 (id=2604): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) bind$bt_hci(r0, &(0x7f0000001040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (fail_nth: 1) 1m19.825775831s ago: executing program 2 (id=2605): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) bpf$MAP_CREATE(0x2100000000000000, &(0x7f0000000840)=@base={0xa, 0x101, 0x7ffb, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r2}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r3, 0x4b34, 0x3bf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 1m18.507102045s ago: executing program 2 (id=2611): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f00000000c0)='./file0/file0\x00', 0x0) (fail_nth: 1) 1m18.171788854s ago: executing program 2 (id=2613): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) (async, rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89, 0xc00}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x101, 0x0, {0x1}}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r6, 0x80045430, 0x7ffffffffffffffe) (async) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x10) 1m18.140159221s ago: executing program 32 (id=2613): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) (async, rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89, 0xc00}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x101, 0x0, {0x1}}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r6, 0x80045430, 0x7ffffffffffffffe) (async) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x10) 26.878517415s ago: executing program 5 (id=2999): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 26.853152212s ago: executing program 5 (id=3000): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc0500050002000000050001000600000011000300686173683a69"], 0x60}}, 0x0) 26.787839762s ago: executing program 5 (id=3001): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 26.709726844s ago: executing program 5 (id=3002): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f00000000c0)='./file0/file0\x00', 0x0) 26.709323736s ago: executing program 5 (id=3003): bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[], 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04015b0c"], 0x7) 26.420243689s ago: executing program 5 (id=3006): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r2]) 26.090980294s ago: executing program 33 (id=3006): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r2]) 23.67071902s ago: executing program 1 (id=3032): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r5, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r5, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 22.826841929s ago: executing program 3 (id=3038): sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x4800) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x5c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000016000300686173683a6e6574"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000906010200000000000000000200ffff0900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x14000052}, 0x4000084) 22.541461317s ago: executing program 1 (id=3041): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) 22.504960556s ago: executing program 1 (id=3042): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000002000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xffff, 0x5}, {0x7, 0xfff2}}}, 0x24}}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = socket(0x28, 0x1, 0x0) connect$packet(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) accept4(r4, 0x0, 0x0, 0x0) 22.390807779s ago: executing program 3 (id=3043): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067486e65766500000c00028008000100010000001400030067656e6576653100"], 0x50}}, 0x0) 22.281886989s ago: executing program 3 (id=3045): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000"]) 21.992641137s ago: executing program 3 (id=3046): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000800000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) creat(0x0, 0x50) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x2, 0x3d, 0x0, 0x0, @random="48164953c468"}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), 0xffffffffffffffff) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}}], 0x80000000000020c, 0x0) setsockopt$inet_int(r5, 0x0, 0xb, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000100)='\x00') 20.987772106s ago: executing program 1 (id=3048): iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='&'], 0x0, 0x0, 0x0}) 20.896206723s ago: executing program 3 (id=3049): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0x3, 0xb, 0x0, 0x228b, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.empty_time\x00', 0x275a, 0x3f00) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0'}, 0xfffffffffffffcf3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) 20.651431731s ago: executing program 3 (id=3050): r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x148) lseek(r0, 0xffffffff, 0x3) 20.550476739s ago: executing program 0 (id=3052): io_setup(0x22, &(0x7f00000003c0)=0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) io_submit(r0, 0x0, 0x0) 20.337826455s ago: executing program 0 (id=3056): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7f36, 0x10100, 0x0, 0x1}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = dup(r4) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000f46000/0x4000)=nil) read$FUSE(r5, &(0x7f0000004a00)={0x2020}, 0x1f69) syz_fuse_handle_req(r5, &(0x7f0000002140)="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", 0x2000, &(0x7f0000004980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fefbffff85000000180000009500000000000000fb93cbe3511cd570832a88d84b0d3f3d615a30203caa002f9c33b53875f264fb0e2bd6d41904980009779f3e24e1d7eb7571e09a8118263e764401ce25ebbb07b03cf71f9672a364f863fe7c3df377ad235d8ec23256020d8a0fe5fbea4bddfa4ba8401839e9134de5aa0fbd387a4b86a23689e109722fd1c39930fff2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$kcm(0x29, 0x6974ee46c5252de9, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000240)={0x1c, r8, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x8001) 20.057710408s ago: executing program 1 (id=3060): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000040)={0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 20.00287881s ago: executing program 4 (id=3061): chmod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x4000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2004c8], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.780784507s ago: executing program 0 (id=3062): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x3) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r8, &(0x7f0000001500), 0x588, 0x3000000) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc0500050002000000050001000600000011000300686173683a69"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r9, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x2}, 0x18) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) 19.525369458s ago: executing program 4 (id=3063): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffffb7f7e, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "0300000000d700"}, 0x28) sendto$inet6(r5, 0x0, 0x0, 0x8080, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) recvmmsg(r6, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) recvmmsg(r6, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) shutdown(r6, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0x0, 0xbf}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x54) 19.179803118s ago: executing program 6 (id=3068): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500e1fd08005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 18.970175482s ago: executing program 6 (id=3069): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000014d56"]) 18.872575067s ago: executing program 6 (id=3070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000001605000300100000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 18.809680205s ago: executing program 6 (id=3071): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) recvfrom(r5, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendto$inet(r5, &(0x7f0000000540)="e8", 0x1, 0x80, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 18.605973167s ago: executing program 4 (id=3072): mkdir(&(0x7f0000000280)='./file0\x00', 0x54) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x4047b013}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="2ef9b75c2a05a354b15c6865cbfaf704d9fe81e8bf9d8a4855a6c79bc372310e9770e9641fc4cddae9c3346b408119c30a786fd1df316127d4d83984615876472e3483e6d8ee9ca1d6fe0d78b34883e1063914def0609fedd9953c671c034d60385dd6825fbb4dc228b432971e1f85af5f8b095010a6d800d24d92e81a9864cfc76c331869fc93f474c46403d6a428b8a671e5dea85b7573076ecf100a3417a89f00e0be5f2a7a289fb9b5056b8eb1acd214140f1096de23c01620c3822295d9b064842a6eb0cf766da877692919a8567a4077645ae08eb35ef4be7984967d6943b729a20877be3f2c8e82425801f97b54bf797e02536eb2d3500f54e9bcd1e4983880a4157028cbd3c40e51c9206ba74be1c3e06ff7b9013c58fab9291d33641e5314b4a09dfc55138ebdddb7a8fb699877f6c42516580714b6b1fd597dfe22f9680fe33ed376c61638f06e7fea60fb54f3ea8d091b94ed72ccb5014c407930f786bfcae66e8485297d3cd3581acfb08282e78bb02465611c63071ef529fcb88df36fe6a8a44a48134d764e83799d589732f2c4b64f555e502f602814af9895b85dedeaf847fd45271b0ddafef013b70fb3f67a26a667519f783ec0b1936d9a394f9781829efa67f80f3608ea0c79761331f24d84c05fc11be3528955b1a227db1a648af2840ea7cb304a5533c4f0159413227f4ffd599481e025536663bf0fe5ffa17b2d41b9ae2d91865074abe8035fea4ff4603955fbf0b362d37eba312461402f61fcd9f4a60e362bfbb745639e4b2dbf7224d9f31f1ef3d8355306add312be6a709ed12295e00b41c8ecc4dc9b35bc1b5fb957f4f40aa457b67025dc8ef50c4f1592ac704649db3181fb4444522e786f7e6771b7d92bf018ff468a2866216be7074f7dfe4e2550cf48a00fec0730fdc54f1709cb1e214dd2d8a7fac1cc8c1a18cbb252f12c5c5da8137097909fcfcc3cdd4a9834d6db63822ade4c504b14e536553573699005d20f5ddf3742cc26439fa8275a9eccb58bf750a04fdc41e246495b4917b5d38680e6292e7d694898c0f80ce567f816159b41558a4a6d901675d182aac925f84d37e591e1170f9123f90eb1110c657ac44e55097309849968e315bea530b0c2a4671c8bed2711ab64d9a489418b8d529accb0b09235aea65675cfc7eae21920ada03630364d8102928b3c6cc40d83f6e5ef5f2b85bea875d3b66031cfe122c8b819f621d7dccc286fb8ecbf0c4baead9e44955b9e2fa963a6422d0f1c64c7cb67e9ced0a841f4c1dd17300d1da7851305d64e28c59f32e66f40e103228dd0e15611bc51c207f515bf77a722e7463f64f8125ef453e9c787258f96224ccf1e5e531737db44adfcd3cdfc70e67a9bd586f30df10586dcefd0bf9529474c71a3b2192bd97bc93ea77373d50b00ab9f760502e6a8fad8c71322a685aaf153e3ad1f3123753f459d027c430ceff829111ac5718cf797244eb249e1bb7b90500c745d89fb563f16ec7f98ca5a309a7f04f2cba5f7f1713d8f4eecc6c963970e50325883e522e474834b43ba78f41ec543779b00d3f49c94f55d6701340769ae7dbbb0876c40d4d66ec1075f23abc16a24dd127c1bec75dc08012d689f1ae99800f2bce4ca3f4ca002cdf49165b551e91083e5be401e21d65614067f4887cede403d651e479f3aeca23a67a28a9f9b5a1782db86aec72d769f96eb210e8c3acf578c893f29935a38983cf6ff950efe9303a84a4f6c177d666d131d3eb503c06379e9fad6c255911472e320ce85e440511890c400ec0381758a0a338e8ca0bd529dcbd262aafa18916966e3eee263f58a88ba8883b44d548b96e817617962256b93a2209881e9d7ce661bd98c8063a2ebeed829e9814bf78ff22e62df14b67ab234d7784c8c201fefa6d7e7acbfd549fe066648f3c43bac2fe11362b88cfb9ee8eb3bc4d2e564d6b4a38781610fe6197613f77ffedd75b3dd5b0729ea75e150f11be7817a98a7da9cedb466060c295b7526538d89947ad2824fa92469602d9f3403303186f471556f5858a792bbb44bdb623623547e7325f994170e1e03bc6f7d7cdf3bf47cd09e0943c706a40ecd99867d052bcdd5853289e1fce2392ca42b635ace10331d3cbfbe5a2ef1346ec22167e88cefd124eb1b3047595260b08807ce22f9e7d6bc3dc5896ba0caab36ae87049202c3e5c19f4e0259f08c728405afc4a8e60ea0ba9092018869b513d260dcc04119952d898670b3be37db6eb5c8af148ea1f254c2fc15363665a238ea146219283ada5ef487f9e602c87e6d57b0282dac26986c69048149315e566ea88424b002b1ad50ca7c882567ec683cdca03625ea71817b551d8ba05df3d1841b0f6054e3e78d786b0ae469ebd97a2f6aa438aca77fd672ac78ef55cd92649d5d7ff2e2ab9e30057a91054bccbf5adb992563c99712be8f94524a93bb9c7731c9c427945a8f5c56e1f1aca70a712fa5bef8669a783ae9f60d21263457d68d48ee7e8d3be7408c51523f1315d361ae39bc3da061a54dab36705fd7be6aaefbdd004be31e50fd7f959deab4641f56c1d837707ddf911b42ed781cd8e73e4ff021818398b36df2357ab838f6ff15a6a86b1792c355aa3bef58831a9be396de066053f61ac7a453a2de574472a0416af32ed8a766ffe4fb9d85580d19624de5b760d04d3bb0e735aa4cbabe8f173248bfd0d1cdf0b85223492e3aa14bef404079e99f7e8b24fe145a02c64dac7dcebfd3e53b95c1952c5b3319988af98b41d3863904b4a33e12f0729aae59a7d1682f4af098fc67dd1e707016695045a8d34e216ac1b29b76c017119b054830a59be586ec1219b5427cdb09f5febb8e9a5b71783ccf1a6d8ced05c37d71dfa475de7c3fee758db2916b19c681c2a8ae6b6e7af36aee07190298c8a22aaa96586cd678cdfe9970c860fe8bf1fb663cf3f72c26fbcfa6d1f6fbe4bce91773aba5b9e321881cc6ace6f3817e2653b778f7512d07db172d38faace29a0c13439f4be23ce83fb6e95ac43cc18b295f1c1dcddd400b1529dd60acf901a8e05e24a7107253d9583c658012e497f5d665dd4cbf1881e75b9231ae8e31d1e850d2b5ab5509261baf2eb14f931ac6f0681dffdc83e2e371f8bdf99daee9cf06ba28a19271fc54bf40deea2ce14f65ab5ddc9f2fa2d92fbf9ef275bdac6a8ecbc13a92f175ad953b8afd0af7d886e8429267b891e88d996c6aa1fb736e9929095375ffe2257974d6a0e2e007c6140bc37770f56034720842199d6d68705e2f9c1e4012c8f47b2bc9568d8f51d1b1155658377cf42914084eaa96c3c00422ef5ae2d2ed13e4fe685bccb9c70d6b6e35cdb3f63899e0fd907069779b54e7cd340ecf7992cb8ecab2db409755ce9aa0fa8ed07d731b5db69138c64001cc7915394121c649d082ed3401e44d9a5b403d144396597afc8e4fc243fbd9bffe3480d7cd708e9dd34bd5be2a537325f404396dc041d4ed508eebe82c7c0325cb17376d68cfc062717cc44cd79fd065609c93e46c8b1336baf5bee20b20112c26ddc9840ff7179a2e47d421ef8f70c06675ff8dd8fafbdcdee0b6ed0e242a7c961cd69a434459b4640fb74d6d52a537bc089af55c23ec00f96d674cfb0fa4978346d9057e5e25c99d329ca25333b299d5458ecea0b287915871c7c94c3317402bc891c827f15e7fad9ac5f98f3abcb0790281fdf94fe18e7bad3f6fe0989bd334995873f94b24d5dd0fbe79cf5edf044ee553e6fa9092214036fc45a6462e9f6fd132699cb87a13cb88332f5e375fb0c92c77a12b3d87033dc8ae132fd18b1e905625fafe5a090420b671704b60c186a6f2b6fefd202806942479dc994280ac20a1e6d379d485733933cbd428e2655eea08d8c396c7ebde304fbdd062017d3111599d3cc4cbb0ba462c48983b4886923e0a75be5a75d5635a47c9bc7d81c01e4f9846e8ddabafa731e707d29c3dd6790fb0e3c6036143353847f228452a4c42e5a6d7a1af85c47e71f6c2268dd9fad178d3ab84625bfe556c76615b4046a96f463fd45a8fda457907050603534a3e0f18b1b0d35a8eaaef683a3431633136301e122b8a516e4fc3b3f5211510c378a39a49a51ceb6941850a4f1701926dcc4774ac14ef053ba25b15bb62c59b33d5807020e688c2d4356f3ddf9082d9f4fa20b5ec1bd184fe2a9be73b300ae0e9989889ff8cf3adf493a3e41e46e2dac2fb156d7426c4ce77b2f3945fd7551d31984e46c09b75a4f747a0d0efc4039b68e431d7ff4119e45d10bc611d84beb4af9bd8724e6ee1d21e46ac4895ef8c93150784c6bee1432fe912a8ae3005f30ff0a6b52288050729b29900361dd0344e9f62a290471d4b96c3c3b4b2fc93cac8168facde798a442cc2bb7e7430d8cd479f0520ae4157bb7c79f52d9c419850ebb0060fe545ccad558bb7235abdf315277ec6d42cee4cf418b3420efe1f88a1840868f338b90788ae3d6e48311a421c25b45afce9734f247b1133deb7a7f16b344506a18d037bb4a18cccfbccdd85aff9b374014802e90d7a2053e20902d920bc95a5732336e91420658ca64827ab11a27bbdcd32e273853ed2ca70b2a3971641b9c749fbc05b21556198f32a91a47d9b4cd0071f7829382e1f0b1329041e223afa18ad5d4ea16d576c614d840f31b4903fce2c2e97486c3bdb226663ba063aec559bae777cbcdf6357efa7cd270c9f36909cc657095c7fdcae25d23301f2f817b3fd4daa690ab41282a2f3046fcdf6cb4548a0067cb54f0fdd7d02abbdc91315cd31442a2400b23051dd507465fe15d1acce56a82c2eaa580432e80b618f8f53fef7d5850fb54f555be97a56f148cdcbd04a4e99105ab70d73bce03ef341cff61f85d2cf95f8b17f79669f55180231b1deb44de0615e0a8fe706d301d3e0d9f937c28cb3f9d6449b250fbc1d3d343c51f3c6c3864fc13b836f28409b693cbbd41b1f5717d8fe5eef7f58d5bfcaa42a830d003cf610b0605cf8bcaeaf8c563fb170cc41280601eb0c638f48f3ba87f717351bcd99791f256b81074889b51a119d29d7572bba8bf661cf7e0785aa9ce0fde86b08229d418b56164a8306a57c2ad0cedfe387f37e0176244ff6c1f7058d60fbe5d54dec83ef11233e0311882e81a5661dbaef755d876d558ac5989a495d281d52f8020c672f9b43fa8c807a590e067862f1dfad34575cf1046806db95dd2fb6a0881da25a4c1319109c77e9bb11e45a7d29c72355877ac9f2301117c1896ffb3f34142751742b75a603e0ed69eee2b8ed9a93ac0fb395460a6091f4e80857bf0bee7bffedeef7de340edca5deb845bae6fe7c8dd76f78f1b85a5bdd8662702f1708cb66fc7970225e107cb135d96f8aaf8d4071c452ed29f3888b343c4ff22572154311147c0b6046984bccda438dbca83e03838e408bf828506f35c7bc8d5af60a399e40c9c92c3f31aa1cc0dd9ac43266c97ebf97ecee097415ab221777a1d5fe5bb02bac21813778fbe01a408879a84323ee59da5b7271c313423cbec173924c5238e1996390bced7f9ed535b2c4ccc975bfebcb868aebc8b48d198f9ea33fbafa3c2c100682c4386af8d4ac912d034af127566dceb50c150b44df87562cfb83a57d736464f7cb9eedda2bd656a1406a5914d982c509c51a68de033a9bb10e95c6c15667b7c82f15c220833b064f9590fe304f434ae1598a002473aa888f087f0fd745e5e334d2f74d9cac7c81f602e79ec3187bf3d6c2b4297fe3e6b724d78fef9e7c5439f3fcf45b6b0d3586b5b1250e1a55afa11b1d63d680092c3753802e8dc4be11afb438c3baacf19bd7acb20de238fd2f492101fffb4e4744eb9a01287679de1b8fa89db9016bead48843e2fe055d9c3810b0ca2a3282d73175a34742bc4214c45c63bbfa792d54d9e799cbbe07dd2f4368e19741971c7fd21d1eccee67b74a41e2d00ef26d31b7ea5d7d86c6ad793da3345578852f6f8535a877025037751768910db81e9d3ac685ed74e7ebf80305e0baeebd6338363754f4a9994276c04475c6bf954595c1ec09b3fda2ed43fa18b359bc3135f157feb3f1a7d7b333597c625c5b7dd073bc35580505b9d0a3645ebfafd565e30e0e251c78c12a160eef3744f19adaa2a2926dc59fa5be6a3cfe51119b43538ee8447364f592a42c24fb094d8ed52af909b5384ee61d52fdbc65343703680e93a0400e61cbefb57d73deb26d52a8317eb03127b6ce9a28419a3bcbcc44823028ed3dbbddf9fa59260f19d9a899564816f70dc665ee1ee24bc64a839fbd84b32b2f40eae234dea3055c47a7f870a813425e58fa19975085956c264e3730ec44239d90492e8b337ce277d9255e246cce746649af0eae50ba253e904f73da02d1cc61daf987f980c03a23da9d687076dc3c020e6cea18c0720f02618ccaffb18849d2ae508badf2b79d29700a1e351df49b2ec50490e0f4f2c9da8ac64b176970891553438c8501895f4d16c9c3b67a7352be39e57cbdb82c842be871fd4db6b44281a5cd0977ad3a852b936609daca5915ae6c7f7ab38b23a25d743f542fe75f2b1d7d5fc1deee9d62d4024a186bd65f5c304dbd9057cdd653408b5aa544145c5afd9318dfdba52a17df169004bf41778c94fa724292ab1f674165c97ac4b6ba1f960039fdb96f4d6f10855c3354f5476dd720dcc18fe6eb853d5a77f01972a70e90a59ce5b49878fc0f4b42dddfcda5458f8864d1726e31813f1311360fef9701f63e7b24b2f59376685355acd696fd4af9b5b4e120c43ec717531e064a08b8735981e08a08e4afdac64ca36e9b0ea3f57a8a98ad0833b9651667133f74aea3240bb4fbad07e345293ef1f25858d0870ec4dbd930006cec826352f784b173deac89f68dda2556fba2446f5d37bde3fc49046daf80061a9b7e7f4446bfc60b004b6dad1f71218b3e56fbdad69bafadb8d3e753d564c797bf41c733c1faedd0b96d6b5669355282e3e54378d04b3f1eb7feec6b59b7849a10661630282b4813cf60d0085f68d537d844634ab3574feeafc4d4ce4e201b0b6c09d444bd5f9b6289e8aee682a7b144635f63efc7c9984bf05840b85c6b80dcd91337da17866010f692834b665dcccc95419a18bcab8d58058e0ebca36a4294415ac1ecf212318ac12c8ae398e8bfc3c99b0fbe4b8eae5d4a16cc539b78da8e7a1c011484d45be0324185c3b924e08516303e3cc638ac4322096ebac2a9fec10983b98e65cd5a299ce9e8bd62d2b1c1a6105c00bb68fb8db0e1baf6e0a59b9866fd04d13a5de9452dcff854f85c73beb7c5ee8a637cddbba72e11723d0066135419e1c225ee051f36cd272adf5a6650f70c5890f67875612378a751d326ee7e060fcdb5761d02f46038a4b974d065bf1f3bfa7c3a02f6a2297ecc508212f3f8d935b8a29ee23faf1acd4133902d0fb86d400b1f5d2835fabeb9356b77d9748798a4ebbe940bdef5a5eeeb58983710aaf3b829c7dfd7c8d79c8b8df58ef908ec33d6a66393806147779b8f48ba5cd98f0451e01d1f460879f8994d66a527cfab4807f586af6500566cdbbc69394f10538a8a6743f263a20026c2cae9952c92120656444f72d52743441847eadf749f913872d60f3b3b635773969e9d9f8397f088be637a070670b3010a629b80e98a4a732c4aa840d56c8d3aa859910201902d23ce2d01cad72a80dfb3e20c1f44e3ab3c930bd31a7ebf8d2dfba9005be0c652d25a5f4f14a8eb530ead6e342bf97dea214b7e2aed3300fe3e65a6533a7bea013d9e80413c000ef6ed972becc1a39d314ed5108f3e4e8ff8820121169857c4cefa3574cd194bf9ef682a109ea1c95b576ddc1dbb09d42996f4925a440f1cd121110ae952f327ea97376d93ec5d6330e13196215abbe36f110b4b6add68d5684599d8969d7dbaa99161a67fcf0e566c330bacf6bd5047b0f1aeac9418d4b92be966c2647fca52749892a90e304762f82753a16f00fbff2d2cd253d5ea542209e0ecf95ec9216cc62484fe7a37865f46618b977cae08b564bbcace5dfd135b7705677541ce7c9bb69ecfc06c13b5e386a65e610af33a761b4c894e6ea5b61d05ed2ff62270a175a75c7616b90bd30da16d622f5b1bb70f359c34c9a34edac692e3e7251cb988d6782dcd37b99fafae3aa2c62c29e3bd19bcb625ff0a68ed28b6f24a2f98357d446dc6c5a92c0070fea7bbda52c56a458eac1d670f7be3c5904761673a9193d90cc98ace984ccf1575dbf05c0c862455e9ca141504bd15fe515b0a16ea39c03cfb9289df4c7ffa0a778ed686a5f8f3c6b3b4684b9612f7a982de05d7f76a8bc82f3d56df9a052c50e5641fa2908a4456932a11231f9e9c2a504e2cfefa0502805d47a5c8619b90472eb20d32cd177d1029e5bebed2651f5e550b8f68811e2b14090cd1978637974d24af028fcfb934321e9bdc6199aa014048f58dfca2b17dc961ba5f65d1384d1955af3e5f06055dab05cd1bf215b3588f6bfd2a2bc6a9622128c337a6976524386411051031ce5c8ff463b3d627c8bca040db5e71f42ef3bbe89a9b6a070b2aacd0d4f3865503b2b33dd19bc16eaa88e037517a163aa1da1331e2bbcad643a6dc427a68ace6657ec6da0a07ef74eb874b0076198fdd4dc32564dfb8ab40f17fb89c82aadf2679780eccf3148a00621852cf45880bfb72123ec0a31c925b35b3c004da4ce1f5b2745ff2c531e839df1548210676298ce27d6b412a627eb70bfc005a317fc31f54c1e5ef6e53f0333f0365af744ce6c86a9537b9ba46643da27376cb88163c5e3e6e73c4fabb7d2b9e0b50780e15c4f44e8487a6b72e856fcaf1633870492e6ba3ac7df78e8cb23bbc8d7023369c38bdd026ca712a521a6c4c39b7d6cc88c2a875b21886e48d0504957980b06a787b52004af845933373423b7e9f27e739c07be86869d63424e9d8acc148b2be03e9a8c5a5285b9948b17b7a7e9581a4b4a9715559ea48cd17856e241d6d6e26618ec99fee543f08d83ea9139b3585a33d45b8c00bdde11a05b7b6a9dea76f8fcdda775cf7bc7c93b9beb701d317f98b20dad165b8a1ebdd0b2b0d3efa440866418772888c80297d93ca3509f48a24126382b0b03767365540673bcc0a4d5c654869fcdf91bc77794e9f702d4a7af386faf1debc3049ec2205dd76354bf655d0600da6ea069db11ada558358eef0b597b0a64e38a517b1b7db4e240cf441b2656e43346e240ac49c56ed4dcb03bb233069694f3be050af30e8247f8cab8ec2653509e0d489bc24577b133c9be29d2fb2f947348632699421f4cc1e437bc695b4e3dc72f9b1c923369af52226c617f7f11d0aee0671aaf5768b5d65d309e992abd07a53d37682ad8074afea935d827f7436935d262ee2b8f3deff0766b4dc10e4143173ac7bf3787c840cc2e056af7b621523de2a10348d175527693fe10a6874a15a7cac79e984a7a8e16fb41a3dbe711327ecf04f668b306d08b6bc54f5013da140cf73d69b46ee018158ba85a7d006456fe375ee5eaf8c034f0289801ac07c91f564f1faf1ec09b461122af550d1a1b255c01b4af963e203143598a010f62bc13d88cca4e6421436925a200c4f7331288d98f5531479188c892d5131b32f6f1631d3e5729a0bf69426c6f3037617d9a194484f474eb6e0d5a7b247ec5bab4477ee96b80dd921c2a764970fa7b436dee34f7f1f77a857b0e9d5b2af96ea4e9429dbda14d0e3d54790f8a99e8bdfb51a6e78f005ecfc673b85794463130decf8ef8893a81e7475eb67203a8506dbc34aa49019db1552289c665db98428096d7f4bbde884536bcdd5c9d0a2e7d463af1d1d13afd596c1b79b2c17068d2189632000dcc7db458f6e636f171c52f1d9983e835a00da51b7b64ba5b72a3662f4369de1bccbda316af1684bbb50d6a079a5e056635b1c92e6cff735c29f0c6ffeb7122825de4c9b7377f6ac381d2922c52259ad71eec033da3c827b715f646e69b4bb9b256d29b1cb8dc7b7fdb777cc24392a61f5ee042f5fbc10d30b5b12e9594778e7487e4fedf868903558ffa138a1f35ceac6263bd0bf90fd10cb718b515919a52217bda4293b44ae9e37a1b56ab91ab7fd7916bb657f13bd6c1085552d4e45eb244e4c7ac11154e24fc215270042c0e63f240fc611b2966ab88564b64c9b90a7261789cba43988c2928883809c20fa8a8939c35a2e49e259332ea4acd0660f809871e7265844422c4b17aa6310a1fd9ab45d03f6bdfe834c63777dd12e02beac70f6067ccdc9333b58689781e5dd564bc0c0e7db0fbf814790b4fa31e009ee473bd20fd405178d78d9a576ba492e6fca3a15152eb327a4e4ff63f4711f2302c4997ce5c45b7ac83e04d32ce40c3e6ff92a7e9a5b8761589116ba8637918ca0cb20c5e7e8f61b697171e5365163bafbfacea864c84850db6ba56af0a0b12eccb4997392ca2212d3c7906aec7ddac48b4132ba0d11b8a253d138cb88d269992931e9d15e89557076a8e3330389cc4527e77f6d9d94c878f1298a020a0182ac8737d4d6dc1d9f33753ece4f950b6a837a73f6a6360074fcea71984437196aeab42365634e943e04917352ddcc2f8c86817df88877d323bf7fc7a58f7abe71fc99ed224705226a33e9ea6c9efd83acf14c623c8ad21ccef6659a9812edc08a525ca209a9443b46dc944b18339cce9590260c5aeba7a596bcb3ba8fdf329843ad4e6fa701f05bbe218a14fb1cb5e54bb762851e9a56367b12c66ef62f098ed842dc51b6f659cbc579c9a34c669027b1376df72e7ce279cfc5139e3311f2a64f1acd241facf5003bc04788a3c2941265d48879268833c5a45f954f39efcf5be68f802766a0e3bedd456a0bcff04354f6a3c48a27d7d68de8128149b43f45ede214bd0f30fdbc8a8d3009268189a342a2750872fdfa12acdc2f30850a40dbe66583289c8bb44a5f3cb8ab88a839faa2d385a2b19d7c1eb31352c1fd83d732fa7dd271a6cc450238e477a1cf89bab77b0032e3d911320d17d4019da270d054491f3d98727ac655775657b8f8231b9289e085dde5dccd0473842936c879bce06d35a510bf7d4112ffead8e8fed13a424239414702ccaaf8ae59416ded8b78ede3e80964d27c25172400af4d1fd68eb0ee6c2f8e9d119ed1688a47c15a5846987130a07fa9c93d51e7915c3dec43aacb3cd4bee5083a35dba827dfa446eb9833b436689922f60b4c8f406d9e992265d3db9a5688aaa600fb6b2035d780c65528d4e1976ee44f0ec0cca95184f32feb90a8a8de0e8bb794c505da699cae91712a55716f2aa2e690c534bfb0f7c0f0f6beb6abf1c55b5698c60202908ae353310b633cfcb78b83fc0574248afaa5308761fe3fa5baf01369dacab1d5a02cd193bb3928886ab8afed4fac4a4a3f6cf205dcbecd99b18f19b0c7c97340c9513c5b35fd7494a942492b614277159c88a546eb6cf3b6230947f41536bf69a08e8d4cf8b43fd32e6a4ad2cc63e1432bd98b88fc9ad5346ca05d4e41e61a664ae631c34e3b41c9d1984656d918451f92d98df5152e0257acda9471e3e7a44416cdcb76420fe9222e8d09", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0x0, 0x35a74, {0x2, 0x2, 0x0, {0x0, 0x68, 0xfffffffffffffff7, 0x5, 0x8, 0x0, 0x200, 0xe821, 0xfffffff9, 0xa000, 0xd, r2, 0x0, 0x6, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x11) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) 18.590472706s ago: executing program 1 (id=3073): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0x6, 0x5}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0x36, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_emit_ethernet(0x140, &(0x7f00000004c0)={@empty, @empty, @void, {@mpls_mc={0x8848, {[{0x200}], @ipv4=@igmp={{0xf, 0x4, 0x3, 0x3, 0x12e, 0x68, 0x0, 0xc4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x24, 0xd1, 0x0, 0x4, [0x6, 0x80, 0x57362d07, 0x2, 0x1, 0x3, 0x81, 0xf03c]}]}}, {0x16, 0x1, 0x0, @loopback, "85f9620975fb0e4b2d2f145078587b95f729417fa85127cd12992fc6cc5038d1ffa7abd2b78ec8d606b83fab249f92c000628ec604fb462a618dd990c4258c24776fc2ae613362e8780aedae58fbe3e45c615ae34aa87ba5606d79974206a1129efefc0b0cf3a166ab7e7d7e9e708d1476b78e3ab81bae63ddac064b67df3a08f49ff00c01b461d5b8d670a9a10056938c946b82ecb8f9ebc3fad763fd7666009fe76afbfc5604ef5099925d07b2ac9e1583c5911a7a33ad71b1e36231f6683cd6559fe3eecffabfad79bf1e484c5194e43a281d9d7ee9a406d3a37f86f7c5fae7e5420f42acf34e3bdf"}}}}}}, &(0x7f00000000c0)={0x0, 0x2, [0x9b4, 0x2d3, 0xadb, 0xef4]}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000010004b0400000000000000007a000000", @ANYRES32=r7, @ANYBLOB="00000000000000000a000100aaaaaaaaaa000000e2f24b9d8bad991709"], 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000240)) 18.066647294s ago: executing program 6 (id=3074): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x86) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000b40), &(0x7f0000000040), 0x2, 0x1) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 18.046897506s ago: executing program 6 (id=3075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b"], 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)={0x20, r5, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) 17.657550567s ago: executing program 4 (id=3076): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x7f08, 0x0, 0x6, 0x1000e, 0x17, "5f0f0cef3e21e25ffb64099b9102b1729afaf8"}) r5 = dup3(r4, r3, 0x0) read(r5, &(0x7f00000000c0)=""/226, 0xe2) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000a400)={0x2020}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev2(r6, &(0x7f0000000140), 0x0, 0x68, 0x6, 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r7, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) 16.791114718s ago: executing program 4 (id=3077): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000340), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{0x0, 0x7}, {0x3, 0xf}, 0x1, 0x5, 0x8}) 16.774806396s ago: executing program 4 (id=3078): r0 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000000)=0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x53, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = fsopen(&(0x7f00000001c0)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x5) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4084, 0xff4) socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, 0x0, 0x0) setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0xea60}}, 0x0) r7 = creat(0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r7, 0x0, 0x24008040) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="220000000100000000000000040000000000000010000000000000002000000000000000"], 0x24, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x2bf) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_newrule={0x16, 0x20, 0x1}, 0x1c}}, 0x0) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={[{'udp\x00'}], [{@seclabel}, {@euid_gt}, {@fsname={'fsname', 0x3d, ':'}}, {@appraise_type}, {@smackfshat={'smackfshat', 0x3d, '$@:['}}]}) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e06006220"], 0x9) 16.551162571s ago: executing program 0 (id=3079): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000030000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="1cc1110ec1e9abc89b005bec0000", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.536927s ago: executing program 0 (id=3080): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = getpid() r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000300)={0x0, 0x200, 0x60ef, 0x4, 0x9, 0xf, 0x1e, "d63d5dec114b2c1f5ceef2a13dd7dc30c4294d31", "bc3eb9da46b4d2a862f77dc346def41040192af1"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x138) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32=r6], 0x1c}}, 0x20000000) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0x8, [@multicast2, @remote, @multicast2]}, @ssrr={0x89, 0x3, 0xd7}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0xa4, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x94, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a"]}]}, 0xa4}], 0x1}, 0x0) 16.282577308s ago: executing program 0 (id=3081): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r1], 0x48}}, 0x0) 2.527247679s ago: executing program 34 (id=3073): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0x6, 0x5}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0x36, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_emit_ethernet(0x140, &(0x7f00000004c0)={@empty, @empty, @void, {@mpls_mc={0x8848, {[{0x200}], @ipv4=@igmp={{0xf, 0x4, 0x3, 0x3, 0x12e, 0x68, 0x0, 0xc4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x24, 0xd1, 0x0, 0x4, [0x6, 0x80, 0x57362d07, 0x2, 0x1, 0x3, 0x81, 0xf03c]}]}}, {0x16, 0x1, 0x0, @loopback, "85f9620975fb0e4b2d2f145078587b95f729417fa85127cd12992fc6cc5038d1ffa7abd2b78ec8d606b83fab249f92c000628ec604fb462a618dd990c4258c24776fc2ae613362e8780aedae58fbe3e45c615ae34aa87ba5606d79974206a1129efefc0b0cf3a166ab7e7d7e9e708d1476b78e3ab81bae63ddac064b67df3a08f49ff00c01b461d5b8d670a9a10056938c946b82ecb8f9ebc3fad763fd7666009fe76afbfc5604ef5099925d07b2ac9e1583c5911a7a33ad71b1e36231f6683cd6559fe3eecffabfad79bf1e484c5194e43a281d9d7ee9a406d3a37f86f7c5fae7e5420f42acf34e3bdf"}}}}}}, &(0x7f00000000c0)={0x0, 0x2, [0x9b4, 0x2d3, 0xadb, 0xef4]}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000010004b0400000000000000007a000000", @ANYRES32=r7, @ANYBLOB="00000000000000000a000100aaaaaaaaaa000000e2f24b9d8bad991709"], 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000240)) 1.02218525s ago: executing program 35 (id=3075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b"], 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)={0x20, r5, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) 24.008143ms ago: executing program 36 (id=3081): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r1], 0x48}}, 0x0) 0s ago: executing program 37 (id=3078): r0 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000000)=0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x53, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = fsopen(&(0x7f00000001c0)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x5) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4084, 0xff4) socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, 0x0, 0x0) setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0xea60}}, 0x0) r7 = creat(0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r7, 0x0, 0x24008040) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="220000000100000000000000040000000000000010000000000000002000000000000000"], 0x24, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x2bf) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_newrule={0x16, 0x20, 0x1}, 0x1c}}, 0x0) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={[{'udp\x00'}], [{@seclabel}, {@euid_gt}, {@fsname={'fsname', 0x3d, ':'}}, {@appraise_type}, {@smackfshat={'smackfshat', 0x3d, '$@:['}}]}) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e06006220"], 0x9) kernel console output (not intermixed with test programs): 01.699120][T15391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.699142][T15391] RIP: 0033:0x7ff68a78cd29 [ 601.699156][T15391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.699171][T15391] RSP: 002b:00007ff6885f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.699187][T15391] RAX: ffffffffffffffda RBX: 00007ff68a9a5fa0 RCX: 00007ff68a78cd29 [ 601.699198][T15391] RDX: 0000000000004000 RSI: 0000000020000180 RDI: 0000000000000003 [ 601.699208][T15391] RBP: 00007ff6885f6090 R08: 0000000000000000 R09: 0000000000000000 [ 601.699218][T15391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.699227][T15391] R13: 0000000000000000 R14: 00007ff68a9a5fa0 R15: 00007ffff5969d88 [ 601.699242][T15391] [ 601.949897][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.027449][T15411] can0: slcan on ttyS3. [ 602.376943][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 602.376959][ T29] audit: type=1400 audit(1737636938.704:2768): avc: denied { append } for pid=15390 comm="syz.3.2545" name="usbmon9" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 602.569089][T15387] can0 (unregistered): slcan off ttyS3. [ 602.979458][T15439] random: crng reseeded on system resumption [ 604.753559][T15471] tipc: Started in network mode [ 604.758476][T15471] tipc: Node identity ea29eb359969, cluster identity 4711 [ 604.777109][T15471] tipc: Enabled bearer , priority 0 [ 604.785150][T15471] syzkaller0: entered promiscuous mode [ 604.790702][T15471] syzkaller0: entered allmulticast mode [ 604.875560][T15469] tipc: Resetting bearer [ 604.892686][T15469] tipc: Disabling bearer [ 604.898337][T15486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.160490][T15492] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2563'. [ 605.208629][ T5872] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 605.223520][T15496] futex_wake_op: syz.3.2565 tries to shift op by 144; fix this program [ 605.279648][ T29] audit: type=1400 audit(1737636941.445:2769): avc: denied { map } for pid=15500 comm="syz.0.2566" path="socket:[52730]" dev="sockfs" ino=52730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 605.305732][ T29] audit: type=1400 audit(1737636941.445:2770): avc: denied { read } for pid=15500 comm="syz.0.2566" path="socket:[52730]" dev="sockfs" ino=52730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 605.646916][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 605.673327][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 605.692947][ T5872] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 605.702327][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.733932][ T5872] usb 5-1: config 0 descriptor?? [ 605.756187][ T5872] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input67 [ 605.775188][T15236] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 606.248185][T15473] kvm: pic: non byte write [ 606.252962][T15473] kvm: pic: non byte write [ 606.263138][T15473] kvm: pic: non byte write [ 606.273400][T15473] kvm: pic: non byte write [ 606.284734][T15473] kvm: pic: non byte write [ 606.297730][T15473] kvm: pic: non byte write [ 606.303349][T15473] kvm: pic: non byte write [ 606.313837][T15473] kvm: pic: non byte write [ 606.318792][T15473] kvm: pic: non byte write [ 606.323449][T15236] usb 4-1: Using ep0 maxpacket: 32 [ 606.330335][T15236] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 606.338820][T15236] usb 4-1: config 0 has no interface number 0 [ 606.374899][T15236] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 606.398609][T15236] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 606.435507][T15236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.454107][T15236] usb 4-1: Product: syz [ 606.459740][T15236] usb 4-1: Manufacturer: syz [ 606.464790][T15236] usb 4-1: SerialNumber: syz [ 606.657002][T15236] usb 4-1: config 0 descriptor?? [ 606.668185][T15496] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 606.765845][T15236] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 606.809906][T15531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2571'. [ 607.003007][T15531] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 607.025638][T15236] em28xx 4-1:0.132: Video interface 132 found: bulk [ 607.036423][T15531] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (79) [ 607.109306][T15535] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2572'. [ 607.118685][ T29] audit: type=1326 audit(1737636943.157:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15536 comm="syz.2.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7e38cd29 code=0x7ffc0000 [ 607.156270][ T29] audit: type=1326 audit(1737636943.157:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15536 comm="syz.2.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7e38cd29 code=0x7ffc0000 [ 607.181769][ T29] audit: type=1326 audit(1737636943.175:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15536 comm="syz.2.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf7e38cd29 code=0x7ffc0000 [ 607.205242][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.233616][ T29] audit: type=1326 audit(1737636943.175:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15536 comm="syz.2.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7e38cd29 code=0x7ffc0000 [ 607.259677][ T29] audit: type=1326 audit(1737636943.175:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15536 comm="syz.2.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf7e38cd29 code=0x7ffc0000 [ 607.287309][T15236] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 607.294320][ T29] audit: type=1326 audit(1737636943.175:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15536 comm="syz.2.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7e38cd29 code=0x7ffc0000 [ 607.320413][ T29] audit: type=1326 audit(1737636943.175:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15536 comm="syz.2.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf7e38cd29 code=0x7ffc0000 [ 607.346583][T15543] FAULT_INJECTION: forcing a failure. [ 607.346583][T15543] name failslab, interval 1, probability 0, space 0, times 0 [ 607.359346][T15543] CPU: 0 UID: 0 PID: 15543 Comm: syz.1.2574 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 607.359369][T15543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 607.359378][T15543] Call Trace: [ 607.359383][T15543] [ 607.359389][T15543] dump_stack_lvl+0x16c/0x1f0 [ 607.359415][T15543] should_fail_ex+0x497/0x5b0 [ 607.359433][T15543] ? trace_lock_acquire+0x14e/0x1f0 [ 607.359452][T15543] should_failslab+0xc2/0x120 [ 607.359477][T15543] __kmalloc_cache_noprof+0x68/0x410 [ 607.359500][T15543] proc_self_get_link+0x1a9/0x230 [ 607.359519][T15543] ? __pfx_proc_self_get_link+0x10/0x10 [ 607.359535][T15543] step_into+0x1982/0x2220 [ 607.359555][T15543] ? __pfx_step_into+0x10/0x10 [ 607.359576][T15543] walk_component+0xfc/0x5b0 [ 607.359595][T15543] link_path_walk.part.0.constprop.0+0x669/0xd40 [ 607.359618][T15543] path_openat+0x228/0x2d70 [ 607.359641][T15543] ? __pfx_path_openat+0x10/0x10 [ 607.359662][T15543] do_filp_open+0x20c/0x470 [ 607.359679][T15543] ? __pfx_do_filp_open+0x10/0x10 [ 607.359699][T15543] ? rcu_is_watching+0x12/0xc0 [ 607.359720][T15543] ? alloc_fd+0x41f/0x760 [ 607.359742][T15543] do_sys_openat2+0x17a/0x1e0 [ 607.359766][T15543] ? __pfx_do_sys_openat2+0x10/0x10 [ 607.359791][T15543] ? __pfx___schedule+0x10/0x10 [ 607.359806][T15543] ? __fget_files+0x206/0x3a0 [ 607.359825][T15543] __x64_sys_openat+0x175/0x210 [ 607.359841][T15543] ? __pfx___x64_sys_openat+0x10/0x10 [ 607.359856][T15543] ? ksys_write+0x1ba/0x250 [ 607.359875][T15543] ? rcu_is_watching+0x12/0xc0 [ 607.359890][T15543] ? rcu_is_watching+0x12/0xc0 [ 607.359905][T15543] do_syscall_64+0xcd/0x250 [ 607.359924][T15543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.359945][T15543] RIP: 0033:0x7f2a7178b690 [ 607.359958][T15543] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 607.359973][T15543] RSP: 002b:00007f2a725ddf60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 607.359990][T15543] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2a7178b690 [ 607.360001][T15543] RDX: 0000000000000000 RSI: 00007f2a7180e3b8 RDI: 00000000ffffff9c [ 607.360011][T15543] RBP: 00007f2a7180e3b8 R08: 0000000000000000 R09: 0000000000000000 [ 607.360021][T15543] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 607.360031][T15543] R13: 0000000000000000 R14: 00007f2a719a6160 R15: 00007ffc2081e3f8 [ 607.360046][T15543] [ 607.606264][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.739521][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 607.739536][ T29] audit: type=1400 audit(1737636943.746:2792): avc: denied { setopt } for pid=15549 comm="syz.2.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 607.767641][T15552] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2579'. [ 608.159805][T15236] em28xx 4-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 608.169431][T15236] em28xx 4-1:0.132: board has no eeprom [ 608.255476][T15236] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 608.285563][T15236] em28xx 4-1:0.132: analog set to bulk mode. [ 608.326942][ T5179] bcm5974 5-1:0.0: could not read from device [ 608.397988][ T5179] bcm5974 5-1:0.0: could not read from device [ 608.455809][ T1199] em28xx 4-1:0.132: Registering V4L2 extension [ 608.515123][ T5872] bcm5974 5-1:0.0: could not read from device [ 608.521201][T15564] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2583'. [ 608.570780][T15236] usb 4-1: USB disconnect, device number 56 [ 608.593432][T15236] em28xx 4-1:0.132: Disconnecting em28xx [ 608.619879][ T5872] input: failed to attach handler mousedev to device input67, error: -5 [ 608.644755][ T5179] bcm5974 5-1:0.0: could not read from device [ 608.646871][ T5872] usb 5-1: USB disconnect, device number 62 [ 608.681156][ T5179] bcm5974 5-1:0.0: could not read from device [ 608.804316][ T1199] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 608.811467][ T1199] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 608.818588][ T1199] em28xx 4-1:0.132: No AC97 audio processor [ 608.826626][ T1199] usb 4-1: Decoder not found [ 608.831251][ T1199] em28xx 4-1:0.132: failed to create media graph [ 608.837631][ T1199] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 608.845374][ T1199] em28xx 4-1:0.132: Remote control support is not available for this card. [ 608.854114][T15236] em28xx 4-1:0.132: Closing input extension [ 608.865757][T15236] em28xx 4-1:0.132: Freeing device [ 609.420767][ T8600] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 609.602131][T15597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2591'. [ 609.676255][ T8600] usb 3-1: Using ep0 maxpacket: 8 [ 609.772184][ T8600] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 609.775410][T15597] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 609.783140][ T8600] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 609.892083][T15597] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (79) [ 609.907992][ T8600] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 609.981650][ T8600] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 609.997625][ T29] audit: type=1400 audit(1737636945.851:2793): avc: denied { map } for pid=15602 comm="syz.4.2592" path="socket:[53351]" dev="sockfs" ino=53351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 610.008661][ T8600] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 610.021027][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.054697][ T8600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.305906][ T8600] usb 3-1: GET_CAPABILITIES returned 0 [ 610.358798][ T8600] usbtmc 3-1:16.0: can't read capabilities [ 610.434024][T15610] futex_wake_op: syz.3.2595 tries to shift op by 144; fix this program [ 610.639408][ T5872] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 610.769524][T15236] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 610.837500][T15616] bridge0: port 4(ipvlan2) entered blocking state [ 610.844185][T15616] bridge0: port 4(ipvlan2) entered disabled state [ 610.851059][T15616] ipvlan2: entered allmulticast mode [ 610.856575][T15616] bridge0: entered allmulticast mode [ 610.864569][T15616] ipvlan2: left allmulticast mode [ 610.869662][T15616] bridge0: left allmulticast mode [ 610.928063][ T5872] usb 5-1: Using ep0 maxpacket: 8 [ 610.937656][ T5872] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 610.947691][ T5872] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 610.957769][ T5872] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 610.972946][ T5872] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.990842][ T5872] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 611.000345][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.014716][ T7207] usb 3-1: USB disconnect, device number 66 [ 611.081109][T15236] usb 4-1: Using ep0 maxpacket: 32 [ 611.100541][T15236] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 611.109320][T15236] usb 4-1: config 0 has no interface number 0 [ 611.117909][T15236] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 611.158999][T15236] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 611.168831][T15236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.178253][T15236] usb 4-1: Product: syz [ 611.281389][T15236] usb 4-1: Manufacturer: syz [ 611.341895][ T5872] usb 5-1: GET_CAPABILITIES returned 0 [ 611.345008][ T25] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 611.352696][ T5872] usbtmc 5-1:16.0: can't read capabilities [ 611.360894][T15236] usb 4-1: SerialNumber: syz [ 611.383333][T15236] usb 4-1: config 0 descriptor?? [ 611.388977][T15610] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 611.409925][T15236] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 611.419860][T15236] em28xx 4-1:0.132: Video interface 132 found: bulk [ 611.816494][ T25] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 611.824700][ T25] usb 1-1: config 5 has no interface number 0 [ 611.846363][ T25] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 611.858677][ T25] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 12336, setting to 64 [ 611.870396][ T25] usb 1-1: config 5 interface 123 has no altsetting 0 [ 611.884491][ T25] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 611.893650][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.903162][ T25] usb 1-1: Product: syz [ 611.907382][ T25] usb 1-1: Manufacturer: syz [ 611.912592][ T25] usb 1-1: SerialNumber: syz [ 611.951739][T15620] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 611.988825][T15629] bridge0: port 4(ipvlan2) entered blocking state [ 611.995760][T15629] bridge0: port 4(ipvlan2) entered disabled state [ 612.003259][T15629] ipvlan2: entered allmulticast mode [ 612.008731][T15629] bridge0: entered allmulticast mode [ 612.017781][T15629] ipvlan2: left allmulticast mode [ 612.023096][T15629] bridge0: left allmulticast mode [ 612.187242][T15236] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 612.221099][ T25] comedi comedi0: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 612.241492][ T5872] usb 5-1: USB disconnect, device number 63 [ 612.266331][ T25] usb 1-1: USB disconnect, device number 62 [ 612.673167][T15642] FAULT_INJECTION: forcing a failure. [ 612.673167][T15642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.673192][T15642] CPU: 0 UID: 0 PID: 15642 Comm: syz.2.2604 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 612.673210][T15642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 612.673219][T15642] Call Trace: [ 612.673224][T15642] [ 612.673230][T15642] dump_stack_lvl+0x16c/0x1f0 [ 612.673258][T15642] should_fail_ex+0x497/0x5b0 [ 612.673280][T15642] _copy_from_user+0x2e/0xd0 [ 612.673299][T15642] move_addr_to_kernel+0x68/0x160 [ 612.673316][T15642] __sys_bind+0x11c/0x260 [ 612.673331][T15642] ? __pfx___sys_bind+0x10/0x10 [ 612.673346][T15642] ? __fget_files+0x206/0x3a0 [ 612.673368][T15642] ? __pfx_ksys_write+0x10/0x10 [ 612.673388][T15642] ? rcu_is_watching+0x12/0xc0 [ 612.673404][T15642] __x64_sys_bind+0x72/0xb0 [ 612.673419][T15642] do_syscall_64+0xcd/0x250 [ 612.673438][T15642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.673459][T15642] RIP: 0033:0x7fdf7e38cd29 [ 612.673472][T15642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.673486][T15642] RSP: 002b:00007fdf7f282038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 612.673501][T15642] RAX: ffffffffffffffda RBX: 00007fdf7e5a5fa0 RCX: 00007fdf7e38cd29 [ 612.673511][T15642] RDX: 0000000000000006 RSI: 0000000020001040 RDI: 0000000000000004 [ 612.673520][T15642] RBP: 00007fdf7f282090 R08: 0000000000000000 R09: 0000000000000000 [ 612.673530][T15642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.673540][T15642] R13: 0000000000000000 R14: 00007fdf7e5a5fa0 R15: 00007ffde98380b8 [ 612.673554][T15642] [ 612.675700][T15236] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 612.675728][T15236] em28xx 4-1:0.132: board has no eeprom [ 612.697468][T15644] random: crng reseeded on system resumption [ 612.896860][T15236] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 612.904724][T15236] em28xx 4-1:0.132: analog set to bulk mode. [ 612.911702][ T5872] em28xx 4-1:0.132: Registering V4L2 extension [ 612.919709][T15236] usb 4-1: USB disconnect, device number 57 [ 612.926289][T15236] em28xx 4-1:0.132: Disconnecting em28xx [ 613.255763][ T5872] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 613.262911][ T5872] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 613.270658][ T5872] em28xx 4-1:0.132: No AC97 audio processor [ 613.273967][T15660] 9pnet_fd: Insufficient options for proto=fd [ 613.299086][ T5872] usb 4-1: Decoder not found [ 613.307743][ T5872] em28xx 4-1:0.132: failed to create media graph [ 613.328785][ T5872] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 613.370799][ T5872] em28xx 4-1:0.132: Remote control support is not available for this card. [ 613.382843][T15236] em28xx 4-1:0.132: Closing input extension [ 613.390621][T15236] em28xx 4-1:0.132: Freeing device [ 613.569713][ T8600] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 613.942815][ T8600] usb 2-1: Using ep0 maxpacket: 16 [ 613.949159][ T8600] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 613.962027][ T8600] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 613.971110][ T8600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.979912][ T8600] usb 2-1: config 0 descriptor?? [ 613.987865][ T8600] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input68 [ 614.065174][T15669] FAULT_INJECTION: forcing a failure. [ 614.065174][T15669] name failslab, interval 1, probability 0, space 0, times 0 [ 614.078022][T15669] CPU: 1 UID: 0 PID: 15669 Comm: syz.2.2611 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 614.078042][T15669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 614.078052][T15669] Call Trace: [ 614.078057][T15669] [ 614.078062][T15669] dump_stack_lvl+0x16c/0x1f0 [ 614.078085][T15669] should_fail_ex+0x497/0x5b0 [ 614.078096][T15669] ? fs_reclaim_acquire+0xae/0x150 [ 614.078107][T15669] should_failslab+0xc2/0x120 [ 614.078120][T15669] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 614.078134][T15669] ? getname_flags.part.0+0x4c/0x550 [ 614.078144][T15669] getname_flags.part.0+0x4c/0x550 [ 614.078153][T15669] getname_flags+0x93/0xf0 [ 614.078163][T15669] user_path_at+0x24/0x60 [ 614.078173][T15669] __do_sys_move_mount+0x1e5/0xe40 [ 614.078188][T15669] ? fput+0x67/0x440 [ 614.078200][T15669] ? __pfx___do_sys_move_mount+0x10/0x10 [ 614.078211][T15669] ? ksys_write+0x1ba/0x250 [ 614.078221][T15669] ? __pfx_ksys_write+0x10/0x10 [ 614.078231][T15669] ? rcu_is_watching+0x12/0xc0 [ 614.078240][T15669] ? rcu_is_watching+0x12/0xc0 [ 614.078248][T15669] do_syscall_64+0xcd/0x250 [ 614.078260][T15669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.078273][T15669] RIP: 0033:0x7fdf7e38cd29 [ 614.078281][T15669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.078290][T15669] RSP: 002b:00007fdf7f282038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 614.078299][T15669] RAX: ffffffffffffffda RBX: 00007fdf7e5a5fa0 RCX: 00007fdf7e38cd29 [ 614.078305][T15669] RDX: 0000000000000003 RSI: 00000000200003c0 RDI: ffffffffffffff9c [ 614.078311][T15669] RBP: 00007fdf7f282090 R08: 0000000000000000 R09: 0000000000000000 [ 614.078317][T15669] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 614.078323][T15669] R13: 0000000000000000 R14: 00007fdf7e5a5fa0 R15: 00007ffde98380b8 [ 614.078331][T15669] [ 614.380058][ T5179] bcm5974 2-1:0.0: could not read from device [ 614.390443][ T5179] bcm5974 2-1:0.0: could not read from device [ 614.420679][ T8600] bcm5974 2-1:0.0: could not read from device [ 614.435714][ T5179] bcm5974 2-1:0.0: could not read from device [ 614.516495][ T8600] input: failed to attach handler mousedev to device input68, error: -5 [ 614.596898][ T5179] bcm5974 2-1:0.0: could not read from device [ 614.639541][ T5179] bcm5974 2-1:0.0: could not read from device [ 614.930488][ T8600] usb 2-1: USB disconnect, device number 61 [ 615.147982][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 615.156021][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 615.163592][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 615.171264][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 615.179729][ T5831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 615.186927][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 615.197445][ T29] audit: type=1400 audit(1737636950.724:2794): avc: denied { mounton } for pid=15689 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 615.244890][T15696] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2618'. [ 615.248618][T15689] chnl_net:caif_netlink_parms(): no params data found [ 615.254265][T15696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2618'. [ 615.270323][T15696] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2618'. [ 615.279593][T15696] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2618'. [ 615.309675][T15689] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.316895][T15689] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.324113][T15689] bridge_slave_0: entered allmulticast mode [ 615.330778][T15689] bridge_slave_0: entered promiscuous mode [ 615.338248][T15689] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.345497][T15689] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.353802][T15689] bridge_slave_1: entered allmulticast mode [ 615.362351][T15689] bridge_slave_1: entered promiscuous mode [ 615.398556][ T5899] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 615.411899][T15689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.422554][T15689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.437838][T15689] team0: Port device team_slave_0 added [ 615.445030][T15689] team0: Port device team_slave_1 added [ 615.463954][T15689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.471044][T15689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.498793][T15689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.523259][T15689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.530352][T15689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.558184][T15689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.619830][ T5899] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 615.638443][ T5899] usb 5-1: config 5 has no interface number 0 [ 615.654881][ T5899] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 615.654904][T15236] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 615.674295][ T5899] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 12336, setting to 64 [ 615.685498][ T5899] usb 5-1: config 5 interface 123 has no altsetting 0 [ 615.689189][T15689] hsr_slave_0: entered promiscuous mode [ 615.693773][ T5899] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 615.699183][T15689] hsr_slave_1: entered promiscuous mode [ 615.707291][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.707349][ T5899] usb 5-1: Product: syz [ 615.707388][ T5899] usb 5-1: Manufacturer: syz [ 615.707427][ T5899] usb 5-1: SerialNumber: syz [ 615.714597][T15688] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 615.723995][T15689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 615.751273][T15689] Cannot create hsr debugfs directory [ 615.838940][T15236] usb 2-1: Using ep0 maxpacket: 8 [ 615.853272][T15236] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 615.863530][T15236] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 615.873940][T15236] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 615.884222][T15236] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.897725][T15236] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 615.907206][ T5872] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 615.915281][T15236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.027369][ T5899] comedi comedi0: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 616.039638][ T5899] usb 5-1: USB disconnect, device number 64 [ 616.040626][T15689] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 616.058645][T15689] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 616.067360][T15689] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 616.076778][T15689] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 616.081091][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 616.091557][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 616.106269][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 616.107094][T15689] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.123090][T15689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.130813][T15689] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.137881][T15689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.148657][ T5872] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 616.158425][ T29] audit: type=1326 audit(1737636951.622:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15707 comm="syz.0.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf97d8cd29 code=0x7ffc0000 [ 616.186079][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.187531][T15689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.201309][ T5872] usb 4-1: Product: syz [ 616.206412][ T29] audit: type=1326 audit(1737636951.622:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15707 comm="syz.0.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf97d8cd29 code=0x7ffc0000 [ 616.208147][T15236] usb 2-1: GET_CAPABILITIES returned 0 [ 616.231846][ T29] audit: type=1326 audit(1737636951.622:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15707 comm="syz.0.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf97d8cd29 code=0x7ffc0000 [ 616.238296][ T5872] usb 4-1: Manufacturer: syz [ 616.266464][T12943] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.272145][ T29] audit: type=1326 audit(1737636951.622:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15707 comm="syz.0.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf97d8cd29 code=0x7ffc0000 [ 616.274860][T15236] usbtmc 2-1:16.0: can't read capabilities [ 616.297221][ T29] audit: type=1326 audit(1737636951.622:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15707 comm="syz.0.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf97d8cd29 code=0x7ffc0000 [ 616.297249][ T29] audit: type=1326 audit(1737636951.622:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15707 comm="syz.0.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf97d8cd29 code=0x7ffc0000 [ 616.297277][ T29] audit: type=1326 audit(1737636951.622:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15707 comm="syz.0.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf97d8cd29 code=0x7ffc0000 [ 616.297301][ T29] audit: type=1326 audit(1737636951.622:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15707 comm="syz.0.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf97d8cd29 code=0x7ffc0000 [ 616.304645][T12943] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.326493][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.326999][ T29] audit: type=1326 audit(1737636951.622:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15707 comm="syz.0.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf97d8cd29 code=0x7ffc0000 [ 616.350388][ T5872] usb 4-1: SerialNumber: syz [ 616.396902][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.433589][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.724019][ T5872] usb 4-1: config 0 descriptor?? [ 616.725542][T15689] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.740778][ T5872] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 616.752797][ T8600] usb 2-1: USB disconnect, device number 62 [ 616.768651][T12943] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.775801][T12943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.810215][T12943] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.817363][T12943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.907760][T15720] netlink: 'syz.4.2627': attribute type 2 has an invalid length. [ 617.075401][ T8600] usb 4-1: USB disconnect, device number 58 [ 617.340361][T15689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.353376][ T5831] Bluetooth: hci3: command tx timeout [ 617.420338][T15689] veth0_vlan: entered promiscuous mode [ 617.435389][T15689] veth1_vlan: entered promiscuous mode [ 617.461089][T15689] veth0_macvtap: entered promiscuous mode [ 617.468212][T15689] veth1_macvtap: entered promiscuous mode [ 617.479642][T15689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.492504][T15689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.502597][T15689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.513204][T15689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.523109][T15689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.534530][T15689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.535142][ T25] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 617.544513][T15689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.577354][T15689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.588627][T15689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.601984][T15689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.612697][T15689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.623181][T15689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.634781][T15689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.645962][T15689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.656538][T15689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.667033][T15689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.678709][T15689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.688858][T15689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.700411][T15689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.711436][T15689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.723259][T15689] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.732264][T15689] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.737994][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 617.750229][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 617.755080][T15689] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.776118][ T25] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 617.836871][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.990571][ T25] usb 5-1: config 0 descriptor?? [ 617.996759][T15689] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.011485][ T25] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input69 [ 618.087383][ T6598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.125782][ T6598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.474683][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.515930][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.077903][T15772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2622'. [ 619.577008][ T5831] Bluetooth: hci3: command tx timeout [ 619.588042][ T8600] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 619.705161][ T5899] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 619.941722][ T8600] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.952509][ T8600] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 619.963999][ T8600] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 619.973129][ T8600] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 619.981180][ T8600] usb 6-1: SerialNumber: syz [ 620.004662][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 620.013326][ T5899] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 620.024085][ T5899] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 620.034191][ T5899] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 620.044577][ T5899] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 620.058721][ T5899] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 620.067897][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.356260][ T8600] usb 6-1: 0:2 : does not exist [ 620.361240][ T5179] bcm5974 5-1:0.0: could not read from device [ 620.370789][ T8600] usb 6-1: unit 5: unexpected type 0x0c [ 620.378419][ T5179] bcm5974 5-1:0.0: could not read from device [ 620.386086][ T25] bcm5974 5-1:0.0: could not read from device [ 620.398033][ T8600] usb 6-1: USB disconnect, device number 2 [ 620.406704][ T25] input: failed to attach handler mousedev to device input69, error: -5 [ 620.546081][ T5899] usb 2-1: GET_CAPABILITIES returned 0 [ 620.571471][ T5179] bcm5974 5-1:0.0: could not read from device [ 620.585287][ T25] usb 5-1: USB disconnect, device number 65 [ 620.609501][ T5899] usbtmc 2-1:16.0: can't read capabilities [ 620.724150][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 620.919126][ T5179] bcm5974 5-1:0.0: could not read from device [ 621.001969][T15802] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2645'. [ 621.061358][ T8] usb 2-1: USB disconnect, device number 63 [ 621.069636][T15803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2645'. [ 621.079079][T15803] netlink: 'syz.3.2645': attribute type 12 has an invalid length. [ 621.105366][T15803] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.114162][T15803] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.122952][T15803] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.131678][T15803] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.141623][T15803] vxlan0: entered promiscuous mode [ 621.233697][T15805] virt_wifi0 speed is unknown, defaulting to 1000 [ 621.240404][T15805] virt_wifi0 speed is unknown, defaulting to 1000 [ 621.247675][T15805] virt_wifi0 speed is unknown, defaulting to 1000 [ 621.256539][T15805] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 621.268570][T15805] virt_wifi0 speed is unknown, defaulting to 1000 [ 621.275343][T15805] virt_wifi0 speed is unknown, defaulting to 1000 [ 621.283292][T15805] virt_wifi0 speed is unknown, defaulting to 1000 [ 621.290820][T15805] virt_wifi0 speed is unknown, defaulting to 1000 [ 621.297567][T15805] virt_wifi0 speed is unknown, defaulting to 1000 [ 621.305165][T15805] virt_wifi0 speed is unknown, defaulting to 1000 [ 621.543525][T15810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2648'. [ 621.552722][T15810] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 621.561734][T15810] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (79) [ 621.771145][T15817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2650'. [ 621.783348][T15817] QAT: failed to copy from user cfg_data. [ 621.811366][ T5831] Bluetooth: hci3: command tx timeout [ 623.426143][ T7207] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 623.798369][ T7207] usb 5-1: Using ep0 maxpacket: 16 [ 623.960191][ T7207] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 623.980016][ T7207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 624.024497][ T5831] Bluetooth: hci3: command tx timeout [ 624.102813][ T7207] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 624.119367][T15860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2662'. [ 624.122850][ T7207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.136839][ T7207] usb 5-1: Product: syz [ 624.141006][ T7207] usb 5-1: Manufacturer: syz [ 624.150041][ T7207] usb 5-1: SerialNumber: syz [ 624.171312][ T7207] usb 5-1: config 0 descriptor?? [ 624.227416][ T5899] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 624.228691][ T7207] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 624.366283][ T8] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 624.424115][ T5899] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 624.442501][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.450889][ T5899] usb 2-1: Product: syz [ 624.456278][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 624.456293][ T29] audit: type=1400 audit(1737636959.386:2819): avc: denied { setopt } for pid=15871 comm="syz.0.2665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 624.457164][ T8600] usb 5-1: USB disconnect, device number 66 [ 624.474827][ T29] audit: type=1400 audit(1737636959.386:2820): avc: denied { accept } for pid=15871 comm="syz.0.2665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 624.485510][ T5899] usb 2-1: Manufacturer: syz [ 624.519025][ T5899] usb 2-1: SerialNumber: syz [ 624.534347][ T5899] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 624.539002][ T5838] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 624.554330][ T25] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 624.571762][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.582743][ T8] usb 6-1: config 0 has no interfaces? [ 624.589830][ T8] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 624.599455][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.608864][ T8] usb 6-1: Product: syz [ 624.613713][ T8] usb 6-1: Manufacturer: syz [ 624.618340][ T8] usb 6-1: SerialNumber: syz [ 624.625784][ T8] usb 6-1: config 0 descriptor?? [ 624.711519][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.722734][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.733843][ T5838] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 624.743217][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.753099][ T5838] usb 4-1: config 0 descriptor?? [ 625.239047][T15901] FAULT_INJECTION: forcing a failure. [ 625.239047][T15901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.252382][T15901] CPU: 0 UID: 0 PID: 15901 Comm: syz.4.2666 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 625.252405][T15901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 625.252415][T15901] Call Trace: [ 625.252421][T15901] [ 625.252428][T15901] dump_stack_lvl+0x16c/0x1f0 [ 625.252452][T15901] should_fail_ex+0x497/0x5b0 [ 625.252477][T15901] _copy_from_user+0x2e/0xd0 [ 625.252497][T15901] kstrtouint_from_user+0xd7/0x1c0 [ 625.252522][T15901] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 625.252550][T15901] ? inode_security+0x101/0x130 [ 625.252577][T15901] proc_fail_nth_write+0x84/0x250 [ 625.252594][T15901] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 625.252609][T15901] ? ksys_write+0x12b/0x250 [ 625.252628][T15901] ? lock_acquire+0x2f/0xb0 [ 625.252649][T15901] ? ksys_write+0x12b/0x250 [ 625.252669][T15901] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 625.252685][T15901] vfs_write+0x24c/0x1150 [ 625.252705][T15901] ? __fget_files+0x1fc/0x3a0 [ 625.252726][T15901] ? __pfx___mutex_lock+0x10/0x10 [ 625.252745][T15901] ? __pfx_vfs_write+0x10/0x10 [ 625.252766][T15901] ? __fget_files+0x206/0x3a0 [ 625.252788][T15901] ksys_write+0x12b/0x250 [ 625.252806][T15901] ? __pfx_ksys_write+0x10/0x10 [ 625.252825][T15901] ? rcu_is_watching+0x12/0xc0 [ 625.252841][T15901] ? rcu_is_watching+0x12/0xc0 [ 625.252858][T15901] do_syscall_64+0xcd/0x250 [ 625.252878][T15901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.252901][T15901] RIP: 0033:0x7f48d018b7df [ 625.252914][T15901] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 625.252928][T15901] RSP: 002b:00007f48d107a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 625.252943][T15901] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f48d018b7df [ 625.252953][T15901] RDX: 0000000000000001 RSI: 00007f48d107a0a0 RDI: 0000000000000006 [ 625.252962][T15901] RBP: 00007f48d107a090 R08: 0000000000000000 R09: 0000000000000000 [ 625.252972][T15901] R10: ffffffffff600000 R11: 0000000000000293 R12: 0000000000000001 [ 625.252987][T15901] R13: 0000000000000000 R14: 00007f48d03a6160 R15: 00007ffe0f9f3048 [ 625.253000][T15901] ? 0xffffffffff600000 [ 625.253014][T15901] [ 625.379416][ T8600] usb 2-1: USB disconnect, device number 64 [ 625.382664][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.515386][ T5838] usb 4-1: string descriptor 0 read error: -22 [ 625.915871][ T25] usb 2-1: Service connection timeout for: 256 [ 625.922923][ T25] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 625.924062][ T5838] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000E/input/input70 [ 625.932067][ T25] ath9k_htc: Failed to initialize the device [ 625.948945][ T8600] usb 2-1: ath9k_htc: USB layer deinitialized [ 626.003441][ T5838] uclogic 0003:256C:006D.000E: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 626.166110][ T5838] usb 4-1: USB disconnect, device number 59 [ 626.312527][ T29] audit: type=1400 audit(1737636961.116:2821): avc: denied { setopt } for pid=15908 comm="syz.1.2668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 626.538871][ T29] audit: type=1400 audit(1737636961.331:2822): avc: denied { sys_chroot } for pid=15914 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 626.556172][T15916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2669'. [ 626.570419][ T29] audit: type=1400 audit(1737636961.331:2823): avc: denied { setgid } for pid=15914 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 626.594553][ T29] audit: type=1400 audit(1737636961.331:2824): avc: denied { setrlimit } for pid=15914 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 627.215324][T15942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2676'. [ 627.355816][ T25] usb 6-1: USB disconnect, device number 3 [ 627.422690][ T5831] Bluetooth: hci3: unexpected event 0x03 length: 17 > 11 [ 627.446730][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.466509][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.080943][T15964] virt_wifi0 speed is unknown, defaulting to 1000 [ 628.137170][ T29] audit: type=1400 audit(1737636962.828:2825): avc: denied { map } for pid=15950 comm="syz.0.2681" path="socket:[54770]" dev="sockfs" ino=54770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 628.194301][ T29] audit: type=1400 audit(1737636962.828:2826): avc: denied { setopt } for pid=15950 comm="syz.0.2681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 629.286462][T16003] veth0_to_team: entered promiscuous mode [ 629.292982][T16003] veth0_to_team: entered allmulticast mode [ 629.583178][ T5831] Bluetooth: hci3: command tx timeout [ 629.696947][T16010] : renamed from ipvlan1 [ 629.720030][ T29] audit: type=1400 audit(1737636964.306:2827): avc: denied { read } for pid=16011 comm="syz.1.2697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 629.907724][T16019] overlayfs: invalid origin (0000) [ 630.346337][T16033] unsupported nlmsg_type 40 [ 630.824218][T16043] loop9: detected capacity change from 0 to 8 [ 631.078999][T16043] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 631.090322][T16043] loop9: partition table partially beyond EOD, truncated [ 631.134997][T16043] loop9: p1 size 81768186 extends beyond EOD, truncated [ 631.207639][ T29] audit: type=1400 audit(1737636965.700:2828): avc: denied { listen } for pid=16035 comm="syz.4.2707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 631.404104][ T6127] udevd[6127]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 631.527672][ T29] audit: type=1400 audit(1737636965.812:2829): avc: denied { listen } for pid=16055 comm="syz.5.2714" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 631.683235][T16062] netlink: 'syz.1.2713': attribute type 39 has an invalid length. [ 631.792947][T16077] loop6: detected capacity change from 0 to 524287999 [ 631.807370][ C0] blk_print_req_error: 8 callbacks suppressed [ 631.807401][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 631.808338][ T5831] Bluetooth: hci3: command tx timeout [ 631.813515][ C0] buffer_io_error: 8 callbacks suppressed [ 631.813525][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.852416][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 631.861612][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.870479][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 631.879906][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.914042][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 631.923258][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.931835][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 631.940981][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.949884][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 631.959043][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.967029][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 631.976192][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.984155][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 631.993340][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 632.004063][T16077] ldm_validate_partition_table(): Disk read failed. [ 632.011990][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 632.021194][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 632.029179][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 632.038557][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 632.094041][ T5838] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 632.111335][T16077] Dev loop6: unable to read RDB block 0 [ 632.126545][T16077] loop6: unable to read partition table [ 632.138368][T16077] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 632.333257][T16089] futex_wake_op: syz.4.2721 tries to shift op by 144; fix this program [ 632.347895][ T5838] usb 6-1: config 0 has no interfaces? [ 632.355645][ T5838] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 632.368671][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.382123][ T5838] usb 6-1: config 0 descriptor?? [ 632.620477][ T5899] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 632.628967][T16097] siw: device registration error -23 [ 632.779747][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 632.786880][ T5899] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 632.819078][T16075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.833448][T16075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.833747][ T5899] usb 5-1: config 0 has no interface number 0 [ 632.853460][ T5838] usb 6-1: USB disconnect, device number 4 [ 632.872571][ T5899] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 632.899292][ T5899] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 632.908803][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.916815][ T5899] usb 5-1: Product: syz [ 632.924451][ T5899] usb 5-1: Manufacturer: syz [ 632.929522][ T5899] usb 5-1: SerialNumber: syz [ 632.937496][ T5899] usb 5-1: config 0 descriptor?? [ 632.945018][T16089] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 632.953623][ T5899] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 633.002877][ T5899] em28xx 5-1:0.132: Video interface 132 found: bulk [ 633.084709][ T29] audit: type=1326 audit(1737636967.458:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16102 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7178cd29 code=0x7ffc0000 [ 633.108197][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.156955][ T29] audit: type=1326 audit(1737636967.458:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16102 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7178cd29 code=0x7ffc0000 [ 633.185922][ T29] audit: type=1326 audit(1737636967.496:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16102 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f2a7178cd29 code=0x7ffc0000 [ 633.258746][ T29] audit: type=1326 audit(1737636967.496:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16102 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7178cd29 code=0x7ffc0000 [ 633.282485][ T29] audit: type=1326 audit(1737636967.496:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16102 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7178cd29 code=0x7ffc0000 [ 633.306086][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.396279][ T5899] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 633.539126][T15791] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 633.547658][ T5831] Bluetooth: hci3: unexpected event 0x03 length: 17 > 11 [ 633.547698][ T5831] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 633.731341][T15791] usb 2-1: Using ep0 maxpacket: 8 [ 633.750910][T15791] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 633.761912][T15791] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 633.774961][T15791] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 633.990606][T16122] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2733'. [ 633.993078][ T8600] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 634.007999][ T5899] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 634.029384][T15791] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 634.044813][ T5899] em28xx 5-1:0.132: board has no eeprom [ 634.060353][T15791] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 634.077432][T15791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.151623][ T5899] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 634.159751][ T5899] em28xx 5-1:0.132: analog set to bulk mode. [ 634.165992][ T25] em28xx 5-1:0.132: Registering V4L2 extension [ 634.179513][ T5899] usb 5-1: USB disconnect, device number 67 [ 634.186033][ T5899] em28xx 5-1:0.132: Disconnecting em28xx [ 634.218681][ T25] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 634.226213][ T25] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 634.233717][ T25] em28xx 5-1:0.132: No AC97 audio processor [ 634.258637][ T8600] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 634.267521][ T8600] usb 1-1: config 5 has no interface number 0 [ 634.273766][ T8600] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 634.342136][ T25] usb 5-1: Decoder not found [ 634.382505][ T25] em28xx 5-1:0.132: failed to create media graph [ 634.430295][ T8600] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 12336, setting to 64 [ 634.443088][T15791] usb 2-1: GET_CAPABILITIES returned 0 [ 634.466671][ T25] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 634.474317][T15791] usbtmc 2-1:16.0: can't read capabilities [ 634.480880][ T25] em28xx 5-1:0.132: Remote control support is not available for this card. [ 634.489512][ T8600] usb 1-1: config 5 interface 123 has no altsetting 0 [ 634.504181][ T8600] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 634.542271][ T5899] em28xx 5-1:0.132: Closing input extension [ 634.549577][ T8600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.559529][ T5899] em28xx 5-1:0.132: Freeing device [ 634.565336][ T8600] usb 1-1: Product: syz [ 634.571332][ T8600] usb 1-1: Manufacturer: syz [ 634.577125][ T8600] usb 1-1: SerialNumber: syz [ 634.590161][T16113] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 634.661309][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 634.673240][ T25] usb 2-1: USB disconnect, device number 65 [ 635.041373][ T8600] comedi comedi0: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 635.065152][ T8600] usb 1-1: USB disconnect, device number 63 [ 635.282861][T16145] overlayfs: missing 'lowerdir' [ 635.752680][ T5831] Bluetooth: hci3: command tx timeout [ 635.940342][T16165] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2743'. [ 636.076457][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.092532][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.484537][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.491981][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.499388][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.506811][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.514227][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.542880][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.550397][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.574839][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.585117][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.592777][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.600541][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.608027][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.615512][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.622977][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.630457][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.637906][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.645373][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.664235][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.724687][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.732163][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.739606][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.747016][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.760552][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.809848][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.820887][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.828407][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.835918][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.843352][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.858624][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.933408][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.942080][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.949780][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.959715][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 636.972660][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.061338][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.097110][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.117020][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.144978][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.201653][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.233982][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.265256][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.274488][ T5831] Bluetooth: hci1: unexpected event 0x03 length: 17 > 11 [ 637.294415][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.342824][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.365927][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.390250][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.457507][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.481178][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.521453][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.549042][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.563348][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.573456][T16215] netlink: 1256 bytes leftover after parsing attributes in process `syz.5.2757'. [ 637.592002][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.633813][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.656227][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.674500][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.702581][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.721054][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 637.731819][ T29] audit: type=1400 audit(1737636971.799:2835): avc: denied { read } for pid=16218 comm="syz.5.2758" name="/" dev="configfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 637.765238][ T8] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 637.829959][ T29] audit: type=1400 audit(1737636971.799:2836): avc: denied { open } for pid=16218 comm="syz.5.2758" path="/" dev="configfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 637.897207][T16228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2756'. [ 637.943097][ T29] audit: type=1400 audit(1737636971.827:2837): avc: denied { accept } for pid=16211 comm="syz.3.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 638.008311][ T29] audit: type=1400 audit(1737636971.901:2838): avc: denied { connect } for pid=16211 comm="syz.3.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 638.037410][ T29] audit: type=1400 audit(1737636971.976:2839): avc: denied { setattr } for pid=16227 comm="syz.4.2759" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 638.308699][ T5899] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 638.411890][ T29] audit: type=1400 audit(1737636972.060:2840): avc: denied { listen } for pid=16211 comm="syz.3.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 638.574025][ T5899] usb 4-1: device descriptor read/64, error -71 [ 638.869660][ T5899] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 639.012286][ T5899] usb 4-1: device descriptor read/64, error -71 [ 639.028360][T16255] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2763'. [ 639.155897][ T5899] usb usb4-port1: attempt power cycle [ 639.267565][T16263] fuse: blksize only supported for fuseblk [ 639.439410][ T5831] Bluetooth: hci1: command 0x0419 tx timeout [ 639.728581][ T5899] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 639.750314][ T5899] usb 4-1: device descriptor read/8, error -71 [ 639.842135][T16281] binder: BC_ACQUIRE_RESULT not supported [ 639.852095][T16281] binder: 16279:16281 ioctl c0306201 20000280 returned -22 [ 639.881593][T16283] tap0: tun_chr_ioctl cmd 1074025675 [ 639.893764][T16283] tap0: persist disabled [ 639.921990][T16284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2771'. [ 639.943029][T16278] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 639.982198][ T29] audit: type=1400 audit(1737636973.913:2841): avc: denied { wake_alarm } for pid=16286 comm="syz.0.2775" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 640.006697][ T5899] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 640.039034][ T5899] usb 4-1: device descriptor read/8, error -71 [ 640.111395][T16291] netlink: 'syz.0.2777': attribute type 1 has an invalid length. [ 640.134084][T16291] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2777'. [ 640.156488][ T5899] usb usb4-port1: unable to enumerate USB device [ 640.176155][T16291] bond0: (slave syz_tun): Releasing backup interface [ 640.238888][T16291] bridge_slave_0: left allmulticast mode [ 640.251260][ T8] libceph: connect (1)[c::]:6789 error -101 [ 640.257402][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 640.281882][T16291] bridge_slave_0: left promiscuous mode [ 640.288917][T16291] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.303797][T16291] bridge_slave_1: left allmulticast mode [ 640.309790][T16291] bridge_slave_1: left promiscuous mode [ 640.315419][T16291] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.330165][T16291] bond0: (slave bond_slave_0): Releasing backup interface [ 640.340655][T16291] bond0: (slave bond_slave_1): Releasing backup interface [ 640.351307][T16291] team0: Port device team_slave_0 removed [ 640.362452][T16291] team0: Port device team_slave_1 removed [ 640.368492][T16291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.388256][T16291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.419697][T16291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.427825][T16291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.437123][T16292] ceph: No mds server is up or the cluster is laggy [ 640.497281][T16293] geneve2: entered promiscuous mode [ 640.509519][T16293] geneve2: entered allmulticast mode [ 640.522645][T16293] batman_adv: batadv0: Adding interface: geneve2 [ 640.535888][T16293] batman_adv: batadv0: Interface activated: geneve2 [ 640.619536][ T5831] Bluetooth: hci3: unexpected event 0x03 length: 17 > 11 [ 640.619564][ T5831] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 640.848698][ T29] audit: type=1400 audit(1737636974.717:2842): avc: denied { mount } for pid=16310 comm="syz.5.2782" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 640.877437][T16317] virt_wifi0 speed is unknown, defaulting to 1000 [ 641.396342][ T8600] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 641.570146][ T8600] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 641.642174][ T5831] Bluetooth: hci1: command 0x0419 tx timeout [ 641.675404][ T8600] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 641.703114][ T29] audit: type=1400 audit(1737636975.521:2843): avc: denied { unmount } for pid=15689 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 641.727746][ T8600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 641.749096][ T8600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 641.819094][ T8600] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 641.835129][T16332] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2789'. [ 641.835573][ T8600] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 641.853634][ T8600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.865925][ T8600] usb 4-1: config 0 descriptor?? [ 641.899527][T16327] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 641.995687][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2792'. [ 642.060926][T16344] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2792'. [ 642.388783][T16339] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16339 comm=syz.5.2792 [ 642.403111][ T29] audit: type=1400 audit(1737636976.176:2844): avc: denied { read } for pid=16338 comm="syz.5.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 642.403590][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2792'. [ 642.441181][T16348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2794'. [ 642.493380][T16344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2792'. [ 642.839608][ T5831] Bluetooth: hci3: command tx timeout [ 642.846260][ T8600] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 642.855001][ T8600] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 642.864886][ T8600] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 642.916951][ T8600] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 642.926266][ T8600] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 642.981465][ T8600] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 643.021290][ T5831] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 643.029628][ T5831] Bluetooth: hci3: Injecting HCI hardware error event [ 643.036556][ T5831] Bluetooth: hci3: hardware error 0x00 [ 643.121458][ T8600] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 643.129171][ T8600] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 643.136572][ T8600] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 643.144333][ T8600] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 643.152066][ T8600] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 643.208655][ T8600] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 643.542709][ T29] audit: type=1400 audit(1737636976.999:2845): avc: denied { bind } for pid=16362 comm="syz.0.2799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 643.572375][ T8600] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 643.622232][ T8600] usb 4-1: USB disconnect, device number 64 [ 644.161829][ T5843] Bluetooth: hci1: unexpected event 0x03 length: 17 > 11 [ 644.161861][ T5843] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 644.609149][T16411] @: renamed from vlan0 (while UP) [ 645.335446][ T5831] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 646.300305][T16476] netlink: 'syz.4.2819': attribute type 8 has an invalid length. [ 646.346133][ T5831] Bluetooth: hci1: command 0x0419 tx timeout [ 646.990918][T16494] 9pnet_virtio: no channels available for device syz [ 647.012742][T16494] syz.4.2826: attempt to access beyond end of device [ 647.012742][T16494] loop4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 647.026612][T16494] gfs2: error -5 reading superblock [ 647.285723][T16522] netlink: 'syz.1.2835': attribute type 8 has an invalid length. [ 647.404574][T16530] sp0: Synchronizing with TNC [ 647.524241][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2840'. [ 647.685128][T16554] random: crng reseeded on system resumption [ 647.780441][T16567] fuse: Bad value for 'fd' [ 648.233440][T16595] netlink: 'syz.0.2848': attribute type 8 has an invalid length. [ 648.364320][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 648.372125][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 648.382185][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 648.396161][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 648.413599][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 648.422363][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 648.480450][T16601] virt_wifi0 speed is unknown, defaulting to 1000 [ 648.850593][T16601] chnl_net:caif_netlink_parms(): no params data found [ 648.965979][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2856'. [ 649.011866][T16651] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.020889][T16651] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.029882][T16651] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.038697][T16651] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.050614][T16651] vxlan0: entered promiscuous mode [ 649.065054][T16601] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.075882][T16601] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.089138][T16601] bridge_slave_0: entered allmulticast mode [ 649.095782][T16601] bridge_slave_0: entered promiscuous mode [ 649.105259][T16601] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.112463][T16601] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.121271][T16601] bridge_slave_1: entered allmulticast mode [ 649.129054][T16601] bridge_slave_1: entered promiscuous mode [ 649.161482][T16601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.204451][T16601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.257277][T16601] team0: Port device team_slave_0 added [ 649.264675][T16601] team0: Port device team_slave_1 added [ 649.278012][T16601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.285070][T16601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.310972][ C1] vkms_vblank_simulate: vblank timer overrun [ 649.326356][T16601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.342122][T16601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.349398][T16601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.375422][T16601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.422975][T16601] hsr_slave_0: entered promiscuous mode [ 649.436918][T16601] hsr_slave_1: entered promiscuous mode [ 649.442780][T16601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.450605][T16601] Cannot create hsr debugfs directory [ 649.529343][T16601] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.580878][T16601] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.644895][T16601] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.715749][T16601] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.805813][T16601] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 649.815428][T16601] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 649.825402][T16601] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 649.836209][T16601] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 649.852260][T16681] 9pnet_virtio: no channels available for device syz [ 649.868414][ T5831] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 650.315062][T16601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.413435][T16601] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.432979][T12934] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.440057][T12934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.460831][T16601] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 650.527090][T16601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 650.539475][T12934] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.546544][T12934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.622346][ T5831] Bluetooth: hci2: command tx timeout [ 650.918750][ T29] audit: type=1400 audit(1737636984.136:2846): avc: denied { setopt } for pid=16700 comm="syz.3.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 650.984416][T16601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.128496][T16601] veth0_vlan: entered promiscuous mode [ 651.149088][T16601] veth1_vlan: entered promiscuous mode [ 651.191920][T16601] veth0_macvtap: entered promiscuous mode [ 651.211804][T16601] veth1_macvtap: entered promiscuous mode [ 651.233342][T16601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.254965][T16601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.265010][T16601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.275911][T16601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.285829][T16601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.296761][T16601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.306817][T16601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.318414][T16601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.330931][T16601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.368040][T16601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.381639][T16601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.391517][T16601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.406420][T16601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.423654][T16601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.434868][T16601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.445023][T16601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.456134][T16601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.468518][T16601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.481906][T16601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.493658][T16601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.505791][T16601] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.527389][T16601] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.537619][T16601] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.547903][T16601] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.602592][T12943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.621787][T12943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.622513][T16723] 9pnet_virtio: no channels available for device syz [ 651.642178][T12943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.656195][T12943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.365935][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 652.373109][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 652.380777][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 652.440121][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 652.447482][ T5843] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 652.455643][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 652.787748][T16745] virt_wifi0 speed is unknown, defaulting to 1000 [ 652.846156][ T5831] Bluetooth: hci2: command tx timeout [ 653.057852][T16745] chnl_net:caif_netlink_parms(): no params data found [ 653.518051][T16745] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.536342][T16745] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.546687][T16745] bridge_slave_0: entered allmulticast mode [ 653.553619][T16745] bridge_slave_0: entered promiscuous mode [ 653.563141][ T3456] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.575838][T16745] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.583849][T16745] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.595234][T16745] bridge_slave_1: entered allmulticast mode [ 653.608904][T16745] bridge_slave_1: entered promiscuous mode [ 653.622972][T16776] 9pnet_virtio: no channels available for device syz [ 653.659624][T16745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.683771][T16745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.751431][T16745] team0: Port device team_slave_0 added [ 653.764317][ T3456] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.779003][T16745] team0: Port device team_slave_1 added [ 653.797747][T16745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.804709][T16745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.808372][T16783] block nbd3: Device being setup by another task [ 654.188514][T16745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.199979][T16745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.206980][T16745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.234117][T16745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.259986][ T3456] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.280945][T16786] netlink: 'syz.4.2896': attribute type 8 has an invalid length. [ 654.295455][T16745] hsr_slave_0: entered promiscuous mode [ 654.312590][T16745] hsr_slave_1: entered promiscuous mode [ 654.318394][T16745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 654.326134][T16745] Cannot create hsr debugfs directory [ 654.334871][ T5831] block nbd3: Receive control failed (result -32) [ 654.335504][T16792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2895'. [ 654.341419][ T5831] block nbd3: Receive control failed (result -32) [ 654.364941][ T3456] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.399071][T16778] block nbd3: shutting down sockets [ 654.626648][ T3456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.642756][ T5831] Bluetooth: hci5: command tx timeout [ 654.655367][ T3456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.745257][ T3456] bond0 (unregistering): Released all slaves [ 654.761558][T16813] netlink: 'syz.4.2906': attribute type 8 has an invalid length. [ 654.905019][ T29] audit: type=1400 audit(1737636987.860:2847): avc: denied { write } for pid=16805 comm="syz.5.2902" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 654.934504][T16829] fuse: Bad value for 'fd' [ 654.966294][ T29] audit: type=1400 audit(1737636987.925:2848): avc: denied { attach_queue } for pid=16835 comm="syz.0.2911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 654.988858][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.070077][ T5831] Bluetooth: hci2: command tx timeout [ 655.629366][ T3456] hsr_slave_0: left promiscuous mode [ 655.643407][ T3456] hsr_slave_1: left promiscuous mode [ 655.660793][ T3456] batman_adv: batadv0: Removing interface: team0 [ 655.689568][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.722895][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.730336][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.841490][ T3456] veth1_macvtap: left promiscuous mode [ 655.865164][ T3456] veth0_macvtap: left promiscuous mode [ 655.889896][ T3456] veth1_vlan: left promiscuous mode [ 655.941853][ T3456] veth0_vlan: left promiscuous mode [ 656.357736][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 656.506847][ T3456] team0 (unregistering): Port device team_slave_0 removed [ 656.584483][T16745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 656.617373][T16863] pim6reg: entered allmulticast mode [ 656.630511][T16745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 656.644042][T16745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 656.666845][T16745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 656.825079][T16745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.026090][ T5831] Bluetooth: hci5: command tx timeout [ 657.142103][T16745] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.153502][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.160567][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.179395][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.186471][ T6598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.235254][T16745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 657.261651][ T29] audit: type=1400 audit(1737636990.068:2849): avc: denied { map } for pid=16885 comm="syz.0.2918" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 657.300579][ T5831] Bluetooth: hci2: command tx timeout [ 657.315465][T16893] netlink: 'syz.3.2920': attribute type 8 has an invalid length. [ 657.352105][ T29] audit: type=1400 audit(1737636990.068:2850): avc: denied { execute } for pid=16885 comm="syz.0.2918" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 657.376625][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.523844][T16745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.558614][T16745] veth0_vlan: entered promiscuous mode [ 657.653287][T16745] veth1_vlan: entered promiscuous mode [ 657.661919][T16918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2922'. [ 657.671424][ T29] audit: type=1400 audit(1737636990.451:2851): avc: denied { bind } for pid=16907 comm="syz.5.2922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 657.702932][T16918] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2922'. [ 657.776812][T16745] veth0_macvtap: entered promiscuous mode [ 657.808713][T16745] veth1_macvtap: entered promiscuous mode [ 657.824183][ T29] audit: type=1400 audit(1737636990.601:2852): avc: denied { ioctl } for pid=16907 comm="syz.5.2922" path="socket:[61452]" dev="sockfs" ino=61452 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 657.895419][T16745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.908286][T16745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.918559][T16745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.929239][T16745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.939273][T16745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.950006][T16745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.960319][T16745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.971165][T16745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.982205][T16745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.993252][T16745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.004885][T16745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.016550][T16745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.027470][T16745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.037489][T16745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.058276][T16745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.068421][T16745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.079289][T16745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.089291][T16745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.099891][T16745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.110400][T16745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.121765][T16745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.132386][T16745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.158629][T16745] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.175336][T16745] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.190904][T16745] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.199980][T16745] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.240469][T12934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.254569][T12934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.270818][T12934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.279594][T12934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.435048][T16930] rdma_rxe: rxe_newlink: failed to add sit0 [ 659.225620][ T5831] Bluetooth: hci5: command tx timeout [ 659.275856][T16940] netlink: 'syz.5.2933': attribute type 8 has an invalid length. [ 659.366478][T16952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2935'. [ 659.375648][ T5899] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 659.591823][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 659.602241][ T5899] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 659.614801][ T5899] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 659.629923][ T5899] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 659.653319][ T5899] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.993526][ T5899] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 660.003223][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.348618][ T5899] usb 1-1: GET_CAPABILITIES returned 0 [ 660.371379][ T5899] usbtmc 1-1:16.0: can't read capabilities [ 660.425243][ T29] audit: type=1400 audit(1737636993.028:2853): avc: denied { unmount } for pid=15689 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 660.605975][ T5899] usb 1-1: USB disconnect, device number 64 [ 660.630897][T16991] block nbd5: shutting down sockets [ 660.838765][T17018] overlayfs: failed to resolve './file1': -2 [ 661.131007][T17047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2953'. [ 661.415318][ T5831] Bluetooth: hci5: command tx timeout [ 661.909210][ T29] audit: type=1400 audit(1737636994.422:2854): avc: denied { write } for pid=17064 comm="syz.5.2957" path="socket:[61305]" dev="sockfs" ino=61305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 661.985937][ T29] audit: type=1400 audit(1737636994.459:2855): avc: denied { map } for pid=17052 comm="syz.1.2954" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 662.827172][ T29] audit: type=1400 audit(1737636995.282:2856): avc: denied { read write } for pid=17064 comm="syz.5.2957" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 662.865825][ T29] audit: type=1400 audit(1737636995.310:2857): avc: denied { open } for pid=17064 comm="syz.5.2957" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 662.904329][ T29] audit: type=1400 audit(1737636995.348:2858): avc: denied { ioctl } for pid=17064 comm="syz.5.2957" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 663.285805][T17103] binder: BINDER_SET_CONTEXT_MGR already set [ 663.294180][T17103] binder: 17102:17103 ioctl 4018620d 20000040 returned -16 [ 663.465647][T17118] pimreg: entered allmulticast mode [ 663.564212][T17123] pim6reg: entered allmulticast mode [ 664.463286][T17137] overlayfs: failed to resolve './file1': -2 [ 664.577680][T17141] veth0_to_team: entered promiscuous mode [ 664.591641][T17141] veth0_to_team: entered allmulticast mode [ 665.567889][ T5838] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 665.749580][ T5838] usb 2-1: Using ep0 maxpacket: 8 [ 665.756556][ T5838] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 665.784898][ T5838] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 665.795755][ T5838] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 665.814102][ T5838] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.829942][ T5838] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 665.839836][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.084186][T17167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.131227][T17167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.131614][ T29] audit: type=1400 audit(1737636998.341:2859): avc: denied { read } for pid=17193 comm="syz.4.3004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 666.368848][ T5838] usb 2-1: GET_CAPABILITIES returned 0 [ 666.386086][ T5838] usbtmc 2-1:16.0: can't read capabilities [ 666.429911][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.511680][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.586195][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.596589][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 666.605664][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 666.614691][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 666.623708][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 666.634737][ T8] usb 2-1: USB disconnect, device number 66 [ 666.698331][T17216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3014'. [ 666.714328][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.746604][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 667.049386][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 667.056928][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 667.065886][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 667.073202][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 667.080455][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 667.104048][T17217] virt_wifi0 speed is unknown, defaulting to 1000 [ 667.177294][ T11] bridge_slave_1: left allmulticast mode [ 667.192814][ T11] bridge_slave_1: left promiscuous mode [ 667.198480][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.208869][ T11] bridge_slave_0: left allmulticast mode [ 667.214956][ T11] bridge_slave_0: left promiscuous mode [ 667.220653][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.274379][T17238] overlayfs: failed to resolve './file1': -2 [ 667.284506][T17240] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3021'. [ 667.336924][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.346526][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.355671][ T11] bond0 (unregistering): Released all slaves [ 667.428705][T17217] chnl_net:caif_netlink_parms(): no params data found [ 667.610392][ T5899] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 667.649896][T17217] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.667926][T17217] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.678020][T17217] bridge_slave_0: entered allmulticast mode [ 667.823511][T17217] bridge_slave_0: entered promiscuous mode [ 667.831202][T17217] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.839335][T17217] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.847018][T17217] bridge_slave_1: entered allmulticast mode [ 667.854378][T17217] bridge_slave_1: entered promiscuous mode [ 667.875425][T17217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.887233][T17217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.899539][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.911856][ T5899] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 667.923368][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 667.947818][T17217] team0: Port device team_slave_0 added [ 667.954779][ T5899] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 667.964349][ T5899] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 667.974225][ T5899] usb 5-1: Manufacturer: syz [ 667.979798][T17217] team0: Port device team_slave_1 added [ 667.986201][ T5899] usb 5-1: config 0 descriptor?? [ 667.993484][ T5899] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 668.015462][T17217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.022819][T17217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.049027][T17217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.060685][T17217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.068508][T17217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.094771][T17217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.110516][ T11] hsr_slave_0: left promiscuous mode [ 668.116515][ T11] hsr_slave_1: left promiscuous mode [ 668.122037][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.129674][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.137662][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.145198][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.153412][ T11] veth1_macvtap: left promiscuous mode [ 668.159485][ T11] veth0_macvtap: left promiscuous mode [ 668.165024][ T11] veth1_vlan: left promiscuous mode [ 668.170668][ T11] veth0_vlan: left promiscuous mode [ 668.199624][ T11] pim6reg (unregistering): left allmulticast mode [ 668.225236][ T5899] usb 5-1: USB disconnect, device number 68 [ 668.260066][ T11] team0 (unregistering): Port device team_slave_1 removed [ 668.269688][ T11] team0 (unregistering): Port device team_slave_0 removed [ 668.346101][T17217] hsr_slave_0: entered promiscuous mode [ 668.352763][T17217] hsr_slave_1: entered promiscuous mode [ 668.361094][T17217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 668.370557][T17217] Cannot create hsr debugfs directory [ 668.531249][T17217] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 668.571040][T17217] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 668.586885][T17217] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 668.630646][T17217] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 668.792029][T17217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.830798][T17217] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.864216][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.872095][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.952280][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.959360][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.267565][ T5831] Bluetooth: hci0: command tx timeout [ 669.636998][T17217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.653102][T17352] overlayfs: failed to resolve './file0': -2 [ 669.693351][T17356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3037'. [ 670.000173][T17217] veth0_vlan: entered promiscuous mode [ 670.178707][T17217] veth1_vlan: entered promiscuous mode [ 670.310049][T17217] veth0_macvtap: entered promiscuous mode [ 670.361219][T17217] veth1_macvtap: entered promiscuous mode [ 670.393856][T17217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.405619][T17217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.415672][T17217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.426398][T17217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.436432][T17217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.447306][T17217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.611991][T17217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.639077][T17217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.870330][T17217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.911719][T17217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.951644][T17217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.012895][T17217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.157248][T17217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.188743][T17217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.210281][T17217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.220484][T17217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.231863][T17217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.243580][T17217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.255021][T17217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.265147][T17217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.276443][T17217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.289778][T17217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.490982][ T5831] Bluetooth: hci0: command tx timeout [ 671.562782][T17217] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.607031][T17217] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.616088][T17217] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.648606][T17217] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.782317][ T6589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.796043][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.800881][ T6589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.811047][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.849530][T17426] 9pnet_virtio: no channels available for device syz [ 672.359894][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 672.380762][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 672.389071][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 672.397353][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 672.404845][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 672.412032][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 672.634618][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.661520][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.760746][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.844026][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.967391][T17466] chnl_net:caif_netlink_parms(): no params data found [ 672.992801][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.010450][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.099771][T17466] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.115760][T17466] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.123104][T17466] bridge_slave_0: entered allmulticast mode [ 673.129927][T17466] bridge_slave_0: entered promiscuous mode [ 673.140827][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.152556][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.176571][T17466] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.190686][T17466] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.197902][T17466] bridge_slave_1: entered allmulticast mode [ 673.206193][T17466] bridge_slave_1: entered promiscuous mode [ 673.291570][T17466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.342075][T17466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.385764][T17466] team0: Port device team_slave_0 added [ 673.420514][T17466] team0: Port device team_slave_1 added [ 673.453213][T17466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.471029][T17466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.496941][ C1] vkms_vblank_simulate: vblank timer overrun [ 673.503838][T17466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.514858][ T11] bridge_slave_1: left allmulticast mode [ 673.520564][ T11] bridge_slave_1: left promiscuous mode [ 673.526251][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.551240][T17466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.558353][T17466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.584215][ C1] vkms_vblank_simulate: vblank timer overrun [ 673.596825][T17466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.714100][ T5843] Bluetooth: hci0: command tx timeout [ 673.762875][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.771797][ T11] bond_slave_0: left promiscuous mode [ 673.778481][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.787543][ T11] bond_slave_1: left promiscuous mode [ 673.793794][ T11] bond0 (unregistering): Released all slaves [ 673.816423][T17466] hsr_slave_0: entered promiscuous mode [ 673.830625][T17466] hsr_slave_1: entered promiscuous mode [ 673.839879][T17466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 673.851164][T17466] Cannot create hsr debugfs directory [ 674.530035][T17577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3075'. [ 674.654924][ T5843] Bluetooth: hci1: command tx timeout [ 675.937736][ T5843] Bluetooth: hci0: command tx timeout [ 676.130445][T17593] 9pnet_virtio: no channels available for device syz [ 676.285765][T17595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3081'. [ 676.878707][ T5843] Bluetooth: hci1: command tx timeout [ 679.102560][ T5843] Bluetooth: hci1: command tx timeout [ 680.213979][ T5843] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 680.222627][ T5843] Bluetooth: hci2: Injecting HCI hardware error event [ 680.230175][ T5843] Bluetooth: hci2: hardware error 0x00 [ 681.325752][ T5831] Bluetooth: hci1: command tx timeout [ 682.437612][ T5843] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 690.097949][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 690.105289][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 690.112454][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 690.120430][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 690.127772][ T5831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 690.135179][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 691.598206][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 691.606041][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 691.613337][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 691.622062][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 691.629484][ T5843] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 691.636927][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 692.358514][ T5843] Bluetooth: hci3: command tx timeout [ 692.666972][ T5831] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 692.674265][ T5831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 692.681727][ T5831] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 692.688910][ T5831] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 692.688948][ T5833] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 692.697241][ T5831] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 692.705379][ T5833] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 692.711530][ T5831] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 692.718367][ T5833] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 692.726762][ T5831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 692.732242][ T5833] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 692.745997][ T5833] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 693.129470][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 693.135776][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.823141][ T5833] Bluetooth: hci6: command tx timeout [ 694.582241][ T5833] Bluetooth: hci3: command tx timeout [ 694.924242][ T5833] Bluetooth: hci7: command tx timeout [ 694.924283][ T54] Bluetooth: hci8: command tx timeout [ 696.036059][ T54] Bluetooth: hci6: command tx timeout [ 696.805794][ T54] Bluetooth: hci3: command tx timeout [ 697.147864][ T54] Bluetooth: hci7: command tx timeout [ 697.158566][ T54] Bluetooth: hci8: command tx timeout [ 698.259793][ T54] Bluetooth: hci6: command tx timeout [ 699.029477][ T54] Bluetooth: hci3: command tx timeout [ 699.371609][ T54] Bluetooth: hci8: command tx timeout [ 699.371614][ T5833] Bluetooth: hci7: command tx timeout [ 700.483402][ T5833] Bluetooth: hci6: command tx timeout [ 701.595141][ T5833] Bluetooth: hci7: command tx timeout [ 701.605842][ T5833] Bluetooth: hci8: command tx timeout [ 736.441412][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 736.448827][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 736.455972][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 736.463612][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 736.470931][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 736.478027][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 738.627453][ T54] Bluetooth: hci9: command tx timeout [ 740.851164][ T54] Bluetooth: hci9: command tx timeout [ 743.074884][ T54] Bluetooth: hci9: command tx timeout [ 745.298404][ T54] Bluetooth: hci9: command tx timeout [ 754.360419][ T5833] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 754.369302][ T5833] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 754.376631][ T5833] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 754.384139][ T5833] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 754.391723][ T5833] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 754.399211][ T5833] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 755.862370][ T5833] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 755.870044][ T5833] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 755.877432][ T5833] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 755.885231][ T5833] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 755.892601][ T5833] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 755.900105][ T5833] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 756.598575][ T5833] Bluetooth: hci10: command tx timeout [ 756.922187][ T54] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 756.929527][ T54] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 756.938153][ T54] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 756.939191][ T5843] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 756.945522][ T54] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 756.960964][ T54] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 756.961270][ T5843] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 756.968464][ T54] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 756.976576][ T5843] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 756.983396][ T54] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 756.989889][ T5843] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 756.996841][ T54] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 758.127177][ T54] Bluetooth: hci11: command tx timeout [ 758.811369][ T54] Bluetooth: hci10: command tx timeout [ 758.817126][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.825212][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 759.153452][ T5831] Bluetooth: hci13: command tx timeout [ 759.153449][ T54] Bluetooth: hci12: command tx timeout [ 760.350972][ T5831] Bluetooth: hci11: command tx timeout [ 761.034978][ T5831] Bluetooth: hci10: command tx timeout [ 761.377102][ T5831] Bluetooth: hci13: command tx timeout [ 761.377134][ T54] Bluetooth: hci12: command tx timeout [ 762.574444][ T54] Bluetooth: hci11: command tx timeout [ 763.258711][ T54] Bluetooth: hci10: command tx timeout [ 763.601055][ T5831] Bluetooth: hci13: command tx timeout [ 763.601131][ T54] Bluetooth: hci12: command tx timeout [ 764.798115][ T54] Bluetooth: hci11: command tx timeout [ 765.824419][ T54] Bluetooth: hci12: command tx timeout [ 765.825836][ T5831] Bluetooth: hci13: command tx timeout [ 788.402913][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 799.350137][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 800.721729][ T54] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 800.729030][ T54] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 800.736608][ T54] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 800.744221][ T54] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 800.751799][ T54] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 800.759030][ T54] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 802.942189][ T5831] Bluetooth: hci14: command tx timeout [ 804.823758][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 805.165828][ T54] Bluetooth: hci14: command tx timeout [ 807.389760][ T54] Bluetooth: hci14: command tx timeout [ 809.623819][ T54] Bluetooth: hci14: command tx timeout [ 818.981843][ T5831] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 818.989249][ T5831] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 818.996532][ T5831] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 819.004120][ T5831] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 819.011537][ T5831] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 819.018754][ T5831] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 820.493772][ T54] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 820.501093][ T54] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 820.508355][ T54] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 820.515946][ T54] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 820.523486][ T54] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 820.530761][ T54] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 821.244547][ T54] Bluetooth: hci15: command tx timeout [ 821.245295][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 821.536314][ T5831] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 821.543620][ T5831] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 821.551542][ T5831] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 821.558918][ T5831] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 821.561393][ T5843] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 821.567048][ T5831] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 821.573663][ T5843] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 821.581763][ T5831] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 821.588767][ T5843] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 821.595237][ T5831] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 821.610156][ T5831] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 821.617463][ T5831] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 822.698451][ T5831] Bluetooth: hci16: command tx timeout [ 823.468177][ T5831] Bluetooth: hci15: command tx timeout [ 823.810249][ T5831] Bluetooth: hci18: command tx timeout [ 823.820932][ T5831] Bluetooth: hci17: command tx timeout [ 824.495685][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 824.502823][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 824.922091][ T5843] Bluetooth: hci16: command tx timeout [ 825.691822][ T5843] Bluetooth: hci15: command tx timeout [ 826.044605][ T5843] Bluetooth: hci17: command tx timeout [ 826.045235][T17611] Bluetooth: hci18: command tx timeout [ 826.728874][T17611] Bluetooth: hci8: command 0x0406 tx timeout [ 826.728912][T17651] Bluetooth: hci6: command 0x0406 tx timeout [ 826.734893][ T54] Bluetooth: hci7: command 0x0406 tx timeout [ 827.145754][ T5831] Bluetooth: hci16: command tx timeout [ 827.915494][ T5831] Bluetooth: hci15: command tx timeout [ 828.257529][ T5833] Bluetooth: hci18: command tx timeout [ 828.257962][ T5831] Bluetooth: hci17: command tx timeout [ 829.369396][ T5831] Bluetooth: hci16: command tx timeout [ 830.481180][ T5831] Bluetooth: hci18: command tx timeout [ 830.481420][ T5833] Bluetooth: hci17: command tx timeout [ 844.336192][ T30] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 844.343695][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 844.351731][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 844.360523][ T30] task:kworker/0:0 state:D stack:20608 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 844.370744][ T30] Workqueue: events disconnect_work [ 844.375952][ T30] Call Trace: [ 844.379268][ T30] [ 844.382187][ T30] __schedule+0x1142/0x5b60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 844.386666][ T30] ? rcu_is_watching+0x12/0xc0 [ 844.391568][ T30] ? __pfx___schedule+0x10/0x10 [ 844.396982][ T30] ? lock_release+0x4e2/0x6f0 [ 844.400328][ T29] audit: type=1400 audit(1737637165.113:2860): avc: denied { write } for pid=5812 comm="syz-executor" path="pipe:[4051]" dev="pipefs" ino=4051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 844.401867][ T30] ? schedule+0x298/0x350 [ 844.430043][ T30] ? __pfx_lock_release+0x10/0x10 [ 844.443861][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 844.459200][ T30] ? rcu_is_watching+0x12/0xc0 [ 844.464027][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 844.471976][ T30] schedule+0xe7/0x350 [ 844.476395][ T30] schedule_preempt_disabled+0x13/0x30 [ 844.481878][ T30] __mutex_lock+0x6bd/0xb10 [ 844.486563][ T30] ? disconnect_work+0xa0/0x2a0 [ 844.491419][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 844.496433][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 844.501668][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 844.507675][ T30] ? process_one_work+0x813/0x1ba0 [ 844.512795][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 844.518743][ T30] ? disconnect_work+0xa0/0x2a0 [ 844.523597][ T30] disconnect_work+0xa0/0x2a0 [ 844.528265][ T30] process_one_work+0x9c5/0x1ba0 [ 844.533274][ T30] ? __pfx_process_one_work+0x10/0x10 [ 844.539402][ T30] ? rcu_is_watching+0x12/0xc0 [ 844.544211][ T30] ? assign_work+0x1a0/0x250 [ 844.548808][ T30] worker_thread+0x6c8/0xf00 [ 844.553457][ T30] ? __pfx_worker_thread+0x10/0x10 [ 844.558590][ T30] kthread+0x3af/0x750 [ 844.562821][ T30] ? __pfx_kthread+0x10/0x10 [ 844.567411][ T30] ? lock_acquire+0x2f/0xb0 [ 844.571969][ T30] ? __pfx_kthread+0x10/0x10 [ 844.576569][ T30] ret_from_fork+0x45/0x80 [ 844.580967][ T30] ? __pfx_kthread+0x10/0x10 [ 844.585579][ T30] ret_from_fork_asm+0x1a/0x30 [ 844.590354][ T30] [ 844.593466][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 844.601104][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 844.608427][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 844.617117][ T30] task:kworker/u8:0 state:D stack:23840 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 844.627304][ T30] Workqueue: netns cleanup_net [ 844.632069][ T30] Call Trace: [ 844.635328][ T30] [ 844.638308][ T30] __schedule+0x1142/0x5b60 [ 844.642832][ T30] ? __switch_to+0x749/0x1190 [ 844.648089][ T30] ? rcu_watching_snap_stopped_since+0x100/0x110 [ 844.654473][ T30] ? __pfx___schedule+0x10/0x10 [ 844.659358][ T30] ? lock_release+0x4e2/0x6f0 [ 844.664036][ T30] ? schedule+0x298/0x350 [ 844.668395][ T30] ? __pfx_lock_release+0x10/0x10 [ 844.673424][ T30] ? __mutex_trylock_common+0x78/0x250 [ 844.679013][ T30] ? schedule+0x1fd/0x350 [ 844.683359][ T30] ? lock_acquire+0x2f/0xb0 [ 844.687853][ T30] ? schedule+0x1fd/0x350 [ 844.692197][ T30] schedule+0xe7/0x350 [ 844.696259][ T30] schedule_preempt_disabled+0x13/0x30 [ 844.701754][ T30] __mutex_lock+0x6bd/0xb10 [ 844.706266][ T30] ? unregister_netdevice_many_notify+0x1a51/0x21a0 [ 844.712873][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 844.717907][ T30] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 844.723224][ T30] ? __pfx___might_resched+0x10/0x10 [ 844.728531][ T30] ? unregister_netdevice_many_notify+0x959/0x21a0 [ 844.735053][ T30] ? unregister_netdevice_many_notify+0x1a51/0x21a0 [ 844.741666][ T30] unregister_netdevice_many_notify+0x1a51/0x21a0 [ 844.748180][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 844.754972][ T30] ? rcu_is_watching+0x12/0xc0 [ 844.760142][ T30] ? lock_release+0x4e2/0x6f0 [ 844.764924][ T30] ? kernfs_remove_by_name_ns+0xc4/0x130 [ 844.770567][ T30] ? __pfx_lock_release+0x10/0x10 [ 844.775725][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 844.781800][ T30] unregister_netdevice_queue+0x307/0x3f0 [ 844.787546][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 844.793802][ T30] _cfg80211_unregister_wdev+0x64b/0x830 [ 844.799556][ T30] ieee80211_remove_interfaces+0x34f/0x720 [ 844.805375][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 844.811810][ T30] ieee80211_unregister_hw+0x55/0x3a0 [ 844.817256][ T30] hwsim_exit_net+0x3ad/0x7d0 [ 844.821947][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 844.827164][ T30] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 844.832635][ T30] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 844.838363][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 844.843578][ T30] ops_exit_list+0xb0/0x180 [ 844.848102][ T30] cleanup_net+0x5c6/0xbf0 [ 844.852557][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 844.857497][ T30] ? lock_acquire+0x2f/0xb0 [ 844.862363][ T30] ? process_one_work+0x921/0x1ba0 [ 844.867899][ T30] process_one_work+0x9c5/0x1ba0 [ 844.872893][ T30] ? __pfx_process_one_work+0x10/0x10 [ 844.878262][ T30] ? rcu_is_watching+0x12/0xc0 [ 844.883103][ T30] ? assign_work+0x1a0/0x250 [ 844.887694][ T30] worker_thread+0x6c8/0xf00 [ 844.892325][ T30] ? __pfx_worker_thread+0x10/0x10 [ 844.897442][ T30] kthread+0x3af/0x750 [ 844.901495][ T30] ? __pfx_kthread+0x10/0x10 [ 844.906131][ T30] ? lock_acquire+0x2f/0xb0 [ 844.910652][ T30] ? __pfx_kthread+0x10/0x10 [ 844.915360][ T30] ret_from_fork+0x45/0x80 [ 844.919783][ T30] ? __pfx_kthread+0x10/0x10 [ 844.924403][ T30] ret_from_fork_asm+0x1a/0x30 [ 844.929167][ T30] [ 844.932247][ T30] INFO: task kworker/u8:8:3498 blocked for more than 143 seconds. [ 844.940203][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 844.947526][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 844.956335][ T30] task:kworker/u8:8 state:D stack:23704 pid:3498 tgid:3498 ppid:2 flags:0x00004000 [ 844.967874][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 844.973874][ T30] Call Trace: [ 844.977863][ T30] [ 844.980799][ T30] __schedule+0x1142/0x5b60 [ 844.985281][ T30] ? __pfx_bpf_trace_run4+0x10/0x10 [ 844.990507][ T30] ? __pfx___schedule+0x10/0x10 [ 844.995353][ T30] ? lock_release+0x4e2/0x6f0 [ 845.000101][ T30] ? schedule+0x298/0x350 [ 845.004445][ T30] ? __pfx_lock_release+0x10/0x10 [ 845.009483][ T30] ? __mutex_trylock_common+0x78/0x250 [ 845.015110][ T30] ? schedule+0x1fd/0x350 [ 845.019463][ T30] ? lock_acquire+0x2f/0xb0 [ 845.024163][ T30] ? schedule+0x1fd/0x350 [ 845.028588][ T30] schedule+0xe7/0x350 [ 845.032852][ T30] schedule_preempt_disabled+0x13/0x30 [ 845.038405][ T30] __mutex_lock+0x6bd/0xb10 [ 845.042969][ T30] ? __schedule+0x114a/0x5b60 [ 845.047640][ T30] ? addrconf_dad_work+0x121/0x14e0 [ 845.052863][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 845.057886][ T30] ? __pfx___schedule+0x10/0x10 [ 845.062718][ T30] ? addrconf_dad_work+0x121/0x14e0 [ 845.067961][ T30] ? rtnl_lock+0x9/0x20 [ 845.072124][ T30] addrconf_dad_work+0x121/0x14e0 [ 845.077162][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 845.082626][ T30] ? process_one_work+0x921/0x1ba0 [ 845.088373][ T30] ? lock_acquire+0x2f/0xb0 [ 845.092910][ T30] ? process_one_work+0x921/0x1ba0 [ 845.098068][ T30] process_one_work+0x9c5/0x1ba0 [ 845.103007][ T30] ? __pfx_process_one_work+0x10/0x10 [ 845.108470][ T30] ? rcu_is_watching+0x12/0xc0 [ 845.113232][ T30] ? assign_work+0x1a0/0x250 [ 845.117852][ T30] worker_thread+0x6c8/0xf00 [ 845.122451][ T30] ? __pfx_worker_thread+0x10/0x10 [ 845.127583][ T30] kthread+0x3af/0x750 [ 845.131663][ T30] ? __pfx_kthread+0x10/0x10 [ 845.136230][ T30] ? lock_acquire+0x2f/0xb0 [ 845.140762][ T30] ? __pfx_kthread+0x10/0x10 [ 845.145455][ T30] ret_from_fork+0x45/0x80 [ 845.149984][ T30] ? __pfx_kthread+0x10/0x10 [ 845.154569][ T30] ret_from_fork_asm+0x1a/0x30 [ 845.159349][ T30] [ 845.162369][ T30] INFO: task dhcpcd:5488 blocked for more than 144 seconds. [ 845.169639][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 845.177712][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 845.186593][ T30] task:dhcpcd state:D stack:23376 pid:5488 tgid:5488 ppid:5487 flags:0x00000002 [ 845.197321][ T30] Call Trace: [ 845.200613][ T30] [ 845.203740][ T30] __schedule+0x1142/0x5b60 [ 845.208247][ T30] ? lock_release+0x4e2/0x6f0 [ 845.212959][ T30] ? __pfx___schedule+0x10/0x10 [ 845.217896][ T30] ? lock_release+0x4e2/0x6f0 [ 845.222583][ T30] ? schedule+0x298/0x350 [ 845.226940][ T30] ? __pfx_lock_release+0x10/0x10 [ 845.231959][ T30] ? __mutex_trylock_common+0x78/0x250 [ 845.237436][ T30] ? schedule+0x1fd/0x350 [ 845.241752][ T30] ? lock_acquire+0x2f/0xb0 [ 845.246292][ T30] ? schedule+0x1fd/0x350 [ 845.250627][ T30] schedule+0xe7/0x350 [ 845.254685][ T30] schedule_preempt_disabled+0x13/0x30 [ 845.260186][ T30] __mutex_lock+0x6bd/0xb10 [ 845.264691][ T30] ? cred_has_capability.isra.0+0x192/0x2f0 [ 845.270701][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 845.277338][ T30] ? devinet_ioctl+0x26e/0x1f50 [ 845.282255][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 845.287270][ T30] ? lock_release+0x4e2/0x6f0 [ 845.291953][ T30] ? __pfx_lock_release+0x10/0x10 [ 845.296997][ T30] ? bpf_lsm_capable+0x9/0x10 [ 845.301720][ T30] ? security_capable+0x7e/0x260 [ 845.307152][ T30] ? devinet_ioctl+0x26e/0x1f50 [ 845.312059][ T30] devinet_ioctl+0x26e/0x1f50 [ 845.316732][ T30] ? __might_fault+0xe3/0x190 [ 845.321430][ T30] ? __might_fault+0xe3/0x190 [ 845.326096][ T30] ? __pfx_devinet_ioctl+0x10/0x10 [ 845.331232][ T30] ? _copy_from_user+0x59/0xd0 [ 845.336005][ T30] inet_ioctl+0x3aa/0x3f0 [ 845.340327][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 845.345245][ T30] ? tomoyo_path_number_perm+0x190/0x590 [ 845.350918][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 845.356863][ T30] sock_do_ioctl+0x116/0x280 [ 845.361459][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 845.366608][ T30] ? percpu_counter_add_batch+0xb5/0x1e0 [ 845.372234][ T30] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 845.378757][ T30] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 845.385399][ T30] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 845.392250][ T30] sock_ioctl+0x228/0x6c0 [ 845.396607][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 845.401461][ T30] ? selinux_file_ioctl+0x180/0x270 [ 845.407292][ T30] ? selinux_file_ioctl+0xb4/0x270 [ 845.412963][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 845.417885][ T30] __x64_sys_ioctl+0x190/0x200 [ 845.422651][ T30] do_syscall_64+0xcd/0x250 [ 845.427186][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.433093][ T30] RIP: 0033:0x7f38ec499d49 [ 845.437526][ T30] RSP: 002b:00007ffe2f928088 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 845.445945][ T30] RAX: ffffffffffffffda RBX: 00007f38ec3cb6c0 RCX: 00007f38ec499d49 [ 845.454013][ T30] RDX: 00007ffe2f938278 RSI: 0000000000008914 RDI: 000000000000000c [ 845.462005][ T30] RBP: 00007ffe2f948438 R08: 00007ffe2f938238 R09: 00007ffe2f9381e8 [ 845.469999][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.477985][ T30] R13: 00007ffe2f938278 R14: 0000000000000028 R15: 0000000000008914 [ 845.486000][ T30] [ 845.489067][ T30] INFO: task kworker/u8:6:12943 blocked for more than 144 seconds. [ 845.496998][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 845.504347][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 845.513029][ T30] task:kworker/u8:6 state:D stack:24672 pid:12943 tgid:12943 ppid:2 flags:0x00004000 [ 845.523638][ T30] Workqueue: events_unbound linkwatch_event [ 845.529557][ T30] Call Trace: [ 845.532825][ T30] [ 845.536156][ T30] __schedule+0x1142/0x5b60 [ 845.540676][ T30] ? lock_release+0x3f0/0x6f0 [ 845.545722][ T30] ? __pfx_lock_release+0x10/0x10 [ 845.550751][ T30] ? __pfx___schedule+0x10/0x10 [ 845.555646][ T30] ? lock_release+0x4e2/0x6f0 [ 845.560335][ T30] ? schedule+0x298/0x350 [ 845.564640][ T30] ? __pfx_lock_release+0x10/0x10 [ 845.569668][ T30] ? __mutex_trylock_common+0x78/0x250 [ 845.575120][ T30] ? schedule+0x1fd/0x350 [ 845.579461][ T30] ? lock_acquire+0x2f/0xb0 [ 845.583957][ T30] ? schedule+0x1fd/0x350 [ 845.588312][ T30] schedule+0xe7/0x350 [ 845.592378][ T30] schedule_preempt_disabled+0x13/0x30 [ 845.597850][ T30] __mutex_lock+0x6bd/0xb10 [ 845.602345][ T30] ? linkwatch_event+0x51/0xc0 [ 845.607086][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 845.612120][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 845.617311][ T30] ? lock_release+0x4e2/0x6f0 [ 845.622128][ T30] ? process_one_work+0x813/0x1ba0 [ 845.627246][ T30] ? rcu_is_watching+0x12/0xc0 [ 845.632686][ T30] ? linkwatch_event+0x51/0xc0 [ 845.637484][ T30] linkwatch_event+0x51/0xc0 [ 845.642124][ T30] ? __pfx_linkwatch_event+0x10/0x10 [ 845.647428][ T30] ? rcu_is_watching+0x12/0xc0 [ 845.652213][ T30] process_one_work+0x9c5/0x1ba0 [ 845.657149][ T30] ? __pfx_rds_connect_worker+0x10/0x10 [ 845.662718][ T30] ? __pfx_process_one_work+0x10/0x10 [ 845.668105][ T30] ? rcu_is_watching+0x12/0xc0 [ 845.672883][ T30] ? assign_work+0x1a0/0x250 [ 845.677468][ T30] worker_thread+0x6c8/0xf00 [ 845.682040][ T30] ? __kthread_parkme+0x148/0x220 [ 845.687123][ T30] ? __pfx_worker_thread+0x10/0x10 [ 845.692230][ T30] kthread+0x3af/0x750 [ 845.696319][ T30] ? __pfx_kthread+0x10/0x10 [ 845.700911][ T30] ? lock_acquire+0x2f/0xb0 [ 845.705514][ T30] ? rcu_is_watching+0x12/0xc0 [ 845.710333][ T30] ? __pfx_kthread+0x10/0x10 [ 845.714960][ T30] ret_from_fork+0x45/0x80 [ 845.719418][ T30] ? __pfx_kthread+0x10/0x10 [ 845.724012][ T30] ret_from_fork_asm+0x1a/0x30 [ 845.728826][ T30] [ 845.731905][ T30] INFO: task syz-executor:17466 blocked for more than 144 seconds. [ 845.739969][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 845.747769][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 845.756467][ T30] task:syz-executor state:D stack:24904 pid:17466 tgid:17466 ppid:1 flags:0x00004004 [ 845.766663][ T30] Call Trace: [ 845.769965][ T30] [ 845.772891][ T30] __schedule+0x1142/0x5b60 [ 845.777392][ T30] ? rcu_is_watching+0x12/0xc0 [ 845.782197][ T30] ? __pfx___schedule+0x10/0x10 [ 845.787051][ T30] ? lock_release+0x4e2/0x6f0 [ 845.791776][ T30] ? schedule+0x298/0x350 [ 845.796125][ T30] ? __pfx_lock_release+0x10/0x10 [ 845.801182][ T30] ? __mutex_trylock_common+0x78/0x250 [ 845.806632][ T30] ? schedule+0x1fd/0x350 [ 845.810945][ T30] ? lock_acquire+0x2f/0xb0 [ 845.815490][ T30] ? schedule+0x1fd/0x350 [ 845.819823][ T30] schedule+0xe7/0x350 [ 845.823905][ T30] schedule_preempt_disabled+0x13/0x30 [ 845.829351][ T30] __mutex_lock+0x6bd/0xb10 [ 845.833877][ T30] ? rtnl_newlink+0x5d9/0x1d60 [ 845.838650][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 845.843734][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 845.849470][ T30] ? rtnl_link_ops_get+0x17b/0x2c0 [ 845.855385][ T30] ? cap_capable+0x1cf/0x240 [ 845.859999][ T30] ? ns_capable+0xd7/0x110 [ 845.864768][ T30] ? rtnl_newlink+0x5d9/0x1d60 [ 845.869576][ T30] rtnl_newlink+0x5d9/0x1d60 [ 845.874167][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 845.879247][ T30] ? avc_has_perm_noaudit+0x143/0x3a0 [ 845.884636][ T30] ? cred_has_capability.isra.0+0x192/0x2f0 [ 845.890569][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 845.896852][ T30] ? rcu_is_watching+0x12/0xc0 [ 845.901633][ T30] ? lock_release+0x4e2/0x6f0 [ 845.906307][ T30] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 845.911464][ T30] ? __pfx_lock_release+0x10/0x10 [ 845.916598][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 845.921863][ T30] ? bpf_lsm_capable+0x9/0x10 [ 845.926641][ T30] ? security_capable+0x7e/0x260 [ 845.931629][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 845.936829][ T30] ? lock_acquire+0x2f/0xb0 [ 845.941362][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 845.946468][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 845.951513][ T30] rtnetlink_rcv_msg+0x95b/0xea0 [ 845.956447][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 845.962503][ T30] ? __pfx_avc_has_perm+0x10/0x10 [ 845.967543][ T30] netlink_rcv_skb+0x16b/0x440 [ 845.972501][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 845.977994][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 845.983615][ T30] ? lock_release+0x4e2/0x6f0 [ 845.988548][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 845.993888][ T30] netlink_unicast+0x53c/0x7f0 [ 845.998662][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 846.003986][ T30] netlink_sendmsg+0x8b8/0xd70 [ 846.008759][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 846.014043][ T30] __sys_sendto+0x488/0x4f0 [ 846.018572][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 846.023606][ T30] ? xfd_validate_state+0x5d/0x180 [ 846.028741][ T30] ? rcu_is_watching+0x12/0xc0 [ 846.033545][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 846.038381][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 846.044365][ T30] do_syscall_64+0xcd/0x250 [ 846.049064][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.055071][ T30] RIP: 0033:0x7f498118ebbc [ 846.059495][ T30] RSP: 002b:00007ffd867db900 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 846.067908][ T30] RAX: ffffffffffffffda RBX: 00007f4981ed4620 RCX: 00007f498118ebbc [ 846.076652][ T30] RDX: 000000000000005c RSI: 00007f4981ed4670 RDI: 0000000000000003 [ 846.084686][ T30] RBP: 0000000000000000 R08: 00007ffd867db954 R09: 000000000000000c [ 846.092770][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 846.100788][ T30] R13: 0000000000000000 R14: 00007f4981ed4670 R15: 0000000000000000 [ 846.108976][ T30] [ 846.112029][ T30] INFO: task syz.1.3073:17563 blocked for more than 145 seconds. [ 846.119735][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 846.127064][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 846.135819][ T30] task:syz.1.3073 state:D stack:27336 pid:17563 tgid:17556 ppid:16745 flags:0x00004004 [ 846.146011][ T30] Call Trace: [ 846.149277][ T30] [ 846.152184][ T30] __schedule+0x1142/0x5b60 [ 846.157663][ T30] ? rcu_is_watching+0x12/0xc0 [ 846.162422][ T30] ? __pfx___schedule+0x10/0x10 [ 846.167308][ T30] ? lock_release+0x4e2/0x6f0 [ 846.171983][ T30] ? schedule+0x298/0x350 [ 846.176325][ T30] ? __pfx_lock_release+0x10/0x10 [ 846.182007][ T30] ? __mutex_trylock_common+0x78/0x250 [ 846.187543][ T30] ? schedule+0x1fd/0x350 [ 846.191871][ T30] ? lock_acquire+0x2f/0xb0 [ 846.196390][ T30] ? schedule+0x1fd/0x350 [ 846.200711][ T30] schedule+0xe7/0x350 [ 846.204757][ T30] schedule_preempt_disabled+0x13/0x30 [ 846.210329][ T30] __mutex_lock+0x6bd/0xb10 [ 846.214842][ T30] ? rtnl_newlink+0x5d9/0x1d60 [ 846.219719][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 846.224904][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 846.230703][ T30] ? cap_capable+0x1cf/0x240 [ 846.235301][ T30] ? ns_capable+0xd7/0x110 [ 846.239740][ T30] ? rtnl_newlink+0x5d9/0x1d60 [ 846.244517][ T30] rtnl_newlink+0x5d9/0x1d60 [ 846.249144][ T30] ? rcu_is_watching+0x12/0xc0 [ 846.253968][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 846.259001][ T30] ? __rcu_read_unlock+0x2b4/0x580 [ 846.264196][ T30] ? avc_has_perm_noaudit+0x143/0x3a0 [ 846.269574][ T30] ? cred_has_capability.isra.0+0x192/0x2f0 [ 846.275606][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 846.281904][ T30] ? rcu_is_watching+0x12/0xc0 [ 846.286664][ T30] ? rcu_is_watching+0x12/0xc0 [ 846.291871][ T30] ? lock_release+0x4e2/0x6f0 [ 846.296616][ T30] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 846.301726][ T30] ? __pfx_lock_release+0x10/0x10 [ 846.306848][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 846.312188][ T30] ? bpf_lsm_capable+0x9/0x10 [ 846.316991][ T30] ? security_capable+0x7e/0x260 [ 846.321923][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 846.327146][ T30] ? lock_acquire+0x2f/0xb0 [ 846.331651][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 846.336806][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 846.341847][ T30] rtnetlink_rcv_msg+0x95b/0xea0 [ 846.346811][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 846.352276][ T30] ? rcu_is_watching+0x12/0xc0 [ 846.357074][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 846.363055][ T30] netlink_rcv_skb+0x16b/0x440 [ 846.367842][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 846.373306][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 846.378629][ T30] ? rcu_is_watching+0x12/0xc0 [ 846.383387][ T30] netlink_unicast+0x53c/0x7f0 [ 846.388141][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 846.393727][ T30] ? security_netlink_send+0x35/0x210 [ 846.399838][ T30] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 846.406055][ T30] netlink_sendmsg+0x8b8/0xd70 [ 846.410941][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 846.416233][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 846.421067][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 846.426661][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 846.431989][ T30] ? try_to_wake_up+0x953/0x1490 [ 846.437247][ T30] ___sys_sendmsg+0x135/0x1e0 [ 846.441928][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 846.447252][ T30] ? __pfx_lock_release+0x10/0x10 [ 846.452281][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 846.457539][ T30] ? __fget_files+0x206/0x3a0 [ 846.462238][ T30] __sys_sendmsg+0x16e/0x220 [ 846.466872][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 846.471980][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 846.477219][ T30] ? rcu_is_watching+0x12/0xc0 [ 846.481974][ T30] ? rcu_is_watching+0x12/0xc0 [ 846.486807][ T30] do_syscall_64+0xcd/0x250 [ 846.491308][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.497257][ T30] RIP: 0033:0x7f4118d8cd29 [ 846.501669][ T30] RSP: 002b:00007f4119aff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 846.510258][ T30] RAX: ffffffffffffffda RBX: 00007f4118fa6160 RCX: 00007f4118d8cd29 [ 846.518272][ T30] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000008 [ 846.526236][ T30] RBP: 00007f4118e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 846.534264][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.542255][ T30] R13: 0000000000000000 R14: 00007f4118fa6160 R15: 00007ffd17dc9888 [ 846.550360][ T30] [ 846.553385][ T30] INFO: task syz.6.3075:17577 blocked for more than 145 seconds. [ 846.562065][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 846.569351][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 846.578079][ T30] task:syz.6.3075 state:D stack:27128 pid:17577 tgid:17576 ppid:17217 flags:0x00004004 [ 846.588273][ T30] Call Trace: [ 846.591532][ T30] [ 846.594488][ T30] __schedule+0x1142/0x5b60 [ 846.598992][ T30] ? console_force_preferred_locked+0x2d0/0x2d0 [ 846.605260][ T30] ? __pfx___schedule+0x10/0x10 [ 846.610122][ T30] ? lock_release+0x4e2/0x6f0 [ 846.614851][ T30] ? schedule+0x298/0x350 [ 846.619286][ T30] ? __pfx_lock_release+0x10/0x10 [ 846.624361][ T30] ? __mutex_trylock_common+0x78/0x250 [ 846.629824][ T30] ? schedule+0x1fd/0x350 [ 846.634142][ T30] ? lock_acquire+0x2f/0xb0 [ 846.639369][ T30] ? schedule+0x1fd/0x350 [ 846.643699][ T30] schedule+0xe7/0x350 [ 846.649623][ T30] schedule_preempt_disabled+0x13/0x30 [ 846.655225][ T30] __mutex_lock+0x6bd/0xb10 [ 846.660029][ T30] ? nl80211_pre_doit+0xb4/0xb10 [ 846.664987][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 846.670087][ T30] ? __nla_parse+0x40/0x60 [ 846.674600][ T30] ? nl80211_pre_doit+0xb4/0xb10 [ 846.679573][ T30] nl80211_pre_doit+0xb4/0xb10 [ 846.684335][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 846.689827][ T30] genl_family_rcv_msg_doit+0x1be/0x2f0 [ 846.695396][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 846.701498][ T30] ? bpf_lsm_capable+0x9/0x10 [ 846.706176][ T30] ? security_capable+0x7e/0x260 [ 846.711138][ T30] ? ns_capable+0xd7/0x110 [ 846.715557][ T30] genl_rcv_msg+0x565/0x800 [ 846.720052][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 846.725162][ T30] ? __pfx___dev_queue_xmit+0x10/0x10 [ 846.730691][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 846.736104][ T30] ? __pfx_nl80211_register_mgmt+0x10/0x10 [ 846.742121][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 846.747625][ T30] netlink_rcv_skb+0x16b/0x440 [ 846.752554][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 846.757606][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 846.763007][ T30] ? down_read+0xc9/0x330 [ 846.767332][ T30] ? __pfx_down_read+0x10/0x10 [ 846.772094][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 846.777424][ T30] genl_rcv+0x28/0x40 [ 846.781420][ T30] netlink_unicast+0x53c/0x7f0 [ 846.786219][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 846.791505][ T30] netlink_sendmsg+0x8b8/0xd70 [ 846.796304][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 846.801608][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 846.806388][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 846.811870][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 846.817201][ T30] ? try_to_wake_up+0x158/0x1490 [ 846.822167][ T30] ___sys_sendmsg+0x135/0x1e0 [ 846.826857][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 846.832134][ T30] ? __pfx_lock_release+0x10/0x10 [ 846.838518][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 846.843745][ T30] ? __fget_files+0x206/0x3a0 [ 846.848462][ T30] __sys_sendmsg+0x16e/0x220 [ 846.853077][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 846.858174][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 846.863128][ T30] ? rcu_is_watching+0x12/0xc0 [ 846.867887][ T30] ? rcu_is_watching+0x12/0xc0 [ 846.873271][ T30] do_syscall_64+0xcd/0x250 [ 846.877802][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.883708][ T30] RIP: 0033:0x7fd82138cd29 [ 846.888115][ T30] RSP: 002b:00007fd822268038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 846.896567][ T30] RAX: ffffffffffffffda RBX: 00007fd8215a5fa0 RCX: 00007fd82138cd29 [ 846.904576][ T30] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000004 [ 846.912593][ T30] RBP: 00007fd82140e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 846.920656][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.928670][ T30] R13: 0000000000000000 R14: 00007fd8215a5fa0 R15: 00007fff65721438 [ 846.937402][ T30] [ 846.940480][ T30] INFO: task syz.6.3075:17578 blocked for more than 145 seconds. [ 846.948362][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 846.955694][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 846.964382][ T30] task:syz.6.3075 state:D stack:27728 pid:17578 tgid:17576 ppid:17217 flags:0x00000004 [ 846.974576][ T30] Call Trace: [ 846.977875][ T30] [ 846.980796][ T30] __schedule+0x1142/0x5b60 [ 846.985277][ T30] ? stack_depot_save_flags+0x28/0x9c0 [ 846.990790][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 846.998161][ T30] ? kasan_save_stack+0x42/0x60 [ 847.003017][ T30] ? kasan_save_stack+0x33/0x60 [ 847.007846][ T30] ? __pfx___schedule+0x10/0x10 [ 847.013091][ T30] ? lock_release+0x4e2/0x6f0 [ 847.017791][ T30] ? schedule+0x298/0x350 [ 847.022135][ T30] ? __pfx_lock_release+0x10/0x10 [ 847.027156][ T30] ? __mutex_trylock_common+0x78/0x250 [ 847.032735][ T30] ? schedule+0x1fd/0x350 [ 847.037101][ T30] ? lock_acquire+0x2f/0xb0 [ 847.041647][ T30] ? schedule+0x1fd/0x350 [ 847.045978][ T30] schedule+0xe7/0x350 [ 847.050042][ T30] schedule_preempt_disabled+0x13/0x30 [ 847.055695][ T30] __mutex_lock+0x6bd/0xb10 [ 847.060267][ T30] ? nl80211_pre_doit+0xb4/0xb10 [ 847.065268][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 847.070318][ T30] ? __nla_parse+0x40/0x60 [ 847.074848][ T30] ? nl80211_pre_doit+0xb4/0xb10 [ 847.079833][ T30] nl80211_pre_doit+0xb4/0xb10 [ 847.084673][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 847.090044][ T30] genl_family_rcv_msg_doit+0x1be/0x2f0 [ 847.095619][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 847.101703][ T30] ? bpf_lsm_capable+0x9/0x10 [ 847.106402][ T30] ? security_capable+0x7e/0x260 [ 847.111338][ T30] ? ns_capable+0xd7/0x110 [ 847.115786][ T30] genl_rcv_msg+0x565/0x800 [ 847.120291][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 847.125295][ T30] ? __pfx___dev_queue_xmit+0x10/0x10 [ 847.130716][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 847.136107][ T30] ? __pfx_nl80211_register_mgmt+0x10/0x10 [ 847.141942][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 847.147405][ T30] netlink_rcv_skb+0x16b/0x440 [ 847.152278][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 847.157313][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 847.162926][ T30] ? down_read+0xc9/0x330 [ 847.167444][ T30] ? __pfx_down_read+0x10/0x10 [ 847.172260][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 847.177540][ T30] genl_rcv+0x28/0x40 [ 847.181719][ T30] netlink_unicast+0x53c/0x7f0 [ 847.186494][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 847.191806][ T30] netlink_sendmsg+0x8b8/0xd70 [ 847.196567][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 847.201873][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 847.206636][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 847.212122][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 847.217399][ T30] ? try_to_wake_up+0x158/0x1490 [ 847.222322][ T30] ___sys_sendmsg+0x135/0x1e0 [ 847.227030][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 847.232230][ T30] ? __pfx_lock_release+0x10/0x10 [ 847.237261][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 847.242454][ T30] ? __fget_files+0x206/0x3a0 [ 847.247201][ T30] __sys_sendmsg+0x16e/0x220 [ 847.251895][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 847.257040][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 847.262254][ T30] ? rcu_is_watching+0x12/0xc0 [ 847.267060][ T30] ? rcu_is_watching+0x12/0xc0 [ 847.271840][ T30] do_syscall_64+0xcd/0x250 [ 847.276599][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.282511][ T30] RIP: 0033:0x7fd82138cd29 [ 847.287037][ T30] RSP: 002b:00007fd822247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 847.295453][ T30] RAX: ffffffffffffffda RBX: 00007fd8215a6080 RCX: 00007fd82138cd29 [ 847.303449][ T30] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000006 [ 847.311433][ T30] RBP: 00007fd82140e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 847.319432][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 847.327402][ T30] R13: 0000000000000000 R14: 00007fd8215a6080 R15: 00007fff65721438 [ 847.335401][ T30] [ 847.338427][ T30] INFO: task syz.4.3078:17587 blocked for more than 146 seconds. [ 847.346193][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 847.353503][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 847.362175][ T30] task:syz.4.3078 state:D stack:27728 pid:17587 tgid:17586 ppid:16601 flags:0x00000004 [ 847.372388][ T30] Call Trace: [ 847.375654][ T30] [ 847.378581][ T30] __schedule+0x1142/0x5b60 [ 847.383340][ T30] ? __pfx_lock_release+0x10/0x10 [ 847.388387][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 847.393646][ T30] ? __pfx___schedule+0x10/0x10 [ 847.398498][ T30] ? lock_release+0x4e2/0x6f0 [ 847.403180][ T30] ? schedule+0x298/0x350 [ 847.407550][ T30] ? __pfx_lock_release+0x10/0x10 [ 847.412571][ T30] ? __mutex_trylock_common+0x78/0x250 [ 847.418282][ T30] ? schedule+0x1fd/0x350 [ 847.422609][ T30] ? lock_acquire+0x2f/0xb0 [ 847.427175][ T30] ? schedule+0x1fd/0x350 [ 847.431523][ T30] schedule+0xe7/0x350 [ 847.435572][ T30] schedule_preempt_disabled+0x13/0x30 [ 847.441076][ T30] __mutex_lock+0x6bd/0xb10 [ 847.445588][ T30] ? __tun_chr_ioctl+0x4e7/0x4b80 [ 847.450636][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 847.455655][ T30] ? __pfx_lock_release+0x10/0x10 [ 847.460709][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 847.465904][ T30] ? __might_fault+0xe3/0x190 [ 847.470613][ T30] ? __might_fault+0xe3/0x190 [ 847.475279][ T30] ? __tun_chr_ioctl+0x4e7/0x4b80 [ 847.480322][ T30] ? rtnl_lock+0x9/0x20 [ 847.484483][ T30] __tun_chr_ioctl+0x4e7/0x4b80 [ 847.489327][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 847.494797][ T30] ? selinux_file_ioctl+0x180/0x270 [ 847.500013][ T30] ? selinux_file_ioctl+0xb4/0x270 [ 847.505339][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 847.510508][ T30] __x64_sys_ioctl+0x190/0x200 [ 847.515556][ T30] do_syscall_64+0xcd/0x250 [ 847.520101][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.526222][ T30] RIP: 0033:0x7f5cb0d8cd29 [ 847.530635][ T30] RSP: 002b:00007f5cb1b17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 847.539082][ T30] RAX: ffffffffffffffda RBX: 00007f5cb0fa5fa0 RCX: 00007f5cb0d8cd29 [ 847.547105][ T30] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000003 [ 847.555130][ T30] RBP: 00007f5cb0e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 847.563107][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 847.571270][ T30] R13: 0000000000000000 R14: 00007f5cb0fa5fa0 R15: 00007fff46ad5578 [ 847.579256][ T30] [ 847.582255][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 847.591599][ T30] INFO: task syz.0.3081:17595 blocked for more than 146 seconds. [ 847.599519][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 847.606926][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 847.615658][ T30] task:syz.0.3081 state:D stack:26912 pid:17595 tgid:17594 ppid:5836 flags:0x00004004 [ 847.625973][ T30] Call Trace: [ 847.629310][ T30] [ 847.632239][ T30] __schedule+0x1142/0x5b60 [ 847.636732][ T30] ? __wake_up_klogd.part.0+0x99/0xf0 [ 847.642173][ T30] ? rcu_is_watching+0x12/0xc0 [ 847.646952][ T30] ? __pfx___schedule+0x10/0x10 [ 847.652007][ T30] ? lock_release+0x4e2/0x6f0 [ 847.656691][ T30] ? schedule+0x298/0x350 [ 847.661044][ T30] ? __pfx_lock_release+0x10/0x10 [ 847.666068][ T30] ? __mutex_trylock_common+0x78/0x250 [ 847.671694][ T30] ? schedule+0x1fd/0x350 [ 847.676507][ T30] ? lock_acquire+0x2f/0xb0 [ 847.681005][ T30] ? schedule+0x1fd/0x350 [ 847.685485][ T30] schedule+0xe7/0x350 [ 847.689563][ T30] schedule_preempt_disabled+0x13/0x30 [ 847.695054][ T30] __mutex_lock+0x6bd/0xb10 [ 847.699569][ T30] ? rtnl_newlink+0x5d9/0x1d60 [ 847.704352][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 847.709367][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 847.715829][ T30] ? cap_capable+0x1cf/0x240 [ 847.720434][ T30] ? ns_capable+0xd7/0x110 [ 847.724854][ T30] ? rtnl_newlink+0x5d9/0x1d60 [ 847.729662][ T30] rtnl_newlink+0x5d9/0x1d60 [ 847.734268][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 847.739317][ T30] ? avc_has_perm_noaudit+0x143/0x3a0 [ 847.744687][ T30] ? cred_has_capability.isra.0+0x192/0x2f0 [ 847.750705][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 847.756952][ T30] ? lock_release+0x4e2/0x6f0 [ 847.761662][ T30] ? __dev_queue_xmit+0x89b/0x43e0 [ 847.766797][ T30] ? rcu_is_watching+0x12/0xc0 [ 847.772077][ T30] ? lock_release+0x4e2/0x6f0 [ 847.776781][ T30] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 847.782267][ T30] ? __pfx_lock_release+0x10/0x10 [ 847.787311][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 847.792532][ T30] ? bpf_lsm_capable+0x9/0x10 [ 847.797413][ T30] ? security_capable+0x7e/0x260 [ 847.802376][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 847.807488][ T30] ? lock_acquire+0x2f/0xb0 [ 847.812035][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 847.817188][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 847.822421][ T30] rtnetlink_rcv_msg+0x95b/0xea0 [ 847.827387][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 847.832922][ T30] netlink_rcv_skb+0x16b/0x440 [ 847.837692][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 847.843256][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 847.848558][ T30] ? lock_release+0x4e2/0x6f0 [ 847.853225][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 847.858831][ T30] netlink_unicast+0x53c/0x7f0 [ 847.863595][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 847.868934][ T30] netlink_sendmsg+0x8b8/0xd70 [ 847.873711][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 847.879001][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 847.883789][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 847.889286][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 847.894585][ T30] ? try_to_wake_up+0x158/0x1490 [ 847.899591][ T30] ___sys_sendmsg+0x135/0x1e0 [ 847.904270][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 847.909520][ T30] ? __pfx_lock_release+0x10/0x10 [ 847.914541][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 847.919756][ T30] ? __fget_files+0x206/0x3a0 [ 847.924430][ T30] __sys_sendmsg+0x16e/0x220 [ 847.929126][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 847.934373][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 847.939359][ T30] ? rcu_is_watching+0x12/0xc0 [ 847.944125][ T30] ? rcu_is_watching+0x12/0xc0 [ 847.948901][ T30] do_syscall_64+0xcd/0x250 [ 847.953445][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.959430][ T30] RIP: 0033:0x7faf97d8cd29 [ 847.963895][ T30] RSP: 002b:00007faf98b6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 847.972338][ T30] RAX: ffffffffffffffda RBX: 00007faf97fa5fa0 RCX: 00007faf97d8cd29 [ 847.980304][ T30] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 847.988364][ T30] RBP: 00007faf97e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 847.996375][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.004367][ T30] R13: 0000000000000000 R14: 00007faf97fa5fa0 R15: 00007ffcf593c218 [ 848.012330][ T30] [ 848.015370][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 848.024560][ T30] INFO: task syz-executor:17599 blocked for more than 146 seconds. [ 848.032465][ T30] Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 848.040002][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 848.048758][ T30] task:syz-executor state:D stack:27736 pid:17599 tgid:17599 ppid:1 flags:0x00000004 [ 848.059145][ T30] Call Trace: [ 848.062427][ T30] [ 848.065341][ T30] __schedule+0x1142/0x5b60 [ 848.069892][ T30] ? __page_table_check_zero+0x2d7/0x360 [ 848.075528][ T30] ? __pfx___schedule+0x10/0x10 [ 848.080429][ T30] ? lock_release+0x4e2/0x6f0 [ 848.085125][ T30] ? schedule+0x298/0x350 [ 848.089480][ T30] ? __pfx_lock_release+0x10/0x10 [ 848.094510][ T30] ? __mutex_trylock_common+0x78/0x250 [ 848.100013][ T30] ? schedule+0x1fd/0x350 [ 848.104357][ T30] ? lock_acquire+0x2f/0xb0 [ 848.108954][ T30] ? schedule+0x1fd/0x350 [ 848.113340][ T30] schedule+0xe7/0x350 [ 848.117453][ T30] schedule_preempt_disabled+0x13/0x30 [ 848.122991][ T30] __mutex_lock+0x6bd/0xb10 [ 848.127596][ T30] ? inet_rtm_newaddr+0x316/0x1560 [ 848.132741][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 848.137826][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 848.143615][ T30] ? inet_rtm_newaddr+0x316/0x1560 [ 848.148736][ T30] ? rtnl_lock+0x9/0x20 [ 848.153107][ T30] inet_rtm_newaddr+0x316/0x1560 [ 848.158060][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 848.164347][ T30] ? stack_trace_save+0x95/0xd0 [ 848.169238][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 848.174620][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 848.179731][ T30] ? lock_acquire+0x2f/0xb0 [ 848.184231][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 848.189442][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 848.194830][ T30] rtnetlink_rcv_msg+0x95b/0xea0 [ 848.199850][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 848.205306][ T30] ? __pfx_avc_has_perm+0x10/0x10 [ 848.210358][ T30] netlink_rcv_skb+0x16b/0x440 [ 848.215220][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 848.220700][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 848.225983][ T30] ? lock_release+0x4e2/0x6f0 [ 848.230689][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 848.235993][ T30] netlink_unicast+0x53c/0x7f0 [ 848.240848][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 848.246164][ T30] netlink_sendmsg+0x8b8/0xd70 [ 848.250947][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 848.256234][ T30] __sys_sendto+0x488/0x4f0 [ 848.260904][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 848.265987][ T30] ? rcu_is_watching+0x12/0xc0 [ 848.270903][ T30] ? rcu_is_watching+0x12/0xc0 [ 848.275826][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 848.280620][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 848.286729][ T30] do_syscall_64+0xcd/0x250 [ 848.291230][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.297230][ T30] RIP: 0033:0x7f6a2b58ebbc [ 848.301645][ T30] RSP: 002b:00007ffe7602edf0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 848.310077][ T30] RAX: ffffffffffffffda RBX: 00007f6a2c2d4620 RCX: 00007f6a2b58ebbc [ 848.318105][ T30] RDX: 0000000000000028 RSI: 00007f6a2c2d4670 RDI: 0000000000000003 [ 848.326178][ T30] RBP: 0000000000000000 R08: 00007ffe7602ee44 R09: 000000000000000c [ 848.334152][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 848.342345][ T30] R13: 0000000000000000 R14: 00007f6a2c2d4670 R15: 0000000000000000 [ 848.350343][ T30] [ 848.353353][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 848.362418][ T30] INFO: lockdep is turned off. [ 848.367248][ T30] NMI backtrace for cpu 0 [ 848.367259][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 848.367277][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 848.367287][ T30] Call Trace: [ 848.367292][ T30] [ 848.367299][ T30] dump_stack_lvl+0x116/0x1f0 [ 848.367324][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 848.367350][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 848.367369][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 848.367393][ T30] watchdog+0xf14/0x1240 [ 848.367414][ T30] ? __pfx_watchdog+0x10/0x10 [ 848.367426][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 848.367437][ T30] ? __kthread_parkme+0x148/0x220 [ 848.367451][ T30] ? __pfx_watchdog+0x10/0x10 [ 848.367463][ T30] kthread+0x3af/0x750 [ 848.367472][ T30] ? __pfx_kthread+0x10/0x10 [ 848.367482][ T30] ? __pfx_kthread+0x10/0x10 [ 848.367491][ T30] ret_from_fork+0x45/0x80 [ 848.367501][ T30] ? __pfx_kthread+0x10/0x10 [ 848.367510][ T30] ret_from_fork_asm+0x1a/0x30 [ 848.367527][ T30] [ 848.367530][ T30] Sending NMI from CPU 0 to CPUs 1: [ 848.479765][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 848.480798][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 848.495773][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 848.505908][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 848.515955][ T30] Call Trace: [ 848.519219][ T30] [ 848.522163][ T30] dump_stack_lvl+0x3d/0x1f0 [ 848.526883][ T30] panic+0x71d/0x800 [ 848.530827][ T30] ? __pfx_panic+0x10/0x10 [ 848.535326][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 848.540689][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 848.546658][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 848.552023][ T30] ? watchdog+0xd7e/0x1240 [ 848.556427][ T30] ? watchdog+0xd71/0x1240 [ 848.560855][ T30] watchdog+0xd8f/0x1240 [ 848.565095][ T30] ? __pfx_watchdog+0x10/0x10 [ 848.569767][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 848.574953][ T30] ? __kthread_parkme+0x148/0x220 [ 848.579971][ T30] ? __pfx_watchdog+0x10/0x10 [ 848.584659][ T30] kthread+0x3af/0x750 [ 848.588808][ T30] ? __pfx_kthread+0x10/0x10 [ 848.593386][ T30] ? __pfx_kthread+0x10/0x10 [ 848.597979][ T30] ret_from_fork+0x45/0x80 [ 848.602385][ T30] ? __pfx_kthread+0x10/0x10 [ 848.606965][ T30] ret_from_fork_asm+0x1a/0x30 [ 848.611838][ T30] [ 848.615066][ T30] Kernel Offset: disabled [ 848.619370][ T30] Rebooting in 86400 seconds..